IT Security News Daily Summary 2022-05-26

• Best File & Disk Encryption Tools for Linux

• Maryland launches Mobile ID for Apple Wallet

• How GDPR Is Failing

• Why it’s hard to sanction ransomware groups

• Broadcom’s play to acquire VMware could strengthen its enterprise focus

• Fake Windows exploits target infosec community with Cobalt Strike

• UK privacy watchdog fines Clearview AI £7.5m and orders UK data to be deleted

• Cheers ransomware hits VMware ESXi systems

• Crypto Scammers Exploit: Elon Musk Speaks on Cryptocurrency

• Agencies aren’t hitting disconnection targets under EIS

• Third-Party Scripts on Websites Present a ‘Broad & Open’ Attack Vector

• Lacework Announces Layoffs, Restructuring

• Exposed: the threat actors who are poisoning Facebook

• How ‘cultural artifacts’ impede DOD’s ability to go big on AI

• The infrastructure buildout will be paperless

• How to encrypt your email and why you should

• Twitter fined $150M for misusing 2FA data

• Hacktivists Expanding DDoS Attacks as Part of International Cyber Warfare Strategy

• Zyxel addresses four flaws affecting APs, AP controllers, and firewalls

• How to Make Your Phone Impossible to Track: 11 Strategies for Privacy

• UK Begins National Security Probe Of Altice’s Stake In BT

• Wristband tracks firefighters’ chemical exposure

• Enterprise data is like air: Here’s how you can secure it

• Twitter Fined $150M for Security Data Misuse

• Cybercrime Syndicate Leader Behind Phishing and BEC Scams Arrested in Nigeria

• The Influence of VPN on Software Development

• Black Basta Besting Your Network?

• Facebook Updates Its Privacy Policy And Releases New Tools

• Google Urged to Stop Tracking Location Data Ahead of Roe Reversal

• The Chatter Podcast: The Movie “Casablanca” in Myth and Reality with Meredith Hindley

• Retrofitting Temporal Memory Safety on C++

• Cybersecurity is a corporate social responsibility, especially in times of war

• Why government should do more to drive down the cost of prison calls

• 11th Circuit’s Ruling to Uphold Injunction Against Florida’s Social Media Law is a Win Amid a Growing Pack of Bad Online Speech Bills

• Cyber Risk Management Strategies from Arjo CIO

• Elon Musk Raises His Contribution To Twitter Acquisition

• Biden’s executive order on policing could help spur local reforms

• Google is adding these IT security integrations to Chrome

• The FDA’s New Cybersecurity Guidance for Medical Devices Reminds Us That Safety & Security Go Hand in Hand

• California Bill Would Make New Broadband Networks More Expensive

• Ransomware Attack Disrupt the Operations of SpiceJet Flight

• Detecting Phishing Emails with Email Headers, Attachments, and URLs

• Spain to Tighten Control Over Secret Services After Spying Scandal

• India’s SpiceJet Strands Planes After Being Hit By Ransomware Attack

• Report Explores Child’s Data Safety Legislation Across 50 Countries

• Salt Security Helps bpLaunchpad Reimagine energy by Enabling API Based Innovation

• Best way to write a resume for cybersecurity roles

• Global oil companies take Cyber Resilience Pledge

• Google releases new data controls for Chrome browser and OS

• SYN Ventures Closes $300M Fund for Cybersecurity Bets

• Drupal Releases Security Updates

• Hacker Steals Database Of Hundreds Of Verizon Employees

• Some QCT Servers Vulnerable To Pantsdown Flaw

• Twitter Fined $150m For Handing Users’ Contact Details To Advertisers

• Suspected Phishing Email Crime Boss Cuffed In Nigeria

• Hacker Steals $1.4 Million In NFTs From Collector In One Sweep

• When Blockchain Companies Get Hacked

• Ways to protect your intellectual property in 2022

• Broadcom Confirms VMware Acquisition For $61 Billion

• The Benefits of Bug Bounty Programs

• Cloud Security Firm Lacework Lays Off 20% of Workforce

• Drupal Releases Security Updates

• 8 ways to avoid NFT scams

• Experts warn of a new malvertising campaign spreading the ChromeLoader

• Security Orchestration Automation and Response (SOAR) Basics: Definition, Components, and Best Practices

