IT Security News Daily Summary 2021-11-25

• New Linux CronRAT hides in cron jobs to evade detection in Magecart attacks

• Orange CEO Resigns After Court Conviction

• McAfee Enterprise Defender Blog | CISA Alert: MS Exchange & Fortinet Vulnerabilities

• Microsoft Defender for Endpoint laid low. Not by malware, but by another buggy Windows patch

• Product Releases Should Not Be Scary

• Swire Pacific Offshore Operations hit by Cl0p ransomware gang

• Apple To Use Own iPhone 5G Modem Design In 2023 – Report

• It’s about the survival of the fittest – CISOs must be brave enough to throw away their security playbook, or suffer the consequences

• Improving security for mobile devices: CISA issues guides

• Google’s Threat Horizons report: Will the straightforward approach get results?

• Sophisticated Tardigrade malware launches attacks on vaccine manufacturing infrastructure

• Ransomware threat to elders and youngsters falling for Instagram Cyber Scams

• Government PSTI Bill To Protect Consumer Tech From Cyber Threats

• New Twists on Gift-Card Scams Flourish on Black Friday

• Guard Your Brand From Counterfeiting With Web Scraping

• The Changing Face Of The COO Role

• Facial Recognition Privacy Concerns: Real vs. Imagined

• Ransomware Set To Break Records This Black Friday 2021

• Several GoDaddy brands impacted in recent data breach

• Apple’s Black Friday Event Begins in Australia: Free Gift Card With Select Products

• Black Friday: AirPods 2 Available for $99.99 on Amazon ($29 off)

• Most Inspiring Women in Cyber 2021: Dr. Jacqui Taylor, CEO of FlyingBinary

• New law will issue bans, fines for using default passwords on smart devices

• Tesla Demands Video Access For Full Self Driving Testers

• Black Friday: AirPods 3 Hit Record Low Price of $149.99 ($29 Off)

• Online Shoppers at Risk of Losing Over $53 Million

• GoDaddy Data Breach Update: Six WordPress Hosting Service Resellers Impacted

• Apple In Spotlight Over Employee NDAs

• Essential Microsoft EDR Tools

• Black Friday shopping? FBI says beware of these holiday scams and phishing threats

• JavaScript Loader RATDispenser Infects Windows PCs with RATs

• This chip flaw could have let malicious apps eavesdrop on Android phone users

• S3 Ep60: Exchange exploit, GoDaddy breach and cookies made public [Podcast]

• Iranian threat actors exploit MS MSHTML bug to steal Google and Instagram credentials

• A Microsoft MSHTML Exploited By Hackers

• 30% of Android Smartphones Impacted by Mediatek Vulnerabilities

• Microsoft Silently Rolls Out “Super Duper Secure Mode” With Latest Edge Browser Versions

• US Adds More Chinese Firms To Trade Blacklist

• Hackers Using Microsoft MSHTML Flaw to Spy on Targeted PCs with Malware

• This New Stealthy JavaScript Loader Infecting Computers with Malware

• UK and German Police Take Down 21 Jihadist Websites

• FBI: 2021 Holiday Season Fraud Could Exceed $53m

• Ukrainian Cops Bust Mobile Device Hacking Group

• Beware card skimmers this Black Friday

• Apple Sues NSO Group for Pegasus Spyware – Intego Mac Podcast Episode 215

• Women In Post-Pandemic Tech Industry | Avast

• UK.gov emits draft IoT and smartphone security law for Parliamentary scrutiny

• If You’re Not Using Antivirus Software, You’re Not Paying Attention

• Coalition Against Stalkerware Celebrates Two Years of Work to Keep Technology Safe for All

• A Guide to Protecting Your Privacy Online | Avast

• Everything You Need To Know About Cookies | Avast

• Utah Imaging Associates data breach impacts 583,643 patients

• Five Cloud Telephony Security Vulnerabilities That Can Threaten Your Business

• Do you know what your supply chain is and if it is secure?

• Warning — Hackers Exploiting New Windows Installer Zero-Day Exploit in the Wild

• FBI warns of crooks targeting online shoppers during the holiday season

• Google advises passwords are good, spear phishing is bad, and free clouds get attacked

• Get 1,000 hours of cybersecurity training for $21 this Black Friday

• Samsung offers Mobile Security protection as below

• Britain introduces IOT Device Security Legislation

• How to Protect Your Business Data with Cyber security

• From fragmented encryption chaos to uniform data protection

• Linux Malware Agent Attack eCommerce Sites & Stealing Payment Data

• VMware Warns of Newly Discovered Vulnerabilities in vSphere Web Client

• How likely are mid-market organizations to experience a breach by the end of 2021?

