IT Security News Weekly Summary – Week 01

• IT Security News Daily Summary 2022-01-09

• Cyber Defense Magazine – January 2022 has arrived. Enjoy it!

• US NCSC and DoS share best practices against surveillance tools

• How To Secure the Linux Kernel >

• Flubot Malware Targeting Users by Masquerading as Adobe Flash Player

• iProov Announces $70M Investment from Sumeru Equity Partners

• CSI Partners with NYDIG to Provide Financial Institutions Simple, Secure Access to Bitcoin

• January 6, the Afghanistan Withdrawal and the Future of U.S. Counterterrorism

• Swiss army asks its personnel to use the Threema instant-messaging app

• Today Marks 15 Years Since Steve Jobs Unveiled the Original iPhone

• Gurman: New iPhone SE and More Likely at Apple Event in March or April

• Russian submarines threatening undersea cables, UK defence chief warns

• How to Read Your iOS 15 App Privacy Report

• New Mac Malware Samples Highlight The Growing Risk

• SonicWall’s Email Security and Firewall Products Were Hit by the Y2K22 Bug

• FlexBooker Breached, Over 3.7 Million Impacted

• Security Affairs newsletter Round 348

• Week in review: Discussing cybersecurity with the board, APT-style attacks, Patch Tuesday forecast

• Penetration testing

• Experts predict the disappearance of passwords before the end of the decade

• Avira Antivirus Introduces Crypto Mining To Its 500M Customers

• Swiss Army Bans WhatsApp at Work

• Report: 45% of all federal employees teleworked in fiscal 2020

• Digital Tool Estimates Software Firewall Credits for Your Environment

• Deploy an Early Warning System

• How to Protect Your Organization from Log4j Exploitation

• Safeguarding Your Assets Against Apache Log4j Vulnerability

• Log4Shell Active Exploitation Continues…

• Protect Yourself from Holiday Grinches!

• WordPress Releases Security Update

• Best Apple-Related Accessories at CES 2022

• 15 Features the Original iPhone Didn’t Have When First Announced

• The iPhone 14 Is Unlikely to Be Portless, Here’s Why

• Top Stories: iPhone 14 Pro Without Notch, AirPods Pro 2, and More for 2022

• HomePod Mini Likely Nearing Launch in Five More Countries

• North Korea-linked APT group Konni targets Russian Federation’s Ministry of Foreign Affairs

• Patrick McCarthy joins Precisely as CRO

• iProov raises $70 million to fuel businesss growth

• Everything about XDR is around Correlations, not Hype

• LucidLink announces leadership appointments to support company’s growth

• IT Security News Daily Summary 2022-01-08

• The positive side of ransomware for data transformation

• Unauthenticated RCE in H2 Database Console is similar to Log4Shell

• Why your organization needs a software bill of materials

• 500M Avira Antivirus Users Introduced to Cryptomining

• Lawsuit: Facebook Promoted Violent Content And Helped Extremists Plan Murder

• Google Docs Comment Flaw Exploited by Hackers

• An Optimistic Outlook for 2022: Cloud Security Vulnerabilities Are 100% Preventable

• MITRE-Harris Poll: 77% of U.S. Residents Concerned About Ransomware, IP Theft and Attacks on Critical Infrastructure

• Norton Put a Cryptominer in Its Antivirus Software

• $50 Million Lost to Fraudsters Impersonating as Broker-Dealers

• Crypto Firm Arbix Identified as a Rug Pull After Scamming $10 Million From Investors

• FBI warns of hackers mailing malicious USB drives to spread ransomware

• FluBot malware continues to evolve. What’s new in Version 5.0 and beyond?

• Tesla owner says he mines up to $800 a month in cryptocurrency with his car

• Alfer Microsoft, also SonicWall confirmed that its products were affected by Y2K22 bug

• WebSpec, a formal framework for browser security analysis, reveals new cookie attack

• The CNIL Penalized SLIMPAY €180,000 for Data Violation.

• SSRF Attacks can be Used to Compromise Java RMI Services

• Build or Buy your own antivirus product

• NHS Warns of Hackers Targeting Log4j Flaws in VMware Horizon

• Facebook Launches ‘Privacy Center’ to Educate Users on Data Collection and Privacy Options

• You Might Be A Victim Of Google Voice Scam, Here’s How To Protect Your Account

• Medical Review Institute of America Notifies Patients of Data Breach

• Dun & Bradstreet Announces Conditional Notice of Redemption for Existing Senior Secured Notes

• Honda cars in flashback to 2002 – “Can’t Get You Out Of My Head”

• Weekly Update 277

• Fuze enhances productivity and collaboration across distributed teams

• CES 2022: Space security – no more flying blind

• Week in security with Tony Anscombe

• NetApp appoints Elizabeth O’Callahan to Chief Legal Officer and General Counsel

• Datadog and AWS join forces to develop and deliver tighter product alignment in the future

• “Owning Your Identity” Through Biometric and Passwordless Innovations

• Surviving The New Era of Terabit-Class DDoS Attacks

• How To Thwart Fraud with Phone Numbers

• Supreme Court hearing turns to the contractor mandate

• FIN7 group continues to target US companies with BadUSB devices

• Kirk A. Law joins Cohesity as SVP of research and development

• Can blockchain tokens drive smarter commuting choices?

