IT Security News Daily Summary 2022-03-30

• Cyber Command’s acquisition growing pains

• New cyber bill calls for shadow IT assessment at VA

• Tracking transaction data on the ‘pseudo-anonymous’ blockchain

• The Total Economic Impact™ of Cisco Secure Firewall

• Viasat confirms cyber attack on Ukraine customers

• The Total Economic Impact™ of Cisco Secure Firewall

• Too Hot to Handle:The case for Zero Trust and SASE

• Monetized ransomware: emergent cyber threats and rise of the Ransomware-as-a-Service industry

• Executive Order Instructs Certain Organizations to Improve Their Cybersecurity Stance

• CISA, DOE Warn of Attacks on Uninterruptible Power Supply (UPS) Devices

• A Sinister Way to Beat Multifactor Authentication Is on the Rise

• The Total Economic Impact™ of Cisco Secure Firewall

• Digital Rights Updates with EFFector 34.2

• Viasat: Feb. cyber attack impacted tens of thousands of customers in Ukraine, Europe

• RCE Bug in Spring Cloud Could Be the Next Log4Shell, Researchers Warn

• Ubiquiti sues Krebs on Security for defamation

• Study: Facebook May Be Getting Worse At Tracking You

• The Total Economic Impact™ of Cisco Secure Firewall

• Ubiquiti sues Krebs on Security for defamation over alleged false claims

• Axie Infinity hack results in $600M cryptocurrency heist

• The Total Economic Impact™ of Cisco Secure Firewall

• How Democracies Can Respond to the Invasion of Ukraine

• Waymo Expands Phoenix Driverless Service, Offers San Fran Staff Rides

• $625m Stolen From Ronin Network – The Blockchain Behind Axie Infinity Game

• Can chatrooms replace courtrooms?

• The Total Economic Impact™ of Cisco Secure Firewall

• Lapsus$ is clearly not done leaking

• The Total Economic Impact™ of Cisco Secure Firewall

• A critical RCE vulnerability affects SonicWall Firewall appliances

• So you want to get into cybersecurity? Here’s how

• Soaring Ransomware payments, consistent infections, deceptive URLs and more in this year’s 2022 BrightCloud® Threat Report

• Critical RCE Bug in Spring Could Be the Next Log4Shell, Researchers Warn

• The Total Economic Impact™ of Cisco Secure Firewall

• FBI Investigating More than 100 Ransomware Variants

• Meta says its Anonymous Credentials Service (ACS) will help reduce data collection activities

• Why digital ID for airport check-in is taking so long

• Cyberattackers Target UPS Backup Power Devices in Mission-Critical Environments

• “VMware Spring Cloud” Java bug gives instant remote code execution – update now!

• Personal Data of 820,000 NYC Students Exposed

• New Research Claims Biden’s Disclosure Deadlines Are Unrealistic

• The Total Economic Impact™ of Cisco Secure Firewall

• Combatting Data and Credential Exposure With Intelligence

• Agents and Agentless: Better Together

• Hackers Exploit Microsoft Exchange for IcedID Reply-Chain Hijacking Attacks

• Two-factor authentication is a great idea. But not enough people are using it

• Cyera Emerges From Stealth Mode With $60M to Protect Cloud Data

• “VMWare Spring Cloud” Java bug gives instant remote code execution – update now!

• Smart Cities: Secure by Design? It Takes a Village

• The Total Economic Impact™ of Cisco Secure Firewall

• The Military Is Making Progress in Its Counter-Extremism Efforts, but Gaps Remain

• Viasat spills on the Russian attack, warns of continued risks

• More than the Metaverse: IoT and Private Networks are in the 5G spotlight

• How can home security be improved with IoT?

