IT Security News Monthly Summary – April

• IT Security News Daily Summary 2021-03-31

• BrandPost: The Journey to SASE: Cisco Eases Security Complexity

• BrandPost: Don’t Make This Mistake on the Journey to Passwordless Security

• antimalware (anti-malware)

• challenge-response authentication

• Air Force seeks ‘ubiquitous connectivity’ from telework to bases

• Mayorkas announces cyber ‘sprints’ on ransomware, ICS, workforce

• NOAA signs data sharing agreement with offshore wind firm

• NASA data supports agricultural analytics

• Microsoft Wins $22 Billion Deal Making Headsets for US Army

• What’s So Great About XDR?

• Zettaset Unveils Encryption Management Console

• President Biden extended Executive Order 13694 regarding cyberattack sanctions

• Ethiopia’s Tigray Conflict: Alleged Atrocities, Law of War Violations and Regional Implications

• Lawfare Lecture: Paul Rosenzweig on Enterprise Cybersecurity Measurement

• Fraud Ring Launders Money Via Fake Charity Donations

• Apple, Google Both Track Mobile Telemetry Data, Despite Users Opting Out

• IRS Warns of Higher Education Phishing Scam

• 83% of Businesses Hit With a Firmware Attack in Past Two Years

• I Now Own the Coinhive Domain. Here’s How I’m Fighting Cryptojacking and Doing Good Things with Content Security Policies.

• The Importance of Website Backups

• XKCD ‘Immune Response’

• Bsides Seattle 2020 – Olivia Stella’s ‘Airplane Mode: Cybersecurity At 30,000+ Feet’

• Apple’s First 13-Inch MacBook Pro With Retina Display Now Classified as ‘Obsolete’

• Schools Can’t Punish Students for Off-Campus Speech, Including Social Media Posts, EFF Tells Supreme Court

• A child sent out gibberish tweet from official US Nuclear-agency account

• McAfee Defenders Blog: Reality Check for your Defenses

• Is the Clubhouse App a Safe Place for Kids to Hangout?

• How the government could become the next Airbnb

• Child Tweets Gibberish from U.S. Nuke Account

• Fraud Ring Lauders Money Via Fake Charity Donations

• How to use Google’s Password Checkup tool

• CISA and RH-ISAC to Run Cybersecurity Drill

• College Students Targeted in Newest IRS Scam

• Bsides Seattle 2020 – Caleb McGary’s ‘Red Team Handcuffs’

• Misconfiguration Leaks 138GB of Information to the Public

• FBI Pegs 2020 Cybercrime Costs at $4 Billion – Actual Losses Likely Higher

• Fake COVID-19 Vaccine Card Scam

• VMware Patches Two Severe Vulnerabilities

• Scammers Target Universities in Ongoing IRS Phishing Attacks

• Charming Kitten Targets US and Israeli Healthcare Professionals

• BrandPost: Trusting Your Security Vendor in an Evolving Threat Landscape

• How to back up your Gmail: The ultimate guide for 2021

• Malicious attack now targeting video gamers and modders

• Dutch Data Protection Authority Fines Booking.com Over Incident Notification

• CISA Releases Supplemental Guidance on Emergency Directive for Microsoft Exchange Server Vulnerabilities

• Apple Seeds Sixth Beta of macOS Big Sur 11.3 to Developers

• Apple Seeds Sixth Betas of iOS 14.5 and iPadOS 14.5 to Developers

• iOS 14.5 Adds New Siri Voices, No Longer Defaults to Female

• iOS 14.5 Will Recalibrate iPhone 11 Batteries to Fix Battery Health Bug

• Apple Releases Safari Technology Preview 123 With Bug Fixes and Performance Improvements

• VMware urges customers to patch critical vulnerabilities in vRealize Operations platform

• National health passes: Short-term fix or long-term legacy?

• BrandPost: The Value of Cybersecurity Certifications and Training for Career Growth

• Living Security Raises $14 Million for Its Human Risk Management Platform

• Reality Show Members Charged with Telemarketing Scam

• Advice From Security Experts: How to Approach Security in the New Normal

• Back in a Bit: Attacker Use of the Windows Background Intelligent
  Transfer Service

• A Successful Security Platform Requires the Strongest Partner Ecosystem

• Asset Management – Back To The Roots

• HYCU and Bain Capital Ventures partner in latest $87.5 funding round

• Wow…. Ziggy Ransomware gang to refund its victims

• Two Linux Vulnerabilities Could Allow Bypassing Spectre Attack Mitigations

• MobiKwik Suffered Data Breach – 3.5M Customers’ Data Uploaded to Dark Web

• Cryptic Tweet From US Strategic Command Was Down To Child

• Cisco is bringing individual and team insights to Webex video calls

• Analyzing the UK’s Nuclear Deterrence Theory for Cyberspace

• Here’s How to Safeguard Against Mobikwik Data Breach

• 5-star customer service: fraudsters launch massive campaign against Indonesia’s major banks on Twitter

• Apple to Report Q2 2021 Earnings Results on April 28

• Apple Aiming to Announce Mixed-Reality Headset With In-Person Event in ‘Next Several Months’

• What Did Gen. Nakasone Say About Defense Department Operations (Not Just Cyber Operations)?

• The Internet of Very Cold Things

• Lawfare Live: Reforming Civil Settlements for Police Misconduct

• Universities Targeted in Ongoing IRS Phishing Attacks

• Zero Trust: 7 adoption strategies from security leaders

• Microsoft, Facebook To Reopen Some US Offices

• Linux Distribution Coverage Extended Across the VMware Carbon Black Cloud

• Microsoft Office 365 still the top target among phishing attacks

• Shadow IT is your organization’s next remote working nightmare

• Over 80% of IT leaders will adopt or expand cloud-based IAM and face challenges

• Iranian Hackers Target Medical Personnel in US, Israel

• Winner Crowned in “Hacker Games” Contest Promoting Secure Coding Skills

• 3 Ways Vendors Can Inspire Customer Trust Amid Breaches

• Citrix Releases Security Updates for Hypervisor

• VMware Releases Security Updates

• Google Releases Security Updates for Chrome

• Don’t Skim This: A Brief Introduction to Website Skimming

• Chinese experts earned $20,000 for reporting a Chrome Sandbox Escape

• Amazon Tweets Trolling Congress Were So Bad That IT Thought Account Was Hacked

• Ziggy Ransomware Gang Offers Refunds To Victims

• Iranian Credential Thieves Target Medical Researchers

• Hacker Exploits Bug In Doom To Run Snake

• Casting Some Light upon the Concept of Privilege Identity Management

• What Is Cyber Threat Hunting and Why You Need It?

• The Emails of the Department of Homeland Security exposed

• Ubiquiti Networks Security Breach was catastrophic, whistleblower says

• Fintech Platform MobiKwik Denies 8.2 TB Data Breach

• Google Adds £21m To EU Fake News Warchest

• Gaming mods, cheat engines are spreading Trojan malware and planting backdoors

• Best VPN 2021: Expert reviews of the best VPN services

• Tax refund phishing scam targets university students and staffers

• Don’t give hackers a home run by using these baseball team names in your passwords

• Critical Infrastructure Protection Firm OPSWAT Secures $125 Million Growth Funding

• How to build a honeypot to increase network security

• DoJ Clamps Down on COVID-19 Fraud, Charging Nearly 500 Individuals

• Weakness in EDR Tools Lets Attackers Push Malware Past Them

• Decided to move on from your NGAV/EDR? A Guide for Small Security Teams to What’s Next

• Credential Phishing: Themes and Tactics

• TalaTek Selected by CMMC-AB as One of the First CMMC Third-Party-Assessor-Approved Organizations

• University of Warwick Wins Veracode’s First-Ever Hacker Games

• Financial Cyberthreats in 2020

• Apple Invests $50 Million in Independent Music Artist Platform UnitedMasters

• Apple Says Over 110 Manufacturing Partners Committed to Using 100% Renewable Energy

• Arizona Bill That Would Let Developers Avoid Apple’s In-App Purchase Rules Scrapped After Intense Lobbying

• Chained Vulnerabilities in VMware vRealize Operations Could Lead to Unauthenticated Remote Code Execution

• UK Cyber Security Council Becomes Independent Entity

• What Is an Attack Surface in Cybersecurity?