• EoL Systems Stonewalling Log4j Fixes for Fed Agencies

• Friday Squid Blogging: Squid Prices Are Rising

• Ransomware attacks Finalsite, renders 8,000 school sites unreachable for days

• IT Security News Daily Summary 2022-01-07

• NIST measures trees’ impact on 5G networks

• FlexBooker apologizes for breach of 3.7 million user records, partial credit card information

• Cyberattackers Hit Data of 80K Fertility Patients

• NHS Warns of Attackers Targeting Log4j Flaws in VMware Horizon

• How agencies are benefitting from AIOps

• The Importance of Physical Security to Safeguard Your Cybersecurity

• Cyber-Attack on New Mexico County

• MSP Thrive Acquires InCare Technologies

• The Future of Tech Is Here. Congress Isn’t Ready for It

• How to secure QNAP NAS devices? The vendor’s instructions

• Skimmer Supply Chain Attack On 100 Sotheby’s Real Estate Sites

• Preventing Hackers From Pilfering Another Million Business Customers

• Face Legal Action If You Fail To Patch Log4Shell

• 3.7M FlexBooker Records Dumped on Hacker Forum

• Attackers Hitting VMWare Horizon Servers With Log4j Exploits

• Cerberus Sentinel Acquires True Digital Security

• WordPress Releases Security Update

• China’s Tech Crackdown: A Year-in-Review

• Weekly Cybersecurity News Summary

• Credential Stuffers Which Compromised 1.1 Million Accounts

• Ransomware Shuts Down Albuquerque Government

• Iranian immigrant lost $53,000 in crypto hack, says he faces ruin if BitMart doesn’t pay him back

• Ransomware attack on FinalSite still disrupting email services at thousands of schools

• Norton 360 wants to pay you a pittance to mine Ethereum cryptocurrency

• Monsanto Employee Stole Trade Secret

• Patchwork APT caught in its own web

• Codex Exposed: Exploring the Capabilities and Risks of OpenAI’s Code Generator

• This Week in Security News – January 7th, 2022

• Norton antivirus installs cryptominer on devices but there is a way out

• Protect Your Privacy & Improve Your Pentesting in 2022 with Predator-OS>

• 5 Things New with Bug Bounty Programs

• Why You Need an Adversary-focused Approach to Stop Cloud Breaches

• 4 healthcare cloud security recommendations for 2022

• NGA looks to tech to support unclassified workforce

• QNAP: Get NAS Devices Off the Internet Now

• How to Proactively Limit Damage From BlackMatter Ransomware

• 2022: The threat landscape is paved with faster and more complex attacks with no signs of stopping

• Google Project Zero 0-Days Exploited In-The-Wild

• Victims of the $200 million BitMart hack say the crypto exchange still hasn’t paid them back

• Sophisticated phishing scheme spent years robbing authors of their unpublished work

• Is Your Business At Risk From APT Threats?

• Eight New macOS Malware Families Emerged in 2021

• Log4Shell-like security hole found in popular Java SQL database engine H2

• France Fines Google And Facebook €210m Over User Tracking

• Bitcoin Prices Fall To Lowest In Months After US Fed Remarks

• Log4J-Related RCE Flaw In H2 Database Earns Critical Rating

• QNAP: Get NAS Devices Off The Internet Now

• Google and Facebook fined $240 million for making cookies hard to refuse

• Russian IT business will increase spending on data protection in the new year

• Ransomware attack on Finalsite shuts down numerous Universities and Schools in US

• Monitoring malware abusing CVE-2020-1599

• Autonomous Drone Saves The Life Of Heart Attack Victim

• Army to Deploy Virtual Reality Capabilities to Combat Sexual Assault

• Log4j flaw: Attackers are targeting Log4Shell vulnerabilities in VMware Horizon servers, says NHS

• Log4J-Related RCE Flaw in H2 Database Earns Critical Rating

• Log4Shell-Like Vulnerability Found in Popular H2 Database

• Threat actor targets VMware Horizon servers using Log4Shell exploits, UK NHS warns

• Remembering the Selective Draft Law Cases

• NASA Director Parimal Kopardekar Twitter Handle hacked

• Purple Fox Backdoor Identified in Malicious Telegram Installers

• Bitcoin Slumps To Lowest Level In Fourth Months

• Hackers Use Video Players in Websites to Steal Sensitive User Information

• The Most Important Security Takeaway from the October Facebook Outage

• Google acquisition of Siemplify is a knockout punch for standalone SOAR

• Attack Misuses Google Docs Comments to Spew Out “Massive Wave” of Malicious Links

• 7 Predictions for Global Energy Cybersecurity in 2022

• JNDI Vulnerability in H2 Database Similar to Log4Shell

• December 2021 Cyber Attacks Statistics

• Cyber Ninjas Faces Fine Over Arizona Election Review Records

• Enterprises Worry About Increased Data Risk in Cloud

• Ransomware Attack Suffered by FinalSite Shuts Down Thousands of Websites

• New Report Shows that Threat Actors Use Google Docs Comment Feature to Send Malicious Links

• Morgan Stanley to Pay $60M to Resolve Data Security Lawsuit

• Trump’s ‘Truth Social’ App To Launch Next Month

• What Is Zero Trust Security and Why Is It Necessary?

• Polish Leader Admits Country Bought Powerful Israeli Spyware

• Online Pharmacy Service Ravkoo Discloses Data Breach

• California Man Pleads Guilty Over Role in $50 Million Fraud Scheme

• Norton’s Antivirus Product Now Includes an Ethereum Miner

• NoReboot attack fakes iOS phone shutdown to spy on you

• Swiss Army Knifes WhatsApp at Work

• Thousands of School Websites Go Offline Due to Ransomware Attack on Finalsite

• Norton Crypto, the controversial cryptomining feature of Norton 360

• Application Control 101: Definition, Features, Benefits, and Best Practices

• Transferring Quantum Maestro Knowledge and Delivering Real-World Experience

• Chinese scientist pleads guilty to stealing US agricultural tech

• Researchers Warn of New Log4Shell-Like Java Vulnerability

• Thousands of Schools Impacted After IT Provider Hit by Ransomware

• Election Fraud Firm to Shut Down After Claims Debunked

• Cyber Attacks Are A Threat To The Energy Sector

• COVID Test Data Breach at British School

• Log4Shell-like Critical RCE Flaw Discovered in H2 Database Console

• Over 3.7 million accounts were compromised in the FlexBooker data breach

• T-Mobile Users Suffer SIM Swapping Attacks | Avast

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• France Fines Google, Facebook €210 Million Over Privacy Violating Tracking Cookies

• Countries that were less affected than U.S. by cyberattacks could see more of them in 2022: Analyst

• Salesforce mandates MFA by default

• Web Skimmer Code was Injected Into 100 Real Estate Websites

• France slaps €210m fine on Facebook and Google

• Data of 1.1m accounts from 17 companies compromised in Cyber Attacks

• January 2022 Patch Tuesday forecast: Old is new again

• China’s next regulatory target — algorithms, the secret of many tech giants’ success

• Elephant Beetle Hacking Group Attack Organizations To Steal Financial Data

• Night Sky, a new ransomware operation in the threat landscape

• Network and security teams must collaborate to successfully deliver digital transformation

• Supply chain cybersecurity: Pain or pleasure?