• Which technologies will be the most important in 2022?

• Huawei’s AppGallery riddled with malware-infected games

• Nearly 600,000 open cybersecurity-related jobs were listed over 12 months

• Tencent must get approval from Chinese regulators before publishing new apps and updates

• Teleion, a Minority-Owned Business, Awarded Best Place to Work in Washington State for Second Year

• (ISC)² Chapter Creates Space for Entry-Level Members and Professional Connections

• Defense contractors are highly susceptible to ransomware attacks

• Companies ditching VPNs for zero trust architectures to secure hybrid workplaces

• Report: Cybersecurity recruitment, training misses the mark

• Avoiding the shopping blues: How to shop online safely this holiday season

• US bans Chinese firms – including one linked to HPE’s China JV – for feeding tech to Beijing’s military

• Okera for Snowflake provides data privacy and security policies for Snowflake customers

• Waterfall Security Solutions partners with HTSS to protect a European power generation customer

• FBI warns of possible holiday hacking risks

• Scammers impersonate Instagram users in crypto scheme

• Microland collaborates with Securonix to deliver managed SOC solutions for organizations

• Crypto.com achieves SOC 2 certification to strengthen its security and privacy standards

• IT Security News Daily Summary 2021-11-24

• Cloud security shifting to ‘dev’ not ‘ops,’ Snyk says

• How Threat Actors Get Into OT Systems

• Medical response app for mass casualty incidents

• My email has been hacked! What should I do next?

• GitHub will require 2FA for some NPM registry users

• Scientists test GPS-free navigation

• DARPA seeks ‘top chef’ for 3D printed food

• How Threat Actors Get into OT Systems

• VMware addresses File Read and SSRF flaws in vCenter Server

• Shazam Updated With Ability to Find More Songs by Listening Longer

• MacRumors Giveaway: Win a ‘Jetpack’ Magnetic Power Bank for iPhone 13 From Ampere

• Apple has a new work-from-home policy, but it’s still not what employees want

• Canadian Teen Arrested in Crypto Theft Worth $36.5 Million

• Google says it’s improving fingerprint scanner performance with a Pixel 6 update

• Iranian Hackers Are Going After US Critical Infrastructure

• From students to masters: HITB+CyberWeek 2021 showcases next generation of cyber security talent in the UAE

• YouTube Live Crypto Scams Made Nearly $9m in October

• Joke Hitman Website Catches Plotting Michigander

• Marylander Found Guilty of Skiptracing

• Connolly introduces bill to ‘rebuild’ OPM

• US government securities watchdog spoofed by investment scammers – don’t fall for it!

• In Appreciation: Dark Reading’s Tim Wilson

• Apple Customers in Turkey Being Turned Away at Retail Stores as Halt on Product Sales Continues

• Tolkien Estate Blocks ‘JRR Token’ Cryptocurrency

• black hat hacker

• Biden to nominate Shalanda Young as OMB director

• CISA Releases Capacity Enhancement Guides to Enhance Mobile Device Cybersecurity for Consumers and Organizations

• ENISA: ADVANCING SOFTWARE SECURITY IN THE EU

• 9.3M+ Androids Running ‘Malicious’ Games from Huawei AppGallery

• VMware Releases Security Updates

• CISA Releases Capacity Enhancement Guides to Enhance Mobile Device Cybersecurity for Consumers and Organizations

• Tim Cook Discusses Apple’s New Do-It-Yourself Repair Program and More

• Apple Shares ‘Saving Simon’ Holidays Ad Shot on iPhone 13 Pro

• Twitter Investigating Bug Causing Unexpected Logouts on iOS 15

• About 10 million Android devices found infected with Cynos malware

• Proposed Bill Would Require Public Disclosure of Ransomware Payments

• “Free Steam games” videos promise much, deliver malware

• VMware Releases Security Updates

• Apple, Amazon Fined $225m By Italian Watchdog Over Beat Headphones

• DBS Bank blames ‘access control servers’ for two-day service disruption

• GoDaddy Breach Widens to Include Reseller Subsidiaries

• UK Cyber Firm Faces Investors Over Stock Turmoil

• UK Introduces New Cybersecurity Legislation for IoT Devices

• China Trying To Export Its Great Firewall And Governance Model

• Best Early Black Friday Deals on Apple Watch, AirPods Pro, MacBook Pro, More

• The Dawn of True IoT Security

• (ISC)² Cybersecurity Entry-Level Certification Exam Topics Announced

• How your business can benefit from Cybersecurity automation

• What is DevOps and DevSecOps?