• Useful Tips for Choosing the Right 3D Printer

• 6 Benefits Of GPS Tracking Cameras

• Top 4 Reasons Why Network Security Is Critical for Businesses

• 5G Network Slicing Vulnerabilities Risk DoS, Location Tracking, Data Theft, and Other Threats

• Facebook To Allow Users To Limit Comments On Posts

• Edge computing orchestration startup Zededa raises $12.5M

• Child tweets on behalf of nuke, space mission agency US Strategic Command

• APT Charming Kitten Pounces on Medical Researchers

• Chinese Researchers Earn Another $20,000 for Chrome Sandbox Escape

• Most Global Chip Companies Show Signs of Compromise

• Here’s How One Airline Upgraded Its Security in the Cloud

• Five worthy reads: The unexpected costs following a cyberattack

• Airline Body IATA to Launch COVID-19 Travel Passport App in April

• MobiKwik Data Breach – Thoughts From Experts

• The npm netmask vulnerability explained so you can actually understand it

• Old but Gold – Attack and Defend the Sys Admins

• 10 Most Innovative Information Security Companies at RSA Conference 2020 (USA)

• VMware patches critical vRealize Operations platform vulnerabilities

• New poll shows Facebook’s severe trust problem

• James Reynolds Joins SecureAge Technology to Lead Security Product Management

• UK Cyber Security Council Officially Launches as Independent Body

• Mobikwik Data Leak of 10cr Users: ‘The Largest KYC Data Leak in History’

• The Convergence of Cybersecurity & Student Safety in K-12 Schools

• State Officials Benefit from Cybersecurity Training Offered by the National Cybersecurity Center

• Google Maps Adds Eco Friendly Routes

• Women In Leadership Panel | Avast

• World Backup Day | Avast

• Check Point Software and HashiCorp partner to help organizations automate firewall operations while maintaining security posture and compliance.

• Opswat expands infrastructure protection with anti-malware tools, raises $125M

• VPNs: Mozilla just added these new feature to its virtual private network

• The Often-Overlooked Element of a Hack: Endpoints

• Hungarian authorities break up €8 million VAT fraud scheme

• The Benefits of Offloading SSL (certs) on F5 Devices, and How to Automate it

• Spotify Introduces New Personalized Mixes Featuring Favorite Artists, Genres, and Decades

• Facebook Adds New ‘Most Recent’ Timeline to Switch to Chronological Posts

• Expert On The Report On Lack Of Visibility Into Cyber Threats

• Serious Vulnerability In Netmask npm Package Risked 270K+ Projects

• Microsoft 365 Defender updates bring a single portal view

• SpaceX SN11 Rocket Explodes During Descent

• FCW Insider: March 31, 2021

• Pandemic threats: The common threads in COVID-19 scams and criminal schemes

• Microsoft: Firmware attacks are on the rise and you aren’t worrying about them enough

• Three-Quarters of Legal Breaches Caused by Insiders

• Email accounts of DHS members were compromised in the SolarWinds hack

• Quick Analysis of a Modular InfoStealer, (Wed, Mar 31st)

• Apple Partners With South Carolina to Build Eight Open Access Mac Computer Labs

• Google Meet Extends Free ‘Unlimited’ Calls Until June 30

• Role of Encryption in GDPR Compliance

• NHS Reduces Cyber-Skills Shortages but Breach Problems Remain

• Hackers are implanting multiple backdoors at industrial targets in Japan

• Research Claiming Android Collects 20x More User Data Than iOS ‘Off By An Order of Magnitude,’ Says Google

• Kuo: iPhone 13 Lineup to Feature Nearly Identical Wide Camera as iPhone 12

• Microsoft Shuts Down Cortana App for iOS and Android

• (ISC)² calls for collaboration amongst UK Cyber Security Council membership and training bodies

• 5 Effective Strategies to Ensure the Excellence of Cybersecurity

• Whistleblower claims Ubiquiti Networks data breach was ‘catastrophic’

• How Cybereason is reversing the adversary advantage

• Follow the money: members of drug trafficking network arrested for money laundering in Germany and Luxembourg

• How to Secure the Home Branch Office

• Breach Clarity Data Breach Report: Week of March 29

• IETF deprecates TLS 1.0 and TLS 1.1, update to latest versions

• A Few Hours After the Publication: Dozens of Scanning Attempts for Vulnerable PHP Servers

• (ISC)2 and the Creation of the U.K. Cyber Security Council

• Looking for adding new detection technologies in your security products?

• MIDC’s Server Hacked, Threat to Destroy Data

• Building Immunity at AppSec Insertion Points

• 3 steps to meeting data privacy regulation compliance through identity programs

• Tax scammers in China turn photos into vids to crack tax dept facial recognition system

• Beware of this Royal Mail Cyber Scam

• Kaspersky says most of the ransomware victims cannot get back their data

• Backdoor added to PHP source code in Git server breach

• Manufacturing Has the Lowest Percentage of High-Severity Flaws but Needs to Improve Time to Remediation

• Digital dependence and innovation: Two critical trends in cyber espionage and crime

• Nearly 40% of new ransomware families use both data encryption and data theft in attacks

• Tax scammers in China turn photos into vids to crack tax dept. facial recognition system

• Cybersecurity strategy…. To Plan or not to plan…That is the question

• Organizations suffer downtime despite following cybersecurity recommendations

• Lack of IT-OT collaboration holding back smart factory security projects

• Payment app MobiKwik denies customer data was stolen from it, has no idea how the info ended up on the dark web: Maybe it was your fault?

• ISC Stormcast For Wednesday, March 31st, 2021 https://isc.sans.edu/podcastdetail.html?id=7436, (Wed, Mar 31st)

• Board directors need to play an active role in protecting their org from cyber risks

• Hybrid IAM: Addressing the security and experience issues caused by hybrid IT

• Google Is Testing Its Controversial New Ad Targeting Tech in Millions of Browsers. Here’s What We Know.

• Cisco CEO Chuck Robbins: We’re doing everything we can to meet customer demand

• Payment app MobiKwik denies customer data was stolen from it, has no idea how the info ended up on the dark web

• Autohost launches Threat Intelligence Platform to mitigate fraud risk in the hospitality industry

• India payment app MobiKwik denies data leak, says customers may have posted own data to Dark Web

• Raytion launches Enterprise Search Connectors for ServiceNow AI Search

• Proxmox Mail Gateway 6.4: Protects orgs from spam, viruses, Trojans, and phishing emails

• Pindrop enables European enterprises to defend against telephony and cross channel fraud attacks

• Sysdig introduces unified cloud and container security with the launch of CSPM

• Cl0p ransomware gang leaks sensitive data from 6 US universites

• Argus collaborates with Microsoft to provide a cloud security solution to vehicle manufacturers

• CircleCI offers cloud-based CI/CD services for the Arm architecture

• Zimperium partners with Oracle to help enterprises combat advanced mobile threats

• ADVA unveils FSP 3000 DCI OLS designed for 400ZR technologies

• Crowdfunding Legal Fees Is Not a Crime

• Internet Safety Tips for Seniors and Scams to Watch Out for

• C-cure cybersecurity expert team joins Nixu

• Tricentis acquires Neotys to accelerate enterprises’ digital transformation with automated software testing

• Panasonic partners with McAfee to commercialize vehicle security monitoring services

• KPMG now offers RelativityOne in Singapore

• Peer-To-Peer Cybersecurity Insights For 2021

• The Best Network Protection: Go Deep or Go Broad?

• German Parliament Bundestag targeted again by Russia-linked hackers

• Hackers pushed malware to PHP repositories to open a “backdoor” to websites

• Who cares about backup?

• NASA seeks cloud-based platform for airspace management

• As vaccine passports emerge, administration takes advisory role

• BlackBerry fiscal Q4 revenue misses expectations, in talks to sell mobile patents

• Mysterious Hades ransomware striking ‘big game’ enterprises

• Security on a Shoestring? More Budget Means More Detection

• CMMC Accreditation Body appoints Matthew Travis as CEO

• Ketan Gangatirkar joins Coder as VP of engineering

• Saviynt names Anne Ceruti as Head of People and expands its Board of Advisors

• Living Security raises $14M to further develop its human risk management platform

• Come April, Nothing Is Certain Except Phishing and Taxes

• Risk Management, C-Suite Shifts & Next-Gen Text Scams: Your March 2021 Security Intelligence Roundup

• JADC2 needs to be Pentagon’s ‘big bet,’ Flournoy says

• Unions, agencies encouraging feds to get vaccinated

• What We Know (and Don’t Know) So Far About the ‘Supernova’ SolarWinds Attack

• Publicly Available Data Enables Enterprise Cyberattacks

• Snap Working on Advanced Smart Glasses With Augmented Reality Capabilities

• What Would Happen If States Started Looking at Cyber Operations as a “Threat” to Use Force?

