IT Security News Daily Summary 2022-04-30

• Microsoft Azure flaws could allow accessing PostgreSQL DBs of other customers

• The case for data-centric security in 2022

• Identifying Ransomware’s Stealthy Boot Configuration Edits

• Emotet tests new attack chain in low volume campaigns

• Black Basta Ransomware Hits American Dental Association

• Acrisure Unveils Cyber Risk Assessment Backed by Coalition

• Cobalt Iron Earns Patent for Machine-Learning-Driven Authentication Control

• Cloudflare Blocks a  DDoS Attack with 15 million Requests Per Second

• VirusTotal Reveals Claims of Critical Flaws in Google’s Antivirus Service

• Department Of Education Caught Sending Personal Data To Facebook

• Pro-Russian group Killnet launched DDoS attacks on Romanian govt sites

• Update now! Critical patches for Chrome and Edge

• FBI Conducted 3.4 Million Warrantless Searches of Americans’ Data

• One of the Most Powerful DDoS Attacks Ever Hits a Crypto Platform

• Why MFA Alone Isn’t Enough for True Cybersecurity

• Can Your Cybersecurity Culture Stand Up to the Latest Spear Phishing Techniques?

• Russia continues digital onslaught against Ukrainian systems

• Facebook’s Meta, tracking code, and the student financial aid website

• 11:11 Systems Launches Expanded Managed Security Services

• Cyware Named to Elite 80 List of Hottest Privately-Held Cybersecurity & IT Companies

• LogDNA’s new features provide enterprises with control over log data and costs

• 2022 Security Priorities: Staffing and Remote Work

• ThreatX collaborates with Distology to deliver API protection for the UK market

• Appgate partners with DXC Technology to help customers accelerate zero trust security

• CoreChain raises $4.2 million to offer blockchain-based B2B payments for enterprise clients

• Good News! IAM Is Near-Universal With SaaS

• Breast Cancer Charity Exposed Sensitive Images of U.S. Patients

• Data-wiper malware strains surge as Ukraine battles ongoing invasion

• Detecting disasters with satellite data

• TA410 under the microscope – Week in security with Tony Anscombe

• Critical Vulnerabilities Leave Some Network-Attached Storage Devices Open to Attack

• Root Cause Analysis

• IT Security News Daily Summary 2022-04-29

• Report: 95% of IT leaders say Log4shell was ‘major wake-up call’ for cloud security

• Smart pavement powers data collection, EV charging, wireless access, edge computing

• Friday Squid Blogging: Ten-Foot Long Squid Washed onto Japanese Shore — ALIVE

• As satellite images reshape conflict, security worries mount

• Best Cybersecurity Software & Tools for 2022

• Cloudflare Flags Largest HTTPS DDoS Attack It’s Ever Recorded

• Scientific advance leads to a new tool in the fight against hackers

• “Computer malfunction” Caused Death of 27,000 Chickens

• How GSA is remaking USA.gov

• Is cloud critical infrastructure? Prep now for provider outages

• You Can Now Ask Google to Remove Your Phone Number, Email or Address from Search Results

• How remote browser isolation can shut down virtual meeting hijackers

• Microsoft’s latest Windows 11 test build adds new group policies, drops SMB1 enablement by default

• Socialscan – Command-Line Tool To Check For Email And Social Media Username Usage

• Fleet Raises $20M for Endpoint Visibility Technology

• Cybersecurity and the ‘Good Cause’ Exception to the APA

• Library of Congress plans new cloud office

• Blasting out Earth’s location with the hope of reaching aliens is a controversial idea – two teams of scientists are doing it anyway

• GitHub issues final report on supply-chain source code intrusions

• States and cities are moving to make virtual hearings permanent

• Secret School District Crypto Miner Resigns

• BIO-ISAC Partners with NY Metro InfraGard

• Finnish Hotels’ Data Compromised

• The top 5 most routinely exploited vulnerabilities of 2021

• Conti Ransomware Assault Continues Despite the Recent Breach

• ISG to Publish Reports on Contact Center Services, Platforms

• The Global Cyber Innovation Summit, the CISO “Invitation-only” Event, Returns in 2022 to Set the Global Agenda for Cybersecurity

• What is data fabric and how does it impact Cybersecurity?

• Microsoft Edge’s ‘Secure Network’ sounds a lot like a built-in VPN

• Beware Twitter Messages claiming “Your blue badge Twitter account has been reviewed as spam”

• Quantum Physics is said to make hacking impossible

• Sabanci Group Acquires Majority Stake in OT Security Firm Radiflow for $45 Million

• Don’t expect to get your data back from the Onyx ransomware group

• How to Use Your Asset Management Software to Reduce Cyber Risks

• Apple Profits Surge, As Firm Warns Of Trouble Ahead

• Ransomware costs show prevention is better than the cure

• Video Conferencing Apps Sometimes Ignore the Mute Button

• New OpenSSF Project Hunts for Malicious Packages in Open Source Repositories

• Take a Diversified Approach to Encryption

• Conti’s BazarLoader Replaced with Bumblebee Malware

• Tesla’s Elon Musk Sells Shares Worth $4bn, Promises No More

• Platform Transparency Legislation: The Whos, Whats and Hows

• HackerOne acquires PullRequest to help users integrate code security reviews during workflows

