IT Security News Daily Summary 2022-06-07

• AppOmni raises $70M to secure orgs’ SaaS apps

• Smart cameras automate recording, boost police transparency

• Smart edge infrastructure expands capacity, real-time data access

• How to use AI in cybersecurity?

• Lawmakers want to know how much bad software costs DOD

• Microsoft flags common pitfalls for cyber insurance

• After the Cawthorn Ruling, Can Trump Be Saved From Section 3 of the 14th Amendment?

• Elastic releases security solution for the cloud

• Zitadel targets developers with open-source identity management platform

• AppOmni Raises $70 Million to secure orgs’ SaaS apps

• What’s the best place for an EV charging station?

• SUSE doubles down on security in its latest SUSE Linux Enterprise 15 release

• EU Agrees Common Mobile Charging Port, In Blow To Apple

• Elastic releases Elastic Security for Cloud

• Ransomware Task Force calls for better incident reporting

• Facebook Whistleblower Believes The Company Can’t Recover Until Zuckerberg Steps Down

• Mandia: Keep ‘Shields Up’ to Survive the Current Escalation of Cyberattacks

• Watchdog finds cyber risks in TVA control systems

• IBM to Acquire Randori for Attack Surface Management Tech

• 8 benefits of DevSecOps automation

• #RSAC: The Growing Relevance and Challenges of Privacy

• A third of organizations hit by ransomware were forced to close temporarily or permanently

• Technical Details Released for Recently Patched Zyxel Firewall Vulnerabilities

• Google Publishes Monthly Android Security Bulletin, Patches Critical Vulnerabilities

• Reverse Tunnelling & URL Shortening Services Used in Evasive Phishing

• Russian Ministry Website Hacked to Display “Glory To Ukraine” Message

• Driverless taxis hit city streets

• Do AI systems really have their own secret language?

• Apple Announces New Security Update Feature in iOS 16, macOS Ventura

• Top Cybersecurity Companies for 2022

• Multilevel Extortion: DeadBolt Ransomware Targets Internet-Facing NAS Devices

• NFTs Worth 200 Ether Were Stolen From the Bored Ape Yacht Club

• Nearly half of organizations hit by ransomware lost business as a result

• SVCReady: A New Loader Gets Ready

• Spanish Judge to Seek Testimony From NSO on Pegasus Spyware

• Using SSH tunneling for good and evil

• RSAC Opens With Message of Transformation

• How the C-Suite Puts Shoulders Into Zero Trust in 2022

• Apple’s Safety Check combats domestic abuse but timing its use is critical

• Humans and identity are constants in the ever-changing world of cybersecurity

• Evil Corp Hacker Group Changes Ransomware Tactics to Evade US Sanctions

• When DRM Comes For Your Wheelchair

• Virtual desktop infrastructure security best practices

• e360 Recognized by CRN® as One of North America’s Top Performing IT Solution Providers

