IT Security News Daily Summary 2021-12-04

• VA exploring emerging health care tech

• Weekly Update 272

• Be Cybersmart: 4 ERP Best Practices to Prioritize Security

• Researchers: Facebook Is Still Failing To Remove Medical Misinformation

• Cuba ransomware gang hacked 49 US critical infrastructure organizations

• Malvertising attack distributes malicious Chrome extensions, backdoors

• A Planned Parenthood LA Hack Affects 400,000 Patients

• Convergint Acquires Universal Security Systems, Bolstering Global Growth

• AI in Cybersecurity: How to Cut Through the Overhype and Maximize the Potential

• Four Cybersecurity Tips Everyone Should Know Before Black Friday and Cyber Monday

• Top Stories: iPhone SE 3 in Early 2022, macOS Monterey Tips, AirPower Revival, and More

• Pegasus Spyware Reportedly Hacked iPhones of U.S. State Department and Diplomats

• Build or Buy your own antivirus product

• CISA warns of vulnerabilities in Hitachi Energy products

• VirusTotal Announced a New Feature Let Researchers To Create & Share IoCs

• Warning: Yet Another Zoho ManageEngine Product Found Under Active Attacks

• A Safe and Secure Way to Decommission

• UL IoT Security Starter Kit helps organizations manage their cybersecurity risks

• Mirantis DevOpsCare boosts developer productivity and reduces organizational complexity

• D2iQ DKP now available in AWS Marketplace to help customers accelerate their cloud native journey

• American diplomats’ iPhones reportedly compromised by NSO Group intrusion software

• Top Cybersecurity Accounts to Follow on Twitter

• Scammers exploit Omicron fears in new COVID‑19 phishing campaign

• Week in security with Tony Anscombe

• AT&T Looks to Shut Down Botnet that Attacked 5,700 Network Appliances

• NSO Group Spyware Hits at Least 9 US State Department Phones

• 6 big Kubernetes container security launches at AWS re:Invent 2021

• Sensitive information of 30k Florida healthcare workers exposed in unprotected database

• FBI: Cuba ransomware group hit 49 critical infrastructure organizations

• IT Security News Daily Summary 2021-12-03

• Report: Ransomware victims increase security budgets due to surge in attacks

• Who Is the Network Access Broker ‘Babam’?

• Utility biz Delta-Montrose Electric Association loses billing capability and two decades of records after cyber attack

• Analyzing The Security Challenge of Hybrid and Remote Working Models

• Feds charge two men with claiming ownership of others’ songs to steal YouTube royalty payments

• How AI and ML can thwart a cybersecurity threat no one talks about

• White House presses for improved agency-IG cooperation

• Why self-sovereign identities are so valuable to residents and agencies

• Pegasus Maker Probes Reports its Spyware Targeted US Diplomats

• Ex Ubiquiti Developer Arrested for Data Theft

• NSO Group Spyware Used to Breach US State Dept. Phones

• One-Third of Black Friday Shoppers Were Bots, Fake Users

• NSO Group spyware used to compromise iPhones of 9 US State Dept officials

• Top Phishing Lures to Look Out for This Holiday Season

• IGI Cybersecurity Introduces CISO Team-as-a-Service

• County limits workers’ comp claims with motion capture tech

• Pandemic-Influenced Car Shopping: Just Use the Manufacturer API

• How Criminals Are Using Synthetic Identities for Fraud

• Friday Squid Blogging: Squeeze the Squid

• Apple Executives Talk Watch Bands: Emphasis on Backward Compatibility, Design Philosophy, and More

• Bill proposes suspension of instant payments in Brazilian state as crime surges

• Omicron Phishing Scam Already Spotted in UK

• Hundreds of new vulnerabilities found in SOHO routers

• Protecting your critical infrastructure is one thing…protecting your backups is the same thing

• Top 12 AI and machine learning announcements at AWS re:Invent 2021

• Is your state ready to handle the influx of federal funds for expanding broadband?

