IT Security News Daily Summary 2021-12-03

• Report: Ransomware victims increase security budgets due to surge in attacks

• Who Is the Network Access Broker ‘Babam’?

• Utility biz Delta-Montrose Electric Association loses billing capability and two decades of records after cyber attack

• Analyzing The Security Challenge of Hybrid and Remote Working Models

• Feds charge two men with claiming ownership of others’ songs to steal YouTube royalty payments

• How AI and ML can thwart a cybersecurity threat no one talks about

• White House presses for improved agency-IG cooperation

• Why self-sovereign identities are so valuable to residents and agencies

• Pegasus Maker Probes Reports its Spyware Targeted US Diplomats

• Ex Ubiquiti Developer Arrested for Data Theft

• NSO Group Spyware Used to Breach US State Dept. Phones

• One-Third of Black Friday Shoppers Were Bots, Fake Users

• NSO Group spyware used to compromise iPhones of 9 US State Dept officials

• Top Phishing Lures to Look Out for This Holiday Season

• IGI Cybersecurity Introduces CISO Team-as-a-Service

• County limits workers’ comp claims with motion capture tech

• Pandemic-Influenced Car Shopping: Just Use the Manufacturer API

• How Criminals Are Using Synthetic Identities for Fraud

• Friday Squid Blogging: Squeeze the Squid

• Apple Executives Talk Watch Bands: Emphasis on Backward Compatibility, Design Philosophy, and More

• Bill proposes suspension of instant payments in Brazilian state as crime surges

• Omicron Phishing Scam Already Spotted in UK

• Hundreds of new vulnerabilities found in SOHO routers

• Protecting your critical infrastructure is one thing…protecting your backups is the same thing

• Top 12 AI and machine learning announcements at AWS re:Invent 2021

• Is your state ready to handle the influx of federal funds for expanding broadband?

• Researchers Find 226 Vulnerabilities in Nine Wi-Fi Routers

• UK Government Fined Over Honors List Data Breach

• Review: Belkin’s Latest 3-in-1 Charger is Ideal for Apple Watch Series 7 Owners

• Hackers steal $120m from Badger Defi and $30m from MonoX

• The top 12 security announcements at AWS re:Invent 2021

• Iranians Charged for Cryptojacking After U.S. Firm Gets $760,000 Cloud Bill

• Mozilla patches critical “BigSig” cryptographic bug: Here’s how to track it down and fix it

• US Issues Cybersecurity Directive for Airlines and Railroads

• Logiq.ai Tackles Observability Problem With LogFlow

• What Are Your Top Cloud Security Challenges? Threatpost Poll

• How well do you know your APIs? Not well enough, says Cisco

• Netgear router flaws exploitable with authentication … like the default creds on Netgear’s website

• What’s next for CMMC

• Apple Reportedly Notified Some U.S. State Department Employees They May Have Been Targeted by NSO Group Spyware

• MacRumors Giveaway: Win a Leather Apple Watch Band From Southern Straps

• Cybersecurity for Idiots

• Emotet’s back and it isn’t wasting any time

• What the Internet Bug Bounty Teaches About Open-Source Software Security

• Ransomware Attack On Planned Parenthood Steals Data Of 400k Patients

• Hackers Steal $119 Million From Web3 Crypto Project With Old School Attack

• Researcher Found Way To Brute Force Verizon Customer PINs

• US Rejects Calls For Regulating Or Banning Killer Robots

• AWS re:Invent: News Roundup From 2021 Conference

• Relevant and Extended Detection with SecureX

• Attacker unmasked by VPN flubs charged with Ubiquiti hack

• Covid Omicron variant leads to Phishing Cyber Attacks

• AWS, CrowdStrike, Presidio Join Hands To Develop Ransomware Mitigation Kit

• CISA Informs Organizations About Vulnerabilities in Hitachi Energy Products

• USB Devices the Common Denominator in All Attacks on Air-Gapped Systems

• KAX17 threat actor is attempting to deanonymize Tor users running thousands of rogue relays

• Crooks are selling access to hacked networks. Ransomware gangs are their biggest customers