• Greg Johnson to Take Reins as McAfee CEO

• VMware to Absorb Broadcom Security Solutions Following $61 Billion Deal

• Big Cyber Hits on GM, Chicago Public Schools, & Zola Showcase the Password Problem

• CISA and DoD Release 5G Security Evaluation Process Investigation Study

• Lessons Learned by 2022 Cyberattacks: X-Force Threat Intelligence Report

• Ransomware demands acts of kindness to get your files back

• Campaigners warn of legal challenge against Privacy Shield enhancements

• Old Python package comes back to life and delivers malicious payload

• Quanta Servers Caught With Pantsdown BMC Vulnerability

• Act Now: Leveraging PCI Compliance to Improve Security

• Big Hits on GM, Chicago Public Schools, & Zola Showcase the Password Problem

• CISA and DoD Release 5G Security Evaluation Process Investigation Study

• The Evolving Face of Cyber Conflict and International Law: A Futurespective

• Nuclear Brinkmanship: U.S. Sanctions Against Iran Explained

• Broadcom to acquire VMware for $61 billion in cash and stock

• Tesla Researchers Tout 100 Year Battery Design

• What Is a CSRF Token?

• Some QCT servers vulnerable to ‘Pantsdown’ flaw say security researchers

• How to stop spam messages on your iPhone with this almost-secret hidden switch

• QCT Servers Affected by ‘Pantsdown’ BMC Vulnerability

• Critical ‘Pantsdown’ BMC Vulnerability Affects QCT Servers Used in Data Centers

• Comment: DuckDuckgo Browser Allows Microsoft Trackers Due To Search Agreement

• Microsoft Defender vs Trellix: EDR software comparison

• ‘Pantsdown’ BMC vulnerability still present in Quanta servers

• Who’s watching your webcam? The Screencastify Chrome extension story…

• The 2022 Verizon Data Breach Investigations Report (DBIR) Is Out

• How Software Architects Can Manage Technical Debt in a Microservice Architecture

• Time to update: Google Chrome 102 arrives with 32 security fixes, one critical

• NordLayer makes it easy for businesses to add VPN technology to remote workers

• 18 Oil and Gas Companies Take Cyber Resilience Pledge

• Most Common Threats in DBIR

• Black Hat Asia 2022: Building the Network

• Broadcom to acquire VMware for $61 billion in a cash and stock deal

• ChromeLoader targets Chrome Browser users with malicious ISO files

• Managed detection and response in 2021

• Malware-Infested Smart Card Reader

• Twitter Fined $150 Million For Sharing User Telephone Numbers

• Microsoft: Here’s how to defend Windows against these new privilege escalation attacks

• Critical Vulnerabilities Found in Open Automation Software Platform

• The Mystery of China’s Sudden Warnings About US Hackers

• Experts Warn of Rise in ChromeLoader Malware Hijacking Users’ Browsers

• GM, Zola customer accounts compromised through credential stuffing

• A New Ransomware Variant Dubbed ‘Cheers’ Was Discovered

• Buy these software stocks as cyberattacks climb, Stephens says

• The Difference Between a Vulnerability Assessment and Penetration Testing

• The Added Dangers Privileged Accounts Pose to Your Active Directory

• Hackers Increasingly Using Browser Automation Frameworks for Malicious Activities

• What Are the Benefits of Hiring Professional Essay Writing Help

• Watch out! Tinder and Grinder users targeted by cruel scammers using real abuse photos

• Country Extortion: Ransomware expands business to include the government sector

• Cybergang Claims REvil is Back, Executes DDoS Attacks

• Enjoy greater online freedom with Atlas VPN

• Multi-Continental Operation Leads to Arrest of Cybercrime Gang Leader

• ‘How Are They Weapons? That’s Only a Flashlight!’

