IT Security News Daily Summary 2022-01-05

• Amazon Partners With Stellantis For Vans, Rivian Stock Plunges

• FTC warns of legal risks of failing on Log4j mitigation

• Broward Breach Highlights Healthcare Supply-Chain Problems

• Facebook Restores Account Of Conversative Book Publisher After Permanently Banning It

• New Attack Campaign Exploits Microsoft Signature Verification

• Cloud video platform abused in web skimmer attack against real estate sites

• Technical Analysis of CVE-2021-1732

• Uber Bug, Ignored for Years, Casts Doubt on Official Uber Emails

• FTC warns companies to mitigate Log4j vulnerability

• NY AG’s credential stuffing probe finds 1M exposed accounts

• Morgan Stanley Agrees to Data Breach Settlement

• NY AG: 1.1M Online Consumer Accounts Found Compromised in Credential-Stuffing Attacks

• Cybersecurity pullback a result of high valuations, still great fundamentals, says Jefferies’ Thill

• The Battle to Keep PvP Games Fair and Out of the Hands of Hackers

• Workshop: Building Modern Applications with DevOps Security

• Kazakhstan leaders shut down internet amid gas price protests

• Malware Can Fake iPhone Shutdown via ‘NoReboot’ Technique

• Which Cloud Strategy Is Right For My Organization’s Security Needs?

• FTC: Companies Could Face Legal Action for Failing to Patch Log4j

• US Army journal’s top paper from 2021 says Taiwan should destroy TSMC if China invades

• Apple iPhone 14 To Lose Notch Cutout – Report

• NY AG notifies 17 companies of breaches, says 1.1 million accounts compromised in attacks

• FTC to Go After Companies that Ignore Log4j

• Zloader Banking Malware Exploits Microsoft Signature Verification

• VMware Releases Security Updates

• Google Releases Security Updates for Chrome

• Watch CNBC’s full interview with BlackBerry CEO John Chen on expanding into cybersecurity

• Remember Norton 360’s bundled cryptominer? Irritated folk realise Ethereum crafter is tricky to delete

• Behind the scenes: A day in the life of a cybersecurity curriculum director

• MalSmoke attack: Zloader malware exploits Microsoft’s signature verification to steal sensitive data

• VMware Plugs Security Holes in Workstation, Fusion and ESXi

• MicroStrategy enhances security, embedded analytics features

• Why We Need To Reframe the False-Positive Problem

• Purple Fox Rootkit Dropped By Malicious Telegram Installers

• Kosovo Bans Cryptocurrency Mining After Blackouts

• This iOS 15 Bug Could Crash Your iPhone Permanently

• Malsmoke Exploits Microsoft’s E-Signature Validation

• Activision Sues And Unmasks Alleged Call Of Duty: Warzone Cheat Sellers

• 9-year-old Windows flaw abused to drop ZLoader malware in 111 countries

• This iOS 15 bug could crash your iPhone permanently

• Recorded Future Acquires SecurityTrails in $65M Deal

• FTC threatens “legal action” over unpatched Log4j and other vulns

• Researcher Release Report on Internet of Things and Malware Security

• Apple iOS Susceptible to HomeKit ‘Doorlock’ Vulnerability

• Hackers exploit old Microsoft Vulnerability to drop Zloader Malware

• Alphabet Senior Management Awarded Stock Options, Salary Rises

• 2022-01-04 – Remcos RAT infection from Excel file with macros

• Web Application Security Driven by WAF is Favoring Organizations

• The Bug Report – December 2021

• Location and Online Privacy | Avast

• CES 2022: AI is driving innovation in ‘smart’ tech

• The Future of Federal Secure Remote Access

• Roadmap to a Better Customer Experience

• Census recounts fail to account for COVID chaos, cities say

• ICS Vendors Respond to Log4j Vulnerabilities

• Putting Ransomware Gangs Out of Business With AI

• Do the Legal Rules Governing the Confidentiality of Cyber Incident Response Undermine Cybersecurity?

• FL Broward Health 1.3M Patient Data Breach

• Heimdal™ Security Threat-Hunting Journal: End of the Year Wrap-up in Malware

• Remember Norton 360’s bundled cryptominer? Irritated folk realise Ethereum app is tricky to delete

• Understanding Custom Software

• Reserve Bank warns Aussies over punting on ‘fad driven’ cryptocurrencies.

