IT Security News Daily Summary 2022-08-02

• Civic engagement takes off with digital survey and respect for community feedback

• Massive New Phishing Campaign Targets Microsoft Email Service Users

• Check Point announces its Azure Virtual WAN security solution

• It’s time for digital self-sovereign identity

• New Microsoft tools aim to protect expanding attack surface

• From Babuk Source Code to Darkside Custom Listings — Exposing a Thriving Ransomware Marketplace on the Dark Web

• Senate passes bill to root out conflicts of interest in federal contracting

• Ukraine Wants Facebook To Stop “Unfair” Blocking Of Posts

• Manufacturing Sector in 2022 Is More Vulnerable to Account Compromise and Supply Chain Attacks in the Cloud than Other Verticals

• CBP’s facial recognition program at airports is expanding but concerns remain

• No SOCKS, No Shoes, No Malware Proxy Services!

• Axis Raises the Bar With Modern-Day ZTNA Service that Boasts Hyper-Intelligence, Simplicity, and 350 Global Edges

• Robinhood’s crypto unit hit with $30m fine over security, anti-crime misses

• Inside Windows Defender System Guard Runtime Monitor

• State and local law enforcement may get drone detection authority

• Zawahiri’s Legacy and the Prospects for an al-Qaeda Revival

• T-Mobile Store Owner Made $25M Using Stolen Employee Credentials

• How cybercrims embrace messaging apps to spread malware, communicate

• Microsoft Launches New External Attack Surface Audit Tool

• Controlling access in today’s digital-first world: Why it really, really matters

• Spanish Research Center Suffers Cyberattack Linked to Russia

• SolidBit Ransomware Enters the RaaS Scene and Takes Aim at Gamers and Social Media Users With New Variant

• Securing Our Nation: How the Infrastructure Investment and Jobs Act Delivers on Cyber Resiliency

• July another down month in ransomware attack disclosures

• Threat groups embrace messaging apps to spread malware, communicate

• Coast Guard wants better internet on its ships, and more recruits

• How to remove and overwrite all data on a hard drive for free in Windows 11

• Microsoft Intros New Attack Surface Management, Threat Intel Tools

• VMware fixed critical authentication bypass vulnerability

• The Past, Present and Future of Endpoint Management Solutions

• NACo guide demystifies GIS for elected leaders

• Cryptocoin “token swapper” Nomad loses $200 million in coding blunder

• Capital One Breach Conviction Exposes Scale of Cloud Entitlement Risk

• The Forensic Technology Behind Your Favourite T.V Detectives

• The dos and don’ts of startup security: How to develop a security plan

• Getting Your Kids Ready for School—And Their Smartphones Too

• Insider risk: Employees are your biggest cyberthreat (and they may not even know it)

• European Missile Maker MBDA Denies Hackers Breached Systems

• VMware Ships Urgent Patch for Authentication Bypass Security Hole

• Chinese Hackers Using New Manjusaka Hacking Framework Similar to Cobalt Strike

• Social Media Used to Target Victims of Investment Scams

• How Leaked Twitter API Keys Can be Used to Build a Bot Army

• Taiwan Presidential Office website comes under Cyber Attack

• Deception at a scale

• Microsoft’s new security tool lets you to see your systems like a hacker would

• The importance of data security in the enterprise

• Data masking vs. data encryption: How do they differ?

• LockBit Ransomware Exploits Windows Defender to Sideload Cobalt Strike Payload

• Incognia Mobile App Study Reveals Low Detection of Location Spoofing in Dating Apps

• VirusTotal: Threat Actors Mimic Legitimate Apps, Use Stolen Certs to Spread Malware

• Security alerts: Not all vulnerabilities are created equal

• BlackCloak Bolsters Malware Protection With QR Code Scanner and Malicious Calendar Detection Features

• Spain Nabs Two For Allegedly Hacking Radiation Alert System

• Black Hat 2022 Sneak Peek: How to Build a Threat Hunting Program

• Microsoft goes all-in on threat intelligence and launches two new products

• Yubico Expands YubiKey Access in U.S. through the AWS Marketplace

• Start as you mean to go on: the top 10 steps to securing your new computer

• Google Patches Critical Android Bluetooth Flaw in August Security Bulletin

• Didi Fined $1.2 Billion for Violating Data Security Laws

• Bot army risk as 3,000+ apps found spilling Twitter API keys

• LockBit Ransomware Exploits Windows Defender to Load Cobalt Strike Payloads

• Cybrary Raises $25 Million to Tackle Cybersecurity Workforce Training

• Guest blog: The death throes of the password? Key takeaways from the One Identity Infosecurity Europe survey

