IT Security News Weekly Summary – Week 03

• IT Security News Daily Summary 2022-01-23

• The Threat Landscape and Attribution

• OpenSubtitles data breach impacted 7 million subscribers

• How to Deal with Exchange Server Security Challenges?

• Gurman: Apple Preparing ‘Widest Array of New Hardware Products in Its History’ for Fall

• Ethics and ownership of AI-powered identities

• US CISA added 17 flaws to its Known Exploited Vulnerabilities Catalog

• CFRipper – CloudFormation Security Scanning & Audit Tool

• Russia’s Strategic Success in Syria and the Future of Moscow’s Middle East Policy

• McAfee Addresses Multiple Critical Bugs in McAfee Agent Software

• Log4j lesson: Cybersecurity defense isn’t just about tech

• Molerats cyberespionage group uses public cloud services as attack infrastructure

• She didn’t trust her movers. A single Apple AirTag proved she was right

• Now Is a Good Time to Update Your Recovery Email Addresses

• Apple’s Most Questionable Design Decisions in Recent Memory

• Amazon’s Bogus Crypto Token Investment Scam Robs Bitcoin off Users.

• Kaspersky ICS CERT has Discovered Several Spyware Attacks Aimed at Industrial Enterprises

• Cisco StarOS Flaw Let Attackers Gain Remote Code Execution on Vulnerable Device

• Week in review: Finding stolen credentials on VirusTotal, BNPL attracting fraudsters

• Security Affairs newsletter Round 350

• Over 40 Billion Records Exposed in 2021

• Penetration testing

• Data Privacy Day: Know your rights, and the right tools to stay private

• New Destructive Malware Attack That Wipes Master Boot Records

• Noname Security Appoints Strategic Advisory Board Amid Impressive Growth

• CoreSite collaborates with Zenlayer to simplify global connectivity and hybrid-cloud solutions

• Zenoss appoints Blair Duncan as CFO

• TD SYNNEX Passage Program addresses the cybersecurity skills gap

• IT Security News Daily Summary 2022-01-22

• OpenSubtitles Hacked-  Data Breach Affected 7 Million Subscribers

• Pay attention to Log4j attacks, Dutch National Cybersecurity Centre (NCSC) warns

• Crypto.com CEO responds to complaints of login issues after $31 million hack

• How to Detect and Defeat the Log4j2 Vulnerability With Deepfence

• Should We Target Zero False Positives?

• Vulnerability in GitHub Actions Allowed Attackers to Take Control of Victim’s Device

• Acrisure Broadens Platform with Cyber Services Division

• Transmit Security Builds Momentum with Key Appointment of Chris Pick as Chief Marketing Officer

• What Were the Best Cybersecurity Webinars of 2021?

• Multichain hack: Hacker returns $1 million, keeps $150k as bug bounty

• Vulnerabilities in Control Web Panel potentially expose Linux Servers to hack

• The Log4Shell vulnerability: A postmortem

• Experts Find Strategic Similarities b/w NotPetya and WhisperGate Attacks on Ukraine

• Top Stories: Spring Apple Event Rumors, Apple Opposes Sideloading, and More

• Crypto.com Finally Admits It Lost $30 Million in a Hack

• Log4j Attack Target SolarWinds and ZyXEL

• US Treasury Department sanctions 4 Ukrainian officials for working with Russian intelligence

• Molerats Hackers Hiding New Espionage Attacks Behind Public Cloud Infrastructure

• Cheap Malware Behind Surge in Attacks on Cryptocurrency Wallets

• Build or Buy your own antivirus product

• Weekly Update 279

• APT41 Used the New MoonBounce UEFI Malware in Targeted Attacks

• Hackers Planted Secret Backdoor in Dozens of WordPress Plugins and Themes

• 11:11 Systems Completes Acquisition of iland; Combined Offering to Unlock the Power of Connectivity, Cloud and Security

• To Err Is Human, and That’s What Hackers Are Counting On

• Looking Back at 2021 and Forward to 2022

• 2022-01-20 – Emotet epoch4 and epoch5 infections

• Critical Bugs in Control Web Panel Expose Linux Servers to RCE Attacks

• Cadence DRAM verification solution optimizes SoC designs for data center and automotive applications

• CISA, Microsoft Warn of Wiper Malware Amid Russia-Ukraine Tensions

• IT Leaders Consider Security Tech a Part of Business Transformation

• Diligent Boards integrates with Microsoft Teams to improve collaboration within board meetings

• Week in security with Tony Anscombe

• Contextualizing Last Week’s Malicious Cyber Activities Against Ukrainian Government Websites and Systems

• Chris Pick joins Transmit Security as CMO

• Codenotary raises $12.5 million to accelerate product development and expand sales

• The U.K. Paid $724,000 For A Creepy Campaign To Convince People That Encryption is Bad. It Won’t Work.

• 2022-01-17 – Astaroth (Guildma) activity

• Noname Security appoints Strategic Advisory Board

• Log4J: Microsoft discovers attackers targeting undisclosed SolarWinds vulnerability

• Better mental health treatments with synthetic patient data

• Prominent Carding Marketplace UniCC announced it’s shutting down

• Looking Ahead: Five Security Trends For 2022

• OT/IT Security – Two Sides of the Same Coin

• Apple preps fix for Safari’s web-history-leaking IndexedDB privacy bug

• IT Security News Daily Summary 2022-01-21

• OPM issues guidance to ensure 67,000 feds make at least $15 per hour

• Can chatbots make reporting suspicious activity easier?

• How to start implementing passwordless authentication today

• A bug in McAfee Agent allows running code with Windows SYSTEM privileges

• Friday Squid Blogging: Piglet Squid

• Rust 1.58.1 fixes dangerous race condition

• Fraud Is On the Rise, and It’s Going to Get Worse

• The Internet’s Most Tempting Targets

• Apple Walks Back UNiDAYS Verification Requirement for U.S. Education Store

• What to expect in 2022?

• DISA preps for a diverse hybrid cloud environment

• 5 infosec predictions for 2022

• Merck Awarded $1.4B Insurance Payout over NotPetya Attack

• REvil Ransomware Gang Arrests Trigger Uncertainty, Concern in Cybercrime Forums

• Malware vaccines can prevent pandemics, yet are rarely used

• What Does the Seditious Conspiracy Indictment Mean For the Oath Keepers?

• Is There a Free Form Builder?

• What is an Online Form Builder and Why Do You Need It?

• What is Form Submission?

• Are you looking for the best WordPress Form Builder?

• Strengthening identity-based security with zero trust

• State efforts to close the K-12 digital divide may come up short

• Homelife of Connecticut Residents Secretly Recorded

• CISA Adds Four Known Exploited Vulnerabilities to Catalog

• McAfee Releases Security Update for McAfee Agent for Windows 

• Data management’s role in sustaining digital transformation

• CISA adds 13 exploited vulnerabilities to list, 9 with Feb. 1 remediation date

• McAfee Releases Security Update for McAfee Agent for Windows 

• Experts warn of anomalous spyware campaigns targeting industrial firms

• Apple Shares Valentine’s Day Gift Ideas

• Deals: Apple’s 24-Inch iMac (7-Core, 256GB) Drops to Low Price of $1,239.92

• Humorous New Ad Highlights Apple TV+’s Biggest Stars… Except Jon Hamm

• Public Sector Compliance at Scale

• Transforming Remote Learning with a Modern Education Experience

• Digital Rights Updates with EFFector 34.1

• ‘Mass demand’ is building for cloud-native security, Aqua CEO says

• 20K WordPress Sites Exposed by Insecure Plugin REST-API

• Arm rages against the insecure chip machine with new Morello architecture

• Better Together: The Power of Managed Cybersecurity Services in the Face of Pressing Global Security Challenges

• Federal court issues nationwide pause on Biden’s federal employee vaccine mandate

• Accelerating Zero Trust Architecture in the Cloud

• Log4J: Attackers continue targeting VMware Horizon servers

• Magecart Attacks Continue to ‘Skim’ Software Supply Chains

• A World Where Threat of Cyberattack is Eliminated: Free Webinar Jan 27th

• McAfee Bug Can Be Exploited to Gain Windows SYSTEM Privileges

• CISA Releases Final IPv6 Security Guidance for Federal Agencies

• Cloud Security Provider Anitian Raises $55 Million

• Crime Shop Sells Hacked Logins to Other Crime Shops

• Pennsylvania Approves Ransomware Bill

• Deals: Get the 256GB Wi-Fi iPad for Record Low Price of $449 on Amazon

• MacRumors Giveaway: Win a Customized Sonos Roam Speaker From Electronic Finishing Solutions

