IT Security News Daily Summary 2022-08-17

• How to Stop Local Governments From Being Attractive Cyber Attack Targets

• Understanding ransomware trends to combat threats

• Are deleted files really gone?

• New threat intelligence solution launched by Google Cloud

• Build a culture of action to improve diversity, equity, inclusion and belonging

• Researchers to quantify political polarization

• Make AI accountable by adding redress tools, researchers say

• Report: Facebook Is Failing To Detect Blatant Misinformation Ahead Of 2022 International Elections

• New Linux Exploit ‘Dirty Cred’ Revealed at Black Hat

• Software developer cracks Hyundai car security with Google search

• Software developer cracks Hyundai car encryption with Google search

• eSecurity Planet’s 2022 Cybersecurity Product Awards

• Securing Your Organization During Global Turmoil

• The Emergence of Dynamic Threat Hunting

• Hunting Follina

• Google Chrome Zero-Day Found Exploited in the Wild

• Arrest of a Stalkerware-maker in Australia Underscores Link Between Stalkerware and Domestic Abuse

• GSA adds $25 billion to ceiling value of Alliant 2, sketches out timeline for Alliant 3

• Apple Patches New macOS, iOS Zero-Days

• ‘DarkTortilla’ Malware Wraps in Sophistication for High-Volume RAT Infections

• After 7 years, long-term threat DarkTortilla crypter is still evolving

• What does the federal government buy from data brokers?

• A Parent’s Guide To The Metaverse – Part One

• New Jersey joins multistate effort to clean up voter registration data

• How to create a threat profile, with template

• CISA: Threat actors exploiting multiple Zimbra flaws

• Bugdrop dropper includes features to circumvent Google’s security Controls

• Bad Data “For Good”: How Data Brokers Try to Hide Behind Academic Research

• Is My VPN Working? How To Test for VPN Leaks

• Healthcare Breaches Costliest for 12 Years Running, Hit New $10.1M Record High

• Scientists are turning data into sound to listen to the whispers of the universe (and more)

• Seaborgium targets sensitive industries in several countries

• China-Backed RedAlpha APT Builds Sprawling Cyber-Espionage Infrastructure

• When Countries Are Attacked: Making the Case for More Private-Public Cooperation

• Google fixed a new Chrome Zero-Day actively exploited in the wild

• How to stop the evil lurking in the shadows

• 52 Alarming Cyberbullying Statistics and Facts for 2022

• Analyzing the Hidden Danger of Environment Variables for Keeping Secrets

• GSA’s Dave Zvenyach to exit government

• CISA Warns of Hackers Exploiting Multiple Vulnerabilities in the Zimbra Collaboration Suite

• The Android 13 Privacy Settings You Should Update Now

• The Unlawful U.S. Killing of Ayman al-Zawahri

• Prosecuting Trump: A Reply to Josh Marshall

• Russia launched DDoS attack on Ukraine Nuclear Plant

• Amazon Warehouse Staff In Upstate NY Seek Union Election

• How to Use IP Addresses for Data Protection and Privacy

• Report: Government implementing zero trust architecture faster than corporations

• TikTok wants your trust around US midterm elections data

• Thoma Bravo Closes $6.9B Acquisition of Identity-Security Vendor SailPoint

• SEC Says Brokerage Accounts Hijacked For $1.3m Scam

• Mozilla Finds 18 Of 25 Popular Reproductive Health Apps Leak Data

• Vulnerability Wholesaler Cuts Disclosure Times Over Poor Quality Patches

• Russian Military Uses Chinese Drones And Bots In Combat

• Iranian Hackers Allegedly Exploiting Israeli Entities

• Secure Boot Vulnerabilities Impact Bootloaders, Systems Compromised

• Open-Source VPN Protocols Compared: Why WireGuard is on the Rise!

• APT Lazarus Targets Engineers with macOS Malware

• ThreatX Raises $30 Million in Series B Funding to Accelerate Growth in Global API Protection Market

• Lawmakers Accuse DHS Watchdog Of Obstruction In Probe Of Secret Service Texts

• Users Of Zoom On Macs Told To Update App As Company Issues Security Fix

• “Don’t touch that server. Ralf set that up, and we don’t know what it does.”

