IT Security News Daily Summary 2022-07-29

• Biden picks next Space Force chief

• AWS Focuses on Identity Access Management at re:Inforce

• Where to see UFOs

• Microsoft Connects USB Worm Attacks to ‘EvilCorp’ Ransomware Gang

• Attackers Have ‘Favorite’ Vulnerabilities to Exploit

• Power struggles in Data Center Alley

• 911 Proxy Service Implodes After Disclosing Breach

• Feds put $10m bounty on Putin pal accused of bankrolling US election troll farm

• Congress Warns of US Court Records System Breach

• Ransomware Bill Passes House

• Blockchain, Web3 and the potential for government transformation

• Ransomware hackers will still target smaller critical infrastructure, CISA director warns

• Coveware: Median ransom payments dropped 51% in Q2

• Security Teams Overwhelmed With Bugs, Bitten by Patch Prioritization

• Why Bug-Bounty Programs Are Failing Everyone

• Lawmakers question DOJ’s National Security Division on cybersecurity, surveillance

• Malicious Macro-Enabled Docs Delivered via Container Files to Bypass Microsoft Protections

• How Much Is Your Data Actually Worth?

• Airports, Bridges, and Beltways

• GPO unveils key priorities for 5-year modernization plan

• Decentralized IPFS networks forming the ‘hotbed of phishing’

• Decision Makers Held Back from Delivering on IT Security Strategy

• CISA Adds One Known Exploited Vulnerability to Catalog

• Extending Endpoint Security with Zero Trust

• AI could help Congress schedule and find unexpected consensus, expert says

• Why is my internet so slow? 11 ways to speed up your connection

• How does proper SSH key management protect your network?

• Amazon Adds Malware Detection to GuardDuty TDR Service

• CISA Adds One Known Exploited Vulnerability to Catalog

• The ransomware landscape changes as fewer victims decide to pay

• To settle with the DoJ, Uber must confess to a cover-up. And it did.

• Asaf Ashkenazi Named CEO of Verimatrix

• Latest Cyberthreats and Advisories – July 29, 2022

• Latest Cyberthreats and Advisories – July 21, 2022

• Deploying a Modern Card Program: Part Three

• DOJ confirms cyber attack on US Court system

• SBOMs: What they are and why organizations need them

• Criminals using compromised social media accounts to “post indecent images of children” says UK cybercrime organization

• Prevent email phishing attacks this summer with 3 defensive measures

• N Korean APT Uses Browser Extension to Steal Emails From Foreign Policy, Nuclear Targets

• Governments Ramp Up Demands for User Info, Twitter Warns

• How to celebrate SysAdmin Day!

• Big Questions Remain Around Massive Shanghai Police Data Breach

• Google delays Chrome third party cookie sunsetting…again

• US Congress Passes $52 Billion Chips Act

• Malicious Npm Packages Tapped Again to Target Discord Users

• FCC Warns of Rising Robotext Scams

• Malicious npm Packages Scarf Up Discord Tokens, Credit Card Info

• Over a Dozen Android Apps on Google Play Store Caught Dropping Banking Malware

• Microsoft Zero-Days Sold and then Used

• How Young Is Too Young to Be a Police Officer?

• Spyware Group ‘Knotweed’ Employs Windows and Adobe Bugs to Target Firms Worldwide

• Microsoft: Hackers Exploring New Attack Techniques

• ‘Quantum flute’ gets light particles to move in strange ways

• 30 Minutes to a More Secure Network, on Campus and Off

• Amazon Posts Second Straight Loss After Rivian Stake Writedown

• Attackers Targeting MS-SQL Servers to Steal Bandwidth for Proxy Services

• Cloud Security Audit Tools: A Glance, Why It’s Important, Top Tools and Techniques

• Cyber insurance is on the rise, and organizational security postures must follow suit

