IT Security News Daily Summary 2022-03-18

• 2022-03-16 – Pcap and malware for an ISC diary (Qakbot)

• Half of Orgs Use Web Application Firewalls to Paper Over Flaws

• This Week in Security News – March 18, 2022

• Code-Sabotage Incident in Protest of Ukraine War Exposed Open Source Risks

• China-linked threat actors are targeting the government of Ukraine

• Friday Squid Blogging: The Costs of Unregulated Squid Fishing

• Top 10 Reasons Cyber Defense Firms Should Hire Veterans

• This browser-in-browser attack is perfect for phishing

• How crowdsourced data helps cities fight litter

• Agencies Warn on Satellite Hacks & GPS Jamming Affecting Airplanes, Critical Infrastructure

• Menlo Security: Less Than Three in 10 Organizations Are Equipped to Combat Growing Wave of Web-Based Cyber Threats

• A Chance to Raise Shields Right

• CyCognito Launches Exploit Intelligence

• Data Deletion Methods: What’s Best for Sensitive Data?

• Mac Studio vs. Mac Pro Buyer’s Guide

• Hands-On With the New M1 iPad Air

• Targeting Satellite? CISA, FBI Warns of Attacks on SATCOM Network Providers

• Best encryption software 2022: Protect your data

• Best security camera 2022: Secure a home, inside and out

• DarkHotel APT Targets Wynn, Macao Hotels to Rip Off Guest Data

• Cyclops Blink malware sets up shop in ASUS routers

• Android Trojan Spotted in Multiple Applications on Google Play Harvesting User Credentials

• Emotet Malware Campaign Masquerades the IRS for 2022 Tax Season

• The IC’s 4-year emerging tech investment plan

• Teleworking DOD civilians may be recalled to in-person work

• Some states are making it harder to vote, some are making it easier – but it’s too soon to say if this will affect voter turnout in 2022

• Financial regulator says use of crypto helps—not hurts—ransomware investigations

• High-Severity Vulnerabilities Patched in BIND Server

• OpenSSL patches infinite-loop DoS bug in certificate verification

• Russian Hackers Allegedly Compromise Ukrainian News Sites, Displaying ‘Z’ Symbol

• A Third of Malicious Logins Originate in Nigeria

• Ugandan Writers Charged with Cyber Stalking President

• Written IT Security Policies: Why You Need Them & How to Create Them

• Security Teams Struggle to Get Started With Zero Trust

• Sandworm APT Hunts for ASUS Routers with Cyclops Blink Botnet

• JavaScript apps hit with pro-Ukraine supply chain attack

• Satellite Networks Worldwide at Risk of Possible Cyberattacks, FBI & CISA Warn

• MacRumors Giveaway: Win a Custom Colored Magic Mouse and Magic Keyboard From ColorWare

• Chinese Tech Companies Deepen Roots in Russia in Spite of U.S. Sanctions

• Mobile App Data Found Exposing API’s & Data In 1,000’s Of Cloud Databases

• VA plans new health record deployments, despite critical watchdog reports

• Arkansas Sues Health System for Abandoning Patient Files

• CISA Adds 15 Known Exploited Vulnerabilities, Expert Weighs In

• A Worldwide Fraud Campaign Used Targeted Links to Rob Millions of Dollars

• An Entry-Level Cybersecurity Certification: Why Every Employer Should Want Their Staff to Have One

• Igniting Adoption of a Secure Software Development Lifecycle – A Guide for Secure Software Champions

• DevSecOps code process

• US Critical Infrastructure Targeted by AvosLocker Ransomware

• Netflix to Charge Password Sharers

• Hackers Target Bank Networks with new Rootkit to Steal Money from ATM Machines

• Apple Highlights iPad Air M1 Chip, Colors and Other Features in New Ad

• How to protect RDP

• Satellite jamming by Russia leads to aircraft rerouting in Europe

• Why Ransomware Attacks Steer Clear of the Cloud

• CynergisTek Will Host Conference Call on Thursday, March 24, 2022, To Discuss Fourth-Quarter and Full-Year 2021 Financial Results

• Online Safety Bill’s provisions for “legal but harmful” content described as “censor’s charter”