• Everything You Should Know About Android App Development

• FCC Alerts American Users About Rising Smishing Attacks

• Dark Web Research Suggests 87% of Ransomware brands Exploit Malicious Macros

• CREST Defensible Penetration Test Released

• 5 Steps to Becoming Secure by Design in the Face of Evolving Cyber Threats

• Post-Quantum Encryption Contender Is Taken Out By Single-Core PC And 1 Hour

• CIA Likely Used Ninja Bomb To Kill Terrorist Leader Ayman al-Zawahiri

• U.S. Crypto Firm Nomad Hit By $190 Million Theft

• Lawsuit Claims Facebook Scraping Data From Hospital Sites

• Largest DDoS Attack Ever – 659.6 Million Packets Per Second

• A top senate democrat has asked DOJ to investigate missing Jan. 6 text messages

• US Websites Targeted by 40% of the Bad Bot Traffic Worldwide

• Armis aims to improve financial services cyber resilience with UK Finance membership

• NorseCorp Interviews Tim Harrison: Top 5 Esports Titles Worth Your Attention

• Microsoft announces new solutions for threat intelligence and attack surface management

• Microsoft goes all in on threat intelligence and launches two new products

• Cybrary confronts the cyberskills gap head on; raises $25M

• Reported ransomware attacks are just the tip of the iceberg. That’s a problem for everyone

• Track adversaries and improve posture with Microsoft threat intelligence solutions

• Google Patches Critical Android Flaw Allowing Remote Code Execution via Bluetooth

• Go-Based Apps Vulnerable to Attacks Due to URL Parsing Issue

• What is ransomware and how can you defend your business from it?

• New ‘ParseThru’ Parameter Smuggling Vulnerability Affects Golang-based Applications

• LockBit 3.0 affiliate sideloads Cobalt Strike through Windows Defender

• “ParseThru” vulnerability allows unauthorized access to cloud-native applications

• State Policymakers Tackling Cyber Issues Including Ransomware

• How Secure Is the Average Application?

• Google Patches Critical Android Flaw

• Surveillance of Your Car

• Hackers drain nearly $200 million from crypto startup in ‘free-for-all’ attack

• Cybersecurity for banks – Securing bank IoT network & devices against attacks

• Be careful what you download: 17 password-stealing Android apps removed from Google Play

• UK cinema chains trial digital ID age verification

• French Publishers Sue Apple In Latest Case Over App Store Rules

• Alibaba Will ‘Strive’ To Maintain New York Listing

• Tripwire Patch Priority Index for July 2022

• Luxembourg Energy Company Hit by Ransomware

• US Indicts Russian Accused of Promoting California’s Secession

• BlackCat Ransomware Says It’s Behind the Attack on Creos Luxembourg S.A.

• Miscreants aim to cause Discord discord with malicious npm packages

• Ex-Driver Sues Uber Eats Over ‘Racist’ Facial Recognition System

• Zomato Reduces Loss Amidst Investor Gloom Around Food Delivery

• Thousands of Apps Leaking Twitter API Keys

• North Korean Hackers Use Malicious Extensions on Chromium-based Web Browsers to Spy on User Accounts

• 3,200 Mobile Apps Leaking Twitter API Keys – Expert Comments

• BlackCat Ransomware Hits European Gas Pipeline

• Reliance Jio Top Bidder As India 5G Spectrum Auction Concludes

• SEC Charges Founders Of Crypto Group Forsage With Fraud

• UK’s Top 10 Universities Failing on DMARC

• LockBit Ransomware Abuses Windows Defender to Deploy Cobalt Strike Payload

• CREST Defensible Penetration Test helps service providers and their clients work effectively

• Online payment fraud losses accelerate at an alarming rate

• Austria investigates DSIRF firm for allegedly developing Subzero spyware

• Gootkit AaaS malware is still active and uses updated tactics

• Looking for adding new detection technologies in your security products?

• US Considers Sanctions On Chinese Memory Chip Makers

• 24-Year-Old Australian Hacker Arrested For Creating and Selling Spyware

• Twitter API Keys exposed by over 3000+ mobile applications

• T Mobile to offer data priority services to first responders

• SimpleRisk: Enterprise risk management simplified

• State of cybersecurity funding in the first half of 2022

• How AI and cybersecurity complement each other

• Browser synchronization abuse: Bookmarks as a covert data exfiltration channel

• Mecho Download – 437,928 breached accounts

• Burnout and attrition impact tech teams sustaining modern digital systems

• Exploring ESG Through a GRC Lens

• Android Apps on Google Play Store to Distribute Banking Malware as Document Scanners

• RevBits Secure Email Gateway provides end-to-end email security

• Reflections on the Death of Ayman al-Zawahiri

• Charges filed over $300m ‘textbook pyramid and Ponzi scheme’ crypto startup

• What is Dark Data, and how can we find it?

