IT Security News Daily Summary 2022-10-07

• Biden Administration implements data protection framework U.S.-EU data sharing

• CHIPS grants focus on seeding tech ecosystems

• How to protect your Firefox saved passwords with a Primary Password

• Report: Big U.S. Banks Are Stiffing Account Takeover Victims

• CISA plans local events to discuss cyber incident reporting

• New satellite mapping with AI can quickly pinpoint hurricane damage across an entire state to spot where people may be trapped

• City tests smart loading zones

• CISA lists top vulnerabilities exploited by Chinese hackers

• Cybersecurity Will Account for Nearly One-Quarter of AI Software Market Through 2025

• 5 Tips & Tools For Managing Your Next Engineering Project

• Binance robbed of $600 million in crypto-tokens

• The EU Mandates USB-C Ports – Intego Mac Podcast Episode 260

• Hackers Using a Custom Malware to Steal Sensitive Data From a U.S. Organization

• SUSE: 2022:3549-1 important: cyrus-sasl

• BeReal has some major privacy issues

• 10 blind spots in your SMB’s cyber defense

• Perimeter security vs. zero trust: It’s time to make the move

• CrowdSec believes using an IDS is the key to stopping hackers

• Labor Department, USPS team up on ID proofing

• Australia moots changes to privacy laws after Optus data breach

• Biden’s Privacy Order Slaps a Band-Aid on the EU-US Data Crisis

• The Uber Data Breach Conviction Shows Security Execs What Not to Do

• “Egypt Leaks” – Hacktivists are Leaking Financial Data

• A look at the 2020–2022 ATM/PoS malware landscape

• OnionPoison – Fake Tor Browser Installer Spreading Malware Via YouTube

• SUSE: 2022:3550-1 important: xmlgraphics-commons

• 2022-10-04 – HTML smuggling –> IcedID (Bokbot) –> Cobalt Strike

• Report: 80% of popular mobile apps collect data on your messages

• State Department issues $3.5B in EIS task orders

• State beefs up gun crime data analysis

• Relentless Russian Cyberattacks on Ukraine Raise Important Policy Questions

• Avast releases a free decryptor for some Hades ransomware variants

• Digital Rights Updates with EFFector 34.5

• Low-To-High-Side Development in The Public Sector

• Admin from hell facing 10 years for sabotaging ex-employer’s network

• NetWalker ransomware scumbag jailed for 20 years

• Former Uber CSO convicted for covering up massive 2016 data theft

• OneDrive DLL Sideloading vulnerability exploited in the wild

• FBI and CISA Publish a PSA on Information Manipulation Tactics for 2022 Midterm Elections

• It’s E-Rate Prep Season — Shore Up Your Cybersecurity Defenses

• UK populace beware of this promotional Cyber Fraud

• Fedora 36: nheko 2022-1fd94a54a1

• Need for secure cloud environments continues to grow, as NetSPI raises $410M

• National Archives plans CX research

• Improving federal CX requires a shift toward automation

• Next-gen health info exchange enables more data-informed decisions, better care

• NASCIO: States must ‘hyper-focus’ on IT modernization

• How to encrypt a folder in MacOS to keep sensitive data from prying eyes

• Software supply chains at risk: The account takeover threat

• network security

• Ransomware attacks ravage schools, municipal governments

• APTs compromised defense contractor with Impacket tools

• Secure Your Application Layer, Secure Your Business

• CISA: Multiple APT Groups Infiltrate Defense Organization

• Ikea Smart Light System Flaw Lets Attackers Turn Bulbs on Full Blast

• State Bar of Georgia Notifies Members and Employees of Cybersecurity Incident

• FBI and CISA Publish a PSA on Information Manipulation Tactics for 2022 Midterm Elections

• New Maggie malware already infected over 250 Microsoft SQL servers

• October Is Cybersecurity Awareness Month

• Palo Alto Networks — HashiCorp Partner of the Year for Technology

• 2K Warns Users Their Info Was Stolen Due To A Help Desk Breach

• The Fifth Circuit Holds That DACA Exceeds Executive Authority

• Copyright Trolls Target Users in Brazil, Threatening Due Process and Data Protection Rights. Civil Society Groups Are There to Help

• Overcoming Security Hurdles for IOT Projects

• Cyber-snoops broke into US military contractor, stole data, hid for months

• Ferrari Refutes Ransomware Attack Following RansomEXX’s Online Claims

• OnionPoison: Malicious Tor Browser Installer Distributed through YouTube Video

• Attackers Exploiting Unpatched RCE Flaw in Zimbra Collaboration Suite

• Zinc APT is Conducting an Attack Against Victims in Critical Sectors

• Glut of Fake LinkedIn Profiles Pits HR Against the Bots

• LofyGang Group Linked to Recent Software Supply Chain Attacks

• Patch Now: Fortinet FortiGate & FortiProxy Contain Critical Vuln

• Derechos Digitales Raises the Bar for Chilean ISPs’ Privacy Commitments in New Report

