IT Security News Daily Summary 2022-10-08

• Binance-Linked Network Hacked, Over $570 Million in Losses Recorded

• Fedora 36: python-joblib 2022-c0bfe37ae5

• Slackware: 2022-281-01: libksba Security Update

• Russian Hackers Shut Down US State Government Websites

• Fedora 36: dotnet3.1 2022-980d492c98

• Fedora 35: dotnet3.1 2022-847c67b3cd

• Watch out, a bug in Linux Kernel 5.19.12 can damage displays on Intel laptops

• BlackByte Ransomware abuses vulnerable driver to bypass security solutions

• US Government Says Election Hacking Does Not Pose Any Threat

• 8 Cybersecurity trends to be aware of in 2022/2023

• Laminar Launches Laminar Labs to Shine Light on Shadow Data, Cloud Security Risks

• Massive Data Breach Exposes City of Tucson, Arizona

• A National Lab Is Promoting a “Digital Police Officer” Fantasy for Law Enforcement and Border Control

• UGC Offers Cyber Security Program for UG&PG Students

• Phishing Attack Spoofs Zoom to Steal Microsoft User Credentials

• What is Data-as-a-Service (DaaS)? Understanding the benefits, and common use cases

• AI task force aims to expand federal research opportunities beyond big tech

• Malicious Actors Are Exploiting ‘App Mode’ in Chromium Browsers for Phishing Attacks

• Telegram Founder Alerts Public of WhatsApp Security Threats

• Digital Transformation and Risk Management Must Go Together

• Secure Web Gateway (SWG) Security – SASE Part 3

• Passwordless logins boost security for device and account access

• Colorado state web portal still down after cyberattack

• The State of Security: Poland

• Turning a Pico into a Human Interface Device (HID)

• Phishing attack spoofs Zoom to steal Microsoft user credentials

• Report: Facebook Is Still Autogenerating Pages For Extremist Groups

• Email Defenses Under Siege: Phishing Attacks Dramatically Improve

• Google Unveils Flagship Pixel 7, Pixel 7 Pro, And Pixel Watch

• What is torrenting and how does it work?

• Facebook Warns 1 Million Users That Their Account Info May Have Been Compromised By Scammy Apps

• Unpatched remote code execution flaw in Zimbra Collaboration Suite actively exploited

• Binance Hackers Minted $569M in Crypto—Then It Got Complicated

• SUSE: 2022:2472-1 suse/sle15 Security Update

• FBI, CISA Say Malicious Cyber Activity Unlikely to Disrupt Election

• Over 400 Malicious Android & iOS Apps Stealing Facebook Passwords

• SUSE: 2022:2473-1 suse/sle15 Security Update

• The best Ring & Blink deals ahead of October Prime Day

• Hospital Chain Says ‘IT Security Issue’ Disrupts Operations

• Biden’s Privacy Shield 2.0 order may not satisfy Europe

• Former Uber CSO Convicted for Covering up 2016 Data Breach

• SUSE: 2022:2471-1 suse/sle15 Security Update

• Quantum-Safe Communications Startup Qunnect Raises $8 Million

• Cisco Patches High-Severity Vulnerabilities in Communications, Networking Products

• Dex: ID Service Patches Bug that Allows Unauthorized Access to Client Applications

• Does a Trading Computer Need an SSD – 7 Things to Know

• US Consumers Are Finally Becoming More Security & Privacy Conscious

• Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors

• Hackers Exploiting Unpatched RCE Flaw in Zimbra Collaboration Suite

• Top CVEs Actively Exploited by People’s Republic of China State-Sponsored Cyber Actors   

• Make your neighbor think their house is haunted by blinking their Ikea smart bulbs

• Build or Buy your own antivirus product

• Microsoft Issues Improved Mitigations for Unpatched Exchange Server Vulnerabilities

• Cloud Platforms Require Stringent Cybersecurity: ISG

• filter (computing)

• S3 Ep103: Scammers in the Slammer (and other stories) [Audio + Text]

• BlackByte Ransomware Disables Security Products Through BYOVD Method

• Cisco Patched High Severity Bugs in Networking and Communications Products

• Cyber Hygiene: 5 Tips for Company Buy-In

• Malicious cyber activity is unlikely to compromise election infrastructure

• The 3 best free VPNs (and why you get what you pay for)