• Local Franchising, Big Cities, and Fiber Broadband

• Browser tracking protections won’t stop tracking, warns DuckDuckGo

• IT Security News Daily Summary 2021-03-30

• Expected breach disclosure mandates will test government-industry cooperation

• NIST issues draft election security framework

• It is time for a National Strategic Computing Reserve?

• Malicious Docker Cryptomining Images Rack Up 20M Downloads

• Ziggy Ransomware Gang Offers Refunds to Victims

• Trust in software security has eroded since the SolarWinds attack

• SolarWinds attack makes us distrust the software we buy

• Tips for robotic developers

• Coding for robots: Need-to-know languages and skills

• What is cyber risk quantification, and why is it important?

• Experts Explain Why Medical Misinformation Continues To Spread On Facebook Despite Ban

• White Ops Renames Company ‘Human’

• Exploiting Embedded Linux Devices Through the JTAG Interface

• Uber iOS App Could Soon Include Augmented Reality Directions for Finding Your Driver

• Browser tracking protection doesn’t stop tracking, warns DuckDuckGo

• PHP backdoor attempt shows need for better code authenticity verification

• How phishing attacks evade traditional security defenses

• AI is Security’s Best Defense

• Feds debate while states act on data privacy laws

• VMware addresses SSRF flaw in vRealize Operations that allows stealing admin credentials

• Bitcoin Scam App Approved by Apple Robs iPhone User of $600,000+

• Mozilla VPN now nudges users to put shields up on dodgy networks, adds LAN access

• Hacker claims stealing 8.2TB of MobiKwik data; leaks some online

• The cloud attack you didn’t see coming

• Create an incident response plan with this free template

• Whistleblower: Ubiquiti Breach “Catastrophic”

• Bsides Seattle 2020 – Trupti Shiralkar’s ‘Zerotrusting Serverless Applications’

• Belkin Debuts New MagSafe-Compatible Accessories

• Apple Researching Mac Pro’s ‘Cheese Grater’ Design for Other Devices Like iPhone

• Apple Dominated Audio Device Shipments in 2020 With AirPods and Beats

• MalwareBytes Warns of “I Accidentally Reported You” Steam Scam

• Proof-of-Concept Decryptor Released for Black KingDom Ransomware

• Docker Hub Host Images Shipping with Cryptominers

• PHP Git Breached – 2 Commits Under Developers Name’s Infected

• Harris Federation Education Charity Suffered Ransomware Attack

• BrandPost: Protecting Children from Online Cybersecurity Risks

• Armv9 is Arm’s first major architectural update in a decade

• Quick Hits

• Cyan Forensics Raises $6.9 Million to Combat Pedophiles and Terrorists

• Data loss prevention quiz: Test your training on DLP features

• Best practices for reporting ransomware attacks

• Dog Helps Kids Stay Safe Online

• What You Need to Know — or Remember — About Web Shells

• Tick … Tick … Boom

• SolarWinds Hack: U.S. Govt Failure is Deeply Worrying

• Apple Maps Displays COVID-19 Guidelines for Airports Worldwide

• Adobe Launches iPad Creative App Bundle for $14.99 per Month

• Verizon Shutting Down 3G Network on December 31, 2022

• What’s Covered Under Cyber Risk Insurance

• What educational institutions need to do to protect themselves from cyber threats

• 7 top IoT security challenges and how to overcome them

• What is crypto? The business starter guide to cryptocurrency

• Ransomware: Why we’re now facing a perfect storm

• SolarWinds Attackers Accessed DHS Emails, Report

• PHP web language narrowly avoids “backdoor” supply chain attack

• Younger Ransomware Victims More Likely to Pay Up

• #LORCALive: Nation State Cooperation Essential to Fighting Scourge of Cybercrime

• 278,000 GitHub Repositories Affected by a Critical Networking Flaw in Netmask

• Ghost Users Haunt Healthcare Firms

• Watch Out for These Cyber-Risks

• Monitoring ICS Cyber Operation Tools and Software Exploit Modules To
  Anticipate Future Threats

• What does it take to do SASE your way?

• Apple Supplier Foxconn Expects Shipments to Be Impacted by Global Chip Shortage

• PYSA, the ransomware attacking schools

• Over 100 million MobiKwik user data leaked in Cyber Attack

• Cisco integrates networking, security, IT management for the enterprise

• 10 tips to protect your organization and remote endpoints against cyberthreats

• Microsoft: Firmware Attacks Outpacing Security Investments

• Child Unknowingly Tweets From US Nuclear Command’s Account

• Cybercriminals Publish Data Allegedly Stolen From Shell, Multiple Universities

• PHP web language narrowly avoids dangerous supply chain attack

• Beyond MITRE ATT&CK: The Case for a New Cyber Kill Chain

• Cisco’s Vision for SASE and a Brand New Offer to Kickstart Your Journey

• How to Prevent a Rootkit Attack?

• Reflected XSS Vulnerability In “Ivory Search” WP Plugin Impact Over 60K sites

• System Update: New Android Malware

• Security Intelligence Handbook Chapter 11: Geopolitical Intelligence Identifies IT Risks Across the Globe

• First stable release of CentOS replacement AlmaLinux OS now available

• Billions of Records Worldwide Were Already Hacked

• Malware Attack Hits Multinational Conglomerate Honeywell

• Duo’s Passwordless Authentication is Coming!

• New Security Signals study shows firmware attacks on the rise; here’s how Microsoft is working to help eliminate this entire class of threats

• Malicious commits found in PHP code repository: What you need to know

• How Pandemic-Driven Tech Trends are Changing the Labor Market for Good

• Multi-factor authentication: Top 5 things to know

• Top 5 things to know about multi-factor authentication

• Biden Extends Executive Order on Cyberattack Sanctions

• In the Rush to Embrace Hybrid Cloud, Don’t Forget About Security

• Experts found 2 Linux Kernel flaws that can allow bypassing Spectre mitigations

• Intel Accused Of Wiretapping Because It Uses Analytics To Track Keystrokes, Mouse Movements On Its Website

• Hackers Backdoor PHP After Breaching Internal Git Server

• Application Security Tactics Are Due For An Overhaul

• PayPal Launches Crypto Checkout Service

• Students Can Win WWDC 2021 Swag in Apple’s Annual Swift Coding Challenge

• Disney World Launches MagicBand for iPhone and Apple Watch With Animations and Express Mode Support

• Experts Reaction On Harris Federation Ransomware Attack

• Backdoor Pushed in PHP Git Repository Following Server Hack

• Over 55 Million Scam Calls Since December Were Blocked by Australian Telcos

• How to Remove Wi-Fi Networks from Your Mac and iOS Device

• PHP programming language source code targeted in backdoor attack

• Akamai Sees Largest DDoS Extortion Attack Known to Date

• Apple Announces Digital WWDC 2021 Event Taking Place June 7-11

• Apple Revamps Developer App Alongside WWDC 2021 Announcement

• FBI: Cybercrime Shot Up in 2020 Amidst Pandemic

• A Guide to Payment Gateway Testing

• TruU Named Newest Competitor in the 2021 ‘ASTORS’ Awards Program

• The fastest VPN in 2021

• Intel Sued Under Wiretapping Laws for Tracking User Activity on its Website

• Linux Kernel Vulnerabilities Can Be Exploited to Bypass Spectre Mitigations

• What’s Behind the Surge in Cybersecurity Unicorns?

• What You Need to Know to Avoid Instagram Scams

• Radware Threat Researchers Live: Episode 9

• PayPal announces Checkout with Crypto

• What Is Broken Object Level Authorization (BOLA)?

• Harris Federation Hit with Ransomware Cyberattack

• And that’s yet another UK education body under attack from ransomware: Servers, email, phones yanked offline

• Backdoor In PHP Source Code Discovered

• Cloud backup and recovery company HYCU raises $87.5M

• A highly sophisticated ransomware attack leaves 36,000 students without email

• Department of Homeland Security email accounts exposed in SolarWinds hack

• Double-Extortion Ransomware Attacks Surged in 2020

• YouTube Has a Disturbingly Creepy Minecraft Problem

• How AI Augments Downsized Security Teams

• Hundreds of thousands of projects affected by a flaw in netmask npm package

• Epic Games Files Complaint to Support UK Antitrust Watchdog’s Apple Probe

• Google Maps Announces Indoor AR Navigation and Eco-Friendly Route Options

• DDoS attacks in 2021: What to expect?