• AT&T Cybersecurity earns four Cybersecurity Excellence Awards

• 10 Things cybercriminals love about you

• A lasting trend: As a Service

• Tesla Signs Deal To Source More Nickel – Report

• Google Chrome Bug Actively Exploited as Zero-Day

• Lapsus$ ‘Back from Vacation’

• The Total Economic Impact™ of Cisco Secure Firewall

• Breezeline Launches “WiFi Your WayTM” for Business

• SimSpace Offers Advanced Cyber Range Exercises Through Partnership With (ISC)²

• MetricStream Enables Customers to Quantify Risks in Monetary Terms, Identify Cloud Risks Faster, and Accurately Report Climate-related Financial Metrics

• Kasada Partners With Retail and Hospitality ISAC to Demonstrate Modern, Simple and Effective Approach to Stopping Bots

• Baker McKenzie Survey: As Usage of Artificial Intelligence Proliferates, Companies May Underestimate AI’s Business Risks

• Investors Bet on Cyberpion in Attack Surface Management Space

• Cloud Security Architecture Needs to Be Strategic, Realistic, and Based on Risk

• The Total Economic Impact™ of Cisco Secure Firewall

• VMware Horizon platform pummeled by Log4j-fueled attacks

• Hackers steal $615 million from a gaming cryptocurrency wallet

• Pentagon’s JEDI Contract Successor, JWCC, Delayed Until December

• VMware Horizon platform being pummeled by Log4j-fueled attacks

• Chrome Browser Gets Major Security Update

• World Backup Day: 5 data recovery tips for everyone!

• The Total Economic Impact™ of Cisco Secure Firewall

• CISA and DoE warns of attacks targeting UPS devices

• Remote ‘Brokenwire’ Hack Prevents Charging of Electric Vehicles

• Rapid7 finds zero-day attacks surged in 2021

• Infosecurity Europe Unveils Keynote Speakers for 2022 Event

• Google Releases Security Updates for Chrome

• FBI Releases PIN on Phishing Campaign against U.S. Election Officials

• The Total Economic Impact™ of Cisco Secure Firewall

• Lapsus$ extortion gang claims to have hacked IT Giant Globant

• The Complete Guide to Desktop Virtualization and Its Importance

• How Security Complexity Is Being Weaponized

• Researchers Expose Mars Stealer Malware Campaign Using Google Ads to Spread

• The Total Economic Impact™ of Cisco Secure Firewall

• Company Official: Hackers Are Still Inside Viasat

• Hackers Steal $625 Million From Ronin Network In Largest Ever Crypto Theft

• MSHTML Flaw Exploited To Attack Russian Dissidents

• Hackers Who Stole $50 Mil In Crypto Say They Will Refund Some Victims

• Ronin Network Cryptocurrency Hack, Experts Commentary

• For Three Years, Leading Messaging Servers were Scammed Using a URL Rendering Method

• V8 Type Confusion Vulnerability Hits Google Chrome & Microsoft Edge Browser

• What’s happening in the attack surface market: mitigating threats in the cloud era

• Ukrainian software developers share their stories and photos from the war zone

• How you can help Ukraine: Donation sites and resources

• Get an extra 50% off these 10 ethical hacking e-learning bundles

• Women in tech: Unique insights from a lifelong pursuit of innovation

• Researchers Find Python-Based Ransomware Targeting Jupyter Notebook Web Apps

• The Need for Resilient Zero Trust

• The Total Economic Impact™ of Cisco Secure Firewall

• Shutterfly Discloses Data Breach After Conti Ransomware Attack

• Nebulon Touts Rapid Ransomware Recovery Solution

• MSHTML Flaw Exploited to Attack Russian Dissidents

• Researchers Used a Decommissioned Satellite to Broadcast Hacker TV

• The Total Economic Impact™ of Cisco Secure Firewall

• Mars Stealer malware pushed via Google Ads and phishing emails

• Update now! Google launches Chrome version 100 and fixes 28 vulnerabilities

• How to Set Up and Use Universal Control with macOS Monterey

• Lapsus$ Claims Hack of IT Giant Globant After Arrests of Alleged Members

• Shutterfly Employee Data Compromised in Ransomware Attack

• The Total Economic Impact™ of Cisco Secure Firewall

• “A little gift for you” SMS spam appears to come from your own phone number

• Palo Alto Networks debuts cloud-native firewall service for AWS

• Police look to doorbell cameras to reduce crime

• As Lapsus$ comes back from ‘vacation,’ Sitel clarifies position on data breach

• These remote work job scams promise easy money but aim to steal your savings

• US Government Warns of Attacks Targeting UPS Devices

• The Total Economic Impact™ of Cisco Secure Firewall

• New Subscription: Learn Fundamentals

• Critical Vulnerability Affecting Western Digital My Cloud OS 5 Devices – Patch Now

• The State of Malware Analysis and Responses to Emerging Threats

• A mitmproxy Vulnerability Could Allow HTTP Request Smuggling Attacks

• Honda’s Keyless Access Bug Could Let Thieves Remotely Unlock and Start Vehicles

• Stalking with an Apple Watch

• A third of malware infections use Log4Shell

• Election Officials Warned by the FBI of Credential Phishing Campaigns

• 10 Best Laptops for Medical Students 2022 – Making Your Studies Easier

• How to Unlock Iptv Adult Channels on Stb Emulator

• Report: U.S. Workers Worry About Cyberattacks

• How safe are your crypto assets?

