IT Security News Daily Summary 2022-08-19

• Friday Squid Blogging: The Language of the Jumbo Flying Squid

• How to strengthen the human element of cybersecurity

• Google Fended Off Largest Ever Layer 7 DDoS Attack

• 8 secure file transfer services for the enterprise

• Zero Trust: Security Model for A Fluid Perimeter

• State-Sponsored APTs Dangle Job Opps to Lure In Spy Victims

• Nonprofit Websites Are Full of Trackers. That Should Change.

• Ex-HP finance manager jailed after going on $5m spending spree using company plastic

• FBI Warns of Proxies and Configurations Used in Credential Stuffing Attacks

• Encrypted Messaging Service Hack Exposes Phone Numbers

• BlackByte Ransomware Gang Returns With Twitter Presence, Tiered Pricing

• Virginia Employment Commission struggles with identity theft

• Offensive Security Online Community BBQ Event

• Beware! BlackByte Ransomware is Back With New Version

• How to unlock 1Password on a Mac

• DHS tests new tech that could bring emergency alerts to vehicle screens

• Apple users urged to install latest updates to combat hacking

• Alternatives to facial recognition authentication

• China-backed APT41 Group Hacked at Least 13 Victims in 2021

• A Duty to Disobey?

• Browser vulnerability troubles to Chrome and Safari users Worldwide

• Hackers Steal Session Cookies to Bypass Multi-factor Authentication

• CISA added SAP flaw to its Known Exploited Vulnerabilities Catalog

• iPhone Users Urged to Update to Patch 2 Zero-Days

• Microsoft: Cryptojackers Continue to Evolve to Be Stealthier and Spread Faster

• Report: Facebook Is Profiting On White Supremacist Groups Through Ads

• DoNot Team Hackers Updated its Malware Toolkit with Improved Capabilities

• About That Draft Law Banning Uncle Sam Buying Insecure Software

• Two Years On, Apple iOS VPNs Still Leak IP Addresses

• Apple Security Flaw Actively Exploited By Hackers To Fully Control Devices

• Sudden Crypto Drop Sends Bitcoin To Three Week Low

• More and More Companies Are Getting Hit with Ransomware [2021-2022]

• What is Cloud Access Security Brokerage (CASB)? Definition, Scope, Implementation, and Limitations

• Updates on 3 Bullpen stocks that broke through the meme and retail buzz this week

• Tourism and the metaverse: Towards a widespread use of virtual travel?

• Ring Camera Recordings Exposed Due to Vulnerability in Android App

• 7 key cybersecurity metrics for the board and how to present them

• Hackers Using Bumblebee Loader To Compromise Active Directory Services

• PLCs Exploited by “Evil PLC Attack” to Breach Networks

• Networks Breached via Bumblebee Loader

• Apple Security Flaw Actively Exploited By Hackers

• New PyPi Malware Pkgs Steal Discord And Roblox Credential & Payment Info, Expert Weighs In

• 3 Questions to Ask to Audit Your API

• How EDR Security Supports Defenders in a Data Breach

• Ransomware Group Threatens to Leak Data Stolen From Security Firm Entrust

• China’s Winnti Group Hacked at Least 13 Organizations in 2021: Security Firm

• Top 10 cybersecurity interview questions and answers

• Apple Warns of Critical Security Risk in Safari For iPhones, iPads and Macs

• Cyber Resiliency Isn’t Just About Technology, It’s About People

• Cybercrime Group TA558 Targeting Hospitality, Hotel, and Travel Organizations

• Cloud security: Increased concern about risks from partners, suppliers

• iOS Can Stop VPNs From Working as Expected—and Expose Your Data

• Tech Industry Leaders React To A Level Results

• Google: Here’s how we blocked the largest web DDoS attack ever

• OFAC Around and Find Out

• Google Staff Demand Protections, Amid State Abortion Bans

• Cybersecurity M&A Roundup for August 1-15, 2022

• Google Blocks Record-Setting DDoS Attack That Peaked at 46 Million RPS

• Google Cloud Blocks Record DDoS attack of 46 Million Requests Per Second

• LATEST CYBERTHREATS AND ADVISORIES – AUGUST 19, 2022

• Apple Security Flaw Being Actively Exploited

• 10 top cybersecurity online courses and certifications in 2022

• A flaw in Amazon Ring could expose user’s camera recordings

• Businesses Found to Neglect Cybersecurity Until it is Too Late

• Ring App Vulnerability Urgently Patched by Amazon

• U.S. Cyber Command deploys defensive operators to Croatia to hunt for malicious cyber activity

