IT Security News Daily Summary 2022-03-29

• CYE launches new group to provide advanced cyber architecture

• Hackers Steal Over $600M in Major Crypto Heist

• Former Facebook Exec Warns Of “Privacy And Security Nightmare” For WhatsApp

• Private Equity Firm Led by Mnuchin Acquires Mobile Security Vendor Zimperium

• My Child Wants a Phone. Should I Say ‘Yes’?

• Biden’s budget calls for increases in key state and local programs

• Zlib data compressor fixes 17-year-old security bug – patch, errrm, now

• Hardware upcycling: A new option for ‘rip and replace’

• Log4JShell Used to Swarm VMware Servers with Miners, Backdoors

• Ronin Network Ethereum theft is ‘largest-ever DeFi exploit,’ investigator says

• It’s time for another look at election security – through a technological lens

• Smart city pilots target workflow, analysis challenges

• How to put cybersecurity sustainability into practice

• FBI confirms increase in Russian cyber scanning of U.S. companies

• Russia threatens ‘grave consequences’ over cyberattacks, blames U.S.

• Labor Dept. seeks $3.4 billion for UI programs, including IT modernization

• Senator questions crypto companies’ impact on local communities

• Atlas VPN Debuts MultiHop+ for Added Layer of Internet Privacy and Security

• Singapore offers certification scheme to tag companies with robust security posture

• Cloaked Snags $25M Funding to Tackle Data-Sharing Privacy

• With War Next Door, EU is Warned on Cybersecurity Gaps

• CriticalStart Releases Enhanced Capabilities for Microsoft 365 Defender

• New spear phishing campaign targets Russian dissidents

• Ex-Trump Treasury Secretary’s PE Firm Buys Mobile Security Company Zimperium for $525M

• VMware vCenter Server Vulnerability Can Facilitate Attacks on Many Organizations

• Biden Requests Nearly $11B for Federal Cybersecurity Spending

• 1-in-6 election officials report being threatened

• Cyberattack in New York City, Sensitive Data of 820,000 Students was Exposed

• One arrested in ₹1,200-Crore Crypto Fraud Case, 900 Investors Scammed

• Muhstik Botnet Targeting Redis Servers by Exploiting Recently Published Bug

• Hackers steal $620M in Ethereum and dollars from Axie Infinity maker Sky Mavis’ Ronin network

• Cryptocurrency cyber attacks on the rise as industry expands

• Zlib data compressor fixes 17-year-old security bug – patch, errr, now

• Personal Data of 620 FSB Officers Published Online

• NetAbstraction and Jacobs Expand Alliance to Offer Advanced Cyber Solutions to Commercial Clients

• Anchore to Contribute Grype Open Source Vulnerability Data to the Global Security Database

• KSOC Addresses Critical Components of Kubernetes Security Detailed in Federal Report

• Gartner Analyst Joins Black Kite as New Cyber Risk Evangelist

• PKI Solutions Announces $2M Credit Facility from Northwest Bank

• Cyera Launches From Stealth With $60M to Identify, Secure, and Remediate Cloud Data Security Risks

• Forcing WhatsApp and iMessage to Work Together Is Doomed to Fail

• 3 steps to secure your multicloud and hybrid infrastructure with Azure Arc

• Ransomware driving you to distraction? Here’s how to recover

• Russian cybercriminals are finding it hard to make a living

• Europe’s quest for energy independence – and how cyber‑risks come into play

• Mnuchin’s private equity firm buys security startup Zimperium for $525m

• Yandex is Sending iOS Users’ Data to Russia

• Podcast Episode: Securing the Internet of Things

• Retro Computing Museum Destroyed By Russian Bombing

• 6 takeaways On cybersecurity policy from the president’s FY 2023 budget

• Hackers are getting faster at exploiting zero day flaws. That’s going to be a problem for everyone

• Why Bullying Employees Into Compliance Won’t Work

• Dental Practice Fined for Sharing Patient Data on Social Media

• 82% of Public Sector Applications Contain Security Flaws

• Mitigating Attacks Against Uninterruptable Power Supply Devices

• Compromised WordPress sites launch DDoS on Ukrainian websites

• Creepy Spyware Company Goes Broke

• Exchange Servers Speared In IcedID Phishing Campaign

• Ukraine Internet Provider Suffers Cyber Attack

• Lapsus$ And SolarWinds Hackers Both Use The Same Old Trick To Bypass MFA

• Ukraine Security Agency Shutters Russian Disinformation Bot Farms

• Ukraine security agency shutters Russian disinformation bot farms

• Introducing the new Azure Front Door: Reimagined for modern apps and content

• US Senate Approves $52 Billion US Chips Act

• Critical Vulnerabilities Found in Microsoft Defender for IoT

• Hackers Gaining Power of Subpoena Via Fake “Emergency Data Requests”