• 4 tips to achieve Data Compliance

• Former Uber CSO convicted of covering up megabreach back in 2016

• Swatted: A Shooting Hoax Spree Is Terrorizing Schools Across the US

• Details Released for Recently Patched new macOS Archive Utility Vulnerability

• Centralized Privacy Center: The key to meeting data privacy obligations

• New U.S.-E.U. data privacy framework focuses on limiting U.S. surveillance

• The 4 best VPN services for torrenting in 2022

• Frost & Sullivan Names Palo Alto Networks Global SASE Leader

• Insurance Giant Lloyd’s of London Investigating Cybersecurity Incident

• New ‘Maggie’ Backdoor Targeting Microsoft SQL Servers

• BlackByte Ransomware Abuses Legitimate Driver to Disable Security Protections

• The Zero Day Dilemma

• Australian Police Make First Arrest in Optus Hack Probe

• The Ultimate SaaS Security Posture Management Checklist, 2023 Edition

• Employee Volunteer Program Supports Youth Globally

• Security Issues With Open Source In Todays World

• CISA Releases Two Industrial Control Systems Advisories

• Cisco Releases Security Updates for Multiple Products

• Breaking: Scams Linked To Crypto Soared By 335%

• Governments Walk Businesses To Prepare For Ransomware

• The Problem of API Security and How To Fix It

• Massive Multi-Vector 1.37 Tbps DDoS Attack Mitigated by Imperva DDoS Protection

• Microsoft Takes Measures Against Password Spray Attacks

• A New Android Spyware Called RatMilad Is Targeting Enterprise Devices

• Australia’s Largest Telecom Company Employees at Risk Following Telstra Breach

• Malicious Cyber Activity Targeting Election Systems: FBI Declares

• 19-Year-Old Arrested for Allegedly Using Leaked Optus Customer Data for Extortion

• Bhinneka – 1,274,340 breached accounts

• Court’s Decision Upholding Disastrous Texas Social Media Law Puts The State, Rather Than Internet Users, in Control of Everyone’s Speech Online

• Foreign spies hijacking US mid-terms? FBI, CISA are cool as cucumbers about it

• Iranian Hackers Employ Novel RatMilad Spyware to Target Enterprise Android Users

• Trend Mirco Tracking Earth Aughisky’s Malware and Changes

• What Is Smishing? Here’s How to Spot Fake Texts and Keep Your Info Safe

• Key takeaways from ESET Threat Report T2 2022 – Week in security with Tony Anscombe

• Semtech’s LoRa Connect optimizes CWD Limited’s dual combo module for IoT device connectivity

• Sentence For Capital One Hacker Slammed By US DoJ

• Debian LTS: DLA-3139-1: knot-resolver security update

• Debian LTS: DLA-3140-1: libpgjava security update

• 3 Critical Malicious Code Execution Vulnerabilities In Linux Kernel

• How hybrid cyber insurance can help mitigate the financial risk of cybercrime

• Communication breakdowns hurt otherwise positive view of federal ransomware support, GAO says

• How to add an extra layer of protection in Bitwarden vault items

• Top 5 best practices for cloud security

• Former Uber CSO Joe Sullivan found guilty in breach cover-up

• RDP Attacks Decline 89% in Eight Months

• Uber’s Former Security Chief Convicted of 2016 Data Breach Cover-Up

• Android Spyware ‘RatMilad’ Targets Enterprise Devices in Iran

• 7 IoT Devices That Make Security Pros Cringe

• School Is in Session: 5 Lessons for Future Cybersecurity Pros

• Monitoring Your Cloud And Hybrid IT Infrastructure: How To Find The Right IT Monitoring Solution For Your Cloud-first Approach

• Over reliance on shift-left can lead us in the wrong direction

• Android vulnerabilities could allow arbitrary code execution

• Responding to Cyberattacks Within 72 Hours is Essential to Taming the Chaos

• 123K Individuals Data Exposed in Tucson Data Breach

• Permutive and PubMatic partner to maintain control and safety over data

• Kyndryl and Microsoft collaborate to help customers move their mainframe data to the cloud