• Fake Tor browser Containing Spyware Target Chinese Residents

• Comm100 Chat Service Hacked In A Supply-Chain Attack

• How Water Labbu Exploits Electron-Based Applications

• Micron To Spend Up To $100 Billion To Build New York Chip Fab

• Amazon Freezes Corporate Hiring For Retail Operation

• Data Sharing ‘Cloud Act’ Starts Between US, UK

• ARM Cuts 40 Percent Of UK Staff Recruited Under Softbank – Report

• WireShark 4.0.0 Released – What’s New!!

• Fedora 36: php-twig2 2022-9d8ee4a6de

• Fedora 36: php-twig3 2022-b7dcd1cde4

• Fedora 36: expat 2022-15ec504440

• Fedora 36: seamonkey 2022-a758e9293f

• Fedora 36: poppler 2022-f79aa2bae9

• Ransomware: This is how half of attacks begin, and this is how you can stop them

• CISOs, boards not always on the same page

• KKR Boosts NetSPI Stake with $410 Million Investment

• Biden Signs Executive Order on US-EU Personal Data Privacy

• Top zero-trust certifications and training courses

• WhatsApp goes after Chinese password scammers via US court

• Microsoft’s Fix Fails to Patch ProxyNotShell RCE Flaws

• NetSPI Raises $410 Million in Growth Funding from KKR

• Giving Away the Keys to Your Backups? Here’s How to Keep Out Hackers

• NullMixer Dropper Delivers a Multimalware Code Bomb

• LofyGang Uses 100s of Malicious NPM Packages to Poison Open Source Software

• Russian Hacker Arrested In India For Helping Students Cheat In Exam

• No Shangri-La For You: Top Hotel Chain Confirms Data Leak

• DOJ Not Happy With Probation Sentence For Capital One Hacker

• Feds Ink $26 Million Contract For Deception Platform For Defense

• The AI Bill of Rights Makes Uneven Progress on Algorithmic Protections

• Imperva DSF Secures Your Data in Amazon Web Services Enterprise Data Lakes

• Detecting and preventing LSASS credential dumping attacks

• Report: Mexico Continued to Utilize Spyware Against Activists

• Pegasus: Spyware Attacks Targets Journalists and Activists

• Ransomware is Now the Top Attack Vector Due to Bug Exploitation

• Trojanized Comm100 Live Chat App Installer Distributed a JavaScript Backdoor

• Telstra Struck by Data Breach Exposing 30,000 Employees’ Data

• Generational Equity Advises Computers & Networks in its Sale to eResources

• CORRECTING and REPLACING Endeavour Taps Dispersive to Deliver Network Cybersecurity for Sustainable Infrastructure Across North America and Europe

• Endace Awarded “Incident Forensics Solution of the Year” in 6th Annual CyberSecurity Breakthrough Awards Program

• Ransomware – undeniably top of mind

• UK Flags Concern Over Viasat Purchase Of Inmarsat

• Cake DeFi Added Ethereum Staking Service to Allow Unstaking Anytime

• World’s Leading Blockchain DeFiChain Announces Adding Four New dTokens

• incident response

• Businesses in Canada Warned Not to Overlook Cybersecurity As Recession Looms

• Russian Sanctions Instigator Lloyd’s Possibly Hit by Cyber-Attack

• RCE on Log4j Among Top CVEs Exploited By Chinese-Backed Hackers

• Fortinet urges customers to immediately fix a critical authentication bypass flaw in FortiGate and FortiProxy

• Getting Ahead Of The Latest Threat By Perception Point

• What is Ransomware 3.0? An Advanced Extortion Technique?

• Top 10 Programming Languages to Use in Cyber Security Programming

• Seattle Woman Gets Probation for Massive Capital One Hack

• US Government Details Tools Used by APTs in Defense Organization Attack

• Iranian Hackers Target Enterprise Android Users With New RatMilad Spyware

• SecurityWeek to Host 2022 ICS Cybersecurity Conference October 24-27 in Atlanta

• SCADA Systems Involved in Many Breaches Suffered by US Ports, Terminals

• Uber Guilty Verdict Raises Security Stakes for CSOs

• RatMilad Spyware Scurries onto Enterprise Android Phones

• FBI and CISA Publish a PSA on Malicious Cyber Activity Against Election Infrastructure

• Open source incident response solutions

• Modified Version Of Tor Browser Spies On Chinese Users

• Binance Says $100 Million Of Crypto Produced Out Of Thin Air By Hackers

• Biden Signs Order For EU – U.S. Data Privacy Framework

• Beyond Deportation

• Most Common U.S. Security Issues Exploited by Chinese Hackers Since 2020

• Hackers Are Using ‘App Mode’ in Chromium Browsers for Phishing

• What Is Unified Endpoint Security (UES)?