• Electric Vehicle DC charging tripped by a wireless hack

• Risks of Using Russian Tech Analyzed by UK Cybersecurity Agency

• NCSC suggests rethinking Russian supply chain risks

• Mars Stealer: a New Popular Malware on the Cyberthreat Landscape

• FBI Warns Russian Hackers Scanning US Energy Systems

• Introducing Personal Data Cleanup

• Check Point’s Quantum Maestro Orchestrates Best-Ever Performance for Listrak

• This new ransomware targets data visualization tool Jupyter Notebook

• State-backed hacking attacks are a big worry, but most firms don’t know what to watch out for

• Six Ways to Expand Your Fraud Program

• Finland’s Spy Service Warns of Russian Interference, Attacks

• Federal Agencies Instructed to Patch New Chrome Zero-Day

• A Third of UK Businesses Experience Cyber-Attacks at Least Once a Week

• Ronin blockchain hit with $620 million crypto heist

• Shutterfly Hit by Data Breach

• Improve Your Hacking Skills with 9 Python Courses for Just $39

• Meta Suspends Plan To Build Dutch Data Centre After Opposition

• NCSC: Time to Rethink Russian Supply Chain Risks

• Watch out for LinkedIn fakes who want to get connected

• Startup Equity firm invests $525 million in Cybersecurity firm Zimperium

• Log4Shell Used in a Third of Malware Infections

• IoT warning: Hackers are gaining access to UPS devices. Here’s how to protect yours

• Attackers Steal $618m From Crypto Firm

• Ransomware news headlines trending on Google

• World Backup Day: Simplicity and Patience is Key

• LAPSUS$ Claims to Have Breached IT Firm Globant; Leaks 70GB of Data

• The importance of implementing continuous security in the development lifecycle

• Ransomware payments hitting new records in 2021

• Google Play Store Safety | Avast

• Threat actors actively exploit recently fixed Sophos firewall bug

• UK Cyber Security Centre advises review of risk posed by Russian tech

• CISA Warns of Ongoing Cyber Attacks Targeting Internet-Connected UPS Devices

• Web3 and the future of data portability: Rethinking user experiences and incentives on the internet

• Lapsus$ back? Researchers claim extortion gang attacked software consultancy Globant

• How to recruit cybersecurity talent from atypical backgrounds

• Product showcase: Secure online authentication “Made in Germany” by Swissbit

• Ethereum sidechain Ronin that powers play-to-earn game is fleeced for over $600m

• Posts on name-and-shame dark web leak sites climbed 85% in 2021

• indie Semiconductor Announces Retirement of Bill Woodward and Appointment of Diane Biagianti to Its Board of Directors

• Pentera Finds Two Zero-Day Vulnerabilities in VMWare vCenter, Exposing More Than 500,000 Companies Globally

• Rod Carew is Featured on the Impact Podcast with John Shegerian

• TD SYNNEX Provides Medium-Term Financial Model at 2022 Investor Day

• Healthcare focus:  Need for resilience

• The hiring surges in Biden’s 2023 budget proposal

• The benefits of implementing continuous security in the development lifecycle

• How hard is it to address Apple’s in-app deletion requirements and implement privacy compliance?

• An In-Depth Look at ICS Vulnerabilities Part 1

• Senator calls on Nick Xenophon to detail his Huawei contract terms

• Critical SonicOS Vulnerability Affects SonicWall Firewall Appliances

• DevOps market to exceed $30 billion by 2028

• What is Bundesamtes für Sicherheit in der Informationstechnik (BSI)?