• Celebrating 20 Years of Trustworthy Computing

• Cryptocoin broker Crypto.com says 2FA bypass led to $35m theft

• Memorial Health System Confirms Data Breach

• DoH Makes It Difficult to Track Botnets: Spamhaus

• Relevant and Extended Detection with SecureX, Part Three: Behaviour-Based Detections with Secure Network Analytics

• China Sharpens Its Vision for the Digital Economy

• Russia ban on Cryptocurrency to curb ransomware spread

• U.S. Lawmakers Could Finally Take Action Against Facebook In 2022

• Two Critical Zero-Day Bugs Identified in Zoom Users and MMR Servers

• EU Wants To Build Its Own DNS Infrastructure With Built-In Filtering Capabilities

• Security: Your Secret Weapon for UX Innovation

• F5 Patches Two Dozen Vulnerabilities in BIG-IP

• Looking Beyond Biden’s Binding Security Directive

• Google Project Zero discloses details of two Zoom zero-day flaws

• Upstox – 111,002 breached accounts

• Open Subtitles – 6,783,158 breached accounts

• Senate Committee Approves Big Tech Antitrust Bill

• What Your Team Can Learn From the DHS Cybersecurity Hiring Program

• Spyware Blitzes Compromise, Cannibalize ICS Networks

• Industry Reactions to Biden Cybersecurity Memo: Feedback Friday

• Apple Floated as Potential Buyer of Peloton

• Stealthy firmware bootkit leveraged by APT in targeted attacks

• ‘Anomalous’ Spyware Targets Industrial Companies

• How Anonybit plans to crack honeypots storing identity data

• Amazon Alexa Recovers After Morning Outage

• Dark Web Chatter: What Other Russian Hackers Are Saying About the REvil Arrests

• High-Severity Vulnerabilities Patched in McAfee Enterprise Product

• A Vulnerability in the WordPress Plugin Can Expose Users of 20k Websites to Phishing Attacks

• CISA calls for urgent action against critical threats

• Microsoft Defender Glitch Allowed Hackers to Evade AV Detection

• UK, Australia Reach Cyber, Critical Tech Agreement

• FBI warning: This new ransomware makes demands of up to $500,000

• Nasty Linux kernel bug found and fixed

• New Laws Proposed To Strengthen The UK’s Resilience From Cyber Attack, Experts Weigh In

• Threat Actors Exploiting Log4j vulnerabilities propagated via SolarWinds Serv-U software

• Insurance and Fintech Firm Acrisure Launches Cyber Services Division

• FBI Warns Organizations of Diavol Ransomware Attacks

• China’s Olympics App Is Horribly Insecure

• Google Drive starts warning users about suspicious files

• Diavol Ransomware Appears to Have Connections with TrickBot

• The 3 Most Critical Cybersecurity Threats in 2022

• 5G is ‘going live’ at Tyndall Air Force Base

• Chinese Hackers Spotted Using New UEFI Firmware Implant in Targeted Attacks

• MoonBounce UEFI implant spotted in a targeted APT41 attack

• VirusTotal Hacking: Hackers can Access Trove of Stolen Credentials on VirusTotal

• Russian Hackers Employ Malicious Traffic Direction Systems to Spread Malware

• (ISC)2 Appoints its First CISO

• Google Begins AR Headset Development to Compete With Apple and Meta

• Apple to Stop Including EarPods With Every iPhone Sold in France From Next Week

• 2022 Security Report: Software Vendors saw 146% Increase in Cyber Attacks in 2021, marking Largest Year-on-Year Growth

• Chinese APT deploys MoonBounce implant in UEFI firmware

• Two-Fifths of Ransomware Victims Still Paying Up

• Experts Named the Most Popular Passwords of Russians

• #COVID19 Phishing Emails Surge 500% on Omicron Concerns

• Internet Faxing: 6 Ways To Make Sure Files Are Safe And Secure

• Nigerian Authorities Arrest 11 Members of Prolific BEC Fraud Group

• Merck Wins $1.4bn NotPetya Payout from Insurer

• U.S. Sanctions 4 Ukrainians for Working with Russia to Destabilize Ukraine

• Amazon fake crypto token investment scam steals Bitcoin from victims

• Zero-Click Zoom Flaws Now Patched | Avast

• A Phishing Attack Impersonates the US DoL in Order to Steal Account Credentials

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Why should I pay for that security option? Hijacking only happens to planes

• UK, Australia, to build ‘network of liberty that will deter cyber attacks before they happen’

• Emotet Spam Abuses Unconventional IP Address Formats to Spread Malware

• New infosec products of the week: January 21, 2022

• Japan’s Supreme Court rules cryptojacking scripts are not malware

• Apple fixes security vulnerability that allowed websites read browser data

• Biden signs a new Cyber Security Memorandum for National Security

• Commercial surveillance the more immediate problem for citizens: Home Affairs chief

• Crypto.com confirms 483 users hit in attack that saw over $31m in coins withdrawn

• Cisco Issues Patch for Critical RCE Vulnerability in RCM for StarOS Software

• Conti ransomware gang started leaking files stolen from Bank Indonesia

• How do IT leaders plan to overcome remote work security challenges?

• The importance of securing machine-to-machine and human-to-machine interaction

• Prometheus Hacker Group Uses Traffic Direction System to Deliver Malware Binaries to Targets

• Cybersecurity industry trends from 2021 bound to shape this year’s threat landscape

• Exposed records exceeded 40 billion in 2021

• Social Security workers to return to offices possibly by the end of March

• Russia’s Putin out the idea of a broad cryptocurrency ban

• What is opening EV charging stations to cyberattacks?

• Cloudastructure: 2021 – Year to Date Review

• Software Supply Chain Security Specialist Codenotary Raises $12.5 Million in Series B Round

• ERI’s “The Insecurity of Everything” Book Climbs to #1 Best Seller Spot on Amazon

• New Opportunity: Join (ISC)² Regional Event Committees

• Introducing next-generation firewall from Palo Alto Networks to support 5G-enabled IoT, OT and IT use cases

• Cybersecurity market to reach $346 billion by 2027

• MXDR by Deloitte helps organizations against emerging cyber threats

• Axonius SaaS Management identifies misconfigurations and data security risks

• Cloud Security Survey: Better Security Drives Better Business Outcomes

• Cortex XDR Scores 100% Overall Active Prevention in AV-Comparative EPR

• Neustar Email Intelligence provides insights on email deliverability

• Daon expands digital identity verification and proofing solution to help businesses reduce fraud

• NordPass for MSP offers password management services for online security

• Arcserve updates ShadowXafe and OneXafe Solo to protect evolving data workloads

• Confluent Q1 ‘22 enhances elasticity for real-time business demands

• Apple Releases Safari Technology Preview 138 With Bug Fixes and Performance Improvements

• The Risks of Using Online Video Converter

• How to Transfer Your Data between iPhone and Computer Safely

• OpenSea confirms outage after platforms report issues with displaying NFTs

• Apple Highlights iPhone 13 Battery Life and Durability in New Ads

• Veriff partners with Starship to deliver verification requirements for age-restricted transactions

• BT selects VMware SASE to address networking and security challenges

• Keysight Technologies collaborates with Qualcomm to demonstrate 3.5 Gbps uplink throughput

• Protegrity partners with Google Cloud to accelerate secure data analytics

• Deloitte chooses Exabeam to help operationalize MXDR capabilities

• How to know if your email has been hacked

• Apple Watch Charging Bug Fixed in watchOS 8.4 Release Candidate

• Four Belarusian Officials Charged With Conspiracy to Commit Aircraft Piracy

• What COVID Reminded Me About Compliance

• Anitian raises $55 million to fuel growth and product investment

• Datto acquires Infocyte to extend its security offerings for MSPs

• Fileless Malware on Linux: Anatomy of an Attack>

• Datadog appoints Sean Walters as CRO and Kerry Acocella as General Counsel

• Cyberwrite hires Tim Olson as CRO

• Egress appoints Laura Probert as CPO

• The Hill gets serious about digital services

• States must lay tech foundation for cannabis growth

• 2FA Bypassed in $34.6M Crypto.com Heist

• Crypto.com confirms $35M lost in cyber attack

• Researchers Discover Dangerous Firmware-Level Rootkit

• (ISC)² Appoints Jon France, CISSP, as Chief Information Security Officer

• Biden Broadens NSA Oversight of National Security Systems

• FBI links the Diavol ransomware to the TrickBot gang

• Apple Inks Deal for Godzilla TV Show Based on Legendary’s Monsterverse

• Apple Shares ‘Shot on iPhone 13 Pro’ Film Celebrating Chinese New Year

• Ian Drury joins Ocient as CTO

• This 22-Year-Old Builds Chips in His Parents’ Garage

• MoonBounce Malware Can Survive OS Reinstalls

• Israeli Officials Deny Claims of Improper Spyware Use

• The Federal Bureau of Investigation (FBI) officially linked the Diavol ransomware operation to the infamous TrickBot gang.

