IT Security News Daily Summary 2022-06-25

• 3 reasons to consider adopting AI cybersecurity tools

• Protecting the modern workforce requires a new approach to third-party security

• Diana Logue Named Chief Operating Officer of ‘ASTORS’ Sponsor Rajant

• Oracle spent 6 months to fix ‘Mega’ flaws in the Fusion Middleware

• How Passwordless Can Help Us Win the Ransomware War

• Security For Want of a Nail

• This New Malware Redirects Cryptocurrency Payments to Wallets Controlled by the Attacker

• The Human Factor in Cybersecurity Breaches

• Protecting Patients With Healthcare Cybersecurity

• It’s not ‘See you later.’ It’s ‘Goodbye’: Moving on from Tokenization in the age of Ransomware

• A simple solution to the constant battle of cyber prevention versus mitigation

• Hackers Exploit Harmony’s Horizon Blockchain Bridge to Steal $100 Million

• Multiple malicious packages in PyPI repository found stealing AWS secrets

• Malicious Excel Files are Now Being Employed to Propagate Revamped Emotet Malware

• Can global recruitment solve the cybersecurity hiring problem?

• ISPs Helped Hackers to Infect Smartphones with Hermit Spyware

• 5 ways to avoid being catfished

• Securing Software Supply Chains on Kubernetes Using Nirmata and Venafi

• Critical Instagram Bug Could Allow Changing Reel Thumbnails

• Operating Systems Can be Detected Using Ping Command

• Novel ToddyCat APT Attacking Microsoft Exchange Servers

• The Post-Roe Privacy Nightmare Has Arrived

• Critical PHP Flaws Allows Attackers to Execute Remote Code on QNAP NAS Devices

• Attackers exploited a zero-day in Mitel VOIP devices to compromise a network

• Amazon No Longer Offers Kindle, Music & Audiobooks Purchases on Android

• This A Cappella Group on YouTube Can Mimic The Music Sound Effects From Video Games & TV Series

• How to Move Your WhatsApp Chats Across Devices and Apps

• We’re now truly in the era of ransomware as pure extortion without the encryption

• Learn NIST Inside Out With 21 Hours of Training @ 86% OFF

• The 5 best security cameras of 2022

• Build or Buy your own antivirus product

• Weekly Update 301

• DevSecOps deploy and operate processes

• Bectran releases driver’s license verification solution to help businesses mitigate fraud in real-time

• IOTech Edge XRT 2.0 simplifies the development of time-critical OT applications

• Datadog Audit Trail enables businesses to achieve their compliance and governance objectives

• A Man of Action: Meet Callum Carney

• Instagram’s new age verification tool – Week in security with Tony Anscombe

• Prepare for Your Salesforce Certified OmniStudio-Developer Exam

• Modern Application Security Requires Defense in Depth

• Threat Intelligence Services Are Universally Valued by IT Staff

• Why We’re Getting Vulnerability Management Wrong

• Does an iPhone Need Antivirus Software?

• The psychology of phishing attacks

• More than $100m in cryptocurrency stolen from blockchain biz

• IT Security News Daily Summary 2022-06-24

• ISPs Helping Attackers Install Hermit Spyware on Smartphones- Google

• Low-cost sensors are helping communities find gaps in air quality data

• Friday Squid Blogging: Squid Cubes

• How the Evolution of Agents has Been Essential for Modern Database Security

• #InfosecurityEurope2022: Preparing for Future Challenges and Opportunities

• Private Network 5G Security Risks & Vulnerabilities

• Top 4 best practices to secure the SDLC

• Budding spies might not get weeded out for past drug use

• Making the case for identity access management

• Internet data produces a racist, sexist robot

• Thank You for Participating in Our Security Dashboard Redesign Survey

• Ukraine deploys a DDoS protection service to survive the cyberwar

• Digital identity challenges could be a roadblock to improved CX

• APT Groups Swarming on VMware Servers with Log4Shell

• Chinese APT Utilizes Ransomware to Cover Cyberespionage

• It’s your technology and your security controls: Don’t let an auditor become your CTO

• A First Circuit Decision and the Future of Telephone Pole Camera Surveillance

• Intern with Lawfare!