• Europe and US Agree Trans-Atlantic Data Sharing Deal

• Using Russian tech? It’s time to look at the risks again, says cybersecurity chief

• Exchange Servers Speared in IcedID Phishing Campaign

• Deploy an information barrier policy for Microsoft Teams

• Exploring the Intersection of Physical Security and Cybersecurity

• 2 New Security Incidents Happening Now

• IcedID Targets Msoft Exchange Hijacking Campaign

• White Increase Cybersecurity Budget

• How To Avoid Investment Scams On Social Media, As 25% Of UK Victims Are Youths Online

• 5 Best GPU Stress Testing/Benchmarking Softwares in 2021

• Fortinet shares could gain 17% from here as cyber threats mount, Barclays says

• Attacks on Ukraine communications are a major part of the war

• National Backup Day: Don’t Forget the Basics

• Low-Code/No-Code Tools Are Popular but Untrusted

• New Hacking Campaign by Transparent Tribe Hackers Targeting Indian Officials

• IceID trojan delivered via hijacked email threads, compromised MS Exchange servers

• Threat Hunting Journal – March 2022 E.O.M Edition

• Elon Musk Considers Building New Social Media Platform

• Log4Shell exploited to infect VMware Horizon servers with backdoors, crypto miners

• Ukraine destroys five bot farms that were spreading ‘panic’ among citizens

• Transparent Tribe APT returns to strike India’s government and military

• Sophos Warns of Attacks Exploiting Recent Firewall Vulnerability

• Six Ways to Improve Infosec in 2022

• Researchers release car exploit that allows hackers to lock, unlock and start Honda’s

• White House Proposes $10.9 Billion Budget for Cybersecurity

• Mobile security firm Zimperium to be acquired for $525M, eyes IPO

• Ukraine Suffers Significant Internet Disruption Following Cyber-Attack

• Stop Tracking Your Loved Ones

• Privid: A Privacy-Preserving Surveillance Video Analytics System

• A Detailed Look at the Conti Ransomware Gang

• SunCrypt Ransomware Still Alive in 2022

• Looking over your shoulder: when small mistakes have big consequences

• Why Organizations Should Take Cloud-Based Cryptocurrency-Mining Attacks Seriously

• Ukraine’s Ukrtelecom Suffers Outage After Cyberattack

• Australian Budget 2022 delivers AU$9.9 billion for spicy cyber

• SonicWall Patches Critical Vulnerability in Firewall Appliances

• Sanctions Hitting Russian Cyber-Criminals Hard

• Critical Sophos Firewall RCE Vulnerability Under Active Exploitation

• Threat Actors Hijack Email Reply Chains on Vulnerable Exchange Servers to Deliver IcedID Malware

• Cybercrooks target students with fake job opportunities

• Major Cyber Attack launched on Ukraine Ukrtelecom

• Racoon stealer malware suspends its operations due to war on Ukraine

• Is the global food supply chain in danger?

• March 2022 Web Server Survey

• Mozilla unveils vision for web evolution

• Security Incidents Reported to FCA Surge 52% in 2021

• European Police Bust Multimillion-Dollar Investment Fraud Gang

• Experts Detail Virtual Machine Used by Wslink Malware Loader for Obfuscation

• New Malware Loader ‘Verblecon’ Infects Hacked PCs with Cryptocurrency Miners

• 86% of organisations believe they have suffered a nation-state cyberattack

• Purple Fox Threat Actors Leverage New FatalRAT Version

• Satellites are critical infrastructure and need to be cybersecured

• US Brands Russian Cybersecurity Firm Kaspersky ‘Security Threat’

• US proposes healthcare cybersecurity bill

• Okta Admits ‘Mistake’ Waiting Two Months Before Breach Admission

• EU and US confirm transatlantic data flow

• Critically Exposed Web Apps Discovered Across Europe’s Top Chemical Manufacturers

• Attackers are exploiting recently patched RCE in Sophos Firewall (CVE-2022-1040)

• A Large-Scale Supply Chain Attack Distributed Over 800 Malicious NPM Packages

• Many businesses lack a formal ransomware plan

• COVID bounce: A massive 2021 resurgence of cyberthreats

• New Report on Okta Hack Reveals the Entire Episode LAPSUS$ Attack

• CISA adds Chrome, Redis bugs to the Known Exploited Vulnerabilities Catalog

• Resurgence of Increased Cyber Attacks on both Russia and Ukraine, a month into the war

• What is credential stuffing? And how to prevent it?