• 3 Tips for Creating a Security Culture

• Microsoft experts linked the Raspberry Robin malware to Evil Corp operation

• US Court System Suffered Incredibly Significant Attack – Sealed Files At Risk

• BreachForums Booms On The Back Of Billion Record Chinese Data Leak

• Ransomware Hit The American Dental Association

• JPMorgan, UBS Among Trio Accused Of Shoddy ID Theft Protection

• Threat Actors Pivot Around Microsoft’s Macro-Blocking In Office

• The 6 best home automation systems of 2022

• Major Cybersecurity Breach of US Court System Comes to Light

• OneTouchPoint Discloses Data Breach Impacting Over 30 Healthcare Firms

• This phishing attack uses a countdown clock to panic you into handing over passwords

• Strong Authentication – Robust Identity and Access Management Is a Strategic Choice

• Attackers are slowly abandoning malicious macros

• Latest Cyberthreats and Advisories – July 29, 2022

• Apple Shrugs Off Economic Gloom, But Profit Slips

• Why CISA wants to release a new version of its Zero Trust Maturity Model

• Microsoft has blocked hackers’ favourite trick. So now they are looking for a new route of attack

• How to make switching between your work PC and personal laptop much easier

• GitHub Improves npm Account Security as Incidents Rise

• Researchers Warns of Increase in Phishing Attacks Using Decentralized IPFS Network

• Dahua IP Camera Vulnerability Could Let Attackers Take Full Control Over Devices

• Exploitation is underway for a critical flaw in Atlassian Confluence Server and Data Center

• Google Delays Phasing Out Ad Cookies on Chrome Until 2024

• It’s past time to figure out cross-cloud security

• Euro Police Bust €3m Internet Fraud Gang

• Ransomware looms large over the cyber insurance industry

• What Is Smishing?

• Examining New DawDropper Banking Dropper and DaaS on the Dark Web

• Banking as a Service: The Real Reasons Why It’s So Popular

• eIDAS 2.0 Developments | Avast

• RaaS Groups Forced to Change Tack as Payments Decline

• Ransomware Group Demand £500,000 From Bedfordshire School

• Malware-laced npm packages used to target Discord users

• Hacktivist group Anonymous has ’embarrassed’ Russian companies and government agencies

• Malicious Npm Packages Designed to Steal Discord Tokens

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Is someone stalking you with an Apple AirTag?

• Silicon UK In Focus Podcast: How to Keep Your People

• BreachForums booms on the back of billion-record Chinese data leak

• Hive Ransomware group demands £500000 from School in England

• Displeased employees leading to 75% of Cyber Attacks

• Spanish Police Arrest 2 Nuclear Power Workers for Cyberattacking the Radiation Alert System

• Businesses confess: We pass cyberattack costs onto customers

• Why there is no quick fix for cyber attacks

• New infosec products of the week: July 29, 2022

• Most Important Android Application Penetration Testing Checklist

• Latest Critical Atlassian Confluence Vulnerability Under Active Exploitation

• Comment: One In Three Organisations See Malicious Insiders As Ransomware Route

• WordFly Ransomware Attack, Experts Insight

• Threat Actors Respond To Microsoft Blocking Macros with New Email Tactics

• New HiddenAds malware affects 1M+ users and hides on the Google Play Store

• CarePayment Achieves HITRUST Risk-based, 2-year Certification to Manage Risk, Improve Security Posture, and Meet Compliance Requirements

• TD SYNNEX Launches Channel Leading Independent Software Vendor Experience

• APAC Security Leaders Come Together at SECURE Singapore

• DataTribe Announces Fourth Annual Cybersecurity Start-Up Challenge

• Latest Cyberthreats and Advisories – July 15, 2022

• US court system suffered ‘incredibly significant attack’ – sealed files at risk

• Arcserve SaaS Backup protects evolving data environments

• Using real customer data in testing environments creates unnecessary risk

• Researchers create key tech for quantum cryptography commercialization

• New HiddenAds malware that runs automatically and hides on Google Play, 1M+ users affected

