IT Security News Daily Summary 2022-01-08

• The positive side of ransomware for data transformation

• Unauthenticated RCE in H2 Database Console is similar to Log4Shell

• Why your organization needs a software bill of materials

• 500M Avira Antivirus Users Introduced to Cryptomining

• Lawsuit: Facebook Promoted Violent Content And Helped Extremists Plan Murder

• Google Docs Comment Flaw Exploited by Hackers

• An Optimistic Outlook for 2022: Cloud Security Vulnerabilities Are 100% Preventable

• MITRE-Harris Poll: 77% of U.S. Residents Concerned About Ransomware, IP Theft and Attacks on Critical Infrastructure

• Norton Put a Cryptominer in Its Antivirus Software

• $50 Million Lost to Fraudsters Impersonating as Broker-Dealers

• Crypto Firm Arbix Identified as a Rug Pull After Scamming $10 Million From Investors

• FBI warns of hackers mailing malicious USB drives to spread ransomware

• FluBot malware continues to evolve. What’s new in Version 5.0 and beyond?

• Tesla owner says he mines up to $800 a month in cryptocurrency with his car

• Alfer Microsoft, also SonicWall confirmed that its products were affected by Y2K22 bug

• WebSpec, a formal framework for browser security analysis, reveals new cookie attack

• The CNIL Penalized SLIMPAY €180,000 for Data Violation.

• SSRF Attacks can be Used to Compromise Java RMI Services

• Build or Buy your own antivirus product

• NHS Warns of Hackers Targeting Log4j Flaws in VMware Horizon

• Facebook Launches ‘Privacy Center’ to Educate Users on Data Collection and Privacy Options

• You Might Be A Victim Of Google Voice Scam, Here’s How To Protect Your Account

• Medical Review Institute of America Notifies Patients of Data Breach

• Dun & Bradstreet Announces Conditional Notice of Redemption for Existing Senior Secured Notes

• Honda cars in flashback to 2002 – “Can’t Get You Out Of My Head”

• Weekly Update 277

• Fuze enhances productivity and collaboration across distributed teams

• CES 2022: Space security – no more flying blind

• Week in security with Tony Anscombe

• NetApp appoints Elizabeth O’Callahan to Chief Legal Officer and General Counsel

• Datadog and AWS join forces to develop and deliver tighter product alignment in the future

• “Owning Your Identity” Through Biometric and Passwordless Innovations

• Surviving The New Era of Terabit-Class DDoS Attacks

• How To Thwart Fraud with Phone Numbers

• Supreme Court hearing turns to the contractor mandate

• FIN7 group continues to target US companies with BadUSB devices

• Kirk A. Law joins Cohesity as SVP of research and development

• Can blockchain tokens drive smarter commuting choices?

• EoL Systems Stonewalling Log4j Fixes for Fed Agencies

• Friday Squid Blogging: Squid Prices Are Rising

• Ransomware attacks Finalsite, renders 8,000 school sites unreachable for days

• IT Security News Daily Summary 2022-01-07

• NIST measures trees’ impact on 5G networks

• FlexBooker apologizes for breach of 3.7 million user records, partial credit card information

• Cyberattackers Hit Data of 80K Fertility Patients

• NHS Warns of Attackers Targeting Log4j Flaws in VMware Horizon

• How agencies are benefitting from AIOps

• The Importance of Physical Security to Safeguard Your Cybersecurity

• Cyber-Attack on New Mexico County

• MSP Thrive Acquires InCare Technologies

• The Future of Tech Is Here. Congress Isn’t Ready for It

• How to secure QNAP NAS devices? The vendor’s instructions

• Skimmer Supply Chain Attack On 100 Sotheby’s Real Estate Sites

• Preventing Hackers From Pilfering Another Million Business Customers

• Face Legal Action If You Fail To Patch Log4Shell

• 3.7M FlexBooker Records Dumped on Hacker Forum

• Attackers Hitting VMWare Horizon Servers With Log4j Exploits

• Cerberus Sentinel Acquires True Digital Security

• WordPress Releases Security Update

• China’s Tech Crackdown: A Year-in-Review

• Weekly Cybersecurity News Summary

• Credential Stuffers Which Compromised 1.1 Million Accounts

• Ransomware Shuts Down Albuquerque Government

• Iranian immigrant lost $53,000 in crypto hack, says he faces ruin if BitMart doesn’t pay him back