• How DNS filtering can help protect your business from Cybersecurity threats

• GrammaTech to Host Cyber Thriller Book Signing at RSA 2022 with Deb Radcliff

• NSO Boss To Be Questioned By Spanish Judge Over Spyware Claim

• Joomla Security in 2022 – Best Practices To Secure Your Website

• Humans still weakest link in cybersecurity

• Know your enemy! Learn how cybercrime adversaries get in…

• Microsoft details zero-trust transition, challenges

• Enterprise Security Around the Dinner Table

• Hackers can take over accounts you haven’t even created yet

• Apple Blocks Millions of Apps and Restricts User Accounts

• New Specops Password Policy Detects and Blocks in User’s Active Directory

• Apple to say goodbye to Passwords with its MacOS Ventura Passkeys

• Apple Just Killed the Password—for Real This Time

• Owl Labs Releases Security Updates for Meeting Owl Pro and Whiteboard Owl

• Boosting your XDR Potential with Device Insights and Kenna Integrations

• Microsoft Seizes 41 Domains Tied To Iranian Phishing Ring

• Microsoft Won’t Say If It Will Patch Critical Windows Vuln Under Exploit

• Attackers Use Public Exploits To Throttle Atlassian Confluence Flaw

• Follina Exploited By State-Sponsored Hackers

• Spanish Court Calls CEO Of Israel’s NSO Group To Testify In Spying Case

• Beware of scams involving jobs, stimulus checks and tax refunds, IRS warns

• Hackers are now hiding inside networks for longer. That’s not a good sign

• DNI Avril Haines: Cybersecurity is getting harder

• KrebsOnSecurity in New Netflix Series on Cybercrime

• Owl Labs Releases Security Updates for Meeting Owl Pro and Whiteboard Owl

• Protect Your Executives’ Personal Digital Lives to Protect Your Company

• AI for Cyber Threat Intelligence – Challenges and Mitigation Approaches

• The Need for Automated Remediation in SaaS Security

• How to Solve a CISO’s Worst Nightmare

• Texas AG Investigates Twitter For ‘Deceptive Practices’ Over Bots

• How to install Maltrail for malicious traffic detection on your network

• Evil Corp gang starts using LockBit Ransomware to evade sanctions

• Getting a list of fixes for a Red Hat product between two dates is easy with daysofrisk.pl

• Rotten apples banned from the App store

• Just Released: 2022 (ISC)² Security Congress Agenda!

• WWDC 2022: Apple ‘All New’ MacBook Air, MacBook Pro

• New Dragos OT-CERT Provides Free Industrial Cybersecurity Resources

• Cybersecurity Industry Leaders Launch Campaign to Close the Cybersecurity Talent Gap

• Akamai Launches New Malware Protection for Uploaded Files

• 7 NFT Scams That Could Be Targeting Your Brand

• BlackBerry launches CylanceGATEWAY ZTNA-as-a-service solution

• Cyber Risk Retainers: Not Another Insurance Policy

• RSA Conference 2022 – Announcements Summary (Day 1)

• Snowflake Debuts Cybersecurity Workload to Aid Visibility, Automation

• CyberRatings.org Announces Test on Cloud Network Firewall

• Forescout Announces Intent to Acquire Cysiv to Deliver Data-Powered Threat Detection and Response

• CISA Challenges Partners and Public to Push for ‘More Than a Password’ in New Social Media Campaign

• A Long-Awaited Defense Against Data Leaks May Have Just Arrived

• Three Reasons Why Unification Drives Modern Data Security Strategy

• Cequence Security Unified API Protection enables security teams to protect their APIs

• Ransomware Gangs Now Employ a New Technique

• How to Create Identity and Access Governance In and Across Clouds

• Cybersecurity awareness training: What is it and what works best?

• Follina Exploited by State-Sponsored Hackers

• Conducting Modern Insider Risk Investigations

• RSA Conference 2022 – Vendor Announcements Summary (Day 1)

• Evil Corp Cybercrime Group Shifts to LockBit Ransomware to Evade Sanctions

• Stamus Networks U38 provides earlier detection of cyber threats for customers

• How do I recover data from an old laptop if I’ve forgotten the password? [Ask ZDNet]

• 4 Ways to Close the OT Cybersecurity Talent Gap

• MITRE System of Trust identifies and quantifies supply chain security risks

• PuTTY SSH Bruteforce Login Script

• Suse bolsters security in Linux Enterprise 15 update

• Cybereason: Paying ransoms leads to more ransomware attacks

• Cybereason Ransomware True Cost To Business Study Reveals Organisations Pay Multiple Ransom Demands

• Apple Blocks Over A Billion Attacks On The App Store

• Apple unveils passkeys for passwordless authentication to apps and websites

• Apple Presents macOS Ventura, iOS 16, iPadOS 16, and New Macs

• Threat Actors Exploit Microsoft ‘Follina’ Bug to Attack Europe and U.S. Entities

• Attackers Use Public Exploits to Throttle Atlassian Confluence Flaw

• Period-Tracking and Fertility Apps Can Put Women Seeking Abortions at Risk

• Microsoft’s Digital Crimes Unit Takes Legal Action Over Spear-Phishing Attacks by Bohrium Hackers

