IT Security News Daily Summary 2022-08-05

• Hackers Can Exploit US Emergency Alert System Flaws to Fake Warnings

• The popularity of Dark Utilities ‘C2-as-a-Service’ rapidly increases

• Well-Architected Framework: Sustainability

• Misinformation campaigns and threats are undermining confidence in U.S. elections, official says

• NSF invests $25.4M into cybersecurity and privacy research projects

• Victory! Federal Court Upholds First Amendment Protections for Student’s Off-Campus Social Media Post

• Nomad to crypto thieves: Please give us back 90%, keep 10% as a reward. Deal?

• 5 data security challenges enterprises face today

• DOD failing to track progress on military alternatives to GPS, GAO says

• DHA names ineligible companies for $1.5B IT contract

• Cross-agency group explores next steps for identity verification

• What Worries Security Teams About the Cloud?

• Warning! Critical flaws found in US Emergency Alert System

• Apple Removes Scam App That Led to Hijacked Facebook Ad Accounts

• Traffic Light Protocol for cybersecurity responders gets a revamp

• Genesis IAB Market Brings Polish to the Dark Web

• Cyber Insurance Market 2022: FAQs & Updates with iBynd

• Anonymous Source Leaks 4TB of Cellebrite Data After Cyberattack

• Slack Forces Password Resets After Discovering Software Flaw

• Ghost Security Snags $15M Investment for API Security Tech

• Cybersecurity lessons learned from COVID-19 pandemic

• Importance of enterprise endpoint security during a pandemic

• Report Finds 49% of Security Teams Plan to Replace their ASM Solution in the next 12 Months

• A Ransomware Explosion Fosters Thriving Dark Web Ecosystem

• Latest Cyberthreats and Advisories – August 5, 2022

• #ISC2CONGRESS – Why you won’t want to miss it!

• State Policymakers Tackling Cyber Issues Including Ransomware

• Biometrics: The Future of Airport Technology

• The lifecycle of a software vulnerability

• Senate committee approves AGILE Procurement Act for IT and communications tech

• Cheaper 3D printing uses little nozzles and a ‘slicer’

• 7 best Acronis integrations and features

• Fresh RapperBot Malware Variant Brute-Forces Its Way Into SSH Servers

• Stolen Data Gives Attackers Advantage Against Text-Based 2FA

• GitHub Supply Chain Attack Cloned Thousands of Repositories to Target Developers

• Bug Discovered in DrayTek Vigor Routers by Trellix

• Facebook discovers new android malware connected to APT threat group

• MHDDoS – A DDoS Attack Script With Over 50 Different Methods

• GwisinLocker Ransomware Targets Linux Systems in South Korea

• The UK Online Safety Bill Attacks Free Speech and Encryption

• DIHK Suffers Cyberattacks, Shuts Down IT Systems

• Hackers Exploit Hostinger’s Preview Domain Feature to Launch Phishing Campaigns

• Iranian Hackers likely Behind Disruptive Cyberattacks Against Albanian Government

• Latest Cyberthreats and Advisories – August 5, 2022

• A new bill seeks to prevent the Secret Service from withholding records from its watchdog

• F5 Fixes 21 Vulnerabilities With Quarterly Security Patches

• FEMA Urges Patching of Emergency Alert Systems, But Some Flaws Remain Unfixed

• The Supreme Court’s Own Goal on Climate Change

• The Lessons—and Limits—of the Jan. 6 Committee

• Russian Entities Hit by New Woody RAT Malware

• Revealed: The top 11 malware strains you need to worry about

• DHS warns of critical flaws in Emergency Alert System encoder/decoder devices

• Critical Flaws Found In Four Cisco SMB Router Ranges

• Senator Wants To Set Aside Millions For Small Biz Cybersecurity Training

• Fishy Business: What Are Spear Phishing, Whaling and Barrel Phishing?

• The time is now for quantum-safe security

• Cybercrime a Key Revenue Stream For North Korea’s Weapons Program

• A Digital Home Has Many Open Doors

• How to Resolve Permission Issues in CI/CD Pipelines

• Small business growth in 2022: 7 effective strategies

• Open Redirect Flaw Snags Amex, Snapchat User Data

• How to use Authy: A guide for beginners

• CISA adds Zimbra email bug to Known Exploited Vulnerabilities Catalog

• Q&A with Siew Lau: Creativity, law, and bridging cultural differences

• eSentire Discovers Hackers Spearphishing Hiring Managers with Resumes Poisoned with More_Eggs Malware

• The greatest threat to our critical infrastructure: Fortune 1000 employees

• Barriers To Entry Must Be Brought Down If More Women Are to Enter Cybersecurity

• FCC warns of steep rise in phishing over SMS

• Traffic Light Protocol 2.0 Brings Wording Improvements, Label Changes

• Debris From SpaceX Dragon Capsule Lands On Australian Farm

• All the Data Amazon’s Ring Cameras Collect About You

• A Growing Number of Malware Attacks Leveraging Dark Utilities ‘C2-as-a-Service’

• Resolving Availability vs. Security, a Constant Conflict in IT

• Emergency Alert System Flaws Could Let Attackers Transmit Fake Messages

• Kevin Gallagher joins CoSoSys as CEO

• DHS Alerts of Critical Vulnerabilities in EAS Devices

• The Technology Behind Patio Heater – How Does It Work

• #ISC2CONGRESS – Why you won’t want to miss it!