• Shares of Cyberpunk 2077 publisher surge after announcing a slew of new games

• Utility security is so bad, US DoE offers rate cuts to improve it

• Telecom Giant Optus Suffers Data Breach, Leaking Info of Million Customers

• Data Breach at City of Tucson Affected 123,500 Users

• Hornetsecurity Research Reveals Microsoft Teams Security and Backup Flaws With Nearly Half of Users Sharing Business-Critical Information on the Platform

• Why Do Businesses Need Endpoint Protection to Protect Data and Business?

• Apple Wins Huge Reduction Of French Antitrust Fine

• New TrollStore Tool Permanently Installs Apps on Non-Jailbroken iOS Devices

• Is My Child Safe Online? Common Cyber Threats And How To Avoid Them

• New Powerful RatMilad Malware Steals Almost Every Data From Android Device

• SUSE: 2022:2468-1 bci/python Security Update

• Defending digital freedom in times of cyberwar

• Robocalls: FCC cracks the whip

• ESET Threat Report T2 2022

• Complying with the Egypt Financial Cybersecurity Framework: What you Should Know

• Shadow IT: Fear it or embrace it?

• Mobile Ecosystem Forum CEO talks privacy, security and the future of the mobile industry

• Canadian NetWalker Ransomware Affiliate Gets 20-Year Prison Sentence in US

• RealDefense Raises $30 Million to Acquire More Privacy, Cybersecurity Firms

• Meta Warns of Password Stealing Phone Apps

• Cyberinsurance Startup Elpha Secure Raises $20 Million

• VMware Patches Code Execution Vulnerability in vCenter Server

• communication plan

• Why Don’t CISOs Trust Their Employees?

• 7 Practical Considerations for Effective Threat Intelligence

• We Can Save Security Teams From Crushing Workloads. Will We?

• Want More Secure Software? Start Recognizing Security-Skilled Developers

• FBI, CISA, and NSA Reveal How Hackers Targeted a Defense Industrial Base Organization

• Telstra Telecom Suffers Data Breach Potentially Exposing Employee Information

• Experts Warn of New RatMilad Android Spyware Targeting Enterprise Devices

• Facebook Detects 400 Android and iOS Apps Stealing Users Log-in Credentials

• Why Don’t You Go Dox Yourself?

• What is the Confidential Containers project?

• What Is the Controversy on Repatriations From Syria About?

• Meta Law Suit Against Chinese Devs Over WhatsApp Malware Plot

• Newly Discovered Android Spyware ‘RatMilad’ Targets Enterprise Devices in Iran

• Uber’s Former Security Chief Convicted for Covering Data Breach

• Don’t let your employees become the weakest link

• China upgrades Great Firewall to defeat censor-beating TLS tools

• Cheerscrypt Spyware Attributed to Chinese APT Entity

• Elon Musk Halts Fight, Agrees To Buy Twitter At Original Asking Price

• White House Publishes Blueprint For AI ‘Bill Of Rights’

• Judge Delays Trial, As Musk Says Twitter Won’t Take Yes For Answer

• Polkadot Investors Can Now Participate In Governance Using Bitcoin Suisse’s Custodial Cold Storage Solution

• Intrusion Detection System (IDS) and Its Detailed Working Function – SOC/SIEM

• Fedora 35: php 2022-afdea1c747

• Fedora 35: booth 2022-e0a87993b8

• Fedora 35: php-twig 2022-4490a4772d

• Fedora 35: php-twig2 2022-d39b2a755b

• Fedora 35: php-twig3 2022-e915614918

• Why web apps are one of this year’s leading attack vectors

• Microsoft warns of password attacks against Exchange Online, here’s what you need to do

• NSA, FBI warning: Beware these 20 software flaws most used by hackers

• CyberRatings.org Invites Industry Participation in Forthcoming Enterprise Firewall and Data Center Firewall Tests

• LofyGang Distributed ~200 Malicious NPM Packages to Steal Credit Card Data

• The essentials of GRC and cybersecurity — How they empower each other

• Uncommon infection and malware propagation methods

• BOD 23-01 – Fed Civilian Agencies Must Report Network Vulns To CISA – Expert Comments

• Comment: Critical Packagist Vulnerability Opened Door for PHP Supply Chain Attack

• Hackers Use Customized Malware to Steal U.S. Defense Data

• Modified version of Tor Browser spies on Chinese users

• Google helps Android users remove personal data from search results

• How Zero Trust Improves Ransomware Response

• Industry Reactions to Conviction of Former Uber CSO Joe Sullivan: Feedback Friday