• How to avoid Video Conferencing Security Risks

• Congratulations to Our 2021 Partners of the Year

• Ignite 2021 – It’s a Wrap!

• When people become data records, ‘low-resolution’ citizens struggle

• Apple’s NSO Group Lawsuit Amps Up Pressure on Pegasus Spyware-Maker

• Apple needs to un-Mac-ify security and privacy in Safari

• IoT Security Company Shield-IoT Raises $7.4 Million

• VMware Patches File Read, SSRF Vulnerabilities in vCenter Server

• A vulnerable honeypot exposed online can be compromised in 24 hours

• Veeam Ransomware Protection with Red Hat Enterprise Linux as the Immutable Repository

• ‘Printjack’ Printer Attacks Pose a Serious Threat, Researchers Warn

• Elon Musk Realises $1bn, After Another Tesla Share Sale

• When Will Security Frameworks Catch Up With the New Cybersecurity Normal?

• Apple Sues NSO Group

• Why Do Governments Reveal Cyber Intrusions?

• A New Microsoft Windows Installer Zero-day Is Exploited

• Max Schrems hits Irish Data Protection Commissioner with corruption complaint

• Security Expert On Apple Suing NSO Group

• Most Inspiring Women in Cyber 2021: Regina Bluman, Security Analyst at Algolia

• Beware of holiday hackers: FBI warns against holiday cyberattacks

• Windows Installer vulnerability becomes actively exploited zero-day

• Hundreds Of Google Staff Protest Vaccine Mandate

• Attackers Actively Target Windows Installer Zero-Day

• Hospital Ransomware Attacks Go Beyond Health Care Data

• Shift Left Security: The Magic Elixir for Securing Cloud-Native Apps

• 3 Key Questions for CISOs on the Wave of Historic Industrial Cybersecurity Legislation

• Two Nigerians Sentenced to Prison in U.S. for Role in BEC Scams

• How Has Covid-19 Impacted Our Online Behaviour And Security?

• Managing Dead Letter Messages: Three Best Practices to Effectively Capture, Investigate and Redrive Failed Messages

• Consumers of Brand-name Companies Targeted in Phishing Attacks, FBI Alerts

• How to prevent sideloading attacks in Windows and Office 365

• Managing Dead Letter Messages: Three Best Practices to Effectively Capture, Investigate and Redrive Failed Messages

• What is facial recognition?

• Malicious JavaScript Loader is a Multi-RAT Dispenser

• Most US Healthcare Apps Susceptible to Cyber-Attack

• CISA Issues Holiday Ransomware Message

• CISA, FBI Warn of Potential Critical Infrastructure Attacks on Holidays

• GoDaddy Says Several Brands Hit by Recent WordPress Hosting Breach

• Eavesdropping Bugs in MediaTek Chips Affect 37% of All Smartphones and IoT Globally

• Meta Delays Plans To Rollout End-to-end Encryption

• How to prevent sideloading attacks in Windows and Office 365

• Samsung To Build $17bn Chip Factory In Texas, Amid Global Shortage

• Beware!! BrazKing Android Malware Upgraded & Attack Banks

• What is facial recognition?

• Hit by ransomware? Make sure you don’t make this first obvious mistake

• Researcher Awarded $10,000 for Google Cloud Platform Vulnerability

• CISA, FBI Warn of Potential Critical Infrastructure Attacks on Holidays

• Eavesdropping Bugs in MediaTek Chips Affect 37% of All Smartphones and IoT Globally

• Mozilla Ending Support for Firefox Lockwise Password Manager in December

• Malicious Actors Were Able to Compromise Exposed Services in 24 Hours

• Data Stealing Malware Impacts More Than 9M Android Devices

• Samsung To Build $17bn Chip Factory In Texas, Amid Global Shortage

• Beware!! BrazKing Android Malware Upgraded & Attack Banks

• Hit by ransomware? Make sure you don’t make this first obvious mistake

• CIS Control 12: Network Infrastructure Management

• Researcher Awarded $10,000 for Google Cloud Platform Vulnerability

• After failed fix, researcher releases exploit for Windows EoP flaw (CVE-2021-41379)

• Malicious Actors Were Able to Compromise Exposed Services in 24 Hours

• Data Stealing Malware Impacts More Than 9M Android Devices

• Password usage analysis of brute force attacks on honeypot servers

• Seeing the Future: How to Use Predictive Analytics in Your Business

• Password usage analysis of brute force attacks on honeypot servers

• Check Point Research discover vulnerabilities in smartphones chips embedded in 37% of smartphones around the world

• CIS Control 12: Network Infrastructure Management

• Standing Up to Cyber-Bullies Earns Man Award Nomination

• Multiple Bugs Enable Eavesdropping on 37% of Android Phones

• Germany, the UK and Europol target violent jihadist websites

• How is Europol keeping online spaces safe?