• What can we learn from Apple’s new Lockdown mode about the mobile security landscape?

• Zimbra Credential Theft Vulnerability Exploited in Attacks

• Over 60% of Organizations Expose SSH to the Internet

• Hacked crypto startup Nomad offers a 10% bounty for return of funds after $190 million attack

• Amazon Staff In Essex Halt Work Over 3 Percent Pay Rise

• Revealed: The top 11 malware and ransomware strains you need to worry about

• How Businesses Are Affected by Ransomware Attacks

• Twitter Labels Elon Musk’s Counterclaim ‘Factually Inaccurate’

• UK Branded Europe’s “Capital of Card Fraud”

• Mysterious threat actor TAC-040 used previously undetected Ljl Backdoor

• Gaming Cyberattacks Increase by 167% in Last Year

• Threats targeting fintech companies are on the rise

• Chinese Info Ops Campaign Tied to PR Firm

• Ukrainian Law Enforcement Shut Down Large Russian Bot Farm

• VirusTotal Reveals List of Most Mimicked Legitimate Apps in Malware Attacks

• Hackers Exploit Atlassian Confluence Vulnerability to Deploy New ‘Ljl’ Backdoor

• New Linux botnet RapperBot brute-forces SSH servers

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Critical flaws found in four Cisco SMB router ranges – for the second time this year

• Data Protection Bill of 2019 withdrawn by the Indian Government

• Cyber Attacks now being targeted as the next state level weapons

• CISA Adds Zimbra Email Vulnerability to its Exploited Vulnerabilities Catalog

• New infosec products of the week: August 5, 2022

• August 2022 Patch Tuesday forecast: Printers again?

• Aetna Reports Mailing Vendor Hack Affected 326,000

• CORRECTING and REPLACING Digitate’s Intelligent AIOps Platform Achieves HIPAA and GDPR Compliance

• APAC Security Leaders Come Together at SECURE Singapore

• What roles do humans play in cyber breaches

• Top trends in Application Security in 2022

• MI-X: Open source project helps you understand whether you are exploitable

• Risk astute leadership: Converting intelligence into actionable controls

• VIPRE Endpoint Detection and Response protects SMBs against malware and other malicious attacks

• Deep Instinct Prevention for Applications defends mission critical business applications

• VMware Carbon Black Workload strenghtens security posture for AWS customers

• Organizations grew to love Kubernetes: Usage in production is high

• What Is the Difference Between SAST, DAST, and IAST?

• Text messages are federal records and must be saved, DOD orders

• Facebook Says A Cyber Espionage Group Is Spying On Users Via Malware

• Secure Email Encryption from Virtru Competes in 2022 ‘ASTORS’ Awards

• QuestionPro (unverified) – 22,229,637 breached accounts

• Best Encryption Software for 2022

• Keyavi Data raises $13 million to meet market demand for self-protecting data technology

• Flashpoint acquires Echosec Systems to help customers identify and mitigate all types of risk

• HUMAN Security partners with Ping Identity to enable “bot-or-not” decisions within a user’s session

• Kion and Booz Allen Hamilton help government agencies manage their multi-cloud environments

• Seemplicity collaborates with Checkmarx to improve visibility and operational efficiency for organizations

• Bloke robbed of $800,000 in cryptocurrency by fake wallet app wants payback from Google

• CISA Adds One Known Exploited Vulnerability to Catalog

• Locking down identity and access management post-SolarWinds

• CISA Adds One Known Exploited Vulnerability to Catalog

• Cyberattackers Increasingly Target Cloud IAM as a Weak Link

• An Attack on Albanian Government Suggests New Iranian Aggression

• IT Security News Daily Summary 2022-08-04

• Amazon, IBM Move Swiftly on Post-Quantum Cryptographic Algorithms Selected by NIST

• Research Shows the Annual Cost of API Security-related Breaches is Mind-blowing

