IT Security News Daily Summary 2022-05-06

• Do Macs Need Antivirus Software?

• How to Remove Personal Information From Data Broker Sites

• The Pentagon wants to prevent personnel data tracking, breaches

• NIST’s supply chain security guidance tells agencies to look to FedRAMP

• EV charging station map highlights infrastructure disparities

• Cryptocurrency mixer sanctioned over Lazarus Group ties

• How the thriving fraud industry within Facebook attacks independent media

• FBI: Business Email Compromise: The $43 Billion Scam

• Are You Playing A Role In Protecting Your Online Privacy?

• One year removed from the Colonial Pipeline attack, what have we learned?

• Scammer Infects His Own Machine with Spyware, Reveals True Identity

• What We’ve Learned in the 12 Months Since the Colonial Pipeline Attack

• Ikea Canada Breach Exposes 95K Customer Records

• Expert Advice On Colonial Pipeline Ransomware Attack Anniversary

• Cryptocurrency laundromat Blender shredded by US Treasury in sanctions first

• White House Moves to Shore Up US Post-Quantum Cryptography Posture

• QNAP fixes multiple flaws, including a QVR RCE vulnerability

• Today’s Headlines and Commentary

• USB-based Wormable Raspberry Robin Malware Targeting Windows Installer

• Every Google Chrome user should click this button now

• Microsoft Defender vs Carbon Black: EDR software comparison

• Expert Advise On Colonial Pipeline Ransomware Attack Anniversary

• Hackers exploit vulnerable Adminer for AWS database thefts

• AT&T Expands Access to Advanced Secure Edge and Remote Workforce Capabilities

• The Declaration for the Future of the Internet Is for Wavering Democracies, Not China and Russia

• Britain’s National Health Service Hit by Massive Phishing Campaign

• Crypto Scammers Exploit: Elon Musk Speaks on Cryptocurrency

• As data privacy laws expand, businesses must employ protection methods

• Austin becomes the first Texas city to experiment with ‘guaranteed income’

• Zero Trust VPN Company Tailscale Raises $100 Million

• You didn’t leave enough space between ROSE and AND, and AND and CROWN

• DDoS Attacks by Hacktivists Disrupted Russian Alcohol Supply Chain

• DOD-VA health record modernization not hitting interoperability targets, watchdogs say

• 6 in 10 Americans would quit current job for remote position

• Senate Dems seek full UI administration funding

• Data breach Discovered at IKEA Canada impacts 95,000 Customers

• Cloudflare Appoints Carlos Torales Montero as VP, Head of Sales Latin America

• U.S. Public Sector Picks Up Pace in Procurement

• Frontdoor Announces First-Quarter 2022 Revenue Increased 7 Percent to $351 Million

• Adlumin Expands Executive Leadership Team with Two Industry Experts

• Cybersecurity and resilience: board-level issues

• Steer clear of these Instagram “Get rich with Bitcoin” scams

• OpenSea warns of Discord channel compromise

• Killnet Hacking group of Russia pledges to disrupt ventilators across UK Hospitals

• Take Control of Your Application Security

• How Microsoft will publish info to comply with executive order on software bill of materials

• How to secure your internet activity on iOS devices

• NIST Updates Supply Chain Cybersecurity Guidance

• WooCommerce Credit Card Stealer Found Implanted in Fake Images

• Nvidia Charged By SEC For ‘Inadequate Disclosures’ About Crypto Mining

• Man Arrested For Fake Facebook Page Loses Civil Suit Against Police

• Passwords: Do Actions Speak Louder Than Words?

• Gucci Stores To Accept Crypto Currencies In US

• Russia Hammered By Pro-Ukrainian Hackers After Invasion

• Catalans Demand Answers After Spanish Spy Chief Confirms Phone Hacking

• USB-Based Wormable Malware Targets Windows Installer

• Here’s How The Lazarus Hackers Start Their Attacks

• German Government Touts $14.7bn State Aid For Chip Factories

• Raspberry Robin – A a Windows Malware Spreads Using External USB Drives

• Cyberespionage: New Mustang Panda campaign targets Europe

• Anonymous and Ukraine IT Army continue to target Russian entities

• Facebook: Bogus Event Scammers are Targeting Vendors

• Google, Microsoft and Apple commit to passwordless sign-in standard

• The Growing Danger of Data Exfiltration by Third-Party Web Scripts

• Heroku Shares Details on Recent GitHub Attack

• Colonial Pipeline 1 Year Later: What Has Yet to Change?