• 2FA compromise led to $34M Crypto.com hack

• You’re not a fan of Microsoft’s Pluton TPM chip? Lenovo won’t switch it on by default

• Crypto.com now says someone tried to drain $34m from hundreds of accounts

• IT Security News Daily Summary 2022-01-20

• Microsoft beefs up Edge’s security against zero-day attacks

• Zero-trust trends for 2022

• CISA releases finalized IPv6 guidance for agencies

• Georgia moves voter registration to cloud

• macOS Monterey 12.2 and iOS 15.3 Release Candidates Fix Safari Bug That Leaks Browsing Activity

• Want to use Microsoft’s Pluton chip? Up to you, say PC makers, it’s opt-in for now

• Treasury Department sanctions four Ukrainians for allegedly helping Russia

• FAQ: What’s happening with 5G and airport safety?

• Google calls for a secure ‘data transfer framework’ between the US and EU

• Deploy a Bitwarden server with Docker: Here’s how

• Automating Response Is a Marathon, Not a Sprint

• Agencies lag on telecom transition in latest FITARA scorecard

• Agencies have 5 years to hire nearly 600,000 workers. Here’s how they can do it.

• Red Cross Hit via Third-Party Cyberattack

• Red Cross begs attackers to “Do the right thing” after family reunion service compromised

• Want to use Microsoft’s Pluton chip? Up to you say PC makers, but it’s opt-in for now

• Update now! Chrome patches critical RCE vulnerability in Safe Browsing

• Not everyone’s wild about Microsoft’s Pluton security chip: PC makers turn it off

• Security Scanners Across Europe Tied to China Govt, Military

• Attacks Escalating Against Linux-Based IoT Devices

• Reflections on the One Year Anniversary of An Inauguration

• Trump Loses Big on Executive Privilege

• Italian Regulator Recalculates Apple, Amazon Fines

• Critical Cisco StarOS Bug Grants Root Access via Debug Mode

• Prolific Chinese APT Caught Using ‘MoonBounce’ UEFI Firmware Implant

• Cyberbullying: Words do Hurt When it Comes to Social Media

• Understand Diffie-Hellman key exchange

• Cisco StarOS flaws could allow remote code execution and information disclosure

• U.S. Senate Panel Approves Antitrust Bill That Would Allow Sideloading

• Apple PR Chief Stella Low Departs After 8 Months, Kristin Huguet Named Successor

• Microsoft Sees Log4j Attacks Exploiting SolarWinds Serv-U Bug

• Microsoft RDP vulnerability makes it a breeze for attackers to become men-in-the-middle

• Cisco Patches Critical Vulnerability in RCM for StarOS

• Cyber Insights 2022: Nation-States

• Biden Signs Memo to Boost National Cybersecurity

• Cisco Releases Security Updates for Multiple Products

• Google Releases Security Updates for Chrome

• Drupal Releases Security Updates

• F5 Releases January 2022 Quarterly Security Notification

• EFF Sues the U.S. State Department over Documents Related to Activist Leila Khaled

• Connolly, Issa launch IT modernization caucus

• More than half of medical devices found to have critical vulnerabilities

• Seven Ways to Ensure Successful Cross-Team Security Initiatives

• Introduction to automated penetration testing

• 11:11 Systems Acquires iland

• Google Releases Security Updates for Chrome

• Drupal Releases Security Updates

• F5 Releases January 2022 Quarterly Security Notification

• SERVICE UPDATE | Spamhaus DNSBL users who query via Cloudflare DNS need to make changes to email set-up

• Spamhaus Botnet Threat Update: Q4-2021

• Apple Seeds Release Candidate Version of tvOS 15.3 to Developers

• Apple Seeds watchOS 8.4 Release Candidate to Developers

• Apple Seeds iOS 15.3 and iPadOS 15.3 Release Candidates to Developers

• Apple Seeds macOS Monterey 12.2 Release Candidate to Developers

• Epic Games Appeals Ruling in Apple Lawsuit, Claims Court Made Errors

• Secure your passwords and access them anywhere with LastPass

• S3 Ep66: Cybercrime busts, wormable Windows, and the crisis of featuritis [Podcast + Transcript]

• Enterprises Are Sailing Into a Perfect Storm of Cloud Risk

• CISA Releases Final Version of Guidance: IPv6 Considerations for TIC 3.0

• Cheap Malware Is Behind A Rise In Attacks On Cryptocurrency Wallets

• Red Cross Begs Attackers Not To Leak Stolen Data For 515k People

• White Hat Hackers Returns $1 Million Stolen In Crypto Theft Disaster

• New York Mayor Adams To Receive First Paycheck In Cryptocurrency

• Red Cross Hack Leaks Data Of 515,000 Vulnerable People

• Incident Response – Everything You Need to Know

• Group-IB: REvil hackers detention may affect Russian companies

• Red Cross ‘Appalled’ As Hackers Steal Humanitarian Data Of 515,000 People

• Pervasive Apple Safari Bug Exposes Web-Browsing Data, Google IDs

• Third Firmware Bootkit Discovered

• CISA Releases Final Version of Guidance: IPv6 Considerations for TIC 3.0

• Cisco Releases Security Updates for Multiple Products

• New Year, New SOC — 2022 is the Year for Integrated Intelligence

• New iPad Air, Macs, and iPhone SE With 5G Likely to Be Announced at Apple Event This Spring

• Build a stronger cybersecurity team through diversity and training

• UK mulls making MSPs subject to mandatory security standards where they provide critical infrastructure

• QR Code Scams Are On The Rise, InfoSec Experts Weigh In

• Aditya Birla Fashion and Retails Suffers Massive Data Breach

• Red Cross Begs Attackers Not to Leak Stolen Data for 515K People

• Cisco: Patching bugs is about more than CVSS numbers

• Deals: Get Up to 40% Off Anker’s USB-C Cables, MagSafe-Compatible Chargers, and More

• Ending the Remain in Mexico Program: Judging the Boundaries of Executive Discretion

• Time for Transparency From Digital Platforms, But What Does That Really Mean?