• Do not use Tails OS until a flaw in the bundled Tor Browser will be fixed

• Security pros believe cybersecurity strategies will soon be obsolete

• Verizon: Ransomware sees biggest jump in five years

• Chinese Acquisition Of Newport Wafer Fab Under National Security Review

• Three-quarters of Security Pros Believe Current Cybersecurity Strategies Will Shortly Be Obsolete

• Insider threats caused 68% of legal sector breaches

• If you get an email saying “Item stopped due to unpaid customs fee”, it’s a fake

• Tails OS Users Advised Not to Use Tor Browser Until Critical Firefox Bugs are Patched

• Italy announced its National Cybersecurity Strategy 2022/26

• Microsoft: Credit Card Stealers are Switching Tactics to Conceal the Attack

• Using Blatant Code, a New Nokoyawa Variant Sneaks up on Peers

• Ellie’s Data Auction – Intego Mac Podcast Episode 241

• State of Cybersecurity Report 2022 Names Ransomware and Nation-State Attacks As Biggest Threats

• How is AI Being Put to Good Use in the Gambling Industry

• Smart Locks Provide Security and Enhanced Accessibility in One Package

• Twitter Fined $150 Million for Misusing Users’ Data for Advertising Without Consent

• Hijacking of popular ctx and phpass packages reveals open source security gaps

• When it comes to remote work, 71% of IT leaders say security is the main challenge

• Suspected phishing email crime boss cuffed in Nigeria

• XONA raises $7.2 million to provide secure remote access control systems for critical infrastructure

• Ex-spymaster and fellow Brexiteers’ emails leaked by suspected Russian op

• Sigstore: Signature verification for protection against supply chain attacks

• Russian Ransomware hackers getting frustrated by sanctions

• Samsung introduced Knox Guard for Enterprise Mobile Security

• Encryption: How It Works, Types, and the Quantum Future

• Review: Hornetsecurity 365 Total Protection Enterprise Backup

• Ransomware grounds some flights at Indian budget airline SpiceJet

• Pentera Named ‘Most Promising Unicorn’ Award Finalist by SC Media

• New OneStream Research Finds Economic Disruption Poses Largest Threat to Business in 2022

• You Can Join the (ISC)² Board of Directors

• Why are current cybersecurity incident response efforts failing?

• Most organizations do not follow data backup best practices

• A Problem Like API Security: How Attackers Hack Authentication

• How confident are companies in managing their current threat exposure?

• YouTube remains in Russia to be an independent news source: CEO

• Interpol Arrests Leader of SilverTerrier Cybercrime Gang Behind BEC Attacks

• Onfido Real Identity Platform enhancements optimize user experience for organizations

• Netenrich Resolution Intelligence platform allows analysts to view security status of critical assets

• OneTrust Trust Intelligence Platform enables organizations to build trust in enterprise environments

• Thales releases CipherTrust Tokenization to protect data in numerous SAP applications

• Twitter to Pay $150M Penalty Over Privacy of Users’ Data

• ServiceNow introduces Procurement Service Management to improve procurement processes

• Preen.Me – 236,105 breached accounts

• Food For Files: GoodWill Ransomware demands food for the poor to decrypt locked files

• Oracle selects Palo Alto Networks to protect their cloud applications and data against emerging threats

• BlackBerry partners with NXP Semiconductors to help companies prepare for post-quantum cyber attacks

• Amart Furniture – 108,940 breached accounts

• Millions of people’s info stolen from MGM Resorts dumped on Telegram for free

• Semperis raises over $200 million to drive innovation in the identity system defense market

• Hornetsecurity acquires IT-Seal to add security training services to its portfolio

• Unknown APT group is targeting Russian government entities

• Greg Johnson joins McAfee as President and CEO

• Redpoint Global promotes Ron Sanderson to CISO

• LogicMonitor appoints Nitin Navare as CTO

• WhiteSource rebrands as Mend to focus on the prevention of application security issues

• Binary Defense names Bob Meindl as CEO

• Feds say Twitter used contact info collected for security purposes to target ads

• IT Security News Daily Summary 2022-05-25

• Graduation dashboard shows how education spending pays off

• Visualizing vulnerability: County maps show areas of greatest need

• App eases public transit for blind riders

• $756M still left in TMF

• Nava looks to APIs to standardize federated benefits programs

• Hearing examines human side of telecom bills

• When self-driving cars crash, who’s responsible? Courts and insurers need to know what’s inside the ‘black box’

• Forescout Launches Forescout Frontline to Help Organizations Tackle Ransomware and Real Time Threats

• Detecting and preventing privilege escalation attacks leveraging Kerberos relaying (KrbRelayUp)

• Interpol’s Massive ‘Operation Delilah’ Nabs BEC Bigwig

• Is Your Data Security Living on the Edge?