• Ransomware attack on FinalSite still disrupting email services at thousands of schools

• Norton 360 wants to pay you a pittance to mine Ethereum cryptocurrency

• Monsanto Employee Stole Trade Secret

• Patchwork APT caught in its own web

• Codex Exposed: Exploring the Capabilities and Risks of OpenAI’s Code Generator

• This Week in Security News – January 7th, 2022

• Norton antivirus installs cryptominer on devices but there is a way out

• Protect Your Privacy & Improve Your Pentesting in 2022 with Predator-OS>

• 5 Things New with Bug Bounty Programs

• Why You Need an Adversary-focused Approach to Stop Cloud Breaches

• 4 healthcare cloud security recommendations for 2022

• NGA looks to tech to support unclassified workforce

• QNAP: Get NAS Devices Off the Internet Now

• How to Proactively Limit Damage From BlackMatter Ransomware

• 2022: The threat landscape is paved with faster and more complex attacks with no signs of stopping

• Google Project Zero 0-Days Exploited In-The-Wild

• Victims of the $200 million BitMart hack say the crypto exchange still hasn’t paid them back

• Sophisticated phishing scheme spent years robbing authors of their unpublished work

• Is Your Business At Risk From APT Threats?

• Eight New macOS Malware Families Emerged in 2021

• Log4Shell-like security hole found in popular Java SQL database engine H2

• France Fines Google And Facebook €210m Over User Tracking

• Bitcoin Prices Fall To Lowest In Months After US Fed Remarks

• Log4J-Related RCE Flaw In H2 Database Earns Critical Rating

• QNAP: Get NAS Devices Off The Internet Now

• Google and Facebook fined $240 million for making cookies hard to refuse

• Russian IT business will increase spending on data protection in the new year

• Ransomware attack on Finalsite shuts down numerous Universities and Schools in US

• Monitoring malware abusing CVE-2020-1599

• Autonomous Drone Saves The Life Of Heart Attack Victim

• Army to Deploy Virtual Reality Capabilities to Combat Sexual Assault

• Log4j flaw: Attackers are targeting Log4Shell vulnerabilities in VMware Horizon servers, says NHS

• Log4J-Related RCE Flaw in H2 Database Earns Critical Rating

• Log4Shell-Like Vulnerability Found in Popular H2 Database

• Threat actor targets VMware Horizon servers using Log4Shell exploits, UK NHS warns

• Remembering the Selective Draft Law Cases

• NASA Director Parimal Kopardekar Twitter Handle hacked

• Purple Fox Backdoor Identified in Malicious Telegram Installers

• Bitcoin Slumps To Lowest Level In Fourth Months

• Hackers Use Video Players in Websites to Steal Sensitive User Information

• The Most Important Security Takeaway from the October Facebook Outage

• Google acquisition of Siemplify is a knockout punch for standalone SOAR

• Attack Misuses Google Docs Comments to Spew Out “Massive Wave” of Malicious Links

• 7 Predictions for Global Energy Cybersecurity in 2022

• JNDI Vulnerability in H2 Database Similar to Log4Shell

• December 2021 Cyber Attacks Statistics

• Cyber Ninjas Faces Fine Over Arizona Election Review Records

• Enterprises Worry About Increased Data Risk in Cloud

• Ransomware Attack Suffered by FinalSite Shuts Down Thousands of Websites

• New Report Shows that Threat Actors Use Google Docs Comment Feature to Send Malicious Links

• Morgan Stanley to Pay $60M to Resolve Data Security Lawsuit

• Trump’s ‘Truth Social’ App To Launch Next Month

• What Is Zero Trust Security and Why Is It Necessary?