• Entrust Allegedly Hit with LockBit Ransomware

• UK Water Provider Targeted by Clop Group Ransomware

• Yale University Names Firms Still Operating In Russia

• SAP Vulnerability Exploited in Attacks After Details Disclosed at Hacker Conferences

• Chinese Cyberspy Group ‘RedAlpha’ Targeting Governments, Humanitarian Entities

• 8 Ways Technology Has Improved The Mortgage Industry

• Estonia Repels Biggest Cyber-Attack Since 2007

• New Amazon Ring Vulnerability Could Have Exposed All Your Camera Recordings

• Back to school shopping cybersecurity 101

• UK Carrier Claims to Block One Million Vishing Calls Per Day

• 35 Malware Android Apps With over 2 million Installation Found on the Google Play Store

• Safeguard your iPhones, iPads and Macs: Apply these security updates now

• Cyber Tops Staff Retention as Biggest Business Risk

• Cisco fixes High-Severity bug in Secure Web Appliance

• Bumblebee attacks, from initial access to the compromise of Active Directory Services

• Two years on, Apple iOS VPNs still leak IP addresses

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Fitbit’s having a bad summer

• Estonia blocked cyberattacks claimed by Pro-Russia Killnet group

• Exploiting stolen session cookies to bypass multi-factor authentication (MFA)

• UK 5G Network company EE blocks 200 million phishing texts

• Lockbit takes claim for Entrust Ransomware Attack

• Amazon Patches Ring Android App Flaw Exposing Camera Recordings

• CISA’s cyber info sharing program didn’t always deliver, watchdog says

• How merchants can defend themselves against Magecart attacks

• New infosec products of the week: August 19, 2022

• Deploying a Modern Card Program – Card Issuing Platform

• The dos and don’ts of startup security: How to develop a security plan

• Credential harvesting: Is it too big of an attack or can you fight back?

• A civil servant’s effort to humanize government, one fed at a time

• Cobalt Iron Ranks High Among Leaders in GigaOm 2022 Radar Report for Enterprise Hybrid Cloud Data Protection

• Latest Cyberthreats and Advisories – August 5, 2022

• #ISC2CONGRESS – Why you won’t want to miss it!

• Cybercriminals are using bots to deploy DDoS attacks on gambling sites

• OpenFHE: Open-Source Fully Homomorphic Encryption

• Weekly Update 309

• How do cybercriminals steal credit card information?

• Cloudera CDP One accelerates data science programs with built-in enterprise security and ML

• Tenacity platform enhancements provide visibility into entire AWS and Azure cloud infrastructure

• Absolute boosts Secure Endpoint portfolio with resilience and intelligence capabilities

• The truth about that draft law banning Uncle Sam buying insecure software

• 3M COMPLY Magnetic Attach for Monitors protects sensitive and confidential data on monitor displays

• CircleCI Visual Configuration Editor allows teams to visualize and streamline complex workflows

• Apricorn Aegis Secure Key 3 addresses constantly evolving security threats

• Bitwarden releases SCIM support to expand directory and identity provider integration options

• Opsera unveils SaaS DevOps capabilities to improve agility and security posture for enterprises

• SynSaber raises $13 million to improve industrial asset and network monitoring solution

• TXOne Networks raises $70 million to defend industry verticals against cybersecurity threats

• ManageEngine and Sectigo join forces to automate certificate lifecycle management

• Fortanix External Key Manager pairs with Google Cloud Platform to help users tackle privacy challenges