• Money can buy you insurance against network break-ins but investing in infosec hygiene wouldn’t go amiss, says new NCSC chief

• MPs Face Legal Challenge Over Disappearing Messages

• Ransomware Cuts Off 37,000 Students’ Emails

• US Congress Probes ‘Risky’ SpaceX Launch

• SolarWinds Attackers ‘Accessed Emails’ Of Top US Officials

• You could be hacked and not know it

• Unfair exchange: ransomware attacks surge globally amid Microsoft Exchange Server vulnerabilities

• Ransomware group targets Universities of Maryland, California in new data leaks

• Panasonic, McAfee team up to tackle vehicle cybersecurity

• 9 tips to protect your organization against ransomware

• Report finds requiring customers to use passwords is bad for business

• Concern as Ransomware and Exchange Server Attacks Surge

• Goodbye Event Management, Hello Extended Detection and Response

• Apple Lobbies Against ‘Right to Repair’ Bill Over Privacy Concerns of Third Party Repair Shops Accessing User Data

• Expert On Refunding Victims Ransomware Payments

• Suspected Russian hackers breach US homeland security

• $30,000 to researchers who find bugs in Teams

• FCW Insider: March 30, 2021

• Fileless Malware Detections Soar 900% in 2020

• Infosec Community Increasingly Concerned about SolarWinds Breach, Four Months In

• PHP Git Server Hacked to Plant Malware in Code Base

• Live Broadcast Got Disrupted Due to Cyber-Attack on The Australian Tv Network- Nine

• APT10: sophisticated multi-layered loader Ecipekac discovered in A41APT campaign

• Old TLS versions – gone, but not forgotten… well, not really “gone” either, (Tue, Mar 30th)

• Fileless Malware Attacks Surge by 900% and Cryptominers Make a Comeback

• Booming dark web gig economy is a rising threat

• 10 pioneering women in information security

• Facebook Plans Two Cables Linking US To Asia

• Deliveroo Lowers Price Range For Landmark IPO

• 204 Fleeceware Apps Generated over $400 million in Revenue on the Apple App Store and Google Play Store

• SolarWinds Attackers Accessed DHS Secretary’s Emails — Report

• UK Court Backs Swatch in ‘One More Thing’ Trademark Row With Apple

• UK’s Home Office dangles £32m for application support on comms-snooping network

• Chinese Video App Slumps On Hong Kong Debut

• APAC firms face growing cyberattacks, take more than a week to remediate

• Facial recognition camera projects raise concerns in Eastern Europe

• Survey: 99% of Security Pros Struggling to Secure Their IoT & IIoT Devices

• Cyber attack forces live TV shows off-air on Australia’s Channel 9

• 30 Docker images downloaded 20M times in cryptojacking attacks

• Apple Reportedly Working on Redesigned Apple TV Remote

• Apple Orders 4nm Chip Production for Next-Generation Macs

• Apple Pay Support Begins Rolling Out for Select Banks in South Africa

• Your web application firewall should be more than a firewall – it should be a noise filter too

• Application security testing is not just buzzwords

• MobiKwik Suffers Major Breach — KYC Data of 3.5 Million Users Exposed

• How to Get the Best Results From ZTNA

• Microsoft Exchange Server vulnerability patching doesn’t end the menace

• Over $20m loss to CompuCom from Ransomware Attack

• Are Cloud-Native IAM Controls Good Enough for Your Enterprise?

• Apple rushes to patch zero‑day flaw in iOS, iPadOS

• How Sky Global was Indicted for Selling Security

• Cloud security experts wanted: You can be one of them

• How to avoid 4 common zero trust traps (including one that could cost you your job)

• How well have remote workers adapted one year on?

• 93% of consumers concerned about data security when filling out online forms

• Achieving Automated TISAX Compliance

• ISC Stormcast For Tuesday, March 30th, 2021 https://isc.sans.edu/podcastdetail.html?id=7434, (Tue, Mar 30th)

• Leaders need to find ways to increase internal audit capacity without increasing budgets

• How much of the data created and replicated should be stored?

• GRIMM launches Private Vulnerability Disclosure program to allow defenders to get ahead of the unknown

• Australian telcos have blocked over 55 million scam calls since December

• Fortalezca su perímetro de seguridad con el análisis de inventario

• 5 Teen Internet Safety Tips

• Celebrating Women’s History Month 2021 at Palo Alto Networks

• HID HydrantID ACM solves difficult digital certificate lifecycle management problems

• WALLIX provides enhanced data monitoring and secure remote access for healthcare orgs

• Everbridge expands its CEM SaaS platform to help orgs govern operational risk from unplanned events

• IntelliSite releases managed service to make communities safer, smarter and more connected

• After oil giant Shell hit by Clop ransomware, workers’ visas dumped online as part of extortion attempt

• Intel accused of wiretapping because it uses analytics to track keystrokes, mouse movements on its website

• Myth-busting Antivirus Software Assumptions

• Check up on Your Virtual Safety: Tips for Telehealth Protection

• Protect Your Digital Wellness: Don’t Post Your Vaccination Card Online

• CounterFlow AI appoints Bill Cantrell as CEO

• Morphisec raises $31M to enable business to automatically prevent dangerous cyberattacks

• Accenture acquires Cygni to accelerate cloud first strategies with software engineering services

• After Oil giant Shell hit by Clop ransomware, workers’ visas posted online as part of extortion attempt

• Researcher Patented C2FIV Technology As 2FA For Face Recognition Via Facial Movements

• FatFace Disclosed Data Breach; Turns Out It Suffered Ransomware Attack

• CMMC body hires ex-CISA deputy as first CEO

• Manufacturing Firms Learn Cybersecurity the Hard Way

• American Distrust in Press: Deadly 1830s Cancel Culture

• FTC Abandons Antitrust Lawsuit Against Qualcomm

• Rishabh Mishra joins Infostretch as Head of Corporate Development

• Adversarial training reduces safety of neural networks in robots: Research

• Pair of Apex Legends Players Banned for DDoS Server Attacks

• A Defense-in-Depth Approach Could Stop the Next Big Hack in its Tracks

• Fake MagSafe Accessories Might Be a Bargain, But Watch Out for Shortcomings

• IT Security News Daily Summary 2021-03-29

• Cloudflare’s New API Abuse Detection Services Validate Usage Via Intent

• Canalys: More data breaches in 2020 than previous 15 years despite 10% growth in cybersecurity spending

• NIST framework focuses on election cybersecurity

• Beware of scams this tax season

• Remote work and increased cybersecurity threats presented both challenges and opportunities for MSPs

• SolarWinds Hackers Accessed DHS Chief’s Email

• Attackers Target PHP Git Server to Backdoor Source Code

• Anton’s Security Blog Quarterly Q1 2021

• Apple Expanding Independent Repair Provider Program Worldwide

• Stupid Patent of the Month: Telehealth Robots Say Goodbye

• The one reason your iPhone needs a VPN

• Malicious System Update App Targets Android Users With Malware

• BrandPost: Episode 4: Reduce SOC burnout

• Cultivating small talk when there’s no office

• Best VPN service in 2021: Safe and fast don’t come for free

• Weak passwords are dangerous to your organization

• Facebook Blocks Politician, Gets Accused Of “Digital Totalitarianism”

• Top 20 Most Common Hacker Behaviors

• London-based academies Harris Federation hit by ransomware attack

• Apple Offers Employees Paid Time Off to Get Vaccinated

• Hades Ransomware Gang Exhibits Connections to Hafnium

• CompuCom Cyber-Attack Costs Could Reach $28M

• Vulnerability in ‘netmask’ npm Package Affects 280,000 Projects

• More Solutions Doesn’t Mean More Protection

• US Imprisons BEC Scammer

• Bsides Seattle 2020 – Juliet Okafor, J.D. ‘Keynote’

• XKCD ‘Mask Opinions’

• Bsides Seattle 2020 – Leron Gray’s ‘Y’all Tryna Enumerate Azure AD And RBAC Or Nah?’

