IT Security News Daily Summary 2022-07-06

• Right-wing activist tees up successor to Schedule F

• Apple previews “Lockdown Mode,” a new extreme security feature

• Meta Sues Chinese Company For Scraping Facebook And Instagram User Data

• North Korean State Actors Deploy Surgical Ransomware in Ongoing Cyberattacks on US Healthcare Orgs

• Heimdal™ Successfully Completes SOC 2 Type II and ISAE 3000 Examination, Indicating Strict Security Standards Compliance

• Mangatoon – 23,040,238 breached accounts

• For the Love of the Wild Web 🖤

• Heimdal™ Successfully Completes SOC 2 Type II and ISAE 3000 Examination, Indicating Strict Security Standards Compliance

• For the Love of the Wild Web 🖤

• Data Distribution Service: An Overview Part 1

• ICS & OT Cybersecurity Attack Trends

• NIST Addressing Future Post-Quantum Cybersecurity Threats Today

• US, UK Leaders Raise Fresh Alarms About Chinese Espionage

• New Waiting Room Solution Ensures Best Peak User Experience

• Heimdal™ Successfully Completes SOC 2 Type II and ISAE 3000 Examination, Indicating Strict Security Standards Compliance

• For the Love of the Wild Web 🖤

• How cyber criminals are targeting Amazon Prime Day shoppers

• Apple Debuts Spyware Protection for State-Sponsored Cyberattacks

• Marriot Data Breach – Expert Weighs In

• Expert Comment On DMA: Give Power To The People

• Heimdal™ Successfully Completes SOC 2 Type II and ISAE 3000 Examination, Indicating Strict Security Standards Compliance

• For the Love of the Wild Web 🖤

• Health agency looks to data governance to streamline services

• NIST selects four encryption algorithms to thwart future quantum computer attacks

• Heimdal™ Successfully Completes SOC 2 Type II and ISAE 3000 Examination, Indicating Strict Security Standards Compliance

• For the Love of the Wild Web 🖤

• AstraLocker 2.0 Ransomware Spreads Via Phishing Campaigns Including Malicious Microsoft Word Files

• Mobile Cybersecurity Firm Cirotta Launches Anti-Hacking Phone Cases

• blended threat

• HackerOne incident raises concerns for insider threats

• 25 Most Dangerous Software Flaws Identified by MITRE

• Can your business stop social engineering attacks?

• Heimdal™ Successfully Completes SOC 2 Type II and ISAE 3000 Examination, Indicating Strict Security Standards Compliance

• For the Love of the Wild Web 🖤

• 10 Undeniable Benefits of Outsourcing Software Development

• 4 steps to closing the cybersecurity skills gap in your organization

• Apple Adds ‘Lockdown Mode’ to Thwart .Gov Mercenary Spyware

• Marriott Data Breach Exposes PII, Credit Cards

• I Built a Cheap ‘Warshipping’ Device in Just Three Hours — And So Can You

• Heimdal™ Successfully Completes SOC 2 Type II and ISAE 3000 Examination, Indicating Strict Security Standards Compliance

• For the Love of the Wild Web 🖤

• Marriott Hacked – Over 20 GB of Data Including Credit Card Leaked

• Cyberattacks interrupt unemployment benefits in multiple states

• Researchers Flag ‘Significant Escalation’ in Software Supply Chain Attacks

• Cyberattacks against law enforcement are on the rise

• Heimdal™ Successfully Completes SOC 2 Type II and ISAE 3000 Examination, Indicating Strict Security Standards Compliance

• For the Love of the Wild Web 🖤

• Hive ransomware gang rapidly evolves with complex encryption, Rust code

• The weight of ‘insider threats’ in enterprise cybersecurity

• North Korean Hackers Target US Health Providers With ‘Maui’ Ransomware

• Apple’s Lockdown Mode Aims to Counter Spyware Threats

• Heimdal™ Successfully Completes SOC 2 Type II and ISAE 3000 Examination, Indicating Strict Security Standards Compliance

