IT Security News Daily Summary 2022-04-29

• Report: 95% of IT leaders say Log4shell was ‘major wake-up call’ for cloud security

• Smart pavement powers data collection, EV charging, wireless access, edge computing

• Friday Squid Blogging: Ten-Foot Long Squid Washed onto Japanese Shore — ALIVE

• As satellite images reshape conflict, security worries mount

• Best Cybersecurity Software & Tools for 2022

• Cloudflare Flags Largest HTTPS DDoS Attack It’s Ever Recorded

• Scientific advance leads to a new tool in the fight against hackers

• “Computer malfunction” Caused Death of 27,000 Chickens

• How GSA is remaking USA.gov

• Is cloud critical infrastructure? Prep now for provider outages

• You Can Now Ask Google to Remove Your Phone Number, Email or Address from Search Results

• How remote browser isolation can shut down virtual meeting hijackers

• Microsoft’s latest Windows 11 test build adds new group policies, drops SMB1 enablement by default

• Socialscan – Command-Line Tool To Check For Email And Social Media Username Usage

• Fleet Raises $20M for Endpoint Visibility Technology

• Cybersecurity and the ‘Good Cause’ Exception to the APA

• Library of Congress plans new cloud office

• Blasting out Earth’s location with the hope of reaching aliens is a controversial idea – two teams of scientists are doing it anyway

• GitHub issues final report on supply-chain source code intrusions

• States and cities are moving to make virtual hearings permanent

• Secret School District Crypto Miner Resigns

• BIO-ISAC Partners with NY Metro InfraGard

• Finnish Hotels’ Data Compromised

• The top 5 most routinely exploited vulnerabilities of 2021

• Conti Ransomware Assault Continues Despite the Recent Breach

• ISG to Publish Reports on Contact Center Services, Platforms

• The Global Cyber Innovation Summit, the CISO “Invitation-only” Event, Returns in 2022 to Set the Global Agenda for Cybersecurity

• What is data fabric and how does it impact Cybersecurity?

• Microsoft Edge’s ‘Secure Network’ sounds a lot like a built-in VPN

• Beware Twitter Messages claiming “Your blue badge Twitter account has been reviewed as spam”

• Quantum Physics is said to make hacking impossible

• Sabanci Group Acquires Majority Stake in OT Security Firm Radiflow for $45 Million

• Don’t expect to get your data back from the Onyx ransomware group

• How to Use Your Asset Management Software to Reduce Cyber Risks

• Apple Profits Surge, As Firm Warns Of Trouble Ahead

• Ransomware costs show prevention is better than the cure

• Video Conferencing Apps Sometimes Ignore the Mute Button

• New OpenSSF Project Hunts for Malicious Packages in Open Source Repositories

• Take a Diversified Approach to Encryption

• Conti’s BazarLoader Replaced with Bumblebee Malware

• Tesla’s Elon Musk Sells Shares Worth $4bn, Promises No More

• Platform Transparency Legislation: The Whos, Whats and Hows

• HackerOne acquires PullRequest to help users integrate code security reviews during workflows

• US has Offered a $10 Million Bounty on Data About Russian Sandworm Hackers

• Appian World 2022: Democratising Low-code

• Report: DDoS attacks have increased 4.5 times since last year

• Experts say BlackCat ransomware isn’t more of a problem than any other ransomware strain

• Intigriti’s ‘head of hackers’: crowdsourced security is key to mitigating modern threats

• This phishing campaign delivers malware that steals your passwords and chat logs

• Ambient.ai Expands Computer Vision Capabilities for Better Building Security

• Private Equity Executive Sought To Undermine NSO Critics

• Powerful DDoS Targets Cryptocurrency Platform

• Interpol: We Can’t Arrest Our Way Out Of Cybercrime

• Vulnerable Plugins Plague The CMS Website Security Landscape

• EmoCheck Tool 2.2 Supports and Detects New 64-bit Variants of Emotet Malware

• Security Turbulence in the Cloud: Survey Says…

• Many Internet-Exposed Servers Affected by Exploited Redis Vulnerability

• Microsoft Documents Over 200 Cyberattacks by Russia Against Ukraine

• Interpol: We can’t arrest our way out of cybercrime

• New Nimbuspwn Linux Flaws Could Provide Attackers Root Access

• Cyberespionage APT Now Identified as Three Separate Actors

• Tips on Upgrading Business Security Practices to “New Norm” Standards

• 3 Tech Solutions Church Leaders Can Use to Protect Their Congregation

• 7 Useful Crypto Coin Wallet Security Methods

• Amazon Posts First Net Loss Since 2015, Amid Challenging Market

• Synology, QNAP, WD Warn Users About Vulnerabilities Exploited at Hacking Contest

