IT Security News Monthly Summary – September

• Best Linux Backup Solutions to Prevent Data Loss in A Ransomware Attack>

• August 2021 Security Intelligence Roundup: Pipeline Changes, Social Engineering and Software Supply Chain Attacks

• Governments continue to eye data privacy, forcing CIOs to adapt

• Useful Mac Apps Worth Checking Out – August 2021

• Crowdstrike beats Q2 estimates with strong subscription growth

• Cream Finance DeFi Platform Rooked For $29M

• Fortress Home Security Open to Remote Disarmament

• SEC sanctions financial firms for cybersecurity failures

• Proxyware Services Open Orgs to Abuse – Report

• Don’t forget to evaluate soft skills when hiring for cybersecurity positions

• College students targeted by money mule phishing techniques

• Twitter for iOS Beta Lays Groundwork for Bitcoin Tips

• Apple Releases New macOS 12 Monterey Public Beta

• CrowdStrike reports Q2 earnings

• Bangkok Airways hit by Lockbit ransomware; leaks 103GB of data

• Identity is replacing the password: What software developers and IT pros need to know

• Ping Identity CEO explains how identity and access management is replacing the password

• Victim of Cyber-Theft Sues Parents of Alleged Culprits

• Threat actors can remotely disable Fortress S03 Wi-Fi Home Security System

• New Labor Dept. office will focus on UI modernization

• US officials, experts fear China ransacked Exchange servers for data to train AI systems

• DIY redistricting allows public to draw maps in more states

• A passwordless future isn’t close: It’s here

• Roadblocks to autonomous cars: Top 5

• Top 5 autonomous car roadblocks

• Bangkok Airways Hit By LockBit Ransomware Attack

• Indonesians Told to Delete Unsecured Tracing App

• LockFile Ransomware Uses Unique Methods to Avoid Detection

• FBI-CISA Advisory on Ransomware Awareness for Holidays and Weekends

• Apple Releases Revised Version of Latest AirTags Firmware Update

• Water Wars: A Time for Choosing? Not for Southeast Asia, Say VP and SECDEF

• Don’t want to get hacked? Then avoid these three ‘exceptionally dangerous’ cybersecurity mistakes

• Cybersecurity experts called the signs of smartphone hack

• ‘Crossy Road’ Coming Soon to Apple Arcade for iPhone and iPad

• Reduce the Harm of a Data Breach With Data Security Analytics

• federated identity management (FIM)

• IG reports delays in COVID notification in GSA facilities

• Data compliance: “The world is still waking up to the challenges ahead,” expert says

• Data privacy, governance and insights are all important obligations for businesses

• Skimming the CREAM – recursive withdrawals loot $13M in cryptocash

• Illinois Physicians Notify 600K Patients of Data Breach

• Report: Facebook Will Begin Deprioritizing Political Content In Users’ News Feeds

• Ransomware Awareness for Holidays and Weekends

• Apple Seeds Eighth Beta of tvOS 15 to Developers

• Apple Seeds Eighth Beta of watchOS 8 to Developers

• Apple Seeds Eighth Betas of iOS and iPadOS 15 to Developers

• Ransomware Awareness for Holidays and Weekends

• FBI-CISA Advisory on Ransomware Awareness for Holidays and Weekends

• What Can You Learn from a Reverse IP Lookup?

• Don’t want to get hacked? Then avoid these three “exceptionally dangerous” cybersecurity mistakes

• WooCommerce Pricing Plugin Allows Malicious Code-Injection

• T-Mobile CEO Apologizes for Hack of More Than 54 Million Users Data

• Apple Acquires Classic Music Service Primephonic

• UK Government Considers New Regulations for Video Streaming Platforms

• Apple Watch Series 7 Production Reportedly Delayed Due to Quality Issues

• Nomad Debuts MagSafe-Compatible Base Station Mini

• Vaccine Passport Missteps We Should Not Repeat

• Microsoft a Leader in 2021 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Cosmos DB users advised to regenerate their keys following serious vulnerability

• Microsoft warns of credential phishing attack abusing open redirect links

• Top 3 API Vulnerabilities: Why Apps are Pwned by Cyberattackers

• QNAP Is Latest to Get Dinged by OpenSSL Bugs Fallout

• Hackers Can Now Bypass PIN Codes on Mastercard and Maestro Contactless Cards

• New Edition of Pipeline Cybersecurity Standard Covers All Control Systems

• H1 2021: Malware and Vulnerability Trends Report

• ‘Being James Bond’ Retrospective Will Be Free to Watch Through Apple TV App

• Startup success: manoeuvring a competitive industry

• Instagram To Require Date Of Birth From All Users

• Microsoft Warns of Widespread Open Redirects Phishing Attacks

• Google, Microsoft To Invest $30B in Cybersecurity

• HPE wars customers of Sudo flaw in Aruba AirWave Management Platform

• Network Controls in the DevSecOps life cycle

• LockFile Ransomware Uses Never Before Seen Encryption To Avoid Detection

• Singapore Government Expands Bug Hunt With Hacker Rewards

• Coinbase Erroneously Reported 2FA Changes To 125,000 Customers

• LockBit Gang To Publish 103GB Of Bangkok Air Customer Data

• HPE Warns Sudo Bug Gives Attackers Root Privileges To Aruba Platform

• Full iPhone 13 Feature Breakdown: Everything Rumors Say We Can Expect

• CISA Advises Users to Not Use Single-factor Authentication on Internet-exposed Systems

• Code Red: Hospitals Are Facing a Major Ransomware Threat

• SASE, Cloud Threats and MITRE

• Verizon and Microsoft team up to offer 5G edge cloud computing for businesses

• Top 3 API Vulnerabilities: Why Apps are Owned by Cyberattackers

• Delta variant: Is your IT department ready to go fully remote again due to COVID-19?

• Kaspersky: Kanye’s Upcoming Album is a Scam Magnet

• Chinese Developers Reveal Android Gamers’ Data

• Critical Cosmos Database Flaw Affecting Microsoft Azure Customers

• Legal Consequences Possible by Cybersecurity Standards Non-Compliance

• CISA Expands ‘Bad Practices’ List With Single-Factor Authentication

• Study Reveals Challenges & Opportunities for Secure Hybrid Workforce

• Introducing SASE Converge 2021: The Summit for What’s Next in SASE

• Analyst Discusses Apple Car’s Key to Success, Says Steve Jobs Would Be Proud of Tim Cook’s Legacy

• Joby Debuts New GorillaPod-Compatible MagSafe Mounts

• How Congress and NIST Can Help Organizations Better Manage Cyber Risk

• Ransom DDoS: What you need to know now

• Technical Flaw Led to Canada Accepting Thousands of Immigration Applications

• ProxyToken: Another nail-biter from Microsoft Exchange

• Leaked Guntrader firearms data file shared. Worst case scenario? Criminals plot UK gun owners’ home addresses in Google Earth

• Bangkok Airways Disclosed Data Breach Following A Possible Ransomware Attack

• Malware Analysis Online: Why You Need It Now For Your Cloud Environment

• South Korea Passes Bill To Curb In-App Purchase Charges

• Top 3 APIs Vulnerabilities: Why Apps are Owned by Cyberattackers

• Vulnerabilities Can Allow Hackers to Disarm Fortress Home Security Systems

• Twelve South Launches StayGo Mini USB-C Hub for Macs and iPads

• Apple Commits Extra $30 Million to Racial Equity and Justice Initiative

• Cream Finance Deprived of over $29 million in Cryptocurrency Assets

• Cyberattacks Use Office 365 to Target Supply Chain

• Texas, California, New York, Louisiana, Missouri lead list of states with most ransomware attacks on schools: report

• Cyberattackers are now quietly selling off their victim’s internet bandwidth

• Initial Access Broker use, stolen account sales spike in cloud service cyberattacks

• Cybercriminals buy up admin credentials to sharpen attacks on cloud deployments

• Researchers Propose Machine Learning-based Bluetooth Authentication Scheme

• Attackers Can Remotely Disable Fortress Wi-Fi Home Security Alarms

• User Group-Level Policy: The Sharpest Knife in the Drawer

• Starve the Beast: Monopoly Power and Political Corruption

• Cybercriminals are holding schools ransom for billions and some are paying up

• Ransomware May Have Cost US Schools Over $6bn in 2020

• What you see is what you get … to protect

• Interest in Switching to iPhone Drops Among Android Users Ahead of iPhone 13 Launch, Survey Shows

• Threat actors stole $19 million worth of crypto assets from Cream Finance

• More Military Cryptanalytics, Part III

• Microsoft warns of phishing campaign abusing ‘open redirects’

• CISA Bad Practices list updated to include single-factor authentication (SFA)