• Apple Says App Store, iMessage, iCloud Drive, and Other iCloud Services Are Experiencing Issues [Update: Fixed]

• One Year of COVID-19 in the Middle East and North Africa: The Fate of the ‘Best Performers’

• Sitting comfortably? Then it’s probably time to patch, as critical flaw uncovered in npm’s netmask package

• Introducing ShiftLeft Educate – Security Training for Developers [Webinar]

• 5G slicing vulnerability could be used in DoS attacks

• IRS plots $2.6B IT services consolidation

• The superpowered SOC: How AI can drive agencies to the next level of cyber defense

• DOD ramps up mobile security

• Corporate doxing is on the rise: Here’s how hackers are doing it and how to stop them

• Bumble Launches Online Safety Guide

• SASE, ZTNA and XDR market trends must work together for simplified security

• China-linked RedEcho APT took down part of its C2 domains

• Deals: New Accessory Sales Include 12.9-Inch Magic Keyboard at $249 ($100 Off) and Numerous Discounts on Beats Headphones

• Apple Says App Store, iMessage, iCloud Drive, and Other iCloud Services Are Experiencing Issues

• Adaptive cybersecurity: 3 strategies that are needed in an evolving security landscape

• Almost 40 German Parliament Email Accounts Accessed After Spear-Phishing Attack

• Australian TV Network Services Interrupted

• Apple Releases Emergency Update

• Ransomware Admin is Refunding Victims Their Ransom Payments

• Top Security Tips That Every Business Owner Must Know

• Insurance Giant CNA Went Offline Following A Ransomware Attack

• SAAS & Security – Best Practices For Businesses

• March 2021 Web Server Survey

• 5 Ways MVISION XDR Innovates with MITRE ATT&CK

• SolarWinds hackers accessed emails from U.S. Department of Homeland Security

• Billions of records have been hacked already. Make cybersecurity a priority or risk disaster, warns analyst

• Ransomware negotiations: An inside look at the process

• #LORCALive: More Work Required to Realize the Potential of AI in Cybersecurity

• Ransomware and Extortion Evolve More Brazen Tactics

• Shark Tank’s Robert Herjavec on the state of cybersecurity

• Ransomware Cyber Attack news headlines trending on Google

• BrandPost: 5 Fundamentals for Effective Security Design

• PHP Infiltrated with Backdoor Malware

• Beware of Ongoing Brute-Force Attacks Against NAS Devices, QNAP Warns

• Vulnerability Summary for the Week of March 22, 2021

• Flaws in Ovarro TBox RTUs Could Open Industrial Systems to Remote Attacks

• Manage Google Workspace & Microsoft 365 Identities in Minutes from a Single Cloud Directory

• The Importance of Cybersecurity to SEO

• Apple and Google Leading the Way on eSIM Adoption

• Apple Announces David Attenborough Documentary ‘The Year Earth Changed’

• Ransomware causes shutdown of TV Network

• Sierra Wireless Restarts Production After Being Hit by a Ransomware Attack

• How to build a successful application security program

• Steam users: Don’t fall for the “I accidentally reported you” scam

• Apple Fixed Serious Actively Exploited Zero-Day Bug With iOS 14.4.2

• The Path to Combatting Domain Abuse

• Official PHP Git server targeted in attempt to bury malware in code base

• Billions of records have been hacked already. Make cybersecurity a priority of risk disaster, warns analyst

• Linux 101: How to give users sudo privileges on Ubuntu and Red Hat-based Linux distributions

• ‘Hades’ Ransomware Hits Big Firms, but Operators Slow to Respond to Victims

• More Ransomware Gangs Targeting Vulnerable Exchange Servers

• Beware of scam using the name of Europol’s Executive Director

• 9 million fake sedative pills removed from circulation by Hungarian and Norwegian Police

• Netmask Flaw Leaves Millions Vulnerable While a PHP Git Server is Hacked in Software Supply Chain Attack

• Preparing for the Next “Big Attack”

• Why Healthcare Security Requires an Operation-Centric Approach

• Hackers breached the PHP ‘s Git Server and inserted a backdoor in the source code

• US Charges Close To 500 Individuals For COVID-19 Fraud, Criminal Activity

• Channel Nine Cyber-Attack Disrupts Live Broadcasts In Australia

• Suspected Russian Hackers Gained Access To US Homeland Security Emails

• Hyper Launches Magnetic Wireless Battery Pack for iPhone 12 Lineup

• Dutch Company RDC Confirms Security Breach

• New Ransomware Group Leaks Data Belonging to a Important US Military Contractor

• FatFace Sends Out Controversial Email After Ransomware Attack

• Exchange Server Post-Compromise Attack Activity Shared by Microsoft

• UK terror law reviewer calls for prison sentences if suspects refuse to hand passwords over to investigators

• Backdoor Disguised as Typo Fix Added to PHP Source Code

• ClubCISO Appoints Stephen Khan as its New Chair

• Ziggy Ransomware Operators Refund Victims Who Paid Ransom

• Have You Backed Up Your Data Lately? Don’t Be an April’s Fool — Back Up Your Data on World Backup Day

• 4 Open Source Tools to Add to Your Security Arsenal

• Deals: Get Apple’s 64GB iPad Air for $549.98 and 256GB M1 MacBook Air for $949.99 ($49 Off)

• Images of Prototype Show Apple Planned iPad With Two Ports

• Channel Nine Possibly Hit by a Ransomware Attack on Sunday

• CompuCom MSP Might Lose Over $20M After Ransomware Attack

• Survey: Cybersecurity Community Increasingly Concerned About SolarWinds Breach

• Call Center Provider Experiences Major Data Leak

• Critical “Netmask” npm Package Flaw Affects Hundreds of Thousands of Applications

• Women in Security Part 6: Meet Nandini De, Director of Engineering

• AP Sources: SolarWinds Hack Got Emails of Top DHS Officials

• Hades Ransomware Linked to Hafnium and Exchange Attacks

• CISA Builds Out Defensive Tools for Security Teams

• Leica Camera From Former Apple Designers Jony Ive and Mark Newson Heading to Auction

• Xiaomi Unveils Apple AirPower-Like $90 Wireless Charging Pad Capable of Charging Three Devices Simultaneously

• Understanding The Psyche Of A Modern-day Hacker

• Clop Ransomware Applies Leverage from Customers to Convince Victims to Pay

• Secure Access to Your Google Chrome Enterprise With Duo

• Scottish National Party members found among list of names signed up to rival Alba Party after website whoopsie

• Can WebAuthn and U2F finally give us safe and easy Two-Factor authentication?

• States enact safe harbor laws against cyberattacks, but demand adoption of cybersecurity frameworks

• Naked Security Live – Lessons beyond ransomware

• $571 Million to be Paid over Bitcoin Scam

• CNA Hit by a Phoenix CryptoLocker Ransomware Attack

• How to Effectively Prevent Email Spoofing Attacks in 2021?

• New Bugs Could Let Hackers Bypass Spectre Attack Mitigations On Linux Systems

• Will AI Short Circuit Cybersecurity?

• CISA’s ICS Medical Advisory On CT Scanners & Cybersecurity – CEO Perspective

• 300,000 User Accounts Exposed After Credit Card Hacking Forum Is Hacked

• Attackers tried to insert backdoor into PHP source code

• State-sponsored cyber warfare is a top concern for tech executives

• How private sector, government can work to fend off cyber attacks

• PHP repository moved to GitHub after malicious code inserted under creator Rasmus Lerdorf’s name

• US charges close to 500 individuals for COVID-19 fraud, criminal activity

• UK’s CNI Security Threatened by Staff Burnout

• #IMOS21: Infosecurity Magazine Spring Online Summit Now Available On-Demand

• iPhone Shipments to Gulf Countries Saw Double-Digit Growth in Q4 2020

• World Backup Day – Experts Responses

• Here Are the Free Ransomware Decryption Tools You Need to Use [2021 Updated]

• New Powerful Android Malware Disguised as System Update is Attacking Android Phones

• Patch alert for Apple fans: Cybercrooks have already been exploiting this flaw in iPhones, iPads, and watches

• Attracted to disaster: Secrets of crisis CISOs

• DNS over HTTPS, DNS over TLS explained: Encrypting DNS traffic

• Amazon Goes On Offensive Against Critics In Washington

• More Institutional Investors Shun Deliveroo IPO

• Silicon UK In Focus Podcast: The Speed of Change: How Fast Are You?

• FCW Insider: March 29, 2021

• German MPs Hit by Russian-Backed Phishing Attacks

• PHP’s Git Server Hacked to Insert Secret Backdoor to Its Source code

• Doxing in the corporate sector

• Critical netmask Networking Flaw Reported by Security Specialists

• Blockchain may be the machinery of mischief, but it can’t help telling the truth

• How hackers are targeting your phone through Bluetooth

• New York Times Column Sells For Over £400,000

• Tech Chiefs Face Latest Grilling By Congress

• Aussie TV Network Taken Off Air by Ransomware

• Ziggy ransomware admin announced it will refund victims who paid the ransom

• Apple Maps Starts Showing Speed Camera Information in Additional Countries [Updated]

• Disintegrating SpaceX Rocket Creates Light Show

• Brian Krebs: No, I didn’t hack your Microsoft Exchange server

• This Android malware hides as a System Update app to spy on you

• 3 Foundations of a Data Security Strategy

• Jumping into Shellcode, (Mon, Mar 29th)

• Why you need to trust your VPN: Lock and Code S02E05

• Trying to register your antivirus in Windows Security Center?