• More Than 1.3 Million People Affected by Broward Health Data Breach

• C5 Acquisition Corporation Announces Pricing of $250 Million Initial Public Offering

• Spok Rated as #1 Secure Healthcare Provider Communications Platform for the Fifth Consecutive Year

• Approov Named CyberSecured Award Winner for Best-In-Class Mobile API Threat Protection

• Antivirus software market to reach $4.54 billion in 2025

• Enterprise PKI automation: The modern approach to certificate lifecycle management

• 2022-01-06 – TA551 (Shathak) pushes IcedID (Bokbot)

• 2022-01-05 – TA551 (Shathak) pushes IcedID (Bokbot) with Cobalt Strike

• Rights Group Verifies Polish Senator Was Hacked With Spyware

• Illinois fertility clinic, online pharmacy giant Ravkoo report data breaches

• CES 2022: More sensors than people

• Covid Test Data Breach at British School

• Microsoft Updates Log4j Directive- Gurucul Comments

• Log4Shell log4j Remote Code Execution – The COVID of the Internet

• Appeals court deals another blow to Biden’s contractor vaccine mandate

• IARPA’s SMART e-PANTS to design responsive clothing

• JFrog researchers find JNDI vulnerability in H2 database consoles similar to log4shell

• Facebook Restores Account Of Conservative Book Publisher After Permanently Banning It

• Cybersecurity Outlook 2022: Third-party, Ransomware and AI Attacks Will Get Worse

• Google Docs Comments Weaponized in New Phishing Campaign

• North Korea-linked Konni APT targets Russian diplomatic bodies

• Segra names Kevin T. Hart as CEO

• Netreo appoints Josh Chessman as VP of Products

• Shane Sims joins Kivu Consulting as CEO

• Ermetic appoints Avi Israel as CFO

• How are Police Using Drones?

• “Worst in Show Awards” Livestreams Friday: EFF’s Cindy Cohn and Cory Doctorow Will Unveil Most Privacy-Defective, Least Secure Consumer Tech Products at CES

• There’s massive opportunity for cybersecurity, says Crowdstrike CEO

• IT Security News Daily Summary 2022-01-06

• Streamlining delivery at USDA

• Forest Service partners on development of handheld spectrometer

• Counties in New Mexico, Arkansas begin 2022 with ransomware attacks

• Hackers are sending malicious links through Google Doc comment emails

• There are some opportunities in security and cloud stocks, says Stephanie Link

• White House Developing Digital, Community-Oriented Health Care Service

• Tech use in courts skyrockets, challenging those without internet access, study finds

• Maintaining zero trust over time: Why set-it and forget-it won’t work

• Counties in New Mexico, Arkansas dealing with ransomware attacks to start 2022

• Biometric Face Authentication Firm iProov Takes $70M Investment

• New Mexico’s Bernalillo County Investigates Ransomware Attack

• Chip Shortage To Continue Hurting UK Car Market In 2022

• Activision Files Unusual Lawsuit over Call of Duty Cheat Codes

• Investigation Launched into RIPTA Data Breach

• Cyber-Attack on Fertility Centers of Illinois

• Convergence Zone: CNAPP Aids in Integrated Cloud-Native Security

• Threat actors stole 1.1 million customer accounts from 17 well-known companies

• The Conspirators: The Proud Boys and Oath Keepers on Jan. 6

• The Chatter Podcast: Violence on Capitol Hill with Joanne Freeman

• What Merrick Garland Said About Jan. 6

• Report: $2.2 billion in cryptocurrency stolen from DeFi platforms in 2021

• CDN Cache Poisoning Allows DoS Attacks Against Cloud Apps

• Report: $2.2 Billion In Cryptocurrency Stolen From DeFi Platforms In 2021

• iPhone Malware Tactic Causes Fake Shutdowns To Enable Spying

• VMware Bug Opens Door To Hypervisor Takeover

• Hacking Group Targets Old Java Applications To Break Into Networks

• Warning: Log4j Still Lurks Where Dependency Analysis Can’t Find It

• Your backups can save you from ransomware. But how do you protect your backups?

• Mafia Fugitive Captured After 20 Years, Thanks To Google Street View

• GAO uses uses covert testing scheme to assess SBA screening processes

• $2.2 billion in cryptocurrency stolen from DeFi platforms in 2021: report

• Google Voice Authentication Scam Leaves Victims on the Hook

• New Zloader attacks thwarting Microsoft signature checks

• Norton 360 Now Comes With a Cryptominer

• New Mac Malware Samples Underscore Growing Threat

• Rethinking Cybersecurity Jobs as a Vocation Instead of a Profession

• Google Docs comment feature abused in phishing campaign

• New iPhone malware spies via camera when device appears off

• Power Blackouts Sees Kosovo Ban Crypto Mining

• Kubernetes Hardening Tutorial Part 1: Pods

• Log4j flaw hunt shows how complicated the software supply chain really is

• Partially Unpatched VMware Bug Opens Door to Hypervisor Takeover

• Hackers exploit Google Docs in new phishing campaign

• Fresh Warnings Issued Over Abuse of Google Services

• Signal’s Cryptocurrency Feature Has Gone Worldwide

• North Korean Hackers Start New Year with Attacks on Russian Foreign Ministry

• France hits Google, Facebook with fines over ‘Cookies’ management

• Google fixes Android bug that blocks users from calling 911

• Apple iPhone Malware Tactic Causes Fake Shutdowns to Enable Spying

• Assessing Domestic Violent Extremism One Year After the Capitol Siege

• Introducing The Aftermath: A Podcast Series from Lawfare

• Hackers take over 1.1 million accounts by trying reused passwords

• Google Faces French 150m Euro Fine For Cookie Breach

• Securing Web Applications and APIs With Confidence [Webinar Sign-up]