• SWIFT Publishes Blueprint For Central Bank Digital Currency

• Quest Software Podcast: The Data Dilemma: How to Become a Data Centric Enterprise: Episode 1

• Top Cybersecurity Threats for Public Sector

• SUSE: 2022:3552-1 ImageMagick

• Insider risk: More prevalent than ever, according to Microsoft

• Chip maker commits up to $100B for U.S. manufacturing site

• New SonicWall Survey Data Reveals 91% of Organizations Fear Ransomware Attacks in 2022

• Russia-Linked Cybercrime Group Hawks Combo of Malicious Services With LilithBot

• Hackers Have It Out for Microsoft Email Defenses

• Cisco fixed two high-severity bugs in Communications, Networking Products

• Another Healthcare Organisation Hit By Suspected Ransomware, Experts Weigh In

• Former Uber CSO Convicted For Covering Up Massive 2016 Data Theft

• Evolution of LilithBot Malware and Eternity Threat Group

• Operation Chakra: CBI Searches 105 Locations, Targeting Cyber Crimes

• Malwarebytes’ modernized bug bounty program—here’s all you need to know

• Romance scammer given 25 years of alone time

• Microsoft publishes new report on holistic insider risk management

• Former Uber Security Boss Found Guilty Of Breach Concealment

• Apple To Move AirPods, Beats Headphone Production To India – Report

• Amazon Suspends 50 Staff At Staten Island Warehouse After Fire

• The Wireless Imperative

• Iranian Hackers Spreading RatMilad Android Spyware Disguised as VPN App

• Ubuntu 5663-1: Thunderbird vulnerabilities

• How identity threat detection and response are the latest tools in cybersecurity arsenals

• Cybersecurity leaders are having a hard time keeping companies secure, and there’s no easy solution

• This sneaky ransomware attack tries to switch off your security software

• US Healthcare Giant CommonSpirit Hit by Possible Ransomware

• Contrast Security Launches Expanded Security Testing Tools for JavaScript and Popular Angular, React, and jQuery Frameworks

• Research Reveals Microsoft Teams Security and Backup Flaws, With Over Half of Users Sharing Business-Critical Information on the Platform

• Meta Flags Malicious Android, iOS Apps Affecting 1M Facebook Users

• Former Uber Security Chief Found Guilty of Data Breach Coverup

• 19-Year-Old Teen Arrested for Using Leaked Optus Breach Data in SMS Scam

• 19-Year-Old man arrested for misusing leaked record from Optus Breach

• City of Tucson Data Breach impacted 123,500 individuals

• Uber’s Former Security Chief Convicted Of Covering Up 2016 Data Breach

• No Fix In Sight For Loophole Plaguing a Key Windows Defense

• Zelle Fraud Is On The Rise And Many Victims Are Denied Refunds

• NetWalker Ransomware Scumbag Jailed For 20 Years

• Toward Greater Content Moderation Transparency Reporting

• Cybersecurity Regulation: It’s Not ‘Performance-Based’ If Outcomes Can’t Be Measured

• Adarma Expands Executive Team During Time of Rapid Growth

• 70% of Security/IT Professionals Say They are Overwhelmed by the Complexity of their Authentication Systems

• Learning from real life situations

• Australian Federal Police arrest man suspected of exploiting Optus cyberattack

• Australian Security Firm G4S Hacked, Staff on Alert

• Credential Harvesting Is Retail Industry’s Top Threat

• VMware fixed a high-severity bug in vCenter Server

• SirionLabs appoints Evangelos Apostolou as General Counsel

• How Will the Metaverse Affect Cloud Security?

• Are software bills of materials ready for prime time?