• Meta Says It Has Busted More Than 400 Login-Stealing Apps This Year

• Facebook users warned: You may have downloaded these password-stealing Android and iOS apps

• Binance Bridge Hit by $560 Million Hack

• Canadian Netwalker Ransomware Affiliate Sentenced to 20 Years in U.S. Prison

• Hacker Steals $566 Million Worth Of Crypto From Binance Bridge

• Phishing Campaigns Target Major Fast Food Chains in Saudi Arabia, UAE, Singapore

• New CIISec Initiative Aims to Strengthen UK’s Nuclear Cybersecurity Posture

• Organizations Urged to Patch Vulnerabilities Commonly Targeted by Chinese Cyberspies

• The Fight to Cut Off the Crypto Fueling Russia’s Ukraine Invasion

• Spyware Maker Intellexa Sued by Journalist

• New Telecoms Security Framework Comes Into Force

• LilithBot: New Malware-as-a-Service Made Available on Telegram

• $566 Million Worth of Cryptocurrency Stolen by Hacker on Binance Bridge

• Loads of PostgreSQL systems are sitting on the internet without SSL encryption

• 19-Year-Old Arrested for Using Leaked Optus Breach Data in SMS Scam

• PCI Pal Named “Data Security Solution Provider of the Year” in 2022 CyberSecurity Breakthrough Awards Program

• SUSE: 2022:2463-1 bci/nodejs Security Update

• SUSE: 2022:2464-1 bci/python Security Update

• SUSE: 2022:2465-1 bci/nodejs Security Update

• SUSE: 2022:2467-1 bci/python Security Update

• White House Unveils Artificial Intelligence ‘Bill of Rights’

• CrowdSec Raises $14 Million for Crowdsourced Threat Intelligence Solution

• US Warns of Foreign Disinfo Ops Ahead of Midterms

• Mitigation for Exchange Zero-Days Bypassed! Microsoft Issues New Workarounds

• Three ways Anonymous and other hacking groups are aiding mass protests in Iran

• $570 million worth of Binance’s BNB token stolen in another major crypto hack

• DoJ ‘very disappointed’ with probation sentence for Capital One hacker Paige Thompson

• South Korea cancels passport of Terraform Lab’s Do Kwon

• How to Ensure Endpoint Security and Compliance for Zero Trust

• Meta Sues Chinese Devs Over WhatsApp Malware Plot

• BlackByte Ransomware Abuses Vulnerable Windows Driver to Disable Security Solutions

• Hackers Can Use ‘App Mode’ in Chromium Browsers’ for Stealth Phishing Attacks

• Hacker stole $566 million worth of Binance Coins from Binance Bridge

• TOP 10 unattributed APT mysteries

• Emotional and physical effects of identity theft are on the rise

• Cybersecurity Flaw at ‘Baby Shark’ App Developer, Pinkfong, Causes Data Leak

• Cybersecurity Leaders Are Struggling Keeping Companies Safe

• New Visa Reports Underscore Importance of Cybersecurity Amid Shifting Threats

• Cynet Announces Partnership With TD SYNNEX

• What to Know about APIs, the “On-Ramps to the Digital World”

• How Secure is Using Open Source Components?

• The need to change cybersecurity for the next generation

• Hacker Steals Over $570m from Binance Bridge

• More than $100 million worth of Binance’s BNB token stolen in another major crypto hack

• Hardening data security in the cloud

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Mentally unstable Capital One hacker sentenced to jail term

• Beware of this RatMilad Android spying Malware

• Eternity Group Hackers Offering New LilithBot Malware-as-a-Service to Cybercriminals

• New infosec products of the week: October 7, 2022

• October 2022 Patch Tuesday forecast: Looking for treats, not more tricks

• guardDog.ai Recognized for IoT Security Innovation in 6th Annual CyberSecurity Breakthrough Awards Program

• Cyware Named “Overall SOAR Solution Provider of the Year” For Second Consecutive Year in CyberSecurity Breakthrough Awards Program

• LilithBot Malware, a new MaaS offered by the Eternity Group

• Tackling the weaknesses of smart buildings’ technology

• 3 ways enterprises can mitigate social engineering risks

• RansomEXX Gang Hacked Ferrari – Over 7GB of Internal Documents Stolen

• Top of the Pops: US authorities list the 20 hottest vulns that China’s hackers love to hit

• No Shangri-La for you: Top hotel chain confirms data leak

• All your identity needs fulfilled

• What $1B in cybersecurity funding can mean for US state, local governments

• Four Companies Offering Security Solutions for Medical Devices Named IDC Innovators

• Blackpoint Cyber Launches Four Product Updates

• The 4 best travel VPNs of 2022

• Elastic announces new features and enhancements to boost cloud-native observability

• Hammerspace announces metadata driven workflow enhancements to simplify access to global data