• D.C. Circuit Opinion in Atchley v. AstraZeneca

• Cloud services now spreading Malware

• SnatchCrypto Campaign Installs Backdoors In Cryptocurrency Startups

• Russia Proposes Ban On Cryptocurrencies, Crypto Mining

• Red Cross Begs Attackers Not to Leak 515K People’s Stolen Data

• Resurrected jQuery UI Library Haunts Websites, Enterprise Products

• Here Are the Free Ransomware Decryption Tools You Need to Use [Updated 2022]

• A Breach on Multi-Factor Authentication Leads to a Box Account Takeover

• North Korean Hackers Attack Russian Diplomats

• Integrated Business Management Solution – Catalize

• 10 Ways End-to-Encryption Protects Your Data, Your Privacy, and Your Bank Balance

• Best SIEM Tools For SOC Team – 2022

• Small cities worry cybersecurity money won’t reach them

• CISA warns – upgrade your cybersecurity now to defend against “potential critical threats”

• 4 Ways to Develop Your Team’s Cyber Skills

• Crypto.com hack impacted 483 accounts and resulted in a $34 million theft

• Privacy is for paedophiles, UK government seems to be saying while spending £500k demonising online chat encryption

• Make your First Malware Honeypot in Under 20 Minutes

• ‘Now’ would be the right time to patch Ubuntu container hosts and ditch 21.04 thanks to heap buffer overflow bug

• Flaw in IDEMIA Biometric Readers Enables Intruders to Unlock Doors

• Apple Working To Patch Safari Data Leak Vulnerability

• SEC Filing Reveals Fortune 500 Firm Targeted in Ransomware Attack

• WAN report: Complexity continue to grow as more organizations close legacy data centers

• Software Supply Chain Attacks Tripled in 2021: Study

• Combatting SMS and phone fraud: UK government issues guidance

• Reactive Cybersecurity: How to Get it Right

• Virtru raises $60M to bring zero trust security to data sharing

• Cheap malware is behind a rise in attacks on cryptocurrency wallets

• Jail for prolific romance fraudster who fleeced besotted lonely hearts

• SolarWinds Patches Serv-U Vulnerability Propagating Log4j Attacks

• Cisco’s Kenna Security Research Shows the Relative Likelihood of an Organization Being Exploited

• EU Chief Confirms Chip Law Proposal For Early February

• Mind the MPLog: Leveraging Microsoft Protection Logging for Forensic Investigations

• Data of 7 Million OpenSubtitles Users Leaked After Hack Despite Site Paying Ransom

• Google Details Two Zero-Day Bugs Reported in Zoom Clients and MMR Servers

• Red Cross hit by a sophisticated cyberattack

• 3 Smartphone Safety Tips to Keep Your Online Data Secure

• CrowdStrike Powers MXDR by Deloitte, Offering Customers Risk Mitigation with Powerful Customized and Managed Security Services

• Red Cross Appeals to Hackers After Major Cyberattack

• Here Are the Free Ransomware Decryption Tools You Need to Use

• Defending Users’ NAS Devices From Evolving Threats

• NSA Authorized to Issue Binding Operational Directives to Boost NSS Cybersecurity

• San Francisco Police Illegally Spying on Protesters

• iOS 15 Patched Security Hole That Potentially Exposed Users’ Private Apple ID Information to Third-Party Apps

• Open Subtitles breach: The dangers of password reuse

• RRD Suffers Data Theft in a Conti Ransomware Attack

• Steer clear of gift card balance scams

• Government Proposes New Laws In Cyber Security Review

• Google Pays Out Over $100,000 for Vulnerabilities Patched With Chrome 97 Update

• Applications Open for Next NCSC for Startups Cohort

• New BHUNT Stealer targets cryptocurrency wallets

• Apple Music Is the World’s Second Most Popular Music Streaming Service Behind Spotify

• Red Cross Suffers Massive Cyberattack

• RRD Suffered a Data Theft in a Conti Ransomware Attack

• NortonLifeLock and Avast tie-up falls under UK competition regulator’s spotlight

• How to Run Windows on an M1 Mac – Intego Mac Podcast Episode 223

• A Guide to DevOps Security Checklist

• Eleven Arrested in Bust of Prolific Nigerian BEC Gang

• Twitter Mentions More Effective Than CVSS at Reducing Exploitability

• Red Cross Hack exposes data of 515,000

• New SolarWinds Serv-U vulnerability exploited in Log4j-related attacks

• Crypto Wallets and Passwords Targeted by BHUNT Malware

• An Armful of CHERIs

• You’re Running Untrusted Code!

• Multichain token hack losses reach $3 million: report

• Interpol Busted 11 Members of Nigerian BEC Cybercrime Gang

• MoonBounce: the dark side of UEFI firmware

• Kaspersky Launches New Service for Removing Malicious Domains

• Red Cross: Supply Chain Data Breach Hit 500K People

• Telegram Increasingly Abused For Selling Stolen Financial Details

• Apple Stops Signing iOS 15.2 Following iOS 15.2.1 Release, Downgrading No Longer Possible

• ‘Serial’ romance fraudster jailed for trying to scam 670 people in the UK

• Do you know what your supply chain is and if it is secure?

• Singapore police warns of ad scams targeting Google search users

• DoNot Hacking Team Targeting Government and Military Entities in South Asia

• Being “Threat-Led” is the answer. Your ISO certificate won’t save you from a breach!

• Red Cross forced to shutter family reunion service following cyberattack and data leak

• The evolution of security analytics

• Law enforcement is getting smarter on how to investigate crypto crime, says blockchain data firm

• McAfee and FireEye rename themselves ‘Trellix’

• When protecting and managing digital identities, orchestration and automation are critical

• VPNLab.net Service was Seized Because it was Used by Criminals to Spread Ransomware

• SolarWinds Serv-U bug exploited for Log4j attacks

• Endpoint malware and ransomware detections hit all-time high

• Singapore gives banks two-week deadline to fix SMS security

• Security Challenges in Low-Code / No-Code Platforms

• Cyber risks top worldwide business concerns in 2022

• Intel enters Crypto mining market and to fuel more ransomware attacks

• Ransomware Attack on Red Cross

• Fortune favours the breached: Crypto.com admits 400 users hit in hack

• New BHUNT Password Stealer Malware Targeting Cryptocurrency Wallets

• Software supply chain attacks jumped over 300% in 2021

• Microsoft: Hackers Exploiting New SolarWinds Serv-U Bug Related to Log4j Attacks

• Multicloud environment complexities putting digital transformation at risk

• AT&T teams with Cisco to create new managed SASE offering

• Endangered data in online transactions and how to safeguard company information

• Cryptocurrency market to reach $2.73 billion in 2025

• 6 Things Cyber Insurers Are Looking for in Cyberattack Claim Applications

• Tips for Defending Against Adversarial Actions Regardless of Their Origin

• ZeroFox Adversary Disruption service obstructs external cyberattacks at the source

• Action1’s free product initiative empowers organizations and MSPs to mitigate security risks

• Startpage Privacy Protection browser extension blocks third-party tracking cookies

• Hillstone Networks StoneOS 5.5R9 helps organizations stay ahead of known and unknown threats

• TAC Security ESOF VMDR offers vulnerability management coverage in a single platform

• GrammaTech CodeSentry 3.0 improves software supply chain security

• SOC Prime CCM App for Splunk now available for Splunk Cloud customers

• Elisity Micro Edge provides real-time visibility into all network assets

• Singapore must clamp down on security inertia before digital banking era can take off

• Biden threatens ‘cyber’ response after Ukraine says computers wiped during attack

• Security awareness training: An educational asset you can’t be without

• T-Mobile partners with CTIA to protect consumers from scammers and unwanted robocalls

• Nokia and Clavister deliver security solutions for Australian railway

• NICE partners with Magnet Forensics to improve digital evidence review processes

• SoftwareONE collaborates with AWS to accelerate global cloud adoption

• Microservice Security: How to Proactively Protect Apps

• ProtonMail to block tracking pixels, hide IP addresses

• Illinois Floats Bill That Would Let Developers Skirt Apple’s In-App Purchase Rules

• Verica raises $12 million to scale continuous verification platform

• 1Password raises $620 million to develop and scale human-centric security solutions

• Newgen Software acquires Number Theory to strengthen its platform with AI/ML capabilities

• SolarWinds acquires Monalytic to enhance mission-critical systems for federal customers

• Checkmarx joins IC3 to offer cyber security solutions to nations worldwide

• Exploit Code Released for Critical Windows HTTP Flaw

• Hacking attack on Red Cross exposes data of 515,000 vulnerable people

• Log4Shell Update: VMware Horizon Targeted

• Faker NPM package back on track after malicious coding incident

• 5 Myths About Interning in Cybersecurity

• Entrust completes Common Criteria evaluation of its Remote Qualified Signature Creation Device

• Rob Westervelt joins Windstream Enterprise as SVP of Channel Sales

• Neustar Security Services appoints Colin Doherty as CEO

• Air Force secretary talks acquisitions, JADC2

• Semperis extends its protection solutions to Australia and New Zealand

• Saving water with real-time data collection

• Sparce eviction data challenges Wyoming’s rental assistance programs

• Red Cross hit with cyberattack that compromised data of 515,000 ‘highly vulnerable people’

• FireEye & McAfee Enterprise Renamed as Trellix

• Why Americans Joined Europe in Not Paying Security Ransoms

• Russian government claims to have dismantled REvil ransomware gang

• First Steps to Alleviate Long-Term Consequences from A Cyberattack

• IT Security News Daily Summary 2022-01-19

• Report: U.S. is top target of phishing attacks worldwide

• Think twice before scanning that QR code, FBI warns

• Google announces Scorecard V4 in partnership with GitHub and OpenSSF

• New DDoS IRC Bot distributed through Korean webHard platforms

• Red Cross Falls Victim to Massive Cyberattack

• In the Internet Age, Copyright Law Does Far More Than Antitrust to Shape Competition

• VirusTotal hacking – Hackers can access trove of stolen credentials on VirusTotal

• Cybersecurity Trends: IBM’s Predictions for 2022

• 1Password raises $620 million in latest funding round

• Privacy Researchers Raise Concerns About Facebook Augmented Reality Glasses

• Zoho Releases Security Advisory for ManageEngine Desktop Central and Desktop Central MSP

• Need to prioritize security bug patches? Don’t forget to scan Twitter as well as use CVSS scores

• Destructive Wiper Targeting Ukraine Aimed at Eroding Trust, Experts Say

• What Happens to My Organization If APIs Are Compromised?