• QBot Now Attacks Using Black Basta Ransomware

• WWDC 2022: Apple Unveils Powerful M2 Chip

• 4 Tips for an Airtight Kubernetes Security Policy

• Security Awareness Firm CybSafe Bags $28 Million in Series B Funding

• Ukrainian Officials’ Phones Targeted by Russian Hackers

• SimSpace platform enhancements help security teams validate their incident response operations

• Google Patches Critical Android Vulnerabilities With June 2022 Updates

• Hacking Scenarios: How Hackers Choose Their Victims

• Motorola’s Unisoc Chips Found to Contain Vulnerability

• WWDC 2022: Apple Announces New iPhone, iPad Operating System

• Smishing and Vishing Attempts Surged in 2021

• Gloucester Council IT Systems Still Affected Six Months After Cyber-Attack

• Social Care Organizations Get Cybersecurity Boost

• Researchers Warn of Spam Campaign Targeting Victims with SVCReady Malware

• IBM acquires Randori to strengthen its portfolio of AI-powered cybersecurity products and services

• This Is the Noteworthy Commitment of Quantum Signing Up: a Million Qubits and Screw Up Correction During 10 Years

• How to Pick the Gathering That Best Watches Out for Your Tech Association?

• NERC CIP Audits: Top 8 Dos and Don’ts

• Cyber-Attack Surface “Spiralling Out of Control”

• Black Basta ransomware operators leverage QBot for lateral movements

• Cisco announces innovations for end-to-end security across hybrid multi-cloud environments

• What It’s Like to Progress Forward During a Period Including an IPhone 13 Pro After Years as an Android Client

• Optiv CRS protects mission-critical assets and enhances recovery

• Looking for adding new detection technologies in your security products?

• Tenable closes acquisition of Bit Discovery and announces new solution to reduce cyber risk

• Authorities Taken Down WeLeakInfo and other Domains Providing DDoS Service

• Apple’s New Feature Will Install Security Updates Automatically Without Full OS Update

• Uptycs unveils functionality for CNAPP use cases to help organizations detect new cloud-based risks

• Does Windows 10 or 11 Need Antivirus Software?

• Attackers aren’t slowing down, here’s what researchers are seeing

• Why you should worry about medical ID theft

• How to create awareness and mitigate data loss incidents

• Bots compromise Jersey Computers to use them for Cyber Attacks

• Motorola mobiles suffering from stack overflow vulnerability

• Trellix Showcases Security’s Soulful Work and Award-Winning Tech at RSA® Conference

• IronNet Wins Award for Advanced Persistent Threat Detection

• Rapidly evolving IoT malware EnemyBot now targeting Content Management System servers and Android devices

• How to stay ahead of the Cybersecurity labor crisis and keep growing your business

• Stories from the SOC – Persistent malware

• Turning the tables on cyber attackers

• Ransomware attacks setting new records

• Boards, CEOs demand software supply chain security improvements

• Personal Data of 30,000+ Students Disclosed in Unsecured Database

• Cynet Automated Response Playbooks empowers security teams to reduce their alert investigation

• Business fit report: Echoworx Email Encryption

• Pindrop platform enhancements monitor fraudulent attempts to pass voice verification

• Deepwatch launches MXDR service to improve threat detection for enterprises

• BigID unveils SmallID to help customers improve security posture across the cloud

• FortiRecon gives enterprises adversary’s perspective of their attack surface

• Akamai Malware Protection blocks malicious files uploaded to web apps and APIs

• Chinese ride-hailing giant Didi surged 24% after report that regulators are ending probes

• #RSAC: The Changing Work of the Cyber-Threat Intelligence Community

• Juniper Networks expands its SASE offering with CASB and DLP capabilities

• IBM buys Randori to address multicloud security messes

• Top Secure Access Service Edge (SASE) Providers

• Musk Threatens to Walk Away From Twitter Deal

• DOD recommends NIST align frameworks for cybersecurity risk management

• Microsoft seizes 41 domains tied to ‘Iranian phishing ring’