• China Central Bank Pilots Wallet App For Digital Yuan

• Malicious Telegram Messenger App Using New Purple Fox Malware to Hack PCs

• Welcome McAfee Forward—the Future of Online Protection Today

• Defense Contractors Must do More to Conceal Their Attack Surface

• Aqua Security Appoints Paul Calatayud as CISO

• CrowdStrike Incorporates Intel CPU Telemetry Into Falcon Sensor

• FTC warns legal action against businesses who fail to mitigate Log4J attacks

• The 5 Most Hotly Contested Security Trends and Questions

• Xage lands $30M to bring identity security to ‘real world’ infrastructure

• ‘Malsmoke’ Exploits Microsoft’s E-Signature Verification

• Chrome 97 Patches 37 Vulnerabilities

• Researchers Uncover Hacker Group Behind Organized Financial-Theft Operation

• Cloud Video Platform Used By Cybercriminals to Steal Payment Information

• $10m of funds goes missing in what appears to be a cryptocurrency rug-pull

• Careful! Uber flaw allows anyone to send an email from uber.com

• China Mobile Enjoys Successful Shanghai IPO After NYSE Delisting

• CES 2022: Sony Mulls Electric Vehicle Entry

• 2022 New Year’s Resolution: Dev and SEC Cross-Team Learning

• China moots additional security rules for apps that influence public opinion

• Malsmoke hackers abuse Microsoft signature verification in ZLoader cyberattacks

• Morgan Stanley agrees to $60 million settlement in data breach lawsuit

• Purple Fox rootkit discovered in malicious Telegram installers

• Broward Health Data Breach Impacts 1.3 Million People

• FTC: Patch Log4j Vulnerability to Avoid Potential Legal Action

• Google Patches 48 Vulnerabilities With First Set of 2022 Android Updates

• Palo Alto Networks Appoints CEO for EMEA and LATAM Regions

• More Russian Cyber Operations against Ukraine

• DatPiff’s users’ data available on hacking forum

• The US Federal Trade Commission (FTC) Urges Companies to Secure Consumer Data

• DatPiff Data Breach Has an Impact on Millions of People, Have I Been Pwned Warns

• Windows giant seeks Pluton-ic relationship with chip maker: AMD first out of the gates with Microsoft’s security processor

• Hackers Are Exploiting a Flaw Microsoft Fixed 9 Years Ago

• New Zloader Banking Malware Campaign Exploiting Microsoft Signature Verification

• New year, new ICO head

• British Classified Ad Site Gumtree Exposed Users’ Private and GPS Location in Data Breach

• Russian hacker arrested in US who may have information about Russian interference in American elections

• Lapsus$ Ransomware Gang Hacked Portugal’s Largest Media Conglomerate

• PulseTV Discloses Potential Breach Affecting 200,000 People

• SEGA’s Europe Security : AWS S3 Bucket Exposed Provides Steam API Access

• Discovering New Ways To Phish | Avast

• UK’s Information Commissioner Starts New Role Amid Major Changes

• Info-Stealing Malware Hits 100+ Countries

• Threat actors continue to exploit Log4j flaws in their attacks, Microsoft Warns

• Expert Comment: Lapsus$ Ransomware Gang

• Latest Cybersecurity News 2022

• FTC: Patch Log4j Now or Risk Major Fines

• How can SMBs extend their SecOps capabilities without adding headcount?

• CredNinja – Test Credential Validity of Dumped Credentials or Hashes

• How ransomware gangs went pro

• Build your own Android security product

• Malware Reverse Engineering for Beginners – Part 1: From 0x0

• How We Handled the Log4j Security Vulnerability

• Hackers Target Real Estate Websites with Skimmer in Latest Supply Chain Attack

• Researchers used electromagnetic signals to classify malware infecting IoT devices

• China says apps that could influence public opinion require a security review

• Services Australia brushes off vulnerability concerns in COVID-19 digital certificates

• CrowdStrike Incorporates Intel CPU Telemetry into Falcon Sensor

• API security: Understanding the next top attack vector

• SMBs should consider new approaches for increasing their cybersecurity posture

• FTC to penalize companies hit by Log4J Vulnerability

• Google acquires Israel cybersecurity company Siemplify

• Microsoft Warns of Continued Attacks Exploiting Apache Log4j Vulnerabilities

• Executech Announces Acquisition of Dyrand Systems

• CynergisTek Finishes Year Strong, Closes Largest 2-Year Managed Service Contract for 2021

• The Other Type of Shadow IT

• Technology’s contributions toward safety in healthcare

• Integrity: A Key Facet of Zero Trust

• Tips, Advice, and Insights on Achieving Buy-in for Cybersecurity Projects

• Embedded hypervisor software market to reach $1.16 billion by 2026

• How companies manage data and AI initiatives

• NetFay Peer-to-Peer Encrypted Private Data Platform ensures personal data privacy

• Finite State’s binary analysis enhances automated zero-day vulnerability detection

• CloudCover App provides executives with real-time visibility into their network security

• The CISO’s guide to third-party security management

• The Evolution of Robotic Dogs: Where Is Cyber Fido Headed Next?