• Zoho Releases Security Advisory for ManageEngine Desktop Central and Desktop Central MSP

• UK NCSC shares guidance for organizations to secure their communications with customers

• BugCrowd reports increase in critical vulnerabilities found in 2021

• Microsoft Edge Adds Security Mode to Thwart Malware Attacks

• 1Password Raises $620M Series C, Now Valued at $6.8B

• Review: M1 Max MacBook Pro After Three Months

• AT&T and Verizon Now Rolling Out C-Band 5G Spectrum

• Are Judges Showing Their Political Colors in the Jan. 6 Criminal Cases?

• Sniff those Ukrainian emails a little more carefully, advises Uncle Sam in wake of Belarusian digital vandalism

• Deputy CIO Maria Roat to retire in March

• Biden signs cybersecurity memorandum for Defense Department, intelligence agencies

• FBI, US Agencies Look Beyond Indictments in Cybercrime Fight

• Guardio Review: Can This Browser Extension Really Protect You From Cybercrime?

• When Patching Security Flaws, Smarter Trumps Faster

• Instagram Testing Subscriptions That Let Users Pay for Content From Creators

• Gloucester City Council Confirms ‘Cyber Incident’

• Thousands of Industrial Firms Targeted in Attacks Leveraging Short-Lived Malware

• TIME TO HIT THE BOOKS! TRAINING COURSE IS AVAILABLE FOR CANDIDATES PREPARING FOR THE NEW (ISC)² ENTRY-LEVEL CYBERSECURITY CERTIFICATION PILOT EXAM

• Box 2FA Bypass Opens User Accounts to Attack

• Researchers Hack Olympic Games App

• Cloud Adoption Widens the Cybersecurity Skills Gap

• A Bug in iOS 15 Is Leaking User Browsing Activity in Real Time

• Apple Says Option to Stay on iOS 14 Was Always Meant to Be Temporary

• Vulnerabilities and censorship tools among hot new features in Beijing’s Olympics app

• Technical Analysis of the WhisperGate Malicious Bootloader

• DISA is working on unified plan to phase out Joint Regional Security Stacks

• Interpol and Nigerian police bust cybercrime BEC ring

• Deloitte launches new SaaS cyber threat detection and response platform

• U.S. Olympians Told to Use ‘Burner Phones’ in China

• Ukraine hit with destructive malware attacks amidst turmoil

• Fact-Checking, COVID-19 Misinformation, and the British Medical Journal

• Singapore pushed to introduce security measures amidst online banking scams

• IRS Will Soon Require Selfies for Online Access

• US Organizations Urged to Improve Cybersecurity

• Ransomware Attack on Moncler

• Europe’s Move Against Google Analytics Is Just the Beginning

• Gigabyte Broadband Pledge At Risk, Warns Spending Watchdog

• 5 ways AI and ML will improve cybersecurity in 2022

• Can AI-powered congestion pricing improve transportation equity?

• Cloud Security Firm Polar Security Emerges From Stealth With $8.5 Million Seed Funding

• (ISC)² Launches Entry-Level Cybersecurity Course

• LogPoint Releases LogPoint 7, Adding SOAR Capabilities Within SIEM

• Comment: Umbrella Firm Parasol Confirms ‘Malicious Activity’ As Root Cause Of Ongoing Systems Outage

• WEF Global Cybersecurity Outlook Reinforces 2 Very Specific Items, Experts Input

• Supply Chain Assaults Possible Due to Critical SAP Bug

• FBI – Malicious QR codes stealing login and financial data

• Pretty Good Privacy (PGP)

• Tips and guidelines for making software applications GDPR compliant

• Census 2020 gets its first challenges

• McAfee Enterprise and FireEye Relaunches as Trellix

• UK Proposes New Laws to Strengthen National Cyber-Resiliency

• Overcoming vulnerabilities with live kernel patching in Red Hat Enterprise Linux 8.5

• The People’s Liberation Army in the South China Sea: An Organizational Guide

• Details on VirusTotal Hacking

• 7 Cloud Security Predictions for 2022 to Help Organizations Protect Their Data

• US Extradition Case Of Dr Mike Lynch Delayed By A Week

• CISA warns of potential critical threats following attacks against Ukraine

• Cloned Dept. Of Labor Site Hawks Fake Government Contracts

• Zoom Vulnerabilities Impact Clients, MMR Servers

• Crypto.com Says Alleged $15 Million Hack Was Just An Incident

• Microsoft Patches The Patch That Broke VPN

• Safari Is Apparently Failing To Respect Same Origin Policy

• Browsers on iOS, iPadOS and Mac leak your browsing activity and personal identifiers

• New Apple Flaw Exposes Users’ Browser History and Google Account Details

• cyberterrorism

• NSA to get binding operational directive authority under new cyber policy

• Phishing attack spoofs US Department of Labor to steal account credentials

• Oracle’s First Security Updates for 2022 Include 497 Patches

• Deals: AirPods Pro With MagSafe on Sale for $189.99 This Week ($59 Off)

• New iPhone SE Likely to Launch in April Based on Production Timeframe

• Reducing Security Risks in Open Source Software at Scale: Scorecards Launches V4

• Mac users, update now! “Powerdir” flaw could allow attackers to spy on you

• UK To Address Marketing Of High Risk Crypto Investments

• Air Force commits millions for wearables to counteract troops’ exhaustion

• BlackBerry Researchers Dive Into Prometheus TDS Operations

• Preparing For the Next Cybersecurity Epidemic: Deepfakes

• Russian Hackers Heavily Using Malicious Traffic Direction System to Distribute Malware

• Campaign launched to delay social media end-to-end encryption

• Insider Threats: How to Combat Workplace Disinformation

• Microsoft releases fix for patch that broke VPNs, Hyper-V virtual machines and more

• This new ransomware comes with a small but dangerous payload

• How Do You Know What “Bad” Looks Like?

• Samsung Falling Behind Apple in AR/VR Space Due to ‘Obsession’ With Foldable Smartphones

• Canadian password manager 1Password valued at $6.8 billion in new funding round

• Ambient’s computer vision detects dangerous behaviors, but raises privacy concerns

• 1Password lands $620M to help businesses secure their workers

• Beijing Olympics App Flaws Allow Man-in-the-Middle Attacks

• XDR Firm Trellix Launches Following Merger of McAfee Enterprise and FireEye

• 1Password Raises Mammoth $620 Million Funding Round

• Orca Security to add API protection with 1st acquisition

• Congress losing a heavy hitter on cybersecurity

• What to expect in 2022?

• Tesla Driver Charged With Manslaughter After Autopilot Crash

• Polar Security unveils cloud data protection platform, $8.5M seed round

• Ukraine Attacks Involved Exploitation of Log4j, October CMS Vulnerabilities

• Box flaw allowed to bypass MFA and takeover accounts

• Cybercriminals Sell Stolen Financial Details on Telegram

• A New Ransomware Was Linked to FIN8 Hacking Group

• US mergers doubled in 2021 so FTC and DoJ seek new guidelines to stop illegal ones

• Hackers Again Attacked Ukrainian Sites

• Zero Trust Network Access Provider Banyan Security Raises $30 Million

• FIN8 Hackers Spotted Using New ‘White Rabbit’ Ransomware in Recent Attacks

• Malware vaccines can prevent pandemics, yet are rarely used

• Are Fake COVID Testing Sites Harvesting Data?