• Interos launches i-Score to guide corporate boards struggling with global supply chain risks

• Exabeam Ranked #23 on Newsweek’s List of the Top 100 Most Loved Workplaces For 2022

• NOAA looks to transition ground-based radio processing to the cloud

• New Malware Compromised Hundreds of Microsoft SQL Servers

• HashiCorp HCP Boundary helps organizations struggling with security as they transition to the cloud

• Veratad VX improves identity verification and analytics for business users

• Legit Security Legitify detects security and compliance issues across GitHub assets

• Veracode Container Security secures cloud-native application development

• Shadow APIs hit with 5 billion malicious requests

• VPN use skyrockets in Iran as citizens navigate internet censorship under Tehran’s crackdown

• Phosphorus enhances its xIoT security platform to strengthen enterprise device security

• Notabene SafePII prevents phishing attacks in sensitive compliance systems

• 2022-10-06 – HTML smuggling –> IcedID (Bokbot) –> Cobalt Strike

• New MSSQL Backdoor ‘Maggie’ Infects Hundreds of Servers Worldwide

• macOS Archive Utility Bug Lets Malicious Apps Bypass Security Checks

• Sharing Knowledge at 44CON

• Speaking Engagements

• Wakanim – 6,706,951 breached accounts

• Lloyd’s of London reboots after dodgy network activity detected

• 7 Biggest Cybersecurity Threats of the 21st Century

• How analyzing employee behavior can improve your cybersecurity posture

• BOD 23-01: Improving asset visibility and vulnerability detection on federal networks

• Cyberstalking, pig masks, and cockroaches: Former eBay execs are sentenced

• Data Access Agreement offers a new path for UK – US data requests

• Hundreds of Microsoft SQL servers found to be backdoored

• Fight over $1.5B Commerce IT contract goes to court

• Best Intrusion Detection and Prevention Systems (IDPS) for 2022

• Elpha Secure raises $20 million to accelerate product development

• Oort raises $15 million to defend enterprises against identity-based cyberattacks

• SecurityScorecard partners with Wordtext Systems to expand its reach in the APAC region

• NordPass joins FIDO Alliance to help change people’s habits when it comes to passwords

• Cynet collaborates with TD SYNNEX to provide businesses with automated protection against attacks

• Neeva launches in Europe to provide web users with tracking and ad free search

• Importance of Tax Automation in Digital Business

• RedHat: RHSA-2022-6838:01 Important: expat security update

• CIS Hardened Images on AWS Marketplace

• This year’s biggest cyber threats

• TMF announces $36.4M in awards

• Former Uber CSO found guilty of obstruction in attempted data breach cover-up

• FBI and CISA Publish Advisory on Malicious Cyber Activity Against Election Infrastructure

• Papa John’s sued for ‘wiretap’ spying on website mouse clicks, keystrokes

• Huge nonprofit hospital network suffers IT meltdown after ‘security incident’

• IT Security News Daily Summary 2022-10-06

• Nvidia Confirms Complete Russia Withdrawal

• RedHat: RHSA-2022-6850:01 Important: openvswitch2.11 security update

• RedHat: RHSA-2022-6839:01 Important: squid security update

• SUSE: 2022:3545-1 important: python-PyJWT

• Location Privacy: What and Why?

• Securiti creates a command center for AI-driven cloud data protection

• Innovation that widens the social safety net

• This sneaky fraud attack looks like an email forwarded by your boss

• CISA orders federal agencies to catalog their networks, and scan for bugs

• Firmware Security Company Eclypsium Raises $25 Million in Series B Funding

• Former Uber CISO Joe Sullivan Found Guilty Over Breach Cover-Up

• Personal Information of 123K Individuals Exposed in City of Tucson Data Breach

• Top zero-trust use cases in the enterprise

• Tenable shifts focus, launches exposure management platform

• Secureworks finds network intruders see little resistance

• Romance scammer and BEC fraudster sent to prison for 25 years

• Ransomware 3.0: The Next Frontier

• Aryaka Delivers Zero-Trust WAN Based on Unified SASE Architecture

• More Than 30% of All Malicious Attacks Target Shadow APIs

• Steam Gaming Phish Showcases Browser-in-Browser Threat

• Russian Hackers Shut Down US State Government Websites

• CISA Orders Federal Agencies to Regularly Track Network Assets and Vulnerabilities

• Popular YouTube Channel Caught Distributing Malicious Tor Browser Installer

• Watch out, a bug in Linux Kernel 5.19.12 can damage displays on Intel laptops

• Singapore Firms See 54 Cybersecurity Incidents Daily

• Comment: Telstra Is Rocked By A Data Breach With Hackers Gaining Access To Staff Info