• The security gaps that can be exposed by cybersecurity asset management

• The Israeli cybersecurity funding landscape in the past year

• Product showcase: Specops uReset SSPR solution

• Ukrtelecom, a major mobile service and internet provider in Ukraine, foiled a “massive” cyberattack that hit its infrastructure

• Subdomain takeover attacks on the rise and harder to monitor

• EU and US confirm new transatlantic data flow agreement on the way

• API Security Explained

• 2021 COVID bounce: Malware has returned with a vengeance

• CRN® Honors Adlumin With 5-Star Rating in 2022 Partner Program Guide

• Mandiant Named a Leader in Cyber Security Incident Response Services by Independent Research Firm

• How is the CISSP-ISSMP Exam Changing?

• Unpacking OMB’s federal strategy for implementing Zero Trust

• The Bitglass Blog

• Not enough businesses have a formal ransomware plan in place

• What’s stopping organizations from becoming data-driven?

• AI market share to increase by $76.44 billion by 2025

• Okta says document ‘appears to be’ part of report on Lapsus$ breach

• IcedID malware, in the hijacked email thread, with the insecure Exchange servers

• Low-Code/No-Code Tools Are Popular, But Untrusted

• Fluke Networks upgrades LinkIQ Cable+Network Tester to help users test and troubleshoot IP networks

• Madeleine Albright and All the Women She Helped—Including Me

• Anonymous Hacks 2 Russian Industrial Firms, Leak 112GB of Data for Ukraine

• Accenture acquires capabilities for hyper-automation from Trancom ITS

• Netcetera partners with Covalent to expand online payments in Middle East and Africa

• The Pro Codes Act Is a Wolf in Sheep’s Clothing

• Zero-Day Surge Led to More Rapid Exploitation of Bugs in 2021

• Veridas opens new offices in USA and Mexico to facilitate its operations

• Gary Hayslip joins Keyavi Data Board of Directors

• Pentagon increases cyber funding request for 2023

• Triton Malware Still Targeting Energy Firms

• Anonymous is working on a huge data dump that will blow Russia away

• IT Security News Daily Summary 2022-03-28

• Severe XSS Vulnerability Found In Microweber CMS

• Senators look to root out contractor conflicts of interest

• Illinois joins states setting up cyber units

• New Lapsus$ Hack Documents Make Okta’s Response Look More Bizarre

• Welcoming the Bulgarian Government to Have I Been Pwned

• Redefining Resilience in The New World of Work

• Lessons Learned: In the Principle Of “Least Privilege,” Where Do Companies Fall Short?

• Update Chrome Browser Now – Google Releases Emergency Security Update

• Hive ransomware ports its encryptor to Rust programming language

• Ukraine says major cyberattack against telecom has been ‘neutralized’

• Researchers Hack Remote Keyless System of Honda Vehicles

• Facebook Is Criticized For Being Too Slow To Fight Russian Misinformation

• Sophos fixes critical hijack flaw in firewall offering

• Microsoft Azure Defender for IoT vulnerabilities could lead to ‘full network compromise’

• Top 7 enterprise cybersecurity challenges in 2022

• The benefits and challenges of SBOMs

• Vodafone Portugal: The Attack on Brand Reputations and Public Confidence Through Cybercrime

• CISA Adds 32 Known Exploited Vulnerabilities to Catalog

• You’re going to see Russian activity directed against government and military capabilities: Fmr. NSA director

• Under the hood of Wslink’s multilayered virtual machine

• Google Chrome, Microsoft Edge patched in race against exploitation

• Local governments are attractive targets for hackers and are ill-prepared

• Ransomware now encrypts so fast it ‘will burn the house down’

