IT Security News Daily Summary 2022-06-10

• Report: Over 1B Google Play downloads for financial apps targeted by malware

• In search of a more energy-efficient blockchain

• How CISOs can Find and Retain Security Staff During the Great Resignation

• World Economic Forum wants a global map of online crime

• Threat actors exploit recently disclosed Atlassian Confluence flaw in cryptomining campaign

• Remote work demands industrial businesses secure critical infrastructure

• Billion-Dollar Valuations Can’t Halt Layoffs at OneTrust, Cybereason

• CrowdStrike Introduces Humio for Falcon, Redefining Threat Hunting with Unparalleled Scale and Speed

• New Evidence on the Role of Subnational Diplomacy in China’s Pursuit of U.S. Technology

• Better public-private partnerships could prevent major ransomware attacks, crypto insiders say

• CrowdStrike Adds Strategic Partners to CrowdXDR Alliance and Expands Falcon XDR Capabilities

• CrowdStrike Introduces CrowdStrike Asset Graph to Help Organizations Proactively Identify and Eliminate Blind Spots

• Threat and risk specialists signal post-COVID conference season is back on

• CISOs think they aren’t getting enough cyber investment, survey says

• For mental crises, send a pro not the police?

• 3 types of PKI certificates and their use cases

• #RSAC: CISA Outlines Bad Practices Every Organization Should Avoid

• The January 6 Hearing Was a Warning

• The Tricky Business of Elon Musk Getting Twitter Fire-Hose Access

• Survey: Majority of CISOs aren’t getting the cyber investments they want

• Digital Corps launches with 41 fellows across 13 agencies

• Water sector leaders seek increased EPA cybersecurity collaboration and guidance

• How to Blunt the Virulence of the New Ransomware

• EU Debates AI Act to Protect Human Rights, Define High-Risk Uses

• Dark Web Selling Alleged Western Weapons Sent to Ukraine

• Instagram credentials Stealer: Disguised as Mod App

• Instagram credentials Stealers: Free Followers or Free Likes

• Southeast Asia and Australia Orgs Targeted by Aoqin Dragon Hackers for Ten Years

• How to Secure a High-Profile Event Like the Super Bowl

• The Eleventh Circuit’s Acceptance of a Consumer Protection Approach to Social Media Regulation

• #RSAC: The Privacy and Blockchain Paradox

• New Linux Malware ‘Nearly Impossible to Detect’

• Application Security Testing Is on the Mend With Automated Remediation

• How DNS filtering can help protect your business from Cybersecurity threats

• Digital Corps launches with 40 fellows across 13 agencies

• Vulnerabilities Targeting InfiRay Thermal Cameras May Result in Industrial Process Hacking

• Most Security Product Buyers Aren’t Getting Promised Results: RSA Panel

• Mitigating the Security Skills Shortage

• Symbiote: A Stealth Malware that Attacks Banking Institutions

• Malvertising Campaign Target Firefox Users via Fake Updates

• Millions of Facebook Users’ Credentials Were Stolen via Authentic App Services

• Twitter to take down fake accounts to please Elon Musk and his $44 billion offer

• A Few Simple Ways to Transform Your Cybersecurity Hiring

• Google Releases Security Updates for Chrome

• WhatsApp spam offers up “B&Q Father’s Day Contest 2022”

• How AI is driving IAM’s shift to digital identity

• Google Releases Security Updates for Chrome

• Kubernetes Operators: good security practices

• Researchers Find Bluetooth Signals Can be Fingerprinted to Track Smartphones

• Experts spotted a new variant of the Cuba Ransomware with optimized infection techniques

• Symbiote Linux malware spotted, and infections are ‘very hard to detect’

• EU Parliament Approves Ban On Combustion Cars By 2035

• Karakurt data extortion group: CISA issues alert

• Ease your kids into a hybrid play model with these tips

• Phishing, fake landing pages and emails from your boss: How crooks are targeting your crypto

• Bitwarden vs LastPass: Compare top password managers

• 38 Tech Leaders Sign Cyber Resilience Pledge

• How 4 Young Musicians Hacked Sheet Music to Help Fight the Cold War

• Artificial Intelligence and Security: What You Should Know

• U.S. Water Utilities Prime Cyberattack Target, Experts

• Vulnerabilities in HID Mercury Access Controllers Allow Hackers to Unlock Doors

• In a Quickly Evolving Landscape, CISOs Shift Their 2022 Priorities

• What A 650% Rise In Open-Source Software Targeted Hacks Is Teaching Us

• Owl Labs Patches Awful Exposure in Video Conferencing Applications

• Kinsta vs WP Engine: Managed WordPress hosting comparison

• What & Who You Know: How to get a job in cybersecurity with no experience

• What Is Cloud Email?