• Medical Software Company Fined €1.5M for Exposing 490k Patients’ Data

• Adventures in the land of BumbleBee

• Data Security Firm Veza Emerges From Stealth With $110 Million in Funding

• Google Adds Ways to Keep Personal Info Private in Searches

• You Need to Update iOS, Android, and Chrome Right Now

• Ukraine’s Digital Battle With Russia Isn’t Going as Expected

• India gives local techies 60 days to hit 6-hour deadline for infosec incident reporting

• Beware scammers disguised as fraud busters

• Vulnerable plugins plague the CMS website security landscape

• Deepfakes set to be used in organised crime

• Warning! Instagram Stories hides a scam in plain sight

• Sina Weibo, China’s Twitter analog, reveals users’ locations and IP addresses

• Global security spending set to reach $198bn by 2025

• Account Takeover Definition. Account Takeover Prevention

• Google Play’s Data safety section empowers Android users to make informed app choices

• Ransomware Fallout Costs Seven Times the Ransom Paid

• Critical vulnerabilities open Synology, QNAP NAS devices to attack

• Five Eyes Agencies List Top 15 Most Exploited Bugs of 2021

• Bumblebee Malware Loader Has a Sting in the Tail

• HackerOne acquires code security tester, review service PullRequest

• Apple’s AirTags: One Year On

• Ukraine government and pro-Ukrainian sites hit by DDoS attacks

• Sina Weibo, China’s Twitter analogue, reveals users’ locations and IP addresses

• DigiCert outlines its vision to help customers manage trust across their digital footprint

• Anonymous hacked Russian PSCB Commercial Bank and companies in the energy sector

• Hurry up, disable AFP on your QNAP NAS until the vendor fixes 8 bugs

• Edge’s prospective free VPN would be a tempting reason to ditch Chrome

• Introducing Personal Data Cleanup

• Will Elon Musk follow the rules in his takeover of Twitter?

• Indian Govt Orders Organizations to Report Security Breaches Within 6 Hours to CERT-In

• Microsoft Azure Vulnerability Exposes PostgreSQL Databases to Other Customers

• Work from home culture could fuel Russian Cyber Attacks

• Artificial Intelligence induced microwave oven tries to kill its owner

• Indian Govt Orders Organisations to Report Security Breaches Within 6 Hours to CERT-In

• It’s Called BadUSB for a Reason

• Ongoing DDoS attacks from compromised sites hit Ukraine

• Next-Gen CASB & Gamma.AI

• Leadership and recruitment changes needed to address burnout in cybersecurity

• Don’t ignore risks lurking within your own network

• New infosec products of the week: April 29, 2022

• Bumblebee malware loader emerges as Conti’s BazarLoader fades

• How IIoT solutions can optimize industrial supply chain operations

• 308,000 exposed databases discovered, proper management is key

• What is tokenization, what are the types of tokenization, and what are its benefits for eCommerce businesses?

• Security leaders relying more heavily on MSPs amid talent crunch

• China, India, Russia missing from future of internet pledge by US, EU, and 33 others

• Companies poorly prepared to meet CCPA, CPRA and GDPR compliance requirements

• Bitwarden Generator helps customers create unique usernames for all their accounts

• Codenotary adds independent cryptographic validator to its Community Attestation Service

• Workato Enterprise Key Management protects sensitive data for enterprise customers

• McAfee Personal Data Cleanup allows users to protect themselves from identity thieves and hackers

• Digital.ai Ascension empowers organizations to unify predictive insights across the software lifecycle

• Handling Sensitive Data: A Primer

• Comcast Business expands partnership with Cisco to simplify network management operations

• Acrisure and Coalition join forces to provide security solutions for small and midsize businesses

• C# Applications Vulnerability Cheatsheet

• Enveil raises $25 million to expand its footprint in both the commercial and government markets

• PCI Pal collaborates with Odigo to offer secure payment solutions for customers