• IoT security needs zero trust to face new botnet trends

• Deals: Take 20% Off Brydge iPad Keyboards This Week

• Google’s ‘Pixel Watch’ Planned for 2022 Launch to Compete With Apple Watch

• Apple AirTag Linked to Increasing Number of Car Thefts, Canadian Police Report

• An Insider’s Account of Disclosing Vulnerabilities

• Home routers riddled with vulnerabilities

• Phishing Actors Are Already Exploiting the Omicron COVID-19 Variant

• Bangladesh, South African and Iraqi Government sites have been found to be hosting web shells

• End-to-end Testing: How a Modular Testing Model Increases Efficiency and Scalability

• How to avoid being a hacker’s next target: Don’t overshare information on business social media

• Facebook, Twitter Take Down More State-Linked Accounts

• Technical Problem or Cyber Crime? How to Tell the Difference

• Researchers Detail How Pakistani Hackers Targeting Indian and Afghan Governments

• What Is Privilege Escalation? Definition, Types and Examples

• There’s been a big jump in crooks selling access to hacked networks. Ransomware gangs are their best customers

• Threat Group Takes Aim Again at Cloud Platform Provider Zoho

• Cisco Secure Firewall named Best Next Generation Firewall in SE Labs 2021 Annual Report

• Apple Fitness+ to Feature Prince William on Time to Walk and Apple Music 1

• Russia Seeks To Fine Google, Meta On Annual Turnover

• Holiday Season Online Privacy Recipe | Avast

• It’s a truly cruel scam. Here’s the dramatic way Google is trying to stop it

• Expert comment: CS Energy ransomware attack

• 17 Malware Frameworks Target Air-Gapped Systems for Espionage

• Threat actors stole $120 M in crypto from BadgerDAO DeFi platform

• Testing Faraday Cages

• The In-house Zoho ServiceDesk Exploit Used to Drop Webshells

• FTC Sues Nvidia To Block ARM Acquisition

• Printing Shellz – New Vulnerabilities That Affects 150 Different Multifunction Printers

• TSA Requires Rail and Airports to Strengthen Cybersecurity

• October 2021 Cyber Attacks Statistics

• Facebook Expands Advanced Security Program to More Countries

• Twitter and Meta Tackle Anti-Vaxxers and Chinese Disinformation

• Determined APT is exploiting ManageEngine ServiceDesk Plus vulnerability (CVE-2021-44077)

• Data Security: Defending Against the Cache Poisoning Vulnerability

• FCW Insider: December 3, 2021

• Misconfigured Database Leaks Info on 150K E-commerce Buyers

• New Malvertising Campaigns Spreading Backdoors, Malicious Chrome Extensions

• Computing Security Awards 2021: Heimdal™ Wins AI and Machine Learning-Based Security of the Year

• The Business of the Metaverse

• This password-stealing and keylogging malware is being spread through fake software downloads

• Omicron Phishing Campaign Hits User Inboxes

• Intel Eager to Avoid Clashes With Apple As It Looks to Secure TSMC’s 3nm Chip Supply

• Cyber-Attack on Planned Parenthood

• Hiding in plain sight: make sure Europe’s most wanted criminals do not escape their past

• Why Everyone Needs to Take the Latest CISA Directive Seriously

• Watch out for Omicron COVID-19-themed phishing messages!

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Poll Shows Most Shoppers Don’t Trust E-Commerce Sites | Avast

• New Payment Data Sealing Malware Hides in Nginx Process on Linux Servers

• New infosec products of the week: December 3, 2021

• Major trends in online identity verification for 2022

• US Military families targeted by Phishing Cyber Attacks

• BlackByte Ransomware found exploiting ProxyShell vulnerabilities

• This Week in Security News – December 3, 2021

• Tor2Mine cryptominer has evolved: Just patching and cleaning the system won’t help

• Twitter removes another 3,000 state-backed accounts linked to six countries

• Phishing kits’ favorite brand? Amazon

• CISA Warns of Actively Exploited Critical Zoho ManageEngine ServiceDesk Vulnerability