• MIT researchers discover Apple M1 chip vulnerability

• Google: We’re making the Chrome browser ‘more helpful’ by using machine learning

• How do I keep two PCs in sync when they’re in different locations? [Ask ZDNet]

• This hacking group quietly spied on their targets for 10 years

• Chinese Cyberspy Group ‘Aoqin Dragon’ Targeting Southeast Asia, Australia Since 2013

• Ericsson Confirms SEC Investigation Over Iraq Conduct

• Potent Emotet Variant Spreads Via Stolen Email Credentials

• Chrome 102 Update Patches High-Severity Vulnerabilities

• #RSAC: “Users Are Not Stupid, So Don’t Treat Them Like They Are”

• Design Weakness Discovered in Apple M1 Kernel Protections

• New Linux Malware Dubbed “Almost Impossible” To Detect Found

• Researchers unearth highly evasive “parasitic” Linux malware

• Apple M1 chip contains hardware vulnerability that bypasses memory defense

• InfiRay Thermal Camera Flaws Can Allow Hackers to Tamper With Industrial Processes

• Dark Web Vendors Allegedly Selling Western Weapons in Ukraine

• US Agency Deepens Tesla Autopilot Investigation

• Highly-Evasive Linux Malware ‘Symbiote’ Infects All Running Processes

• Researchers Block Two Million Extortion Emails Daily

• Russia: Cyber-Attacks Could Escalate Military Conflict

• New Emotet Malware Targets Chrome Users Card Information

• Phishing Hits All-Time High in Q1 2022

• Gamers Targeted On Roblox By Ransomware Selling Decryptors On Game Pass Store

• RedSeal Stratus allows organizations to monitor and secure their multi cloud environments

• Researchers Detail How Cyber Criminals Targeting Cryptocurrency Users

• Italian City Palermo Impacted by Cyberattack, Vice Society Ransomware Claims Responsibility

• Vice Society ransomware gang adds the Italian City of Palermo to its data leak site

• The Must-Attend Cybersecurity Event: International Cyber Expo

• Prioritizing segmentation leads to better business and security outcomes

• International Cyber Expo Invites Esteemed Advisory Council to Shape Event Agenda

• Morphisec Knight for Linux proactively prevents advanced evasive attacks

• Emotet malware gang re-emerges with Chrome-based credit card heistware

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Researchers Disclose Critical Flaws in Industrial Access Control System from Carrier

• Lacework expands security capabilities to improve visibility across dynamic cloud workloads

• Noname API Security Platform 3.0 empowers users to identify problems in different regions

• A new Linux Malware named Symbiote is hard to detect

• Russia warned the West against cyber attacks and threatened direct military warfare

• June 2022 Patch Tuesday forecast: Internet Explorer fades into the sunset

• Photos: RSA Conference 2022, part 3

• New infosec products of the week: June 10, 2022

• Chinese ‘Aoqin Dragon’ gang runs undetected ten-year espionage spree

• TranSigma Delivers More Than $7M in Annualized Free-cash-flow Savings for Our Client in First of Many Celonis-supported Use Cases

• How to stay ahead of the Cybersecurity labor crisis and keep growing your business

• Rapidly evolving IoT malware EnemyBot now targeting Content Management System servers and Android devices

• What cybersecurity investors should be aware of in 2022

• Hardware flaws give Bluetooth chipsets unique fingerprints that can be tracked

• Only 43% of security pros can respond to critical alerts in less than an hour

• New Emotet Variant Capturing Users’ Credit Card Data from Google Chrome

• RSA – Creepy real‑world edition

• Navigating Cybersecurity with NERC CIP as the North Star

• Using the random motion of electrons to improve cybersecurity

• Russia, China, warn US its cyber support of Ukraine has consequences

• ADVA Ensemble SaaS MANO accelerates rollout of virtualized services

• Livestream: Jan. 6 Select Committee Hearing Day One

• Test Post

• Test Test 2

• Hyperconverged Infrastructure (HCI) is Changing Data Centers

• White House developing national strategy to increase data collection as privacy tech improves

• Q1 2022 Global DDoS Threat Landscape Report Findings Summary

• Ping Identity, Yubico, and EntryPoint bring zero trust to FIDO2 authenticators for the US Federal Government

• Amazon EKS vs Azure Kubernetes Service

• NASA wants to expand data sharing with Space Force and commercial partners

• #RSAC: Plain Language Threat Modeling for DevSecOps

• Entrust acquires Evidos to enhance its electronic signature and digital signing capabilities