• Researchers Find 226 Vulnerabilities in Nine Wi-Fi Routers

• UK Government Fined Over Honors List Data Breach

• Review: Belkin’s Latest 3-in-1 Charger is Ideal for Apple Watch Series 7 Owners

• Hackers steal $120m from Badger Defi and $30m from MonoX

• The top 12 security announcements at AWS re:Invent 2021

• Iranians Charged for Cryptojacking After U.S. Firm Gets $760,000 Cloud Bill

• Mozilla patches critical “BigSig” cryptographic bug: Here’s how to track it down and fix it

• US Issues Cybersecurity Directive for Airlines and Railroads

• Logiq.ai Tackles Observability Problem With LogFlow

• What Are Your Top Cloud Security Challenges? Threatpost Poll

• How well do you know your APIs? Not well enough, says Cisco

• Netgear router flaws exploitable with authentication … like the default creds on Netgear’s website

• What’s next for CMMC

• Apple Reportedly Notified Some U.S. State Department Employees They May Have Been Targeted by NSO Group Spyware

• MacRumors Giveaway: Win a Leather Apple Watch Band From Southern Straps

• Cybersecurity for Idiots

• Emotet’s back and it isn’t wasting any time

• What the Internet Bug Bounty Teaches About Open-Source Software Security

• Ransomware Attack On Planned Parenthood Steals Data Of 400k Patients

• Hackers Steal $119 Million From Web3 Crypto Project With Old School Attack

• Researcher Found Way To Brute Force Verizon Customer PINs

• US Rejects Calls For Regulating Or Banning Killer Robots

• AWS re:Invent: News Roundup From 2021 Conference

• Relevant and Extended Detection with SecureX

• Attacker unmasked by VPN flubs charged with Ubiquiti hack

• Covid Omicron variant leads to Phishing Cyber Attacks

• AWS, CrowdStrike, Presidio Join Hands To Develop Ransomware Mitigation Kit

• CISA Informs Organizations About Vulnerabilities in Hitachi Energy Products

• USB Devices the Common Denominator in All Attacks on Air-Gapped Systems

• KAX17 threat actor is attempting to deanonymize Tor users running thousands of rogue relays

• Crooks are selling access to hacked networks. Ransomware gangs are their biggest customers

• IoT security needs zero trust to face new botnet trends

• Deals: Take 20% Off Brydge iPad Keyboards This Week

• Google’s ‘Pixel Watch’ Planned for 2022 Launch to Compete With Apple Watch

• Apple AirTag Linked to Increasing Number of Car Thefts, Canadian Police Report

• An Insider’s Account of Disclosing Vulnerabilities

• Home routers riddled with vulnerabilities

• Phishing Actors Are Already Exploiting the Omicron COVID-19 Variant

• Bangladesh, South African and Iraqi Government sites have been found to be hosting web shells

• End-to-end Testing: How a Modular Testing Model Increases Efficiency and Scalability

• How to avoid being a hacker’s next target: Don’t overshare information on business social media

• Facebook, Twitter Take Down More State-Linked Accounts

• Technical Problem or Cyber Crime? How to Tell the Difference

• Researchers Detail How Pakistani Hackers Targeting Indian and Afghan Governments

• What Is Privilege Escalation? Definition, Types and Examples

• There’s been a big jump in crooks selling access to hacked networks. Ransomware gangs are their best customers

• Threat Group Takes Aim Again at Cloud Platform Provider Zoho

• Cisco Secure Firewall named Best Next Generation Firewall in SE Labs 2021 Annual Report

• Apple Fitness+ to Feature Prince William on Time to Walk and Apple Music 1

• Russia Seeks To Fine Google, Meta On Annual Turnover

• Holiday Season Online Privacy Recipe | Avast

• It’s a truly cruel scam. Here’s the dramatic way Google is trying to stop it

• Expert comment: CS Energy ransomware attack

• 17 Malware Frameworks Target Air-Gapped Systems for Espionage

• Threat actors stole $120 M in crypto from BadgerDAO DeFi platform

• Testing Faraday Cages

• The In-house Zoho ServiceDesk Exploit Used to Drop Webshells

• FTC Sues Nvidia To Block ARM Acquisition

• Printing Shellz – New Vulnerabilities That Affects 150 Different Multifunction Printers