• Exotic Lily is a business-like access broker for ransomware gangs

• Caketap, a new Unix rootkit used to siphon ATM banking data

• Best Custom PC Builder Websites for Building PC in 2022

• PwnKit, or How 12-Year-Old Code Can Give Root To Unprivileged Users

• Google Analyzes Activity of ‘Exotic Lily’ Initial Access Broker

• Cisco Secure Endpoint goes Pro

• Agencies Aware Of Hacking Threats To US, Allied Satellite Networks

• Google Blows Lid Off Conti, Diavol Ransomware Ops

• SAP Community Website Leaks Member Data To Savvy Users

• Why We Haven’t Seen Debilitating Cyberwar In Ukraine

• Attacks Are Crippling Russian Government Websites

• Linux Patch Management Primer – Challenges, Pros, and Cons

• Deepfake Zelenskyy video surfaces on compromised websites

• Google Blows Lid Off Conti, Diavol Ransomware Access-Broker Ops

• TransUnion Confirms Data Breach at South Africa Business

• CRI-O Security Update for Kubernetes

• Red TIM Research (RTR) team discovers a bug on Ericsson Network Manager

• Regulatory compliance at scale with Red Hat Insights

• CRI-O Security Update for Kubernetes

• Lock Adapter to Secure Mac Studio Coming Soon

• AWS To Spend £1.8bn On UK Data Centres

• Cyber Threats and The Ukraine Conflict | Avast

• Cygna Labs completes acquisition of Diamond IP for added security expertise

• The Road Ahead for Cyber and Infrastructure Security

• Lawmakers traded defense, energy and cybersecurity stocks ahead of Russia’s Ukraine invasion

• Meet the Young Women Tackling Gender Bias in Cybersecurity

• How to Protect Yourself from March Madness Scams

• Best security camera 2022: Secure your home, inside and out

• Gh0stCringe RAT Targeting Database Servers in Recent Attacks

• Apple Studio Display Runs Full Version of iOS 15.4

• Mac Studio and Studio Display Now Available for Same-Day Pickup at Select Apple Stores

• Deals: Shop Record Low Prices on iPad Mini, Apple Watch Series 7, and iPad Pro Magic Keyboard

• CISOs face ‘perfect storm’ of ransomware and state-supported cybercrime

• Experts Find Some Affiliates of BlackMatter Now Spreading BlackCat Ransomware

• Russia-linked Cyclops Blink botnet targeting ASUS routers

• 5 Actions to Comply with NCSC’s New BYOD Rules

• 76,000 online scams taken down after tip-offs, but hacking incidents still on the rise

• CISA and FBI warn over threats to satellite communications networks

• Franchises, partnerships emerge in Ransomware-as-a-Service operations

• SATCOM Cybersecurity Alert Issued as Authorities Probe Possible Russian Attack

• LG Working to Bring OLED Displays to Future iPad and MacBook Models

• Porsche Considering ‘Exciting’ Joint Projects With Apple

• 76,000 scams taken down through email reporting

• US Critical Organizations Alerted of Threats to SATCOM Networks by CISA and FBI

• SAP community website leaks member data to savvy users

• Ofcom Revokes RT’s Broadcast Licence

• Australia Sues Meta Over Facebook Scam Adverts

• Top 9 Git Secret Scanning Tools for DevSecOps

• Aircraft Disrupted by Satellite Jamming Following Russian Invasion

• Cyclops Blink Malware Expands to Target Asus

• NCSC Launches Awareness Campaign to Strengthen Password Practices

• Conti Leaks Reveal the Ransomware Group’s Links to Russia

• Why Vaccine Cards Are So Easily Forged

• New “initial access broker” working with Conti gang

• The TTPs of Conti’s initial access broker

• Ofcom Revokes RT’s Broadcast Licence

• Australia Sues Meta Over Facebook Scam Adverts

• Top 9 Git Secret Scanning Tools for DevSecOps

• Cloud-Based Email Threats Surge 50% in 2021

• Aircraft Disrupted by Satellite Jamming Following Russian Invasion

• Cyclops Blink Malware Expands to Target Asus

• Russia facing severe IT crisis with data storage, cyber security and other software issues

• FBI sets up a Virtual Assets Unit to stop cyber crime

• Phishers exploit Ukraine conflict to solicit crypto

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• CISA Has Added 15 New Flaws to the List of Actively Exploited Vulnerabilities

• Google Uncovers ‘Initial Access Broker’ Working with Conti Ransomware Gang

• New infosec products of the week: March 18, 2022

• Microsoft releases open-source tool for checking MikroTik Routers compromise

• Why EDR is not sufficient to protect your organization

• How prepared are organizations to face a ransomware attack on Kubernetes?