• DigiCert acquires DNS Made Easy to improve web operations and security for organizations

• Report reveals 15-inch MacBook Air release window, M2 Max core count

• NASA to figure out how to get data on unexplained objects in the sky

• Quantum computer succeeds where a classical algorithm fails

• Apple Now Makes the Best Running Watch

• Welcome to the Great Reinfection

• What keeps Mandiant Intelligence EVP Sandra Joyce up at night? The coming storm

• #RSAC: Putting Humans at the Center of Incident Response

• Darktrace Federal appoints Marcus Fowler as CEO

• Harald Schneider joins Equifax as Chief Data & Analytics Officer

• Cloudflare names Mark Hawkins to Board of Directors

• 443ID emerges from stealth and raises $8 million to launch its first products

• Middesk raises $57 million to accelerate trust between businesses

• Russian Radio Station Hacked to Broadcast Ukrainian National Anthem

• Report: Majority of critical router vulnerabilities remain unpatched

• HYCU lands $53 million to enhance its multi-cloud data protection service

• Intel hires April Miller Boise as EVP and Chief Legal Officer

• ComplyAdvantage names Mark Watson as CTO

• TMF looks to measure more than just cost savings

• Noname: Proactiveness Is the Name of the Game in App Security

• Sysdig Takes a Deeper Cut at Cloud Security

• Cloud services proving handy for cybercriminals, SANS Institute warns

• IT Security News Daily Summary 2022-06-09

• UAS network expands operational drone testing

• Replacing lead pipes first depends on being able to find them

• Rob Joyce: China represents biggest long-term cyberthreat

• #RSAC: NSA Outlines Threats from Russia, China and Ransomware

• Lacework Blends Artificial Intelligence and Automation to Bolster Cloud Security

• #RSAC: How to Manage the Supply Chain in the Modern Age

• Prevent Breaches and Malware With Proactive Defenses

• Report: 75% of CISOs worry about vulnerabilities during app production

• DigiCert Acquires DNS Made Easy

• Hackers Can Steal Your Tesla by Creating Their Own Personal Keys

• West Risks Direct Military Clash Over Cyberattacks, Says Russia

• New MSDT 0-day Flaw ‘DogWalk’ Receives Free Unofficial Patches

• Mandiant: Cyberextortion schemes increasing pressure to pay

• CrowdStrike demonstrates dangers of container escape attacks

• #RSAC: Lessons Learned From the Solarwinds Sunburst Attack

• Identity-First Security Helps Reduce and Neutralize Enterprise Threats

• Friday Squid Blogging: Squid Changes Color from Black to Transparent

• The Bipartisan, Bicameral Privacy Proposal Is a Big Deal

• Symbiote, a nearly-impossible-to-detect Linux malware

• #RSAC: Funding Cyber Civil Defense to Help Improve the State of Security

• Twitter Set to Agree to Elon Musk Request For Data on Fake Accounts

• Emotet Banking Trojan Resurfaces, Skating Past Email Security

• Can Hackers steal data from an iPhone

• Feds Forced Travel Firms to Share Surveillance Data on Hacker

• New Linux Malware Symbiote is “Nearly Impossible to Detect”

• Facebook Whistleblower Accuses Company Of Failing To Remove Fake Account Network Run By Politician

• Cisco Makes Resilience a Cornerstone of Security Strategy

• Facebook phishing campaign nets millions in IDs and cash

• A cybercriminal stole 1 million Facebook account credentials over 4 months

• Sophos: Keeping Tabs on the Bad Guys Using Threat Research

• Cloud data breaches: 4 biggest threats to cloud storage security

• Tesla Proceeds With China Hiring Event, Despite Musk Job Warning

• iOS 16 cheat sheet: Complete guide for 2022

• Want Better Security? Up Your Collaboration Game

• How AI Is Useful — and Not Useful — for Cybersecurity

• New Privacy Framework for IoT Devices Gives Users Control Over Data Sharing

• Achieve seamless observability with Dynatrace for Azure

• 0patch Launched Unofficial Patches For ‘DogWalk’ Windows Zero-Day Bug

• Cubic Awarded DoDIN APL Certification for M3-SE and M3X Rugged Servers

• 5 ways to prevent Ransomware attacks

• Security frameworks / attestations and certifications: Which one is the right fit for your organization?