• What Trust and Compliance Looks Like in a Cookieless Digital World

• Design, prioritize, and implement a cyber defense program with CIS CDM 2.0

• Donald Trump, John Eastman and the Silence of the Justice Department

• Very Good Security Network Tokens enhances payment security

• Nebulon TimeJump offers ransomware recovery for critical application data and infected operating systems

• Rapid7 introduces cloud workload protection in InsightCloudSec

• CRITICALSTART launches enhanced capabilities for Microsoft 365 Defender to detect user account attacks

• Detailed: Critical hijacking bugs that took months to patch in Microsoft Azure Defender for IoT

• Ivanti Wavelink’s operational insights offering improves supply chain operations for customers

• Aruba Central NetConductor enables IT teams to automate network configuration

• Arista CUE enables commercial customers to accelerate new services and technology innovations

• RemotePC allows users to access their office computers and servers via RDP Connector

• Comcast Business Gateway improves protection and connectivity for businesses

• 2022-03-29 – Emotet E4 with Cobalt Strike

• Australia may not be able to fill Coalition’s 1,900 proposed cyber jobs

• Swimlane and 1898 & Co. join forces to defend critical infrastructure companies against rising cyber threats

• How Meta detects and mitigates ‘silent errors’

• Hive ransomware group claims to steal California health plan patient data

• Ping Payments selects Sentinels to reinforce its AML controls

• Cybellum partners with AVL to provide cybersecurity vulnerability management for the automotive industry

• Understanding Private 5G LANs in the Enterprise

• Log4j Attacks Continue Unabated Against VMware Horizon Servers

• Guidepost Solutions acquires significant equity interest in Truvantis to help address cybersecurity risks

• HSBC collaborates with IBM to accelerate quantum computing readiness

• Cloudera announces a series of senior executive appointments

• Celonis acquires Process Analytics Factory to strengthen its process mining offering

• Mutating Verblecon malware in illicit cryptomining … so far

• $625M stolen from Axie Infinity ‘s Ronin bridge, the largest ever crypto hack

• Donald Trump, John Eastman, and the Silence of the Justice Department

• Alkira opens headquarters in Amsterdam to expand its presence in EMEA

• Xalient strengthens its presence in North America with key appointments

• Accela names Kara Wilson to Board of Directors

• Pentagon’s effort to supply departmentwide cloud capabilities is delayed, again

• IT Security News Daily Summary 2022-03-29

• CYE launches new group to provide advanced cyber architecture

• Hackers Steal Over $600M in Major Crypto Heist

• Former Facebook Exec Warns Of “Privacy And Security Nightmare” For WhatsApp

• Private Equity Firm Led by Mnuchin Acquires Mobile Security Vendor Zimperium

• My Child Wants a Phone. Should I Say ‘Yes’?

• Biden’s budget calls for increases in key state and local programs

• Zlib data compressor fixes 17-year-old security bug – patch, errrm, now

• Hardware upcycling: A new option for ‘rip and replace’

• Log4JShell Used to Swarm VMware Servers with Miners, Backdoors

• Ronin Network Ethereum theft is ‘largest-ever DeFi exploit,’ investigator says

• It’s time for another look at election security – through a technological lens

• Smart city pilots target workflow, analysis challenges

• How to put cybersecurity sustainability into practice

• FBI confirms increase in Russian cyber scanning of U.S. companies

• Russia threatens ‘grave consequences’ over cyberattacks, blames U.S.

• Labor Dept. seeks $3.4 billion for UI programs, including IT modernization

• Senator questions crypto companies’ impact on local communities

• Atlas VPN Debuts MultiHop+ for Added Layer of Internet Privacy and Security

• Singapore offers certification scheme to tag companies with robust security posture

• Cloaked Snags $25M Funding to Tackle Data-Sharing Privacy

• With War Next Door, EU is Warned on Cybersecurity Gaps

• CriticalStart Releases Enhanced Capabilities for Microsoft 365 Defender

• New spear phishing campaign targets Russian dissidents

• Ex-Trump Treasury Secretary’s PE Firm Buys Mobile Security Company Zimperium for $525M

• VMware vCenter Server Vulnerability Can Facilitate Attacks on Many Organizations

• Biden Requests Nearly $11B for Federal Cybersecurity Spending

• 1-in-6 election officials report being threatened

• Cyberattack in New York City, Sensitive Data of 820,000 Students was Exposed

• One arrested in ₹1,200-Crore Crypto Fraud Case, 900 Investors Scammed

• Muhstik Botnet Targeting Redis Servers by Exploiting Recently Published Bug

• Hackers steal $620M in Ethereum and dollars from Axie Infinity maker Sky Mavis’ Ronin network