• Identiv Takes Home the Gold in 2021 ‘ASTORS’ Awards Program

• TD SYNNEX partners with MicroStrategy to provide end-to-end enterprise analytics solutions

• NETGEAR announces business products for SMBs and home offices

• Comcast releases WiFi 6E Gateway to boost capacity for connected home devices

• 4 things that you didn’t know your smartphone could do

• 2022-01-03 – Pcap from web server with log4j attempts and lots of other probing/scanning

• FTC to pursue companies that expose customer data due to not patching Log4j

• Chinese tech companies must undergo government cyber review to list overseas

• Instagram and teens: A quick guide for parents to keep their kids safe

• 2021 in Review, Part 4: 5 Cybersecurity Topics to Watch in 2022

• Tom Aurelio joins OneSpan as CPO

• (ISC)² appoints John Giddings as VP of Global Customer Experience

• HUMAN Security raises $100M to accelerate expansion into new markets

• Blackbaud acquires EVERFI to offer innovation and data-driven social impact for customers

• CompuGain collaborates with Rafay Systems to enhance secure Kubernetes implementations

• access log

• OPM disputes 2021 court ruling on firing feds for poor performance

• Bob Vincent joins NetAbstraction as VP of Engineering

• VIQ Solutions hires Jayne Perry as Managing Director for United Kingdom and EMEA

• Onapsis appoints Sadik Al-Abdulla as CPO

• Closing the CMMC training gaps

• Avoid being held captive by ransomware with secure, reliable backups

• Microsoft Sees Rampant Log4j Exploit Attempts, Testing

• Google makes the perfect case for why you shouldn’t use Chrome

• Report: Facebook Allowed Misinformation To Flourish Ahead Of Jan. 6 Attack

• Attackers Exploit Log4j Flaws in Hands-on-Keyboard Attacks to Drop Reverse Shells

• McMenamins Breach Affected 23 Years of Employee Data

• Lawfare Live: The Aftermath

• IT Security News Daily Summary 2022-01-04

• What to Do If You’re Caught Up in a Data Breach

• LA Secure app protects mobile users from security threats

• Google Buys Siemplify to Get Ahead in Cloud Security

• UScellular discloses the second data breach in a year

• EFF Condemns the Unjust Conviction and Sentencing of Activist and Friend Alaa Abd El Fattah

• Bug in backup software results in loss of 77 terabytes of research data at Kyoto University

• Google acquires Siemplify for boosting security operations

• Over 20 years of employee data leaked during McMenamins ransomware attack

• Data Skimmer Hits 100+ Sotheby’s Real-Estate Websites

• SEGA’s Sloppy Security Confession: Exposed AWS S3 Bucket Offers Up Steam API Access & More

• Is quantum computing ready to disrupt cybersecurity?

• Investigation Launched into App “Selling” Women

• Persistence without “Persistence”: Meet The Ultimate Persistence Bug – “NoReboot”

• White House renews efforts to improve integrity of federal payments

• Network upgrades support heath care growth in rural Iowa

• Google acquires Israeli cybersecurity company Siemplify for $500 million

• Anti-Bot Fraud Detection Firm HUMAN Snags $100M Investment

• Google Acquires its First Non-American Cybersecurity Firm

• Upskilling, better training keys to increasing cyber talent pool

• Driverless Car Trial For Milton Keynes By Month End – Report

• 5 Things to Consider When Getting into Cryptocurrency

• First Microsoft Pluton-powered Windows 11 PCs to start rolling out this year

• UWO Opens New Cybersecurity Center

• EFF Condemns the Unjust Conviction and Sentencing of Activist and Friend Alaa Fatttah

• Purple Fox Rootkit Dropped by Malicious Telegram Installers

• Apple Home software bug could lock you out of your iPhone

• Mobile Application Security: 2021’s Breaches

• What you need to know about how cryptography impacts your security strategy

• Customer support scammers take aim at NFT enthusiasts

• SlimPay fined €180k after 12 million customers’ bank data publicly accessible for 5 years

• US Operators Delay 5G Rollout, Amid Aviation Concerns

• Note to managers: A little recognition goes a long way

• McMenamins Data Breach Affects 12 Years of Employee Info

• Google Acquires Siemplify in Ambitious Cybersecurity Push

• China Data Security Law bars online companies with 1 million users

• Tesla Provokes Ire Over Showroom In Xinjiang, China

• Bot mitigation company Human Security raises $100M

• Google Cloud acquires Siemplify for boosting security operations

• Cyber Insurance Firm Corvus Expands With Acquisition of UK-Based Tarian

• Saltzer Health Informs Patients of Personal Information Exposure

• Vinnie Liu Has a Mission: Keeping People Safe Online and Offline

• Vulnerability Summary for the Week of December 27, 2021

• Attackers abused cloud video platform to inject an e-skimmer into 100 Real Estate sites