• For the Love of the Wild Web 🖤

• Apple introduces Lockdown Mode to protect iPhones from state-sponsored hacking

• Securing Cloud Technology in a Growing Threat Landscape

• OpenSSL fixes two “one-liner” crypto bugs – what you need to know

• How to Keep EVs From Taking Down the Electrical Grid

• OpenSSL Releases Security Update

• NIST Announces First Four Quantum-Resistant Cryptographic Algorithms

• Heimdal™ Successfully Completes SOC 2 Type II and ISAE 3000 Examination, Indicating Strict Security Standards Compliance

• For the Love of the Wild Web 🖤

• Ukrainian Authorities Take Down Phishing Gang That Siphoned 100 Million Hryvnias

• ACI Learning Joins U.S. Department of Labor Apprenticeship Program to Connect Career Seekers with a Path to Employment

• How can you find and retain new cybersecurity talent?

• Morse Code: How did it change communication?

• AT&T Cybersecurity Insights Report: A Focus on SLED

• North Korea spreading Maui Ransomware

• APT Hacker Group Bitter Continues to Attack Military Targets in Bangladesh

• Cloud Misconfig Exposes 3TB of Sensitive Airport Data in Amazon S3 Bucket: ‘Lives at Stake’

• OpenSSL Releases Security Update

• Heimdal™ Successfully Completes SOC 2 Type II and ISAE 3000 Examination, Indicating Strict Security Standards Compliance

• For the Love of the Wild Web 🖤

• Amazon Faces UK Investigation For Suspected Anti-competitive Practices

• Marriott Data Breach – Over 20 GB of Data Including Credit Card Leaked

• Fine-Grained Access Control — What’s All the Buzz About?

• DoD Launches ‘Hack US’ Bounties for Major Flaws in Publicly Exposed Assets

• Is an Infrastructure War on the Horizon?

• Hive Ransomware Upgraded to Rust to Deliver More Sophisticated Encryption

• Identity Access Management Is Set for Exploding Growth, Big Changes — Report

• Heimdal™ Successfully Completes SOC 2 Type II and ISAE 3000 Examination, Indicating Strict Security Standards Compliance

• For the Love of the Wild Web 🖤

• Being hit with a cyber-attack is bad. Not having a recovery plan is worse

• Fraudulent UK Visa Scams Circulate on WhatsApp

• Security Automation Firm Swimlane Closes $70 Million Funding Round

• Less popular, but very effective, Red-Teaming Tool BRc4 used in attacks in the wild

• China Tries To Censor What Could Be Biggest Data Hack In History

• Bug Bounty Platform’s Employee Abused Internal Access To Steal Bounties

• Cryptocurrency Broker Voyager Digital Files For Bankruptcy Protection

• Marriott Hotels Suffers Third Data Breach In Four Years

• NIST Rolls Out New Encryption Standards To Prepare For Quantum Computing

• Why the Jan. 6 Committee Is Talking About Justice Department Independence

• Heimdal™ Successfully Completes SOC 2 Type II and ISAE 3000 Examination, Indicating Strict Security Standards Compliance

• For the Love of the Wild Web 🖤

• Discord Shame channel goes phishing

• Verified Twitter accounts phished via hate speech warnings

• UK Regulator Begin Probe Of Microsoft’s Activision Buyout

• Evasive Rust-Coded Hive Ransomware Variant Emerges

• North Korean State-Sponsored Cyber Actors Use Maui Ransomware to Target the Healthcare and Public Health Sector

• North Korean State-Sponsored Cyber Actors Use Maui Ransomware to Target the Healthcare and Public Health Sector

• Heimdal™ Successfully Completes SOC 2 Type II and ISAE 3000 Examination, Indicating Strict Security Standards Compliance

• For the Love of the Wild Web 🖤

• UK Councils and Hospitals Have Weak Cyber Security, Prone to Cyber Attacks

• Typo-squatting NPM software supply chain attack uncovered

• North Korean State-Sponsored Cyber Actors Use Maui Ransomware to Target the Healthcare and Public Health Sector

