IT Security News Daily Summary 2022-08-13

• Flaw in the VA Medical Records Platform May Put Patients at Risk

• The Need for Automated Remediation in Saas Security

• Protect Your Executives’ Personal Digital Lives to Protect Your Company

• Google Fined $60M+ for Misleading Australians About Collecting Location Data

• A practical approach to building resilience with zero trust

• Killnet claims to have breached Lockheed Martin

• Flaws in Policybazaar Insurance Firm

• RackTop Systems Named a Sample Vendor for Cyberstorage in Gartner® Hype Cycle™ for Storage and Data Protection Technologies, 2022

• #ISC2Congress: From National Security to Cartel Infiltration – Ciaran Martin and Robert Mazur to Keynote

• Meta’s Own AI Chatbot Criticizes Facebook, Says That It “Exploits People”

• Chinese Hackers Backdoored MiMi Chat App to Target Windows, Linux, macOS Users

• The Feds Gear Up for a Privacy Crackdown

• Who “Owns” Your Infrastructure?

• Conti Ransomware Operators Using ‘BazarCall’ Style Attack as an Initial Vector

• Ukraine’s cyber chief comes to Black Hat in surprise visit

• Three flaws allow attackers to bypass UEFI Secure Boot feature

• Build or Buy your own antivirus product

• Weekly Update 308

• Reddit Enabled Attackers to Perform Mod Actions due to IDOR Flaw

• Top 10 Best Penetration Testing Companies – 2022

• GAO will investigate the troubled TSP recordkeeper transition

• SentinelOne Integrates with Proofpoint for Enhanced Ransomware Protection

• #ISC2CONGRESS – Why you won’t want to miss it!

• State Policymakers Tackling Cyber Issues Including Ransomware

• Twitter – 6,682,453 breached accounts

• The potential consequences of data breach, and romance scams – Week in security with Tony Anscombe

• Mar-a-Lago Search Warrant Unsealed

• What’s in the Unsealed Mar-a-Lago Search Warrant?

• Let there be ambient light sensing, without fear of data theft

• Thousands of Zimbra mail servers backdoored in large scale attack

• Neustar collaborates with Snowflake to improve identity management and data governance

• Palo Alto bug used for DDoS attacks and there’s no fix yet

• A Single Flaw Broke Every Layer of Security in MacOS

• Starlink satellite dish cracked on stage at Black Hat

• States invest in SNAP fraud detection, prevention

• NY State Police to ‘connect the dots’ on social media to track domestic terrorism

• Tech to limit speeds on New York City fleet vehicles

• New research points to hidden vulnerabilities within machine learning systems

• Beijing invests in virtual humans

• 25 emerging tech trends to watch

• IT Security News Daily Summary 2022-08-12

• Researchers Uncover UEFI Secure Boot Bypass in 3 Microsoft Signed Boot Loaders

• The Most Relevant Ransomware Statistics and Facts of 2022

• Intel increases its arsenal against physical hardware attacks

• Patch Madness: Vendor Bug Advisories Are Broken, So Broken

• Zoom’s Auto-Update Feature Came With Hidden Risks on Mac

• Mar-a-Lago Raid Warrant Unsealed

• Software Supply Chain Chalks Up a Security Win With New Crypto Effort

• Where’s Rudy? A Fulton County Court Wants to Know

• A Quick Take on the FTC’s Privacy and Security Rulemaking

• Trump’s Lawyers Say He Will Not Oppose Mar-a-Lago Warrant Unsealing

• The Building Blocks of Zero Trust Security Architectures on AWS

• How cross-operational teams can improve security posture

• US reveals ‘Target’ pic of Conti man with $10m reward offer

• Almost 2,000 data breaches reported for the first half of 2022

• Ways That VoIP Technology Is Impacting Marketplaces and How to Adapt

• Back to School: Tech Savvy vs. Cyber Savvy

• A former watchdog has ideas on dealing with poorly performing inspectors general

• Feds: Zeppelin Ransomware Resurfaces with New Compromise, Encryption Tactics

• Killnet Releases ‘Proof’ of its Attack Against Lockheed Martin

• Microsoft trumps Google for 2021-22 bug bounty payouts

• Here’s What Trump’s ‘Nuclear Documents’ Could Be

• The US offers a $10M rewards for info on the Conti ransomware gang’s members

• The truth about quantum risk cryptography and being ‘quantum safe’

• Domain-based Message Authentication, Reporting and Conformance (DMARC)

• FTC contemplates rules to protect against commercial surveillance and lax data privacy

• Meta Tests Encrypted Backups and End-to-End Encryption in Facebook Messenger

• Latest Cyberthreats and Advisories – August 5, 2022

• The dos and don’ts of startup security: How to develop a security plan

• Researchers Found Series of Vulnerabilities in the Software Underlying Microsoft Teams & Other Apps

• Best penetration testing tools: 2022 buyer’s guide

• Ransomware Gang Hacks Cisco

• Zeppelin Ransomware alert issued by FBI

• CRN Honors Arcserve’s CEO Brannon Lacey as an Innovator on its 2022 Top 100 Executives List

• LATEST CYBERTHREATS AND ADVISORIES – AUGUST 12, 2022

• Crucial Cybersecurity Software Features (2022)