• Top 5 myths businesses believe about bots

• The problem with multiple cloud security tools: Alert fatigue and burnout

• New Variant of Russian Cyclops Blink Botnet Targeting ASUS Routers

• How to build and retain a strong IT team

• IoT in manufacturing market to reach $87.9 billion by 2026

• Semperis Wins Frost & Sullivan’s Competitive Strategy Leadership Award for Global Active Directory Security and Recovery Industry Excellence

• Lenovo Study: Three in Five CIOs Would Replace Half or More of Their Current Technology If Given Opportunity

• The Dilemma of Defense in Depth

• Catching up with Kaleb Worku, 2020 KnowBe4 Black Americans in Cybersecurity Scholarship Recipient

• Working with MSSPs to optimize XDR

• NSW Supreme court orders local elections impacted by iVote failure to be recast

• Swissbit iShield FIDO2 protects access to applications and online services

• Progress WhatsUp Gold reduces the risk of threat actors and infrastructure compromise

• Actiphy ActiveVisor v.7 monitors overall system protection of the backup source PCs

• Infobip introduces SMS and WhatsApp messaging for Adobe Commerce clients

• ZPE Systems and TD SYNNEX join forces to address modern business demands

• Best Bluetooth tracker 2022: AirTag and other alternatives

• All in a day’s work: Google details Exotic Lily access broker for ransomware gangs

• Tech execs could face jail time under revised UK Online Safety Bill

• Cymulate partners with New York University to offer offensive and continuous security validation training

• NTT collaborates with Schneider Electric to launch Private 5G network trial

• Philips partners with SecureLink to protect healthcare systems from sophisticated cyber threats

• node-ipc NPM Package sabotage to protest Ukraine invasion

• Netrix acquires Edrans to expand portfolio of public cloud solutions

• Platform9 hires Vishwa Kapadia as CPO

• Raytheon Technologies names Barbara Borgonovi as SVP of Corporate Strategy & Development

• David Stoicescu joins Deepwatch as CISO

• How to use the Gartner® 2022 Strategic Roadmap for Data Security Platform Convergence

• UJET expands global operations and announces new hires

• Pro-Ukraine ‘Protestware’ Pushes Antiwar Ads, Geo-Targeted Malware

• 6 Reasons Not to Pay Ransomware Attackers

• IT Security News Daily Summary 2022-03-17

• Facebook Removes Viral Deepfake Video Of Ukrainian President

• Strengthening Cybersecurity of SATCOM Network Providers and Customers

• Apple Using Streamlined Purchase Process for T-Mobile and AT&T iPhone SE Buyers

• First Mac Studio and Studio Display Orders Begin Arriving to Customers in Australia and New Zealand

• Pentagon releases JADC2 implementation plan

• North Carolina launches cybersecurity task force

• ThreatMapper Updated With New Scanning Tools

• Strengthening Cybersecurity of SATCOM Network Providers and Customers

• Ukranian News Channel Hacked to Run Deepfake video of President Zelensky

• Report: Bots cost businesses millions of their online revenue

• OMB kicks off search for new deputy federal CIO

• Intel launches research, education grant program for Ohio chip manufacturing

• Best Bluetooth tracker 2022: Never lose your keys again

• What Microsoft Defender Antivirus features are on Windows?

