IT Security News Daily Summary 2022-10-09

• The Best Open Source Tools to Secure Your Linux Server

• Enterprise Encryption for Linux

• New MSSQL Backdoor ‘Maggie’ Infects Hundreds of Servers Worldwide

• VPN use skyrockets in Iran as citizens navigate internet censorship under Tehran’s crackdown

• 2022-10-06 – HTML smuggling –> IcedID (Bokbot) –> Cobalt Strike

• That thing to help protect internet traffic from hijacking? It’s broken

• Sharing Knowledge at 44CON

• A New Era of Digital Money & Security

• IoT/Edge Dev Survey Shows AI, Container and Linux Popularity

• Speaking Engagements

• Lloyd’s of London reboots after dodgy network activity detected

• 3 steps to realizing the true transformational promise of the cloud

• Women and Children to the Front

• Patch Zero Days In 15 Minutes Or

• Everest gang demands $200K for data stolen from South Africa state-owned electricity company ESKOM

• Meta: Users Warned Against Android, iOS Apps That Are Stealing Facebook Passwords

• Performance Hit Experienced By File Copying Due to Windows 11 22H2

• Cyberattack Triggers a Service Outage at Hartnell College

• Cryptojacking Campaign Exploits OneDrive Vulnerability, Can Deploy Spyware and Ransomware Too

• Private Data of Nearly 296,000 User Compromised in Toyota Data Breach

• 55,000 Cybersecurity Candidates Join (ISC)² Workforce Programs in One Month

• Announcing This Year’s (ISC)2 Global Achievement Award Recipients – Part 2

• Cybersecurity considerations for wearable tech

• Fwupd 1.8.6 Released With Smaller Package Size, New Hardware Support

• The power and efficacy of the password

• How zero-knowledge proofs will guarantee compliance for DeFi adoption

• Security Affairs newsletter Round 387

• Iran State TV Hacked With Image of Supreme Leader in Crosshairs

• CommonSpirit hospital chains hit by ransomware, patients are facing problems

• Week in review: 7 cybersecurity audiobooks to read, Patch Tuesday forecast

• How LofyGang Is Using Discord In A Massive Credential Stealing Attack

• Lloyd’s of London investigates alleged cyber attack

• When are we gonna stop calling it ransomware? It’s just data kidnapping now

• How Technology Changed Dating And Relationships Forever

• Penetration testing

• Hiring Inexperienced Cybersecurity Practitioners: What’s Not to Like?

• October is #CybersecurityAwarenessMonth

• Stories from the SOC – C2 over port 22

• Army climate plan relies on technology that doesn’t exist yet

• Proposed Amendments to (ISC)² Bylaws – Member Vote Opens Soon

• Latest Cyberthreats and Advisories – October 7, 2022

• Norauto joins forces with Orange Business Services to upgrade its network infrastructure to SD-WAN

• Mirantis Container Runtime now available in the Microsoft Azure Marketplace

• Everi to leverage Prove’s identity solutions for more intuitive and secure gaming experiences

• Mageia 2022-0361: unbound security update

• Mageia 2022-0362: php security update

• Strata Identity names Chris Veith as Senior Director of Global Alliances

• Apple Safari Safest, Google Chrome Riskiest Browser of 2022- Study

• Mageia 2022-0363: libvncserver security update

• Mageia 2022-0364: kitty security update

• Mageia 2022-0365: dbus security update

• Mageia 2022-0366: colord security update

• IT Security News Daily Summary 2022-10-08

• Binance-Linked Network Hacked, Over $570 Million in Losses Recorded

• Fedora 36: python-joblib 2022-c0bfe37ae5

• Slackware: 2022-281-01: libksba Security Update

• Russian Hackers Shut Down US State Government Websites

• Fedora 36: dotnet3.1 2022-980d492c98

• Fedora 35: dotnet3.1 2022-847c67b3cd

• Watch out, a bug in Linux Kernel 5.19.12 can damage displays on Intel laptops

• BlackByte Ransomware abuses vulnerable driver to bypass security solutions

• US Government Says Election Hacking Does Not Pose Any Threat

• 8 Cybersecurity trends to be aware of in 2022/2023

• Laminar Launches Laminar Labs to Shine Light on Shadow Data, Cloud Security Risks

• Massive Data Breach Exposes City of Tucson, Arizona

• A National Lab Is Promoting a “Digital Police Officer” Fantasy for Law Enforcement and Border Control