• Ready Or Not, Web 3 Is Coming And With It Comes Cybersquatting 2.0

• BigID Hotspot Reporting enables organizations to visualize their riskiest data

• ManageEngine ADSelfService Plus adds MFA for UAC to secure privileged accounts

• Pradeo acquires Yagaan, strengthens its cybersecurity services unification strategy

• Massive Data Breach Exposes City of Tucson, Arizona

• A National Lab Is Promoting a “Digital Police Officer” Fantasy for Law Enforcement and Border Control

• North Korean Hackers Create Fake Job Offers to Target Industry Professionals Worldwide

• RBI Employs Tokenization to Combat Breaches

• Multiple Paths to Compromise An Environment

• Enterprise Encryption for Linux: Improve Manageability & Compliance

• AI task force aims to expand federal research opportunities beyond big tech

• Telegram Founder Alerts Public of WhatsApp Security Threats

• Digital Transformation and Risk Management Must Go Together

• What’s the Story Around Cyber Attackers and IP Cameras?

• Passwordless logins boost security for device and account access

• Turning a Pico into a Human Interface Device (HID)

• Phishing attack spoofs Zoom to steal Microsoft user credentials

• Report: Facebook Is Still Autogenerating Pages For Extremist Groups

• Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors

• Top CVEs Actively Exploited by People’s Republic of China State-Sponsored Cyber Actors   

• Secure Web Gateway (SWG) Security – SASE Part 3

• Elon Musk Slammed Over Ukraine Tweets

• Vodafone Confirms Merger Talks With Three UK

• Google Unveils Flagship Pixel 7, Pixel 7 Pro, And Pixel Watch

• How Does Threat Exposure Management Optimize Security Posture?

• Debian: DSA-5250-1: dbus security update

• Debian: DSA-5251-1: isc-dhcp security update

• Tenable: Vulnerability management is out, attack surface management is in

• Colorado state web portal still down after cyberattack

• Victims of these online crooks lacked a key security feature. Don’t make the same mistake

• The best Ring & Blink deals ahead of October Prime Day

• The State of Security: Poland

• Top 5 trends to watch in cloud security

• FBI, CISA Say Malicious Cyber Activity Unlikely to Disrupt Election

• Quantum-Safe Communications Startup Qunnect Raises $8 Million

• Hospital Chain Says ‘IT Security Issue’ Disrupts Operations

• Cisco Patches High-Severity Vulnerabilities in Communications, Networking Products

• Eclypsium Raises Series B to Protect Digital Supply Chain As Attacks Grow

• US Consumers Are Finally Becoming More Security & Privacy Conscious

• Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors

• Top CVEs Actively Exploited by People’s Republic of China State-Sponsored Cyber Actors   

• BEC Scammer Gets 25-Year Jail Sentence for Stealing Over $9.5 Million

• Back to Basics: Cybersecurity’s Weakest Link

• NSA Employee Charged with Espionage

• “Zeitenwende”: A Turning Point for German Policy Toward China?

• Attack Analytics Helps You Find the Monsters Under the Bed

• KnowBe4 Launches Cybersecurity Awareness Month University Challenge

• Fine-tuning Germany’s cybersecurity strategy

• APIs are quickly becoming the most popular attack vector

• The gap between security and privacy, and what it will take to bridge it

• Unearth offboarding risks before your employees say goodbye

• Former Uber CSO convicted for concealing data breach, theft from the authorities

• BlackByte Ransomware Disables Security Products Through BYOVD Method

• Moody’s Intensifies its Scrutiny Of the ‘Riskiest’ Sectors Of the Economy

• How to Progress in Your Cybersecurity Career

• Cyber Hygiene: 5 Tips for Company Buy-In

• BlackCat Ransomware Gang Claims to Have Hacked US Department of Defense Contractor

• SciLinux: SLSA-2022-6815-1 Important: squid on SL7.x x86_64

• SciLinux: SLSA-2022-6834-1 Important: expat on SL7.x x86_64

• Debian: DSA-5249-1: strongswan security update

• SUSE: 2022:3544-1 important: python3

• SUSE: 2022:3543-1 moderate: exiv2

• New Hacktivism Model Trends Worldwide

• Malicious cyber activity is unlikely to compromise election infrastructure

• 4 tips to achieve Data Compliance

• Keep your business totally secure with this decentralized VPN

• Insurance Giant Lloyd’s of London Investigating Cybersecurity Incident

• New ‘Maggie’ Backdoor Targeting Microsoft SQL Servers

• BlackByte Ransomware Abuses Legitimate Driver to Disable Security Protections

• The Zero Day Dilemma

• Australian Police Make First Arrest in Optus Hack Probe

• filter (computing)

• NetWalker ransomware affiliate sentenced to 20 years by Florida court

• Former Uber CSO convicted of covering up megabreach back in 2016

• S3 Ep103: Scammers in the Slammer (and other stories) [Audio + Text]