• Cryptocurrency cyber attacks on the rise as industry expands

• Zlib data compressor fixes 17-year-old security bug – patch, errr, now

• Personal Data of 620 FSB Officers Published Online

• NetAbstraction and Jacobs Expand Alliance to Offer Advanced Cyber Solutions to Commercial Clients

• Anchore to Contribute Grype Open Source Vulnerability Data to the Global Security Database

• KSOC Addresses Critical Components of Kubernetes Security Detailed in Federal Report

• Gartner Analyst Joins Black Kite as New Cyber Risk Evangelist

• PKI Solutions Announces $2M Credit Facility from Northwest Bank

• Cyera Launches From Stealth With $60M to Identify, Secure, and Remediate Cloud Data Security Risks

• Forcing WhatsApp and iMessage to Work Together Is Doomed to Fail

• 3 steps to secure your multicloud and hybrid infrastructure with Azure Arc

• Ransomware driving you to distraction? Here’s how to recover

• Russian cybercriminals are finding it hard to make a living

• Europe’s quest for energy independence – and how cyber‑risks come into play

• Mnuchin’s private equity firm buys security startup Zimperium for $525m

• Yandex is Sending iOS Users’ Data to Russia

• Podcast Episode: Securing the Internet of Things

• Retro Computing Museum Destroyed By Russian Bombing

• 6 takeaways On cybersecurity policy from the president’s FY 2023 budget

• Hackers are getting faster at exploiting zero day flaws. That’s going to be a problem for everyone

• Why Bullying Employees Into Compliance Won’t Work

• Dental Practice Fined for Sharing Patient Data on Social Media

• 82% of Public Sector Applications Contain Security Flaws

• Mitigating Attacks Against Uninterruptable Power Supply Devices

• Compromised WordPress sites launch DDoS on Ukrainian websites

• Creepy Spyware Company Goes Broke

• Exchange Servers Speared In IcedID Phishing Campaign

• Ukraine Internet Provider Suffers Cyber Attack

• Lapsus$ And SolarWinds Hackers Both Use The Same Old Trick To Bypass MFA

• Ukraine Security Agency Shutters Russian Disinformation Bot Farms

• Ukraine security agency shutters Russian disinformation bot farms

• Introducing the new Azure Front Door: Reimagined for modern apps and content

• US Senate Approves $52 Billion US Chips Act

• Critical Vulnerabilities Found in Microsoft Defender for IoT

• Hackers Gaining Power of Subpoena Via Fake “Emergency Data Requests”

• Europe and US Agree Trans-Atlantic Data Sharing Deal

• Using Russian tech? It’s time to look at the risks again, says cybersecurity chief

• Exchange Servers Speared in IcedID Phishing Campaign

• Deploy an information barrier policy for Microsoft Teams

• Exploring the Intersection of Physical Security and Cybersecurity

• 2 New Security Incidents Happening Now

• IcedID Targets Msoft Exchange Hijacking Campaign

• White Increase Cybersecurity Budget

• How To Avoid Investment Scams On Social Media, As 25% Of UK Victims Are Youths Online

• 5 Best GPU Stress Testing/Benchmarking Softwares in 2021

• Fortinet shares could gain 17% from here as cyber threats mount, Barclays says

• Attacks on Ukraine communications are a major part of the war

• National Backup Day: Don’t Forget the Basics

• Low-Code/No-Code Tools Are Popular but Untrusted

• New Hacking Campaign by Transparent Tribe Hackers Targeting Indian Officials

• IceID trojan delivered via hijacked email threads, compromised MS Exchange servers

• Threat Hunting Journal – March 2022 E.O.M Edition

• Elon Musk Considers Building New Social Media Platform

• Log4Shell exploited to infect VMware Horizon servers with backdoors, crypto miners

• Ukraine destroys five bot farms that were spreading ‘panic’ among citizens

• Transparent Tribe APT returns to strike India’s government and military

• Sophos Warns of Attacks Exploiting Recent Firewall Vulnerability

• Six Ways to Improve Infosec in 2022

• Researchers release car exploit that allows hackers to lock, unlock and start Honda’s