• Why you should be taking security advice from your grandmother

• Report: 73% increase of threat incidents in Q4 2021

• Arcserve appoints Matt Urmston as EVP of Product Management

• Redstor hires Mike Hanauer as CRO

• Outseer appoints John Filby as CEO

• Veza emerges from stealth and announces $110 million in funding

• JRSS transition still a work in progress

• Bitcoin mining comes to city hall

• Microsoft Patches Pair of Dangerous Vulnerabilities in Azure PostgreSQL

• LogicGate adds new executives to scale product and revenue functions

• Ricardo Antuna joins Stratodesk as VP of Strategy and Business Development

• Pushing the envelope on drones for indoor emergency response

• Nimbuspwn: New Root Privilege Escalation Found in Linux

• IT Teams Worry Staff Lack Cloud-Specific Skills

• Experts Insight On Coca Cola Potential Breach

• Scammers Are Copying News Sites To Push Elon Musk-themed Crypto Scams

• IT Security News Daily Summary 2022-04-28

• Can your mobile phone get a virus? Yes – and you’ll have to look carefully to see the signs

• Cybersecurity Agencies Reveal the Top Exploited Vulnerabilities of 2021

• Cisco Releases Security Updates for Multiple Products

• The Subject Of Trusting ‘Russian’ Applications

• Elon Musk Wants to Make Twitter DMs End-to-End Encrypted

• GSA to study facial recognition tech with equity in mind

• IRS balks at public free-file suggestion from government watchdog

• Microsoft readies a built-in VPN for Edge powered by Cloudflare

• Tips for using a threat profile to prevent nation-state attacks

• Case study: Why it’s difficult to attribute nation-state attacks

• Check Point: Ransomware attacks lasted 9.9 days in 2021

• Lapsus$ targeting SharePoint, VPNs and virtual machines

• Microsoft: Russia Using Cyberattacks in Coordination With Military Invasion of Ukraine

• The Ransomware Crisis Deepens, While Data Recovery Stalls

• Capital One Ventures, Snowflake Ventures, Verizon Ventures, and Wipro Ventures Join Securonix $1B+ Growth Investment as Strategic Investors

• EFF Statement on the Declaration for the Future of the Internet

• Global Nations Sign Declaration For Free, Open Internet

• How enterprises can ensure NVMe security in 2.0

• Cisco Releases Security Updates for Multiple Products

• API Security is Necessary to Stop Threats that WAFs and Bot Protection Cannot

• 2022-04-25 – Emotet epoch4 activity (LNK files)

• The super malicious insider and the rise of insider threats

• File Formats

• US and China Exposed Most Databases Among 308,000 Discovered in 2021

• Europol: Deepfakes Set to Be Used Extensively in Organized Crime

• Harnessing data can help cities reduce homelessness

• Device Privacy Support for Retailers in Today’s Smart Home (Multi-Video)

• Stellar Open XDR Nominated for Three 2022 ‘ASTORS’ Cybersecurity Awards

• Microsoft Warns of ‘Nimbuspwn’ Security Flaws Haunting Linux

• Crypto Trading Fund Partners Accused of Fraud

• Chickens Baked Alive Due to Computer Glitch

• Uber ‘Cough Girl’ Accused of Identity Theft

• Hollywood’s Fight Against VPNs Turns Ugly

• The Chatter Podcast: “The Day After” with Nicholas Meyer

• The Package Analysis Project: Scalable detection of malicious open source packages

• FBI warns food and agriculture to brace for seasonal ransomware attacks

• Quantum Cybersecurity: Addressing the Boogeyman in the Room

• Stories from the SOC – Lateral movement using default accounts

• Online Safety Bill May Pose Risk To Startups, Suggests Regulator Boss

• How data-driven policies can help states and localities

• KB4Con 2022 – Cyber Resilience and the Fourth Industrial Revolution

• KB4Con 2022 – The Latest in Hacking Techniques with the World’s Most Famous Hacker

• CNIL Imposes a Fine of 1.5 million Euros Against Software Publisher Dedalus

• Cloud Security Innovator Sonrai Security Expands Globally into Europe and Asia-Pacific

• SECURE London stokes debate on the future of the cybersecurity workforce

• Nebulon Extends 4-minute Ransomware Recovery to 2-Node Management Clusters on Dell PowerEdge Servers, Reducing Footprint and Related Costs by 33%

• CynergisTek Launches New Continuous Risk Monitoring Program (CRMP) and Signs First Six-Figure Contract With Southeastern Hospital

• Why use a managed services provider for your SASE implementation

• Report: 78% increase in ransomware attacks in last year

• Smallstep increases focus on zero-trust and automated certificates, secures $26M

