IT Security News Daily Summary 2021-12-24

• Attackers bypass Microsoft security patch to drop Formbook malware

• SFW! The Top N Cyber­security Stories of 2021 (for small positive integer values of N)

• Pushing Back on Police Surveillance: 2021 Year in Review

• The Future is in Interoperability Not Big Tech: 2021 in Review

• The Future Is in Interoperability Not Big Tech: 2021 in Review

• Sketchy Rumor Claims iPhone 15 Pro Won’t Have Physical SIM Card Slot

• Switch to a well-paid tech career in 2022: Check out these 200+ IT courses

• NY Makes Falsifying Vaccination Cards a Crime

• Top 7 Ransomware Attacks of year 2021

• US Senator Urges FTC To Investigate Facebook For Misleading Customers, Users

• Italy’s Talks With Intel ‘Intensifies’ Over $9bn Chip Factory – Report

• Merry Christmas To Readers Of Silicon UK

• What’s the Difference Between Identity Fraud and Identity Theft?

• Fisher Price Chatter Bluetooth Telephone 60G LTE has serious privacy issues

• Log4j: A CISO’s Practical Advice

• Alibaba Punished By The Chinese Government For Failing To Tell It About The Log4Shell Flaw First

• Tesla Stops Gaming While Moving, Amid US Safety Investigation

• Expert Details macOS Bug That Could Let Malware Bypass Gatekeeper Security

• Privacy and Confidentiality in Security Testing

• The Worst Hacks of 2021

• Here’s What Your Favorite Mac Apps Would Have Looked Like in 1999

• The IT Security Guru Buyer’s Guide 2022

• CES 2022: Google, GM Join Others In Halting Physical Attendance

• New Ransomware Variants Flourish Amid Law Enforcement Actions

• Unique cyber-attacks declined for the first time in 3 years

• Flaw behind Gatekeeper bypass fixed on macOS

• New CoinSpot phishing campaign discovered

• Tropic Trooper Hackers Group Targets Transportation & Government Companies

• Hellmann Warns Customers They Could Face Malicious Communications Following Attack

• Former Uber CSO Faces New Charge for 2016 Breach

• Experts warn of a new stealthy loader tracked as BLISTER

• Track Santa’s Journey From the North Pole Using Google’s Santa Tracker

• Unique Cyber-Attacks Fall for First Time Since 2018

• New BLISTER Malware Using Code Signing Certificates to Evade Detection

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• NVIDIA informs customers of its products affected by Log4j flaws

• Police Federation of England and Wales to be sued for Ransomware breach

• Russian hacker need not pay compensation to LinkedIn, Dropbox and Automatic

• New infosec products of the week: December 24, 2021

• Four years: that’s how long Azure’s App Service had a source code leak bug

• Bots are stealing Christmas!

• The retail sector needs to know when and not if it will be hacked

• Governance and data privacy: What to expect in 2022?

• The Other Type of Shadow IT

• Three ways banks can ensure a sustainable future

• 5 Endpoint security tips for the holidays

• Holiday shopping? Get an amazing 75% discount offer? A case study on evaluating a special holiday sale

• Security and vulnerability management market size to reach $20.1 billion by 2027

• Intel oneAPI 2022 toolkits help developers to improve productivity and accelerate innovation

• Juniper Networks selects Synopsys to design and optimize its hybrid silicon and InP optical platform

• Samsung PM1743 SSD provides improved power efficiency for enterprise servers

• DeFinity partners with Cobalt to enable dynamic credit management of digital asset trades

• Eckoh acquires Syntec to enhance its security solutions and accelerate cloud growth

• Dridex affiliate dresses up as Scrooge

• 2021-12-23 – Astaroth/Guildma infection from Brazil malspam

• Multiple Log4j scanners released by CISA, CrowdStrike

• Apple fixes macOS security flaw behind Gatekeeper bypass

• Significant changes need to be made in the way we do security, says Zscaler CEO