• Researchers criticize Oracle’s vulnerability disclosure process

• Phishing Emails Faking Voicemails aim to Steal Your Data

• Black Basta may be an all-star ransomware gang made up of former Conti and REvil members

• Cybersecurity Agencies Release Guidance for PowerShell Security

• Only 3% of Open Source Software Bugs Are Actually Attackable, Researchers Say

• How to create a continuous lifecycle for your IT Policy Management

• Navigable 3D site models would improve responder, law enforcement training

• Best cybersecurity certifications in 2022

• Citrix Releases Security Updates for Hypervisor

• Indian Crypto Users Duped Of Rs 1,000 Crore By Fake Exchange

• Teenager charged for launching DdoS attacks on International Banks and Websites

• Microsoft: Russia stepping up hacking, cyber penetration efforts on 42 Ukraine allies

• OpenSSL issues a bugfix for the previous bugfix

• Citrix Releases Security Updates for Hypervisor

• US watchdog is worried cyber insurance won’t cover ‘catastrophic cyberattacks’

• 7 best cybersecurity certifications of 2022

• #InfosecurityEurope2022: The Interactivity Between Nation-State Attackers and Organized Crime Gangs

• Threat actors continue to exploit Log4Shell in VMware Horizon Systems

• Security features in Red Hat Enterprise Linux 9

• EFF’s Statement on Dobb’s Abortion Ruling

• Malware and best practices for malware removal

• #InfosecurityEurope2022: Security awareness must be in the moment

• The Importance of a Consistent Security Policy

• Prisma Cloud Introduces Out-of-Band Web App and API Security

• Presidio and Palo Alto Networks Secure Hybrid Workforces with ZTNA 2.0

• Microsoft Compares Russian Hacks Of Ukraine To Assassination That Started World War I

• Google Warns Spyware Being Deployed Against Android, iOS

• Beijing-Backed Attackers Use Ransomware As Decoy While They Conduct Espionage

• NSO Claims More Than 5 EU States Use Pegasus Spyware

• A Comprehensive Guide to Security Assertion Markup Language (SAML)

• Chinese Hackers Disseminating SMS Bomber Tool with Hidden Malware

• ToddyCat claws at Asian governments

• Researchers: Oracle Took 6 Months to Patch ‘Mega’ Vulnerability Affecting Many Systems

• Hackers Exploit Mitel VoIP Zero-Day in Likely Ransomware Attack

• How to Mitigate Ransomware?

• Google details commercial spyware that targets both Android and iOS devices

• This new malware diverts cryptocurrency payments to attacker-controlled wallets

• CrowdStrike: Ransomware Actor Caught Exploiting Mitel VOIP Zero-Day

• Researchers: It Took Oracle 6 Months to Patch ‘Mega’ Vulnerability Affecting Many Systems

• 7 Steps to Stronger SaaS Security

• Vulnerabilities in the Jacuzzi SmartTub app could allow to access users’ data

• First Nixon, Then Trump: The Serious Problem of the President-as-Candidate

• Scalper bots are snapping up appointments for government services in Israel

• Hackers Exploit Mitel VoIP Zero-Day Bug to Deploy Ransomware

• A conversation with Jim Dolce, CEO of Lookout

• How to Prevent Ransomware?

