IT Security News Daily Summary 2022-05-08

• India’s ongoing outrage over Pegasus malware tells a bigger story about privacy law problems

• Conti ransomware claims to have hacked Peru MOF – Dirección General de Inteligencia (DIGIMIN)

• OpenSea Warns of Discord Channel Hack

• Russian Group Attack on Bulgarian Refugee Agency

• What is tokenization, what are the types of tokenization, and what are its benefits for eCommerce businesses?

• May 01 – May 07 Ukraine – Russia the silent cyber conflict

• New Ideas for Over-the-Horizon Counterterrorism in Afghanistan

• NIST published updated guidance for supply chain risks

• Misconfiguration Identified in Google Cloud Platform

• Google, Apple, and Microsoft step hand in hand into a passwordless future

• Google, Apple, and Microsoft walk hand-in-hand into a passwordless future

• Considering Replacing Your Endpoint Security Solution? 5 Questions Worth Asking

• US agricultural machinery manufacturer AGCO suffered a ransomware attack

• Google: Two Major Pixel Vulnerabilities Patched

• Anonymous Leaks 82 GB Police Data as Protest Against Australian Detention Centre

• Security Affairs newsletter Round 364 by Pierluigi Paganini

• Week in review: F5 BIG-IP flaw, critical bugs in Aruba and Avaya network switches, Patch Tuesday forecast

• US DoS offers a reward of up to $15M for info on Conti ransomware gang

• This New Raspberry Robin Worm Utilizes Windows Installer to Drop Malware

• Attackers Inject Fileless Malware Directly into Windows Event Logs

• CoreStack partners with Persistent Systems to help enterprises automate their cloud operations

• Salesforce hires William MacMillan as SVP, Security Product and Program Management

• Appgate achieves SOC 2 Type 2 certification

• Cisco releases Cloud Controls Framework to meet customer demand for security certifications

• Splunk names Katie Bianchi as CCO

• IT Security News Daily Summary 2022-05-07

• Post-Quantum Cryptography Set to Replace RSA, ECC

• Heroku Admits to Customer Database Hack after OAuth Token Theft

• SEEQC’s Statement in Support of President Biden’s Executive Order and National Security Memorandum on Quantum Computing

• Blackpoint Cyber Announces Launch of New Podcast, The Unfair Fight, Hosted by Founder and CEO Jon Murchison

• Appgate Achieves SOC 2 Type 2 Certification

• Stories from the SOC – Lateral movement using default accounts

• Cybersecurity reporting mandates could make us more vulnerable, not less

• The Colonial Pipeline ransomware attack a year on: 5 lessons for security teams

• Raspberry Robin spreads via removable USB devices

• FBI: Business Email Compromise is a $43 Billion Scam

• European Organizations Targeted by ‘Mustang Panda’ Hacking Group

• VHD Ransomware Linked to North Korea’s Cyber-Army Targets Financial Institutions

• Your Phone May Soon Replace Many of Your Passwords

• Will VPN Providers and the Indian Government Clash Over New Rules on User Data Collection?

• Data Brokers Track Abortion Clinic Visits for Anyone to Buy

• Malware campaign hides a shellcode into Windows event logs

• Apple Mail Now Blocks Email Tracking. Here’s What That Means

• US gov sanctions cryptocurrency mixer Blender also used by North Korea-linked Lazarus APT

• Shrinking the Cyber Skills Gap by Taking Advantage of Diversity, Unique Opportunities, and Automation

• Vulnerable Today, Hacked Tomorrow: How a Lack of OT Cybersecurity Affects Critical Infrastructure

• New Malware NetDooka Deployes Payload: Trend Micro Report

• False-flag cyberattacks a red line for nation-states, says Mandiant boss

• Google to Implement Passwordless Logins in Android and the Chrome Web Browser

• This New Fileless Malware Hides Shellcode in Windows Event Logs

• U.S. Sanctions Cryptocurrency Mixer Blender for Helping North Korea Launder Millions

• QNAP Releases Firmware Patches for 9 New Flaws Affecting NAS Devices

• SimSpace collaborates with ACSC to provide cyber range exercises for organizations

• Defending against APT attacks – Week in security with Tony Anscombe

• Exabeam partners with ZeroFox to improve cyber defense capabilities for customers

Generated on 2022-05-08 23:55:17.583239