• Soldiers can use their phones for work under new Army pilot

• 2022 State of the Threat: Ransomware is still hitting companies hard

• Weekly Update 316

• Fortinet Warns of New Auth Bypass Flaw Affecting FortiGate and FortiProxy

• IT Security News Daily Summary 2022-10-07

• Biden Administration implements data protection framework U.S.-EU data sharing

• CHIPS grants focus on seeding tech ecosystems

• How to protect your Firefox saved passwords with a Primary Password

• Report: Big U.S. Banks Are Stiffing Account Takeover Victims

• CISA plans local events to discuss cyber incident reporting

• New satellite mapping with AI can quickly pinpoint hurricane damage across an entire state to spot where people may be trapped

• City tests smart loading zones

• CISA lists top vulnerabilities exploited by Chinese hackers

• Cybersecurity Will Account for Nearly One-Quarter of AI Software Market Through 2025

• 5 Tips & Tools For Managing Your Next Engineering Project

• Binance robbed of $600 million in crypto-tokens

• The EU Mandates USB-C Ports – Intego Mac Podcast Episode 260

• Hackers Using a Custom Malware to Steal Sensitive Data From a U.S. Organization

• SUSE: 2022:3549-1 important: cyrus-sasl

• BeReal has some major privacy issues

• 10 blind spots in your SMB’s cyber defense

• Perimeter security vs. zero trust: It’s time to make the move

• CrowdSec believes using an IDS is the key to stopping hackers

• Labor Department, USPS team up on ID proofing

• Australia moots changes to privacy laws after Optus data breach

• Biden’s Privacy Order Slaps a Band-Aid on the EU-US Data Crisis

• The Uber Data Breach Conviction Shows Security Execs What Not to Do

• “Egypt Leaks” – Hacktivists are Leaking Financial Data

• A look at the 2020–2022 ATM/PoS malware landscape

• OnionPoison – Fake Tor Browser Installer Spreading Malware Via YouTube

• SUSE: 2022:3550-1 important: xmlgraphics-commons

• 2022-10-04 – HTML smuggling –> IcedID (Bokbot) –> Cobalt Strike

• Report: 80% of popular mobile apps collect data on your messages

• State Department issues $3.5B in EIS task orders

• State beefs up gun crime data analysis

• Relentless Russian Cyberattacks on Ukraine Raise Important Policy Questions

• Avast releases a free decryptor for some Hades ransomware variants

• Digital Rights Updates with EFFector 34.5

• Low-To-High-Side Development in The Public Sector

• Admin from hell facing 10 years for sabotaging ex-employer’s network

• NetWalker ransomware scumbag jailed for 20 years

• Former Uber CSO convicted for covering up massive 2016 data theft

• OneDrive DLL Sideloading vulnerability exploited in the wild

• FBI and CISA Publish a PSA on Information Manipulation Tactics for 2022 Midterm Elections

• It’s E-Rate Prep Season — Shore Up Your Cybersecurity Defenses

• UK populace beware of this promotional Cyber Fraud

• Fedora 36: nheko 2022-1fd94a54a1

• Need for secure cloud environments continues to grow, as NetSPI raises $410M

• National Archives plans CX research

• Improving federal CX requires a shift toward automation

• Next-gen health info exchange enables more data-informed decisions, better care

• NASCIO: States must ‘hyper-focus’ on IT modernization

• How to encrypt a folder in MacOS to keep sensitive data from prying eyes

• Software supply chains at risk: The account takeover threat

• network security

• Ransomware attacks ravage schools, municipal governments

• APTs compromised defense contractor with Impacket tools

• Secure Your Application Layer, Secure Your Business

• CISA: Multiple APT Groups Infiltrate Defense Organization

• Ikea Smart Light System Flaw Lets Attackers Turn Bulbs on Full Blast

• State Bar of Georgia Notifies Members and Employees of Cybersecurity Incident

• FBI and CISA Publish a PSA on Information Manipulation Tactics for 2022 Midterm Elections

• New Maggie malware already infected over 250 Microsoft SQL servers

• October Is Cybersecurity Awareness Month

• Palo Alto Networks — HashiCorp Partner of the Year for Technology

• 2K Warns Users Their Info Was Stolen Due To A Help Desk Breach

• The Fifth Circuit Holds That DACA Exceeds Executive Authority

• Copyright Trolls Target Users in Brazil, Threatening Due Process and Data Protection Rights. Civil Society Groups Are There to Help