• Time to Patch VMware Products Against a Critical New Vulnerability

• Ransomware review: July 2022

• How crypto tokens became as unsafe as payment cards once used to be

• Digital forms bring low-cost transparency, accessibility to city programs

• Thousands of GitHub Repositories Cloned in Supply Chain Attack

• HUD offers $2.8B for evidence-based homelessness solutions

• Protect your data and work from anywhere with this docking station

• If Bitcoiners Want Bitcoin To Make It Big, They Need DeFi

• High-Severity Bug in Kaspersky VPN Client Opens Door to PC Takeover

• New Woody RAT used in attacks aimed at Russian entities

• Security Vulnerability In Dahua IP Cameras Could Allow Device Takeover

• Apple HR Allegedly Mishandled 15 Misconduct Complaints From Women

• 20 World’s Best Free Hacking Books For 2022

• A top Senate Democrat asks the defense watchdog to investigate a new batch of missing Jan. 6 texts

• National Cyber Director’s office sheds light on forthcoming cybersecurity strategy

• Amazon CSO Steve Schmidt talks prescriptive security for AWS

• How Email Security Is Evolving

• Unprotected Snapchat and Amex sites lead to credential harvesting

• Verizon: Mobile attacks up double digits from 2021

• S3 Ep94: This sort of crypto (graphy), and the other sort of crypto (currency!) [Audio + Text]

• Everything You Need to Know About Web Pentesting: A Complete Guide

• How the cyber ambassador in waiting plans to control $1.5 billion for open networks

• One in three organizations now hit by weekly ransomware attacks

• Unauthenticated RCE can allow hacking DrayTek Vigor routers without user interaction

• #ISC2Congress: Piloting Teams While Under Pressure – Carey Lohrenz Will Speak as an (ISC)² Keynote

• The evolution of Zero Trust with AT&T: the ZTNA 2.0 advantage

• Bank Account details of about 280m Indian Citizens exposed on the web

• Disruptive Cyberattacks on NATO Member Albania Linked to Iran

• Report: Facebook Is Profiting Off Ads Featuring Abortion Misinformation

• Who Has Control: The SaaS App Admin Paradox

• How IT and security teams can work together to improve endpoint security

• Druva Touts $10m SaaS Data Protection Guarantee

• Scammers Sent Uber to Take Elderly Lady to the Bank

• F5 Releases Security Updates

• Cisco Releases Security Updates for RV Series Routers

• 2021 Top Malware Strains

• Taiwanese Government Sites Suffered DDoS Attacks Following Nancy Pelosi Visit

• Three XSS Bugs Can Cause Complete System Shutdown

• Cyberbullying vs. trolling: Here’s how to differentiate between them

• Ghost Security reinvents app security with unsupervised machine learning

• How to change Touch ID settings on a MacBook Pro

• Massive China-Linked Disinformation Campaign Taps PR Firm for Help

• F5 Releases Security Updates

• Cisco Releases Security Updates for RV Series Routers

• 2021 Top Malware Strains

• ZTNA: 4 Letters That Can Change the Dynamic of Your Business Landscape

• CREST and OWASP Partner on Verification Standard Program

• CREST membership body announces OWASP Verification Standard programme

• Critical RCE Bug Could Let Hackers Remotely Take Over DrayTek Vigor Routers

• Ransomware Task Force Releases SMB Blueprint For Defense And Mitigation

• North Korea-Backed Hackers Have A Clever Way To Read Your Gmail

• VMWare Urges Users To Patch Critical Authentication Bypass Bug

• Newly Launched Russian Spy Satellite Might Be Stalking A US Satellite

• Chinese Government Website Defaced Welcoming Pelosi To Taiwan

• Sony in-camera forgery proof technology available for Alpha 7 IV camera

• Italy, Intel Close To $5bn Chip Factory Agreement

• Cybersecurity and the Metaverse: Patrolling the New Digital World

• Protect domain-joined computer passwords with Windows’ Local Administrator Password Solution

• SMBs Exposed to Attacks by Critical Vulnerability in DrayTek Vigor Routers

• Gaming Sector Cyber-Attacks Up 167% in Last 12 Months

• Deep Instinct Pioneers Deep-Learning Malware Prevention to Protect Mission-Critical Business Applications at Scale

• The Myth of Protection Online — and What Comes Next

• Ping Identity to Go Private After $2.8B Acquisition

• New Woody RAT Malware Being Used to Target Russian Organizations

• Phishing campaign targets Coinbase wallet holders to steal cryptocurrency in real-time

• Ransomware protection with Malwarebytes EDR: Your FAQs, answered!

• VMware Patched Multiple Vulnerabilities Across Different Products

• UK Parliament Shutters TikTok Account Over Security Fears

• Security misconfigurations leave many enterprises exposed

• Critical Vulnerabilities Allow Hacking of Cisco Small Business Routers

• Cybersecurity Firm ZeroFox Begins Trading on Nasdaq via SPAC Deal

• The Secret to Automation? Eat the Elephant in Chunks.