• Amazon Drivers Risk Increasing Number Of Injuries

• Seven Tips for Protecting Your Internet-Connected Healthcare Devices

• Advancing our Secure Home Platform with DNS over HTTPS

• Corelight Announces New SaaS Platform for Threat Hunting

• Qualys to Unveil VMDR 2.0 at Qualys Security Conference in San Francisco

• Mastercard Launches Cybersecurity “Experience Centre”

• JFrog Launches Project Pyrsia to Help Prevent Software Supply Chain Attacks

• Is Your Email Security Built to Withstand Determined Intruders?

• Federal call center workers strike over pay, healthcare costs

• Brexit Leak Site Linked to Russian Hackers

• Meet the 10 Finalists in the RSA Conference Innovation Sandbox

• Vishing Attacks Reach All Time High, According to Latest Agari and PhishLabs Report

• Cybersecurity-Focused SYN Ventures Closes $300 Million Fund II

• Eerie GoodWill ransomware forces victims to publish videos of good deeds on social media

• The state of the GDPR in 2022: why so many orgs are still struggling

• Internationa police operation led to the arrest of the SilverTerrier gang leader

• The State of Identity at Work: What IT Leaders Need to Know

• WhiteSource, now Mend, unveils automated remediation to reduce app security burden

• DuckDuckGo Allows Microsoft Trackers Despite No Tracking Policy – Researcher

• IDS & IPS Remain Important Even as Other Tools Add IDPS Features

• Bad Bots and the Commoditization of Online Fraud

• MSSP’s Mitigation Responsibilities Against Ransomware

• Agencies lack data on ransomware payments

• OT Remote Access Firm Xona Raises $7.2 Million in Series A Funding

• Prepare for deepfake phishing attacks in the enterprise

• Verizon DBIR: Stolen credentials led to nearly 50% of attacks

• How Policymakers Can Build a Better Doomsday Clock

• Expert Comment: CISA Adds 41 Vulnerabilities To Catalogue Of Exploited Flaws

• Developers targeted by poisoned Python library

• CLOP Ransomware Activity Spiked in April

• Spring Cleaning Checklist for Keeping Your Devices Safe at Work

• Platform Liability Trends Around the Globe: Taxonomy and Tools of Intermediary Liability

• HOT CYBERSECURITY TECHNOLOGIES

• Veteran Cybersecurity Expert, Michael Orozco Joins MorganFranklin Consulting

• Suspicious behavior: OTX Indicator of Compromise – Detection & response

• What to look for in a vCISO as a service

• Nokia CEO Predicts 2030 Arrival For 6G, But Not On Smartphone

• Biden administration official offers tips for tapping broadband funds

• Organizations Urged to Fix 41 Vulnerabilities Added to CISA’s Catalog of Exploited Flaws

• CISA Adds 34 Known Exploited Vulnerabilities to Catalog

• Google Releases Security Updates for Chrome

• How Cisco Duo Is Simplifying Secure Access for Organizations Around the World

• Secure communication with light particles

• Eerie GoodWill ransomware forces victims to publish videos of “good” deeds on social media