• New Konni RAT Campaign Ongoing

• China Limits Kids To Three Hours Of Video Games A Week

• Companies Release Security Advisories in Response to New OpenSSL Vulnerabilities

• ‘ProxyToken’ Exchange Server Vulnerability Leads to Email Compromise

• Lockbit Ransomware Suspected Behind the Attacks on Envision Credit Union

• Microsoft Exchange ProxyToken flaw can allow attackers to read your emails

• A Microsoft Exchange ProxyToken Bug May Allow Hackers to Steal User Emails

• Cream Finance Crypto Exchange Hacked – Lost $29 Million To Attackers

• Chip Shortage Forces Stellantis To Extend Car Factory Shutdowns

• Check Point CloudGuard Network Security is a Launch Partner for Amazon VPC Enhanced Routing

• This phishing attack is using a sneaky trick to steal your passwords, warns Microsoft

• LockFile Ransomware Uses Never-Before Seen Encryption to Avoid Detection

• A Case for Recruiting and Retaining “Franchise Players” in Security Software Development

• South Korea Passes Bill Banning Apple From Requiring Developers to Use App Store In-App Purchase System

• Kanye West’s ‘Donda’ Sets 2021 Apple Music Record With 60 Million First-Day Streams

• Report Warns of COP26 Cyber-Threat to Glasgow

• Fines Issued by the ICO Surge by 1580% in 2020/21

• LockFile Ransomware Circumvents Protection Using Intermittent File Encryption

• Samsung Galaxy Watch Gets Walkie-Talkie App Similar to Apple Watch Feature

• QNAP Will Soon Release Security Patches for OpenSSL Vulnerabilities Affecting Its NAS Devices

• Security engineer job requirements, certifications, and salary

• How ransomware runs the underground economy

• Quick Hits

• FCW Insider: August 31, 2021

• Bangkok Airways Admits Attackers Stole Passenger Data

• No, That Notchless iPhone Spotted in ‘Ted Lasso’ Isn’t the iPhone 13

• Code Generated by GitHub Copilot Can Introduce Vulnerabilities: Researchers

• White Hat Hacking And CDU | Avast

• Looking for adding new detection technologies in your security products?

• Apple TV+ Shares ‘The Velvet Underground’ Trailer Ahead of October 15 Premiere

• Check Point acquires Avanan to deliver email and collaboration suite security for organizations

• Phorpiex Malware has Shut Down their Botnet and Put its Source Code for Sale

• Drowning in cybersecurity info? Make a dash to Security SOS Week 2021

• LockFile Ransomware Exploit ProxyShell Vulnerabilities in Microsoft Exchange Servers

• CISA Adds Single-Factor Authentication to the List of Bad Practices

• The consumerization of the Cybercrime-as-a-Service market

• Cyber Threat to Glasgow COP26

• How secure is Apple iPhone 13 Satellite Connectivity

• Why companies should never hack back

• Bangkok Airways hit by LockBit ransomware attack, loses lotsa data after refusing to pay

• Singapore government expands bug hunt with hacker rewards scheme

• Increase in credential phishing and brute force attacks causing financial and reputational damage

• Online tests could help organizations plug the skills gap

• Building for transactional workloads is the primary concern around deploying Kubernetes

• New Microsoft Exchange ‘ProxyToken’ Flaw Lets Attackers Reconfigure Mailboxes

• Cybersecurity awareness is one of the skills needed for a post-pandemic economy

• Getting Started with a Tripwire Configuration Manager Free Trial

• eBook: Aligning cyber skills to the MITRE ATT&CK framework

• How To Prepare for SOC 2 Compliance: SOC 2 Types and Requirements

• 2021-08-30 – Quick post: TA551 (Shathak) BazarLoader

• Absolute DataExplorer enables IT and security teams to capture critical endpoint data

• Chinese state media says online gaming for minors now limited to three hours per week

• Strider launches risk intelligence tool to protect intellectual property

• Kids and Teens in China Banned From Playing Online Video Games for More Than 3 Hours Per Week

• New detection category for eXpurgate customers

• Fujitsu says stolen data being sold on dark web ‘related to customers’

• The Federal Circuit Has Another Chance to Get it Right on Software Copyright

• Spending debate brews ahead of NDAA markup

• Passport info and healthcare data leaked from Indonesia’s COVID-19 test-and-trace app for travelers

• Bloomberg: Apple Working on Emergency Satellite Features for iPhones, 2021 Launch Unlikely

• Victory! Lawsuit Proceeds Against Clearview’s Face Surveillance

• VA’s Cussatt heads to State

• HPE Warns Sudo Bug Gives Attackers Root Privileges to Aruba Platform

• Boffins find if you torture AMD Zen+, Zen 2 CPUs enough, they are vulnerable to Meltdown-like attack

• IT Security News Daily Summary 2021-08-30

• Hanwha Techwin Wisenet 7 Competes in 2021 ‘ASTORS’ Awards

• EFF to Council of Europe: Flawed Cross Border Police Surveillance Treaty Needs Fixing—Here Are Our Recommendations to Strengthen Privacy and Data Protections Across the World

• New ‘ProxyToken’ Exchange Server vulnerability disclosed

• Report: Facebook Is Struggling With Ivermectin Misinformation

• API Releases New Standard for Pipeline Control Systems

• Army Testing Facial Recognition in Child-Care Centers

• Top static malware analysis techniques for beginners

• Malware analysis for beginners: Getting started

• Apple Seeds Sixth Beta of macOS Monterey to Developers

• 4 ways the pandemic forced local governments to rethink budgeting and technology

• Zero trust is not enough: The case for continuous control validation

• The Underground Economy: Recon, Weaponization & Delivery for Account Takeovers

• Check Point Buys Cloud Email Security Provider Avanan

• iPhone 13 Satellite Support Rumor Disputed, Likely for Additional 5G Spectrum

• Coinbase mistakenly notified users that security settings had been changed

• Containers in the Cloud: Key Benefits and Challenges

• Three Preventative Strategies to Help Mitigate Asset Risk in Your Agency

• BrandPost: Building Network Efficiency at Hundreds of Locations Worldwide with Fortinet Secure SD-WAN

• LockFile ransomware uses intermittent encryption to evade detection

• Paying ransom should be your last resort, cybersecurity expert says

• Expert: Governments and businesses must come together to combat ransomware threat

• Rights Group Advises Afghans to Delete Data

• ‘Raymond and Ray’ Starring Ewan McGregor and Ethan Hawke Coming to Apple TV+

• Karkinos – Beginner Friendly Penetration Testing Tool

• iCloud phishing scam – Man stole private photos of 620,000 women

• Expired driver’s licenses open lane for cybercriminals

• Microsoft Exchange ‘ProxyToken’ Bug Allows Email Snooping

• Normalizing Surveillance

• GSA launches new Digital Corps to attract early-career techies

• Cyber-thieves Hit DeFi Platform Again

• Instagram to Require Users to Provide Their Date of Birth

• Intego Earns 100% Detection in AV-Comparatives 2021 Independent Testing

• logic bomb

• Microsoft 365’s new security model: How to use phishing simulations and security mailboxes

• Apple Acquires Classical Music Service Primephonic, Will Launch Dedicated Classical Music App

• US DOJ Announces Cyber Fellowships

• 10 Reasons to Trust Your Enterprise APIs

• Cyber Citizenship Education is Essential

• LEGO Star Wars Battles Coming Soon to Apple Arcade

• How to prepare for CMMC compliance as a defense industrial base supplier using the Microsoft cloud

• Details about Microsoft Azure Cosmos DB vulnerability

• Quantum Security and AI: Building a Future Together

• Where are you on your DevSecOps journey?

• IronNet co-CEO on the completion of its SPAC merger

• A week in security (August 23 – August 29)

• Multilingual Cybersecurity Awareness Training adapted for your needs

• LockBit Gang to Publish 103GB of Bangkok Air Customer Data

• Access Granted: How the DoD Can Stay Cyber-Resilient

• Covid-19 And Working Moms | Avast

• Ragnarok Ransomware Gang Releases Free Master Decryptor After Shutdown

• CISA Adds Single-Factor Authentication to list of Bad Practices

• US DoJ announces the creation of Cyber Fellowship Program

• Apple to Donate to Hurricane Ida Relief and Recovery Efforts

• Hyper Launches New Color Matched USB-C Hubs for M1 iMacs

• Mastercard and Maestro PIN Bypass: a Test Made by Swiss Researchers

• Boston Public Library Hit by Cyberattack

• BazaLoader Malware Hides in False DMCA and DDoS Complaints

• How to Maintain PCI-DSS Compliance for E-commerce Applications

• CISA Adds Single-Factor Authentication to list of Bad Practices

• South Korea Delays Bill That Would Ban Apple From Requiring Developers to Use In-App Purchase System

• Tweetbot Updated With New ‘Behaviors’ Menu on iPhone and iPad

• What Is Known About ISIS-K Funding in Afghanistan?