• Silicon Valley’s Trial Of The Century

• Log4j Flaw Attack Levels Remain High, Microsoft Warns

• Microsoft Fixes Y2K22 Exchange Bug That Crashed Servers Worldwide

• John Edwards Takes The Reins At The UK’s Data Protection Watchdog

• Japanese Organizations Are Now the Targets of BlackTech APT Group

• Classic BlackBerry Smartphones Discontinued Today

• Twitter Permanently Suspends Republican Marjorie Taylor Greene

• Protecting Your Data From a Unique Threat: Misinformation

• elliptical curve cryptography (ECC)

• AI, ML bubble to the top in new beverage-ordering solution

• Log4j flaw attack levels remain high, Microsoft warns

• Online privacy: DuckDuckGo just finished a banner year and looks for an even better 2022

• Palo Alto Networks Appoints Helmut Reisinger to Leadership Team

• Log4j Remediation Rules Now Available for WhiteSource Renovate and Enterprise

• Why CIOs Should Report to CISOs

• SAILFISH System to Find State-Inconsistency Bugs in Smart Contracts

• Rethinking “Rules of the Road” to Stabilize U.S.-China Competition

• Exchange Server Bug Fixed

• Malicious Telegram Installers Used to Spread Purple Fox Rootkit

• Purple Fox rootkit now bundled with Telegram installer

• Serious Vulnerability Allows Phishing Emails to Be Sent From Uber.com Domain

• 8 Cybersecurity Trends You Must Watch Out For in 2022

• Most Reliable Hosting Company Sites in December 2021

• Log4j flaw attacks are causing lots of problems, Microsoft warns

• Portugal Media Giant Impresa Crippled by Ransomware Attack

• Predictions: SecurityWeek’s 2022 Cybersecurity Outlook

• Unpatched HomeKit Vulnerability Exposes iPhones, iPads to DoS Attacks

• Vulnerability lets anyone send emails from Uber.com

• John Edwards takes the reins at the UK’s data protection watchdog

• Purple Fox backdoor spreads through fake Telegram App installer

• Broward Health data breach exposes data of 1,357,879 individuals

• A Data Breach Affected Broward Health

• Apple First To Breach $3 Trillion Market Cap

• Silicon UK In Focus Podcast: The Quality of Data

• 2022: The year of software supply chain security

• Skimmer Injected Into 100 Real Estate Websites via Cloud Video Platform

• Researchers Detail New HomeKit ‘doorLock’ Bug Affecting Apple iOS

• Watch Out! You Might Get Hacked When Copy-Pasting Commands from Webpages

• China to make some firms undergo a data security review before listing overseas

• If it looks like a duck, swims like a duck, and QWACs like a duck, then it’s probably an EV Certificate

• Cyberattack against UK Ministry of Defence training academy revealed

• UK Defence Academy Attack Forced IT Rebuild – Report

• Money Launderers Get 33 Years for £70m Criminal Scheme

• Top Cybersecurity Trends To Consider For The New Year

• The Best Cyber Security Blogs You Should Follow [Updated 2022]

• Implementing Cloud Governance as a Code Using Cloud Custodian

• Microsoft Fixes New Year’s Day Exchange Server Bug

• Hospitality Chain McMenamins discloses data breach after ransomware attack

• Looking for adding new detection technologies in your security products?

• DatPiff – 7,476,940 breached accounts

• Parliamentary security committee review backs the operation of controversial TOLA Act

• Beware of Fake Telegram Messenger App Hacking PCs with Purple Fox Malware

• Should businesses be concerned about APT-style attacks?

• Meet the new Flagpro malware developed by Chinese

• Cyber Attack on UK Defence Academy

• Broward Health suffered a data breach that impacted +1.3 million people

• Preventing document fraud in a world built on digital trust

• Insider threat does not have to be malicious, so how do you protect your organization?

• Decisions, Decisions and the Role of Authorization

• Chinese Hackers Using Log4Shell Exploit Tools to Perform Post-Exploitation Attacks

• Senate committee wants foreign interference social media reporting rules by next Australian election

• Not IT vs OT, but IT and OT

• Securing Smart Cities: What You Need to Know

• Healthcare cloud infrastructure market size to reach $142 billion by 2028

• Broward Health Hit With Data Breach on Patients, Staff

• OPM faces uncertain funding prospects

• NSWEC finds iVote system failure may have impacted three local election outcomes

• Breaking the habit: Top 10 bad cybersecurity habits to shed in 2022

• Arlo Technologies partners with Matter to provide home security solutions for customers

• Sherri Luther joins Silicon Labs Board of Directors

Generated on 2022-01-05 23:55:21.295482