• US has Offered a $10 Million Bounty on Data About Russian Sandworm Hackers

• Appian World 2022: Democratising Low-code

• Report: DDoS attacks have increased 4.5 times since last year

• Experts say BlackCat ransomware isn’t more of a problem than any other ransomware strain

• Intigriti’s ‘head of hackers’: crowdsourced security is key to mitigating modern threats

• This phishing campaign delivers malware that steals your passwords and chat logs

• Ambient.ai Expands Computer Vision Capabilities for Better Building Security

• Private Equity Executive Sought To Undermine NSO Critics

• Powerful DDoS Targets Cryptocurrency Platform

• Interpol: We Can’t Arrest Our Way Out Of Cybercrime

• Vulnerable Plugins Plague The CMS Website Security Landscape

• EmoCheck Tool 2.2 Supports and Detects New 64-bit Variants of Emotet Malware

• Security Turbulence in the Cloud: Survey Says…

• Many Internet-Exposed Servers Affected by Exploited Redis Vulnerability

• Microsoft Documents Over 200 Cyberattacks by Russia Against Ukraine

• Interpol: We can’t arrest our way out of cybercrime

• New Nimbuspwn Linux Flaws Could Provide Attackers Root Access

• Cyberespionage APT Now Identified as Three Separate Actors

• Tips on Upgrading Business Security Practices to “New Norm” Standards

• 3 Tech Solutions Church Leaders Can Use to Protect Their Congregation

• 7 Useful Crypto Coin Wallet Security Methods

• Amazon Posts First Net Loss Since 2015, Amid Challenging Market

• Synology, QNAP, WD Warn Users About Vulnerabilities Exploited at Hacking Contest

• Medical Software Company Fined €1.5M for Exposing 490k Patients’ Data

• Adventures in the land of BumbleBee

• Data Security Firm Veza Emerges From Stealth With $110 Million in Funding

• Google Adds Ways to Keep Personal Info Private in Searches

• You Need to Update iOS, Android, and Chrome Right Now

• Ukraine’s Digital Battle With Russia Isn’t Going as Expected

• India gives local techies 60 days to hit 6-hour deadline for infosec incident reporting

• Beware scammers disguised as fraud busters

• Vulnerable plugins plague the CMS website security landscape

• Deepfakes set to be used in organised crime

• Warning! Instagram Stories hides a scam in plain sight

• Sina Weibo, China’s Twitter analog, reveals users’ locations and IP addresses

• Global security spending set to reach $198bn by 2025

• Account Takeover Definition. Account Takeover Prevention

• Google Play’s Data safety section empowers Android users to make informed app choices

• Ransomware Fallout Costs Seven Times the Ransom Paid

• Critical vulnerabilities open Synology, QNAP NAS devices to attack

• Five Eyes Agencies List Top 15 Most Exploited Bugs of 2021

• Bumblebee Malware Loader Has a Sting in the Tail

• HackerOne acquires code security tester, review service PullRequest

• Apple’s AirTags: One Year On

• Ukraine government and pro-Ukrainian sites hit by DDoS attacks

• Sina Weibo, China’s Twitter analogue, reveals users’ locations and IP addresses

• DigiCert outlines its vision to help customers manage trust across their digital footprint

• Anonymous hacked Russian PSCB Commercial Bank and companies in the energy sector

• Hurry up, disable AFP on your QNAP NAS until the vendor fixes 8 bugs

• Edge’s prospective free VPN would be a tempting reason to ditch Chrome

• Introducing Personal Data Cleanup

• Will Elon Musk follow the rules in his takeover of Twitter?

• Indian Govt Orders Organizations to Report Security Breaches Within 6 Hours to CERT-In

• Microsoft Azure Vulnerability Exposes PostgreSQL Databases to Other Customers

• Work from home culture could fuel Russian Cyber Attacks

• Artificial Intelligence induced microwave oven tries to kill its owner

• Indian Govt Orders Organisations to Report Security Breaches Within 6 Hours to CERT-In

• It’s Called BadUSB for a Reason

• Ongoing DDoS attacks from compromised sites hit Ukraine

• Next-Gen CASB & Gamma.AI

• Leadership and recruitment changes needed to address burnout in cybersecurity

• Don’t ignore risks lurking within your own network

• New infosec products of the week: April 29, 2022

• Bumblebee malware loader emerges as Conti’s BazarLoader fades

• How IIoT solutions can optimize industrial supply chain operations

• 308,000 exposed databases discovered, proper management is key

• What is tokenization, what are the types of tokenization, and what are its benefits for eCommerce businesses?

• Security leaders relying more heavily on MSPs amid talent crunch

• China, India, Russia missing from future of internet pledge by US, EU, and 33 others

• Companies poorly prepared to meet CCPA, CPRA and GDPR compliance requirements

• Bitwarden Generator helps customers create unique usernames for all their accounts

• Codenotary adds independent cryptographic validator to its Community Attestation Service

• Workato Enterprise Key Management protects sensitive data for enterprise customers

• McAfee Personal Data Cleanup allows users to protect themselves from identity thieves and hackers

• Digital.ai Ascension empowers organizations to unify predictive insights across the software lifecycle

• Handling Sensitive Data: A Primer

• Comcast Business expands partnership with Cisco to simplify network management operations

• Acrisure and Coalition join forces to provide security solutions for small and midsize businesses

Generated on 2022-04-30 23:55:26.679228