• North Korean State-Sponsored Cyber Actors Use Maui Ransomware to Target the Healthcare and Public Health Sector

• Enterprise-Grade Security for 5G — Why It’s Needed

• Heimdal™ Successfully Completes SOC 2 Type II and ISAE 3000 Examination, Indicating Strict Security Standards Compliance

• IconBurst software supply chain attack offers malicious versions of NPM packages

• Marriott Hotels admits to third data breach in 4 years

• HackerOne Employee Stole Data From Bug Bounty Reports for Financial Advantages

• US Eye Clinic Suffers Data Breach, 92,000 Patients Hit

• Online Safety Bill Tweak To Combat Russian Misinformation

• ‘Fake’ data gets robots to learn new stuff faster

• This ransomware just switched programming languages from Go to Rust. Here’s why

• Unsecured and unencrypted South Korean loyalty platform exposes data of more than 1 million customers

• NIST Announces Post Quantum Encryption Competition Winners

• The Cyber-Asset Management Playbook for Supply Chain Modernization

• OpenSSL Releases Patch for High-Severity Bug that Could Lead to RCE Attacks

• Heimdal™ Successfully Completes SOC 2 Type II and ISAE 3000 Examination, Indicating Strict Security Standards Compliance

• Google to delete location data of trips to abortion clinics

• Roundtable: Amid Cyberattack Frenzy, How Can QNAP Customers Protect the Business?

• Heimdal™ Successfully Completes SOC 2 Type II and ISAE 3000 Examination, Indicating Strict Security Standards Compliance

• NIST Picks 4 Quantum-Resistant Cryptographic Algorithms

• Taking the Elf Off the Shelf: Why the U.S. Should Consider a Civilian Cyber Defense

• Heimdal™ Successfully Completes SOC 2 Type II and ISAE 3000 Examination, Indicating Strict Security Standards Compliance

• Swimlane’s low-code finds “sweet spot” between no-code and legacy SOAR security automation

• Cirotta stops hacking and data privacy invasions by putting security in a phone case

• Endless cyber-threat pressure could leave security staff burnt out. Here’s what you need to change

• No backup: Why cyberattacks are a big risk for the government in Brazil

• Hackers Abusing BRc4 Red Team Penetration Tool in Attacks to Evade Detection

• Heimdal™ Successfully Completes SOC 2 Type II and ISAE 3000 Examination, Indicating Strict Security Standards Compliance

• Swimlane raises $70M to scale its low code security automation platform

• Bias in Artificial Intelligence: Can AI be Trusted?

• The End of False Positives for Web and API Security Scanning?

• Security Resilience in the Americas

• New Strain of Ransomware Discovered

• IMAX VS RPX: A Detailed Comparison

• Intel ‘Playing Politics’ Over Delayed Ohio Chip Factory, Alleges Governor

• Kids and Teens Forming Hacking Groups Online to Exchange Malware

• OrBit: New Undetected Linux Threat Uses Unique Hijack of Execution Flow

• How to Avoid the Worst Instagram Scams

• Human Error Blamed for Leak of 1 Billion Records of Chinese Citizens

• Alleged Chinese Police Database Hack Leaks Data of 1 Billion

• To stop quantum hackers, the US just chose these four quantum-resistant encryption algorithms

• Steve Jobs Posthumously Awarded US Medal Of Freedom

• NCSC: Prepare for Protected Period of Heightened Cyber-Risk

• Google Patches Chrome Zero Day Under Attack

• Bitter APT Hackers Continue to Target Bangladesh Military Entities

• New Hive ransomware variant is written in Rust and use improved encryption method

• Dynamic analysis of firmware components in IoT devices

• Advanced Phishing Campaign Found to Target Middle Eastern Entities

• Ransomware gang LockBit launches ransomware with bug bounty program

• Twitter Seeks Judicial Review Of Indian Takedown Order

• Leak of California gun owners’ private data far wider than originally reported

• CISA and NPower offer free entry-level cybersecurity training

• Malicious NPM Packages Snatch Data from Apps and Website Forms, Researchers Say