• Polish Leader Admits Country Bought Powerful Israeli Spyware

• Online Pharmacy Service Ravkoo Discloses Data Breach

• California Man Pleads Guilty Over Role in $50 Million Fraud Scheme

• Norton’s Antivirus Product Now Includes an Ethereum Miner

• NoReboot attack fakes iOS phone shutdown to spy on you

• Swiss Army Knifes WhatsApp at Work

• Thousands of School Websites Go Offline Due to Ransomware Attack on Finalsite

• Norton Crypto, the controversial cryptomining feature of Norton 360

• Application Control 101: Definition, Features, Benefits, and Best Practices

• Transferring Quantum Maestro Knowledge and Delivering Real-World Experience

• Chinese scientist pleads guilty to stealing US agricultural tech

• Researchers Warn of New Log4Shell-Like Java Vulnerability

• Thousands of Schools Impacted After IT Provider Hit by Ransomware

• Election Fraud Firm to Shut Down After Claims Debunked

• Cyber Attacks Are A Threat To The Energy Sector

• COVID Test Data Breach at British School

• Log4Shell-like Critical RCE Flaw Discovered in H2 Database Console

• Over 3.7 million accounts were compromised in the FlexBooker data breach

• T-Mobile Users Suffer SIM Swapping Attacks | Avast

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• France Fines Google, Facebook €210 Million Over Privacy Violating Tracking Cookies

• Countries that were less affected than U.S. by cyberattacks could see more of them in 2022: Analyst

• Salesforce mandates MFA by default

• Web Skimmer Code was Injected Into 100 Real Estate Websites

• France slaps €210m fine on Facebook and Google

• Data of 1.1m accounts from 17 companies compromised in Cyber Attacks

• January 2022 Patch Tuesday forecast: Old is new again

• China’s next regulatory target — algorithms, the secret of many tech giants’ success

• Elephant Beetle Hacking Group Attack Organizations To Steal Financial Data

• Night Sky, a new ransomware operation in the threat landscape

• Network and security teams must collaborate to successfully deliver digital transformation

• Supply chain cybersecurity: Pain or pleasure?

• More Than 1.3 Million People Affected by Broward Health Data Breach

• C5 Acquisition Corporation Announces Pricing of $250 Million Initial Public Offering

• Spok Rated as #1 Secure Healthcare Provider Communications Platform for the Fifth Consecutive Year

• Approov Named CyberSecured Award Winner for Best-In-Class Mobile API Threat Protection

• Antivirus software market to reach $4.54 billion in 2025

• Enterprise PKI automation: The modern approach to certificate lifecycle management

• 2022-01-06 – TA551 (Shathak) pushes IcedID (Bokbot)

• 2022-01-05 – TA551 (Shathak) pushes IcedID (Bokbot) with Cobalt Strike

• Rights Group Verifies Polish Senator Was Hacked With Spyware

• Illinois fertility clinic, online pharmacy giant Ravkoo report data breaches

• CES 2022: More sensors than people

• Covid Test Data Breach at British School

• Microsoft Updates Log4j Directive- Gurucul Comments

• Log4Shell log4j Remote Code Execution – The COVID of the Internet

• Appeals court deals another blow to Biden’s contractor vaccine mandate

• IARPA’s SMART e-PANTS to design responsive clothing

• JFrog researchers find JNDI vulnerability in H2 database consoles similar to log4shell

• Facebook Restores Account Of Conservative Book Publisher After Permanently Banning It

• Cybersecurity Outlook 2022: Third-party, Ransomware and AI Attacks Will Get Worse

• Google Docs Comments Weaponized in New Phishing Campaign

• North Korea-linked Konni APT targets Russian diplomatic bodies

• Segra names Kevin T. Hart as CEO

• Netreo appoints Josh Chessman as VP of Products

• Shane Sims joins Kivu Consulting as CEO

• Ermetic appoints Avi Israel as CFO

• How are Police Using Drones?

• “Worst in Show Awards” Livestreams Friday: EFF’s Cindy Cohn and Cory Doctorow Will Unveil Most Privacy-Defective, Least Secure Consumer Tech Products at CES

• There’s massive opportunity for cybersecurity, says Crowdstrike CEO

Generated on 2022-01-08 23:55:21.816879