• AT&T Cybersecurity’s Partner Program and SentinelOne enter managed XDR market with robust alliance

• Suspicious behavior: OTX Indicator of Compromise – Detection & response

• CISA Adds Three Known Exploited Vulnerabilities to Catalog  

• New Tesla Hack Gives Thieves Their Own Personal Key

• Russia Says West Risks Direct Military Clash Over Cyber Attacks

• Optimism Crypto Project Hopes Hacker Will Give Back $15 Million

• Ministry Of Defence Acquires Government’s First Quantum Computer

• Expect Downtime Next Week For Packet Storm

• Medical Device Security Offers Proving Ground for Cybersecurity Action

• The Chatter Podcast: Private Sector Intelligence with Lewis Sage-Passant

• Learn what’s new in Azure Firewall

• Russian Evil Corp changes tactics to avoid sanctions

• HoloLens Creator Leaves Microsoft Amid Misconduct Allegations

• #RSAC: How to Fix IoT Security with Digital Twins

• Uptycs: Observability Is Key to Cloud Security

• CISA Adds Three Known Exploited Vulnerabilities to Catalog  

• “Legacy” cryptography in Fedora 36 and Red Hat Enterprise Linux 9

• Apple Launches Passkey Feature For Password-less Verification

• MyEasyDocs Exposed 30GB of Israeli and Indian Students PII Data

• Top GRC Tools & Software for 2022

• Why AIs Will Become Hackers

• Automox Adds Automation to Patching, Vuln Management

• China’s Attacks on Telecom Providers Were Exposed by US

• Effective Cybersecurity for eCommerce Sites

• One In Ten Staff Want To Leave Over Tech Frustrations, Says Freshworks

• 37 Major Companies and Organizations Pledge to Enhance Cyber Resiliency and Counter Evolving Global Threats

• ReliaQuest Bolsters Extended Detection With Threat Intelligence

• Previously undocumented Aoqin Dragon APT targets entities in Southeast Asia and Australia

• The cost of ransomware: Should you pay the ransom?

• Are you maximizing your digital transformation investments with modernized app onboarding?

• The Growing Risk in Cyber Risk Management

• Feds Take Down SSNDOB Marketplace for Selling Private Data of 24 Million US Citizens

• Twitter Used Two-Factor Login Details for Ad Targeting

• Summer holiday season fuels upswing of travel-themed spam

• Facebook users targeted in massive phishing campaign

• ASyncRat surpasses Dridex, TrickBot and Emotet to become dominant email threat

• Beware of Fake CCleaner Search Results that Deliver Information-stealing Malware

• One Size Does Not Fit All Organizations

• ‘Follina’ Vulnerability Exploited to Deliver Qbot, AsyncRAT, Other Malware

• How Poor Communication Opens the Door to Ransomware and Extortion

• Celebrate the Release of Our 100th PG-Practice Machine

• Why Smishing And Vishing Attempts Surged In 2021?

• Apple Will Be Launching Passwordless Logins, What Do You Think?

• BlackBasta is the latest ransomware to target ESXi virtual machines on Linux

• Twitter To Supply Elon Musk With Bot Data – Report

• US Details Chinese Attacks Against Telecoms Providers

• S3 Ep86: The crooks were in our network for HOW long?! [Podcast + Transcript]

• What Do Transparency and Data Sharing Really Mean?

• The Real Cost Of Cyber-Attacks: What Organizations Should Be Prepared For

• New Research Says Technobabble Needs To Be Stamped Out To Broaden Sector’s Appeal

• Whats The Problem With UK Govt Buying Quantum Computer

• What Do You Think Of CISA Latest Alert Warning Exploitation Of Network Providers And Devices By Chinese-backed Threat Actors?

• This new Linux malware is ‘almost impossible’ to detect

• Are 14-character minimum-length passwords secure enough?

• Update now! Patch against vulnerabilities in Meeting Owl Pro and Whiteboard Owl devices

• Symbiote: A Stealthy Linux Malware Targeting Latin American Financial Sector

• Lower costs with Cloud-delivered Firewall Management Center

• Apple’s passkeys attempt to solve the password problem

• Surfshark and ExpressVPN Exit India After Intrusive Law Implementation

• Symbiote Deep-Dive: Analysis of a New, Nearly-Impossible-to-Detect Linux Threat

• Summary of Symbiote Research (A New, Nearly-Impossible-to-Detect Linux Threat)

• Even the Most Advanced Threats Rely on Unpatched Systems

• Millions of Users Have Been Enticed to Phishing Pages in Massive Campaign Exploiting Facebook Messenger

• Symantec: More malware operators moving in to exploit Follina

• Cloud computing: Here’s the security threat you should be most worried about

• CISA warning: Hackers are exploiting these 36 “significant” cybersecurity vulnerabilities – so patch now

• RSA Conference 2022 – Announcements Summary (Day 3)

• Smartphones and Civilians in Wartime

• UK Government Acquires Its First Quantum Computer

• The most common exploit paths enterprises leave open for attackers

• New Emotet Variant Scrapes Google Chrome Credit Card Info

• May 2022’s Most Wanted Malware: Snake Keylogger returns to the index in eighth place following email campaigns delivering the malware via PDF files

• What role did a viral pandemic play in cyber security consolidation?