• Tech Giants Unite in Effort to Scrap Passwords

• NetDooka framework distributed via a pay-per-install (PPI) malware service

• Climate Security Next Steps for the U.S. Government

• Help! I have 100,000 unread messages in my Gmail inbox. Where do I even start? [Ask ZDNet]

• ‘Once they have access to your screen, they have complete control’. Watch out for these screen-sharing scams

• Security researchers: Here’s how the Lazarus hackers start their attacks

• China Not Happy With South Korea Joining NATO Cyber Defense Center

• GoBrut Botnet Targets Sites and Devices: Heimdal Security Report

• Security Advisory Issued For Critical F5 Vulnerability

• World Password Day 2022 – Commentary

• Windows Installer Used by New Raspberry Robin Worm

• NIST Releases Advisory Guide on Supply Chain Attack Protection

• Impact of Alexa Ranking Service Shutdown on Cybersecurity Industry

• Breaking: Expert OpenSea Phishing Vulnerability

• NIST Update Supply Chain Guidance

• Steer clear of fake premium mobile app unlockers

• The Operational Structure of Bitcoin

• Increasing entropy in our CSP nonces

• USB-based Wormable Malware Targets Windows Installer

• Small Drones Are Giving Ukraine an Unprecedented Edge

• Researchers Warn of ‘Raspberry Robin’ Malware Spreading via External Drives

• Corporate Involvement in International Cybersecurity Treaties

• Killnet Threatens To Shut Down Hospital Ventilators, After London Arrest

• Secure Your Migration to AWS, Part I: The Challenges

• The complete guide to SSH keys in GitLab

• White House warns of cryptography-cracking quantum computers

• How Instagram scammers talk users out of their accounts

• Vulnerable Docker Installations Are A Playhouse for Malware Attacks

• HHS Information Security Program ‘Not Effective’

• South Korea joins NATO Cyber Defence Centre

• NIST updates guidance for cybersecurity supply chain risk management

• Mobile subscription Trojans and their little tricks

• Ukrainians DDoS Russian Vodka Supply Chains

• Special Police Constable Used Encrypted Chat to Post Child Abuse Content

• Hackers Using PrivateLoader PPI Service to Distribute New NetDooka Malware

• Biometrics: Powerful, but if handled improperly, very dangerous.

• Microsoft, Apple and Google Team Up on Passwordless Standard

• Ransomware: April 2022 review

• Conti, REvil, LockBit Ransomware Flaws Exploited to Block Encryption

• The 5 best secure browsers for privacy in 2022

• Attackers are Employing Multiple Malwares to Target Ukrainian System

• Experts Uncover New Espionage Attacks by Chinese ‘Mustang Panda’ Hackers

• Ukraine IT Army hit EGAIS portal impacting Russia’s alcohol distribution

• Bank for International Settlements calls for reform of data governance

• Walking away from ransomware unscathed. Can you? Really?

• Deepfake threats: Risk of false electronic evidence, extortion

• Wipro earns Microsoft Cloud Security Specialization certification

• Microsoft says to ditch passwords all together on World Password Day

• Critical Cisco NFVIS Software Flaw Let Attacker Injects Commands at The Root Level

• Google Releases Android Update to Patch Actively Exploited Vulnerability

• South Korea becomes first Asian member of NATO cyber research centre

• New infosec products of the week: May 6, 2022

• May 2022 Patch Tuesday forecast: Look beyond just application and OS updates

• Smart government agencies are opting for multicloud environments

• Heroku fesses up to customer password theft due to OAuth token attack

• Nothing personal: Training employees to identify a spear phishing attack

• AuditBoard introduces enhanced automation capabilities to accelerate compliance management

• Exterro upgrades FTK Connect to enhance digital forensic and incident response automation

• WALLIX PAM4ALL offers protection for user access and workstations

• Self-propelled, endlessly programmable artificial cilia

• F5, Cisco admins: Stop what you’re doing and check if you need to install these patches

• What Are Dark Web Search Engines and How to Find Them?