• Overcoming Security Hurdles for IOT Projects

• Cyber-snoops broke into US military contractor, stole data, hid for months

• Ferrari Refutes Ransomware Attack Following RansomEXX’s Online Claims

• OnionPoison: Malicious Tor Browser Installer Distributed through YouTube Video

• Attackers Exploiting Unpatched RCE Flaw in Zimbra Collaboration Suite

• Zinc APT is Conducting an Attack Against Victims in Critical Sectors

• Glut of Fake LinkedIn Profiles Pits HR Against the Bots

• LofyGang Group Linked to Recent Software Supply Chain Attacks

• Patch Now: Fortinet FortiGate & FortiProxy Contain Critical Vuln

• Derechos Digitales Raises the Bar for Chilean ISPs’ Privacy Commitments in New Report

• Fake Tor browser Containing Spyware Target Chinese Residents

• Comm100 Chat Service Hacked In A Supply-Chain Attack

• How Water Labbu Exploits Electron-Based Applications

• Micron To Spend Up To $100 Billion To Build New York Chip Fab

• Amazon Freezes Corporate Hiring For Retail Operation

• Data Sharing ‘Cloud Act’ Starts Between US, UK

• ARM Cuts 40 Percent Of UK Staff Recruited Under Softbank – Report

• WireShark 4.0.0 Released – What’s New!!

• Fedora 36: php-twig2 2022-9d8ee4a6de

• Fedora 36: php-twig3 2022-b7dcd1cde4

• Fedora 36: expat 2022-15ec504440

• Fedora 36: seamonkey 2022-a758e9293f

• Fedora 36: poppler 2022-f79aa2bae9

• Ransomware: This is how half of attacks begin, and this is how you can stop them

• CISOs, boards not always on the same page

• KKR Boosts NetSPI Stake with $410 Million Investment

• Biden Signs Executive Order on US-EU Personal Data Privacy

• Top zero-trust certifications and training courses

• WhatsApp goes after Chinese password scammers via US court

• Microsoft’s Fix Fails to Patch ProxyNotShell RCE Flaws

• NetSPI Raises $410 Million in Growth Funding from KKR

• Giving Away the Keys to Your Backups? Here’s How to Keep Out Hackers

• NullMixer Dropper Delivers a Multimalware Code Bomb

• LofyGang Uses 100s of Malicious NPM Packages to Poison Open Source Software

• Russian Hacker Arrested In India For Helping Students Cheat In Exam

• No Shangri-La For You: Top Hotel Chain Confirms Data Leak

• DOJ Not Happy With Probation Sentence For Capital One Hacker

• Feds Ink $26 Million Contract For Deception Platform For Defense

• The AI Bill of Rights Makes Uneven Progress on Algorithmic Protections

• Imperva DSF Secures Your Data in Amazon Web Services Enterprise Data Lakes

• Detecting and preventing LSASS credential dumping attacks

• Report: Mexico Continued to Utilize Spyware Against Activists

• Pegasus: Spyware Attacks Targets Journalists and Activists

• Ransomware is Now the Top Attack Vector Due to Bug Exploitation

• Trojanized Comm100 Live Chat App Installer Distributed a JavaScript Backdoor

• Telstra Struck by Data Breach Exposing 30,000 Employees’ Data

• Generational Equity Advises Computers & Networks in its Sale to eResources

• CORRECTING and REPLACING Endeavour Taps Dispersive to Deliver Network Cybersecurity for Sustainable Infrastructure Across North America and Europe

• Endace Awarded “Incident Forensics Solution of the Year” in 6th Annual CyberSecurity Breakthrough Awards Program

• Ransomware – undeniably top of mind

• UK Flags Concern Over Viasat Purchase Of Inmarsat

• Cake DeFi Added Ethereum Staking Service to Allow Unstaking Anytime

• World’s Leading Blockchain DeFiChain Announces Adding Four New dTokens

• incident response

• Businesses in Canada Warned Not to Overlook Cybersecurity As Recession Looms

• Russian Sanctions Instigator Lloyd’s Possibly Hit by Cyber-Attack

• RCE on Log4j Among Top CVEs Exploited By Chinese-Backed Hackers

• Fortinet urges customers to immediately fix a critical authentication bypass flaw in FortiGate and FortiProxy

• Getting Ahead Of The Latest Threat By Perception Point

• What is Ransomware 3.0? An Advanced Extortion Technique?

