IT Security News Daily Summary 2022-05-07

• Post-Quantum Cryptography Set to Replace RSA, ECC

• Heroku Admits to Customer Database Hack after OAuth Token Theft

• SEEQC’s Statement in Support of President Biden’s Executive Order and National Security Memorandum on Quantum Computing

• Blackpoint Cyber Announces Launch of New Podcast, The Unfair Fight, Hosted by Founder and CEO Jon Murchison

• Appgate Achieves SOC 2 Type 2 Certification

• Stories from the SOC – Lateral movement using default accounts

• Cybersecurity reporting mandates could make us more vulnerable, not less

• The Colonial Pipeline ransomware attack a year on: 5 lessons for security teams

• Raspberry Robin spreads via removable USB devices

• FBI: Business Email Compromise is a $43 Billion Scam

• European Organizations Targeted by ‘Mustang Panda’ Hacking Group

• VHD Ransomware Linked to North Korea’s Cyber-Army Targets Financial Institutions

• Your Phone May Soon Replace Many of Your Passwords

• Will VPN Providers and the Indian Government Clash Over New Rules on User Data Collection?

• Data Brokers Track Abortion Clinic Visits for Anyone to Buy

• Malware campaign hides a shellcode into Windows event logs

• Apple Mail Now Blocks Email Tracking. Here’s What That Means

• US gov sanctions cryptocurrency mixer Blender also used by North Korea-linked Lazarus APT

• Shrinking the Cyber Skills Gap by Taking Advantage of Diversity, Unique Opportunities, and Automation

• Vulnerable Today, Hacked Tomorrow: How a Lack of OT Cybersecurity Affects Critical Infrastructure

• New Malware NetDooka Deployes Payload: Trend Micro Report

• False-flag cyberattacks a red line for nation-states, says Mandiant boss

• Google to Implement Passwordless Logins in Android and the Chrome Web Browser

• This New Fileless Malware Hides Shellcode in Windows Event Logs

• U.S. Sanctions Cryptocurrency Mixer Blender for Helping North Korea Launder Millions

• QNAP Releases Firmware Patches for 9 New Flaws Affecting NAS Devices

• SimSpace collaborates with ACSC to provide cyber range exercises for organizations

• Defending against APT attacks – Week in security with Tony Anscombe

• Exabeam partners with ZeroFox to improve cyber defense capabilities for customers

• Report: 36% of security pros have adopted hardware-assisted cybersecurity

• The 4 best travel VPNs of 2022

• KSOC announces executive advisory board to guide product and strategy developments

• CyberArk appoints Simon Mouyal as CMO

• SafeGraph’s Disingenuous Claims About Location Data Mask a Dangerous Industry

• NASA weaves a data and AI fabric for drone intelligence

• Post-Quantum Cryptography Set to Replace RSA, AES, ECC

• Weekly Update 294

• IT Security News Daily Summary 2022-05-06

• Do Macs Need Antivirus Software?

• How to Remove Personal Information From Data Broker Sites

• The Pentagon wants to prevent personnel data tracking, breaches

• NIST’s supply chain security guidance tells agencies to look to FedRAMP

• EV charging station map highlights infrastructure disparities

• Cryptocurrency mixer sanctioned over Lazarus Group ties

• How the thriving fraud industry within Facebook attacks independent media

• FBI: Business Email Compromise: The $43 Billion Scam

• Are You Playing A Role In Protecting Your Online Privacy?

• One year removed from the Colonial Pipeline attack, what have we learned?