• Top tech trends for 2022

• 0Patch has a patch for Windows “InstallerFileTakeOver” 0-day vulnerability, Microsoft has none

• Enterprises are embracing the multicloud, turning to providers for strategy

• SMS firewall revenue to reach $4.1 billion in 2026

• How to Prepare for CISSP Exam Day

• A Look Back at Privacy in Q3 2021: Summertime and the Livin’ Was Easy

• Federal government refreshes digital transformation strategy and expands cyber hub trial

• Ondato’s AI-enabled ID forensics system detects document alterations

• Trifacta delivers scalable data transformations with Pushdown Optimization on Snowflake

• Trump’s Intelligence Briefings: Better Than Some Feared, Worse Than Many Hoped

• Qumu partners with GovSmart to modernize communications processes for government agencies

• Kudelski Security integrates with Microsoft Defender for Endpoint to proactively hunt for new threats

• CISA and FBI Release Alert on Active Exploitation of CVE-2021-44077 in Zoho ManageEngine ServiceDesk Plus

• Karamba Security raises $10M to accelerate development of its product roadmap

• Device Authority raises $2.9M to accelerate revenue growth

• CDW acquires Sirius Computer Solutions to enhance services and solutions capabilities

• Colorado energy company loses 25 years of data after cyberattack, still rebuilding network

• Launching ESET Research Podcast: A peek behind the scenes of ESET discoveries

• A Software Bug Let Hackers Drain $31M From a Crypto Service

• CISA and FBI Release Alert on Active Exploitation of CVE-2021-44077 in Zoho ManageEngine ServiceDesk Plus

• Eclypsium appoints Arif Kareem to Board of Advisors and Jarrod Bogue as CRO

• Sierra Wireless names Russell Jones as New Chair

• Nate Skinner joins Onfido as CMO

• Livestreamed Hearing Monday: EFF Urges Appeals Court to Allow Public Access to Documents in Patent Troll Litigation

• Nation-State Attackers Use RTF Injection to Easily Spread Malware

• Darktrace Reports 30% More Ransomware Attacks Targeting Organizations During the Holiday Period

• Ransomware, Carding, and Initial Access Brokers: Group-IB Presents Report on Trending Crimes

• Neustar Security Services spins out to combat the next generation of challenges and threats

• Manish Bharti joins CoreStack as CRO

• Amazon Web Services to beef up container security with new threat detection

• DHS: Cybersecurity coordinators and vulnerability assessments mandatory for rail companies

• BadgerDAO DeFi defunded as hackers apparently nab millions in crypto tokens

• IT Security News Daily Summary 2021-12-02

• re:Invent recap: Amazon showcases cloud computing innovation

• DHS releases new rules for rail companies, forces CISA incident reporting in 24 hours and mandates cybersecurity position

• Security Analytics Startup Panther Labs Scores $120M Investment

• Former Ubiquiti engineer arrested for inside threat attack

• Phishing Scam Targets Military Families

• Cyber-attack on Planned Parenthood

• Top 5 Reasons to Get ‘SASE’ With Security

• Twofish

• EV station map shows charging gaps

• Meta expanding Facebook security program for government officials, journalists, activists

• U.S. Federal Trade Commission Sues to Block Nvidia’s Planned Arm Acquisition

• Trump’s Intelligence Briefings: Better than Some Feared, Worse than Many Hoped

• Amazon Web Services security: 5 issues startups aim to fix

• Insider threats: How trustworthy are your employees?

• Emotet being spread via malicious Windows App Installer packages

• 2021-11-24 – Gigi campaign pushes BazarLoader, leads to IcedID

• 2021-11-29 – Emotet epoch 5 infection sent from email on Friday 2021-11-26

• ‘Double-Extortion’ Ransomware Damage Skyrockets 935%

• Planned Parenthood LA Breach Compromises 400,000 Patients’ Data

• CISA adds Zoho, Apache, Qualcomm, Mikrotik flaws to the list of actively exploited issues

• The cost of data security – it’s not just about the numbers

• Exploring Container Security: A Storage Vulnerability Deep Dive

• Twitter Expands Its Information Policy To Avoid Media Sharing Without a Users Consent

• Apple Loses Engineering Director From Car Project

• Could faster buying undermine electronic warfare prep?