• The Feeling of Safety

• Cyber Awareness 2022: Consider Deepfakes, NFTs and More

• This sneaky hacking group targets old Java applications to break into networks

• Attackers Exploit Flaw in Google Docs’ Comments Feature

• Senators Ask DHS, DOT About Transportation Infrastructure Cybersecurity

• Microsoft Announces Zero-Touch Onboarding for ‘Defender for Endpoint’ on iOS

• IoT ethics must factor into privacy and security discussions

• UK Police Seize £322m of Cryptocurrency in Past Five Years

• Hybrid Multicloud Strategies Are Keeping the Public Sector at the Forefront of Threat Mitigation

• The Second Building Block for the SOC of the Future: An Open Integration Framework

• S3 Ep64: Log4Shell again, scammers keeping busy, and Apple Home bug [Podcast + Transcript]

• Integrating Perimeter and Internal Defenses: 5 Facts That May or May Not Surprise

• Egregor Ransomware Analysis: Origins, M.O., Victims

• Intercepting 2FA: Over 1200 man-in-the-middle phishing toolkits detected

• Researcher Detects 70 Web Cache Poisoning Vulnerabilities, Gets $40k in bug bounty rewards

• Saltzer Health Says Patient Data Exposed in Cyberattack

• Purple Fox Rootkit Discovered In Malicious Telegram Installers

• Biometric authentication company iProov raises $70M

• Google Chrome rival Brave reports another big jump in users

• Hackers Hit Major Portuguese Media Group, Take Down Websites

• People Are Increasingly Choosing Private Web Search

• Customer Accounts from 17 Firms Were Stolen by Hackers in Credential Stuffing Attacks

• ‘Elephant Beetle’ Threat Actor Is Stealing Money from Companies

• Card skimmers strike Sotheby’s in Brightcove supply chain attack

• Look-Alike Letters Lead Users to Lose Moola – Intego Mac Podcast Episode 221

• UK Police Forces Seize £300m In Cryptocurrencies – Report

• CES 2022: GM To Introduce Personal Autonomous Car By 2025

• France Hits Google, Facebook With Huge Fines Over ‘Cookies’

• Chemicals Company Element Solutions Discloses Cybersecurity Incident

• NIST Cybersecurity Framework: A Quick Guide for SaaS Security Compliance

• $50 Million Lost to Fraudsters Posing as Broker-Dealers

• 16-31 December 2021 Cyber Attacks Timeline

• Researcher Found ‘doorLock’ DoS Bug In Apple HomeKit

• Your cybersecurity training needs improvement because hacking attacks are only getting worse

• New Trick Could Let Malware Fake iPhone Shutdown to Spy on Users Secretly

• NoReboot persistence technique fakes iPhone shutdown

• Wells Fargo initiates CrowdStrike at overweight, says struggling stock can jump 50%

• University of California Researchers Develop a Technique to Discover Inconsistencies in Smart Contracts

• Credential Stuffers Compromised 1.1 Million Accounts

• Crypto Firm Pulls the Rug from Under Investors with $10m Scam

• Man Pleads Guilty to $50m Investment Fraud Scheme

• Crypto scammers took a record $14 billion in 2021

• Attack on UK’s Defence Academy Compelled a Rebuild of the IT System

• Omicron Test Scam : A Free Test Is Available

• Do you know what your supply chain is and if it is secure?

• Digital Rights And Wrongs | Avast

• Artificial Intelligence cuts down packaging issues for Amazon

• A National response to Ransomware Attacks

• VMware Patches Important Bug Affecting ESXi, Workstation and Fusion Products

• Five tips on how to stay (cyber)secure in a hybrid work world

• FlexBooker – 3,756,794 breached accounts

• Federal agencies highlight security improvements a year after Capitol attack

• Google Releases New Chrome Update to Patch Dozens of New Browser Vulnerabilities

• The Log4j debacle showed again that public disclosure of 0-days only helps attackers

• Bridging the “front and back of the house”: A lesson in risk management

• Key Considerations for Canada’s Forthcoming National Cyber Security Strategy

• Mobile security software market to reach $2.75 billion by 2025

• Experts uncover Elephant Beetle, an organized financial-theft operation

• The Best of Both Worlds: Pairing Tripwire ExpertOps with Technical Account Management

• Ivanti Neurons for IIoT automates and optimizes supply chain operations

• VanDyke Software increases productivity with beta releases of SecureCRT 9.2 and SecureFX 9.2

• Signal Foundation owner says Telegram is not as secure as it claims

• Attivo Identity Detect & Response Wins Triple 2021 Platinum ‘ASTORS’

• HUB Security provides quantum security solution for Israeli Ministry of Defense

• NETSCOUT partners with AWS to help migrate ENGIE IT’s workloads

• Linksys Hydra Pro 6 offers improved network efficiency for hybrid work era

• 5 ways hackers steal passwords (and how to stop them)

• Kansas Gets 17 Critical Cybersecurity Recommendations

• McMenamins Reports Data Breach

• VMware fixed CVE-2021-22045 heap-overflow in Workstation, Fusion and ESXi

• John N. Stewart joins Vaultree Board of Directors

• Aqua Security appoints Paul Calatayud as CISO

• Miro raises $400M to accelerate innovation through visual collaboration

• Movandi collaborates with Doosan Group to meet growing global demand for 5G mmWave connectivity

• StrikeForce and Aite-Novarica develop a framework for secure video conferencing

• 12 Tips for Improving Access Control in Your Organization

• Alexa, Webex headed to the moon

• Google Chrome update includes 37 security fixes

• 1.1M Compromised Accounts Found at 17 Major Companies

• ECS names Sean Mullen as SVP of Business Development

• Jesper Frederiksen joins Lacework as General Manager for EMEA

• Acronis appoints Michael Callahan as CMO

• What You Need to Know About the Predator-OS 20.04 LTS Release>

• Cato improves SASE management app

• DOD looks to expand its data partnerships with allies

• GIS enlisted for equity and social justice analysis

• ‘Elephant Beetle’ Lurks for Months in Networks

• Season’s cheatings: Online scams against the elderly to watch out for

• You better have patched those Log4j holes or we’ll see what a judge has to say – FTC