• CISO Career In Tech | Avast

• Securing Vaccine Passport Applications

• New Purple Fox version includes Rootkit and implements wormable propagation

• McAfee unveils MVISION CNAPP, a new security service designed to secure cloud native applications

• Which cyberthreat should you care about most? Here’s a clue … all of them

• Beware of this malicious Android system update

• Australia Channel 9 TV Ransomware Cyber Attack

• Authorization Technology is the Future of Collaboration

• Optus puts McAfee monitoring on its home router for WiFi Secure

• How do I select a bot protection solution for my business?

• Stop using your employees as scapegoats: Change their behavior

• The importance of a zero trust-based approach to identity security

• Why certificate automation is no longer just “nice to have”

• Andrews takes over at Home Affairs as Dutton moves into Defence

• NIST SP 800-172 (Formerly SP 800-171B) Release Couldn’t Come at a Better Time

• Data center market size to reach $519.34 billion by 2025

• As DX acceleration continues, identity and zero trust need to be central in all business decisions

• Most Important Android Penetration Testing Tools for Pentesters & Security Professionals

• ISC Stormcast For Monday, March 29th, 2021 https://isc.sans.edu/podcastdetail.html?id=7432, (Mon, Mar 29th)

• Siemens unveils Veloce, a hardware-assisted verification system

• Elastic Security 7.12 accelerates threat hunting workflows and prevents ransomware

• Solvo’s cloud security solution addresses future changes and new apps’ component deployments

• Zero Trust for Data

• Inseego Wavemaker PRO 5G outdoor CPE FW2000e certified for use in Europe and the U.S

• Threat Stack Cloud Security Platform now offers real-time threat and anomaly detection in the cloud

• Old but Gold – Attack and Defend the Sys Admins

• Clearsense raises $30M to expand its data platform-as-a-service technology and advisory services

• AutoRABIT acquires CodeScan to ensure code quality and security

• Hornetsecurity acquires Zerospam to extend its reach in the North American market

• Adsero Security and Ballast Services partner to provide IT security compliance and managed services

• Momentum Cyber announces firm promotions and team expansion

• Kendall Collins joins Okta as CMO

• IT Security News Weekly Summary – Week 12

• IT Security News Daily Summary 2021-03-28

• Experts found two flaws in Facebook for WordPress Plugin

• TCPView v4.0 Released, (Sun, Mar 28th)

• The University of Queensland’s Webinar: ‘Cyber Security – Is A Secure Future Possible?’

• Experts: Facebook Oversight Board Not Enough To Fix Company’s Content Problems

• No, I Did Not Hack Your MS Exchange Server

• USENIX Enigma 2021 – Marcus Botacin’s ‘Does Your Threat Model Consider Country And Culture? A Case Study Of Brazilian Internet Banking Security To Show That It Should!’

• Serious Security: OpenSSL fixes two high-severity crypto bugs

• Hackers disrupted live broadcasts at Channel Nine. Is it a Russian retaliation?

• Here are Some Interesting Facts About Website Hacking

• Ransomware Attacks Targeting UK’s Education Sector Increased, says NCSC

• Washington Needs a Plan for Pushing Back on Autocratic Advances

• Security Information and Event Management (SIEM) with Elastic

• Microsoft Azure Checklist: Expert Advice on Security

• Should Technology Product Training Be Free?

• QNAP urges users to take action to protect devices against Brute-Force attacks

• Final Fantasy VIII Remastered Now Available on iPhone and iPad

• Purple Fox Malware Adopts Wormable Behavior To Target Windows Systems

• How to Keep Nearby Strangers from Sending You Files

• Security Affairs newsletter Round 307

• Great Britain named Russia as the main threat in cyberspace

• US Gov Executive Order would oblige to disclose security breach impacting gov users

• Week in review: Phishers’ perfect targets, evaluating partner cyber resilience, new issue of (IN)SECURE

• Penetration testing

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Fleeceware apps earned over $400 million on Android and iOS

• Facebook Blocks Chinese Hackers Using Fake Person as Targeting Uyghur Activists

• Stories from the SOC – Propagating malware

• IT Security News Daily Summary 2021-03-27

• New Android malware poses as “System Update” to steal your data

• Clop Ransomware gang now contacts victims’ customers to force victims into pay a ransom

• USENIX Enigma 2021 – Mark Funk’s ‘Designing Verifiable Health Solutions For Global Pandemic’

• Malware Analysis with elastic-agent and Microsoft Sandbox, (Fri, Mar 26th)

• Joy Of Tech® ‘The Power Of Google’

• Experts spotted a new advanced Android spyware posing as “System Update”

• Beyond iPhone 13: Long-Term iPhone Rumors

• Enterprise-Grade Mobility takes another step forward with new mobile security offers

• What is managed detection and response?

• Why is Third-Party Risk Management important in 2021?

• Security News in Review: REvil Attacks Laptop Maker Acer; Black Kingdom Ransomware Targets Unpatched Exchange Servers

• USENIX Enigma 2021 – Cooper Quintin’s ‘Detecting Fake 4G LTE Base Stations In Real Time’

• Apple Watch Can Accurately Assess Frailty, Finds Stanford Study

• Apex Legend players banned for winning via DDoS attacks

• Threat Actor Targets Guns.com, Spills Sensitive Information on Dark Web

• Apple devices get urgent patch for zero-day exploit – update now!

• Future Focused: A Safer Way to Expose Private Server Names

• Top Stories: iPhone 13 Front Glass Leak, Rugged Apple Watch, HomePods With Screens?

• Hackers Hosed by Google Were a Counterterrorism Operation

• 5 Ways How VPN helps you increase your data privacy in 2021

• Serious Security Vulnerabilities Found In Facebook for WordPress Plugin

• A CISO’s Guide to Prevent Ransomware Attacks

• Apple released out-of-band updates for a new Zero‑Day actively exploited

• Weintek’s HMI Found with Vulnerabilities which can Allow Attackers to Exploit Devices

• Watch Out! That Android System Update May Contain A Powerful Spyware

• Apple releases emergency update for iPhones, iPads, and Apple Watch

• Hades Ransomware Attacks US Big Game

• ‘Build’ or ‘Buy’ your own antivirus product

• Apple Issues Urgent Patch Update for Another Zero‑Day Under Attack

• Week in security with Tony Anscombe

• Four innovative payment services using a banking app

• Cybersecurity and accessibility for Ecommerce platforms: Is it possible?

• What is a security operations center (SOC)? Explaining the SOC framework

• Brother and Sister Pleads Guilty for Stealing & Selling Hundreds of Laptops from University

• Firm calls cops on researcher for responsibly disclosing data leak

• Sonrai Dig Wins Product of the Year Award

• How to Build a Strong Information Security Policy

• Even with Changes, the Revised PACT Act Will Lead to More Online Censorship

• Apple Patches Under-Attack iOS Zero-Day

• German Parliament Bundestag targeted again by Russia-linked hackers

• Apple releases iOS 14.4.2 to address “universal cross site scripting” in Webkit https://support.apple.com/en-us/HT212256, (Fri, Mar 26th)

• Securing our approach to domain fronting within Azure

• IT Security News Daily Summary 2021-03-26

• How to Securely Erase Data from Your Mac and External Drives

• SolarWinds Experimenting With New Software Build System in Wake of Breach

• Apple Releases Security Updates 

• Threat Roundup for March 19 to March 26

• Monitoramento de rede do Windows facilitado com OpManager

• Razões pelas quais o patch integrado e o gerenciamento de vulnerabilidade reduzem os riscos de forma rápida e eficiente

• Friday Squid Blogging: Squid Potato Masher

• Dystopia Prime: Amazon Subjects Its Drivers to Biometric Surveillance

• Dismantling the ‘old boys’ club’ at State

• Advanced encryption powers privacy-protecting gun registry

• Air Force scorecard to track increasing connectivity

• Global 5G from space

• DOE investing in machine learning tools for data analysis

• Executive Order Would Strengthen Cybersecurity Requirements for Federal Agencies

• ‘Russian Hackers’ Again Target German MPs: Report

• Jumio CEO discusses new $150 million funding round

• Apple Patches iOS Zero-Day

• 40% of Apps Leaking Information

• Judge in Upcoming Epic v. Apple Trial to Limit In-Person Attendees

• Facebook removes 100s of accounts for spreading iOS, Android malware

• Employee Lockdown Stress May Spark Cybersecurity Risk

• How to install the Pritunl VPN server on Ubuntu Server 20.04

• Microsoft Shares Exchange Server Post-Compromise Attack Activity

• Alan Turing, WWII Cryptanalyst and Computer Pioneer, on New £50 Note

• Enrich Your Experience With Palo Alto Networks on LIVEcommunity Today

• Phished Healthcare Provider Takes Legal Action Against Amazon

• A Day in the Life of a DevSecOps Manager

• USENIX Enigma 2021 – Sofía Celi’s’ ‘I Thought I Was Being Strong With A Complicated Person: The Tales Of Intimate Gender-Based Online Abuse In The Global South’

• XKCD ‘IMDb Vaccines’

• Is Tesla an Elaborate Scam?