• 5 high-profile DDoS attacks that should chill you to the bone

• How to use phishing simulations and security mailboxes with Microsoft 365’s new security model

• ISRAELI FIRM ‘BRIGHT DATA’ (LUMINATI NETWORKS) ENABLED THE ATTACKS AGAINST KARAPATAN

• Australia Continues to Scrutinize Apple Pay Amid Push for Regulation

• LokiBot Banking Trojan Uses Old Tricks to Lure Victims

• T-Mobile Breach Update: CEO Confirmed Brute Force Attack On Network

• Boston Public Library Suffers Outages Following A Cyber Attack

• FBI Alerts About Hive Ransomware Amidst Rising Attacks On Healthcare Systems

• Singapore Eye Clinic Suffered Ransomware Attack, Lost 73,000 Patients Data

• CISA urges enterprises to fix Microsoft Azure Cosmos DB flaw

• Microsoft Azure Customers Warned of Critical Bug Found in Cosmos DB

• 8 Best Motherboards for Ryzen 9 3900X 2021 – Buying Guide

• Bangkok Airways apologizes for passport info breach as LockBit ransomware group threatens data leak

• Hybrid work here to stay: What does that mean for security?

• U.S. Justice Department Introduces Cyber Fellowship Program

• Exploitation of Flaws in Delta Energy Management System Could Have ‘Dire Consequences’

• How Does MTA-STS Improve Your Email Security?

• Apple Shares Trailer for ‘The Problem With Jon Stewart,’ Show to Be Accompanied by Podcast

• Rob Bolton and Jed Butcher Are Joining Heimdal™ Security’s Executive Team as Chief Revenue Officer and Chief Financial Officer

• DirtyMoe Botnet Is Back and It Has Surprises

• Understanding Cobalt Strike Profiles

• 7 Security Tools to Safeguard Enterprise Data

• China’s PIPL privacy law imposes new data handling requirements

• Spotify, Epic Unsatisfied With Apple’s App Store Changes

• Western Digital ‘In Talks’ To Buy Kioxia In $20bn NAND Deal

• Amazon-Backed Electric Car Maker Rivian Files For IPO

• Lessons learned on building cyber resilience

• T-Mobile Hack Involved Exposed Router, Specialized Tools and Brute Force Attacks

• Scarlett Johansson and Chris Evans to Star in Apple TV+ Movie ‘Ghosted’

• SideWalk Modular Backdoor Discovered in Newly Launched APT Campaigns

• Afghanistan’s Internet: who has control of what?

• Singapore touts need for security, use cases as 5G rollouts gather steam

• Waymo Stops Selling Lidar To Outside Companies

• Clubhouse Rolls Out Spatial Audio to iOS Users

• Microsoft Notifies About an Ongoing Open Redirects Phishing Campaign

• CISA, Microsoft Issue Guidance on Recent Azure Cosmos DB Vulnerability

• Cofense Report Analysis on Phishing Campaign Utilizing Vzwpix

• FCW Insider: August 30, 2021

• Researchers Discovered a Vulnerability in Microsoft Azure’s Cosmos DB

• Vulnerabilities Detected in Open Source elFinder File Manager

• The 7 best password managers for business

• An Overview of Magecart Attacks | Avast

• EU Set To Launch Formal Probe Of Nvidia’s ARM Takeover

• US Says Policy Against Huawei Has ‘Not Eased’

• Honduras Sets Up First Bitcoin ATM

• Boston Public Library discloses cyberattack

• Trying to register your antivirus in Windows Security Center?

• Back-to-school Tips For A Surprise Quarantine | Avast

• Customers of Russian banks will be recognized by the veins with the help of a new technology

• Hackers, tractors, and a few delayed actors. How hacker Sick Codes learned too much about John Deere: Lock and Code S02E16

• New variant of Konni RAT used in a campaign that targeted Russia

• Boston Public Library hit by Cyber Attack

• Drilling Rigs in deepwater are vulnerable to Cyber Attacks

• Operationalize AWS security responsibilities in the cloud

• Cyber threats, passenger vessels and superyachts: The current state of play

• Chinese A.I. firm SenseTime files for Hong Kong IPO despite tech crackdown and U.S. blacklist

• Microsoft warns of a Widespread Phishing Campaign to Steal Login Credentials

• Debunking myths about consumer expectations around mobile apps security

• File upload security best practices rarely implemented to protect web applications

• China’s regulatory crackdown has wiped billions off tech stocks — here are the risks ahead

• How enterprises use security operations to modernize their business

• Consumers value privacy more than potential savings when purchasing insurance

• Failing to Meet Cybersecurity Standards Can Have Legal Consequences for Companies

• ‘Ted Lasso’ Tops Hollywood Critics Association TV Awards

• Webinar: Practical steps to build a risk-based application security program

• Serverless security market size to reach $5.1 billion by 2026

• Query.AI’s enhancements drive efficiencies in cybersecurity investigations

• Why torrenting on Elon Musk’s Starlink is not a good idea?

• Boston Public Library Hit With Cyberattack

• Experts Warn of Dangers From Breach of Voter System Software

• IT Security News Weekly Summary – Week 34

• IT Security News Daily Summary 2021-08-29

• T-Mobile hacker used brute force attack to steal customers’ data

• Forrester: Why APIs need zero-trust security

• Thinking about CAP or CISSP? Here’s How They Compare.

• Kuo: iPhone 13 to Feature LEO Satellite Communications to Make Calls and Texts Without Cellular Coverage

• 1 GB of data belonging to Puma available on Marketo

• Kuo: iPhone 13 to Feature LEO Connectivity to Make Calls and Texts Without Cellular Coverage

• Scammers Use Fake DMCA Complaints, DDoS Threats to Deploy BazaLoader Malware

• 6 Things You Need to Do to Prevent Getting Hacked

• Apple Watch Series 7 Expected to Feature New Watch Faces to Take Advantage of Larger Displays

• Apple Makes Season One of TV+ Mystery Drama ‘Home Before Dark’ Free to Watch

• Universal Control Works in macOS Monterey Beta 5, But Terminal Commands Required to Enable It

• VPN Unlimited deal: Save 80% on a lifetime subscription for 5 devices

• Fraudsters Pose as Europol Chief in an Attempt to Steal Victims PayPal Account Details

• Boston Public Library Affected by Cyberattack

• The FBI has Issued a Warning About the Hive Ransomware Gang

• Security Affairs newsletter Round 329

• Week in review: ProxyShell and Realtek SDK vulnerabilities exploitation, automated pentesting

• Get Lifetime Access to 24 Professional Cybersecurity Certification Prep Courses

• DDoS attacks target the Philippine human rights alliance Karapatan

• Penetration testing

• Some Synology products impacted by recently disclosed OpenSSL flaws

• Navigating the Troubled Waters of Risk Management

• 3 SSL VPN vulnerabilities disclosed in 2019 are still routinely exploited

• EskyFun data leak, over 1 million Android gamers impacted

• Behavox appoints Fahreen Kurji as Chief Customer Intelligence Officer

• Chris Cochran and Ron Eddings join Axonius as Creative Directors

• IT Security News Daily Summary 2021-08-28

• Deepfakes in cyberattacks aren’t coming. They’re already here.

• I Spy With My Little… Phone? Yes, It Can Happen to You.

• Five iPhone 13 Rumors You May Have Missed

• Cybersecurity in Software Development: The Good Rules to Follow

• I Spy With My Little… Phone?

• Five Steps to Get a Cybersecurity Job

• Earth Baku APT Hackers Group Upgraded Its Hacking Toolset for New Cyberespionage

• T-Mobile’s Security Is ‘Awful,’ Says Purported Thief

• LockFile Ransomware Bypasses Protection Using Intermittent File Encryption

• Microsoft Warns of Widespread Phishing Attacks Using Open Redirects

• Boffins show PIN bypass attack Mastercard and Maestro contactless payments

• This open-source ML model will help you predict vulnerability exploits

• Multiple Vulnerabilities Spotted In elFinder File Manager WordPress Plugin

• Misconfigurations in Microsoft Power Apps Leaked Millions Of Records From Multiple Firms

• California Man Stole 620,000 iCloud Photos in Search of Nudes

• Microsoft Issues an Advisory on ProxyShell Vulnerabilities

• We underestimated IoT security. Let’s not make that mistake with robotics.