• Facebook, YouTube Remove Zelensky Deepfake Video

• Cybersecurity has 53 unicorns. Here are 10 to watch

• Has Trickbot gang hijacked your router? This scanner may have an answer

• The HP cybersecurity acquisition made for a world of increasing malware threats

• Has Trickbot gang hijacked your MikroTik router? This scanner may have the answer

• Lawmakers want answers on FOIA backlogs

• M1 Ultra Doesn’t Beat Out Nvidia’s RTX 3090 GPU Despite Apple’s Charts

• VT4Browsers++ Any indicator, every detail, anywhere

• Why You Need Both IT and OT Cybersecurity

• How to neutralize security threats to your cloud native applications (VB On-Demand)

• IARPA project aims to identify people from drones by more than just their face

• Nok Nok Labs Unveils S3 Authentication Suite

• Firefly Announces Release of ValidIaC Open Source Solution

• Microsoft Data Centre Region In Finland To Heat Nearby Cities

• Dev Sabotages Popular NPM Package to Protest Russian Invasion

• Sandworm APT ramps up Cyclops Blink botnet with Asus routers

• Glasswall Launches Freemium Version of its Desktop Content Disarm and Reconstruction App

• Titaniam Announces Completion of Product Suite

• Cloudflare Announces API Gateway

• Saint Patrick’s Day Deals: Save on Apple-Related Accessories From Mophie, Satechi, Casely, More

• Sony’s New LinkBuds vs. Apple’s AirPods 3

• Network Security 101 – Definition, Types, Threats, and More

• Flipped procurement gives city easy access to innovative solutions

• Todyl Banks $28M Series A Investment

• Russian Court Overturns Import Ban On Samsung Smartphones

• Upcoming EU Sideloading Bill Would ‘Cripple the Privacy and Security Protections’ iPhone Users Expect, Says Apple

• Got rats? These cities trap ’em and zap ’em

• Best DevSecOps Tools

• UKG Faces Payroll Violations Class Action Lawsuit in Multiple U.S. District Courts

• VA’s new health record still putting patients at risk

• Apple Executives Discuss How Mac Studio Fills the Gap Between iMac and Mac Pro

• Forrester positions KnowBe4 as a leader in security awareness and training solutions

• Eugene Kaspersky Labels BSI Decision ‘Unfair, And Outright Wrong’

• Ukrainian Secret Service Arrested Hacker Helping Russian Troops

• Hundreds of GoDaddy’s Managed WordPress Sites Infected With Same Backdoor Payload

• Microsoft Releases Open Source Tool for Securing MikroTik Routers

• LokiLocker ransomware crew bursts onto the scene

• Phishers Using Ukraine Invasion to Solicit Cryptocurrency

• Stopping Russian Cyberattacks at Their Source

• Anonymous continues to support Ukraine against the Russia

• The Chatter Podcast: Arctic Security and Cooperation with Marisol Maddox

• Letter to Iran, Regarding the Regulatory System for Cyberspace Services Bill

• EFF Tells E.U. Commission: Don’t Break Encryption

• Dell Technologies Hit Record Full-Year Revenue of $101.2 Billion, up 17%

• Meta shares how it detects silent data corruptions in its data centres

• Software Supply Chain Weakness: Snyk Warns of ‘Deliberate Sabotage’ of NPM Ecosystem

• FBI Launches Virtual Assets Unit

• China’s Government Is Learning From Russia’s Cyberattacks Against Ukraine

• LG’s UltraFine 5K Display Will Be Returning as Alternative to Apple’s Studio Display

• A Leader in multiple Zero Trust security categories: Industry analysts weigh in

• Women in Cyber Webinar – Tackling Gender Bias and Defining Success

• SpecterOps BloodHound Enterprise Now Supports Attack Path Management for Microsoft Azure

• Maximus Names Scott Barr as Senior Vice President for Federal Consulting

• ISO 27002 2013 to 2022 mapping

• 5 Threat Intelligence Trends

• Russian Cyclops Blink Botnet Launches Assault Against Asus Routers

• CafePress Fined For Covering Up 2019 Customer Info Leak

• Misconfigured Firebase Databases Exposing Data In Mobile Apps

• Hackers Provide Livestream Of Dozens Of Cameras Inside Russia

• Be Ready To Lose All Your Money In Crypto, EU Regulators Warn

• Several QNAP NAS Devices are Vulnerable by Dirty Pipe Linux Bug

• Thousands of Secret Keys Discovered in Leaked Samsung Source Code

• Malware threat alert for websites hosted on GoDaddy

• Ditching LastPass? Here are some alternatives to try

• As tax deadlines approach, Emotet malware disguises itself in an IRS email

• Apple-Backed ‘Matter’ Smart Home Standard Again Delayed Until Fall 2022

• Senate Banking Committee holds hearing on crypto and illicit finance

• Government Introduces Amended Online Safety Bill

• These four types of ransomware make up nearly three-quarters of reported incidents