• AST Extends 2022 ‘ASTORS’ Early Entry Discount – by Popular Demand

• WhatsApp to roll out larger file size sharing, bigger groups, and new reactions feature

• Sternum integrates with Kibana and Grafana to enhance IoT protection

• Mphasis partners with Securonix to prepare customers against advanced cyber security risks

• Apple, Google and Microsoft expand support for FIDO Alliance’s passwordless sign-in standard

• Rambus acquires Hardent to address customer needs for next-generation data center solutions

• T-Mobile and Cradlepoint join forces to provide businesses with 5G fixed wireless internet solutions

• Citrix partners with Google Cloud to enable secure remote work for customers

• Onapsis collaborates with NextGen Cyber Talent to address the cybersecurity talent shortage

• Immuta expands partnership with Starburst to scale secure data access through automation

• Sentry raises $90 million to drive adoption of application performance monitoring

• Magnet Forensics acquires Comae Technologies to continue developing the memory analysis platform

• Crypto Scammers exploit talk on Cryptocurrency

• Senate Dems seek funds for UI administration

• White House sounds alarm on threat from quantum computers

• California dives into blockchain

• Can AI step up to offer help where humans cannot?

• Microsoft, Apple, and Google Promise to Expand Passwordless Features

• How to Protect Your Digital Privacy if Roe v. Wade Falls

• Dave Wilner joins Styra Board of Directors

• Intel appoints Matt Poirier as SVP of Corporate Development

• Diana Massaro joins Skyhigh Security as CMO

• Arcanna.ai assembles a team of advisors and security professionals

• Tailscale raises $100 million to help enterprises eliminate connectivity problems

• FBI: Cyber-scams cost victims $6.9b-plus worldwide in 2021

• Drive-by property appraisals streamline data collection

• IT Security News Daily Summary 2022-05-05

• Google, Apple, Microsoft promise end to passwords, courtesy of your mobile phone

• How to use KDE Plasma’s Konsole SSH plugin

• CrowdStrike vs FireEye: Compare EDR software

• Check Point vs Palo Alto: Comparing EDR software

• How to manage your Alexa voice recordings and privacy

• Heroku: Cyberattacker Used Stolen OAuth Tokens to Steal Customer Account Credentials

• CIA Wants Russians to Share Secret Info with the Agency via its Darknet Site

• HBCUs could be one key to improving equity in federal contracting and technology

• SentinelOne finds high-severity flaws in Avast, AVG

• US Cyber Command Team Helps Lithuania Protect Its Networks

• NIST Issues Guidance for Addressing Software Supply-Chain Risk

• Google addresses actively exploited Android flaw in the kernel

• EU Antitrust Head Calls For Global Approach To Tackle Big Tech

• Senator not sold on Army’s $22 billion bet on IVAS

• Why rural communities struggle to bring in much-needed federal grants

• A Third of Americans Use Easy-to-Guess Pet Passwords

• Microsoft, Apple, Google accelerate push to eliminate passwords

• Critical Cisco VM-Escape Bug Threatens Host Takeover

• Cisco Releases Security Updates for Enterprise NFV Infrastructure Software

• [Video] Introduction to Use-After-Free Vulnerabilities | UserAfterFree Challenge Walkthrough (Part: 1)

• Top Cyber Threats to the Telecom Industry

• NASA chief calls out the ‘plague’ of cost-plus contracts

• FBI: Bank Losses From BEC Attacks Top $43B

• Cisco Releases Security Updates for Enterprise NFV Infrastructure Software

• Demystify the Cybersecurity Risk Management Process

• India to Collect User Data from VPNs, Data Centers, and Cloud Service Providers

• Phishing threats attempt to hook new government victims

• Catalan: Spain Spy Chief Admits Legally Hacking Some Phones

• Google cloud misconfiguration poses risk to customers

• GitHub to Enforce Two-Factor Authentication

• Hunter Biden Laptop Repairman Sues Over Hacker Allegations

• Magnet Forensics Acquires Cybersecurity Software Firm Comae Technologies

• Attackers Use Event Logs To Hide Fileless Malware

• Avast Patches Decades Old Vulnerabilities In Antivirus Product

• VHD Ransomware Linked To North Korea’s Lazarus Group

• Stung By 3 Court Losses, ISPs Stop Fighting California’s Net Neutrality Law

• India to Collect User Data from VPNs, Crypto, Data Centers, and Cloud Service Providers

• Modern Identity and Access Management Makes a Difference, Especially at a Mega-Scale

• Cisco Announces Cloud Controls Framework Is Now Available to Public

• World Password Day: Why we need a password-less future

• World Password Day: Why are passwords still a problem in 2022?