• Senators urge DOJ to flex debarment authority

• Novel Ransomware Comes to the Sophisticated SOVA Android Banking Trojan

• Sounding the Alarm on Emergency Alert System Flaws

• Intel ups protection against physical chip attacks in Alder Lake

• CISA, FBI Warn Organizations of Zeppelin Ransomware Attacks

• US Government Shares Photo of Alleged Conti Ransomware Associate

• Xiaomi Smartphone Vulnerabilities Could Lead to Forged Payments

• FTC Kicks Off Potentially Massive New Regulation On Commercial Surveillance

• Google Ordered To Pay $43m By Australian Court

• Safety first: how to tweak the settings on your dating apps

• Black Hat 2022‑ Cyberdefense in a global threats era

• SolidBit Ransomware Group Recruiting New Affiliates on Dark Web

• How to Clear Security Obstacles and Achieve Cloud Nirvana

• Xiaomi Phones with MediaTek Chips Found Vulnerable to Forged Payments

• Twitter Exposes Personal Information for 5.4 Million Accounts

• Hacker Uses New RAT Malware in Cuba Ransomware Attacks

• Facebook’s In-app Browser on iOS Tracks ‘Anything You Do on Any Website’

• Realtek SDK Vulnerability Exposes Routers From Many Vendors to Remote Attacks

• Microsoft Paid $13.7 Million via Bug Bounty Programs Over Past Year

• Schedule F: An Unwelcome Resurgence

• A Road Map for Tech Policy Experimentation

• Emergency services call-handling provider: Ransomware forced it to pull servers offline

• Hacker Touts Data Sale Of 48.5m Users Of Covid App – Report

• LATEST CYBERTHREATS AND ADVISORIES – AUGUST 12, 2022

• Facebook Tests Default End-to-End Encryption For Messenger

• FTC Looking at Rules to Corral Tech Firms’ Data Collection

• #BHUSA: Bug Bounty Botox – Why You Need a Security Process First

• #BHUSA: Failure to Challenge is a Social Engineering Risk

• U.S. Government Offers $10 Million Reward for Information on Conti Ransomware Gang

• A Taxonomy of Access Control

• UK NHS Hit with Ransomware Attack

• Avoid the worst of the internet with cyber hygiene

• Intel Introduces Protection Against Physical Fault Injection Attacks

• Black Hat USA 2022 – Announcements Summary

• Zero-Day Vulnerability Exploited to Hack Over 1,000 Zimbra Email Servers

• Security Researchers Dig Deep Into Siemens Software Controllers

• FBI, CISA warn over ransomware gang that can make million dollar demands

• #BHUSA: What has Changed in the Post-Stuxnet Era?

• US Unmasks Suspected Conti Ransomware Actor

• Facebook Testing Default End-to-End Encryption and Encrypted Backup in Messenger

• Recovery From NHS Attack Could Take Weeks

• Vulnerabilities on Xiaomi’s mobile payment mechanism which could allow forged transactions : A Check Point Research analysis

• 2022 Threat Report

• Ransomware Prevention and Remediation

• Ransomware attack blamed for closure of all 7-Eleven stores in Denmark

• Zeppelin Ransomware Victims May Need Multiple Decryption Keys

• Fast and Secure VPN on a Budget? Private Internet Access VPN Has You Covered

• Cisco Patches High-Severity Vulnerability Affecting ASA and Firepower Solutions

• Recovery From NHS Ransomware Attack May Take a Month

• Malicious PyPI packages drop ransomware, fileless malware

• 25% of employees don’t care enough about cybersecurity to report a security incident

• Online Platforms Should Stop Partnering with Government Agencies to Remove Content

• Why Cyber Security Is Essential For Digital Marketers & PR Specialists?

• Fake Elon Musk TeslaCoin investment scam costs victims at least $250

• Pay with just your palm at Whole Foods

• Industry All-Stars Take Stage at International Cyber Expo’s Global Cyber Summit

• Experts warn of mass exploitation of an RCE flaw in Zimbra Collaboration Suite

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Researchers Warn of Ongoing Mass Exploitation of Zimbra RCE Vulnerability

• NHS Ransomware attack to be seriously probed

• Amazon, IBM and Cloudflare joining alliance to thwart Cyber Threats

• Event-Driven Architectures & the Security Implications

• Ex-Twitter Employee Found Guilty of Sharing User’s Private Information to Saudi Arabia

• BazarCall attacks have revolutionized ransomware operations

• How bad actors are utilizing the InterPlanetary File Systems (IPFS)

• New infosec products of the week: August 12, 2022

• The impact of exploitable misconfigurations on network security

• Organizations would like the government to help with ransomware demand costs

• Ransomware is not going anywhere: Attacks are up 24%

• Credential harvesting: Is it too big of an attack or can you fight back?

• Supply Chain Cybersecurity – the importance of everyone

• MiniTool Power Data Recovery 11.3 helps users with various data loss situations

• Tidal Cyber Community Edition platform enables businesses to optimize their cyber defenses

• Dynatrace platform enhancements detect vulnerabilities in runtime environments

• 1. Cracking the Hackers: How to Build a 100% Engaged Human Firewall

• FAANGs failing on keeping user data safe from bug hunters

• ArmorCode integrates with Traceable AI to improve application security posture for organizations

• Update now! Microsoft fixes two zero-days in August’s Patch Tuesday

• Slack flaw exposed users’ hashed passwords

• Krebs: Taiwan, Geopolitical Headwinds Loom Large

• Microsoft: We Don’t Want to Zero-Day Our Customers

Generated on 2022-08-13 23:55:23.966966

Liked it? Take a second to support IT Security News on Patreon!