• IT Security News Daily Summary 2021-12-23

• Microsoft informs customers of ‘NotLegit’ Azure bug

• Multiple Log4j scanners released by CISA, Crowdstrike

• Russian Hacker’s $1.7M Restitution Order Overturned

• NSO spyware used to hack Polish politicians, Khashoggi’s wife, others

• Meta Appeals Against UK Order To Sell Giphy

• Grinch bots hijack all kinds of holiday shopping, from gift cards to hype drop sales

• 4-Year-Old Microsoft Azure Zero-Day Exposes Web App Source Code

• AvosLocker ransomware reboots in Safe Mode and installs tools for remote access

• Electronic Frontier Alliance Defending Local Communities: 2021 in Review

• 2021 Year in Review

• 5 best practices for strengthening your software supply chain with DevSecOps

• NSO spyware used to hack Polish politicians, wife of Khashoggi, UN war crimes investigator and more

• SolarWinds-Like Supply Chain Attacks will Peak in 2022, Apiiro Security Chief Predicts

• The cool retro phone with a REAL DIAL… plus plenty of IoT problems

• Best Intrusion Detection and Prevention Systems for 2022: Guide to IDPS

• How to Comply with GDPR, PIPL and CCPA

• Army Recruiter Cyber-Stalked by Wannabe Soldier

• How SASE protects from Log4j

• TSMC Expected to Begin 3nm Chip Production in Late 2022 Ahead of First M3 Macs

• Baselining and Hunting Log4Shell with the CrowdStrike Falcon Platform

• What’s next for FedRAMP?

• How to deploy a Bitwarden server with Docker

• Former Harvard Professor Convicted In Victory for Justice Department’s China Initiative

• The Chatter Podcast: Women’s Health and National Security with Anushay Hossain

• The Role of Firewall as a Service in An Ever-Evolving Security Landscape

• Over 35,000 Java Packages Impacted by Flaws in The Apache Log4j library

• Telegram Abused to Steal Crypto-Wallet Credentials

• ManageEngine attacks draw warning from FBI

• Texas Convicts BEC Scammer

• Trending news on Apache Log4J Shell Vulnerability

• Beware of cryptominers when torrenting ‘Spider-Man: No Way Home’

• Deals: 41mm GPS Apple Watch Series 7 Drops to $339 ($60 Off)

• Jack Dorsey Blocked On Twitter By Netscape’s Marc Andreessen

• Stellar Cyber Takes Home the Gold in 2021 ‘ASTORS’ Awards Program

• ‘Spider-Man: No Way Home’ Download Installs Cryptominer

• The Future of Work Has Changed, and Your Security Mindset Needs to Follow

• Crooks bypass a Microsoft Office patch for CVE-2021-40444 to spread Formbook malware

• 7 of the Most Impactful Cybersecurity Incidents of 2021

• US Intel And Satellite Images Show Saudi Arabia Is Now Building Its Own Ballistic Missiles With Help Of China

• Four Bugs In Microsoft Teams Left Platform Vulnerable Since March

• Log4j Makes Waves In The US Financial Industry

• Apache’s New Security Update For HTTPD Server Fixes Two Flaws

• What Is DNS Content Filtering and Why Does Your Business Need It?

• November 2021 Cyber Attack Statistics

• Examining Log4j Vulnerabilities in Connected Cars and Charging Stations

• Russia Hits Twitter With Fine For Banned Content

• Ransomware Attackers’ New Tactic: Double Extortion

• NVIDIA, HPE Products Affected by Log4j Vulnerabilities

• Apache’s new security update for HTTP Server fixes two flaws

• Train at your own pace to become an expert ethical hacker for only $43

• Several Critical Vulnerabilities Found in myPRO HMI/SCADA Product

• Amazon Staten Island Workers Refile Union Vote Request

• Consumers Warned of Surging Delivery Text Scams Ahead of Christmas

• Hacker Faces Over 20 Years in Jail for Creating Fake Rideshare and Delivery Service Accounts

• Microsoft Office Patch Bypassed for Malware Distribution in Apparent ‘Dry Run’