• Apple To Start Manufacturing Macbook, Apple Watch In Vietnam

• An experiment showed that the military must change Its cybersecurity approach

• 81% of Malware Seen on USB Drives in Industrial Facilities Can Disrupt ICS: Honeywell

• Vulnerability Broker Applies Pressure on Software Vendors Shipping Faulty, Incomplete Patches

• RubyGems Mandates MFA for Top-100 Package Maintainers

• Streamlining IT security operations with Red Hat Insights and Red Hat Satellite

• How Unmoderated Platforms Became the Frontline for Russian Propaganda

• More People Charged After 2017 Equifax Hack

• Report: 94% of CDOs believe data privacy technology increases revenues

• Ransomware is still on the rise. Here’s what you need to do to stay safe from hackers

• Spy group abuses Microsoft OneDrive to steal credentials in hack-and-leak campaigns

• The 14 best Labor Day 2022 security camera deals

• Cybercriminals Developing BugDrop Malware to Bypass Android Security Features

• Tesla Allowed To Continue Autonomous Driving Advertising In Germany

• Microsoft Disrupted Russia-Linked APT SEABORGIUM Targeting NATO Countries

• How to deploy the Bitwarden self-hosted server with Docker

• SEC Charges 18 Over Scheme Involving Hacked Brokerage Accounts

• Chrome browser gets 11 security fixes with 1 zero-day – update now!

• Organizations Struggle to Fend Off Cloud and Web Attacks

• 7 Smart Ways to Secure Your E-Commerce Site

• Russia-Ukraine cyberwar creates new malware threats

• CHEQ helps ecommerce businesses fake out the ‘fake web’

• Black Hat USA 2022 and DEF CON 30

• Securing OT That Can’t Be Patched

• SOC Analyst Training – Cyber Attack Intrusion Analysis With SIEM Tools|From Scratch To Advanced

• Security Analysis Leads to Discovery of Vulnerabilities in 18 Electron Applications

• The Future of Endpoint Management

• Quarterly Security Patches Released for Splunk Enterprise

• Iranian Group Targeting Israeli Shipping and Other Key Sectors

• New Google Chrome Zero-Day Vulnerability Being Exploited in the Wild

• Expert Commentary: Thousands Of Exposed VNC Instances Exposed

• UK Water Suppliers Hacked But Hackers Extort Wrong Victim

• Creating A Culture Of Cybersecurity

• Microsoft makes tamper protection for macOS endpoints widely available

• Black Hat USA 2022: Are Cybersecurity Tool Standards on the Way?

• Identity Scams Soar to Make 2021 a Record Year

• Squish The Phish: Teaching Your Staff About Cyber Security To Slash Phishing Attacks, Experts Weigh In

• Irdeto And Clavister To Bring Enhanced Security To The Connected Transport Industry

• Google Patches Fifth Exploited Chrome Zero-Day of 2022

• Fugitive Arrested After 3 Years on Charges Related to BEC Scheme

• Lean Security 101: 3 Tips for Building Your Framework

• Researchers Link Multi-Year Mass Credential Theft Campaign to Chinese Hackers

• Zoom Exploit on MacOS

• Google Defamation Ruling Overturned By Australian High Court

• GCP, therefore IAM

• Everything You Should Know About Trading

• Kubescape boosts Kubernetes scanning capabilities

• Windows, Linux and macOS Users Hit by Chinese Iron Tiger

• Microsoft: Phishing Alert Over Russian-Related Threats

• Apple Orders Staff Back To Office, Three Days A Week

• Security Firms Find Over 20 Malicious PyPI Packages Designed for Data Theft

• USBs Still a Major OT Infection Vector

• Job Seekers Targeted in Lazarus Group Hack

• 6 Ways Mobile Devices Have Changed the Gaming Industry

• Malicious Browser Extensions Targeted Over a Million Users So Far This Year

• SitePoint – 1,021,790 breached accounts

• Silicon UK In Focus Podcast: Configuring Security

• Bug Bounty Giant Slams Quality of Vendor Patching

• Portable Speakers Vs. Bookshelf Speakers For Online Classes?

• North Korea-linked APT targets Job Seekers with macOS malware

• Improve Your Middle Schooler’s Digital Literacy | Avast

• What is Configuration Drift?