• In record year for vulnerabilities, Microsoft actually had fewer

• Complete Guide to Keylogging in Linux: Part 1

• CISA Adds 34 Known Exploited Vulnerabilities to Catalog

• Google Releases Security Updates for Chrome

• The Verizon 2022 DBIR

• Massive increase in XorDDoS Linux malware in last six months

• Vehicle owner data exposed in GM credential stuffing attack

• PayPal Bug Enables Attackers to Exfiltrate Cash from Users’ Account

• Protecting Consumer IoT Devices from Cyberattacks

• Ransomware Attack disrupts airlines services of Spice Jet

• How to Find a Vulnerability in a Website

• Alleged Cybercrime Ringleader Arrested in Nigeria

• Manipulating Machine-Learning Systems through the Order of the Training Data

• Part 1: Historic To 2022 – The Threat Of Malevolence

• Mark Zuckerberg Sued By DC AG Over Cambridge Analytica Scandal

• Tidelift Raises $27 Million to Tackle Open Source Supply Chain Security

• Tapping Neurodiverse Candidates Can Address Cybersecurity Skills Shortage

• Webinar Today: Missing Links for Managing OT Cyber Risk

• USB Devices Redux

• Microsoft Warned That Hackers Are Using More Advanced Techniques to Steal Credit Card Data

• How license plate scanners challenge our data privacy

• Data on ransomware attacks is ‘fragmented and incomplete’ warns Senate report

• 5 reasons why GDPR was a milestone for data protection

• Interpol Arrest Leader of SilverTerrier Cybercrime Gang Behind BEC Attacks

• When Do We Call Russia’s Atrocities a Genocide?

• Supply Chain Risk Management (SCRM) Explained

• 8 things you need to know about cloud-native applications

• Multiple Vulnerabilities In Facebook Could Allow Account Takeover

• Top 5 Benefits of Office 365 Advanced Threat Protection

• Web scraping: What is it and why is it needed?

• How to develop competency in cyber threat intelligence capabilities

• WhiteSource Becomes Mend, Adds Automatic Code Remediation

• Industry 4.0 Points Up Need for Improved Security for Manufacturers

• Lumos System Can Find Hidden Cameras and IoT Devices in Your Airbnb or Hotel Room

• Top 6 Awwwards Websites and Tools They Are Built With

• New Linux-Based Ransomware ‘Cheerscrypt’ Targets EXSi Devices

• Samsung To Create 80,000 New Jobs, Plans $356 Billion Investment

• Pro-Iran Group ALtahrea Hits Port of London Website by DDoS Attack

• Microsoft research reveals the changing face of skimming campaigns

• AMD unveils Epyc confidential computing on Google cloud

• Report: Average time to detect and contain a breach is 287 days

• Verizon Report: Ransomware, Human Error Among Top Security Risks

• Zoom Patches ‘Zero-Click’ RCE Bug

• Link Found Connecting Chaos, Onyx and Yashma Ransomware

• Is REvil having a resurgence, or is there a copycat hacking group?

• Chrome 102 Patches 32 Vulnerabilities

• Notorious Vietnamese Hacker Turns Government Cyber Agent

• Two Cybersecurity Companies Offering Free Risk Assessments

• UK Government Cybersecurity Advisory Board Applications Now Open

• Messages Sent Through Zoom Can Expose People to Cyber-Attack

• DBIR Makes a Case for Passwordless

• ‘Tough to Forge’ Digital Driver’s Licenses Are—Yep—Easy to Forge

• Learn How Hackers Can Hijack Your Online Accounts Even Before You Create Them

• How Secrets Lurking in Source Code Lead to Major Breaches

• Revisiting the Session: The Potential for Shared Signals

• Chaining Zoom bugs is possible to hack users in a chat by sending them a message

• Zoom Patches XMPP Vulnerability Chain That Could Lead To Remote Code Execution

• Quad Nations Pledge Deeper Collaboration On Infosec And More

• Beijing Needs The Ability To Destroy Starlink, Say Chinese Researchers

• Web App Attacks On The Rise In Healthcare

• 2022 Verizon Data Breach Investigations Report, Cyber Security Experts Reactions

• SpiceJet Suffers Ransomware Attack

• More and More Companies Are Getting Hit with Ransomware [2021-2022]

• How the Saitama backdoor uses DNS tunnelling

• Beijing needs the ability to ‘destroy’ Starlink, say Chinese researchers

• (ISC)2 Supports Members with Thoughtful Response to SEC Proposed Rule on Cybersecurity Reporting

• Cybersecurity for banks – How Global Banks enable the secure remote workforce

• Google Discloses Details of Zoom Zero-Click Remote Code Execution Exploit

• GoodWill Ransomware Demands People Help the Most Vulnerable

• EUS Car Giant General Motors Hit By Credential Stuffing Attack

• Privacy focused browser allows Microsoft trackers

• Update now! Multiple vulnerabilities patched in Google Chrome

• Silicon UK In Focus Podcast: The Future of SaaS

• Global Digital Tax Law Not Ready Until 2024, Says OECD

• Trend Micro Patches Vulnerability Exploited by Chinese Cyberspies

• [Template] Incident Response for Management Presentation

• Researchers Find New Malware Attacks Targeting Russian Government Entities

• What’s wrong with automotive mobile apps?