• Thales collaborates with Palo Alto Networks to deliver new security integrations for businesses

• Absolute partners with leading ISVs to boost resiliency of their endpoint applications

• Bipartisan bill proposes new federal data privacy standards

• Renee Guttmann joins Kovrr Advisory Board

• AppOmni raises $70 million to help enterprises secure their entire SaaS environments

• Perimeter 81 raises $100 million to accelerate product development

• OVO Energy selects Noetic Cyber to gain better context and understanding of their cyber risk

• RSA 2022: Prometheus ransomware’s flaws inspired researchers to try to build a near-universal decryption tool

• iOS 16 cheat sheet: Complete guide for 2022

• MacOS malware attacks slipping through the cracks

• Ransomware’s ROI Retreat Will Drive More BEC Attacks

• Vulnerability Summary for the Week of May 30, 2022

• Lockbit ransomware gang claims to have hacked cybersecurity giant Mandiant

• Cisco EVP: We need to lift everyone above the cybersecurity poverty line

• New report points to cyber risks in TVA control systems

• Apple touts Passkey, its new privacy feature, at WWDC 2022

• Vulnerability Summary for the Week of May 30, 2022

• Microsoft Autopatch is here…but can you use it?

• IT Security News Daily Summary 2022-06-06

• FBI warns of scammers soliciting donations for Ukraine

• RecoLabs hopes to secure enterprise collaboration

• Brush up on phishing detection to prevent ransomware

• Ransomware attacks may be tough to stop, but here’s how to recover

• Speech-Related Offenses Should be Excluded from the Proposed UN Cybercrime Treaty

• Cyber competition builds skills, teamwork

• Communication Is Key to CISO Success

• Microsoft seized 41 domains used by Iran-linked Bohrium APT

• Authy vs Google Authenticator: Two-factor authenticator comparison

• Kinsta vs WP Engine: Managed WordPress hosting comparison

• Network Security Firm Perimeter 81 Closes $100 Million Funding Round

• Major DDoS attacks increasing after invasion of Ukraine

• BigID Introduces Cloud Data Security On Demand

• Optiv Launches Cyber Recovery Solution Focused on Protection and Rapid Recovery

• Delivering emergency alerts to vehicle infotainment systems

• US Supreme Court Seeks Biden Input On WhatsApp’s NSO Lawsuit

• EEOC will keep online mediation around post-Covid

• Federal broadband strategies ‘fragmented and overlapping,’ GAO says

• Threat Awareness Firm HackNotice Raises $7 Million

• RSA Conference 2022: Adjusting to ongoing transformation

• Reno mayor touts potential of blockchain, NFTs as city embarks on new pilot programs

• Thousands of unprotected Elasticsearch databases are being ransomed

• Polonium Assaults Against Israeli Organizations were Blocked by Microsoft

• IBM to Acquire Randori, Transforming How Clients Manage Risk with Attack Surface Management

• Report: Facebook Hosts A Stunning Amount Of Cryptocurrency Fraud

• IBM to Buy Attack Surface-Management Firm Randori

• RangeForce Named Cutting Edge Cybersecurity Training Platform in Global InfoSec Awards at RSA Conference 2022

• Hypori Wins Most Innovative Mobile Device Security Solution at the 10th Annual Global InfoSec Awards, Presented at the 2022 RSA Conference

• Horizon3.ai Named Winner of the Coveted Global InfoSec Awards during RSA Conference 2022

• Mandiant Secures Two Coveted Global InfoSec Awards During RSA Conference 2022

• AT&T Cybersecurity’s Partner Program and SentinelOne enter managed XDR market with robust alliance

• Fronton Botnet Attacks — Why Enterprises Should Worry?