• Dutch Watchdog To Investigate Google Play Store Practices

• Report: Cybersecurity workforce must grow by two-thirds to protect assets

• It’s World Password Day! Here’s the one simple tip you need to keep your accounts secure online

• Multichannel Phishing Concerns Cybersecurity Leaders in 2022

• Safeguarding From Container Attacks Inside the Cloud

• NHS Email Servers used for Phishing Attacks

• X-Force Research Update: Top 10 Cybersecurity Vulnerabilities of 2021

• GitHub Announces Mandatory 2FA for Code Contributors

• Illuminate Data Breach Impacts More School Districts

• VPN Providers Threaten to Quit India Over New Data Law

• The Movement to Ban Government Use of Face Recognition

• The $43 billion Business Email Compromise threat

• US VP Kamala Harris To Meet Amazon Labor Union At White House

• SYN flood attack

• Cisco adds predictive networking SaaS options to improve uptime and security

• White House: Quantum computers could crack encryption, so here’s what we need to do

• FBI: Email fraud keeps getting worse. Here’s how to protect yourself

• US Gov Issues Security Memo on Quantum Computing Risks

• 1,000+ Attacks in 2 Years: How the SideWinder APT Sheds Its Skin

• One Identity Guest Blog – The password checklist

• Nigerian Tesla: 419 scammer gone malware distributor unmasked

• Cisco addresses three bugs in Enterprise NFVIS Software

• Security recommendations for SAP HANA on RHEL

• The Chatter Podcast: Why We Fight with Christopher Blattman

• Chinese State-Sponsored APT Naikon Resurfaces with New Tactics, Techniques, and Procedures (TTPs).

• Google fixes two critical Pixel vulnerabilities: Get your updates when you can!

• NSA chief: Cyber Command did 9 international missions last year

• $43 billion stolen through Business Email Compromise since 2016, reports FBI

• S3 Ep81: Passwords (still with us!), Github, Firefox at 100, and network worms [Podcast]

• Docker Under Siege: Cybercriminals Compromise Honeypots to Ramp Up Attacks

• NIST Releases Updated Cybersecurity Guidance for Managing Supply Chain Risks

• Vendor Email Compromise (VEC) Explained

• AvosLocker Ransomware Uses Driver Files to Disable Anti-Virus Solutions

• Android’s May 2022 Security Updates Patch 36 Vulnerabilities

• Why Security Matters Even More in Online Gaming

• Google to Add Passwordless Authentication Support to Android and Chrome

• A couple of 10-Year-Old flaws affect Avast and AVG antivirus

• Why a Focus on Gender Increases National Security

• NCSC Warns Of Threats Posed By Malicious Apps

• Google chases sovereignty market with EU Workspace Data product

• AutoRABIT Raises $26 Million for Salesforce DevSecOps Platform

• Forrester Report Reveals the 5 Benefits IT Teams Really Need from API Security Tools

• Kellogg Community College Closes after Ransomware Attack

• Car Rental Giant Sixt Hit by Cyberattack, Operations Shut Down

• Cloudflare Successfully Thwarted One of The Largest DDoS Attacks

• Data Theorem launches attack surface management product that identifies 3P assets & appsec violations

• Apple, Microsoft and Google announce plans to enable passwordless authentication for billions of devices

• Google unveils passwordless log-in plans on World Password Day

• NSA chief: Cyber Command did 9 cyber defense missions last year

• How Can Healthcare Keep a Stronger Lock Down on their Cybersecurity

• F5 Warns of Critical Bug Allowing Remote Code Execution in BIG-IP Systems

• CANs Reinvent LANs for an All-Local World

• Latest Cohort Announced for NCSC For Startups

• Every ISP in the US Must Block These 3 Pirate Streaming Services

• UK National Health Service Email Accounts Compromised by Hackers to Steal Microsoft Logins

• This World Password Day consider ditching passwords altogether

• 5 Advantages of Fraud Scoring

• NetDooka Framework Distributed via PrivateLoader Malware as Part of Pay-Per-Install Service

• VHD Ransomware Linked to North Korea’s Lazarus Group

• GitHub to Developers: Turn on 2FA or Lose Access

• Announcing the public availability of the Cisco Cloud Controls Framework (CCF)

• Researchers discover ‘dangerous functionality’ in Google Cloud control pane

• Decade-old bugs discovered in Avast, AVG antivirus software

• A security researcher told me my passwords and more: How 15 years of digital footprints left me exposed

• Google, Apple, Microsoft make a new commitment for a “passwordless future”

• OT Security Firm Network Perception Raises $13 Million

• The Importance of Defining Secure Code

• FBI: Losses From BEC Scams Surpass $43 Billion

• Flaws in Avast, AVG Antiviruses Could Have Facilitated Attacks on Millions of Devices

• Researchers Disclose 10-Year-Old Vulnerabilities in Avast and AVG Antivirus

• 15.3 Million Request-Per-Second DDoS Attack

• Critical F5 BIG-IP flaw allows device takeover, patch ASAP! (CVE-2022-1388)

• BIG-IP RCE Bug Could Allow Device Takeover

• April 2022 Cybersecurity Roundup: Funky Pigeon cyber attack, Costa Rica ransomware attack, Mailchimp cybersecurity negligence lawsuit

• It’s business as usual for REvil ransomware

• OpenSSF Launches Package Analysis Tool To Detect Malicious Packages

• What is a Progressive Website Application?