• Top 10 Programming Languages to Use in Cyber Security Programming

• Seattle Woman Gets Probation for Massive Capital One Hack

• US Government Details Tools Used by APTs in Defense Organization Attack

• Iranian Hackers Target Enterprise Android Users With New RatMilad Spyware

• SecurityWeek to Host 2022 ICS Cybersecurity Conference October 24-27 in Atlanta

• SCADA Systems Involved in Many Breaches Suffered by US Ports, Terminals

• Uber Guilty Verdict Raises Security Stakes for CSOs

• RatMilad Spyware Scurries onto Enterprise Android Phones

• FBI and CISA Publish a PSA on Malicious Cyber Activity Against Election Infrastructure

• Open source incident response solutions

• Modified Version Of Tor Browser Spies On Chinese Users

• Binance Says $100 Million Of Crypto Produced Out Of Thin Air By Hackers

• Biden Signs Order For EU – U.S. Data Privacy Framework

• Beyond Deportation

• Most Common U.S. Security Issues Exploited by Chinese Hackers Since 2020

• Hackers Are Using ‘App Mode’ in Chromium Browsers for Phishing

• What Is Unified Endpoint Security (UES)?

• Shares of Cyberpunk 2077 publisher surge after announcing a slew of new games

• Utility security is so bad, US DoE offers rate cuts to improve it

• Telecom Giant Optus Suffers Data Breach, Leaking Info of Million Customers

• Data Breach at City of Tucson Affected 123,500 Users

• Hornetsecurity Research Reveals Microsoft Teams Security and Backup Flaws With Nearly Half of Users Sharing Business-Critical Information on the Platform

• Why Do Businesses Need Endpoint Protection to Protect Data and Business?

• Apple Wins Huge Reduction Of French Antitrust Fine

• New TrollStore Tool Permanently Installs Apps on Non-Jailbroken iOS Devices

• Is My Child Safe Online? Common Cyber Threats And How To Avoid Them

• New Powerful RatMilad Malware Steals Almost Every Data From Android Device

• SUSE: 2022:2468-1 bci/python Security Update

• Defending digital freedom in times of cyberwar

• Robocalls: FCC cracks the whip

• ESET Threat Report T2 2022

• Complying with the Egypt Financial Cybersecurity Framework: What you Should Know

• Shadow IT: Fear it or embrace it?

• Mobile Ecosystem Forum CEO talks privacy, security and the future of the mobile industry

• Canadian NetWalker Ransomware Affiliate Gets 20-Year Prison Sentence in US

• RealDefense Raises $30 Million to Acquire More Privacy, Cybersecurity Firms

• Meta Warns of Password Stealing Phone Apps

• Cyberinsurance Startup Elpha Secure Raises $20 Million

• VMware Patches Code Execution Vulnerability in vCenter Server

• communication plan

• Why Don’t CISOs Trust Their Employees?

• 7 Practical Considerations for Effective Threat Intelligence

• We Can Save Security Teams From Crushing Workloads. Will We?

• Want More Secure Software? Start Recognizing Security-Skilled Developers

• FBI, CISA, and NSA Reveal How Hackers Targeted a Defense Industrial Base Organization

• Telstra Telecom Suffers Data Breach Potentially Exposing Employee Information

• Experts Warn of New RatMilad Android Spyware Targeting Enterprise Devices

• Facebook Detects 400 Android and iOS Apps Stealing Users Log-in Credentials

• Why Don’t You Go Dox Yourself?

• What is the Confidential Containers project?

• What Is the Controversy on Repatriations From Syria About?

• Meta Law Suit Against Chinese Devs Over WhatsApp Malware Plot

• Newly Discovered Android Spyware ‘RatMilad’ Targets Enterprise Devices in Iran

• Uber’s Former Security Chief Convicted for Covering Data Breach

• Don’t let your employees become the weakest link

• China upgrades Great Firewall to defeat censor-beating TLS tools

• Cheerscrypt Spyware Attributed to Chinese APT Entity

• Elon Musk Halts Fight, Agrees To Buy Twitter At Original Asking Price

• White House Publishes Blueprint For AI ‘Bill Of Rights’

• Judge Delays Trial, As Musk Says Twitter Won’t Take Yes For Answer

• Polkadot Investors Can Now Participate In Governance Using Bitcoin Suisse’s Custodial Cold Storage Solution