• US government lacks ransomware data

• Ethical AI – How is AI Redefining the Insurance Industry?

• Cybersecurity’s New Frontier: Space

• Hacking The Cybersecurity Field: How To Get Into Cyber As A Young Adult

• Small Businesses Remain Vulnerable, With Rising Cyberattacks

• Running to the Cloud: Why Enterprise Companies Need a Cloud-based Payroll

• 68% of Legal Sector Data Breaches Caused by Insider Threats

• Proton Is Trying to Become Google—Without Your Data

• Verizon 2022 DBIR: External attacks and ransomware reign

• Goodbye cookies, hello digital fingerprints

• Spain Approves $13.1bn To Attract Chip Sector Investment

• SpiceJet Suffered a Ransomware Attack

• CISA adds 41 flaws to its Known Exploited Vulnerabilities Catalog

• How CISOs are adjusting in the wake of two years of pandemic disruption

• What is threat hunting?

• Quad nations pledge deeper collaboration on infosec, data-sharing, and more

• 7 ways to protect your network from wardriving attacks

• About half of popular websites tested found vulnerable to account pre-hijacking

• Indian stock markets given ten day deadline to file infosec report, secure board signoff

• Over 380 000 Kubernetes API Servers are Exposed to a Range of Attacks

• Oracle bolsters its Cloud Security capabilities

• IBM takes initiative to improve Ransomware Protection in Public Schools

• Detecting and Responding to a Ransomware Attack

• Threat Intelligence: The Key to Higher Security Operation Performance

• New Zoom Flaws Could Let Attackers Hack Victims Just by Sending them a Message

• Where is attack surface management headed?

• How to navigate GDPR complexity

• ISACA Helps Enterprises Navigate China’s Personal Information Protection Law in New Resource

• How to counter smart home device breaches

• How to Prevent Burnout Among Cybersecurity Professionals Before, During and After a Breach

• Building trust in a Zero-Trust security environment

• Stories from the SOC – Command and Control

• Elevation of Privilege is the #1 Microsoft vulnerability category

• Can we trust the cybersecurity of the energy sector?

• How Can OEMs Reduce Their Risk of Cyberattacks?

• Keeping pace with emerging threats: The roundup

• HYAS Confront uncovers anomalies hiding in the production network

• Zoom patches XMPP vulnerability chain that could lead to remote code execution

• XM Cyber announces new capability to detect exposures in Microsoft Active Directory

• Zilla Universal Sync allows enterprises to integrate any cloud platform or application without security API support

• PIXM Mobile provides real-time protection from phishing attacks on mobile devices

• FortiNDR identifies cyberattacks based on anomalous network activity and limits threat exposure

• Forescout Frontline helps organizations tackle ransomware and real time threats

• F5 NGINX for Microsoft Azure enables enterprises to extend workloads to the cloud

• Oracle expands cloud security capabilities to help customers protect their applications and data

• Censornet introduces integrated IDaaS to enhance context-based security

• SafeGuard Cyber adds email protection for Microsoft 365 to defend customers against sophisticated attacks

• Thales Cinterion MV32 modem card enables manufacturers to build high-performance 5G devices

• Astadia FastTrack Factory accelerates mainframe migration projects for enterprises

• Wendy’s – 52,485 breached accounts

• Broadcom Software Shows How the Cyber Defence Centre Will Help in 2022

• Predator spyware sold with Chrome, Android zero-day exploits to monitor targets

• NightDragon partners with Coalfire to accelerate portfolio compliance and cybersecurity readiness

• Arcanna.ai collaborates with MNEMO to drive security operations using AI/ML

Generated on 2022-05-26 23:55:32.859526