• 1.2 Million Bad Apps Blocked From Reaching Google Play in 2021

• Cloudflare stomps huge DDoS attack on crypto platform

• Emotet is Evolving with Different Delivery Methods

• Call for Contributors with Knowledge of Linux Firewalls!>

• Synopsys to Acquire White Hat Security in $330M All-Cash Deal

• How Linux Became the New Bullseye for Bad Guys

• MAR-10376640-2.v1 – CaddyWiper

• CISA and FBI Update Advisory on Destructive Malware Targeting Organizations in Ukraine

• MAR-10376640-1.v1 – IsaacWiper and HermeticWizard

• Five Eyes Nations Reveal 2021’s Fifteen Most Exploited Flaws

• Microsoft Details Rampant Russian Invasion Cyber Warfare

• GitHub Repos Breached Using Stolen OAuth Tokens

• Malicious Relays And The Health Of The Tor Network

• Hackers Steal NFTs Worth $3M in Bored Ape Yacht Club Heist

• BT Signals Intent To Adopt EE Brand For UK Consumers

• What Are the Biggest Phishing Trends Today?

• Hackers fool major tech companies into handing over data of women and minors to abuse

• Sender Policy Framework (SPF)

• Cisco Patches 11 High-Severity Vulnerabilities in Security Products

• S3 Ep80: Ransomware news, phishing woes, NAS bugs, and a giant hole in Java [Podcast]

• Explainable AI for Fraud Prevention

• MAR-10376640-2.v1 – CaddyWiper

• MAR-10376640-1.v1 – IsaacWiper and HermeticWizard

• Bumblebee, a new malware loader used by multiple crimeware threat actors

• The Tenet Case: Are Hackers Targeting the Healthcare Industry?

• Call of Duty cheats can expect embarrassment with new anti-cheat feature

• Ransomware payments are marginal when compared to the overall costs

• Meta Pleases Investors After Daily User Number Growth Returns

• Fake USA for UNHCR site wants your Ukraine donations in Bitcoin

• CISA published 2021 Top 15 most exploited software vulnerabilities

• Microsoft Issues Report of Russian Cyberattacks against Ukraine

• Facebook phishers threaten users with Page Recovery Help Support

• Onyx ransomware destroys files, and also the criminal circle of trust

• QNAP customers urged to disable AFP to protect against severe vulnerabilities

• How Tencent is building a global game production system

• Attacker Breach ‘Dozens’ of GitHub Repos Using Stolen OAuth Tokens

• Threat-Hunting Journal April 2022 – Easter Edition

• Cyber Crime Is on The Rise and These Experts Have the Knowledge You Need

• KB4-CON 2022: Awareness, Behavior and Culture: Trip Report

• How Covid-19 Changed Advertising Forever

• Log4j flaw: Thousands of applications are still vulnerable, warn security researchers

• Cyberattacks Rage in Ukraine, Support Military Operations

• National Cybersecurity Agencies List Most Exploited Vulnerabilities of 2021

• Critical Vulnerabilities in Azure PostgreSQL Exposed User Databases

• Governing Platforms Through Apple’s App Store in the U.S. and China

• 4 Ways An AV Integration Company Can Improve Your Business

• Azure Database for PostgreSQL Flexible Server Privilege Escalation and Remote Code Execution

• This is how Elon Musk can securely achieve his mission of authenticating Twitter users

• Celebrating World Autism Awareness Month with educational activities and our Autism@IT mentoring project