• Hacktivist group Anonymous is exposing weaknesses in Russia’s cyber technology

• Battlefy – 83,610 breached accounts

• XONA names Roneeta Lal Head of Channel Sales

• Strata Identity hires Granville Schmidt as Principal Architect

• Honeywell appoints Vimal Kapur as President and COO

• Daon collaborates with Ping Identity to provide customers with biometric-based MFA

• Fortress Information Security and NetRise form a partnership to extend XIoT offering

• Telegram and Discord Bots Delivering Infostealing Malware

• CrimsonRat, AvosLocker & MaliBot

• Transport Layer Security (TLS): Issues & Protocol

• How edge computing is accelerating innovation across hardware, software and service provider domains

• How local governments are handling a threat they can’t even see

• JPMorgan, UBS among trio accused of shoddy ID theft protection

• IT Security News Daily Summary 2022-07-28

• Lawmakers call for DHS inspector general to ‘step aside’ from Secret Service probe

• AI can be a first line of defense in fielding 988 calls

• Election info must be more accessible to disabled, survey says

• Akamai blocked the largest DDoS attack ever on its European customers

• Lawmakers float FITARA changes as scores get dragged down by missing data

• 3 Steps to Build Hybrid Workplace Connection thru Virtual Experiences

• Calls Mount for US Gov Clampdown on Mercenary Spyware Merchants

• Abortion Information Is Coming Down Across Social Media. What Is Happening and What Next.

• Microsoft: Austrian company DSIRF selling Subzero malware

• Breach Exposes Users of Microleaves Proxy Service

• Hack Post-Quantum Cryptography Now So That Bad Actors Don’t Do It Later

• Suspected radiation alert saboteurs cuffed by cops after sensors disabled

• Google Gmail Rolls Out New Interface For All Users

• Top republican to ‘seriously consider pulling the plug’ on VA’s new EHR system

• GAO offers options for improving U.S. semiconductor supply

• What does the demise of bitcode mean for the future of application security?

• Patch Now: Atlassian Confluence Bug Under Active Exploit

• LibreOffice fixed 3 flaws, including a code execution issue

• How Organizations Manage to Understand Millions of Unstructured Data Files at Scale

• Unscrambling Cybersecurity Acronyms: The ABCs of Endpoint Security

• Threat actors use new attack techniques after Microsoft blocked macros by default

• Federal Preemption of State Privacy Law Hurts Everyone

• US State Department Offers $10 Million for Information on North Korean Hackers

• Multiple Security Flaws Found In Nuki Smart Locks

• Why cities and towns see a huge economic opportunity in the semiconductor bill

• Threat Actors Pivot Around Microsoft’s Macro-Blocking in Office

• Spanish Police Arrest Alleged Radioactive Monitoring Hackers

• Anatomy of a Cloud-Service Security Update

• 5 Benefits of a Cloud Firewall

• A Navy cyber effort is fixing thousands of holes—and building tech talent

• Google delays removal of third-party cookies in Chrome through 2024

• AWS adds anti-malware and PII visibility to storage

• S3 Ep93: Office security, breach costs, and leisurely patches [Audio + Text]

• What the White House’s Cybersecurity Workforce Plan Should Look Like

• Radioactivity monitoring and warning system hacked, disabled by attackers

• CIOReview Names Cobalt Iron Among 10 Most Promising IBM Solution Providers 2022

• Movement Bank Seeks New Technologies to Support the Underserved through CSI’s NuPoint® Core Platform

• Southwest Healthcare System Signs New Three-Year Managed Cybersecurity RPP Contract With CynergisTek Worth Over $600,000

• How I Prepared for the CISSP Exam

• Deploying a Modern Bank Card Program: Part One

• EU Officials Phones Hacked By NSO’s Pegasus Spyware – Report

• What Is the Impact of AI on Cybersecurity? 3 Interesting Use Cases

• $10 million reward offered for information on foreign government-linked malicious hackers