• White House Proposes $10.9 Billion Budget for Cybersecurity

• Mobile security firm Zimperium to be acquired for $525M, eyes IPO

• Ukraine Suffers Significant Internet Disruption Following Cyber-Attack

• Stop Tracking Your Loved Ones

• Privid: A Privacy-Preserving Surveillance Video Analytics System

• A Detailed Look at the Conti Ransomware Gang

• SunCrypt Ransomware Still Alive in 2022

• Looking over your shoulder: when small mistakes have big consequences

• Why Organizations Should Take Cloud-Based Cryptocurrency-Mining Attacks Seriously

• Ukraine’s Ukrtelecom Suffers Outage After Cyberattack

• Australian Budget 2022 delivers AU$9.9 billion for spicy cyber

• SonicWall Patches Critical Vulnerability in Firewall Appliances

• Sanctions Hitting Russian Cyber-Criminals Hard

• Critical Sophos Firewall RCE Vulnerability Under Active Exploitation

• Threat Actors Hijack Email Reply Chains on Vulnerable Exchange Servers to Deliver IcedID Malware

• Cybercrooks target students with fake job opportunities

• Major Cyber Attack launched on Ukraine Ukrtelecom

• Racoon stealer malware suspends its operations due to war on Ukraine

• Is the global food supply chain in danger?

• March 2022 Web Server Survey

• Mozilla unveils vision for web evolution

• Security Incidents Reported to FCA Surge 52% in 2021

• European Police Bust Multimillion-Dollar Investment Fraud Gang

• Experts Detail Virtual Machine Used by Wslink Malware Loader for Obfuscation

• New Malware Loader ‘Verblecon’ Infects Hacked PCs with Cryptocurrency Miners

• 86% of organisations believe they have suffered a nation-state cyberattack

• Purple Fox Threat Actors Leverage New FatalRAT Version

• Satellites are critical infrastructure and need to be cybersecured

• US Brands Russian Cybersecurity Firm Kaspersky ‘Security Threat’

• US proposes healthcare cybersecurity bill

• Okta Admits ‘Mistake’ Waiting Two Months Before Breach Admission

• EU and US confirm transatlantic data flow

• Critically Exposed Web Apps Discovered Across Europe’s Top Chemical Manufacturers

• Attackers are exploiting recently patched RCE in Sophos Firewall (CVE-2022-1040)

• A Large-Scale Supply Chain Attack Distributed Over 800 Malicious NPM Packages

• Many businesses lack a formal ransomware plan

• COVID bounce: A massive 2021 resurgence of cyberthreats

• New Report on Okta Hack Reveals the Entire Episode LAPSUS$ Attack

• CISA adds Chrome, Redis bugs to the Known Exploited Vulnerabilities Catalog

• Resurgence of Increased Cyber Attacks on both Russia and Ukraine, a month into the war

• What is credential stuffing? And how to prevent it?

• The security gaps that can be exposed by cybersecurity asset management

• The Israeli cybersecurity funding landscape in the past year

• Product showcase: Specops uReset SSPR solution

• Ukrtelecom, a major mobile service and internet provider in Ukraine, foiled a “massive” cyberattack that hit its infrastructure

• Subdomain takeover attacks on the rise and harder to monitor

• EU and US confirm new transatlantic data flow agreement on the way

• API Security Explained

• 2021 COVID bounce: Malware has returned with a vengeance

• CRN® Honors Adlumin With 5-Star Rating in 2022 Partner Program Guide

• Mandiant Named a Leader in Cyber Security Incident Response Services by Independent Research Firm

• How is the CISSP-ISSMP Exam Changing?

• Unpacking OMB’s federal strategy for implementing Zero Trust

• The Bitglass Blog

• Not enough businesses have a formal ransomware plan in place

• What’s stopping organizations from becoming data-driven?

• AI market share to increase by $76.44 billion by 2025

• Okta says document ‘appears to be’ part of report on Lapsus$ breach

• IcedID malware, in the hijacked email thread, with the insecure Exchange servers

• Low-Code/No-Code Tools Are Popular, But Untrusted

• Fluke Networks upgrades LinkIQ Cable+Network Tester to help users test and troubleshoot IP networks

• Madeleine Albright and All the Women She Helped—Including Me

Generated on 2022-03-30 23:55:31.751732