• Banorte – 2,107,000 breached accounts

• Urgent update for macOS and iOS! Two actively exploited zero-days fixed

• Bad rhythm: Janet Jackson song resonates poorly with some old hard drives

• How IT teams can prevent phishing attacks with Malwarebytes DNS filtering

• Attackers waited until holidays to hit US government

• Business Services industry targeted across the country for backdoor access

• Safari 15.6.1 addresses a zero-day flaw actively exploited in the wild

• NetSPI Partner Program delivers offensive security services for organizations

• Box appoints Amit Walia to its Board of Directors

• Apple Releases Security Updates for Multiple Products

• CISA Adds Seven Known Exploited Vulnerabilities to Catalog

• Cisco Releases Security Update for Cisco Secure Web Appliance

• CISA releases 5 Industrial Control Systems Advisories

• DHS preparedness grants prioritize security for state, local governments

• Easing the Cyber-Skills Crisis With Staff Augmentation

• Spyware Hunters Are Expanding Their Toolset

• Apple Releases Security Updates for Multiple Products

• CISA Adds Seven Known Exploited Vulnerabilities to Catalog

• Cisco Releases Security Update for Cisco Secure Web Appliance

• CISA releases 5 Industrial Control Systems Advisories

• IT Security News Daily Summary 2022-08-18

• What Web3 and the blockchain revolution mean for law enforcement

• D-Fend and Syzygy to Optimize C-UAS Communications & Data Management

• The Advantages of Breach and Attack Simulation for Data Security

• Business Email Compromise Attack Tactics

• 20% of developers and IT pros say API security breaches happen monthly

• The Biden administration ends COVID-19 testing aimed at unvaccinated workers

• Need a password manager? NordPass is 34% off right now

• New Bill Would Bring Back Terrible Software and Genetic Patents

• From Ramnit To Bumblebee (via NeverQuest): Similarities and Code Overlap Shed Light On Relationships Between Malware Developers

• 5G’s first applications likely intelligent transportation, public safety

• China’s APT41 Embraces Baffling Approach for Dropping Cobalt Strike Payload

• The Classification Status of Trump’s Mar-a-Lago Documents

• The Five Principles of a Zero Trust Cybersecurity Model

• Where’s EFF? Why EFF Is Sometimes Quiet About Important Cases and Issues

• What’s appropriate on social media? DOD spells it out in new guidance

• Universal ZTNA is Fundamental to Your Zero Trust Strategy

• TXOne Networks Scores $70M Series B Investment

• 5 Russia-Linked Groups Target Ukraine in Cyberwar

• Mac Attack: North Korea’s Lazarus APT Targets Apple’s M1 Chip

• Google blocked the largest Layer 7 DDoS reported to date

• Signal / Twilio Incident – How Secure Are SMS Verifications? Experts Weigh In

• 2022 OT Attack Vectors – Phishing, Scanning & Brute Force

• Expert On Report Showing 297% Increase In US Breaches Tied To Supply Chain And Third-party Suppliers

• How to Automate Security Scanning for Greater Efficiency

• Cybersecurity | How to Become a Cybersecurity Expert

• How phishing attacks are exploiting Amazon Web Services

• Estonia Blocks Cyberattacks Claimed by Russian Hackers

• What is identity sprawl and how can it be managed?

• Researchers Detail Evasive DarkTortilla Crypter Used to Deliver Malware

• Our Responsible Approach to Governing Artificial Intelligence

• Dive deep into NAT gateway’s SNAT port behavior

• Hardware-based threat defense against increasingly complex cryptojackers

• Police Arrest Four Over BT Cable Theft In North Yorkshire

• Keeping the keys to the kingdom secure

• Browser extension threat targets millions of users

• Google Blocks Third Record Breaking DDoS Attack In As Many Months

• Ring Patched An Android Bug That Could Have Exposed Video Footage

• Hacker Tournament Brings Together World’s Best In Las Vegas

• Update Chrome Now To Patch Actively Exploited Zero Day

• APT Lazarus Targets Engineers With macOS Malware

• Apple Patches Two Actively Exploited Vulns in Monterey 12.5.1, iOS and iPadOS 15.6.1