• Microsoft is adding a new driver-blocklist feature to Windows Defender on Windows 10 and 11

• Okta Says It Goofed in Handling the Lapsus$ Attack

• The Future of Digital Cash Is Not on the Blockchain

• Vulnerability Summary for the Week of March 21, 2022

• Madeleine Albright and All the Women She Helped — Including Me

• Ramping up cloud security with zero trust micro-segmentation

• Emotet is Back

• An EFF Investigation: Mystery GPS Tracker On A Supporter’s Car

• Okta: We made a mistake over Lapsus$ breach notification

• Critical Sophos Security Bug Allows RCE on Firewalls

• Washington Health District Suffers Another Data Breach

• Platforms at War

• What Happened to Post-Trump Reform?

• California’s “Social Media Platform Duty to Children Act” is Destined to Fail—For Good Reason

• EFF Files FOIA Lawsuit Against DHS to Shed Light on Vetting Program to Collect and Data Mine Immigrants’ Social Media

• Chinese Hacker Scarab Targets Ukrainian System, CERT-UA Warns

• Hotel WiFi Across MENA Compromised, Private Information Leaked

• Biden’s 2023 budget includes $65B for civilian agency IT

• Biden proposes a 4.6% raise for federal workers for 2023

• Checkmarx Finds Threat Actor ‘Fully Automating’ NPM Supply Chain Attacks

• Trellix and CSIS Find Organizations Outmatched by Nation-State Cyber Threat Actors

• 5 Industries that need advanced Cybersecurity measures

• Why the White House is focused on community-level water cybersecurity

• China APT group using Russia invasion, COVID-19 in phishing attacks

• Estonian Ransomware Operator Sentenced to Prison in US

• US Proposes Healthcare Cybersecurity Act

• We’re not out of the woods yet from potential cyber attacks, says Cloudflare’s Prince

• TD SYNNEX Announces Corporate Citizenship Program

• Ivanti Honored With 5-Star Rating in the 2022 CRN® Partner Program Guide

• Formulating proper data destruction policies to reduce data breach risks

• Cybersecurity Luminary Gary Hayslip Joins Keyavi Data Board of Directors

• Terraform Tutorial: Drift Detection Strategies

• European Union Agrees DMA To Curb Big Tech

• 86% of Organizations Believe They’ve Faced a Nation-State Cyber-Attack

• Zero-day Attacks Doubled in 2021

• Telling stories securely, with Runa Sandvik: Lock and Code S03E07

• Introducing SECaaS (Security as a Service): A Comprehensive Guide

• Cyber warfare is a ‘watershed moment’ for the industry

• Man linked to multi-million dollar ransomware attacks gets 66 months in prison for online fraud

• Ransomware payments: Here’s how much falling victim will now cost you

• Top 6 API Security Best Practices for 2022

• Machine Identity Management (MIM): Responding to Critical Security Needs in the BYOD Era

• Sophos Fixed A Critical RCE Vulnerability In Sophos Firewall

• Organisations Outmatched By Nation-State Hackers, Survey Finds

• Google Chrome patches mysterious new zero-day bug – update now

• 86% of Organizations Have Faced a Nation-State Cyber-Attack

• Google Releases Security Updates for Chrome

• 5 security considerations for edge implementations

• Feds Allege Destructive Russian Hackers Targeted US Oil Refineries

• Sophos Patches Critical Remote Code Execution Vulnerability In Firewall

• FCC Puts Kaspersky On Security Threat List

• Hundreds More Packages Found In Malicious npm Factory

• Morgan Stanley Wealth Management Accounts Breached In Vishing Attack

• Synthetic data and the Wells Fargo-Hazy relationship

• Hundreds more packages found in malicious npm ‘factory’

• Critical Remote Code Execution Vulnerability in Sophos Firewall

• German Authorities Seize Spyware Firm FinFisher’s Accounts

• Security’s Life Cycle Isn’t the Developers’ Life Cycle

• Update now! Google releases emergency patch for Chrome zero-day used in the wild

• Apple To Cut iPhone Production – Report

• New Conversation Hijacking Campaign Delivering IcedID

• Low-Code Is Easy, but Is it Secure?