• Mozilla finds 18 of 25 popular reproductive health apps leak data

• Cyber Security Management System (CSMS) for the Automotive Industry

• North Korea Hackers Spotted Targeting Job Seekers with macOS Malware

• ÆPIC Leak is the first CPU flaw able to architecturally disclose sensitive data

• Zoom fixed two flaws in macOS App that were disclosed at DEF CON

• RubyGems Makes Multi-Factor Authentication Mandatory for Top Package Maintainers

• Kentucky University Facebook account hacked to post inappropriate photos of Woman

• Johnson and Johnson to use Artificial Intelligence to develop drugs

• Russian military uses Chinese drones and bots in combat, over manufacturers’ protests

• Incident response in the cloud can be simple if you are prepared

• Whistic Ranks No. 891 on the 2022 Inc. 5000 With Three-Year Sales Growth of 715%

• For the 2nd Time, Adlumin Appears on the Inc. 5000 List, Three-Year Revenue Growth of 1,113 Percent

• Integral Group and Ross & Baruzzini Come Together Under New Brand, Introba, to Meet Increasing Global Demand for Sustainable, Resilient Engineering

• #ISC2Congress: Empower Your Weekend with Training

• Are SASE and Zero Trust the key for manufacturers grappling with IoT cyber risks?

• What is challenging successful DevSecOps adoption?

• How attackers are exploiting corporate IoT

• D-Wave Reports Second Quarter and First Half 2022 Results and Provides Business Update

• Everbridge Travel Protector informs traveling employees of emerging threats

• RackWare SWIFT 1.2 manages the migration of containerized workloads on Microsoft Azure

• Response-based attacks make up 41% of all email-based scams

• Where Does Cybersecurity Go from Here?

• Microsoft Rolls Out Tamper Protection for Macs

• IRONSCALES partners with Distology to protect organizations from phishing attacks

• Quick Heal collaborates with RevBits to strengthen its cybersecurity portfolio

• 1Kosmos and Simeio join forces to provide customers with passwordless MFA and verified identity

• Kubernetes security incidents are on the rise – what can you do about it?

• Introducing Malwarebytes Cloud Storage Scanning: How to scan for malware in cloud file storage repositories

• CISA and FBI issue alert about Zeppelin ransomware

• What is Private DNS Mode on Android and how do you enable it?

• RubyGems now requires multi-factor auth for top package maintainers

• From Frost & Sullivan: Recognizing Leadership in Secure Web Gateway Solutions

• Catherine Harrell joins BitSight as CMO

• Leveraging smart grid upgrades for broadband buildout

• Massachusetts moves to modernize court IT systems

• Mailchimp suffers second breach in 4 months

• Bad Data “For Good”: How Data Brokers Try to Hide in Academic Research

• IT Security News Daily Summary 2022-08-16

• SEC says brokerage accounts hijacked for $1.3m pump-and-dump scam

• ONCD seeks a lead for U.S. defensive cyber planning and operations

• New missile defense tech comes with acquisition risks

• DomainKeys Identified Mail (DKIM)

• For cyber insurance, some technology leads to higher premiums

• DEF CON: A Woman’s First Experience

• Microsoft Disrupts Russian Group’s Multiyear Cyber-Espionage Campaign

• Are ethical hackers the digital security answer?

• Alert! Over 1,900 Signal User Data Exposed

• Clop Ransomware Gang Breaches Water Utility, Just Not the Right One

• The power of no-code to modernize government

• Key agencies are shedding the exact employees they need to spend new infrastructure dollars

• Zero Day Initiative seeing an increase in failed patches

• Name That Toon: Vicious Circle

• Clop gang targeted UK drinking water supplier South Staffordshire Water

• How to protect your industrial facilities from USB-based malware

• Threat Actors Exploiting Multiple Vulnerabilities Against Zimbra Collaboration Suite

• Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite

• Synthetic fraud is on the rise. Here’s how governments can combat it

• Fort Worth expands broadband to 40,000 more residents

• How a spoofed email passed the SPF check and landed in my inbox

• DEF CON – “don’t worry, the elections are safe” edition

• BazarCall attack increasingly used by ransomware threat actors

• When Efforts to Contain a Data Breach Backfire

• Threat Actors Exploiting Multiple Vulnerabilities Against Zimbra Collaboration Suite

• Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite

• 5 tips for building a cybersecurity culture at your company

• US offers reward “up to $10 million” for information about the Conti gang

• Twilio Hack -Over 1,900 Signal Users’ Phone Numbers were Exposed in the Data Breach

• CISA director looking for ‘unlikely’ partnerships in cyber fight

• USDOT awards funding for tech infusion to transit, highway systems

• Former Twitter Employee Guilty of Spying on Behalf of Saudi Arabia

• Critical Vulnerability in Google’s Titan M Chip Earns Researchers $75,000

• The Future of CyberSecurity is Prevention

• Two Additional Malicious Python Libraries Found on PyPI Repository

• With Plunge in Value, Cryptocurrency Crimes Decline in 2022

• Fake Droids: Your New Android Device is Actually an Old Android 6

• Email Threat Report for 2022 via Abnormal Security

• Onapsis Featured on 2022 Inc. 5000 List of Fastest Growing Companies for the Second Consecutive Year

• AuditBoard Launches Third-Party Risk Management Solution, Empowering Enterprises to Tackle IT Vendor Risk at Scale

• Penetration Testing as a Service (PTaaS): the evolution of Penetration Testing at AT&T

• Does it Matter What (if Anything) Trump Declassified?

• Contending With IRGC Plots

• Prince William could steal Loudoun’s title of Data Center Alley. But land use battles are raging.

• Healthcare Provider Issues Warning After Tracking Pixels Leak Patient Data

• Windows Vulnerability Could Crack DC Server Credentials Open

• ÆPIC and SQUIP Vulnerabilities Found in Intel and AMD Processors

• U.K. Water Supplier Hit With Clop Ransomware Attack

• South Staffordshire Water Confirms Cyberattack

• Ransomware & RDDoS, Why They Are Similar but Different

• The most hated people on the internet: Where are they now?

• Scammers are using this sneaky tactic to trick you into handing over bank details and passwords

• How to use Sendinc to encrypt your emails

• Do you know what’s happening on your users’ devices?

• U.K. Water Supplier Hit with Clop Ransomware Attack

• Ransomware Group Claims Access to SCADA in Confusing UK Water Company Hack

• New Attack Weaponizes PLCs to Hack Enterprise and OT Networks

• Acuant collaborates with Ping Identity to provide customers with fraud-fighting technology

• AuditBoard Third-Party Risk Management solution empowers teams to manage their overall IT risk

• How to Remediate a Cross-Site WebSocket Vulnerability

• X-Force 2022 Insights: An Expanding OT Threat Landscape

• Microsoft’s macOS Tamper Protection hits general availability

• #DEFCON: Electrovolt Exploits Against Electron Desktop Apps Exposed

• Facebook Scammers Steal Thousands Posing As Restaurant Supplier Brand

• SEPT. 7-9: Ukraine, Election, AI, Cybercrime, 5G Among Topics Explored by 125+ Speakers at 13th Billington Cybersecurity Summit

• Lessons From the Cybersecurity Trenches

• Vulnerability wholesaler cuts disclosure times over poor-quality patches

• CISOs are taking on more responsibilities—and burning out

• DevSecOps adoption is low but packing a punch in user organizations

• #DEFCON: How US Teen RickRolled His High School District

• Over 8,000 Exposed VNC Ports – Major Threat To Critical Infrastructure

• July 2022 Cyber Attack Statistics

• New U.S. Legislation Introduced to Help Small Business Provide Cybersecurity Training

• Argentina’s Judiciary Of Córdoba Hit By PLAY Ransomware Attack

• Callback Phishing Attacks See Massive 625% Growth Since Q1 2021

• The “Cyber Insurance Gap” Is Threatening Most Companies

• In the Fight Against DDoS Attacks, not all PoPs are Created Equal

• 1,900 Signal users exposed: Twilio attacker ‘explicitly’ looked for certain numbers

• Confused cyber criminals have hacked a water company in a bizarre case of mistaken identity