• T-Mobile hack: Everything you need to know

• Top Stories: iPhone 13 Nears Launch, Larger Apple Watch?, MacBook Pro and Mac Mini Rumors

• Cisco Published Two Critical and Six High-Severity Patches for Nexus Gear

• CISA Published MARs on Samples Targeting Pulse Secure Devices

• F5 Security Patched Severe Vulnerabilities in its BIG-IP Networking Device

• Phorpiex botnet shuts down and authors put source code for sale

• Build or Buy your own antivirus product

• Atlassian released security patches to fix a critical flaw in Confluence

• Top Free Cybersecurity Tools 2021

• Work from Home Increased Worldwide Phishing Attacks

• Top Cybersecurity Podcasts

• Apache Kafka as Real-Time Backbone for Cybersecurity

• Christopher Krebs: Truth and consequences

• Craig Abod: Taking the pain out of procurement

• DARPA’s Pandemic Protection Program

• Beyond the pandemic: Why are data breach costs at an all‑time high?

• Week in security with Tony Anscombe

• YugabyteDB 2.9 eliminates the need for external load balancers

• 3 Tests to Ensure Zero Trust Network Security

• Action1 RMM enables AllCode to improve the security and efficiency of its remote operations

• Help! I Think My Phone’s Been Hacked

• Cloudflare says it stopped the largest DDoS attack ever reported

• ISACA unveils two audit programs to improve backup and recovery strategies for organizations

• Microsoft Azure Cosmos DB Guidance

• An RCE in Annke video surveillance product allows hacking the device

• Accenture Federal Services hires Portia Crowe as Chief Data Strategy Director for Defense

• Explosion in Geofence Warrants Threatens Privacy Nationwide

• Microsoft Azure Cosmos DB Guidance

• Apple Launches ‘No Sound’ Repair Program for iPhone 12 and 12 Pro Models

• Cisco says it will not release software update for critical 0-day in EOL VPN routers

• Researchers discover critical flaw in Azure Cosmos DB

• What is the Islamic State in Khorasan?

• Lawfare Live: Steve Vladeck and Lindsay Wiley on Public Vaccination Mandates

• Microsoft warns of widespread open redirection phishing attack – which Defender can block, coincidentally

• IT Security News Daily Summary 2021-08-27

• Security alert: The threat is coming from inside your Docker container images

• NIST’s ransomware guidelines look a lot like cyber resilience

• Friday Squid Blogging: Tentacle Doorknob

• What’s New With the Health App in iOS 15: Data Sharing, Lab Result Improvements, COVID Vaccine Records and More

• 38 million records exposed online—including contact-tracing info

• Google Pay team reportedly in major upheaval after botched app revamp

• Intel Foundry Services gets a boost from $100M Pentagon award for US-made chips

• A New Chip Cluster Will Make Massive AI Models Possible

• Whitehat hackers accessed primary keys of Azure’s Cosmos DB customers

• Experts: WH Cybersecurity Summit Should Be Followed by Regulation, Enforcement

• Parallels Offers ‘Inconvenient’ Fix for High-Severity Bug

• T-Mobile offers details of data breach that affected 40M

• Biden orders 2.7% pay raise for civilian feds

• Winning the Cyber-Defense Race: Understand the Finish Line

• How malicious Android apps use social engineering tactics to access Facebook accounts

• T-Mobile CEO Apologizes for Data Breach, Shares Info on Future Security Plans

• Cuba’s central bank now recognizes cryptocurrencies such as bitcoin

• Update on the vulnerability in the Azure Cosmos DB Jupyter Notebook Feature

• Ransomware demands and payments skyrocket

• Google Channels Jony Ive in Ad Promoting Pixel 5a Headphone Jack

• Apple Expands Efforts to Vaccinate Employees, But Doesn’t Mandate Vaccines

• The 4-phase approach smart companies take to mitigate DDoS attacks

• Beginners Guide for Web Scraping Using Selenium

• Building tomorrow’s network today

• App store commission fees scrutinized by South Korea

• Microsoft, Google Among Tech Giants Pledging Big Money to Cybersecurity

• Cuba’s central bank now recognizes cryptocurrencies like bitcoin

• Young People Are the Key to Decreasing the Skills Gap

• VA readies cloud-based data platform

• Best Third-Party Risk Management (TPRM) Tools of 2021

• Apple’s Plan to Scan Photos in Messages Turns Young People Into Privacy Pawns

• MacRumors Giveaway: Win an iPhone, iPod, or Mac Pillow From Throwboy

• What to Expect From the Apple Watch Series 7

• Reorganizing for the Biden agenda at OPM

• 3D-printed barracks opens for Texas Military Department trainees

• T-Mobile CEO apologizes for massive hack, announces cybersecurity deal with Mandiant

• FIN8 Targets US Bank With New ‘Sardonic’ Backdoor

• Top 10 tech and health jobs with the best pay and growth potential

• Microsoft Cloud Databases Exposed

• Ms. Information Vaccine Campaign Launches

• Russians began to complain more often about hacking accounts on Public Services

• ChaosDB, a Critical Cosmos DB flaw affected thousands of Microsoft Azure Customers

• Facebook’s Secret War on Switching Costs

• Critical Azure Cosmos DB Bug Allows Full Cloud Account Takeover

• “Intruders” in the cloud: Microsoft warns “thousands” of Azure customers about potential exposure

• 2021 Q3 Updates from Our Chairperson and CEO: Membership Milestones and More

• Why Privileged Access Management Is So Hard in the Cloud

• Azure Cosmos DB alert: This critical vulnerability puts users at risk

•  ICSJWG 2021 Fall Virtual Meeting

• FBI Releases Indicators of Compromise Associated with Hive Ransomware

• The T-Mobile data breach: A timeline

• Microsoft Warns Cloud Customers Of Potential Breach

• Microsoft warns about phishing campaign using open redirects

• Building a Career in CyberSecurity

•  ICSJWG 2021 Fall Virtual Meeting

• FBI Releases Indicators of Compromise Associated with Hive Ransomware

• Secure. Compliant. Effective. Meeting the Needs of our Federal Customers.

• Man-in-the Middle (MITM) Attack

• Slap on wrist for NCC Group over CREST exam-cheating scandal as infosec org agrees to rewrite NDAs and more

• Important information about Ragnarok Ransomware and Hive Ransomware

• FIN8 Resurfaces with New Sardonic Backdoor

• How to stay secure from ransomware attacks this Labor Day weekend

• New Cyber Warfare Wing Coming to Ohio

• The FBI issued a flash alert for Hive ransomware operations

• Twitter Begins Rolling Out Ticketed Spaces on iOS

• Apple Shares Trailer for Broadway Musical ‘Come From Away’

• Hive Ransomware: Technical Info Released by the FBI

• States pull back on COVID data even amid delta surge

• Ragnarok Ransomware Gang Bites the Dust, Releases Decryptor

• “Intruders” in the cloud: Microsoft warns “thousands” of customers about potential exposure

• Vulnerability Allows Remote Hacking of Annke Video Surveillance Product

• FBI Shares IOCs for ‘Hive’ Ransomware Attacks

• Details of the Recent T-Mobile Breach

• Apple Watch Series 7 Clones Emerge in China

• Notice to Developers: You Could Be Entitled to Between a $250 and $30,000 Payment From Apple

• Three Key Questions to Define ICT Supply Chain Security

• Top Strategies That Define the Success of a Modern Vulnerability Management Program

• Threat Actors Abuse Top 15 Flaws Millions of Times to Target Linux Systems

• Deals: Amazon Drops Price of 256GB M1 MacBook Air to New Low of $849.99 ($149 Off)

• Apple Agrees App Store Deal With Small Developers

• Electronic Code Book (ECB)

• Cybersecurity Is the ‘Core National Security Challenge’ according to Biden at this week’s CEO Summit

• Defining Zero Day Attacks, Exploits, Vulnerabilities

• ‘Pay Ransom’ Screen? Too Late, Humpty Dumpty – Podcast

• Kaseya Patches New 0-Day Vulnerabilities Affecting Unitrends Servers

• Enterprise Technology Management Provider Oomnitza Raises $20 Million

• Making it Safe: IBM and Cisco Partner to Secure Applications

• CCSP vs. Cloud+: How Do They Stack Up?