• Scammer Infects His Own Machine with Spyware, Reveals True Identity

• What We’ve Learned in the 12 Months Since the Colonial Pipeline Attack

• Ikea Canada Breach Exposes 95K Customer Records

• Expert Advice On Colonial Pipeline Ransomware Attack Anniversary

• Cryptocurrency laundromat Blender shredded by US Treasury in sanctions first

• White House Moves to Shore Up US Post-Quantum Cryptography Posture

• QNAP fixes multiple flaws, including a QVR RCE vulnerability

• Today’s Headlines and Commentary

• USB-based Wormable Raspberry Robin Malware Targeting Windows Installer

• Every Google Chrome user should click this button now

• Microsoft Defender vs Carbon Black: EDR software comparison

• Expert Advise On Colonial Pipeline Ransomware Attack Anniversary

• Hackers exploit vulnerable Adminer for AWS database thefts

• AT&T Expands Access to Advanced Secure Edge and Remote Workforce Capabilities

• The Declaration for the Future of the Internet Is for Wavering Democracies, Not China and Russia

• Britain’s National Health Service Hit by Massive Phishing Campaign

• Crypto Scammers Exploit: Elon Musk Speaks on Cryptocurrency

• As data privacy laws expand, businesses must employ protection methods

• Austin becomes the first Texas city to experiment with ‘guaranteed income’

• Zero Trust VPN Company Tailscale Raises $100 Million

• You didn’t leave enough space between ROSE and AND, and AND and CROWN

• DDoS Attacks by Hacktivists Disrupted Russian Alcohol Supply Chain

• DOD-VA health record modernization not hitting interoperability targets, watchdogs say

• 6 in 10 Americans would quit current job for remote position

• Senate Dems seek full UI administration funding

• Data breach Discovered at IKEA Canada impacts 95,000 Customers

• Cloudflare Appoints Carlos Torales Montero as VP, Head of Sales Latin America

• U.S. Public Sector Picks Up Pace in Procurement

• Frontdoor Announces First-Quarter 2022 Revenue Increased 7 Percent to $351 Million

• Adlumin Expands Executive Leadership Team with Two Industry Experts

• Cybersecurity and resilience: board-level issues

• Steer clear of these Instagram “Get rich with Bitcoin” scams

• OpenSea warns of Discord channel compromise

• Killnet Hacking group of Russia pledges to disrupt ventilators across UK Hospitals

• Take Control of Your Application Security

• How Microsoft will publish info to comply with executive order on software bill of materials

• How to secure your internet activity on iOS devices

• NIST Updates Supply Chain Cybersecurity Guidance

• WooCommerce Credit Card Stealer Found Implanted in Fake Images

• Nvidia Charged By SEC For ‘Inadequate Disclosures’ About Crypto Mining

• Man Arrested For Fake Facebook Page Loses Civil Suit Against Police

• Passwords: Do Actions Speak Louder Than Words?

• Gucci Stores To Accept Crypto Currencies In US

• Russia Hammered By Pro-Ukrainian Hackers After Invasion

• Catalans Demand Answers After Spanish Spy Chief Confirms Phone Hacking

• USB-Based Wormable Malware Targets Windows Installer

• Here’s How The Lazarus Hackers Start Their Attacks

• German Government Touts $14.7bn State Aid For Chip Factories

• Raspberry Robin – A a Windows Malware Spreads Using External USB Drives

• Cyberespionage: New Mustang Panda campaign targets Europe

• Anonymous and Ukraine IT Army continue to target Russian entities

• Facebook: Bogus Event Scammers are Targeting Vendors

• Google, Microsoft and Apple commit to passwordless sign-in standard

• The Growing Danger of Data Exfiltration by Third-Party Web Scripts

• Heroku Shares Details on Recent GitHub Attack

• Colonial Pipeline 1 Year Later: What Has Yet to Change?

• Tech Giants Unite in Effort to Scrap Passwords

• NetDooka framework distributed via a pay-per-install (PPI) malware service

• Climate Security Next Steps for the U.S. Government

• Help! I have 100,000 unread messages in my Gmail inbox. Where do I even start? [Ask ZDNet]

• ‘Once they have access to your screen, they have complete control’. Watch out for these screen-sharing scams

