IT Security News Daily Summary 2022-05-31

• How process mining uncovers workflow bottlenecks

• 3.6M MySQL Servers Found Exposed Online

• Biometric Data Offers Added Security — But Don’t Lose Sight of These Important Risks

• New Microsoft Zero-Day Attack Underway

• Surefire Cyber Launches to Help Cyber Insurance Ecosystem from Response to Resilience, with $10 Million in Funding by Forgepoint Capital

• Threat profile: RansomHouse makes extortion work without ransomware

• Cops’ Killer Bee stings credential-stealing scammer

• How to get started with multi-cloud threat hunting

• Costa Rica May Be Pawn in Conti Ransomware Group’s Bid to Rebrand, Evade Sanctions

• Runescape phish claims your email has been changed

• Seemplicity raises $32M to launch productivity platform for security teams

• “Follina”- Zero-day vulnerability in Microsoft Office: Check Point Customers remain protected

• Report details 5G security assessment process

• Surefire Cyber Tackles Incident Response With $10M Series A Funding

• Three Nigerian Users of Agent Tesla RAT Arrested

• Microsoft Releases Workaround Guidance for MSDT “Follina” Vulnerability

• Cybersecurity Automation: How Can Businesses Benefit From It

• Why small businesses may want to pursue virtual CISO

• Fewer DDoS Attacks in 2021, Still Above Pre-Pandemic Levels

• Microsoft Releases Workaround Guidance for MSDT “Follina” Vulnerability

• Third of UK Firms Have Experienced A Security Breach Since 2020

• Vodafone Advertising ID System

• Microsoft’s identity services huddle under Entra umbrella

• New CyberCatch Research Discovers Alarming Increase in Cyber Vulnerabilities for Small and Medium Sized Businesses in US and Canada

• Microsoft Vulnerability Named Follina

• FBI warns of education sector credentials on dark web forums

• A New York man was Sentenced for Purchasing Stolen Cards & Assisting the Infraud Organization

• Singapore to pilot digital asset trading with blockchain, tokenisation

• Microsoft Acknowledges Zero-Day, Follina Office Vulnerability, Suggests Fix

• Stay Ahead of the Latest Threats with Threat Family Tracking

• Magniber Ransomware Now Targets Windows 11 Machines

• Australian Digital Driving Licenses Can Be Defaced In Minutes

• Guardian Launches Tor Onion Service

• ChromeLoader Browser Hijacker Provides Gateway To Bigger Threats

• The Underground Company That Hacks iPhones For Ordinary Consumers

• Germany Issues Fresh Warning To Banks Of Cyber Attacks Due To Ukraine War

• Italy on high alert as Russian Killnet group starts Cyber Attacks

• Pegasus Airlines Leaked 6.5TB of Data in AWS S3 Bucket Mess Up

• Microsoft launches Entra: A new identity and access family of products

• Microsoft zero day exploited in the wild, workarounds released

• Zyxel: Firewalls, Access Points, and Controllers are Vulnerable

• Speek! is a new encrypted chat service that uses Tor to offer secure communication

• 3 Ways to Attract Top Cybersecurity Talent to the Federal Government

• Comment: DuckDuckgo Browser Allows Microsoft Trackers Due To Search Agreement

• Twitter to Pay $150M Penalty for Selling Customers’ Data

• Microsoft launches Entra, a new identity and access family of products

• SideWinder carried out over 1,000 attacks since April 2020

• Broadcom Meta VR Chip Deal ‘Could Be Worth $1bn A Year’

• To Retain Cybersecurity Employees, Know What Drives Them

• Compromised academic credentials available on cybercriminal platforms

• How to Keep Your Enterprise Safe From Digital Supply Chain Attacks

• Greece, Saudi Arabia ‘To Build Europe-Asia Data Link’

• Cybersecurity Training Firm Hoxhunt Raises $40 Million

• Mysterious “Follina” zero-day hole in Office – here’s what to do!

• Secure access for a connected world—meet Microsoft Entra

• Streamlining employee onboarding: Microsoft’s response to the Great Reshuffle

• CIOs largely believe their software supply chain is vulnerable

• Serious Argo CD Vulnerability Could Allow Admin Access To The Attackers

• Critical Vulnerability Found In Screencastify Chrome Extension

• Microsoft announces new ‘family’ of identity and access management tools

• Latest Mobile Malware Report Suggests On-Device Fraud is on the Rise

• Examining State Bills on Data Brokers

• EnemyBot Malware Targets Web Servers, CMS Tools and Android OS

• Seemplicity Launches With Cybersecurity Productivity Platform, $32 Million in Funding

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Malware Targeting Linux Becoming More Prevalent

• Is quantum teleportation the future of secure communications?