• House Passes Cybersecurity Bills Focusing on Energy Sector, Information Sharing

• Crackdown on BEC Schemes: 100 Arrested in Europe, Man Charged in US

• Cybersecurity Growth Investment Flat, M&A Activity Strong for 2022

• Ransomware Group Demands £500,000 From School

• Citibank, Bank of America, Capital One, and others Targeted by ‘Robin Banks’ PhaaS

• Industrial systems: What it takes to secure and staff them

• Akamai blocks worlds largest DDoS attacks in Europe

• Enough’s enough: 7 signs to put down your phone and walk away

• The SMB Guide to Cyber Resilience | Avast

• Why enterprises face challenges in protecting machine identities

• US Expands Cybersecurity Partnership With Ukraine

• Facebook May Allow COVID Misinformation Back On Its Platforms

• MAR-10386789-1.v1 – Log4Shell

• Samba Releases Security Updates

• CISA Releases Log4Shell-Related MAR

• Why enterprises face challenges protecting machine identities

• Trump has endorsed a plan to purge the civil service of ‘rogue bureaucrats’

• MAR-10386789-1.v1 – Log4Shell

• Samba Releases Security Updates

• CISA Releases Log4Shell-Related MAR

• Automated dynamic application security testing with RapiDAST and cross-team collaboration

• TikTok owner ByteDance pushed a pro-China agenda to Americans, say former employees

• FTC Lawsuit To Block Meta Acquisition Of VR Developer Within

• Proof of Stake Alternatives Every Developer Should Know Of

• NIST Supply Chain Security Guidelines: 10 Key Takeaways

• How Tor Is Fighting—and Beating—Russian Censorship

• Google Delays Blocking 3rd-Party Cookies in Chrome Browser Until 2024

• ENISA provides data related to major telecom security incidents in 2021

• Inside The Energy Department’s 10-Year Plan To Reshape Cybersecurity In The Sector

• Microsoft Exposes Tactics Of European Mercenary Spyware Broker

• FileWave Fixes Bugs That Left 1,000+ Orgs Open To Ransomware

• US Puts $10 Million Bounty On North Korean Cyber Crews

• “Orwellian in the extreme” food store installs facial recognition cameras to stop crime, faces backlash

• Alphabet Misses Earnings Forecast, But Pleases With Strong Ad Performance

• Attackers Use Malicious IIS Extensions to Deploy Covert Backdoors into Exchange Servers

• API Security Weekly: Issue 172

• Exploitation of Recent Confluence Vulnerability Underway

• Securing Smart Cities from the Ground Up

• The Chatter Podcast: Spotting Fake News with Cindy Otis

• What is Cyber-Essential Patch Compliance?

• Here’s How BlackMatter Ransomware is Linked With LockBit 3.0

• Protect your business from cybercrime with this dark web monitoring service

• What Women Should Know Before Joining the Cybersecurity Industry

• July 2022 Web Server Survey

• FITARA 14 sees just one overall A and stagnant grades

• Microsoft: Hackers are Using Malicious IIS Extensions to Backdoor Exchange Servers

• 1,000s of Phishing Attacks Blast Off From InterPlanetary File System

• Top MSSP CEOs Share 7 Must-Do Tips for Higher MSSP Revenue and Margin

• Microsoft Uncovers Austrian Company Exploiting Windows and Adobe Zero-Day Exploits

• Hackers Opting New Attack Methods After Microsoft Blocked Macros by Default

• Kubernetes security: Shift-left strategies and simplifying management

• Microsoft: Attackers Increasingly Using IIS Extensions as Server Backdoors

• France Closes ‘Cookies’ Case Against Facebook

• Moxa NPort Device Flaws Can Expose Critical Infrastructure to Disruptive Attacks