• NCSC: Prepare for Protected Period of Heightened Cyber Risk

• Software Supply Chain Attack Hits Thousands of Apps

• Cyber Security Management System (CSMS) for the Automotive Industry

• Hive Ransomware Upgrades to Rust for More Sophisticated Encryption Method

• NIST selects 4 quantum-resistant encryption algorithms

• Cybersecurity firm discusses one of the ‘changing pieces’ it has seen in the last several months

• Malicious NPM packages used to grab data from apps, websites

• Russia Ukraine War ejects cyber attack concerns in the Britain

• Encryption tools to withstand Cyber Attacks from Quantum Computers

• Multi-cloud doesn’t have to mean multi problems for data protection

• Near-undetectable malware linked to Russia’s Cozy Bear

• How a cyber asset management strategy can help enterprises detect threats

• QuSecure’s QuProtect Platform Supports Post-Quantum Cryptography Algorithms Selected by NIST Today for Standardization

• Insight CISO Rader Honored by Microsoft as 2022 Security Changemaker of the Year

• EY Announces Robert M. Lee of Dragos Inc. as an Entrepreneur of the Year® 2022 Mid-Atlantic Winner

• ERI’s John Shegerian Shares Insights at VerdeXchange on Protecting the Planet through Innovation and a Circular Economy

• Infosecurity Europe: A show so secure a train strike couldn’t break it!

• Why your API gateway is not enough for API security?

• The connected nature of smart factories is exponentially increasing the risk of cyber attacks

• Encryption is high up on corporate priority lists

• The True Cost of a Security Breach

• New Techniques To Identify Ransomware Operators’ Dark Web Domains – Cisco Talos

• US Senators Call for Close Look at TikTok

• AstraLocker ransomware reportedly closes doors to pursue cryptojacking

• The Role of the Cybersecurity Leader in 2022

• Over 10 Million Facebook Users Hacked in Ongoing Phishing Scam

• Kids & Cash Apps: What Parents Need to Know

• #McAfeePride2022

• NIST Picks Four Quantum-Resistant Cryptographic Algorithms

• Allied Telesis partners with Forescout to reduce the risk of business disruption

• Senet collaborates with Eclypses to help customers secure critical infrastructure and essential business apps

• POST Luxembourg uses ADVA’s optical cesium technology to combat GNSS attacks

• IDnow appoints Jean-Marc Guyot as VP of Research and Development

• Michael Lillie joins OneSpan as CIO

• Actual quantum computers don’t exist yet. But encryption to defeat them may do already

• Protection Against Online Scams: How to Keep Your Credit Safe

• Cato Networks opens second PoP in Copenhagen to boost security capabilities across the region

• MetricStream appoints Gaurav Kapoor and Prasad Sabbineni as Co-CEOs

• Versa Networks names Rachel Ler as APJ Region Vice President

• NIST identifies 4 quantum-resistant encryption algorithms

• New York state pumps the brakes on crypto mining

• Ransomware in 2022: Evolving threats, slow progress

• IT Security News Daily Summary 2022-07-05

• Cloud spending continues to climb

• HackerOne Employee Fired for Stealing and Selling Bug Reports for Personal Gain

• GSA looks to help get LGBTQI-owned small businesses in the contracting mix

• DOD rings in Independence Day with bug bounties

• Supply Chain Attack Deploys Hundreds of Malicious NPM Modules to Steal Data

• NIST announces four quantum-resistant algorithms

• Crowdsourced data on overdoses pinpoints where to help

• Mark Zuckerberg Tells Facebook Employees That Encryption Will Protect Users Seeking Abortions

• Pentagon: We’ll pay you if you can find a way to hack us

• Beyond The Buzz: What is Zero Trust Network Access (ZTNA)?