• Federal pandemic aid is providing a boost to city housing programs

• Tech support fraud is still very much alive, says latest FBI report

• Spotify Suspends Service In Russia

• Hackers Hijack Email Reply Chains on Unpatched Exchange Servers to Spread Malware

• While Twitter suspends Anonymous accounts, the group hacked VGTRK Russian Television and Radio

• RAV Antivirus: How to Protect Your Data in 2022

• CISA: Here are 66 more security flaws actively being used by hackers – so get patching

• Triton malware still a threat to energy sector, FBI warns

• Of Cybercriminals and IP Addresses

• HOW CAN YOU WIN BIG IN VEGAS? – Global Achievement Awards Nominations Open Now

• Chinese Threat Actor Targeting Ukraine Since the Russian Invasion

• New Conversation Hijacking Campaign Delivering IcedID

• V8 Vulnerability Hits Chrome and Edge

• Lapsus$ Attackers Gained Access to a Support Engineer’s Laptop, as per Okta

• New Korplug Variant Discovered

• Apple Not Fully Compiling On App Store, Says Dutch Watchdog

• Why are cybercriminals increasing their focus on mobile devices?

• Sophos patches critical remote code execution vulnerability in Firewall

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of March 21, 2022

• CISA Adds 66 Vulnerabilities to ‘Must Patch’ List

• Major League Baseball players’ personal data stolen

• The Silicon UK In Focus Podcast: Workforce Management

• 5G and 6G networks to give first responders and smart city projects a boost, researchers say

• Huawei sees revenue dip 28%, pivots to tap green demand

• Estonian Gets 66 Months for Ransomware Conspiracy

• UK Ransomware Doubles: ‘Cyber Criminals Have Gone Into Stealth Mode’

• UK Ransomware Attacks Double In Past Year, Expert Insight

• Improving Signal To Noise Ratio In Business Intelligence

• One tenth of UK staff bypass corporate security

• A week in security (March 21 – 27)

• The first step to data privacy is admitting you have a problem, Google

• Google SMS and phone app, sending user data to remote servers

• Russian Cybersecurity software provider Kaspersky is banned

• Russia’s Kaspersky, China Telecom Added To US National Security List

• GhostWriter APT targets state entities of Ukraine with Cobalt Strike Beacon

• CISA Alert – ICS Best Practices Against Known Russian Cyber Actors

• Honda Bug Lets A Hacker Unlock And Start Your Car via Replay Attack

• The All-too-real Achilles Heel Of IT

• Beware of old and new tax-themed scams and schemes

• What Is Multi-Factor Authentication, and What Does It Have to Do with You?

• Ransomware Attacks Soar by 100% in 2021

• ‘Purple Fox’ Hackers Spotted Using New Variant of FatalRAT in Recent Malware Attacks

• URL Rendering Trick Enabled WhatsApp, Signal, iMessage Phishing

• Trojanized Crypto Wallets Flood Android And iOS App Stores

• One in 10 UK Staff Circumvent Corporate Security

• Shopping trap: The online stores’ scam that hits users worldwide

• Number of DDoS attacks in 2021 reached 9.75 million

• Breaking the Bias With Elnaz Babayeva | Avast

• Will Chinese giants defy US sanctions on Russia? We asked a ZTE whistleblower

• Muhstik Botnet Targeting Redis Servers Using Recently Disclosed Vulnerability

• Cybercriminals focusing on crypto donations to Ukraine to trick victims

• Is next-gen threat modeling even about threats?

• Why low-code and identity must co-exist

• Expect cyberattacks from Russia against oil and gas infrastructure, says cybersecurity firm

• Extended Threat Intelligence: A new approach to old school threat intelligence

• Cybercriminals launched 9.75 million DDoS attacks in 2021

• Honda Bug Let Attackers Unlock and Start the Car

• What federal data platform owners need to know about the zero trust mandate

• Cloud-native adoption shifts security responsibility across teams

• Okta acknowledges ‘mistake’ in handling of Lapsus$ attack

• The importance of data in the metaverse

• Kaspersky blacklisted by FCC alongside China Telecom and China Mobile

• Chrome and Edge hit with V8 type confusion vulnerability with in-the-wild exploit

• Operational risk management solution market to reach $3,098.0 million by 2028

• How Tripwire ExpertOps Can Help Solve the UK’s Cybersecurity Challenges

• 6 Critical Areas of Cloud-Native Security That Are Influential in 2022

• Kaspersky, China Telecom, China Mobile named ‘threats to US national security’

Generated on 2022-03-29 23:55:33.337808