• TSA Requires Rail and Airports to Strengthen Cybersecurity

• October 2021 Cyber Attacks Statistics

• Facebook Expands Advanced Security Program to More Countries

• Twitter and Meta Tackle Anti-Vaxxers and Chinese Disinformation

• Determined APT is exploiting ManageEngine ServiceDesk Plus vulnerability (CVE-2021-44077)

• Data Security: Defending Against the Cache Poisoning Vulnerability

• FCW Insider: December 3, 2021

• Misconfigured Database Leaks Info on 150K E-commerce Buyers

• New Malvertising Campaigns Spreading Backdoors, Malicious Chrome Extensions

• Computing Security Awards 2021: Heimdal™ Wins AI and Machine Learning-Based Security of the Year

• The Business of the Metaverse

• This password-stealing and keylogging malware is being spread through fake software downloads

• Omicron Phishing Campaign Hits User Inboxes

• Intel Eager to Avoid Clashes With Apple As It Looks to Secure TSMC’s 3nm Chip Supply

• Cyber-Attack on Planned Parenthood

• Hiding in plain sight: make sure Europe’s most wanted criminals do not escape their past

• Why Everyone Needs to Take the Latest CISA Directive Seriously

• Watch out for Omicron COVID-19-themed phishing messages!

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Poll Shows Most Shoppers Don’t Trust E-Commerce Sites | Avast

• New Payment Data Sealing Malware Hides in Nginx Process on Linux Servers

• New infosec products of the week: December 3, 2021

• Major trends in online identity verification for 2022

• US Military families targeted by Phishing Cyber Attacks

• BlackByte Ransomware found exploiting ProxyShell vulnerabilities

• This Week in Security News – December 3, 2021

• Tor2Mine cryptominer has evolved: Just patching and cleaning the system won’t help

• Twitter removes another 3,000 state-backed accounts linked to six countries

• Phishing kits’ favorite brand? Amazon

• CISA Warns of Actively Exploited Critical Zoho ManageEngine ServiceDesk Vulnerability

• Top tech trends for 2022

• 0Patch has a patch for Windows “InstallerFileTakeOver” 0-day vulnerability, Microsoft has none

• Enterprises are embracing the multicloud, turning to providers for strategy

• SMS firewall revenue to reach $4.1 billion in 2026

• How to Prepare for CISSP Exam Day

• A Look Back at Privacy in Q3 2021: Summertime and the Livin’ Was Easy

• Federal government refreshes digital transformation strategy and expands cyber hub trial

• Ondato’s AI-enabled ID forensics system detects document alterations

• Trifacta delivers scalable data transformations with Pushdown Optimization on Snowflake

• Trump’s Intelligence Briefings: Better Than Some Feared, Worse Than Many Hoped

• Qumu partners with GovSmart to modernize communications processes for government agencies

• Kudelski Security integrates with Microsoft Defender for Endpoint to proactively hunt for new threats

• CISA and FBI Release Alert on Active Exploitation of CVE-2021-44077 in Zoho ManageEngine ServiceDesk Plus

• Karamba Security raises $10M to accelerate development of its product roadmap

• Device Authority raises $2.9M to accelerate revenue growth

• CDW acquires Sirius Computer Solutions to enhance services and solutions capabilities

• Colorado energy company loses 25 years of data after cyberattack, still rebuilding network

• Launching ESET Research Podcast: A peek behind the scenes of ESET discoveries

• A Software Bug Let Hackers Drain $31M From a Crypto Service

• CISA and FBI Release Alert on Active Exploitation of CVE-2021-44077 in Zoho ManageEngine ServiceDesk Plus

• Eclypsium appoints Arif Kareem to Board of Advisors and Jarrod Bogue as CRO

• Sierra Wireless names Russell Jones as New Chair

• Nate Skinner joins Onfido as CMO

• Livestreamed Hearing Monday: EFF Urges Appeals Court to Allow Public Access to Documents in Patent Troll Litigation

Generated on 2021-12-04 23:55:21.226655