• After Dobbs, Democrats and Republicans Switch Places on Speech Policy

• LofyLife: malicious npm packages steal Discord tokens and bank card data

• Numerous Security Vulnerabilities Found In Enabot Ebo Air Smart Robot

• A Comprehensive Guide to Navigating The Cybersecurity Jungle

• How to Combat the Biggest Security Risks Posed by Machine Identities

• European firm DSIRF behind the attacks with Subzero surveillance malware

• New UFEI Rootkit

• Meta Posts First Ever Revenue Decline, Amid Intense Pressures

• IriusRisk simplifies security for developers with new infrastructure-as-code capability

• NCSC Startup Program Seeking Candidates to Help Protect Critical Infrastructure

• Google brings Street View back to India following 2016 ban

• Rivian Confirms It Will Cut 6 Percent Of Staff

• Hackers Change Tactics for New Post-Macro Era

• APT trends report Q2 2022

• Is Your Car the Next Security Risk? – Intego Mac Podcast Episode 250

• Malware on IBM Power Systems: What You Need to Know

• How attackers are adapting to a post-macro world

• Microsoft Threat Intelligence Center Links Threat Group to Austrian Spyware Vendor DSRIF

• Cybersecurity is becoming a top priority among critical infrastructure operators

• Social Media Accounts Hijacked to Post Indecent Images

• 22 million US health records breached thus far in 2022

• A Comprehensive Guide to Hybrid Cloud for Businesses

• 5 ways to effortlessly spot and eliminate hidden threats in your network

• Candiru: Attack targeting journalists in the Middle East

• European Police Arrest 100 Suspects in BEC Crackdown

• U.S. Offers $10 Million Reward for Information on North Korean Hackers

• LibreOffice Releases Software Update to Patch 3 New Vulnerabilities

• Spain police arrested two men accused of cyber attacks on radioactivity alert network (RAR)

• Do you know what your supply chain is and if it is secure?

• FIN7 now enters ransomware as a service business

• Twitter user data sold for $30k on dark selling forum

• Cash App fraud: 10 common scams to watch out for

• 84% of organizations experienced an identity-related breach in the past 18 months

• Only 25% of organizations consider their biggest threat to be from inside the business

• The future of attack surface management (ASM)

• 2022-07-27 – IcedID (Bokbot) activity: two infection runs

• 2022 Governance, Risk, and Control Conference Provides a Customized Learning Experience

• SCVX Corp. Announces Redemption of Class A Ordinary Shares

• Hiring Managers Lead on Entry-Level Cybersecurity Job Descriptions

• Day in the life of a digital citizen after eIDAS2

• Everything to know about SaaS data security

• NetDiligence Breach Plan Connect updates provide senior managers with cyber incident response plan

• Rapid7 adds layered context capabilities to its InsightCloudSec platform

• Uptycs releases new CDR functionality to help organizations detect malicious behaviors

• Teleport 10 enables single sign-on to any infrastructure resource without passwords or usernames

• 1 in 3 employees don’t understand why cybersecurity is important

• Everything You Need to Know About Monkeypox

• 0-days sold by Austrian firm used to hack Windows users, Microsoft says

• The High-Stakes Race to Engineer New Psychedelic Drugs

• Newly found Lightning Framework offers a plethora of Linux hacking capabilities

• Discovery of new UEFI rootkit exposes an ugly truth: The attacks are invisible to us

• CircleCI launches support for GitLab SaaS developers

• Model9 integrates with Pure Storage to help mainframe enterprises manage their data

• Socure collaborates with Middesk to accelerate onboarding processes for businesses

• SafeGuard Cyber integrates with Okta and Azure AD to automate identity-based responses for enterprises

• Digital Key Release 3 v1.1: Store, authenticate, securely share vehicle digital keys

• When Human Security Meets PerimeterX

• How to Evaluate Progress in the Justice Department’s Jan. 6 Investigation

Generated on 2022-07-29 23:55:28.522548