• Startup Footprint Tackles Identity Verification

• Taiwan Government websites suffered DDoS attacks during the Nancy Pelosi visit

• Seeing the Dots, Connecting the Dots: How Government Can Unify Cybersecurity Efforts

• VMware introduces cloud workload protection for AWS

• Taiwanese military reports DDoS in wake of Pelosi visit

• TSMC Warns It Will Close Operations If China Invades Taiwan

• Hackers Exploited Atlassian Confluence Bug to Deploy Ljl Backdoor for Espionage

• SIKE Broken

• This cybersecurity stock is well-positioned for a recessionary environment, Stephens says

• VirusTotal Data Shows How Malware Distribution Leverages Legitimate Sites, Apps

• Taiwan Govt Websites Attacked During Pelosi Visit

• Cyber Readiness Measurement Firm Axio Raises $23 Million

• Secure Enterprise Browser Startup Talon Raises $100 Million

• Hackers stole $200 million from the Nomad crypto bridge

• Chinese government using phony sites and accounts to push message, new research finds

• Multiple Flaws in Cisco Small Business Routers Allow Remote Attackers to Execute Arbitrary Code

• IDC Survey Shows 70% Experienced Attack: How Secure is your Hybrid Data Center?

• Axio’s solution for quantifying cyber risk raises $22.5 million

• Talon Cyber Security secures remote working with an enterprise browser

• Robinhood Axes 23 Percent Of Jobs, Dismisses Talk Of Sale

• Zero-knowledge proof finds new life in the blockchain

• Initial Access Brokers – Key To Rise In Ransomware Attacks

• Alert! Large-Scale AiTM Attacks Targeting Enterprise Users

• Solana Funds Breached via Unknown Bug

• Don’t get singed by scammers while you’re carrying the torch for Tinder

• Users Still in the Dark Over $5m Theft From Blockchain Firm Solana

• COMMENT: ‘Hi Mum, Hi Dad’ Scams On The Rise – Britons Already Tricked Into Paying £1.5million

• 97% Of Top Universities Can’t Secure Email Domains – Expert Comments

• Solana Cyberattack – More Than 8,000 ‘Hot Wallets’ Drained

• Tom Cruise and the Leap Second – Intego Mac Podcast Episode 251

• Increase in Fake Tickets Being Sold by Cybercriminals on Social Media

• T-Mobile Retailer Found Guilty of $25m Fraud Scheme

• Ukraine Shutters Major Russian Bot Farm

• Experts Warn of Fake Football Ticket Scams

• Three Common Mistakes That May Sabotage Your Security Training

• Businesses lack visibility into run-time threats against mobile apps and APIs

• Cisco addressed critical flaws in Small Business VPN routers

• Do you know what your supply chain is and if it is secure?

• Student crashes Cloudflare beta party, redirects email, bags a bug bounty

• India scraps data protection law in favor of better law coming … sometime

• Cisco Business Routers Found Vulnerable to Critical Remote Hacking Flaws

• China to indulge in data security assessment for cross border data transfers

• Employee of T-Mobile hacks internal systems to unlock and unblock phones

• Another phishing attack that bypasses multi-factor authentication targets Microsoft email users

• UK Parliament bins its TikTok account over China surveillance fears

• 6 ways your cloud data security policies are slowing innovation – and how to avoid that

• The future of email threat detection

• Aviation Safety and Cybersecurity: Learning from Incidents

• Qualys CyberSecurity Asset Management 2.0 with EASM identifies unknown internet-facing assets

• Universities are at risk of email-based impersonation attacks

• A third of organizations experience a ransomware attack once a week

• How can organizations stay ahead of cybersecurity challenges?

• Akamai: Web application attacks are up against gamers by 167%

• Multiple Vulnerabilities on VMware Let Attackers Gain Admin Privileges

• Solana, Phantom blame Slope after millions in crypto-coins stolen from 8,000 wallets

• New Startup Footprint Tackles Identity Verification

• Avast One updates boost home network protection and digital safety guidance across platforms

• Fortinet announces FortiGate 4800F to improve security for hyperscale data centers and 5G networks

• Appdome ThreatScope brings attack and threat intelligence into the mobile DevOps CI/CD pipeline

• Rimini Protect provides zero-day security protection against known and unknown vulnerabilities

• Cyberbit Crisis Simulator enables organizations to prepare for cyber crisis scenarios

• GitHub blighted by “researcher” who created thousands of malicious projects

• Whistic collaborates with Cobalt to reduce risks that come from onboarding third-party applications

• Endace partners with Vectra to defend customers against advanced cyber threats

• CyberRes joins forces with Google Cloud to address data privacy regulations

Generated on 2022-08-05 23:55:39.097232