• Journey Into Cybersecurity – Conversations with Cyber Newcomers, Part 2

• Zero-Day ‘Follina’ Bug Lays Microsoft Office Open to Attack

• ChromeLoader Browser Hijacker Provides Gateway to Bigger Threats

• Seventh Member of International Cyber Fraud Ring Sentenced to Prison

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Russian Oligarchs ‘Hired Israeli Private Eye’ To Carry Out Hacks

• This zero-day Windows flaw opens a backdoor to hackers via Microsoft Word. Here’s how to fix it

• Singapore ups investment in quantum computing to stay ahead of security threats

• Microsoft shared workarounds for the Microsoft Office zero-day dubbed Follina

• The Limits of Cyber Operations in Wartime

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• E-Recycler Attero Plans $1bn Expansion Into Electric Vehicles

• You Need to Update iOS, Chrome, Windows, and Zoom ASAP

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Microsoft Confirms Exploitation of ‘Follina’ Zero-Day Vulnerability

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Cybersecurity Doesn’t Have to be a Game of Last Man Standing

• Bosch Aishield To Protect AI Systems and Bolster Digital Trust

• Managing Cyber Risk: The People Element

• Three BEC Suspects Arrested in “Killer Bee” Sting

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Ericsson, BT Team Up For Private 5G Enterprise Networks

• UK Privacy Tsar: Stop Excessive Data Collection from Rape Victims

• Security and Human Behavior (SHB) 2022

• Italy tells organisations to brace for DDoS attacks

• Zero-day bug exploited by attackers via macro-less Office documents (CVE-2022-30190)

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• [Updated]Microsoft Office zero-day “Follina”—it’s not a bug, it’s a feature! (It’s a bug)

• Bitcoin Price Spikes After Weeks Of Declines

• Credentials of US academics posted on dark web forums

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Foxconn Sees Supply Chain Improvements For Second Half Of Year

• Turkish Airline Exposes Flight and Crew Info in 6.5TB Leak

• SideWinder Hackers Launched Over a 1,000 Cyber Attacks Over the Past 2 Years

• Flosum Trust Center secures Salesforce environments from cybersecurity threats and data breaches

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Digitalization and the Education Economy

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Learn Raspberry Pi and Arduino with 9 Online Developer Training Courses

• Experts warn of ransomware attacks against government organizations of small states

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Supply chain scams pull no punches

• Interpol Nabs 3 Nigerian Scammers Behind Malware-based Attacks

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Adecco – 4,284,538 breached accounts

• Podcast Episode: Wordle and the Web We Need

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Cybersecurity isn’t just a topic for experts, says Estonian minister

• Microsoft Releases Workarounds for Office Vulnerability Under Active Exploitation

• Future proofing: How companies can upgrade cyber defenses and be ready for tomorrow

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• US Universities credentials published on dark web

• CLOP Ransomware targets 21 victims in a single month

• Zero-trust-washing: Why zero trust architecture is the framework to follow

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• New Windows Subsystem For Linux Malware Steals Credentials & Record Keystrokes

• Coast Guard’s small IT programs suffer from inconsistent oversight policy, GAO finds

• Seven years in the making, DHS’s new cyber talent system boasts just one hire

• 57% of all digital crimes in 2021 were scams

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• How effective are public-private partnerships?

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• ICS Security in Healthcare: Why Software Vulnerabilities Pose a Threat to Patient Safety

• There is no good digital transformation without cybersecurity

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• HP Wolf Security: A new breed of endpoint protection

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Remembering Apple’s Newton, 30 years on

• Guidance for CVE-2022-30190 Microsoft Support Diagnostic Tool Vulnerability

• Hackers Selling US Colleges VPN Credentials on Russian Forums- FBI

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Australian digital driving licenses can be defaced in minutes

• Mysterious “Follina” zero-day hole in Office – what to do?

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• IT Security News Daily Summary 2022-05-30

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Three Nigerian men arrested in INTERPOL Operation Killer Bee

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Researchers Warn of New Microsoft Office 0-Day Vulnerability “Follina”

• Vulnerability Summary for the Week of May 23, 2022

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Vulnerability Summary for the Week of May 23, 2022

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Microsoft Office zero-day “Follina”—it’s not a bug, it’s a feature! (It’s a bug)

• Zero-day vuln in Microsoft Office: ‘Follina’ will work even when macros are disabled

• Anonymous Claims Attacks Against Belarus for Involvement in Russian Invasion of Ukraine

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Beware the Smish! Home delivery scams with a professional feel…

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Double-whammy attack follows fake Covid alert with a bogus bank call

• CyberCube Partners With Kroll to Launch Response Service for Cyber Insurance Industry

• SentinelOne Pioneers Inaugural Deception MITRE Engenuity ATT&CK® Evaluation

• The Bitglass Blog

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• China monitors UK and US populace through AI Satellites and thousands of CCTV Cameras

• LinkedIn Bug Bounty Program Becomes Available To The Public

• US Academic Credentials Displayed in Public and Dark Web Forums

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Users of Intuit QuickBooks Targeted in Phishing Scams

• FBI Warns of Hackers Selling US College VPN Credentials on Underground Forums

• A Complete Guide to Torrenting Safely in 2022

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• A New Linux-based Botnet Targeting Vulnerabilities in Web Servers & Android Servers

• Zero-Day ‘Follina’ Bug Lays Older Microsoft Office Versions Open to Attack

• 6 Steps to Ensure Cyber Resilience

• A new WhatsApp OTP scam could allow the hijacking of users’ accounts

• Red Hat Compliance service and the Red Hat Insights API

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• The Quad commits to strengthening cybersecurity in software, supply chains

• Check Point Software Technologies protects against malicious Chrome extensions

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• What Credit Score Is Needed for Debt Consolidation?