• Netflix Sued By Shareholders Over Subscription Disclosure

• World Password Day: Brushing up on the basics

• The Age of Zero-day Java Vulnerabilities

• Check Point Software Outlines Five Must-Haves for Creating a Secure Password

• There’s no sugarcoating it: That online sugar daddy may be a scammer

• Thousands of Borrowers’ Data Exposed from ENCollect Debt Collection Service

• Heroku Forces User Password Resets Following GitHub OAuth Token Theft

• Cisco Patches Critical VM Escape in NFV Infrastructure Software

• OWASP patches path traversal flaw

• 1-15 April 2022 Cyber Attacks Timeline

• It’s time for Internet Providers to Become Primary Security Providers

• Industry Groups Drop Challenge To California Net Neutrality Law

• F5 warns its customers of tens of flaws in its products

• China stealing intellectual data from Europe and North America

• Google is protecting Ukraine from State Sponsored Cyber Attacks of Russia

• FBI warns of new reverse instant payments banking scam

• South Korea Admitted to NATO Cyber Defense Center

• 1000s of phishing emails sent from NHS inboxes

• Multi-factor authentication: Busting a handful of common myths

• FBI: Thailand and Hong Kong Banks Used Most in BEC

• NHS Inboxes Hijacked to Send 1000+ Malicious Emails

• Apple AirTags: One Year On – Intego Mac Podcast Episode 238

• ID theft tools small businesses should invest in 2022 – Tighten your security

• Try the Cloud NGFW Free Trial in AWS Marketplace

• VM escape and root access bugs fixed in Cisco NFV infrastructure software

• Federal Court finds RI Advice failed to manage cybersecurity risks in landmark decision

• Phishing operation hits NHS email accounts to harvest Microsoft credentials

• Biden orders new quantum push to ensure encryption isn’t cracked by rivals

• How the EPL tackles piracy and stops people going around the wall

• Beijing-backed gang looted IP around the world for years, claims Cybereason

• Tackling the threats posed by shadow IT

• What Does Volunteering at (ISC)² Mean? Hear From Volunteer Lisa Vaughan

• Passwords are secrets that should never be shared

• Australian Businesses That Adopt Eagle Eye Networks Cloud Video Surveillance Are Eligible for Tax Break

• 3 most dangerous types of Android malware

• GitHub to require two factor authentication for code contributors by late 2023

• 7 threat detection challenges CISOs face and what they can do about it

• World Password Day is Dead. Long Live World Password Day!

• Cisco Issues Patches for 3 New Flaws Affecting Enterprise NFVIS Software

• How to identify vulnerabilities with NMAP

• Computer Malfunction Leads to Death of Over 27,000 Chickens

• F5 Warns of a New Critical BIG-IP Remote Code Execution Vulnerability

• Data Theorem Supply Chain Secure identifies third-party vulnerabilities across the application software stack

• Building on Your Existing DAM Instance is Smart Budget Planning

• Variscite enhances IoT and edge security with over-the-air software updates

• BIO-key MobileAuth enhancements safeguard access to critical data

• Uptycs helps security teams strengthen security posture with CIEM capabilities

• Noname Security Active Testing allows businesses to stop vulnerabilities before they reach production

• Veracode Continuous Software Security Platform enables organizations to mitigate their security risk

• Idaho Needs to Shore Up Cybersecurity, Task Force Says

• World Password Day – the 1960s just called and gave you your passwords back

• Syniti Migrate optimizes data migration for enterprise customers

• Elastic Observability 8.2 provides fine-grain control over data collection and storage

• Atos partners with VMware to help organizations drive value from data

• Binarly collaborates with immune to secure modern computer infrastructure

• Votiro partners with Thales to strengthen zero trust security for enterprises

• US Cyber Command shored up nine nations’ defenses last year

Generated on 2022-05-06 23:55:34.846637