• Xiaomi Phone Bug Allowed Payment Forgery

• Zoom Patches Serious macOS App Vulnerabilities Disclosed at DEF CON

• Signal Discloses Impact From Twilio Hack

• Remotely Controlling Touchscreens

• South Staffordshire Water Latest Target Of Criminal Cyber Attack

• Google releases Android 13 with improved privacy and security features

• Many Ears from Now: 5 Authentication Modalities that Will Blow Your Mind

• Researchers Hacked SpaceX Operated Starlink Satellite Using $25 Modchip

• Report: Hacking is the top cause of data breaches

• Unified Threat Management: The All-in-One Cybersecurity Solution

• New Evil PLC Attack Weaponizes PLCs to Breach OT and Enterprise Networks

• Poor sending practices trigger a tidal wave of informational listings

• Two more malicious Python packages in the PyPI

• Cyber Firm Darktrace Shares Surge on Possible Takeover

• DigitalOcean customers affected by Mailchimp “security incident”

• UK Adults Are Sourcing Their News From TikTok

• US Judge Approves Apple Settlement In Retail Class Action Lawsuit

• New US Export Controls Target China Semiconductor Firms

• Hackers are finding ways around multi-factor authentication. Here’s what to watch for

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of August 8, 2022

• Hybrid Vishing Attacks Soar 625% in Q2

• Microsoft Warns About Phishing Attacks by Russia-linked Hackers

• Over 8000 VNC instances left exposed, researchers find

• Reckon Russian spies are lurking in your inbox? Check for these IOCs, Microsoft says

• What Exposed OPA Servers Can Tell You About Your Applications

• Three Nigerian BEC Fraudsters Extradited From UK to US

• Signal Confirms Roughly 1900 Users Affected by Twilio Breach

• Faraday Future Raises Fresh Backing For Electric SUV Debut

• Ola Plans Premium Electric Car For Indian Market

• Microsoft Disrupts Russian Cyber-Espionage Group Seaborgium

• Sharing personal information online: Do young people overdo it?

• Water Company Says Supply Safe After Ransom Group Claims

• Are Cloud Environments Secure Enough for Today’s Threats?

• The Advantages of Breach and Attack Simulation for Data Security

• Snapchat Hits 1 Million Paid Users Amidst Weak Ad Market

• India’s Mahindra Launches Electric SUVs Based On VW Platform

• Russian State Hackers Continue to Attack Ukrainian Entities with Infostealer Malware

• Russia-linked Gamaredon APT continues to target Ukraine

• 1,900 Signal users exposed following Twilio breach

• Threat in your browser: what dangers innocent-looking extensions hold for users

• Looking for adding new detection technologies in your security products?

• BT Looks To Minimise Disruption Ahead Of Fresh Strikes

• General Monitoring is not the Answer to the Problem of Online Harms

• Phone numbers of 1,900 Signal users exposed as a result of Twilio security breach

• Nearly 1,900 Signal Messenger Accounts Potentially Compromised in Twilio Hack

• WikiLeaks Founder Julian Assange sues CIA for data theft

• Play Ransomware attack news and Extortion Attempt on Water utility

• Sealing Technologies wins $168M Marine Corps cyber contract

• Digital Ocean dumps Mailchimp after attack leaked customer email addresses

• ‘Highly classified’ documents recovered from Mar-a-Lago prompt lawmaker calls for assessment

• CACI Showcases Secure Enterprise Technology at AFCEA TechNet Augusta 2022

• Global Healthcare Technology Leader Renews Multiple Contract Extensions Worth Over $300,000

• Hippo Reports Second Quarter 2022 Financial Results

• MPC22 to Explore The Currency of Change with Digital Commerce Leaders

• Stories from the SOC – Credential compromise and the importance of MFA

• Interpreting the Key Points of The 2022 IBM i Marketplace Survey Results

• How aware are organizations of the importance of endpoint management security?

• Matter protocol: Secure, reliable interoperability for smart home devices

• Why organizations should control Active Directory permissions

• Overcoming the roadblocks to passwordless authentication

• A 5 Step Checklist for Complying with PCI DSS 4.0

• It’s 2022 and there are still thousands of public systems using password-less VNC

• Oh Deere: Farm hardware jailbroken to run Doom

• White Hat Hacker at DefCon Jaikbreaks Tractor to Play Doom

• Donut breach: Lessons from pen-tester Mike Miller: Lock and Code S03E17

• A week in security (August 8 – August 14)

Generated on 2022-08-17 23:55:33.548190