• A hopeful update on the President’s Management Agenda

• How to always access your locked iOS device

• Critical Vulnerability Found in Motorola’s Unisoc Chips

• Attackers Use Underground Hacking Forum to Strip Activation Lock from iPhones

• Russian Construction and Housing website hacked for war on Ukraine

• RSAC 2022 trends: IBM, CrowdStrike and Wiz look to secure cloud attack surface

• State-Backed Hacker Believed to Be Behind Follina Attacks on EU and US

• The CISO Shortlist: Top Priorities at RSA 2022

• Cybersecurity M&A Activity Shows No Signs of Slowdown

• Long Story on the Accused CIA Vault 7 Leaker

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Musk May Drop Twitter Deal If Fake Account Data Not Provided

• Complete Guide to Keylogging in Linux: Part 2

• FBI warning: This gang steals data for ransom, then makes harassing phone calls to pile on the pressure

• Small business cybersecurity: Avoid these 8 basic mistakes that could let hackers in

• Seagate Technology and the Case of the Missing Huawei FDPR Enforcement

• Hack Global, Buy Local: The Inefficiencies of the Zero-Day Exploit Market

• Announcing 2022 Microsoft Security Excellence Awards winners

• Atlassian Patches Confluence Zero-day Vulnerabilities

• A Severe Zero-Day Vulnerability Riddles Microsoft Office

• Researcher Discloses A WordPress CSP Bypass Publicly After Not Hearing From the Publishers

• Real Security Concerns Are Scarier Than Doomsday Predictions

• Apple protected App Store users from $1.5 billion fraud last year

• Critical Account Takeover Vulnerability Patched in GitLab Enterprise Edition

• 10 Most Prolific Banking Trojans Targeting Hundreds of Financial Apps with Over a Billion Users

• Security Resilience for a Hybrid, Multi-Cloud Future

• Australian Court Orders Google To Pay Politician Over ‘Abusive’ YouTube Videos

• Apple Blocked 1.6 Million Risky, Vulnerable Apps in 2021

• Unpatched Critical Flaws Disclosed in U-Boot Bootloader for Embedded Devices

• Russian Ministry Website Appears Hacked

• Ransomware Attacks Have Dropped. Gangs Attack Each Other’s Victims

• Costa Rican Government Held Up By Ransomware… Again

• Meet The Vigilantes Who Hack Millions In Crypto To Save It From Thieves

• Is SEO Better Than Paid Ads?

• Armis unveils Industry’s first End-to-End Risk-Based Vulnerability Lifecycle Management

• Ransomware Viruses Are Not Going Away

• Are You Ready for a Breach in Your Organization’s Slack Workspace?

• AlphaBay Is Taking Over the Dark Web—Again

• Qualys VMDR 2.0 provides security teams with insights into an organization’s risk posture

• LastPass joins the FIDO passwordless movement

• Personal Information of Over 30,000 Students Exposed in Unprotected Database

• Gathering Momentum: 3 Steps Forward to Expand SBoM Use

• Name That Edge Toon: Hey, Batter Batter!

• Qualys VMDR 2.0 with TruRisk: Taking vulnerability management to the next level

• Lumu Incident View empowers security teams to prioritize incidents based on the progression of attacks

• Can You Be Tracked If You Use a VPN – 2022 Guide

• Microsoft’s new ‘autopatch’ service for Windows PC just took another step forwards

• Ransomware attacks have dropped. And gangs are attacking each other’s victims

• Cybersecurity M&A Roundup: 36 Deals Announced in May 2022

• Virtru launches OpenTDF project to offer orgs zero-trust data controls

• Microsoft Seizes 41 Domains Used in Spear-Phishing Attacks by Bohrium Hackers

• Another nation-state actor exploits Microsoft Follina to attack European and US entities

• Apple Release 2021 Fraud Prevention Analysis

• Hosting Types and What to Look for in a Provider

• Amazon’s Consumer Boss, Dave Clark, Steps Down

• Virtru launches OpenTDF project to offer orgs zero trust data controls

• CISA Warned About Critical Vulnerabilities in Illumina’s DNA Sequencing Devices

• State-Backed Hackers Exploit Microsoft “Follina” Bug to Target U.S. and European Entities

• A week in security (May 30 – June 5)