• Submit Your Comments to NIST Regarding HIPAA Security

• Estonia faces Russian Cyber Attack for removing Soviet World War 3 Monument

• Iteris Selected by Virginia Department of Transportation for Connected and Automated Vehicle Initiative

• Why Digital ID Should be On the Vacation Checklist

• How to reduce your exposure & secure your data in the cloud in 5 quick ways

• UK Staff Resisting ‘Big Return’ To The Office, Says infinitSpace

• Researchers Bypassed Android 13’s New ‘Restricted Setting’ Security Feature

• Google blocks third record-breaking DDoS attack in as many months

• PayPal Phishing Scam Uses Invoices Sent Via PayPal

• Hackers Deploy Bumblebee Loader to Breach Target Networks

• Connect with Microsoft Security experts at the 2022 Gartner Identity & Access Management Summit

• Apple Axes 100 Recruiters, Amid Hiring Slowdown – Report

• Back to school: Are your kids’ devices ready for school?

• Cisco Squashes High-Severity Bug in Web Protection Solution

• Russian Use of Cyberweapons in Ukraine and the Growing Threat to the West

• S3 Ep96: Zoom 0-day, AEPIC leak, Conti reward, heathcare security [Audio + Text]

• China-backed APT41 Hackers Targeted 13 Organisations Worldwide Last Year

• BlackByte ransomware v2 is out with new extortion novelties

• Research And Expert Comments On TA558 Targeting Hospitality.

• Open Source U.K. Government Websites Are Vulnerable

• Criminals Are Posting Counterfeit Microsoft Products To Get Access To Victims’ Computers, Expert Weighs In

• FTC Investigates Amazon Prime, But Firm Hits Out At FTC Staff Conduct

• NIST to release new playbook for AI best practices

• ATMZOW JS Sniffer Campaign Linked to Hancitor Malware

• Summertime Blues: TA558 Ramps Up Attacks on Hospitality, Travel Sectors

• Which Security Bugs Will Be Exploited? Researchers Create an ML Model to Find Out

• Don’t let Janet Jackson’s ‘Rhythm Nation’ crash your old laptop

• Google Play malware: If you’ve downloaded these malicious apps, delete them immediately

• Google Patches Chrome’s Fifth Zero-Day of the Year

• Don’t leave open source open to vulnerabilities

• Microsoft: Janet Jackson’s ‘Rhythm Nation’ assigned CVE-2022-38392 for crashing laptops

• North Korean Hackers Use Fake Job Offers to Deliver New macOS Malware

• Quarter of All Gambling Sites Hit by DDoS Attacks in June

• OpenSSF Announces 13 New Members Committed to Strengthening the Security of the Open Source Software Supply Chain

• How to Upskill Tech Staff to Meet Cybersecurity Needs

• The Chatter Podcast: Gone with the Wind, Hitler, and America First with Sarah Churchwell

• Can Trump just declare nuclear secrets unclassified?

• Donald Trump and the Espionage Act

• Top 3 OWASP Vulnerabilities and How to Deal With Them

• A step‑by‑step guide to enjoy LinkedIn safely

• How to Use Signal Encrypted Messaging

• North Korean Threat Group Lazarus Up To Old Tricks With New Malware Attack Targeting Mac OS Systems

• Heimdal® Is a Finalist at the Computing Security Awards 2022 in Eight Categories

• Ring Android app flaw allowed access to camera recordings

• The first ever issue with my Pi-hole, and I don’t know what happened…

• Evasive ‘DarkTortilla’ Crypter Delivers RATs, Targeted Malware

• Russian cyber attacks on Ukraine driven by government groups

• Vulnerability in Amazon Ring app allowed access to private camera recordings

• 4 Ways Technology Is Influencing Social Media

• SynSaber Raises $13 Million for OT Asset and Network Monitoring Solution

• USB “Rubber Ducky” Attack Tool

• Threat Group Ramps-Up Attacks on Travel Sector in 2022

• Here Comes BlackByte Ransomware 2.0

• Streaming Impact On Broadcast TV Revealed In Latest Ofcom Study

• Share Your Check Point Certification Badges Using Blockchain Technology

• Penetration Testing or Vulnerability Scanning? What’s the Difference?