• Hades ransomware gang targets big organizations in the US

• MacRumors Giveaway: Win a Leather Folio for the iPad From Woolnut

• A quick FAQ about NFTs

• Data Dump for 7.3 million Dutch Car Owners Offered for Sale on Hacking Forum

• OpenSSL Update Fixes Two High-Severity Vulnerabilities

• Mamba Ransomware Stores Key in Plaintext

• Google wants to standardize digital car key and ID support on Android

• A new Android spyware masquerades as a ‘system update’

• 15 Email Delivery Terms Explained

• Stratus Technologies, Sierra Wireless Suffered Ransomware Attacks

• BrandPost: 5 tips for maximizing the effectiveness of your EDR solutions

• Cloud Security Fundamentals: Servers to Containers & Everything In-Between

• Cloudflare goes deep on API abuse detection

• VA chief looks at spend, productivity on $16B health record modernization plan

• Stay in control with Azure AD Privileged Identity Management

• Data Bias in Machine Learning: Implications for Social Justice

• CISO Stories Podcast: Going All-In on a Career in Security

• Apple Releases watchOS 7.3.3 With Security Updates

• Apple Releases iOS and iPadOS 14.4.2 to Fix Actively Exploited Security Vulnerability

• Four clever ways smart technology can help create big energy savings

• How telecom operators can address the challenges of ‘going digital’

• How the eSIM market is pushing boundaries in 2021

• SD-WAN vs. MPLS: how do they compare from a security perspective?

• Texas power failures highlight dangers of grid attacks

• Women in Security Part 5: Meet Lavine Oluoch, Threat Analyst

• Data-centric security is key to resiliency, cyber risk report says

• How set up and use a VPN on Windows, Mac, iOS, or Android

• Insurance Giant CNA Hit with Novel Ransomware Attack

• SolarWinds CEO gives chief security officer authority and air cover to make software security a priority

• Severe Flaws in Official ‘Facebook for WordPress’ Plugin

• Kaspersky Sees Rise in Ransomware Attacks on ICS Devices in Developed Countries

• EU, US Make New Attempt for Data Privacy Deal

• Report: US Gov Executive Order to Mandate Data Breach Disclosure

• NGA Picks Four States for Academy on Cybersecurity Policy

• Black code: Two critical vulnerabilities found in Intel processors

• Enterprise Cybersecurity Measurement

• Imperva Observes Hive of Activity Following Hafnium Microsoft Exchange Disclosures

• Reducing Human Error Security Threats with a Remote Workforce

• BackBlaze Mistakenly Shared Backup Meta Data with Facebook

• Facebook patches 2 severe vulnerabilities for WordPress Plugin

• UK names Russia and China as Cyber Threats

• Sierra Wireless partially restores network following ransomware attack

• Severe Flaws in Facebook for WordPress Plugin

• How can ransomware attack cloud storage?

• FBI Issues Mamba Alert

• OpenSSL Releases Security Update

• Apple Arcade March 2021 Roundup: ‘SP!NG,’ ‘Cozy Grove,’ ‘HitchHiker,’ and ‘Farm It!’

• Hades ransomware targets ‘big game’ in the US

• Two vulnerabilities found in Intel Processors

• Evil Corp Evades OFAC Sanctions by Employing Hades Ransomware

• What Is Network Monitoring?

• NAS Devices Still Targeted by Brute-Force Attacks, QNAP Warns

• Cloudflare Enhance Users Safety With Browser Isolation, Page Shield

• FCW Insider: March 26, 2021

• Quick Hits

• Accelerating modernization with an extra $1B

• 5G Security Flaw Allows Data Access, DoS Attacks

• QNAP Urges Users to Secure Devices Against Brute-Force Attacks

• Moving from DevOps to CloudOps: The Four-Box Problem

• OpenSSL Releases Patches for 2 High-Severity Security Vulnerabilities

• JumpCloud Sweeps G2 Crowd Leadership Ratings and Wins Big in G2 Momentum Grids

• Solarwinds Orion Platform updates fix two remote code execution issues

• Deals: Get Apple’s 11-Inch iPad Pro Magic Keyboard for $199 ($100 Off, Lowest Price)

• Expert Commentary On UK Gov Cyber Security Report

• Bug bounty program issued for Teams

• Merging Machine-Learning into Endpoint Protection (EPP)

• How Do IT Asset Management Solutions Work and How to Choose One

• Don’t post it! Six social media safety sins to say goodbye to

• 66 Password Statistics That Will Change Your Online Habits

• BrandPost: 5 Mistakes to Avoid When Evaluating Your Next Security Investment

• Alan Turing’s £50 banknote officially unveiled

• Major Security Flaw Spotted in 5G Core Network Slicing Design

• Hacking Weapons Systems

• Suspected Chinese Group Calypso APT Exploiting Vulnerable Microsoft Exchange Servers

• Buffer Overruns, License Violations, And Bad Code: FreeBSD 13’s Close Call

• Hades Ransomware Operators Are Hunting Big Game In The US

• OpenSSL Fixes High-Severity Flaw That Allowed DoS

• Manufacturing’s Cloud Migration Opens Door To Major Cyber Risk

• Experts Insight On Babuk Locker Ransomware Gang Leaks Military Contractor’s Data

• What Is PXE Boot and How Does It Work?

• A Discussion on How to Prevent Ransomware Attacks

• Boards still aren’t taking cybersecurity seriously, warns new NCSC boss. That means everyone is at risk

• What is a VPN and why do you need one? Everything you have to know

• Exchange Server attacks: Microsoft shares intelligence on post-compromise activities

• Vulnerabilities Can Allow Attackers to Remotely Gain Control of Weintek HMIs

• UK Security Chief: CEOs Must Get Closer to Their CISOs

• REvil Ransomware Gang Introduces New Malware Features which can Reboot Infected Devices

• Forex Broker Leaked Customer Records

• 2021 Security Outcomes Study: Timely Incident Response as a Business Enabler

• As Blinken Visits Europe, China Retaliates Against U.S., EU Xinjiang Sanctions

• The Christchurch Report Points to Better Avenues for Internet Reform

• Mamba ransomware weakness exposed by the FBI

• Phishing Emails Are Now Spreading Trickbot Malware, FBI and CISA Warn

• (VIDEO) Getting Started With Duo – Step 5: Adding Users

• Google sets up Android group for future car keys, national ID, e-wallets

• General Says Attacks by Foreign Hackers Are ‘Clarion Call’

• Endpoint Security Provider Morphisec Bags $31 Million Investment

• Burned Out Employees Put Corporate Security at Risk

• Leaker Reveals Size of Apple’s AirTags and Says They’ll Cost Around $39

• Accellion Breach Leaks University & Health System Data – Expert Comments

• The (Cyber)Education Of Man

• Two Critical Vulnerabilities Patched in Facebook for WordPress Plugin

• Why would a lawyer ever need an Information Security Professional?