• In a Hybrid Workplace, Men Are More Likely to Engage in Risky Behavior Than Women: Study

• Amazon to Offer Free Cybersecurity Training Materials, MFA Devices

• OpenSSL Vulnerabilities Impact Various Synology Products

• Tim Cook Lands $750m Bonanza In Share Award

• Parents of teens who stole $1 million in Bitcoin sued by alleged victim

• Engineering PCs Are Concerning Initial Access Vector in OT Attacks

• US charges HeadSpin ex-CEO over fake $1bn valuation scheme

• Google: Here’s how our $10bn investment will boost US cybersecurity

• Microsoft, Google to Invest $30 Billion in Cybersecurity Over Next 5 Years

• Ragnarok Ransomware Victims Receive Decryptor Key After the Gang Decided to Shutdown

• FBI Warns Businesses of New Hive Ransomware

• Ransomware: It’s only a matter of time before a smart city falls victim, and we need to take action now

• Chinese Developer Exposes Data on Over One Million Gamers

• Critical IoT Camera Flaw Allows for Device Hijacking

• Leaked Emails Shows ULA Conspire against Elon Musk and SpaceX

• Kaseya Issues Patches for Two New 0-Day Flaws Affecting Unitrends Servers

• Security Recruiter Directory

• CSO’s guide to the worst and most notable ransomware

• Critical Vulnerability Exposed Azure Cosmos DBs for Months

• Victims of Ragnarok ransomware can decrypt their files for free

• Token-Based Security, OAuth 2.0, OIDC and IdentityServer4

• First Episode of ‘See’ Season Two Premieres on Apple TV+

• Google Could Pay Apple $15 Billion to Maintain Default iOS Search Engine Status in 2021, Suggests Analyst

• Home Affairs believes technological capability not there yet for cryptocurrency travel rule

• Critical Cosmos Database Flaw Affected Thousands of Microsoft Azure Customers

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• FIN8 APT Hackers Attacks Financial Institutions Using Sophisticated Backdoor

• Chinese Android Game Developer Exposes Data of Over 1 Million Gamers

• 73,500 Patients Data was Compromised in a Ransomware Attack on a Singapore Eye Clinic

• Tech CEOs Attend White House Meeting | Avast

• B. Braun Infusomat pumps could be hacked to alter medication doses

• New infosec products of the week: August 27, 2021

• Mobile Security companies are lining up for protection against Pegasus Malware

• UK new information security commissioner is John Edwards

• This Week in Security News – August 27, 2021

• Weekly Update 258

• Your data, your choice

• IndiaMART – 20,154,583 breached accounts

• Trends in the OT/ICS security space and what’s to come

• As China tightens data rules, Xpeng says it’s on the ‘right side’ of regulation

• Let the Games Begin! TikTok Partners with NICE to Attract Young Cybersecurity Professionals

• Asset Visibility – Breaking the Fourth Wall in Cybersecurity

• AWS Web Server Security

• Challenges organizations face when implementing zero trust architecture

• The 4 most common bad bot attack methods targeting financial services

• What is driving organizations to explore emerging technologies?

• GRC solutions revenues to reach nearly $15.2 billion in 2025

• Approov Alliance and Integration Program offers security solutions to protect APIs

• Man impersonates Apple support, steals 620,000 photos from iCloud accounts

• Granulate adds Kubernetes filtering feature to open-source gProfiler

• Bitwarden helps MSPs provide enterprise-ready security solutions to their customers

• Big bad decryption bug in OpenSSL – but no cause for alarm

• Azure’s now-fixed Cosmos DB flaw could have been exploited to read, write any database

• How to Spot Fake Login Pages

• Apple Pays $100 Million to Settle Developer Lawsuit and Agrees to Multiple App Store Changes

• Digital Rights Updates with EFFector 33.5

• Apple Making Multiple App Store Changes to Settle Class-Action Developer Lawsuit

• Fluree collaborates with government entities to ensure data integrity and secure data sharing

• FBI releases alert about Hive ransomware after attack on hospital system in Ohio and West Virginia

• Microsoft Issues ProxyShell Advisory After Attacks Begin

• Elastic acquires Cmd to bring comprehensive cloud runtime security to customers

• DDoS Attack: Definition, Classification, and Prevention

• Comcast Business acquires Masergy to accelerate growth among global enterprise clients

• Amazon Web Services will give free USB security keys to some employees of U.S.-based customers

• Federal Agencies Mostly Use Facial Recognition Tech for Digital Access

• CISA publishes malware analysis reports on samples targeting Pulse Secure devices

• (ISC)² changes its Security Congress event from hybrid to entirely virtual

• Trend Micro strengthens its market presence across AMEA with WeDiscover program

• OSX/Adload: Mac Malware Apple Missed for Many Months

• Private sectors pledge big for cyberdefense

• Experts have revealed the cost of hacking accounts in social networks

• A Bad Solar Storm Could Cause an ‘Internet Apocalypse’

• Mike Althouse joins Green Dot as CCO

• UK Cyber Security Council accepts membership applications from organizations

• When It Comes to Antitrust, It’s All Connected

• History and the Recognition of the Taliban

• IT Security News Daily Summary 2021-08-26

• Argonne unwraps testbed supercomputer to prep for exascale

• FedRAMP leans into OSCAL for streamlining authorizations

• Creating innovative, streamlined and accessible digital experiences

• Whitelisting vs. Blacklisting: Which Is Better?

• Man Sues Parents of Teens Who Hijacked Nearly $1M in Bitcoin

• Hands-On With Samsung’s New $1,800 Galaxy Z Fold 3

• Microelectronics supply chain challenges and zero trust

• Arizona Cops Arrest Fugitive in Police Data Bribery Case

• Report: Facebook Considering Creation Of Election Commission This Fall

• Chicago Inspector General: Using ShotSpotter Does Not Justify Crime Fighting Utility

• Detect Container Drift in Your Kubernetes Deployments

• New variant of PRISM Backdoor ‘WaterDrop’ targets Linux systems

• Elder Scammers Indicted | Avast

• Data Is Quicksand: Does Your Current Data Security Solution Pull You Out or Sink You Deeper?

• Clear and present danger: Why business leaders must prioritize cybersecurity

• GOP lawmakers seek answers on SSA’s acting leadership

• 21-year-old tells WSJ he was behind massive T-Mobile hack

• T-Mobile’s Security is ‘Awful’ Says Hacker Who Stole Data From 50 Million Customers

• F5 BIG-IP Flaw Let Hackers Execute Arbitrary System Commands

• How to create locally signed SSL certificates with mkcert

• Angry Birds Developer Accused of Illegal Data Collection

• Tips for DFIR Analysts

• SpaceX Ships 100,000 Starlink Terminals

• Blue Origin Successfully Completes First Test Flight, After Jeff Bezos Mission

• Naval Criminal Investigative Service Nominated in 2021 ‘ASTORS’ Awards

• FIN8 Hackers Add ‘Sardonic’ Backdoor to Malware Arsenal

• New Version of Classic Mac Game ‘Myst’ Available With M1 Mac Optimization

• Apple Releases New Firmware for AirTags

• How FDX standards are paving the way for open banking in North America (VB Live)

• Chinese developers expose data belonging to Android gamers

• F5 Bug Could Lead to Complete System Takeover

• Cisco fixed a critical flaw in Cisco APIC for Nexus 9000 series switches

• Netflix Now Testing Integrated Mobile Games in Poland

• Afghanistan, Policy Choices, and Claims of Intelligence Failure

• Updates on our continued collaboration with NIST to secure the Software Supply Chain

• Kaseya fixed two of the three Kaseya Unitrends zero-days found in July

• More Than 100 Million People Worldwide Use an Apple Watch

• Widespread credential phishing campaign abuses open redirector links

• Latest iPhone exploit, FORCEDENTRY, used to launch Pegasus attack against Bahraini activists

• Data Poisoning: The Next Big Threat

• Google and mobile operating systems top list of privacy concerns, says Kaspersky

• Microsoft finally issues ProxyShell security advisory

• Latest iPhone exploit, FORCEDENRTY, used to launch Pegasus attack against Bahraini activists

• Engineering Workstations Are Concerning Initial Access Vector in OT Attacks

• Bugs aplenty as VMware, Cisco and F5 drop security updates

• Top Code Debugging and Code Security Tools

• Refurbished M1 Mac Mini With 10Gb Ethernet Now Available

• US government and private sector agree to invest time, money in cybersecurity

• Cybersecurity tips for School and College students in 2021

• Realtek Flaw Exposes Dozens Of Brands To Supply Chain Attacks

• Google, Amazon, Microsoft Unveil Massive Cybersecurity Initiatives After White House Meeting

• How Data Brokers Sell Access To The Backbone Of The Internet

• Publishers Who Adopt Apple News Now Qualify for Reduced Commission on In-App Subscriptions

• Cold wallet, hot wallet, or empty wallet? What is the safest way to store cryptocurrency?