• CISA, FBI and NSA Publish Joint Advisory and Scanner for Log4j Vulnerabilities

• Three trivial bugs in Microsoft Teams Software remain unpatched

• Monongalia Health System victim to BEC attack

• 2021 (ISC)² Leadership Webinars On-Demand

• US Opens Tesla Investigation Over In-Car Computer Games

• This new ransomware has simple but very clever tricks to evade PC defenses

• Fulfilling Security Requirements for the Transportation Sector

• Five Eyes Nations Issue Joint Guidance on Log4j Vulnerabilities

• IoT SAFE — An Innovative Way to Secure IoT

• 4 Steps To Good Ops Management

• Cryptographic Security And The Quantum Apocalypse

• World’s top cybsersecurity agencies warn of Apache vulnerability threats

• 400,000 Individuals Affected by Email Breach at West Virginia Healthcare Company

• CISA Releases Free Scanner to Spot Log4j Exposure

• Alibaba Suffers Government Crackdown Over Log4j

• iPhone 14 Pro and Pro Max Hole-Punch Displays to Be Supplied By LG and Samsung

• Belgium’s Military hit by cyber attack

• FBI traces and grabs back $150 million theft that was turned into bitcoins

• Intel Provokes Fury In China Over Supplier Letter

• Log4j vulnerability Protection for Endpoints

• Up to 120,000 Cops May Have Legal Claim Over 2019 Breach

• Logistics giant warns of scams following ransomware attack

• $1,139 of Gelato – Intego Mac Podcast Episode 219

• Europol IOCTA 2021 Report: The Key Takeaways

• HackDHS bug bounty program accepts reports of Log4j-related flaws in DHS systems

• Multiple Vulnerabilities Found In Microsoft Teams – Only One Fixed So Far

• Behavioral Threat Fingerprinting | Avast

• Log4Shell is a dumpster fire that should have been avoided

• Do you know what your supply chain is and if it is secure?

• Fisher Price’s Bluetooth reboot of pre-school play phone has adult privacy flaw

• 4-Year-Old Bug in Azure App Service Exposed Hundreds of Source Code Repositories

• Researchers Disclose Unpatched Vulnerabilities in Microsoft Teams Software

• A flaw in Microsoft Azure App Service exposes customer source code

• PCI SSC updates its device security standard for HSMs

• Five cybersecurity predictions for 2022 and beyond

• Alibaba Cloud slapped by Chinese ministry for mishandling Log4j

• Facebook turns least trusted website in America over data and privacy

• UK NCSC reveals data breach related to quarter billion passwords

• Watch out for Christmas 2021 credential stuffing attacks!

• Wireless 5G connections to exceed 540 million by the end of the year

• (ISC)² Ransomware Study: Collaboration and Communication are Essential for Ransomware Readiness

• 5 holiday Cybersecurity tips retailers need this year

• Why authorization and authentication are important to API security – and why they’re not enough

• The Changing Profile of the CISO: New Roles, New Demands, New Skills

• Cyber-Attack on Belgium’s Military

• Could passwordless be the solution to poor shopping sign-up processes?

• Active Directory Domain Service Bug Let Attackers To Takeover Windows Domains

• Big data moving to Kubernetes with speed, complexities arising

• Box launches enhanced tools to drive insights and mitigate security risks

• Lacework Cloud Care helps security teams uncover Log4j vulnerability

• BlackBerry Guard XDR protects enterprises and governments against evolving cyber threats

• Securonix Autonomous Threat Sweeper automates search for Log4j related activity

• NS1 announces outage mitigation bundle to improve resiliency for critical applications

• This holiday season, give your children the gift of cybersecurity awareness

• Building the Zero Trust Enterprise: A Holistic Approach

• Some Apple Watch Users Experiencing Charging Issues After Updating to watchOS 8.3

• Chinese regulators suspend Alibaba Cloud over failure to report Log4j vulnerability

• ISACA releases three audit resources to help professionals keep pace with compliance trends

• Matthew McNulty joins ECI as CRO

• Redpoint Cybersecurity expands executive team with three appointments

• Tracey Newell joins Druva Board of Directors

Generated on 2021-12-24 23:55:14.782906