• Intrusion Detection System (IDS) and Its Detailed Working Function – SOC/SIEM

• Fedora 35: php 2022-afdea1c747

• Fedora 35: booth 2022-e0a87993b8

• Fedora 35: php-twig 2022-4490a4772d

• Fedora 35: php-twig2 2022-d39b2a755b

• Fedora 35: php-twig3 2022-e915614918

• Why web apps are one of this year’s leading attack vectors

• Microsoft warns of password attacks against Exchange Online, here’s what you need to do

• NSA, FBI warning: Beware these 20 software flaws most used by hackers

• CyberRatings.org Invites Industry Participation in Forthcoming Enterprise Firewall and Data Center Firewall Tests

• LofyGang Distributed ~200 Malicious NPM Packages to Steal Credit Card Data

• The essentials of GRC and cybersecurity — How they empower each other

• Uncommon infection and malware propagation methods

• BOD 23-01 – Fed Civilian Agencies Must Report Network Vulns To CISA – Expert Comments

• Comment: Critical Packagist Vulnerability Opened Door for PHP Supply Chain Attack

• Hackers Use Customized Malware to Steal U.S. Defense Data

• Modified version of Tor Browser spies on Chinese users

• Google helps Android users remove personal data from search results

• How Zero Trust Improves Ransomware Response

• Industry Reactions to Conviction of Former Uber CSO Joe Sullivan: Feedback Friday

• Meta Says It Has Busted More Than 400 Login-Stealing Apps This Year

• Facebook users warned: You may have downloaded these password-stealing Android and iOS apps

• Binance Bridge Hit by $560 Million Hack

• Canadian Netwalker Ransomware Affiliate Sentenced to 20 Years in U.S. Prison

• Hacker Steals $566 Million Worth Of Crypto From Binance Bridge

• Phishing Campaigns Target Major Fast Food Chains in Saudi Arabia, UAE, Singapore

• New CIISec Initiative Aims to Strengthen UK’s Nuclear Cybersecurity Posture

• Organizations Urged to Patch Vulnerabilities Commonly Targeted by Chinese Cyberspies

• The Fight to Cut Off the Crypto Fueling Russia’s Ukraine Invasion

• Spyware Maker Intellexa Sued by Journalist

• New Telecoms Security Framework Comes Into Force

• LilithBot: New Malware-as-a-Service Made Available on Telegram

• $566 Million Worth of Cryptocurrency Stolen by Hacker on Binance Bridge

• Loads of PostgreSQL systems are sitting on the internet without SSL encryption

• 19-Year-Old Arrested for Using Leaked Optus Breach Data in SMS Scam

• PCI Pal Named “Data Security Solution Provider of the Year” in 2022 CyberSecurity Breakthrough Awards Program

• SUSE: 2022:2463-1 bci/nodejs Security Update

• SUSE: 2022:2464-1 bci/python Security Update

• SUSE: 2022:2465-1 bci/nodejs Security Update

• SUSE: 2022:2467-1 bci/python Security Update

• White House Unveils Artificial Intelligence ‘Bill of Rights’

• CrowdSec Raises $14 Million for Crowdsourced Threat Intelligence Solution

• US Warns of Foreign Disinfo Ops Ahead of Midterms

• Mitigation for Exchange Zero-Days Bypassed! Microsoft Issues New Workarounds

• Three ways Anonymous and other hacking groups are aiding mass protests in Iran

• $570 million worth of Binance’s BNB token stolen in another major crypto hack

• DoJ ‘very disappointed’ with probation sentence for Capital One hacker Paige Thompson

• South Korea cancels passport of Terraform Lab’s Do Kwon

• How to Ensure Endpoint Security and Compliance for Zero Trust

• Meta Sues Chinese Devs Over WhatsApp Malware Plot

• BlackByte Ransomware Abuses Vulnerable Windows Driver to Disable Security Solutions

• Hackers Can Use ‘App Mode’ in Chromium Browsers’ for Stealth Phishing Attacks

• Hacker stole $566 million worth of Binance Coins from Binance Bridge

• TOP 10 unattributed APT mysteries

• Emotional and physical effects of identity theft are on the rise

• Cybersecurity Flaw at ‘Baby Shark’ App Developer, Pinkfong, Causes Data Leak

• Cybersecurity Leaders Are Struggling Keeping Companies Safe

• New Visa Reports Underscore Importance of Cybersecurity Amid Shifting Threats

• Cynet Announces Partnership With TD SYNNEX

• What to Know about APIs, the “On-Ramps to the Digital World”

• How Secure is Using Open Source Components?