• UGC Offers Cyber Security Program for UG&PG Students

• Phishing Attack Spoofs Zoom to Steal Microsoft User Credentials

• What is Data-as-a-Service (DaaS)? Understanding the benefits, and common use cases

• AI task force aims to expand federal research opportunities beyond big tech

• Malicious Actors Are Exploiting ‘App Mode’ in Chromium Browsers for Phishing Attacks

• Telegram Founder Alerts Public of WhatsApp Security Threats

• Digital Transformation and Risk Management Must Go Together

• Secure Web Gateway (SWG) Security – SASE Part 3

• Passwordless logins boost security for device and account access

• Colorado state web portal still down after cyberattack

• The State of Security: Poland

• Turning a Pico into a Human Interface Device (HID)

• Phishing attack spoofs Zoom to steal Microsoft user credentials

• Report: Facebook Is Still Autogenerating Pages For Extremist Groups

• Email Defenses Under Siege: Phishing Attacks Dramatically Improve

• Google Unveils Flagship Pixel 7, Pixel 7 Pro, And Pixel Watch

• What is torrenting and how does it work?

• Facebook Warns 1 Million Users That Their Account Info May Have Been Compromised By Scammy Apps

• Unpatched remote code execution flaw in Zimbra Collaboration Suite actively exploited

• Binance Hackers Minted $569M in Crypto—Then It Got Complicated

• SUSE: 2022:2472-1 suse/sle15 Security Update

• FBI, CISA Say Malicious Cyber Activity Unlikely to Disrupt Election

• Over 400 Malicious Android & iOS Apps Stealing Facebook Passwords

• SUSE: 2022:2473-1 suse/sle15 Security Update

• The best Ring & Blink deals ahead of October Prime Day

• Hospital Chain Says ‘IT Security Issue’ Disrupts Operations

• Biden’s Privacy Shield 2.0 order may not satisfy Europe

• Former Uber CSO Convicted for Covering up 2016 Data Breach

• SUSE: 2022:2471-1 suse/sle15 Security Update

• Quantum-Safe Communications Startup Qunnect Raises $8 Million

• Cisco Patches High-Severity Vulnerabilities in Communications, Networking Products

• Dex: ID Service Patches Bug that Allows Unauthorized Access to Client Applications

• Does a Trading Computer Need an SSD – 7 Things to Know

• US Consumers Are Finally Becoming More Security & Privacy Conscious

• Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors

• Hackers Exploiting Unpatched RCE Flaw in Zimbra Collaboration Suite

• Top CVEs Actively Exploited by People’s Republic of China State-Sponsored Cyber Actors   

• Make your neighbor think their house is haunted by blinking their Ikea smart bulbs

• Build or Buy your own antivirus product

• Microsoft Issues Improved Mitigations for Unpatched Exchange Server Vulnerabilities

• Cloud Platforms Require Stringent Cybersecurity: ISG

• filter (computing)

• S3 Ep103: Scammers in the Slammer (and other stories) [Audio + Text]

• BlackByte Ransomware Disables Security Products Through BYOVD Method

• Cisco Patched High Severity Bugs in Networking and Communications Products

• Cyber Hygiene: 5 Tips for Company Buy-In

• Malicious cyber activity is unlikely to compromise election infrastructure

• The 3 best free VPNs (and why you get what you pay for)

• 4 tips to achieve Data Compliance

• Former Uber CSO convicted of covering up megabreach back in 2016

• Swatted: A Shooting Hoax Spree Is Terrorizing Schools Across the US

• Details Released for Recently Patched new macOS Archive Utility Vulnerability

• Centralized Privacy Center: The key to meeting data privacy obligations

• New U.S.-E.U. data privacy framework focuses on limiting U.S. surveillance

• The 4 best VPN services for torrenting in 2022

• Frost & Sullivan Names Palo Alto Networks Global SASE Leader

• Insurance Giant Lloyd’s of London Investigating Cybersecurity Incident

• New ‘Maggie’ Backdoor Targeting Microsoft SQL Servers

• BlackByte Ransomware Abuses Legitimate Driver to Disable Security Protections

• The Zero Day Dilemma

• Australian Police Make First Arrest in Optus Hack Probe

• The Ultimate SaaS Security Posture Management Checklist, 2023 Edition

• Employee Volunteer Program Supports Youth Globally

• Security Issues With Open Source In Todays World

• CISA Releases Two Industrial Control Systems Advisories

• Cisco Releases Security Updates for Multiple Products

• Breaking: Scams Linked To Crypto Soared By 335%

• Governments Walk Businesses To Prepare For Ransomware

• The Problem of API Security and How To Fix It

• Massive Multi-Vector 1.37 Tbps DDoS Attack Mitigated by Imperva DDoS Protection