• Cisco Patches Serious Vulnerabilities in Data Center Products

• Cisco Releases Security Updates for Multiple Products

• Tim Cook to Receive $750 Million Worth of Apple’s Stock This Week

• Waymo Opens Self-Driving Taxi Testing In San Francisco

• Tech companies pledge to help toughen US cybersecurity in White House meeting

• UK Cyber Security Council Opens Membership Application Process

• Cisco Releases Security Updates for Multiple Products

• Three New Ways Recorded Future and Splunk Help SecOps Teams Focus on What Matters Most

• Deals: Get Up to $100 Off Apple’s 2021 iPad Pro Lineup on Amazon and B&H Photo

• US Bank Impacted By FIN8 Threat Actor with New Sardonic Backdoor

• Medical Data of 12,000 Patients Exposed Following Revere Health Phishing Attack

• Apple Employees Increasingly Content to Criticize the Company Amid Switch Remote Working and Use of Slack

• Toshiba Consults With Private Equity Firms Over ‘Strategic Ideas’

• S3 Ep47: Daylight robbery, spaghetti trouble, and mousetastic superpowers [Podcast]

• Commentary: Proxyshell Flaws Warning Could Spell Trouble For Unprepared Organisations

• Red & Blue: United We Stand

• Microsoft Breaks Silence on Barrage of ProxyShell Attacks

• Podcast: Ransomware Up x10: Disrupting Cybercrime Suppy Chains an Opportunity

• Top IT Firms CEOs to Attend White House Cybersecurity Meeting

• Personal Information of Entire Swiss Town Leaked Following Cyberattack

• Top Linux Vulnerabilities Exploited by Hackers

• Atlassian Patches Critical Code Execution Vulnerability in Confluence

• Scammers Steal Victims Cryptowallets And NFTs, Posing as OpenSea Agents

• SteelSeries Software Flaw Gives Windows 10 Admin Rights

• Lessons from a Former K-12 Teacher: How Duo Brings Cybersecurity to the Head of the Class

• F5 Releases Critical Security Patches for BIG-IP and BIG-IQ Devices

• The Increased Liability of Local In-home Propagation

• CSTA Turns 400 – Proof That Technology Integrations Is Exactly What You Are Looking For

• First ’45mm’ Apple Watch Bands Spotted Ahead of Series 7 Unveiling [Updated]

• (ISC)² Security Congress 2021 is Now Fully Virtual

• Tech giants pledge at least $30 billion to improve cybersecurity following White House meeting

• UK To Overhaul Data Protection Rules, Targets Cookie Pop-ups

• Enabling Anypoint Identity Management With OKTA SAML 2.0 [Video]

• Cloud storage deal: Get 2TB of storage with end-to-end encryption for only $10

• FBI warns of OnePercent ransomware gang – what you need to know

• New SideWalk Backdoor Targeting U.S. Computer Retailers

• First ’45mm’ Apple Watch Band Spotted Ahead of Series 7 Unveiling

• Cybersecurity for Credit Unions: 4 Ways to Reduce the Risk of the Next Attack

• Beware!! New “WhatsApp mod” Hack Your Mobile To Spy Your Activities & Steal SMS Data

• FluBot Malware Strikes Again

• Microsoft Issues Guidance on ProxyShell Vulnerabilities

• How Threat Detection is Evolving

• Hackers put up for sale the passports of more than 1.3 million Russians

• Interesting Privilege Escalation Vulnerability

• 200,000 More Workers Needed to Manufacture iPhone 13 Ahead of Launch

• Big Tech to invest billions in cybersecurity infrastructure

• XSS: Attack, Defense – and C# Programming

• Preventing Multi-Stage Attacks – Case in Point

• Quantum computers could read all your encrypted data. This ‘quantum-safe’ VPN aims to stop that

• Cybersecurity warning: Realtek flaw exposes dozens of brands to supply chain attacks

• Data protection: UK to diverge from GDPR in post-Brexit overhaul of privacy rules

• CIS Control 1: Inventory and Control of Enterprise Assets

• Vulnerabilities Allow Hackers to Tamper With Doses Delivered by Medical Infusion Pumps

• ‘iPhone 13’ Name Emerges on Alleged Packaging Stickers

• Customers in Sensitive Fields Affected by Critical F5 BIG-IP Vulnerability

• Government Names Candidate for New Information Commissioner

• “Sophisticated” Cyber-Attack Compromises Patient Data at Private Health Clinic

• Java deserialization vulnerabilities explained and how to defend against them

• Tech Giants Make Cybersecurity Pledges After White House Meeting

• Unpatched Microsoft Exchange servers hit with ProxyShell attack

• Quick Hits

• FCW Insider: August 26, 2021

• CISA Details Additional Malware Targeting Pulse Secure Appliances

• New Passwordless Verification API Uses SIM Security for Zero Trust Remote Access

• How We’ve Changed Our Approach to Security and Privacy – Intego Mac Podcast Episode 202

• New US CISO appointments, August 2021

• Record Summer for UK’s Cyber Skills Courses

• Surveillance tech company sues Police Digital Service over ‘flawed’ scoring of bids on £18m contract

• New Zero-Click iMessage Exploit Used to Deploy Pegasus Spyware

• Personal Data and docs of Swiss town Rolle available on the dark web

• VMware Issues Patches to Fix New Flaws Affecting Multiple Products

• Big tech proud as punch about cameos in Joe Biden’s security theatre

• Do you know what your supply chain is and if it is secure?

• VMware addressed 4 High-Severity flaws in vRealize Operations

• Apple Reportedly Increasing iPhone 13 Prices to Compensate for Increased Chip Production Cost

• Countries need to come together and have a global response against cybersecurity threats: ESET

• Vulnerability management is facing three core problems: Here’s how to solve them

• Q&A With Andrew Gardner | Avast

• Atlassian warns of critical Confluence flaw

• Critical Flaw Discovered in Cisco APIC for Switches — Patch Released

• Checking for misconfigurations isn’t enough

• Imavex – 878,209 breached accounts

• Australia passes new data privacy bill for criminals

• Cyber Attack on Crypto Exchange brings $97 million loss to customers

• Medical Data for 12,000 Patients Leaked Following Revere Health Attack

• How to make email safe for business

• US gives Huawei licence approval to buy automotive chips: Report

• PJCIS recommends passage of Bill that will allow incidental collection of Australian data

• Cybersecurity market soaring as threats target commercial and govt organizations

• Containers in the Cloud: Key Benefits and Challenges

• How Avanan helps you reduce phishing and ransomware

• Israeli firm Bright Data named as enabler of Philippines government DDOS attacks on opposition groups

• Private network deployments are slow, the window of opportunity for enterprise 5G is closing

• The Next Disruptive ICS Attacker: Only Time Will Tell

• Employees participating in unethical behaviors to help an organization actually harm themselves

• 38 Million Records Exposed from Microsoft Power Apps

• NS1 NetBox Cloud makes open solution technology available as a SaaS

• Ermetic Platform combines CIEM and CSPM capabilities in one integrated solution

• NICE Enlighten AI for Complaint Management identifies and categorizes consumer complaints

• RingCentral’s capabilities enable employees to communicate and collaborate from anywhere

• Syxsense’s workflows detect and resolve critical IT infrastructure disruptions

• Arcserve enhances StorageCraft Cloud Services Basic for MSPs

• Tecore Network 5G iCore Network in a Box provides macro coverage for deployable networks

• Hack Exposes Personal Data of Entire Swiss Town: Report

• Tech Companies Pledge Billions in Cybersecurity Investments

• Arista Networks expands its routing solutions to the network edge

• White House COVID group extends leave for feds to get vaccinated

• Biden gets Google, Apple, others to join “whole-of-nation” cybersecurity effort

• Advantech collaborates with Lynx to offer Mission Critical Edge Starter Kit for IT/OT convergence

• Vulnerability allowed hackers to tamper medication in infusion pump

• LexisNexis Risk Solutions acquires TruNarrative to help prevent financial crime and fraud

• Tessian partners with Optiv Security to help enterprises secure the human layer

• F5 addressed a flaw in BIG-IP devices rated as critical severity under specific conditions

• CloudBees names two leaders to C-level posts to accelerate growth and operational maturity

• Abnormal Security joins MISA to help customers combat global cybersecurity threats

• Vouched raises $4.5M to deliver online verification service to businesses and governments

• Here’s what CEOs are promising to do to help with U.S. cybersecurity

• Cisco Issues Critical Fixes for High-End Nexus Gear

• Zero Trust Can’t Protect Everything. Here’s What You Need to Watch.