• What’s Notch to Like? Samsung Accidentally Leaks Its New Flagship Galaxy Tab

• What is an Online Form Builder and Why Do You Need It?

• What is Form Submission?

• Are you looking for the best WordPress Form Builder?

• Airport 5G Towers Switched Off In Temporary Aviation Compromise

• UniCC – the Largest Dark Web Vendor of Stolen Credit Cards Shut Down

• Beijing Winter Olympics App Insecure

• Europol Seizes Black Market VPN

• Phishers go after business email credentials by impersonating U.S. DOL

• Is There a Free Form Builder?

• FBI warning: Crooks are using fake QR codes to steal your passwords and money

• Zoom vulnerabilities impact clients, MMR servers

• Luxury Fashion Brand Moncler Suffers Data Breach Following a Ransomware Attack

• Cybercriminals’ friend VPNLab.net shut down by law enforcement

• Cloned Dept. of Labor Site Hawks Fake Government Contracts

• Mandatory Chinese Olympics App Has ‘Devastating’ Encryption Flaw: Analyst

• Man Charged with Smuggling Tech Exports to Iran

• Microsoft Discovers Destructive Malware Targeting Ukraine

• Know Your Enemy: How To Get Into The Mindset Of A Hacker To Protect Your Organisation From The Greatest Threat

• Data Privacy Day – Expert Commentary

• Luxury Brand Moncler Data Breach – Expert Comments

• XorDDoS, Mirai, and Mozi are Most Prominent Linux-targeted Malware

• Thousands of US Public Sector Ransomware Victims in 2021

• Apple’s US Education Store Now Requires Institution Verification to Buy Discounted Products

• Donot Team APT will strike gov’t, military targets for years – until they succeed

• Government to Regulate Crypto Advertising in New Crack Down

• Campaigns abusing corporate trusted infrastructure hunt for corporate credentials on ICS networks

• What Is Privileged Access Management (PAM)?

• In Q2 2022, NCSC Plans to Launch a New Assurance Scheme for IR and SimEx

• Apple Lowers Value of Android Smartphones for iPhone Trade-In

• Build your own Android security product

• DDoS IRC Bot Malware Spreading Through Korean WebHard Platforms

• Cultivating a security-first mindset for software developers

• Ukraine: Recent Cyber Attacks Part of Wider Plot to Sabotage Critical Infrastructure

• Is cloud the solution to optimized data privacy?

• Beijing Winter Olympics MY2022 mobile app filled with security vulnerabilities

• FireEye and McAfee Enterprise merger leads to Trellix

• Is White Rabbit ransomware linked to FIN8 financially motivated group?

• What are the barriers to moving legacy data to the cloud?

• Product showcase: Adaptive Shield SaaS Security Posture Management

• Critical Flaw With Zoho Desktop Central Let Attackers to Bypass Authentication

• McAfee Enterprise and FireEye are now called Trellix

• Supply chain disruptions rose in 2021

• McAfee Enterprise-FireEye relaunches as Trellix, aims to be ‘market leader’ in XDR

• Trends that will shape the security industry in 2022

• Open Subtitles – 6,783,158 breached accounts

• Manual and semi-automated testing for IDORs using Burp Suite

• Network security sandbox market to reach $43 billion by 2027

• Check Point Software introduces the world’s fastest firewall delivering 20 times better price performance to the world’s most demanding datacenters

• How to Fulfill Multiple Compliance Objectives Using the CIS Controls

• Designing a 100-Day Sprint for OT Cybersecurity: What to Consider

• Upstox – 111,002 breached accounts

• Apple Prepares Fix for Safari Bug Allowing Websites to Decipher Your Recent Browsing Activity

• SpyCloud Identity Risk Engine provides fraud risk assessments based on malware-stolen credentials

• Kovrr Quantum enables organizations to financially quantify their cyber risk exposure

• Juniper Networks unveils AI-driven SD-WAN solution to help IT teams identify network issues

• 2022: A New Strategy for the New Year

• Arqit partners with AUCloud to deploy sovereign quantum encryption service in Australia

• Teneo collaborates with Exium to help IT teams in their transition to a SASE

• Device Authority partners with Trusted Objects to provide a combined solution for IoT Edge devices

• SentryBay collaborates with TD SYNNEX to protect corporate applications and data on the endpoint

• DoNot Go! Do not respawn!

• Mophie Debuts $150 MagSafe-Compatible 3-in-1 Travel Charger

• Netrix acquires BTB Security to expand its managed security portfolio

• Gatenox launches decentralized identity wallet built on Aleph Zero platform

• Yugabyte partners with Intuita to support cloud-native database market growth

• Secure Logiq and Seagate join forces to offer storage solution for the video surveillance industry

• Meta and Twitter want a review of Australian government’s social media laws next year

• Cloud Identity Startup Permiso Launches With $10M Seed

• Ayanna Howard joins Motorola Solutions Board of Directors

• Permiso raises $10 million to scale its engineering team and expand customer footprint

• Tech Mahindra acquires Com Tec Co IT to enhance digital engineering capability

• Researchers Explore Hacking VirusTotal to Find Stolen Credentials

• Microsoft Details Recent Damaging Malware Attacks on Ukrainian Organizations

• Kevin O’Neill joins Napier as CRO

• Everbridge appoints Stefica Divkovic as SVP of EMEA

• A German Teen Took Control of Teslas by Hacking a Third-Party App

• Microsoft set to purchase Activision Blizzard in $68.7 billion deal

• Microsoft fixes Patch Tuesday bug that broke VPN in Windows 10 and 11

• Safari and iOS users: Your browsing activity is being leaked in real time

• Microsoft warns of destructive disk wiper targeting Ukraine

• IOC disputes Citizen Lab’s security concerns about Chinese Olympics app

• Will 2022 Be the Year of the Software Bill of Materials?

• IT Security News Daily Summary 2022-01-18

• HHS releases long-awaited electronic health info sharing framework

• VA seeks dashboard to coordinate $21B health record project

• Ransomware actors increasingly demand payment in Monero

• 4 software supply chain security best practices

• Take ‘Urgent’ Steps to Secure Systems From Damaging Attacks, CISA Says

• End Users Remain Organizations’ Biggest Security Risk

• Here are Anastasia Amoroso’s and Delano Saporu’s top picks

• Containerization and virtualization in a hybrid world

• Ransomware: 2,300+ local governments, schools, healthcare providers impacted in 2021

• Kaspersky Announces Takedown Service

• CISA Adds 13 Known Exploited Vulnerabilities to Catalog

• AlphV/BlackCat ransomware gang published data stolen from fashion giant Moncler

• HackRead & Verify announce strategic partnership to combat crypto scams and hacks

• DISA leans on training collaboration, academic partnerships to build future workforce

• Detroit tests cloud-enabled pavement monitoring

• UK Campaign Wants To Stop Facebook End-To-End Encryption

• CISA Adds 13 Known Exploited Vulnerabilities to Catalog

• Belkin Launches New MagSafe Charger With Kickstand

• Copyright Shouldn’t Stand in the Way of Your Right to Repair

• Crypto.com acknowledges ‘unauthorized activity’ on servers, maintains no funds have been lost

• Bug in Safari browser leaks personal identifiers and browsing activity

• 2,300+ local governments, schools, healthcare providers impacted by ransomware in 2021

• 3 Data Source Coverage Capabilities You Need from Your Database Security Solution

• How to Protect Your Social Media Accounts

• Las Vegas taps digital twin for sustainability

• The Log4j Vulnerability Puts Pressure on the Security World

• Europol Shuts Down Popular Cybercriminal VPN Service

• Kovrr Translates Cyber Risk into Business Impact with its Quantum Platform

• U.S. Bills Allowing Sideloading Would Cause Consumers to Be Hit With ‘Malware, Ransomware, and Scams,’ Says Apple

• Apple Updates AirPods 3 Firmware to Version 4C170

• Cybercriminals Actively Target VMware vSphere with Cryptominers

• 5 tools helping companies more effectively manage cybersecurity in 2022

• Cyber Insights 2022: Supply Chain

• Multi-Factor Authentication Bypass Led to Box Account Takeover

• Salesforce Recommends Duo to Meet New MFA Requirement

• Suse open sources NeuVector container security platform

• Financially motivated Earth Lusca threat actors targets organizations worldwide