• Creating greater opportunity for women in digital services

• ‘Double-Extortion’ Ransomware Data Leaks Skyrocket 935%

• Snort 3 Anywhere

• Planned Parenthood Breach Opens Patients to Follow-On Attacks

• Holiday Season Fraud Fear Higher this Year

• Fortinet vs Palo Alto Networks: Top NGFWs Compared

• macOS Monterey: 40 Tips, Tricks, and Features You Might Have Missed

• White House instructs agencies on contracting equity goals

• America is investing billions in broadband. Let’s spend it wisely.

• Planned Parenthood LA: Ransomware attack leaks health data of 400,000 patients

• S3 Ep61: Call scammers, cloud insecurity, and facial recognition creepiness [Podcast]

• CISA Adds Zoho, Qualcomm, Mikrotik Flaws to ‘Must-Patch’ List

• New Yanluowang ransomware mounting targeted attacks in US

• Amazon’s EC2 Service to Offer M1 Mac Mini Instances for Faster Build Times

• Tears of Joy Remained Most Used Emoji in 2021

• Apple Seeds Fourth Beta of tvOS 15.2 to Developers

• Apple Seeds Fourth Beta of watchOS 8.3 to Developers

• Apple Seeds Fourth Betas of iOS 15.2 and iPadOS 15.2 to Developers

• Structured threat hunting: One way Microsoft Threat Experts prioritizes customer defense

• Planned Parenthood data breach: Hackers steal 400,000 patients’ data

• Shopping online? FBI says beware of these holiday scams and phishing threats

• AT&T Takes Steps to Mitigate Botnet Found Inside Its Network

• Key Characteristics of Malicious Domains: Report

• NSA and CISA Release Part III of Guidance on Securing 5G Cloud Infrastructures

• Russian internet watchdog Roskomnadzor bans six more VPN services

• X-Force Threat Intelligence: Monthly Malware Roundup

• IoT devices must “protect consumers from cyberharm”, says UK government

• Facebook Will Force More At-Risk Accounts to Use Two-Factor

• NSA and CISA Release Part III of Guidance on Securing 5G Cloud Infrastructures

• A White House Inspector General for Accountability

• The Chatter Podcast: America’s Fight to Defeat AIDS in Africa, with Emily Bass

• Behind the unprecedented effort to protect customers against the NOBELIUM nation-state attack

• Printing Shellz Vulnerabilities Affected 150+ HP Printers

• Former Google Scientist Timnit Gebru Founds AI Institute

• Report: 63% of C-suite execs do not have an incident response plan

• Privacy Dynamics debuts app that lets developers rapidly anonymize data

• FluBot malware warning after 70,000 attacks launched over SMS

• Ubiquiti Developer Charged With Extortion, Causing 2020 “Breach”

• When Will a Cloud Infrastructure Heavyweight Launch a SASE?

• USDA finalizes more expansive telework, remote work policies

• Webinar Today: CISO Fireside Chat With Steve Katz, World’s First Known CISO

• 7 arrested in Malta on suspicion of illegal money transfers

• NginRAT – A stealth malware targets e-store hiding on Nginx servers

• OpenShift Security Hardening for the healthcare industry

• Macs With ‘M3’ Chips Expected to Use TSMC’s 3nm Chip Technology With Test Production Reportedly Underway

• Edgescan appoints Alon Verdnikov as CRO in a push to expand its presence in North America

• SideCopy APT: Connecting lures to victims, payloads to infrastructure

• Apple Shares Dip Amid Slowing iPhone 13 Demand – Report

• Lawmakers Are Considering Cracking Down On Facebook As Whistleblower Prepares To Testify

• Is KAX17 Performing De-Anonymization Attacks Against Tor Users?