• IT Security News Daily Summary 2022-01-05

• Amazon Partners With Stellantis For Vans, Rivian Stock Plunges

• FTC warns of legal risks of failing on Log4j mitigation

• Broward Breach Highlights Healthcare Supply-Chain Problems

• Facebook Restores Account Of Conversative Book Publisher After Permanently Banning It

• New Attack Campaign Exploits Microsoft Signature Verification

• Cloud video platform abused in web skimmer attack against real estate sites

• Technical Analysis of CVE-2021-1732

• Uber Bug, Ignored for Years, Casts Doubt on Official Uber Emails

• FTC warns companies to mitigate Log4j vulnerability

• NY AG’s credential stuffing probe finds 1M exposed accounts

• Morgan Stanley Agrees to Data Breach Settlement

• NY AG: 1.1M Online Consumer Accounts Found Compromised in Credential-Stuffing Attacks

• Cybersecurity pullback a result of high valuations, still great fundamentals, says Jefferies’ Thill

• The Battle to Keep PvP Games Fair and Out of the Hands of Hackers

• Workshop: Building Modern Applications with DevOps Security

• Kazakhstan leaders shut down internet amid gas price protests

• Malware Can Fake iPhone Shutdown via ‘NoReboot’ Technique

• Which Cloud Strategy Is Right For My Organization’s Security Needs?

• FTC: Companies Could Face Legal Action for Failing to Patch Log4j

• US Army journal’s top paper from 2021 says Taiwan should destroy TSMC if China invades

• Apple iPhone 14 To Lose Notch Cutout – Report

• NY AG notifies 17 companies of breaches, says 1.1 million accounts compromised in attacks

• FTC to Go After Companies that Ignore Log4j

• Zloader Banking Malware Exploits Microsoft Signature Verification

• VMware Releases Security Updates

• Google Releases Security Updates for Chrome

• Watch CNBC’s full interview with BlackBerry CEO John Chen on expanding into cybersecurity

• Remember Norton 360’s bundled cryptominer? Irritated folk realise Ethereum crafter is tricky to delete

• Behind the scenes: A day in the life of a cybersecurity curriculum director

• MalSmoke attack: Zloader malware exploits Microsoft’s signature verification to steal sensitive data

• VMware Plugs Security Holes in Workstation, Fusion and ESXi

• MicroStrategy enhances security, embedded analytics features

• Why We Need To Reframe the False-Positive Problem

• Purple Fox Rootkit Dropped By Malicious Telegram Installers

• Kosovo Bans Cryptocurrency Mining After Blackouts

• This iOS 15 Bug Could Crash Your iPhone Permanently

• Malsmoke Exploits Microsoft’s E-Signature Validation

• Activision Sues And Unmasks Alleged Call Of Duty: Warzone Cheat Sellers

• 9-year-old Windows flaw abused to drop ZLoader malware in 111 countries

• This iOS 15 bug could crash your iPhone permanently

• Recorded Future Acquires SecurityTrails in $65M Deal

• FTC threatens “legal action” over unpatched Log4j and other vulns

• Researcher Release Report on Internet of Things and Malware Security

• Apple iOS Susceptible to HomeKit ‘Doorlock’ Vulnerability

• Hackers exploit old Microsoft Vulnerability to drop Zloader Malware

• Alphabet Senior Management Awarded Stock Options, Salary Rises

• 2022-01-04 – Remcos RAT infection from Excel file with macros

• Web Application Security Driven by WAF is Favoring Organizations

• The Bug Report – December 2021

• Location and Online Privacy | Avast

• CES 2022: AI is driving innovation in ‘smart’ tech

• The Future of Federal Secure Remote Access

• Roadmap to a Better Customer Experience

• Census recounts fail to account for COVID chaos, cities say

• ICS Vendors Respond to Log4j Vulnerabilities

• Putting Ransomware Gangs Out of Business With AI

• Do the Legal Rules Governing the Confidentiality of Cyber Incident Response Undermine Cybersecurity?

• FL Broward Health 1.3M Patient Data Breach

• Heimdal™ Security Threat-Hunting Journal: End of the Year Wrap-up in Malware

• Remember Norton 360’s bundled cryptominer? Irritated folk realise Ethereum app is tricky to delete

• Understanding Custom Software

• Reserve Bank warns Aussies over punting on ‘fad driven’ cryptocurrencies.

• China Central Bank Pilots Wallet App For Digital Yuan

• Malicious Telegram Messenger App Using New Purple Fox Malware to Hack PCs

• Welcome McAfee Forward—the Future of Online Protection Today

• Defense Contractors Must do More to Conceal Their Attack Surface

• Aqua Security Appoints Paul Calatayud as CISO

• CrowdStrike Incorporates Intel CPU Telemetry Into Falcon Sensor

• FTC warns legal action against businesses who fail to mitigate Log4J attacks

• The 5 Most Hotly Contested Security Trends and Questions

• Xage lands $30M to bring identity security to ‘real world’ infrastructure

• ‘Malsmoke’ Exploits Microsoft’s E-Signature Verification

• Chrome 97 Patches 37 Vulnerabilities

• Researchers Uncover Hacker Group Behind Organized Financial-Theft Operation

• Cloud Video Platform Used By Cybercriminals to Steal Payment Information

• $10m of funds goes missing in what appears to be a cryptocurrency rug-pull

• Careful! Uber flaw allows anyone to send an email from uber.com

• China Mobile Enjoys Successful Shanghai IPO After NYSE Delisting

• CES 2022: Sony Mulls Electric Vehicle Entry

• 2022 New Year’s Resolution: Dev and SEC Cross-Team Learning

• China moots additional security rules for apps that influence public opinion

• Malsmoke hackers abuse Microsoft signature verification in ZLoader cyberattacks

• Morgan Stanley agrees to $60 million settlement in data breach lawsuit

• Purple Fox rootkit discovered in malicious Telegram installers

• Broward Health Data Breach Impacts 1.3 Million People

• FTC: Patch Log4j Vulnerability to Avoid Potential Legal Action

• Google Patches 48 Vulnerabilities With First Set of 2022 Android Updates

• Palo Alto Networks Appoints CEO for EMEA and LATAM Regions

• More Russian Cyber Operations against Ukraine

• DatPiff’s users’ data available on hacking forum

• The US Federal Trade Commission (FTC) Urges Companies to Secure Consumer Data

• DatPiff Data Breach Has an Impact on Millions of People, Have I Been Pwned Warns