• U.S. Airlines Warn of ‘Catastrophic’ Crisis With Impending 5G Rollout, AT&T and Verizon Agree to Delay Around Airports

• US Search for Vulnerabilities Drives 10x Increase in Bug Reports

• Microsoft To Acquire Activision Blizzard For $68.7 Billion

• Europol takes down VPN service VPNLab used by ransomware operators

• External Threats Now Greatest Cyber Security Concern for Public Sector

• Police seize VPN host allegedly facilitating ransomware

• ReliaQuest Opens Office in India

• Why we don’t patch, with Jess Dodson: Lock and Code S03E02

• McAfee Wins Product of the Year for Best Online Protection

• Italian Denies Literary Wire Fraud

• VirusTotal Hacking: Finding stolen credentials hosted on VirusTotal

• ‘White Rabbit’ Ransomware May Be FIN8 Tool

• How to implement network segmentation for better security

• Serious Security: Apple Safari leaks private data via database API – what you need to know

• Less Than a Fifth of Cyber Leaders Feel Confident Their Organization is Cyber-Resilient

• New Data Center Coming to Georgia

• ‘Zero-Click’ Zoom Vulnerabilities Could Have Exposed Calls

• Aerial 3 Screen Saver for Mac Gains Redesigned UI, New Video Overlay and Storage Options, and More

• Your Digital Footprint Explained — and Why It Matters

• AI is the key to fixing identity security, ForgeRock CEO says

• International police shut down 15 server infrastructures as part of VPNLab.net’s takedown

• VirusTotal Hacking Offers a Supercharged Version of Google Hacking

• Cloud Detection and Response Firm Permiso Emerges From Stealth With $10M in Funding

• Name That Toon: Nowhere to Hide

• IT Security Execs XDR Survey: ROI Proof Points

• Law enforcement shutdown the VPN service VPNLab used by many cybercriminal gangs

• 10 Nations Coordinate Shutdown Of Ransomware VPN Service

• Organizations Face A Losing Battle Against Vulnerabilities

• Critical ManageEngine Desktop Server Bug Opens Orgs To Malware

• Microsoft Warns Of Destructive Disk Wiper Targeting Ukraine

• Apple Suppliers Struggling to Meet Environmental Goals

• Deals: M1 iMac Drops to Lowest-Ever Price of $1,399 on Amazon ($100 Off)

• China hosts most of the DDoS attacks says report

• Amazon Sued For Worker Death In Deadly Tornado Strike

• Critical ManageEngine Desktop Server Bug Opens Orgs to Malware

• Home for the Holidays? The Global Implications of a State-Level Cyberattack

• Vulnerability in NetUSB Could Impact Millions of Routers

• Twitter Expands Misleading Tweet Feature

• DHL takes top spot as most imitated brand in phishing attacks

• Israel Lawmakers Outraged Over Claim Police Used NSO Spyware

• Joint Law Enforcement Action Takes Down VPN Service

• Deals: Apple’s M1 MacBook Air Gets $100 Discount on Amazon

• Accidental exposure of sensitive data has been surging, Bugcrowd finds

• Is performance measurement a fad that has now come and gone?

• Zoho Patches Critical Vulnerability in Endpoint Management Solutions

• 5 Reasons Why M&A Is the Engine Driving Cybersecurity

• How to Avoid Putting Data At Risk During the Great Resignation

• Researchers Bypass SMS-based Multi-Factor Authentication Protecting Box Accounts

• Belarusian Intelligence Behind Ukrainian Government Website Cyber Attacks

• FCC Data Breach Reporting Rules For Telecom Carriers – Expert Comments

• Nintendo warns of imitation websites and suspicious hardware

• More contractor pain: Parasol’s sister firms, SJD Accountancy and Nixon Williams, confirm cyberattack

• US Airline Bosses Warn Of ‘Catastrophic’ Aviation Crisis Due To 5G

• 3 Cloud Security Trends to Watch in 2022

• Organizations Face a ‘Losing Battle’ Against Vulnerabilities

• VPNLab Goes Down After Servers Seized in Law Enforcement Operation

• Five Key Signals From Russia’s REvil Ransomware Bust

• The 2022 Threat Intelligence Outlook

• 2021 Adversary Infrastructure Report

• iPhone Was the Most Popular Smartphone in Q4 2021

• New Apple Products Revealed in Regulatory Database, Likely Including New iPhone SE and iPad Air

• Microsoft to Acquire Game Studio Activision Blizzard for $68.7 Billion

• Accellion Reaches $8.1 Million Settlement Over FTA Data Breach

• Don’t Use Public Wi-Fi Without DNS Filtering

• Europol Shuts Down VPNLab, Cybercriminals’ Favourite VPN Service

• Microsoft Releases Office for Mac Update With Full Apple Silicon Support in Excel

• Ericsson Sues Apple Again Over 5G Patent Licensing Infringements

• Singapore monetary authority threatens action on bank over widespread phishing scam

• Banyan Security lands $30M to take enterprises on ‘journey’ to zero trust

• Continuous verification company Verica raises $12M to make systems more resilient

• ICS Vendors Targeted in Espionage Campaign Focusing on Renewable Energy

• Permiso gets $10M for identity-based public cloud security

• UK government announces crackdown on cryptocurrency adverts

• Microsoft: This new browser feature is ‘huge step forward’ against zero-day threats

• Brazilian Ministry of Health recovers systems over a month after cyberattack

• UK Government to Launch PR Campaign Undermining End-to-End Encryption

• Microsoft Releases Office for Mac Update With Excel Support for Apple Silicon

• Stolen Credit Cards Biggest Dark Web Marketplace Closes Down

• No Excuses: Get Your (ISC)2 Certification Done in 2022

• Government Backs Ad Campaign Against End-To-End Encryption

• Best antivirus software 2022: Protect your devices

• This VPN service used by cyber criminals to deliver ransomware has just been taken down by police

• How to Attract Hard-to-Find Cybersecurity Talent

• Spoof Nintendo sites advertising discounted Switch consoles

• Renewable Energy and Industrial Technology Firms Targeted in Extensive Cyber Espionage Operation

• Infamous dark net carding site UniCC to close

• Microsoft patches the patch that broke VPNs, Hyper-V, and left servers in boot loops

• Why global DDoS protection is essential for Anycast networks

• SysJoker, a New Backdoor for Windows, macOS, and Linux has been Discovered

• Kiteworks Leased Email Encryption Totemo

• World Economic Forum Highlights Continued Gap Between Security and Business Leaders

• Foxconn Offers Big Bonuses to Recruit Workers Ahead of Lunar New Year Holiday

• DHL most imitated brand in phishing scams

• Phishers’ favorite brands in Q4 2021

• Check Point CloudGuard further enhances Azure security with Azure PaaS protections

• Managers think their systems are unbreakable. Cybersecurity teams aren’t so sure

• Microsoft releases Windows out-of-band emergency fixes for Win Server, VPN issues

• New Ransomware Spotted: White Rabbit and Its Evasion Tactics

• Amazon Last Minute Extension For Visa Card Payments

• European Regulators Hand Out €1.1bn in GDPR Fines

• NCA: Kids as Young as Nine Have Launched DDoS Attacks

• Microsoft Issues Out-of-Band Update for Patch Tuesday Problems

• SERVICE UPDATE | Spamhaus DNSBL users who query via Cloudflare DNS need to make changes to email set-up

• NATO, Ukraine Sign Deal to ‘Deepen’ Cyber Cooperation

• DHL Becomes the Most Imitated Brand in Phishing Attacks

• Looking for adding new detection technologies in your security products?