• 2022 cybersecurity forecasts predict growth, emphasizing resilience

• How to find your niche in cybersecurity

• A ‘CISO evolution’ means connecting business value to security

• How to define cyber-risk appetite as a security leader

• How to write a cybersecurity job posting

• Microsoft Warns of Evolving Toll Fraud Android Malware Draining Wallets

• Three dirty data cybersecurity concerns for business enterprises

• Data Breach at PFC USA Impacts Patients of 650 Healthcare Providers

• The Most Common Types of Cyberattacks Plaguing SMBs An How to Protect Against Them

• Model reveals potential link between gun trends and mass shootings

• Google Chrome Gets Emergency Security Update

• NIST Acknowledges First Four Quantum-Resistant Encryption Tools

• Crypto Scam to be Investigated by British Army

• UK Military Investigates Hacks on Army Social Media Accounts

• TikTok CEO Addresses US Security Concern

• Google Chrome WebRTC Zero-Day Faces Active Exploitation

• Why Browser Vulnerabilities Are a Serious Threat — and How to Minimize Your Risk

• How States and Congress Can Prepare for a Looming Threat to Freedom of Speech

• Last Call at the “Star Wars Bar”: Harmonizing Incident and Breach Reporting Requirements

• TCDI Completes Acquisition of Aon’s eDiscovery Practice

• Tufin Announces Partner of the Year Award Winners

• #ISC2Congress: Politics, Cybersecurity & Global Issues – Ian Bremmer to Speak as (ISC)² Keynote

• TikTok gave data security reassurance to the United States

• Calls for bans on Chinese CCTV makers Hikvision, Dahua expand

• Google patches “in-the-wild” Chrome zero-day – update now!

• Google Releases Security Update for Chrome

• British Military’s Twitter and YouTube Accounts Hacked to Scam Crypto Users

• How to Secure Your SAP Environment

• Advanced Phishing Scams Target Middle East and Impersonate UAE Ministry of Human Resources

• Google Releases Security Update for Chrome

• EFF Statement on EU Parliament’s Adoption of Digital Services Act and Digital Markets Act

• AI/ML Powered Risk Modeling: A Decision-Making Framework

• Feeling Beleaguered? 3 Practical Steps for Cybersecurity Mastery

• Hive ransomware gets upgrades in Rust

• Google Announces Password Manager Updates to Enhance User Security

• This is the ultimate security key. Here’s why you need one

• Google to wipe user location history for visits to healthcare clinics, domestic violence shelters

• These are the cybersecurity threats of tomorrow that you should be thinking about today

• Ransomware: Why it’s still a big threat, and where the gangs are going next

• These are the biggest cybersecurity threats. Make sure you aren’t ignoring them

• How to enable SSH 2FA on Ubuntu Server 22.04

• How to spot your biggest security threat? Just look out for the humans

• A SQL Injection bug Hits the Django web Framework

• Lawmaker says ‘crypto driver’s license’ could deter use of digital currency in ransomware

• Iranian Fars News Agency claims cyberattack on a company involved in the construction of Tel Aviv metro

• Cloud-based malware is on the rise. How can you secure your business?

• TikTok is “unacceptable security risk” and should be removed from app stores, says FCC

• Hacker Alert! British Army’s YouTube and Twitter Accounts Hijacked

• Are banks quietly refusing reimbursements to fraud victims?

• Researchers Uncover Malicious NPM Packages Stealing Data from Apps and Web Forms

• Cyber Police of Ukraine arrested 9 men behind phishing attacks on Ukrainians attempting to capitalize on the ongoing conflict

• TikTok ‘Halts E-Commerce Expansion Plans’

• Why Phishing Is Still the Top Attack Method

• CISA: Here’s how to apply this key Windows patch without breaking certificate authentication

• PennyWise malware on YouTube targets cryptocurrency wallets and browsers

• 3 Cyber Threats Resulting From Today’s Technology Choices to Hit Businesses by 2024

• Pro-China Group Uses Dragonbridge Campaign to Target Rare Earth Mining Companies

• Germany Unveils Plan To Tackle Cyberattacks On Satellites

• Update now! Chrome patches ANOTHER zero-day vulnerability

• European Parliament Passes Landmark Tech Regulations

• Name That Edge Toon: On Guard

• British Army Cyber Attack Reminds Businesses That Social Media Accounts Are Prime Targets

• China’s Largest Data Leak – Comments From Camellia Chan, CEO, and Founder Of X-PHY

• UK Councils And Hospitals At Risk Of Cyber Hackers

• Latest Cyberattack Against Iran Part of Ongoing Campaign

• Limp Facebook Policies – Do They Ignore Suffering And Crime!