• Windows giant seeks Pluton-ic relationship with chip maker: AMD first out of the gates with Microsoft’s security processor

• Hackers Are Exploiting a Flaw Microsoft Fixed 9 Years Ago

• New Zloader Banking Malware Campaign Exploiting Microsoft Signature Verification

• New year, new ICO head

• British Classified Ad Site Gumtree Exposed Users’ Private and GPS Location in Data Breach

• Russian hacker arrested in US who may have information about Russian interference in American elections

• Lapsus$ Ransomware Gang Hacked Portugal’s Largest Media Conglomerate

• PulseTV Discloses Potential Breach Affecting 200,000 People

• SEGA’s Europe Security : AWS S3 Bucket Exposed Provides Steam API Access

• Discovering New Ways To Phish | Avast

• UK’s Information Commissioner Starts New Role Amid Major Changes

• Info-Stealing Malware Hits 100+ Countries

• Threat actors continue to exploit Log4j flaws in their attacks, Microsoft Warns

• Expert Comment: Lapsus$ Ransomware Gang

• Latest Cybersecurity News 2022

• FTC: Patch Log4j Now or Risk Major Fines

• How can SMBs extend their SecOps capabilities without adding headcount?

• CredNinja – Test Credential Validity of Dumped Credentials or Hashes

• How ransomware gangs went pro

• Build your own Android security product

• Malware Reverse Engineering for Beginners – Part 1: From 0x0

• How We Handled the Log4j Security Vulnerability

• Hackers Target Real Estate Websites with Skimmer in Latest Supply Chain Attack

• Researchers used electromagnetic signals to classify malware infecting IoT devices

• China says apps that could influence public opinion require a security review

• Services Australia brushes off vulnerability concerns in COVID-19 digital certificates

• CrowdStrike Incorporates Intel CPU Telemetry into Falcon Sensor

• API security: Understanding the next top attack vector

• SMBs should consider new approaches for increasing their cybersecurity posture

• FTC to penalize companies hit by Log4J Vulnerability

• Google acquires Israel cybersecurity company Siemplify

• Microsoft Warns of Continued Attacks Exploiting Apache Log4j Vulnerabilities

• Executech Announces Acquisition of Dyrand Systems

• CynergisTek Finishes Year Strong, Closes Largest 2-Year Managed Service Contract for 2021

• The Other Type of Shadow IT

• Technology’s contributions toward safety in healthcare

• Integrity: A Key Facet of Zero Trust

• Tips, Advice, and Insights on Achieving Buy-in for Cybersecurity Projects

• Embedded hypervisor software market to reach $1.16 billion by 2026

• How companies manage data and AI initiatives

• NetFay Peer-to-Peer Encrypted Private Data Platform ensures personal data privacy

• Finite State’s binary analysis enhances automated zero-day vulnerability detection

• CloudCover App provides executives with real-time visibility into their network security

• The CISO’s guide to third-party security management

• The Evolution of Robotic Dogs: Where Is Cyber Fido Headed Next?

• Identiv Takes Home the Gold in 2021 ‘ASTORS’ Awards Program

• TD SYNNEX partners with MicroStrategy to provide end-to-end enterprise analytics solutions

• NETGEAR announces business products for SMBs and home offices

• Comcast releases WiFi 6E Gateway to boost capacity for connected home devices

• 4 things that you didn’t know your smartphone could do

• 2022-01-03 – Pcap from web server with log4j attempts and lots of other probing/scanning

• FTC to pursue companies that expose customer data due to not patching Log4j

• Chinese tech companies must undergo government cyber review to list overseas

• Instagram and teens: A quick guide for parents to keep their kids safe

• 2021 in Review, Part 4: 5 Cybersecurity Topics to Watch in 2022

• Tom Aurelio joins OneSpan as CPO

• (ISC)² appoints John Giddings as VP of Global Customer Experience

• HUMAN Security raises $100M to accelerate expansion into new markets

• Blackbaud acquires EVERFI to offer innovation and data-driven social impact for customers

• CompuGain collaborates with Rafay Systems to enhance secure Kubernetes implementations

• access log

• OPM disputes 2021 court ruling on firing feds for poor performance

• Bob Vincent joins NetAbstraction as VP of Engineering

• VIQ Solutions hires Jayne Perry as Managing Director for United Kingdom and EMEA

• Onapsis appoints Sadik Al-Abdulla as CPO

• Closing the CMMC training gaps

• Avoid being held captive by ransomware with secure, reliable backups

• Microsoft Sees Rampant Log4j Exploit Attempts, Testing

• Google makes the perfect case for why you shouldn’t use Chrome

• Report: Facebook Allowed Misinformation To Flourish Ahead Of Jan. 6 Attack

• Attackers Exploit Log4j Flaws in Hands-on-Keyboard Attacks to Drop Reverse Shells

• McMenamins Breach Affected 23 Years of Employee Data

• Lawfare Live: The Aftermath

• IT Security News Daily Summary 2022-01-04

• What to Do If You’re Caught Up in a Data Breach

• LA Secure app protects mobile users from security threats

• Google Buys Siemplify to Get Ahead in Cloud Security

• UScellular discloses the second data breach in a year

• EFF Condemns the Unjust Conviction and Sentencing of Activist and Friend Alaa Abd El Fattah

• Bug in backup software results in loss of 77 terabytes of research data at Kyoto University

• Google acquires Siemplify for boosting security operations

• Over 20 years of employee data leaked during McMenamins ransomware attack

• Data Skimmer Hits 100+ Sotheby’s Real-Estate Websites

• SEGA’s Sloppy Security Confession: Exposed AWS S3 Bucket Offers Up Steam API Access & More

• Is quantum computing ready to disrupt cybersecurity?