• Resecurity partners with CFBD to mitigate risk for Peruvian enterprises

• LogicMonitor appoints Ryan Worobel as CIO

• Steve Benton joins Anomali as Vice President and General Manager

• NetRise names Stuart McClure to Board of Directors

• Dark Web credit card fraud less pervasive but still an ongoing problem

• IT Security News Daily Summary 2022-08-01

• IBM report shows healthcare has a growing cybersecurity gap

• Senators introduce bill to ensure resiliency of federal data centers

• National Computer Forensics Institute up for reauthorization

• DoJ: Foreign Adversaries Breach US Federal Court Records

• API Security Weekly: Issue 173

• Eavesdropping Probe Finds Israeli Police Exceeded Authority

• Top 10 UEBA enterprise use cases

• Ransomware Hit on European Pipeline & Energy Supplier Encevo Linked to BlackCat

• New DawDropper Malware Targeting Android Devices via Play Store

• Installing SurfShark VPN On Kali Linux: The Authoritative Guide

• Public transit agencies are vulnerable to cyber threats, researchers warn

• What Are Some of the Security Challenges in Smart Manufacturing?

• Credential Canaries Create Minefield for Attackers

• Attacks are coming from all over, says Check Point Software CEO

• When a sextortion victim fights back

• Identity Verification vs Authentication: Key Similarities And Differences

• Facebook Hit With Another Lawsuit Over Healthcare Data Privacy

• This Path Traversal Bug Enabled Hackers to Delete Server Files

• Copyright transfer process moves online

• GSA’s Ascend cloud RFI emphasizes baseline requirements for vendors

• Verifying identity is the foundation of cybersecurity, state CSO says

• ALPHV/BlackCat ransomware gang claims to have stolen data from Creos Luxembourg S.A.

• Credential Stealer Malware Raccoon Updated to Obtain Passwords More Efficiently

• Name That Edge Toon: Up a Tree

• Chromium Browsers Allow Data Exfiltration via Bookmark Syncing

• Millions of Arris routers are vulnerable to path traversal attacks

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of July 25, 2022

• GnuTLS patches memory mismanagement bug – update now!

• Wrestling star Mick Foley’s Twitter compromised, selling PS5 consoles

• You Are Blind to the Risks in Your Cloud — Why Companies Need Cloud Security Monitoring

• Austrian Investigation Reveals Spyware Targeting Law Firms, Finance Institutions

• North Korean Hackers Use Browser Extension to Spy on Gmail and AOL Accounts

• Introduction to Car Hacking: The CAN Bus

• A Frontier Without Direction? The U.K.’s Latest Position on Responsible Cyber Power

• Watch Out For This Raccoon Stealer 2.0 With New Capabilities

• SharpTongue: A Malware from North Korea that Monitors Emails

• Comcast Business Partners with Fortinet to Secure Enterprise Application Access with New SASE and SSE Solutions

• Conceal to Host Worldwide Movie Premier of Ransom at Black Hat USA 2022

• Credential harvesting: Is it too big of an attack or can you fight back?

• YouAttest® Launches Enterprise Edition of Identity Governance Solution

• Amazon Echo and Google Nest can be hacked and used to steal data

• Why the future of APIs must include zero trust

• Defence against the dark arts of ransomware

• Australian man charged with creating and selling the Imminent Monitor spyware

• Cross Site Scripting Bugs Identified in Google Cloud and Play

• Australian Hacker Charged for Spyware Creation Used by Pedophiles

• LockBit Ransomware Abuses Windows Defender for Payload Loading

• Searchlight Security Announce New Automated Reporting Function

• Have we lost the fight for data privacy? Lock and Code S03E16

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Comparing The Key Differences Between Tokenization vs Encryption

• Aussie Hacker Arrested, Charged for Developing and Selling Imminent Monitor RAT

• Best Practices for PHP Security

• Bill aims to reclassify broadband as essential to promote net neutrality

• Samsung’s smartphone ‘Repair Mode’ will stop nosy technicians looking at your photos

• Two Key Ways Development Teams Can Increase Their Security Maturity

• Researchers Discover Nearly 3,200 Mobile Apps Leaking Twitter API Keys

• Malicious Npm Packages Tapped Again To Target Discord Users

• Founder Of Pro Russian Hacktivist Killnet Quitting Group

• Akamai: We Stopped Record DDoS Attack In Europe

• Spyware Developer Charged By Australian Police After 14,500 Sales

• Simpler Trading’s Danielle Shay: I’m interested in semiconductors, cybersecurity

• Start protecting the nation’s digital identities today

• The War in Ukraine: A New Paradigm of Sanctions Practice

• EPA to issue cybersecurity rule for water facilities

• New CosmicStrand rootkit targets Gigabyte and ASUS motherboards

• How to Prepare for and Respond to a Data Privacy Breach

• For Big Tech, Neutrality Is Not an Option — and Never Really Was

• Please stop calling all Crypto Scams “Pig Butchering!”