• After failed fix, researcher releases exploit for Windows EoP flaw (CVE-2021-41379)

• How a malicious Android app could covertly turn the DSP in your MediaTek-powered phone into an eavesdropping bug

• Apple Sues NSO To ‘Curb Abuse Of State-Sponsored Spyware’

• footprinting

• Check Point Research discover vulnerabilities in smartphones chips embedded in 37% of smartphones around the world

• How a malicious Android app could covertly turn the DSP in your MediaTek-powered phone into an eavesdropping bug

• Standing Up to Cyber-Bullies Earns Man Award Nomination

• Multiple Bugs Enable Eavesdropping on 37% of Android Phones

• Industrial Cybersecurity Firm Applied Risk Acquired by DNV

• Apple Sues “State-Sponsored” Spyware Firm NSO Group

• Apple sues NSO Group for abusing state-sponsored Pegasus spyware

• Industrial Cybersecurity Firm Applied Risk Acquired by DNV

• Cross-border access to electronic evidence: update and impact of the pandemic on data requests

• Energy efficiency funds fraudsters deactivated in Italy

• Europol, Germany and the UK target violent jihadist websites

• From Chess Board to the Silver Screen | Avast

• APT C-23 Hackers Using New Android Spyware Variant to Target Middle East Users

• Build your own Android security product

• 7 Scams Targeting Holiday Spenders In 2021 | Avast

• Over 9 Million Android Phones Running Malware Apps from Huawei’s AppGallery

• Webinar and eBook: The Dark Side of EDR. Are You Prepared?

• Expert discloses details of flaws in Oracle VirtualBox

• 7 Scams Targeting Holiday Spenders In 2021 | Avast

• Over 9 Million Android Phones Running Malware Apps from Huawei’s AppGallery

• Webinar and eBook: The Dark Side of EDR. Are You Prepared?

• Expert discloses details of flaws in Oracle VirtualBox

• WA Auditor-General drags local governments over horrendous cyber risk management

• Yes, ransomware is your number one security nightmare. But here’s how to sleep easy

• Ransomware attacks surge, but victims are recovering quickly

• Securing open-source code supply chains may help prevent the next big cyberattack

• Cyber Attack on Bureau Veritas

• Court case against NSO Group Pegasus Malware by Apple Inc

• Facebook to Delete the Faceprints of Over 1 billion People

• CISOs missing major holidays due to work demands

• Ransomware attacks surge, still victims are recovering quickly

• Cyber Attack on Bureau Veritas

• Court case against NSO Group Pegasus Malware by Apple Inc

• CISOs missing major holidays due to work demands

• Apple Sues Israel’s NSO Group for Spying on iPhone Users With Pegasus Spyware

• 10 trends likely to shape the IT industry, its workforce and its business models in 2022

• Products used by children are not nearly as privacy-protecting as they should be

• Mozilla ends support for Firefox Lockwise password management app, strands iOS users

• Tips for Having a Cyber Safe Holiday Season

• TSMC to Begin Producing Apple-Designed 5G Modems for iPhones in 2023

• Apple Outlines How It Will Notify Users Who Have Been Targeted by State-Sponsored Spyware Attacks

• How are organizations protecting their critical IT assets?

• Code42’s exfiltration detector alerts when Salesforce data moves to an untrusted device

• Siren 12 delivers global search and visual graph creation capabilities for investigators

• Boxcryptor protects business data in Microsoft Teams with end-to-end encryption features

• YugabyteDB 2.11 meets developer demand for comprehensive PostgreSQL compatibility

• China trying to export its Great Firewall and governance model

• Deeper Connect Pico prevents malicious tracking and restores safety online

• FBI, CISA urge organizations to be on guard for attacks during holidays

• Exclusive Networks partners with Infinipoint to extend zero trust security to device identity

• Baffle Data Privacy Cloud supports privacy preserving analytics on Amazon Redshift

• Emily Murphy joins GMU

• SecOps’ need for traffic data drives NetSecOps collaboration

• Cyber Defense Labs promotes Jason Lobell to CTO

Generated on 2021-11-25 23:55:21.108605