• Investigation Launched into App “Selling” Women

• Persistence without “Persistence”: Meet The Ultimate Persistence Bug – “NoReboot”

• White House renews efforts to improve integrity of federal payments

• Network upgrades support heath care growth in rural Iowa

• Google acquires Israeli cybersecurity company Siemplify for $500 million

• Anti-Bot Fraud Detection Firm HUMAN Snags $100M Investment

• Google Acquires its First Non-American Cybersecurity Firm

• Upskilling, better training keys to increasing cyber talent pool

• Driverless Car Trial For Milton Keynes By Month End – Report

• 5 Things to Consider When Getting into Cryptocurrency

• First Microsoft Pluton-powered Windows 11 PCs to start rolling out this year

• UWO Opens New Cybersecurity Center

• EFF Condemns the Unjust Conviction and Sentencing of Activist and Friend Alaa Fatttah

• Purple Fox Rootkit Dropped by Malicious Telegram Installers

• Apple Home software bug could lock you out of your iPhone

• Mobile Application Security: 2021’s Breaches

• What you need to know about how cryptography impacts your security strategy

• Customer support scammers take aim at NFT enthusiasts

• SlimPay fined €180k after 12 million customers’ bank data publicly accessible for 5 years

• US Operators Delay 5G Rollout, Amid Aviation Concerns

• Note to managers: A little recognition goes a long way

• McMenamins Data Breach Affects 12 Years of Employee Info

• Google Acquires Siemplify in Ambitious Cybersecurity Push

• China Data Security Law bars online companies with 1 million users

• Tesla Provokes Ire Over Showroom In Xinjiang, China

• Bot mitigation company Human Security raises $100M

• Google Cloud acquires Siemplify for boosting security operations

• Cyber Insurance Firm Corvus Expands With Acquisition of UK-Based Tarian

• Saltzer Health Informs Patients of Personal Information Exposure

• Vinnie Liu Has a Mission: Keeping People Safe Online and Offline

• Vulnerability Summary for the Week of December 27, 2021

• Attackers abused cloud video platform to inject an e-skimmer into 100 Real Estate sites

• Silicon Valley’s Trial Of The Century

• Log4j Flaw Attack Levels Remain High, Microsoft Warns

• Microsoft Fixes Y2K22 Exchange Bug That Crashed Servers Worldwide

• John Edwards Takes The Reins At The UK’s Data Protection Watchdog

• Japanese Organizations Are Now the Targets of BlackTech APT Group

• Classic BlackBerry Smartphones Discontinued Today

• Twitter Permanently Suspends Republican Marjorie Taylor Greene

• Protecting Your Data From a Unique Threat: Misinformation

• elliptical curve cryptography (ECC)

• AI, ML bubble to the top in new beverage-ordering solution

• Log4j flaw attack levels remain high, Microsoft warns

• Online privacy: DuckDuckGo just finished a banner year and looks for an even better 2022

• Palo Alto Networks Appoints Helmut Reisinger to Leadership Team

• Log4j Remediation Rules Now Available for WhiteSource Renovate and Enterprise

• Why CIOs Should Report to CISOs

• SAILFISH System to Find State-Inconsistency Bugs in Smart Contracts

• Rethinking “Rules of the Road” to Stabilize U.S.-China Competition

• Exchange Server Bug Fixed

• Malicious Telegram Installers Used to Spread Purple Fox Rootkit

• Purple Fox rootkit now bundled with Telegram installer

• Serious Vulnerability Allows Phishing Emails to Be Sent From Uber.com Domain

• 8 Cybersecurity Trends You Must Watch Out For in 2022

• Most Reliable Hosting Company Sites in December 2021

• Log4j flaw attacks are causing lots of problems, Microsoft warns

• Portugal Media Giant Impresa Crippled by Ransomware Attack

• Predictions: SecurityWeek’s 2022 Cybersecurity Outlook

• Unpatched HomeKit Vulnerability Exposes iPhones, iPads to DoS Attacks

• Vulnerability lets anyone send emails from Uber.com

• John Edwards takes the reins at the UK’s data protection watchdog

• Purple Fox backdoor spreads through fake Telegram App installer

• Broward Health data breach exposes data of 1,357,879 individuals

• A Data Breach Affected Broward Health

• Apple First To Breach $3 Trillion Market Cap

• Silicon UK In Focus Podcast: The Quality of Data

• 2022: The year of software supply chain security

• Skimmer Injected Into 100 Real Estate Websites via Cloud Video Platform

• Researchers Detail New HomeKit ‘doorLock’ Bug Affecting Apple iOS

• Watch Out! You Might Get Hacked When Copy-Pasting Commands from Webpages

• China to make some firms undergo a data security review before listing overseas

• If it looks like a duck, swims like a duck, and QWACs like a duck, then it’s probably an EV Certificate

• Cyberattack against UK Ministry of Defence training academy revealed

• UK Defence Academy Attack Forced IT Rebuild – Report

• Money Launderers Get 33 Years for £70m Criminal Scheme

• Top Cybersecurity Trends To Consider For The New Year

• The Best Cyber Security Blogs You Should Follow [Updated 2022]

• Implementing Cloud Governance as a Code Using Cloud Custodian

• Microsoft Fixes New Year’s Day Exchange Server Bug

• Hospitality Chain McMenamins discloses data breach after ransomware attack

• Looking for adding new detection technologies in your security products?

• DatPiff – 7,476,940 breached accounts

• Parliamentary security committee review backs the operation of controversial TOLA Act

• Beware of Fake Telegram Messenger App Hacking PCs with Purple Fox Malware

• Should businesses be concerned about APT-style attacks?

• Meet the new Flagpro malware developed by Chinese

• Cyber Attack on UK Defence Academy

• Broward Health suffered a data breach that impacted +1.3 million people

• Preventing document fraud in a world built on digital trust

• Insider threat does not have to be malicious, so how do you protect your organization?