• Security researchers: Here’s how the Lazarus hackers start their attacks

• China Not Happy With South Korea Joining NATO Cyber Defense Center

• GoBrut Botnet Targets Sites and Devices: Heimdal Security Report

• Security Advisory Issued For Critical F5 Vulnerability

• World Password Day 2022 – Commentary

• Windows Installer Used by New Raspberry Robin Worm

• NIST Releases Advisory Guide on Supply Chain Attack Protection

• Impact of Alexa Ranking Service Shutdown on Cybersecurity Industry

• Breaking: Expert OpenSea Phishing Vulnerability

• NIST Update Supply Chain Guidance

• Steer clear of fake premium mobile app unlockers

• The Operational Structure of Bitcoin

• Increasing entropy in our CSP nonces

• USB-based Wormable Malware Targets Windows Installer

• Small Drones Are Giving Ukraine an Unprecedented Edge

• Researchers Warn of ‘Raspberry Robin’ Malware Spreading via External Drives

• Corporate Involvement in International Cybersecurity Treaties

• Killnet Threatens To Shut Down Hospital Ventilators, After London Arrest

• Secure Your Migration to AWS, Part I: The Challenges

• The complete guide to SSH keys in GitLab

• White House warns of cryptography-cracking quantum computers

• How Instagram scammers talk users out of their accounts

• Vulnerable Docker Installations Are A Playhouse for Malware Attacks

• HHS Information Security Program ‘Not Effective’

• South Korea joins NATO Cyber Defence Centre

• NIST updates guidance for cybersecurity supply chain risk management

• Mobile subscription Trojans and their little tricks

• Ukrainians DDoS Russian Vodka Supply Chains

• Special Police Constable Used Encrypted Chat to Post Child Abuse Content

• Hackers Using PrivateLoader PPI Service to Distribute New NetDooka Malware

• Biometrics: Powerful, but if handled improperly, very dangerous.

• Microsoft, Apple and Google Team Up on Passwordless Standard

• Ransomware: April 2022 review

• Conti, REvil, LockBit Ransomware Flaws Exploited to Block Encryption

• The 5 best secure browsers for privacy in 2022

• Attackers are Employing Multiple Malwares to Target Ukrainian System

• Experts Uncover New Espionage Attacks by Chinese ‘Mustang Panda’ Hackers

• Ukraine IT Army hit EGAIS portal impacting Russia’s alcohol distribution

• Bank for International Settlements calls for reform of data governance

• Walking away from ransomware unscathed. Can you? Really?

• Deepfake threats: Risk of false electronic evidence, extortion

• Wipro earns Microsoft Cloud Security Specialization certification

• Microsoft says to ditch passwords all together on World Password Day

• Critical Cisco NFVIS Software Flaw Let Attacker Injects Commands at The Root Level

• Google Releases Android Update to Patch Actively Exploited Vulnerability

• South Korea becomes first Asian member of NATO cyber research centre

• New infosec products of the week: May 6, 2022

• May 2022 Patch Tuesday forecast: Look beyond just application and OS updates

• Smart government agencies are opting for multicloud environments

• Heroku fesses up to customer password theft due to OAuth token attack

• Nothing personal: Training employees to identify a spear phishing attack

• AuditBoard introduces enhanced automation capabilities to accelerate compliance management

• Exterro upgrades FTK Connect to enhance digital forensic and incident response automation

• WALLIX PAM4ALL offers protection for user access and workstations

• Self-propelled, endlessly programmable artificial cilia

• F5, Cisco admins: Stop what you’re doing and check if you need to install these patches

• What Are Dark Web Search Engines and How to Find Them?

• AST Extends 2022 ‘ASTORS’ Early Entry Discount – by Popular Demand

• WhatsApp to roll out larger file size sharing, bigger groups, and new reactions feature

• Sternum integrates with Kibana and Grafana to enhance IoT protection

• Mphasis partners with Securonix to prepare customers against advanced cyber security risks

• Apple, Google and Microsoft expand support for FIDO Alliance’s passwordless sign-in standard

• Rambus acquires Hardent to address customer needs for next-generation data center solutions

• T-Mobile and Cradlepoint join forces to provide businesses with 5G fixed wireless internet solutions

• Citrix partners with Google Cloud to enable secure remote work for customers

• Onapsis collaborates with NextGen Cyber Talent to address the cybersecurity talent shortage

• Immuta expands partnership with Starburst to scale secure data access through automation

Generated on 2022-05-07 23:55:25.487789