• All software is guilty until proven innocent

• Securing Your Move to the Hybrid Cloud

• SSCP Exam – Changes on the Way!

• You Need a Password Manager. Here Are the Best Ones

• Organizations Warned of Critical Confluence Flaw as Exploitation Continues

• Australian Man Charged for Developing Imminent Monitor RAT

• Countdown Clock Puts Pressure on Phishing Targets

• Heimdal™ Announces Expansion and New Office Opening in London, UK

• There Is an Increase in Smishing Attacks, FCC Warns

• Aussie Allegedly Built Notorious RAT When He Was 15

• Heimdal™ Announces Expansion and New Office Opening in London, UK

• Morocco Detains Frenchman Wanted in US Over Cybercrime: Police Source

• Austria Probes Claim Spyware Targeted Law Firms, Banks

• Giant Investment Scam Network Targets Victims with Phone Calls

• Ring Gives Videos to Police without a Warrant or User Consent

• Australian Man Charged With Purported Role in Creation and Sale of Spyware Used by Domestic Violence Perpetrators

• Heimdal™ Announces Expansion and New Office Opening in London, UK

• Palo Alto Networks can surge 40% as it expands its next-gen security business, Wolfe Research says

• Alert! This Huge Network of 11,000 Fake Investment Sites Targets Europe

• Congress Warns of US Court Records Data Breach

• Network of 11,000 Domains Used in Fake Investment Schemes Discovered

• Monitoring the HTTPS Traffic on your iOS Device

• Heimdal™ Announces Expansion and New Office Opening in London, UK

• Japan, US To Set Up Advanced Chip Research Centre

• Jack Ma ‘To Cede Control’ Of Ant Group

• How Cloudflare emerged to take on AWS, Azure, and GCP

• Heimdal™ Announces Expansion and New Office Opening in London, UK

• A week in security (July 25 – July 31)

• Elon Musk Files Countersuit Against Twitter Over Deal

• Twitter Hikes Price Of Subscription Service

• FCC Launches Fresh Mid-Band Spectrum Auction To Boost 5G

• SEC Says Alibaba Could Be Delisted In New York

• Ducktail Malware Targets Facebook Business Accounts Via LinkedIn Phishing

• Cisco Patched Multiple Security Vulnerabilities In Nexus Dashboard

• Researcher Found XSS Flaws In Google Cloud and Google Play

• Prepare for a Hacking Incident | Avast

• Threats emanating from digital ecosystems can be a blind spot for businesses

• Pixalate’s free MRT for Slack increases access to fraud and privacy compliance risk data

• Hackers Use New Tactics To Spread Malware as Microsoft Blocked Macros by Default

• Australian Hacker Charged with Creating, Selling Spyware to Cyber Criminals

• NSO Pegasus Spyware Developments | Avast

• Software developers, how secure is your software ?

• Instagram Rolls Back Changes After Celebrity Criticism

• Nigerian Money Transfer Company Linked to Romance Scam Money Laundering

• Akamai: We stopped record DDoS attack in Europe

• A flaw in Dahua IP Cameras allows full take over of the devices

• US Federal Communications Commission (FCC) warns of the rise of smishing attacks

• Ransomware gangs are hitting roadblocks, but aren’t stopping (yet)

• Google relies exclusively on App Developers declaration over Security Permissions

• Ransomware news headlines trending on Google

• Gootkit Loader Resurfaces with Updated Tactic to Compromise Targeted Computers

• Now is the time to focus on software supply chain security improvements

• Cyberattack prevention is cost-effective, so why aren’t businesses investing to protect?

• Hackers Use New Tactics as Microsoft Blocked Macros by Default

• #ISC2Congress: Piloting Teams While Under Pressure – Carey Lohrenz Will Speak as an (ISC)² Keynote

• Test your security configuration with a free assessment tool from CIS

• The most impersonated brand in phishing attacks? Microsoft

• Email Fraud in 2022: What you Need to Know

• Infosec products of the month: July 2022

• Most companies are unprepared for CCPA and GDPR compliance

• Virtual Images for Testing

• Spyware developer charged by Australian Police after 14,500 sales

Generated on 2022-08-02 23:55:33.528976