• May 2022 Web Server Survey

• Check Point protects against malicious Chrome extensions

• Keeping it real: Don’t fall for lies about the war

• CISA Adds 75 Actively Exploited Bugs To Its Must-Patch List In Just A Week

• The Mystery Of China’s Sudden Warnings About US Hackers

• Global Tech Industry Objects To India’s New Infosec Reporting Regime

• Ransomware Attack Sends US County Back To 1977

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Intuit phish says “we have put a temporary hold on your account”

• Twitter Refuses To Drop Egon Durban From Board

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• The Best Battle Royales in 2022

• Zoom Patched Multiple Bugs Including An RCE Flaw

• Meta ‘Redesigns’ Privacy Policy Elaborating On ‘Use Of Information’

• Google Release Chrome 102 Browser Update With 32 Bug Fixes

• Microsoft Warns Of Sneaky Web Skimming Attacks

• Russia Seeks New Fines Against Google, Other Tech Firms

• Is 3rd Party App Access the New Executable File?

• Clop Ransomware Has Returned and Is Busier than Ever

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Multiple Microsoft Office versions impacted by an actively exploited zero-day

• That critical vulnerability might not be the first you should patch

• New WhatsApp OTP Scam Allows Scammers to Hijack Your Account

• As Malware Dissemination Drops, Mobile Trojan Detections Grow.

• Binance Registers In Italy Amidst Europe Push

• Document Exploiting New Microsoft Office Zero-Day Seen in the Wild

• GoodWill Ransomware victims have to perform socially driven activities to decryption their data

• Experts Insight On Facial Search Engine PimEyes

• Two In Three UK Companies Targeted By Fraudsters, Expert Advice On How To Protect

• Twitter To Pay $150 mln To Settle With The U.S. Over Privacy, Security Violations

• Biometric mobile payments set to exceed $1 trillion

• 8 Best High-tech Pet Devices You and Your Furry Friend Will Love

• Amazon Shareholders Narrowly Approve Executive Pay

• Good Luck Not Accidentally Hiring a North Korean Scammer

• Part 2: Practices, Procedures And Mitigations

• How are hackers targeting your network through mobile devices?

• Google Invests In India’s Mohalla Amidst Short Video boom

• Biometric Mobile Payments Set to Exceed $1 Trillion by 2027

• EnemyBot Linux Botnet Now Exploits Web Server, Android and CMS Vulnerabilities

• CISA adds 75 vulnerabilities to catalogue in 3 days

• 16-30 April 2022 Cyber Attacks Timeline

• General Motors Confirmed Suffering A Credential Stuffing Attack

• Predator Spyware Exploited 5 Android Zero-Day Bugs

• The Tech of ESG

• Third of UK Firms Have Experienced a Security Breach Since 2020

• Watch Out! Researchers Spot New Microsoft Office Zero-Day Exploit in the Wild

• How to Use iCloud Drive and Get the Most Out of It

• UK Cinemas To Accept Yoti Digital ID Verification

• Verizon’s 2022 data breach report: Key takeaways

• How Can You Fix A Cracked Phone Screen Yourself?

• Mobile Threat Volumes Slump 58% in a Year

• Outcry After DuckDuckGo Admits It Allows Microsoft Trackers

• How Is Technology Integrated In The Online Casino Industry?

• How is Modern Technology Changing the Restaurant Industry?

• RAV Endpoint Protection: Why Endpoint Security is Critical in Modern Day Threat Landscape

• EnemyBot malware adds new exploits to target CMS servers and Android devices

• TechRepublic Premium editorial calendar: IT policies, checklists, toolkits, and research for download

• New ‘GoodWill’ Ransomware Forces Victims to Donate Money and Clothes to the Poor

• Indian authorities issue conflicting advice about biometric ID card security

• FBI Warns About Hackers Selling VPN Credentials for U.S. College Networks

• Britain hospitals to be cyber attacked by Russian Sleeper cells

• Hackers pay a $5000 monthly fee to gain fraudulent access to banking apps

• Ransomware attacks still the #1 threat to businesses and organizations

• BlackCat Ransomware Group Demands $5Million to Unlock Austrian State

• $39.5 billion lost to phone scams in last year

• Tripwire Patch Priority Index for May 2022

• Protecting Against Bad Chemistry (with Cybersecurity)

• Moving toward a more adaptable and tech-driven compliance function

• thatDot Novelty Detector reduces false-positive findings for SOC analysts

• Why Managed Detection and Response (MDR) is your most important security investment

• Ransomware attack sends US county back to 1977

• Global tech industry objects to India’s new infosec reporting regime

Generated on 2022-05-31 23:55:26.661779