• Warning!! Google Chrome 0-Day Bug Exploited in Wide – Update Now!

• Zscaler gives security a shot of AI

• AstraLocker Ransomware Goes Offline and Makes Decryptors Available

• Germany unveils plan to tackle cyberattacks on satellites

• #ISC2Congress: Politics, Cybersecurity & Global Issues – Ian Bremmer to Speak as (ISC)² Keynote

• Indian Economic Police Raid Offices Of Smartphone Maker Vivo

• This WhatsApp scam promises you a visa, but just sends you into a spiral

• China data breach likely to fuel identity fraud, smishing attacks

• Google Patches Actively Exploited Chrome Bug

• French Music Service Deezer Slumps On Market Debut

• Hacker Claims Major Chinese Citizens’ Data Theft

• Will Facebook’s End-to-End Encryption Protect Abortion-Seeking Users?

• Center for Internet Security (CIS) Controls v8: Your Complete Guide to the Top 18

• End-to-End Encryption’s Central Role in Modern Self-Defense

• Attackers are using deepfakes to snag remote IT jobs

• Poor Software Patches Are Responsible for Half of All Zero-day Vulnerabilities

• Digital Audience Development vs Marketing: What’s the Difference?

• Alibaba’s finance arm open sources its privacy software and a ‘Secure Processing Unit’

• Google races out patch for high-severity Chrome browser zero-day on Windows and Android

• Ukrainian police takes down phishing gang behind payments scam

• Foxconn Expects Stronger Sales In Spite Of Economic Gloom

• As New Clues Emerges, Experts Wonder: Is REvil Back?

• The Psychology of Cybercrime

• Dutch University Turns a Profit on Ransomware Payment

• Hacker Claims to Have Stolen Information on 1 Billion Chinese Citizens

• Ukrainian Authorities Arrest Phishing Gang For Embezzling 100 Million UAH

• 1-15 June 2022 Cyber Attacks Timeline

• Samsung ‘To See Profits Jump’ On Data Centre Demand

• Singapore may introduce further cryptocurrency restrictions

• UK Councils and Hospitals Vulnerable to Cyber Hackers

• Hacker Claims to Have Personal Data of 1 Billion Chinese Citizens

• Threat actors compromised British Army ’s Twitter, YouTube accounts to promote crypto scams

• NATO Announce Plans to Develop Cyber Rapid Response Capabilities

• Install macOS Ventura Beta in a Virtual Machine on an M1 or M2 Mac with UTM

• NHS To Trial Drone Delivery Of Chemotherapy To Isle Of Wight

• New Malware Dubbed SessionManager Targeting Microsoft IIS Servers in the Wild

• AstraLocker ransomware operators shut down their operations

• Everything to Know About Rust Items and How to Use Them

• Dutch University retrieves Bitcoin ransomware payment and makes a profit

• Looking for adding new detection technologies in your security products?

• Researchers Share Techniques to Uncover Anonymized Ransomware Sites on Dark Web

• Billion-record stolen Chinese database for sale on breach forum

• AstraLocker Ransomware shuts down operations and shifts to Cryptojacking

• Surveillance data of Chinese citizens put online by hackers

• PCI DSS 4.0 released, addresses emerging threats and technologies

• Why Digital ID Should be On the Vacation Checklist

• Applying Shift Left principles to third party risk management

• People are the primary attack vector around the world

• Cybersecurity is driving digital transformation in alternative investment institutions

• Update Google Chrome Browser to Patch New Zero-Day Exploit Detected in the Wild

• Google updates Chrome to squash actively exploited WebRTC Zero Day

• Cyberattacks: A very real existential threat to organizations

• Juniper Networks unveils new Cloud Metro solution to improve productivity for service providers

Generated on 2022-07-06 23:55:34.194397