• Most Reliable Hosting Company Sites in May 2022

• Apple: These are the sorts of apps we blocked from our App Store last year

• Demand for cyber risk insurance soars in Brazil

• Beating Ransomware With Advanced Backup and Data Defense Technologies

• Feature: Beating Ransomware With Advanced Backup and Data Defense Technologies

• Gloucester Council IT Systems Still Not Fully Operational Six Months After Cyber-Attack

• Digital Fingerprints Of A Million Child Abuse Images Made

• Malware Injected Into Every JavaScript File Controlling Thousands Of Sites

• A Warning To Enterprises: It’s Time To Retire On-prem; Migration To Cloud And Modern AppSec Tools Critical To Future Threats, What Do You Think?

• Singapore Officially Launches Digital Platform to Ease Supply Chain Data Flow and Improve Data Efficiencies

• What Is a CVE? Common Vulnerabilities and Exposures Explained

• Phishing Campaign Uses Reverse Tunnels and URL Shorteners

• Top Ways Big Companies Protect their Data

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of May 30, 2022

• Critical U-Boot Vulnerability Allows Rooting of Embedded Systems

• Red TIM Research discovers a Command Injection with a 9,8 score on Resi

• 60GB of User Data Was Exposed by Australian Trading Company ACY Securities

• Chinese ride-hailing giant Didi surges 50% after report that regulators are ending probes

• Closing the Door: DeadBolt Ransomware Locks Out Vendors With Multitiered Extortion Scheme

• Maximize your cloud security with isolation zones

• Atlassian Patches Confluence Zero-Day as Exploitation Attempts Surge

• HackerOne OpenASM enables customers to leverage scan data from multiple vendors

• CrowdStrike is a buy as the macro environment becomes more uncertain, Morgan Stanley says

• Hackers Ended the Life of a 150+ Years Old College in Illinois

• Russian Ministry Website Hacked With Pro Ukraine Message

• EU To Agree Universal Mobile Charger Port On Tuesday – Report

• Activists Say Cyber Agency Weakens Voting Tech Advisory

• Russian Ministry Website Reportedly Hacked

• CVE-2022-30190 (Follina) vulnerability in MSDT: description and counteraction

• BEC attacks have risen 53% year-over-year

• How to prevent digital burnout

• OpenText expands its suite of security solutions to strengthen cyber resilience posture for enterprises

• Software developers, how secure is your software ?

• Exclusive: Pro-Russia group ‘Cyber Spetsnaz’ is attacking government agencies

• Skyhigh Security SSE platform enhancements protect data regardless of where it lies

• Tor’s (security) role in the future of the Internet, with Alec Muffett

• Cyber Attack news headlines trending on Google

• Elon Musk pushes Tesla AI Day to September 30 this year

• SMSFactory Android Malware Trick Victims to Subscribes to Premium Services

• Intelligence must drive strategic decisions

• Healthcare-specific cybersecurity problems and how to address them

• Perimeter 81 Secures $100 Million Series C Funding Led By B Capital, Leading to $1 Billion Valuation

• PentaFour Acquires Winterhawk Consulting from Pathlock

• CrowdStrike Reports First Quarter Fiscal Year 2023 Financial Results

• Tech pros have low confidence in supply chain security

• Four steps to successful empathetic investigations

• The costs and damages of DNS attacks

• Costa Rican government held up by ransomware … again

• HITRUST: the Path to Cyber Resilience

• High Seas and High Stakes Communications: Securing the Maritime Industry

• The Intigriti Ethical Hacker Survey 2022

• State-Backed Hackers Exploit Microsoft ‘Follina’ Bug to Target Entities in Europe and U.S

• BluBracket enhances its code security solution to help enterprises protect software supply chains

• Gurucul releases cloud-native SOC platform to improve security analyst effectiveness

• Neosec ShadowHunt identifies threats in business API traffic

• Yandex CEO Arkady Volozh resigns after being added to EU sanctions list

• Welcoming the Indonesian Government to Have I Been Pwned

Generated on 2022-06-07 23:55:32.792061