• Hackers Gained Access to 150,000 IP Cameras Inside Hospitals, Police Departments, Prisons, Schools, and Companies like Tesla & Equinox

• Hades ransomware operators are hunting big game in the US

• Patch Facebook for WordPress to Fix Site Takeover Bugs

• Three arrested in Spain for terrorist financing

• Bloomberg: Apple May Launch Rugged Apple Watch Model for Extreme Sports as Soon as This Year

• iPhone 13 Pro Lineup Rumored to Include Matte Black Option, New Anti-Fingerprint Coating for Stainless Steel Edges, and More

• Security Expert Reacted On Facebook For WordPress Vulnerabilities

• UK Clothing Retailer Breached, Tells Customers Not To Disclose It

• CSO’s ultimate guide to security and privacy laws, regulations, and compliance

• The race to secure 5G

• Women IT leaders reset the CIO-CISO relationship

• ‘Hacktivism’ adds twist to cybersecurity woes

• Critical Flaw in Jabber for Windows Could Lead to Code Execution

• Kroll Acquires Redscan to Expand Cyber-Risk Offering

• Data Breach Saga: What You Need To Know About The Cit0day Data Leak

• Facebook Developing Instagram App for Kids Under 13 | Avast

• New 5G Flaw Exposes Priority Networks to Location Tracking and Other Attacks

• FBI published a flash alert on Mamba Ransomware attacks

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• 5 tendências que definirão o gerenciamento de endpoint em 2021 e além

• Cuatro pilares de gestión de cuentas privilegiadas (PAM), según Gartner

• Report Finds Surge in Malware Aimed at MacOS

• Setting up a SOC in the Midst of a Pandemic

• New Details on Astoria Company Hack Emerge

• 70% of organizations recognize the importance of secure coding practices

• New infosec products of the week: March 26, 2021

• Astoria (unverified) – 11,498,146 breached accounts

• Online businesses that are most targeted by cyber attacks

• Facebook offers 2 severe vulnerabilities for WordPress Plugin

• Purple Fox Malware Propagates as Worms Attacking Windows Machines

• Google says ACCC’s work on ad tech regulation could be at odds with Privacy Act

• Warning issued over scams touting fake COVID‑19 vaccines, asking for Bitcoin

• Another Critical RCE Flaw Discovered in SolarWinds Orion Platform

• Attack volume surged by 48% during the first year of the pandemic

• The war against the virus also fueling a war against digital fraud

• International Women’s Day: Celebrating female-led innovation

• Why biometric bank cards are the future of payments

• Security checklist for using cryptocurrency in online casino transactions

• With more than 400,000 crypto scams created in 2020, increase of 75% predicted for 2021

• Financial services and insurance faring better than most in the pandemic year

• Report: Facebook Is Autogenerating Pages For Extremist Groups

• Data Theorem Cloud Secure protects cloud-native apps, API services and serverless cloud functions

• How to get affordable DV certificates for onion sites

• ISC Stormcast For Friday, March 26th, 2021 https://isc.sans.edu/podcastdetail.html?id=7430, (Fri, Mar 26th)

• Elastic enables users to uncover insights and drive action with their data through the power of search

• SonicWall NSa 3700: Thwarting attacks targeting government agencies and large enterprises

• Elastic Observability updates accelerate root cause analysis and enables unified monitoring

• Services Australia reported 20 security incidents to the ACSC in 2019-20

• Office macro execution evidence, (Fri, Mar 26th)

• Acronis integrates with Kaseya VSA platform to enable better productivity for MSPs

• AWS and Red Hat announce availability of Red Hat OpenShift Service on ROSA

• cPacket cStor 100 sets new standard for capturing, storing, and analyzing network packet data

• SMART Modular expands its DuraFlash ME2 SATA SSD portfolio with M.2 2242, mSATA and Slim SATA

• Samsung expands its DDR5 DRAM memory portfolio with the 512GB DDR5 module based on HKMG

• Combat Networks acquires Duologik and GDL to strengthen its managed solution offerings

• Kroll acquires Redscan to expand cyber risk offering

• Trava raises $3.5M to invest in data science and ML expertise to develop its insurance analytics platform

• IDEMIA partners with Cybernetica to offer strong mobile authentication and digital signatures

• Insight to sell and support the Byos family of patented plug-and-play Secure Endpoint Edge solutions

• CISA is warning of vulnerabilities in GE Power Management Devices

• Consent Management: Picking the Right CIAM Strategy

• Gary Reinersman joins Cloud 9 as CTO

• Paradigm appoints Daniel Creed as VP of cloud and information security

• Confluent expands executive team with two new appointments

• Box appoints Sebastien Marotte as President of Box EMEA

• Strike Graph hires Dan Adams as VP of sales

• Four-Pronged Approach to Keep Your Domain Names and DNS Secure from Cyberattacks

• Lawmakers seek clarity on hazy White House pot policy

• Australia’s COVIDSafe app costs AU$100,000 per month to keep running

• Exec Order Could Force Software Vendors to Disclose Breaches to Federal Gov’t Customers

• U.S. Carriers Fix SMS Routing Vulnerability That Let Hackers Hijack Texts

• IT Security News Daily Summary 2021-03-25

• 11 Popular Penetration Testing Tools

• Air Force seeks ‘ubiquitous connectivity’ from telework to bases

• Z-axis tech keeps responders safe

• NGA taps 4 states for cybersecurity policy academy

• How an advanced architecture can dramatically mitigate massive data breaches

• The good and the bad with Chrome web browser’s new security defaults

• Fleeceware Apps Bank $400M in Revenue

• Black Kingdom ransomware foiled through Mega password change

• CISA Adds Two Web Shells to Exchange Server Guidance

• COVID-19 Continues to Fuel Fraud Attacks

• OpenSSL Project released 1.1.1k version to fix two High-severity flaws

• M1 Mac Mini Won’t Wake Connected Displays, Some Owners Complain

• Analyzing attacks taking advantage of the Exchange Server vulnerabilities

• Perkiler malware turns to SMB brute force to spread

• Major vulnerability exposes 5G core network slicing to DoS attacks

• Microsoft Offers Up To $30K For Teams Bugs

• Report: 40% of SaaS application users have lost data

• In Secure Silicon We Trust

• Apple Fitness+ Outage Makes Some Workouts Unavailable

• iPhone 12 Pro Max is Among ‘Best Smartphones of 2021’ Says Consumer Reports

• OpenSSL shuts down two high-severity bugs: Flaws enable cert shenanigans, denial-of-service attacks

• Google removes ClearURLs Chrome extension from its store

• New Code Execution Flaws In Solarwinds Orion Platform

• Nearly Half of Popular Android Apps Built With High-Risk Components

• Extracting Toolmarks from Open Source Reporting, pt II

• Apple Now Accepts Google Pixel 4a and Pixel 5 and Samsung Note 20 for Trade-In Towards New iPhone Purchase

• Apple Fixes iCloud Links for Sharing Shortcuts

• Free as in Climbing: Rock Climber’s Open Data Project Threatened by Bogus Copyright Claims

• What’s Covered Under Data Breach Insurance

• Facebook Disrupts Spy Effort Aimed at Uyghurs

• Cyber insurance company CNA discloses cyber attack

• Data Loss Impacts 40% of SaaS App Users

• Activist Denies Facebook Fraud

• Security Operations in the World We Live in Now

• Cisco Releases Security Updates

• Samba Releases Security Updates

• MSFT ‘The Reaper’

• USENIX Enigma 2021 – Hyrum Anderson’s ‘The Practical Divide Between Adversarial ML Research And Security Practice: A Red Team Perspective’

• 62,000 Microsoft Exchange Servers potentially left unpatched, weeks after software bugs were first uncovered

• YouTubers Demo the Apple-Related Tech They Use to Get Fit

• What Did We Learn From House and Senate Hearings on the Capitol Assault?

• The Geopolitics of Politics and Protest: Myanmar, China and the U.S.

• Announcing the Android Ready SE Alliance

• Slack hurries to fix direct message flaw that allowed harassment

• AI is boring – or is it?

• 2021-03-25 – Medical reminder service trial ending scam emails

• Best Windows and Mac backup software in 2021

• Manufacturing’s Cloud Migration Opens Door to Major Cyber-Risk

• Dodge is using two-factor authentication to secure its most powerful muscle cars

• US Cyber Experts Conducted Operations to Safeguard Election

• The Growing Need for a New Security Platform

• The CIO’s Shifting Role: Improving Security With Shared Responsibility

• Facebook took action against China-linked APT targeting Uyghur activists

• Throwboy Launches New Collection of Apple Themed T-Shirts

• Apple Bought the Most AI Companies From 2016 to 2020

• Popular Android Apps Putting Consumer Privacy and Security At Risk

• BitSight Observations Into Hafnium Part Four: Who Is Still Vulnerable?

• 7 Top Tips for Accelerating your IoT Projects in 2021

• Three ways technology can help revive the music industry

• Cybersecurity strategy…. To Plan or not to plan…That is the question

• A passport to freedom? Fake COVID-19 test results and vaccination certificates offered on Darknet and hacking forums

• Cisco Addresses Critical Security Flaws in Jabber Application

• Facebook Blocks Chinese State-Sponsored Threat Actors

• FBI Warns Scammers Spoofing FBI Office Phone Numbers in Government Impersonation Fraud

• Accellion FTA Vulnerability Affects Universities in Colorado and Miami

• Shell Disclosed Third-Party Data Breach Due To Vulnerable Accellion FTA

• BrandPost: Episode 3: The Zero Trust Model

Generated on 2021-04-01 00:01:28.534835