• What is a Hotfix? Definition, Challenges, and Best Practices

• Hadrian Raises $11 Million for Offensive Security Platform

• Black Basta Ransomware Becomes Major Threat in Two Months

• The Cybersecurity Talent Shortage Is a Myth

• Chinese Hackers Distributing Nim language Malware in SMS Bomber Tool

• Report: 84% of orgs experienced an identity-related breach last year

• When I reset my Windows PC, I ended up with Home edition. How do I get my Pro upgrade back? [Ask ZDNet]

• CISA: Hackers are still using Log4Shell to breach networks, so patch your systems

• Without Conti On The Scene, LockBit 2.0 Leads Ransomware Attacks

• Google Says ISPs Helped Attackers Infect Targeted Smartphones with Hermit Spyware

• Cybersecurity agencies: You don’t have to delete PowerShell to secure it

• Codesys Patches 11 Flaws Likely Affecting Controllers From Several ICS Vendors

• On the Dangers of Cryptocurrencies and the Uselessness of Blockchain

• Open Source Threat Intelligence Platform – Best Alternatives for Your Company [2022]

• Users in Italy and Kazakhstan Targeted by Spyware Provider

• Critical Vulnerability In Apple Game Center Could Allow Authentication Bypass

• iPhone users: Google Chrome browser on iOS is getting these five new features

• Google Warns Spyware Being Deployed Against Android, iOS Users

• US Agencies Warn Organizations of Log4Shell Attacks Against VMware Products

• $100 million worth of crypto has been stolen in another major hack

• Google: How we tackled this iPhone, Android spyware

• Google Warns Of Italian Spyware On Apple, Android Phones

• Nasdaq Listing Most Likely For ARM, Says Softbank Boss

• US, UK, New Zealand Issue PowerShell Security Guidance

• Multiple Backdoored Python Libraries Caught Stealing AWS Secrets and Keys

• Attackers still exploit Log4Shell on VMware Horizon servers, CISA warns

• NEET Study Material: Benefits of NEET Study Material

• Cybersecurity Compliance Should Be A Priority For Companies

• Intel Signals Delay To Ohio Factory Over US Chips Act Dispute

• Conti Group Compromised 40 Firms in Just One Month

• Euro Police Target Gangs Grooming Ukrainian Refugees Online

• Unsecured APIs Could Be Costing Firms $75bn Per Year

• State-Backed Hackers Using Ransomware as a Decoy for Cyber Espionage Attacks

• Cloudflare One Partner Program enables companies of all sizes to adopt zero trust strategies

• What stolen info can be bought off the dark web, and for how much?

• Silicon UK In Focus Podcast: Sustainable Business

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Google TAG argues surveillance firm RCS Labs was helped by ISPs to infect mobile users

• Beijing-backed attackers use ransomware as a decoy while they conduct espionage

• Over 65% of companies were targeted twice with cyber attacks within a year

• Italian spyware targets Apple and Android smartphones says Google

• New infosec products of the week: June 24, 2022

• NSO claims ‘more than 5’ EU states use Pegasus spyware

• New ‘Quantum’ Builder Lets Attackers Easily Create Malicious Windows Shortcuts

• iPaaS: The latest enterprise cybersecurity risk?

• Morse Code: How did it change communication?

• All you need to know about data security and its benefits for small businesses

• VA electronic health record system ‘not yet stable enough’ for planned rollouts

• How companies are prioritizing infosec and compliance priorities

• Log4Shell Still Being Exploited to Hack VMWare Servers to Exfiltrate Sensitive Data

• Risky behavior reduced when executives put focus on identity security

• Despite known security issues, VPN usage continues to thrive

• Virtual private networks: 5 common questions about VPNs answered

• Hypori Halo 2022.1 provides secure access to mobile applications and data from any device

• Mitek Verified Identity Platform protects customers against identity theft

• Ermetic enables organizations to provide secure JIT access to cloud environments for developers

• Palo Alto Networks adds new cloud security features to help organizations secure web applications

• SolarWinds Next-Generation Build System improves enterprise software security

• Top Security Tools & Software for SMBs in 2022

• NightDragon and Orange Cyberdefense deliver cybersecurity services to European organizations

• Bugcrowd partners with SocialProof Security to protect clients against social engineering attacks

Generated on 2022-06-25 23:55:25.896386