• Threat Actors Start Exploiting Meeting Owl Pro Vulnerability Days After Disclosure

• A Decade-Long Chinese Espionage Campaign Targets Southeast Asia and Australia

• New Emotet variant uses a module to steal data from Google Chrome

• Five Eyes alliance’s top cop says techies are the future of law enforcement

• MoD Acquires Government’s First Quantum Computer – Report

• Reports: Twitter to Provide Musk With Raw Daily Tweet Data

• Man Arrested for Sharing Info on 3D-Printed Weapons

• UK Joins Quantum Arms Race with First Computer

• Hacked Instagram accounts are scamming users

• DefenseStorm Raises $15 Million for Banking Security and Compliance Platform

• Over Half of CISOs Struggling for Board Investment

• Large Scale Phishing Campaign on Facebook Messenger Generates Millions in Ad Revenue

• Would you watch TV on the road?

• Unofficial Security Patch Released For Microsoft Zero-Day Vulnerability

• Tainted CCleaner Pro Cracker spreads via Black Seo campaign

• Apple’s New Operating Systems: macOS Ventura, iOS 16, & iPadOS 16 – Intego Mac Podcast Episode 243

• Avast Ultimate Business Security upgrade for existing customers

• RSA – Digital healthcare meets security, but does it really want to?

• Ransomware attacks have increased by 80% year-over-year

• Photos: RSA Conference 2022 Early Stage Expo

• Code42 adds watchlists functionality to its Incydr product to help teams manage insider risk events

• Do you know what your supply chain is and if it is secure?

• Malwarebytes DNS Filtering helps IT and security teams block access to malicious websites

• New Emotet Variant Stealing Users’ Credit Card Information from Google Chrome

• Photos: RSA Conference 2022, part 2

• How to build security for the metaverse

• Five Eyes alliance’s top Cop says techies are the future of law enforcement

• Lockbit 2.0 Ransomware targets Cybersecurity firm Mandiant

• CISA issues advisory on Chinese Cyber Threat to US Telecoms and ISPs

• Getting to grips with SaaS security

• Epoch Concepts Supports the USSF on a Massive Multi-Year Project by Providing IT Enabling Infrastructure

• Intelligent Waves’ Phantom, Cybersecurity Solution for Cloud Workload Protection, Named Editor’s Choice By Cyber Defense Magazine at the 2022 Global InfoSec Awards

• Exabeam Partners with Google Cloud to Create Hyperscale Cloud-native SIEM and Cybersecurity Analytics Offerings

• Building trust in a Zero-Trust security environment

• Healthcare is most likely to pay the ransom

• Top three most critical areas of web security

• What Is ISO/IEC 27017?

• Only 13.5% of IT pros have mastered security in the cloud native space

• Prometheus Ransomware’s Bugs Inspired Researchers to Try to Build a Near-universal Decryption Tool

• Supply chain attacks will get worse: Microsoft Security Response Center boss

• NetApp announces new innovations to simplify hybrid cloud operations

• Swimlane Turbine extends visibility and response for security teams

• Living Security Unify Insights allows organizations to identify human behavior risks

• #RSAC: Current Nation-State and Ransomware Gang Threat Trends

• Getting Started with Rapid7 InsightIDR: A SIEM Tutorial

• Testing & Evaluating SIEM Systems: A Review of Rapid7 InsightIDR

• Phishing Campaigns featuring Ursnif Trojan on the Rise

• How to Recognize an Online Scammer

• Wedding Planning App Users Hacked Before the Big Day

• 8 Ways to Know If Online Stores Are Safe and Legit

• How to Know If Your Mobile Finance Apps Are Safe

• Now Windows Follina zero-day exploited to infect PCs with Qbot

• Anjuna Security: Tapping ‘Confidential Computing’ to Secure Data, Users, and Organizations

• Security & Productivity: The New Power Couple

• SSNDOB Cybercrime Marketplace Seized in Intl. Coordinated Operation

• Why you need your boss’s boss to embrace agile

• Kovrr partners with Microsoft to help enterprises mitigate their cyber risk exposure

Generated on 2022-06-10 23:55:34.047923