• Really Stupid “Smart Contract” Bug Let Hackers Steal $31 Million In Digital Coin

• Facebook To Mandate High Security Program For Politicians, Journalists

• Stealthy WIRTE Gang Targets Middle Eastern Governments

• InternetLab’s 2021 “Who Defends Your Data Brazil” Report Shows Improvement in Brazilian ISPs Privacy Practices, But Gaps Remain

• US fears shadow cyber attacks on its Satellites by Russia n China

• Beware of FluBot Android Malware That Targets Android Users Via SMS

• “Trusted Partner” in Cybersecurity: Cliché or Necessity?

• Mozilla Releases Security Updates for Network Security Services

• Stop Threats. Save Time. Reduce Costs! The Real-Life Impact of Intelligence

• Deals: Amazon Has AirPods Max at the Best Price This Year ($429 in Two Colors)

• Former Ubiquiti Employee Charged with Data Theft

• What We’ve Learnt From Home Learning During Lockdown

• Why Actionable Logs Require Sufficient History

• Breaking the Black Mirror and Other Lessons From Day of Shecurity

• Mozilla Releases Security Updates for Network Security Services

• Smart Contract Bug Results in $31 Million Loss

• Uber Partners With WhatsApp For Ride Booking In India

• Blockchain Security Provider CertiK Raises $80 Million

• Karamba Security Raises $10 Million to Protect Connected Devices

• Meta Expands Facebook Protect Program to Activists, Journalists, Government Officials

• InternetLab’s 2021 “Who Defends Your Data Brazil” Report Shows Improvement in Brazilian Internet/Telco Providers Privacy Practices, But Gaps Remain

• Why the Future Needs Passwordless Authentication

• Facebook’s Meta says bad actors are changing tactics as it takes down six more groups

• Data Hacked For 400,000 LA Patients

• Bogus Android App Steals Banking Credentials from Malaysian Individuals

• How the Great Supply Chain Disruption Affects IT Security

• SOAR Into More Integrated Cybersecurity

• Experts warn of attacks exploiting CVE-2021-40438 flaw in Apache HTTP Server

• All Your Go Binaries are Belong to Us

• Stopgap funding delays military SATCOM transfer to Space Force

• CISA draws plans for more secure federal civilian email

• Biden taps former Air Force weapons buyer to lead DOD acquisition

• Hackers are turning to this simple technique to install their malware on PCs

• Critical Flaw in NSS Cryptographic Library Affects Several Popular Applications

• Reduce the Risk of DNS Spoofing: Find and Fix DNSSEC Misconfigurations

• Data Consistency Storage in the Cloud

• What Will AI Bring to the Cybersecurity Space in 2022

• Karamba Security raises $10M to protect IoT devices, connected cars

• Russian Administrator of Bulletproof Hosting Sentenced to Prison in U.S.

• Cybersecurity Expert Reaction On UK’s Financial Regulator Scraps 90-day Authentication Rule

• IKEA Suffering Ongoing “Reply-Chain” Email Attack

• Vectra Research: 89% Of Security Leaders Think Traditional Security Approaches Are Failing In The Face Of Modern Threats

• Former Employee Accused of Being Behind Ubiquiti Hack

• Data Hacked for 400,000 Planned Parenthood LA Patients

• Microsoft Slammed For ‘Buy Now, Pay Later’ Prompt In Edge Browser

• Researches Detail 17 Malicious Frameworks Used to Attack Air-Gapped Networks

• Fake Adobe Windows App Installer Packages Are Distributing the Emotet Malware

• Planned Parenthood LA Impacted by Ransomware Attack that Led to Data Breach

• Police Arrest 1800 in Major Money Laundering Crackdown

• Ransomware attack leads to data leak of over 400,000 patients

• HP to fix vulnerabilities in its 150 product models by this year end

• Android Banking Trojans Garnered 300K Downloads By Faking Apps

• Jack Dorsey’s Square Changes Name To Block

• Beware of FluBot Android Malware that Targets Android Users Via SMS

• Check Point Software named a Major Player in Modern Endpoint Security for Enterprise in the latest IDC MarketScape Report

• FCW Insider: December 2, 2021

• Russian Bulletproof Hosting Kingpin Gets Five Years

• Quick Hits

• Acra: Open-source database protection with field-level encryption and intrusion detection

• Double Extortion Ransomware Victims Soar 935%

• Europol arrested 1800 money mules as part of an anti-money-laundering operation

• Tracking a P2P network related to TA505

• What Is Virtual Network Computing (VNC)

• New UK product security law won’t be undercut by rogue traders upping and vanishing, government boasts

• The Problem with Default Passwords – Intego Mac Podcast Episode 216

• Do you know what your supply chain is and if it is secure?