• The need to change cybersecurity for the next generation

• Hacker Steals Over $570m from Binance Bridge

• More than $100 million worth of Binance’s BNB token stolen in another major crypto hack

• Hardening data security in the cloud

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Mentally unstable Capital One hacker sentenced to jail term

• Beware of this RatMilad Android spying Malware

• Eternity Group Hackers Offering New LilithBot Malware-as-a-Service to Cybercriminals

• New infosec products of the week: October 7, 2022

• October 2022 Patch Tuesday forecast: Looking for treats, not more tricks

• guardDog.ai Recognized for IoT Security Innovation in 6th Annual CyberSecurity Breakthrough Awards Program

• Cyware Named “Overall SOAR Solution Provider of the Year” For Second Consecutive Year in CyberSecurity Breakthrough Awards Program

• LilithBot Malware, a new MaaS offered by the Eternity Group

• Tackling the weaknesses of smart buildings’ technology

• 3 ways enterprises can mitigate social engineering risks

• RansomEXX Gang Hacked Ferrari – Over 7GB of Internal Documents Stolen

• Top of the Pops: US authorities list the 20 hottest vulns that China’s hackers love to hit

• No Shangri-La for you: Top hotel chain confirms data leak

• All your identity needs fulfilled

• What $1B in cybersecurity funding can mean for US state, local governments

• Four Companies Offering Security Solutions for Medical Devices Named IDC Innovators

• Blackpoint Cyber Launches Four Product Updates

• The 4 best travel VPNs of 2022

• Elastic announces new features and enhancements to boost cloud-native observability

• Hammerspace announces metadata driven workflow enhancements to simplify access to global data

• Interos launches i-Score to guide corporate boards struggling with global supply chain risks

• Exabeam Ranked #23 on Newsweek’s List of the Top 100 Most Loved Workplaces For 2022

• NOAA looks to transition ground-based radio processing to the cloud

• New Malware Compromised Hundreds of Microsoft SQL Servers

• HashiCorp HCP Boundary helps organizations struggling with security as they transition to the cloud

• Veratad VX improves identity verification and analytics for business users

• Legit Security Legitify detects security and compliance issues across GitHub assets

• Veracode Container Security secures cloud-native application development

• Shadow APIs hit with 5 billion malicious requests

• VPN use skyrockets in Iran as citizens navigate internet censorship under Tehran’s crackdown

• Phosphorus enhances its xIoT security platform to strengthen enterprise device security

• Notabene SafePII prevents phishing attacks in sensitive compliance systems

• 2022-10-06 – HTML smuggling –> IcedID (Bokbot) –> Cobalt Strike

• New MSSQL Backdoor ‘Maggie’ Infects Hundreds of Servers Worldwide

• macOS Archive Utility Bug Lets Malicious Apps Bypass Security Checks

• Sharing Knowledge at 44CON

• Speaking Engagements

• Wakanim – 6,706,951 breached accounts

• Lloyd’s of London reboots after dodgy network activity detected

• 7 Biggest Cybersecurity Threats of the 21st Century

• How analyzing employee behavior can improve your cybersecurity posture

• BOD 23-01: Improving asset visibility and vulnerability detection on federal networks

• Cyberstalking, pig masks, and cockroaches: Former eBay execs are sentenced

• Data Access Agreement offers a new path for UK – US data requests

• Hundreds of Microsoft SQL servers found to be backdoored

• Fight over $1.5B Commerce IT contract goes to court

• Best Intrusion Detection and Prevention Systems (IDPS) for 2022

• Elpha Secure raises $20 million to accelerate product development

• Oort raises $15 million to defend enterprises against identity-based cyberattacks

• SecurityScorecard partners with Wordtext Systems to expand its reach in the APAC region

• NordPass joins FIDO Alliance to help change people’s habits when it comes to passwords

• Cynet collaborates with TD SYNNEX to provide businesses with automated protection against attacks

Generated on 2022-10-08 23:55:50.312045