• Cequence Security Report Reveals Top 3 API Attack Trends, Expert Weighs In

• Expert Insight On New Features Released By Instagram To Protect Young Users

• New Linux Botnet Exploding Log4J, DNS Tunnelling Used To Conceal Comms Traffic

• Misconfigured Firebase Databases Exposing Data in Mobile Apps

• US Passes “Game-Changing” Cyber Incident Reporting Legislation

• Apple Studio Display Reviews: ‘A Confounding Miss’

• PSA: Studio Display Power Cable is Non-Removable

• Apple Says Improvements to Studio Display’s Webcam Coming in Software Update After Several Poor Reviews

• CSO Says “New LokiLocker Ransomware Is An Identity Problem”

• FTC Fines CafePress After Data Breach – Expert Reaction

• Gh0stCringe RAT makes database servers squeal for protection

• Top 5 Cybersecurity Podcasts to Follow in 2022

• Most NASA Systems at Risk From Insider Threats: Audit

• SolarWinds Warns of Attacks Targeting Web Help Desk Users

• S3 Ep74: Cybercrime busts, Apple patches, Pi Day, and disconnect effects [Podcast]

• Cut Down on Alert Overload and Leverage Layered Security Measures

• Russian Cyclops Blink botnet launches assault against Asus routers

• Microsoft: Here’s how this notorious botnet used hacked routers for stealthy communication

• Reporting Mandates to Clear Up Feds’ Hazy Look into Threat Landscape – Podcast

• Popular NPM Package Updated to Wipe Russia, Belarus Systems to Protest Ukraine Invasion

• macOS Monterey 12.3 Update Bricking Macs That Have Had Logic Board Replacements

• Deals: Take $250 Off Apple’s 14-Inch MacBook Pro With All-Time Low Prices

• Mac Studio Reviews: Faster Than a $13,000 Mac Pro

• Clouding the issue: what cloud threats lie in wait in 2022?

• How CAPTCHAs can cloak phishing URLs in emails

• NIST Releases ICS Cybersecurity Guidance for Manufacturers

• The Golden Hour of Incident Response

• DirtyMoe Botnet Gains New Exploits in Wormable Module to Spread Rapidly

• Ukraine SBU arrested a hacker who supported Russia during the invasion

• Selective Service Reform AWOL in 2022 NDAA (again); What Happens Now?

• FBI catches up with one of its Most Wanted, arrests head of advance-fee crime network

• How is the CISSP-ISSMP Exam Changing?

• Cloudflare and CrowdStrike partner to accelerate shift to zero trust security

• Cyber Security Takeover May Harm Competition: UK Regulator

• ‘LokiLocker’ Ransomware Packs Data Wiping Capabilities

• Public and Private Sector Security: Better Protection by Collaboration

• Enhancing DLP With Natural Language Understanding for Better Email Security

• WordPress Releases Security Update

• Reputable Analyst Doubles Down on Claim Apple Will Unveil 27-inch Mini-LED Product in June

• Mobile apps are exposing your data

• New ransomware threatens to wipe Windows PCs

• Gh0stCringe Malware Impacts Unsecured Microsoft SQL, MySQL Servers

• Death of the Password? FIDO Alliance Reveals Its New Plan

• WordPress Releases Security Update

• Trickbot uses compromised MikroTik routers as C2 communication proxies

• SolarWinds Issues Warning on Possible Web Help Desk Instances Attacks

• Brit data regulator fines five cold-calling fiends £405k

• ‘Everyone loses’: This new ransomware threatens to wipe Windows PCs if its victims don’t pay up

• Cloudflare debuts Friendly Bot validation service

• Raspberry Pi Users Urged to Change Default Passwords as Attacks Surge

• Conversation Hijacking Soars 270% to Enable BEC

• Landmark Online Safety Bill Introduced to UK Parliament

• Conti Leak: A Ransomware Gang’s Chats Expose Its Crypto Plans

• TrickBot Malware Abusing MikroTik Routers as Proxies for Command-and-Control

• B1txor20 Linux botnet use DNS Tunnel and Log4J exploit

• “Change Password”