• A Peek into Visa’s AI Tools Against Fraud

• How cities are trying to combat the nation’s deadliest weather risk

• Cloudflare Customer Targeted in Record HTTPS DDoS Attack

• Experts Detail 3 Hacking Teams Working Under the Umbrella of TA410 Group

• The More You Know: Job Searching & Interviewing

• Top Exploited Vulnerabilities in 2021 Revealed by Cybersecurity Firms

• Android security: We stopped billions of harmful app downloads, says Google

• Overcoming Cybersecurity Recruiting Challenges

• Everything you need to know to create a Vulnerability Assessment Report

• Ransoms only make up 15% of ransomware costs

• ZecOps Announces Support for Forensics Images Acquired by GrayShift

• Anger As Musk Engages With Tweets Criticising Twitter Execs

• IETF Publishes RFC 9116 for ‘security.txt’ File

• A Chilling Russian Cyber Aim in Ukraine: Digital Dossiers

• Cybercriminals Using New Malware Loader ‘Bumblebee’ in the Wild

• ZecOps Announces Support for Forensics Images Acquired by GreyShift

• Over 300,000 Internet-Exposed Databases Identified in 2021

• Phishing attacks benefiting from shady SEO practices

• Global Security Spending Set to Hit $198bn by 2025

• CloudFlare blocked a record HTTPs DDoS attack peaking at 15 rps

• The Top Exploited Vulnerabilities in 2021 Revealed by Cybersecurity Firms

• Microsoft Discloses True Scale Of Russian Cyberattacks On Ukraine

• Microsoft: Russia Has Launched Hundreds of Cyber Operations in Ukraine

• Twitter’s New Owner Elon Musk Wants DMs to be End-to-End Encrypted like Signal

• Security Alert as Researchers Discover 400,000 Exposed Databases

• Synopsys Acquires WhiteHat Security to Expand Application Security Software-as-a-Service Capabilities

• New RIG Exploit Kit Campaign Infecting Victims’ PCs with RedLine Stealer

• The 15 most exploited vulnerabilities in 2021

• Top five post-pandemic priorities for cybersecurity leaders

• Get Ready to Repair Your Own iPhone! – Intego Mac Podcast Episode 237

• Money or your business: Ensure your ransomware defense strategy beats off disruptions, extortions

• A Complete Guide to Perform External Penetration Testing on Your Client Network | Step-by-Step Methods

• How to Know If Your Computer Has Virus? How to Protect Your PC?

• U.S Cybersecurity Agency Lists 2021’s Top 15 Most Exploited Software Vulnerabilities

• Modern bank heists: How can they be thwarted?

• How to make DevSecOps a reality

• Remote execution holes in Log4j, Exchange and Confluence lead Five Eyes 2021 exploited CVE list

• CloudFlare Thwarts Record DDoS Attack Peaking at 15 Million Requests Per Second

• Russia-linked threat actors launched hundreds of cyberattacks on Ukraine

• Ransomware is up and victims are paying

• Top 5 security analytics to measure

• Versa Networks Hosting Versatility 2022, Inaugural SASE User Conference Being Held this Week

• Why Are Ransomware Attacks Increasing and How Can We Prevent Them?

• Microsoft releases open-source tool for securing MikroTik routers

• Is Quantum Secured Metro Network the future to Secure Communication

• Ransomware news headlines trending on Google

• QNAP Advises to Mitigate Remote Hacking Flaws Until Patches are Available

• Cybercriminals deliver IRS tax scams and phishing campaigns by mimicking government vendors

• Veza, the Data Security Company Built On The Power of Authorization, Emerges from Stealth and Announces $110 Million in Funding

• Cohesity Named a Major Player in the 2022 IDC MarketScape Worldwide Distributed Scale-Out File System Vendor Assessment

• RackTop Systems Expands Channel Partner Program

• CrowdStrike Introduces Adversary-Focused CNAPP Capabilities Designed to Secure and Protect Cloud Applications from Sophisticated Threats

• Despite its Challenges, Cloud Computing is Still the Way to Go

• How AI can close gaps in cybersecurity tech stacks

• Post-pandemic priorities for security leaders

• Are businesses ready to implement cloud-native development?

• PCI DSS 4.0 and ISO 27001 – the dynamic duo

• GrammaTech CodeSonar 7.0 helps developers find and fix issues while coding

• Fidelis Cybersecurity platform enhancements protect enterprises against advanced threats

• SecurityGen ACE platform improves security posture for the mobile operators

• CyberLink FaceMe Platform allows users to monitor all databases and system services in one place

• Kudelski Security MDR ONE addresses the growing sophistication of threats across hybrid environments

• Google Search removal requests expanded to include personal contact information

• Alkira Cloud Insights allows businesses to optimize their cloud deployments

• Five Eyes nations reveal 2021’s fifteen most-exploited flaws

• Musk’s Plan to Reveal the Twitter Algorithm Won’t Solve Anything

• Russia Is Being Hacked at an Unprecedented Scale

• Mandiant: Attackers’ Median Dwell Time Drops to 3 Weeks

• Threat Detection Software: A Deep Dive

• Keysight Technologies M9484C VXG enables customers to reduce test system setup complexity

• Cynerio collaborates with Securonix to protect healthcare organizations against security threats

Generated on 2022-04-29 23:55:34.009370