• Swatted: A Shooting Hoax Spree Is Terrorizing Schools Across the US

• Optus Hack Exposes Data of Nearly 2.1 Million Australian Telecom Customers

• The Ultimate SaaS Security Posture Management Checklist, 2023 Edition

• Details Released for Recently Patched new macOS Archive Utility Vulnerability

• Eternity Group Hackers Offering New LilithBot Malware as a Service to Cybercriminals

• Employee Volunteer Program Supports Youth Globally

• OnionPoison: infected Tor Browser installer distributed through popular YouTube channel

• Massive Multi-Vector 1.37 Tbps DDoS Attack Mitigated by Imperva DDoS Protection

• Microsoft Takes Measures Against Password Spray Attacks

• A New Android Spyware Called RatMilad Is Targeting Enterprise Devices

• Australia’s Largest Telecom Company Employees at Risk Following Telstra Breach

• Malicious Cyber Activity Targeting Election Systems: FBI Declares

• 19-Year-Old Arrested for Allegedly Using Leaked Optus Customer Data for Extortion

• Bhinneka – 1,274,340 breached accounts

• Court’s Decision Upholding Disastrous Texas Social Media Law Puts The State, Rather Than Internet Users, in Control of Everyone’s Speech Online

• Japanese sushi chain boss resigns amid accusation of improper data access

• Foreign spies hijacking US mid-terms? FBI, CISA are cool as cucumbers about it

• Trend Mirco Tracking Earth Aughisky’s Malware and Changes

• A Simple Guide to Vulnerability Triage: A Structured Approach to Vulnerability Management

• SUSE: 2022:3541-1 important: postgresql-jdbc

• SUSE: 2022:3535-1 important: slurm

• ProxyNotShell – the New Proxy Hell?

• Breaking: Scams Linked To Crypto Soared By 335%

• Governments Walk Businesses To Prepare For Ransomware

• The Problem of API Security and How To Fix It

• Mastercard pushes deeper into crypto with new tool for combating fraud

• Germany: Individual Hacker Arrested for Stealing € 4 Million via Phishing Attacks

• Iranian Hackers Employ Novel RatMilad Spyware to Target Enterprise Android Users

• Sentence For Capital One Hacker Slammed By US DoJ

• Communication breakdowns hurt otherwise positive view of federal ransomware support, GAO says

• Top 5 best practices for cloud security

• Cisco Releases Security Updates for Multiple Products

• Monitoring Your Cloud And Hybrid IT Infrastructure: How To Find The Right IT Monitoring Solution For Your Cloud-first Approach

• Responding to Cyberattacks Within 72 Hours is Essential to Taming the Chaos

• Cyber Security Framework: Back to Basics

• SUSE: 2022:3540-1 moderate: LibVNCServer

• SUSE: 2022:3532-1 important: squid

• SUSE: 2022:3531-1 important: squid

• 3 Critical Malicious Code Execution Vulnerabilities In Linux Kernel

• Security Issues With Open Source In Todays World

• How hybrid cyber insurance can help mitigate the financial risk of cybercrime

• White House seeks advice on cyber workforce development

• See Yourself in Cyber: 4 Steps to Stay Safe

• Report: Mexico Continued to Use Spyware Against Activists

• Scammers and rogue callers – can anything ever stop them?

• CISA Releases Two Industrial Control Systems Advisories

• Cisco Releases Security Updates for Multiple Products

• Over reliance on shift-left can lead us in the wrong direction

• Microsoft publishes new report on holistic insider risk management

• Evolution of LilithBot Malware and Eternity Threat Group

• Operation Chakra: CBI Searches 105 Locations, Targeting Cyber Crimes

• Top Cybersecurity Threats for Public Sector

• Insider risk: More prevalent than ever, according to Microsoft

• Chip maker commits up to $100B for U.S. manufacturing site

• Android Spyware ‘RatMilad’ Targets Enterprise Devices in Iran

• Hackers Have It Out for Microsoft Email Defenses

• A Swatting Spree Is Terrorizing Schools Across the US

• CISA Releases Two Industrial Control Systems Advisories

• Ransomware news headlines trending on Google

• How AI-driven cyber insurance can help measure the financial risk of cybercrime

• How to add an extra layer of protection in Bitwarden vault items

• Former Uber CSO Joe Sullivan found guilty in breach cover-up

• Uber’s Former Security Chief Convicted of 2016 Data Breach Cover-Up

• Russia-Linked Cybercrime Group Hawks Combo of Malicious Services With LilithBot

• Stop the Persecution: Iranian Authorities Must Immediately Release Technologists and Digital Rights Defenders

• 123K Individuals Data Exposed in Tucson Data Breach

• SWIFT Publishes Blueprint For Central Bank Digital Currency

• Quest Software Podcast: The Data Dilemma: How to Become a Data Centric Enterprise: Episode 1