• Microsoft Takes Measures Against Password Spray Attacks

• A New Android Spyware Called RatMilad Is Targeting Enterprise Devices

• Australia’s Largest Telecom Company Employees at Risk Following Telstra Breach

• Malicious Cyber Activity Targeting Election Systems: FBI Declares

• 19-Year-Old Arrested for Allegedly Using Leaked Optus Customer Data for Extortion

• Bhinneka – 1,274,340 breached accounts

• Court’s Decision Upholding Disastrous Texas Social Media Law Puts The State, Rather Than Internet Users, in Control of Everyone’s Speech Online

• Foreign spies hijacking US mid-terms? FBI, CISA are cool as cucumbers about it

• Iranian Hackers Employ Novel RatMilad Spyware to Target Enterprise Android Users

• Trend Mirco Tracking Earth Aughisky’s Malware and Changes

• What Is Smishing? Here’s How to Spot Fake Texts and Keep Your Info Safe

• Key takeaways from ESET Threat Report T2 2022 – Week in security with Tony Anscombe

• Semtech’s LoRa Connect optimizes CWD Limited’s dual combo module for IoT device connectivity

• Sentence For Capital One Hacker Slammed By US DoJ

• Debian LTS: DLA-3139-1: knot-resolver security update

• Debian LTS: DLA-3140-1: libpgjava security update

• 3 Critical Malicious Code Execution Vulnerabilities In Linux Kernel

• How hybrid cyber insurance can help mitigate the financial risk of cybercrime

• Communication breakdowns hurt otherwise positive view of federal ransomware support, GAO says

• How to add an extra layer of protection in Bitwarden vault items

• Top 5 best practices for cloud security

• Former Uber CSO Joe Sullivan found guilty in breach cover-up

• RDP Attacks Decline 89% in Eight Months

• Uber’s Former Security Chief Convicted of 2016 Data Breach Cover-Up

• Android Spyware ‘RatMilad’ Targets Enterprise Devices in Iran

• 7 IoT Devices That Make Security Pros Cringe

• School Is in Session: 5 Lessons for Future Cybersecurity Pros

• Monitoring Your Cloud And Hybrid IT Infrastructure: How To Find The Right IT Monitoring Solution For Your Cloud-first Approach

• Over reliance on shift-left can lead us in the wrong direction

• Android vulnerabilities could allow arbitrary code execution

• Responding to Cyberattacks Within 72 Hours is Essential to Taming the Chaos

• 123K Individuals Data Exposed in Tucson Data Breach

• Permutive and PubMatic partner to maintain control and safety over data

• Kyndryl and Microsoft collaborate to help customers move their mainframe data to the cloud

• SWIFT Publishes Blueprint For Central Bank Digital Currency

• Quest Software Podcast: The Data Dilemma: How to Become a Data Centric Enterprise: Episode 1

• Top Cybersecurity Threats for Public Sector

• SUSE: 2022:3552-1 ImageMagick

• Insider risk: More prevalent than ever, according to Microsoft

• Chip maker commits up to $100B for U.S. manufacturing site

• New SonicWall Survey Data Reveals 91% of Organizations Fear Ransomware Attacks in 2022

• Russia-Linked Cybercrime Group Hawks Combo of Malicious Services With LilithBot

• Hackers Have It Out for Microsoft Email Defenses

• Cisco fixed two high-severity bugs in Communications, Networking Products

• Another Healthcare Organisation Hit By Suspected Ransomware, Experts Weigh In

• Former Uber CSO Convicted For Covering Up Massive 2016 Data Theft

• Evolution of LilithBot Malware and Eternity Threat Group

• Operation Chakra: CBI Searches 105 Locations, Targeting Cyber Crimes

• Malwarebytes’ modernized bug bounty program—here’s all you need to know

• Romance scammer given 25 years of alone time

• Microsoft publishes new report on holistic insider risk management

Generated on 2022-10-09 23:55:30.233151