• Decisions, Decisions and the Role of Authorization

• Chinese Hackers Using Log4Shell Exploit Tools to Perform Post-Exploitation Attacks

• Senate committee wants foreign interference social media reporting rules by next Australian election

• Not IT vs OT, but IT and OT

• Securing Smart Cities: What You Need to Know

• Healthcare cloud infrastructure market size to reach $142 billion by 2028

• Broward Health Hit With Data Breach on Patients, Staff

• OPM faces uncertain funding prospects

• NSWEC finds iVote system failure may have impacted three local election outcomes

• Breaking the habit: Top 10 bad cybersecurity habits to shed in 2022

• Arlo Technologies partners with Matter to provide home security solutions for customers

• Sherri Luther joins Silicon Labs Board of Directors

• Why Assessing Security Risk in Compute Lifecycle Development Should Be a Community Effort

• Facebook Suspends Controversial Politician For 24 Hours, Leading To Accusations Of Censorship

• Florida’s Broward Health Confirms October 2021 Breach

• CISOs Plan What to Buy With Funds From the Infrastructure Bill

• ‘doorLock’ – A persistent denial of service flaw affecting iOS 15.2 – iOS 14.7

• IT Security News Daily Summary 2022-01-03

• Cyber vulnerabilities could impact municipal finance

• How combining human expertise and AI can stop cyberattacks

• OPM faces uncertain future

• NWS seeks machine learning to translate hurricane warnings

• Ohio adopts single sign-on for unemployment claims

• How to install the CSF firewall on Ubuntu Server

• How combining human expertise and AI stop cyberattacks

• Pathr.ai Reaffirms Position as Privacy-Centric Solution for Retailers with Spatial Intelligence Platform

• Cross-Border Access to User Data by Law Enforcement: 2021 Year in Review

• 5 Signs It’s Time to Upgrade Your Office Security

• OPM faces an uncertain future

• Data breach: Broward Health warns 1.3 million patients, staff of ‘medical identity theft’

• CrowdStrike Beefs Up Exploit Detection With Intel CPU Telemetry

• Hospitality Chain Says Employee Data Stolen in Ransomware Attack

• Mitigating Synthetic Identity Security Risks

• Broward Health Warns 1.3 Million Patients, Staff Of Medical Identity Theft After Data Breach

• Portugal’s Impresa Media Outlets Hit By Hackers

• The Biggest Data Breaches, Hacks Of 2021

• January 6 Committee Gets Inside Trump’s West Wing Wall Of Obstruction

• The D.C. District Court and the Jan. 6 Cases

• How Data Analytics and AI Solve the Toughest Global Problems

• Top 5 trends for endpoint security In 2022

• Log4j Highlights Need for Better Handle on Software Dependencies

• Jerusalem Post and Maariv hacked on Gen. Soleimani’s death anniversary

• Data Protection: What Needs to Be Protected?

• IoT’s Importance is Growing Rapidly, But Its Security Is Still Weak

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Los Angeles offers security app to safeguard public WiFi users

• What are online Internet threats

• Sophisticated iLOBleed Rootkit Targets HP Servers

• Shopping Platform PulseTV Discloses Potential Breach Impacting 200,000 People

• Name That Edge Toon: In Your Face!

• Israeli Media Outlets hacked on the anniversary of Soleimani killing

• Curious Cat App Loses Control of Its Domain

• The US Healthcare Sector: Target to Multiple Breaches Last Year

• Everything You Need To Know About Ransomware Attacks and Gangs In 2022

• Quantum Computing Is for Tomorrow, But Quantum-Related Risk Is Here Today

• Creating the Next Generation of Secure Developers

• SEGA Europe left AWS S3 bucket unsecured exposing data and infrastructure to attack

• Backup Error Results in Kyoto University Losing 77TB of Research Data

• 1-15 December 2021 Cyber Attacks Timeline

• Norwegian Media Behemoth is the Latest Victim of Cybercrime

• Multiple Vulnerabilities Impact Netgear Nighthawk R6700 Routers

• Vulnerabilities In ENC DataVault Software Impact Multiple Storage Devices

• ACLU Demands Answers About Transit Agency Data Breach

• Israeli Media Outlets Hacked on Soleimani Killing Anniversary

• 6 Ways to Delete Yourself From the Internet

• What’s Next for Cybersecurity in 2022?

• Cybersecurity M&A Roundup: 35 Deals Announced in December 2021

• Are Medical Devices at Risk of Ransomware Attacks?

• Detecting Evasive Malware on IoT Devices Using Electromagnetic Emanations

• The worst cyber attacks of 2021

• Potential 200,000 Credit Cards’ Compromise Disclosed by PulseTV

• Data mining of Facebook and Twitter posts by China

• Ransomware attack on Impresa Portugal

• How to Keep Workloads Secure in the Dynamic Threat Landscape

• S2W collaborates with INTERPOL to identify and prevent dark web crimes

• A Vulnerability Allowing Almost Anyone to Send Emails from Uber.com Was Discovered

• CompuGain partners with Lumigo to strengthen modern application delivery

• What angered us most about cybersecurity in 2021: Lock and Code S03E01

• Trying to register your antivirus in Windows Security Center?

• Microsoft rolled out emergency fix for Y2k22 bug in Exchange servers

• A CISO’s guide to discussing cybersecurity with the board

• Ransomware attacks decrease, operators started rebranding

• Why the UK’s energy sector is fragile and ripe to cyber attacks

• Global outbreak of Log4Shell

• Infosec products of the month: December 2021

• LTE IoT market to grow steadily by 2026

• Microsoft Issues Fix for Exchange Y2K22 Bug That Crippled Email Delivery Service

• Top Cyber Stories for December 2021

• IT Security News Weekly Summary – Week 52

• IT Security News Daily Summary 2022-01-02

• Exclusive: NASA Director Twitter account hacked by Powerful Greek Army

• Fighting For You From Coast to Coast: 2021 In Review

• Fighting For A More Open, Balanced Patent System: 2021 in Review

• Lapsus$ ransomware gang hits Impresa, Portugal’s largest media conglomerate

• A Linux Admin’s Getting Started Guide to Improving PHP Security>

• How to evolve your organization into a data-centric security architecture

• New iLOBleed Rootkit Targets HP Integrated Lights-Out

• The Internet is for Everyone to Enjoy—We’re Helping See to It

• North Korea-linked threat actors stole $1.7 billion from cryptocurrency exchanges

• Security Affairs newsletter Round 347

• Crypto security breaches cause $4.25 billion losses worth of cryptos in 2021

• Penetration testing

• Wireshark 3.6.1 Released – What’s New!!

• Apple Watch’s Life-Saving Potential Highlighted in Suspenseful ‘911’ Ad

Generated on 2022-01-09 23:59:06.678611