• Ubuntu 5661-1: LibreOffice vulnerabilities

• School Is in Session: 5 Lessons for Future Cybersecurity Pros

• Cisco fixed two high-severity bugs in Communications, Networking Products

• Former Uber CSO Convicted For Covering Up Massive 2016 Data Theft

• RDP Attacks Decline 89% in Eight Months

• New SonicWall Survey Data Reveals 91% of Organizations Fear Ransomware Attacks in 2022

• 7 IoT Devices That Make Security Pros Cringe

• Another Healthcare Organisation Hit By Suspected Ransomware, Experts Weigh In

• The Wireless Imperative

• Air Force ready to take bids for $5.3B cyber tech vehicle

• ZINC Hackers Leverage Open-source Software to Lure IT Pros

• Contrast Security Launches Expanded Security Testing Tools for JavaScript and Popular Angular, React, and jQuery Frameworks

• Research Reveals Microsoft Teams Security and Backup Flaws, With Over Half of Users Sharing Business-Critical Information on the Platform

• City of Tucson Data Breach impacted 123,500 individuals

• Uber’s Former Security Chief Convicted Of Covering Up 2016 Data Breach

• No Fix In Sight For Loophole Plaguing a Key Windows Defense

• 70% of Security/IT Professionals Say They are Overwhelmed by the Complexity of their Authentication Systems

• Atlassian, Microsoft bugs on CISA’s must-patch list after exploitation spree

• Giveaways for every security professional

• Zelle Fraud Is On The Rise And Many Victims Are Denied Refunds

• NetWalker Ransomware Scumbag Jailed For 20 Years

• Toward Greater Content Moderation Transparency Reporting

• Cybersecurity Regulation: It’s Not ‘Performance-Based’ If Outcomes Can’t Be Measured

• Australian Federal Police arrest man suspected of exploiting Optus cyberattack

• Australian Security Firm G4S Hacked, Staff on Alert

• Amazon Suspends 50 Staff At Staten Island Warehouse After Fire

• How identity threat detection and response are the latest tools in cybersecurity arsenals

• Cybersecurity leaders are having a hard time keeping companies secure, and there’s no easy solution

• This sneaky ransomware attack tries to switch off your security software

• Former Uber Security Chief Found Guilty of Data Breach Coverup

• 19-Year-Old Teen Arrested for Using Leaked Optus Breach Data in SMS Scam

• Adarma Expands Executive Team During Time of Rapid Growth

• 5 Tips & Tools For Managing Your Next Engineering Project

• Apple To Move AirPods, Beats Headphone Production To India – Report

• How AI-driven cyber insurance can help measure the financial risk of cyber crime

• A Coordinated Swatting Spree Is Targeting US Schools

• 19-Year-Old man arrested for misusing leaked record from Optus Breach

• Former Uber Security Boss Found Guilty Of Breach Concealment

• Iranian Hackers Spreading RatMilad Android Spyware Disguised as VPN App

• RedHat: RHSA-2022-6820:01 Moderate: prometheus-jmx-exporter security update

• Learning from real life situations

• US Healthcare Giant CommonSpirit Hit by Possible Ransomware

• The EU Mandates USB-C Ports – Intego Mac Podcast Episode 260

• Retailer Easylife Fined £1.5m for Data Protection Breaches

• “Egypt Leaks” – Hacktivists are Leaking Financial Data

• Canadian Sentenced to 20 Years in US Prison For Ransomware Attacks

• A look at the 2020–2022 ATM/PoS malware landscape

• Do you know what your supply chain is and if it is secure?

• Australia moots changes to privacy laws after Optus data breach

• Methods to Secure your Email Account from Hackers

• Hackers Using a Custom Malware to Steal Sensitive Data From a U.S. Organization

• BeReal has some major privacy issues

• 10 blind spots in your SMB’s cyber defense

• CrowdSec believes using an IDS is the key to stopping hackers

• Penetration testing is in the eye of the beholder

• Risk counts for Cyber and here is why

• AI Robots to be hurled into earth space through Satellite Slingshots

• Uber CEO convicted for hiding 2016 data breach

• OneDrive DLL Sideloading vulnerability exploited in the wild

• Former Uber CSO convicted for covering up massive 2016 data theft

• Ubuntu 5659-1: kitty vulnerabilities

• openSUSE: 2022:10142-1 moderate: pngcheck

• Ubuntu 5660-1: Linux kernel (GCP) vulnerabilities

• Former Uber CSO convicted of covering up massive 2016 data theft

• Kim Kardashian gets huge fine for crypto ad

• Bogus job offers hide trojanised open-source software

• Admin from hell facing 10 years for sabotaging ex-employer’s network

Generated on 2022-10-07 23:55:45.775902