• Apple Reveals the Most Downloaded iOS Apps and Games of 2021

• European Cybercrime Centre confident it’s kicked credit card crims – again

• Researchers Warn Iranian Users of Widespread SMS Phishing Campaigns

• How To Protect A New Technology Purchase | Avast

• Australia to appoint its first National Data Commissioner

• Mozilla properly fuzzed NSS and still ended up with a simple memory corruption hole

• The importance of vulnerability management for your organization

• How phishing kits are enabling a new legion of pro phishers

• Russian Man Gets 60 Months Jail for Providing Bulletproof Hosting to Cyber Criminals

• Open source cloud native security analyzer Terrascan embeds security into native DevOps tooling

• Three key ransomware actors changed jobs on October 18 – the same day REvil went dark

• Critical Bug in Mozilla’s NSS Crypto Library Potentially Affects Several Other Software

• Mozilla fixes critical flaw in Network Security Services (NSS) cryptography library

• Malware variants in 2021: Harder to detect and respond to

• Railway cyber risk management: Raising awareness on relevant threats

• Concentric Named Industry’s Cybersecurity Rising Star in US Channel Innovation Awards 2021 Program

• CCSP vs. Symantec Certified Cloud Credentials: How Do They Compare?

• (ISC)² Security Congress Goes West – Las Vegas Here We Come!

• The 5G market is about to take off: What to expect in 2022 and beyond?

• CIS Control 13: Network Monitoring and Defense

• iPhone 13 Demand Weakening Ahead of Holidays, Apple Tells Suppliers

• AWS announces four storage services and capabilities to help customers protect their data

• IriusRisk V4 enables teams to present progress of threat modeling to senior leadership

• Berlin’s Second Apple Store Opening on Thursday

• Freevolt Technologies S-Key enables unified authentication across multiple workplace settings

• Paessler adds new sensors to deliver insights into server system health

• CISA taps CrowdStrike for endpoint security

• Deals: MagSafe Battery Pack on Sale for $74.99 ($24 Off)

• Lawfare Live: Alexander Vindman and Dominic Bustillos on Recent Developments in Ukraine

• Understanding the Pro-China Propaganda and Disinformation Tool Set in Xinjiang

• Verizon enhances its NaaS digitization strategy with Cisco managed SD-WAN services

• Panasas joins Thales Accelerate Partner Network to safeguard HPC storage systems and customer data

• AWS Private 5G helps enterprises scale their private mobile network

• Cambridge Quantum and Honeywell Quantum Solutions merge to create a new firm called Quantinuum

• ATG selects YesWeHack to identify potential vulnerabilities on its platforms and applications

• SS8 Networks partners with Ocient to deliver high-performance solutions for law enforcement customers

• Mirantis collaborates with Equinix to help businesses accelerate cloud-native application deployment

• Australia set to gain ability to sanction cyber attackers under ‘Magnitsky-style’ law

• Jumping the air gap: 15 years of nation‑state effort

• ReliaQuest expands its current business operations and international growth with a new funding round

• CertiK raises $80M to protect blockchains against sophisticated security threats

• IBM acquires SXiQ to modernize applications and technology infrastructure in the cloud

• Aqua Security acquires Argon to secure all stages of software build and release

• 8×8 acquires Fuze to expand enterprise customer base and global presence

• Final Member of ‘The Community’ Sentenced

• Securiti achieves ISO/IEC 27001:2013 certification to manage the security of its data assets

• Bryan Jones joins RightCrowd as CTO

Generated on 2021-12-03 23:55:26.508673