• Hackers Using Bumblebee Loader to Compromise Active Directory Services

• Malicious PyPI Packages Surface, Attack Discord and Roblox

• Hacker stole the records of 5.4 million Twitter users

• Russia-linked cyber groups used commercial security tools to target Ukraine, report states

• Russian Man Extradited to US for Laundering Ryuk Ransomware Money

• Google Cloud Adds Curated Detection to Chronicle

• SentinelOne Partners with Armis for Unparalleled Asset Intelligence

• APT41 group: 4 malicious campaigns, 13 victims, new tools and techniques

• Apple fixes exploited zero-days: Update your devices! (CVE-2022-32894, CVE-2022-32893)

• Car Hacks, Facebook Tracks, and Windows on Macs – Intego Mac Podcast Episode 253

• South Staffordshire Water Confirms Hacker Attack

• Researchers Find 35 Adware Apps on Google Play

• The Family That Mined the Pentagon’s Data for Profit

• Warning!! New Chrome 0-Day Bug Being Exploited In The Wide

• Suspected Russian Money Launderer Extradited to US

• Two Critical Vulnerabilities Patched by Apple

• DigitalOcean Discloses Impact From Recent Mailchimp Cyberattack

• Apple fixed two new zero-day flaws exploited by threat actors

• Organizations are losing cyber insurance as an important risk management tool

• Do you know what your supply chain is and if it is secure?

• Google Address Another Zero-Day Vulnerability In Chrome Browser

• Online scams: The majority of Americans have been targeted

• PoC exploit code for critical Realtek RCE flaw released online

• Ransomware attack on UK water company clouded by confusion

• Deluge of of entries to Spamhaus blocklists includes ‘various household names’

• IoT: The huge cybersecurity blind spot that’s costing millions

• Janet Jackson music video declared a cybersecurity vulnerability

• New Google Chrome Zero-Day Flaw Being Exploited in the Wild

• North Korea hackers impersonating Coinbase to lure employees and customers

• Security automation can save millions otherwise incurred through data breaches

• Janet Jackson music video declared a cybersecurity vulnerability and assigned a CVE

• Web3 is in chaos and metaverses are in their own walled gardens, says Randi Zuckerberg

• How government CISOs tackle digital transformation initiatives

• Why smart factories need to prioritize cybersecurity

• Apple Releases Security Updates to Patch Two New Zero-Day Vulnerabilities

• A pragmatic approach to risk management & resilience

• Are cloud containers a sugar-coated threat?

• The evolution of Zero Trust with AT&T: the ZTNA 2.0 advantage

• Malicious Browser Extensions Targeted Over 7 Million Users

• Raytheon launches secure watch and data service for government and military employees

• Transmit Security expands CIAM capabilities to improve fraud detection and identity verification for users

• Identity crimes reach all-time high

• The factors driving today’s accelerated zero trust adoption

• The State of Security: SIEM in 2022

• Datadog expands support for Microsoft SQL Server and Azure database services

• Safe Security releases two assessment tools to enable discussions about risk and coverage requirements

• Apple patches double zero-day in browser and kernel – update now!

• Stratodesk and Davenport Group collaborate to provide end-to-end IT solutions for enterprises

• Tanium joins Microsoft Intelligent Security Association to strengthen IT security for customers

• IronNet partners with CISA to improve nation’s cyber defense

• How to secure a Windows PC for your kids

• Ransomwater confusion, does the criminal know who the victim is?

• Update Chrome now! Google issues patch for zero day spotted in the wild

• Nearly 2,000 Signal users affected by Twilio phishing attack

• $6 million heist targets video game skin trading site

Generated on 2022-08-19 23:55:27.657281