• 5G iPhone SE Shipments Expected to Reach Up to 30 Million Units This Year

• Ex CafePress owner fined $500,000 for ‘shoddy’ security, covering up data breach

• Russia Uses Deepfake of Zelensky to Spread Disinformation

• Disability service provider suffers cyber-attack

• Your mobile apps are exposing your data

• Netflix To Start Charging For Password Sharing

• Ex CafePress owner fined $500 million for ‘shoddy’ security, covering up data breach

• TrickBot Malware Abusing Hacked IoT Devices as Command-and-Control Servers

• Alleged iPhone 14 CAD Renders Reveal Virtually No Design Changes With Same Notch and Rear Camera Design

• Apple Peek Performance Review – Intego Mac Podcast Episode 231

• Crypto fundraising for Ukraine found on the Darknet, used by cyber criminals for fraud

• Meta faces $19m fine over Data Breach

• UK Markets authority concerned about NortonLifeLock and Avast acquisition deal

• Ukraine Secret Service Arrests Hacker Helping Russian Invaders

• Do you know what your supply chain is and if it is secure?

• Hacking Robots: The Future of Production Poses a Security Risk

• Critical Remote Code Execution Vulnerability Found In Parse Server

• FBI Warns that Hackers Gain Network Access by Exploiting MFA and “PrintNightmare” Vulnerability

• New Vulnerability in CRI-O Engine Lets Attackers Escape Kubernetes Containers

• How to plan for increased security risks resulting from the Great Resignation

• Top data governance challenges and strategies for high-growth startups

• Google could ask for your licence or passport on YouTube and Google Play in Australia

• Four key risks exacerbated by Russia’s invasion of Ukraine

• Healthcare cybersecurity trends: Organizations not quite ready to deal with threats

• CDEK (unverified) – 19,218,203 breached accounts

• Severity of mobile threats rising, 10+ million mobile endpoints impacted

• Attackers have come to love APIs as much as developers

• Realizing the importance of data literacy

• Fortanix Supports Government Agencies to Bolster Federal Data Security with Confidential Computing

• CSC Unveils 3D Domain Monitoring Solution on DomainSec℠ Platform

• Former FBI Cyber Agent, Author and Keynote Speaker Scott Augenbaum Headlines New Cybersecurity Webinar Series on “Building The Zero Trust Concept” Hosted by Cyemptive Technologies

• (ISC)² PULSE SURVEY: LOG4J REMEDIATION EXPOSES REAL-WORLD TOLL OF THE CYBERSECURITY WORKFORCE GAP

• BlackCat ransomware

• To Governance and Beyond: Cybersecurity as a Journey

• IaaS market to grow steadily by 2031

• Indonesian Interbank Network Giant, ALTO, Adds ACI Worldwide Fraud Management to Enhance National Payment Experience

• Devil-may-care Lapsus$ gang is not the aspirational brand infosec needs

• CSC 3D Domain Monitoring enables enterprises to identify suspicious domains created by third parties

• Deepfence ThreatMapper 1.3.0 allows users to scan workloads and hosts for sensitive secrets

• Codenotary Cloud enhancements provide end-to-end software supply chain security

• Cloudflare API Gateway increases security of devices and systems for enterprise customers

• Ostrich Cyber-Risk Birdseye identifies organization’s financial and operational risks

• Russia may aspire to a China-style internet, but it’s a long way off

• Cyclops Blink Sets Sights on Asus Routers

• Motorola Solutions Video Intercom Pro enhances building security for organizations

• Cisco and NetApp introduce FlexPod XCS to increase hybrid cloud connectivity

• IDnow partners with Interpol to share expertise via global training programmes

• Noname Security collaborates with HighPoint to offer API security solutions for businesses

• Eric Hanson joins OneSpan as CMO

• Invicti Security appoints Steven Fitz as CRO

• CSW acquires CYR3CON IP to provide organizations with predictive insights into exploitable vulnerabilities

• Booz Allen Hamilton acquires EverWatch to accelerate analytics capabilities for clients

• Top Security Orchestration, Automation and Response (SOAR) Solutions for 2022

• Kion appoints Brad Herold as SVP of Sales

• Zilla Security hires Melodye Mueller as CMO

Generated on 2022-03-18 23:55:31.739952