• Apple Plans to Develop Program to Improve Supply Chain Security

• Jesse Kinser joins Pathwire as CISO

• Armory appoints Jim Douglas as CEO

• Sam King joins ZeroFox Board of Directors

• Want to become a white-hat hacker? Here’s what you need to know

• Man Robbed of 16 Bitcoin Sues Young Thieves’ Parents

• White House holds major cyber confab

• Austin mandates COVID vaccine for military

• Google, Microsoft plan to spend billions on cybersecurity after meeting with Biden

• IT Security News Daily Summary 2021-08-25

• Pittsburgh stands up citywide fiber network

• Facial recognition tech: Not just for IDing criminals

• IG council scouting for data analytics tools

• IRS beefs up compute power for fraud detection

• Elastic Q1 revenue tops expectations, offers surprise profit, raises year view

• Australia Passes Identify and Disrupt Bill

• The Stealthy iPhone Hacks That Apple Still Can’t Stop

• What’s New With HomeKit in iOS 15

• Watch as hackers disrupt Iran’s prison computers; leak live footage

• Facing foreign election foes, states hire ‘cyber navigators’

• Report: Facebook Won’t Share Data With Researchers, Academics, Or The White House

• Glitch Exposed Data of Alleged Treaty Violator to FBI

• ProxyLogon flaw, evil emails, SQL injections used to open backdoors on Windows boxes

• What the Norton-Avast Merger Means for Cybersecurity

• Kanye’s upcoming album is a scam magnet, Kaspersky finds

• Revere Health Data Breach Impacts Cardiology Patients

• President Biden meets with business leaders on cybersecurity

• Why supply chain security is a concern for the White House Cyber Summit

• DHS stands up new excepted service for cyber talent

• Win10 Admin Rights Tossed Off by Yet Another Plug-In

• FIN8 group used a previously undetected Sardonic backdoor in a recent attack

• Apple TV+ Shows ‘For All Mankind’ and ‘Calls’ Win Emmy Awards

• Apple to Release iOS 15 iCloud Private Relay as a Public Beta

• SolarWinds and the Holiday Bear Campaign: A Case Study for the Classroom

• Disrupting Cryptocurrencies 2: Lessons From the Poly ‘Hack’

• Lawfare Live: Scott Anderson and David Priess on Afghanistan and What Comes Next

• Intern with Lawfare!

• Cybersecurity is the issue of the decade: IBM chair & CEO Arvind Krishna

• New Campaign Sees LokiBot Delivered Via Multiple Methods

• Poly Network Hacker Returns All Stolen Tokens, Offered Job

• Apple Seeds Seventh Beta of tvOS 15 to Developers

• Apple Seeds Seventh Beta of watchOS 8 to Developers

• Apple Seeds Seventh Betas of iOS and iPadOS 15 to Developers

• The best browsers for privacy and security

• How to Quantify the Actual Cost of a Data Breach for Your Own Organization

• Best security system 2021: Protect your home & office

• Best security camera 2021: Secure your home or office

• Mirai-style IoT botnet is now scanning for router-pwning critical vuln in Realtek kit

• Neural Fuzzing: A Faster Way to Test Software Security

• Watchdog Investigation Finds ‘Major Weaknesses’ in Apple’s App Store Child Safety Measures

• How Has CAP Certification Evolved to Lead in Risk Management?

• This feed has moved and will be deleted soon. Please update your subscription now.

• Names of new ransomware groups that are on rise

• AWS Unveils Cloud Security Competency Program for MSSPs

• Apple Celebrates National Parks With Apple Pay Donations, Apple Watch Challenge, and Park-Related Content

• Drama Series ‘The Changeling’ Coming to Apple TV+

• Cybersecurity’s next fight: How to protect employees from online harassment

• OnlyFans Suspends Decision To Ban Porn Content

• OpenSSL Releases Security Update 

• VMware Releases Security Updates for Multiple Products 

• iPhone 13 May Feature Upgraded Face ID That Works With Masks and Foggy Glasses

• A New iPhone Zero-Click iMessage Zero-Day Used to Deploy Pegasus Spyware

• Best security system 2021: Secure your home or office

• US Media, Retailers Targeted by New SparklingGoblin APT

• HackerOne launches AWS certification paths, pen testing service

• 70% of Cyber Pros Believe Cyber Insurance is Exacerbating Ransomware

• FBI Releases Indicators of Compromise Associated with OnePercent Group Ransomware

• OpenSSL Releases Security Update 

• VMware Releases Security Updates for Multiple Products 

• Surveillance of the Internet Backbone

• Tech and finance leaders head to White House cybersecurity summit

• US Approves Licence For Huawei To Purchase Car Chips – Report

• How safe is a quantum-safe virtual private network?

• Vade Secure Ordered to Pay $14 Million to Proofpoint in IP Theft Lawsuit

• Innovative Recruitment Practices Can Close the Cyber Skills Gap

• F5 Releases August 2021 Security Advisory

• FBI Releases Indicators of Compromise Associated with OnePercent Group Ransomware

• These Four Rising Gangs Could Be Your Next Major Security Threat

• Proofpoint Wins $14 Million In IP Theft Court Battle

• iCloud+’s New Custom Email Domain Feature Now Available in Beta

• White House cybersecurity advisor on meeting with CEOs after wave of high-profile hacks

• F5 Releases August 2021 Security Advisory

• Watch now: 2021 Red Hat Security Symposium on-demand

• Red Hat's open approach to vulnerability management

• The Business of Fraud: SIM Swapping

• Facebook Messenger Celebrates Its 10th Birthday With Poll Games, Birthday Cash Gifting, and More

• Deals: Best Buy Takes $300 Off iPhone 12 Mini and $100 Off iPad Mini

• iPhone Serves as Gateway to iPad and Apple Watch Sales, but Mac, Apple TV, and HomePod Lag Behind

• Want to be a white hat hacker? Train with this $10 bundle deal

• IBM launches new SASE service to bolster zero-trust enterprise security

• VMware Patches High-Severity Vulnerabilities in vRealize Operations

• Apple Preparing to Open First Retail Store in Hunan Chinese Province

• Zoom Updated With ‘Raise Hand’ and ‘Thumbs Up’ Gesture Recognition on iPad

• Win 10 Admin Escalation With Razor Bug – Expert Insight

• Phishing by the numbers – July 2021

• Mice “taking over the world!”, one Windows machine at a time

• Blue Origin Loses Key Staff, Amid NASA Contract Battle – Report

• Three Key Benefits of Adopting SASE With a Services Partner

• Survey: 1 in 4 Facility Managers Experienced OT System Breaches

• Preventing your Cloud ‘Secrets’ from Public Exposure: An IDE plugin solution

• ‘Today at Apple’ Session Explores Taking Expressive Pet Portraits

• Hackers Impersonate OpenSea Employees in an Attempt to Steal Cryptocurrency Assets and NFTs

• COVID19 Vaccine Fraudsters Targeted Health Authorities in 40 Countries

• Researchers Uncover FIN8’s New Backdoor Targeting Financial Institutions

• Lessons from a Former K-12 Teacher: How Duo Brings Cybersecurity to Head of the Class

• Virgin Hyperloop Touts Individual Pod Concept

• Leaked Footage Shows Grim Conditions in Iran’s Evin Prison

• Thinking about CAP or CISSP? Here’s How They Compare.

• Cybersecurity startup investments more than doubled in H1 2021

• California Man Hacked iCloud Accounts to Steal Nude Photos

• Incident Response Firm BreachQuest Launches With $4.4 Million in Seed Funding

• Most Important Network Penetration Testing Tools for Hackers & Security Professionals

• The VC View: Digital Transformation

• Top 10 Best Motherboards for i9 9900K 2021 – Top Picks

• Did you give away your password in the comments section?

• South Korea Moves To Curb In-App Purchase Charges

• Biden, Tech Leaders Eye ‘Concrete Steps’ to Boost Cybersecurity

• Joker Virus is Back, Targeting Android Devices

• YouTube Premium Subscribers Can Now Use iOS Picture-in-Picture: Here’s How

• Medical Records of 12,000 Revere Health Patients Exposed in Phishing Attack

• Security blind spots persist as companies cross-breed security with devops

• Proofpoint awarded $13.5 million in IP theft lawsuit against Vade Secure

• Ransomware: These four rising gangs could be your next major cybersecurity threat

• Misconfigured Microsoft Power Apps Portals Exposed Millions of Records

• Drug Dealers Get 27 Years After Police Crack EncroChat Comms

• B.Braun Infusomat Pumps Could Let Attackers Remotely Alter Medication Dosages

• Popular WhatsApp Mod Spreads Malware on Android Devices

• How Windows admins can get started with computer forensics

• Accelerate Your Journey to AWS with IBM Security

• Cybercrime Losses Triple to £1.3bn in 1H 2021

• Nigerian Threat Actor Offers $1 million to Insiders for Planting Ransomware

• iPhone 13 to Launch on September 17, AirPods 3 on September 30, Claims Report

• Apple Supplier Luxshare Reports Record Growth After Securing iPhone 13 Orders

• Biden to host tech, finance and energy CEOs for security summit at White House

• Tech CEOs to Discuss Cybersecurity with Biden Today

• August 2021 Web Server Survey

• ShinyHunters group claims to have data of 70M AT&T customers

• Radiflow’s risk management platform for OT facilities allows CISOs to view all their sites on one dashboard

• Singapore further eases access to contact tracing devices

• New SideWalk Backdoor Targets U.S.-based Computer Retail Business

• Modified version of Android WhatsApp installs Triada Trojan

• Build your own Android security product

• New SideWalk Backdoor Targets U.S-based Computer Retail Business

• Why you need to make Microsoft 365 a 24/7 security priority

• The Third Generation of XDR Has Arrived!

• We’ve Got Next: Building the “Next” in CyberSecurity

• Palo Alto Networks Named a Leader in the 2021 Forrester ZTNA New Wave

• Samsung could use a TV Block feature to disable any of its TVs worldwide

• SubaGames – 6,137,666 breached accounts

• The Poly Network hack turned into career prospects

• Microsoft offers tips to secure Windows 365 Cloud PCs

• Ransomware news headlines trending on Google

• M1 taps 5G to enrich waterfront lifestyle, operations

• Hybrid work: How do you secure every identity on your network?

• How the pandemic delivered the future of corporate cybersecurity faster

• Coinminers, web shells and ransomware made up 56% of malware targeting Linux systems in H1 2021

• Navigating the Troubled Waters of Risk Management

• 40% of SaaS assets are unmanaged, putting companies at risk for data leaks

• 22% of cybersecurity incidents in H1 2021 were ransomware attacks

• Eatigo – 2,789,609 breached accounts

• Advanced persistent threat protection market to grow steadily by 2026

• 6 ways cybersecurity teams can save time and money

• Australia’s ‘hacking’ Bill passes the Senate after House made 60 amendments

• Votiro unveils solution that empowers enterprises to prevent threats from weaponized files

• The SideWalk may be as dangerous as the CROSSWALK

• Microsoft Power Apps misconfiguration exposes millions of records

• TestFlight for Mac Beta Now Available to Developers

• Agencies’ online forms lack required interactive features

• NSO Group facing renewed backlash after helping repressive Bahraini Government hack iPhones of politicians, activists

• 10 Netflix Hacks Enhance Your Binge-Watching Experience

• A Samsung Galaxy A21 Smartphone Caught Fire on a Plane

• Samsung delivers PIM technology to a wider range of applications

• 38 million records exposed online—including contact-tracing info

• Google Pay team reportedly in major upheaval after botched app revamp

• Intel Foundry Services gets a boost from $100M Pentagon award for US-made chips

• A New Chip Cluster Will Make Massive AI Models Possible

• Schools prepare for cyberattacks against educational institutions

• Privacera partners with StreamSets to strengthen data security for ETL processing in the cloud

• Qumulo partners with HPE to bring high file density node for hyperactive data workloads

• Cloud Security Alliance announces inaugural members of the CSA CxO Trust Advisory Council

• Endace collaborates with Kemp to help security teams reduce incident response times

• Dragos and DNG-ISAC announce initiative to increase security in the natural gas industry

• Chicago Inspector General: Police Use ShotSpotter to Justify Illegal Stop-and-Frisks

• Shravan Goli joins NETGEAR board of directors

• Splunk appoints Pamela Fusco as CISO

• Camilla Törnblom joins Clavister as Marketing Director

• Chris Dimitriadis becomes ISACA’s first Chief Global Strategy Officer

• LS-ISAO establishes Cyber Incident Response Committee to expand threat awareness for law firms

• Fake Apple rep amasses 620,000+ stolen iCloud pics, vids in hunt for images of nude women to trade

• ReliaQuest opens corporate headquarters at Thousand & One in Florida

• Secure Code Warrior’s growth fueled by global demand for security-skilled developers

• Federal 100: Eric Adolphe

• Federal 100: Ron Bewtra

• Endpoint protection: Securing the pieces that make up the whole

• VA readies cloud-based data platform

• Cloud-native incident management streamlines emergency response

• Fake Apple rep stole 620,000+ pics, vids from iCloud accounts in hunt for images of nude women to trade

• CVE-2021-3711 in OpenSSL can allow to change an application’s behavior

• The Limits of Leverage in Taliban-Led Afghanistan

• Fake Apple rep amassed 620,000+ stolen iCloud pics, vids in hunt for images of nude women to trade

• IT Security News Daily Summary 2021-08-24

• Orgs have had the same digital security vulnerabilities for the last 4 years

• OnlyFans Content Creators Are the Latest Victims of Financial Censorship

• Looking Back at Executive Order on Cybersecurity and What it Means for Your Business

• Silver Optis: Innovative and Socially Conscious Technologies at Black Hat

• Five Steps to Get a Cybersecurity Job

• B. Braun updates faulty IV pump after McAfee discovers vulnerability allowing attackers to change doses

• Scammer Infiltrated Thousands of iCloud Accounts to Find Nude Photos

• OnePercent ransomware group hits companies via IceID banking Trojan

• Cyber-thieves Scam New Hampshire Town Out of $2.3m

• 38 million records exposed in Microsoft Power apps misconfiguration

• Poly Network Recoups $610M Stolen from DeFi Platform

• Facebook Backtracks, Releases Shelved Transparency Report That Made The Company Look Bad

• Cybersecurity for Executives: How to Talk About Risk Management

• New CISA Blacklist: What It Means For You

• You can remove or update a single entry from the SSH known_hosts file

• Don’t get rugged: DeFi scams go from zero to $129 million in a year to become top financial hack

• FBI Issues Ransomware Group Flash Alert

• Nokia-Owned SAC Wireless Discloses Data Breach

• Hulu Now Supports HDR on Apple TV for Original Content

• Apple, Amazon, Microsoft CEOs To Discuss Cybersecurity At White House

• US Signs Cybersecurity Agreements with Singapore

• ‘Asphalt 8: Airborne’ and Zelda-Inspired ‘Baldo’ Coming to Apple Arcade on Friday

• Deals: Get 25% Off Mophie Charging Accessories and More During ZAGG’s Sitewide Flash Sale

• Can a VPN Protect You from Hackers? How It Keeps You Secure – And How It Doesn’t

• Pegasus Spyware Uses iPhone Zero-Click iMessage Zero-Day

• South Korea Could Ban Apple From Requiring Developers to Use In-App Purchase System

• Tencent Security Keen Lab: Experimental Security Assessment of Mercedes-Benz Cars

• TMF, cyber EO drive modernization at Labor, CIO says

• Why VA must keep Vista healthy

• WhatsApp New Modified Version Installs Triada Trojan

• Mr. White Returns All $610 Crypto Assets Stolen in Cyberattack

• How a gaming mouse can get you Windows superpowers!

• New zero-click exploit used to target Bahraini activists’ iPhones with NSO spyware

• T-Mobile Wins Title of Fastest U.S. Carrier in 2021 5G Test

• CISA Releases Five Pulse Secure-Related MARs

• CrowdStrike trading higher today ahead of its addition to Nasdaq-100

• Proofpoint wins $14m from ex-VP and French email security rival in IP theft court battle

• Tencent Keen Security Lab joins GENIVI Alliance

• Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars

• CISSPs From Around the Globe: An Interview with Adesoji Ogunjobi

• How to Protect Yourself From a Server-Side Template Injection Attack

• HYCU initiative offers free evaluation for ransomware recovery prospects

• Custom WhatsApp Build Delivers Triada Malware

• Survey: Boards want to invest more in technology, data analytics

• Risk officers and board members don’t agree on use of tech and data in business

• Researchers Warn of 4 Emerging Ransomware Groups

• MAR-10333243-3.v1: Pulse Secure Connect

• CISA Releases Five Pulse Secure-Related MARs

• 38 million personal identifiable information exposed in Microsoft Power Apps data leak

• Joe Biden to meet US Tech companies CEOs to protect National Infrastructure against Cyber Attacks

• Intellectual property protection: 10 tips to keep IP safe

• Tesla’s Elon Musk Says Latest Self-Driving Beta Is ‘Not Great’

• New iOS Zero-Click Exploit Defeats Apple ‘BlastDoor’ Sandbox

• OpenSSL Vulnerability Can Be Exploited to Change Application Data

• MAR-10336935-2.v1: Pulse Secure Connect

• MAR-10333243-3.v1: Pulse Secure Connect

• MAR-10338401-2.v1: Pulse Secure Connect

• MAR-10334057-3.v1: Pulse Secure Connect

• Action is Critical in US Cyber Policy

• Third-Party Risk Management — Don’t Collaborate Without It!

Generated on 2021-09-01 00:01:39.144086