• Earth Lusca Hackers Aimed at High-Value Targets in Government and Private Sectors

• NSW will not use iVote again for elections until ‘extensive reconfiguration’ is made

• REvil hacker group activity stopped in Russia

• SFile (Escal) Ransomware Modified for Linux Attacks

• AI and ML implementation in cybersecurity programs pushes for a change in people’s mindset

• How Buy Now, Pay Later is being targeted by fraudsters

• Microsoft warns of dreaded data wiping malware campaign

• Accellion agrees to pay $8 million to December 2020 data breach victims

• OAIC wants stronger accountability measures in upcoming revised Privacy Act

• A small number of Crypto.com users reported suspicious activity on their wallet

• PCI SSC updates card security standards to secure the card production process

• Zoho Releases Patch for Critical Flaw Affecting ManageEngine Desktop Central

• Governments struggle to deliver secure online citizen services

• New Destructive Malware Targeting Government Agencies & Organizations

• The security of devices held by public sector employees

• Pondurance Broadens Executive Team, Names Mike Melka Chief Financial Officer and Amy Thaler VP of People Operations

• The Supply Chain Needs Better Cybersecurity and Risk Management

• Additional Healthcare Firms Disclose Impact From Netgain Ransomware Attack

• Zero-trust security market to reach $64.4B by 2027

• Ondato Customer Lifecycle Monitoring prevents accidental non-compliance over the customer lifecycle

• From 6G to big data, China is looking to boost tech’s share of its economy

• TD SYNNEX collaborates with AWS to help businesses expand their customer base

• WorkJam partners with VMware to embrace BYO and COPE device initiatives

• Crypto.com pauses withdrawals and resets 2FA following suspicious activity

• Social media in the workplace: Cybersecurity dos and don’ts for employees

• Trulioo hires Michael Ramsbacker as CPO

• Toshiba appoints Andrew McDaniel as Managing Director and SVP of Europe

• How to Protect All Five Stages of the IoT Security Lifecycle

• IT Security News Daily Summary 2022-01-17

• Oracle Critical Patch Update for January 2022 will fix 483 new flaws

• Crypto.com confirms suspicious activity after users report stolen funds

• Device42 aims to identify Log4j vulnerabilities

• Zoho fixes a critical vulnerability (CVE-2021-44757) in Desktop Central solutions

• Singapore cautions against marketing of cryptocurrency services to public

• Registry Analysis – The “Why”

• Pro tips for backing up large datasets

• Vulnerability Summary for the Week of January 10, 2022

• Is Your Security Stack and Legacy Tech Keeping Pace With Your Business?

• Pulling Back the Curtain: About LinuxSecurity.com>

• EHR Vendor Faces Legal Action Over Data Breach

• Vulnerability Summary for the Week of January 10, 2022

• Bug in WebKit’s IndexedDB implementation makes Safari 15 leak Google account info… and more

• Nova Scotia Seeks to Improve Cyber-Bullying Law

• Dutch Regulators to Meet With Dating App Providers to Assess Apple’s Plan for Alternate In-App Payment Options

• Accellion Reaches $8.1m Data Breach Settlement

• Researcher Discloses Unpatched Vulnerabilities In NUUO NVRmini2 Devices

• What It Takes to Build the Blue Team of Tomorrow

• LG Preparing to Supply OLED Panels for iPad by 2024

• It’s Copyright Week 2022: Ten Years Later, How Has SOPA/PIPA Shaped Online Copyright Enforcement?

• Welcome to the Public Domain, Winnie-the-Pooh

• Critical Bug Spotted in LoRaWAN Stack

• Multilingual Cybersecurity Awareness Training adapted for your needs

• 8 Website Security Tips You Don’t Want to Miss

• Vulnerability in IDEMIA Biometric Readers Allows Hackers to Unlock Doors

• Linux Malware Is On The Rise. Here Are Three Top Threats Right Now

• Tonga Comms May Be Down For Two Weeks Due To Tsunami

• North Korean Hackers Stole Nearly $400 Million In Crypto Last Year

• Panic As Kosovo Pulls The Plug On Its Energy Guzzling Bitcoin Miners

• Ukraine blames Belarus for PC-wiping ‘ransomware’ that has no recovery method and nukes target boxen

• North Korea steals $400m cryptocurrency through Cyber Attacks

• REvil ransomware gang busted by Russian Federal Security Service

• Oracle to Release Nearly 500 New Security Patches

• iPhone SE With Larger 5.7-Inch Display Rumored to Launch as Early as 2023

• Developer Showcases Apple CarPlay Workaround for Teslas

• Microsoft: ‘Destructive malware’ fakes ransomware to target Ukrainian orgs

• New startup shows how emotion-detecting AI is intrinsically problematic

• Mastering the Art of Cloud Tagging Using Data Science

• Due to Security Reasons, Chrome will Limit Access to Private Networks

• U.S. Warns Against Russian Cyber Threats Amid Heightened Ukraine Tension

• NoReboot iOS Attack Prevents Your iPhone From Turning Off Or Reboot

• Microsoft January Patch Tuesday Addresses 96 Vulnerabilities

• Apple macOS Security Bypass Bug Could Allow Access To Private Data

• SysJoker Backdoor Arrives As A Potent Multi-Platform Espionage Threat

• The State of Credential Stuffing Attacks

• Safari 15 Vulnerability Allows Cross-Site Tracking of Users

• Romance scammer who targeted 670 women gets 28 months in jail

• NYC school platform outage complicating COVID-19 tracing efforts

• Linux malware is on the rise. Here are three top threats right now

• Chrome Limits Websites’ Direct Access to Private Networks for Security Reasons

• Unprotected Access to Windows’ Centre: Signed Kernel Drivers

• Protect Your Firm’s Resources With Continuous Security Validation

• Umbrella company Parasol Group confirms cyber attack as ‘root cause’ of prolonged network outage

• Critical SAP Vulnerability Allows Supply Chain Attacks

• High-Severity flaw in 3 WordPress plugins impacts 84,000 websites

• Earth Lusca Employs Sophisticated Infrastructure, Varied Tools and Techniques

• Critical Cisco Contact Center Bug Let Hackers Access Telephone Queues

• Cybersecurity M&A Roundup for January 1-16, 2022

• Qlocker Ransomware Is Apparently Back in Business

• 2G’s security weaknesses are still a problem, even for modern phones

• UK Government Readies Anti-Encryption Publicity Campaign to ‘Keep Children Safe’ Online

• Ukraine: Wiper malware masquerading as ransomware hits government organizations

• Artificial Intelligence at home – is it safe?

• Personal Information Compromised in Goodwill Website Hack

• Millions of UK Wi-Fi routers are vulnerable to security threats

• Alleged REvil hackers charged in court

• FSB Arrested 8 Individuals Believed to Be Part Of the REvil Ransomware Group

• Ukraine Targeted in False Ransomware Attacks, Microsoft Warns

• A week in security (January 10 – 16)

• US Auto Regulator Discusses ‘Safety Concerns’ With Tesla

• Uber Competitor Bolt Raises Prices 10 Percent In London

• DHL, Microsoft, WhatsApp top phishing list of most imitated brands

• Romance Fraudster who Targeted more than 650 Victims has been Convicted for Two Years

• Microsoft Successfully Defended The Azure Cloud From A Massive DDOS Attack. (Spoiler: You Can, Too.)

• UK’s largest supermarket uses Facial Recognition causing security and privacy concerns

• REvil Ransomware gang members arrested by Russia

• Beware Of New RDP Exploit | Avast

• DHL Replaces Microsoft as Most Imitated Brand in Phishing Attempts in Q4 2021

• Google, Facebook Chiefs Signed Off On Secret Deal, Lawsuit Says

• Cryptocurrency Funds Show Gains In Spite Of Selloff

• Former Inspector General Pleads Guilty to Software Theft

• Experts warn of attacks using a new Linux variant of SFile ransomware

• Apple Commemorates Dr. Martin Luther King, Jr. With Full-Page Website Tribute

• Microsoft Warns of Destructive Malware Campaign Targeting Ukraine

• Two Years for Romance Fraudster Who Targeted 670 Women

• Stolen TikTok Videos have Infiltrated YouTube Shorts

• Russia’s FSB Arrests REvil Ransomware Gang Members

• Major Stolen Card Marketplace Shuts Down After Making Millions

• North Korean Hackers ‘Stole $400m’ In 2021

• January 2022 Web Server Survey

• Trying to register your antivirus in Windows Security Center?

• Dark Web’s Largest Marketplace for Stolen Credit Cards is Shutting Down

• Kyiv blames Belarus-linked APT UNC1151 for recent cyberattack

• Russia Arrests Hackers Behind REvil Ransomware & Shutdown Operations

• IR and SimEx: Can and should they be standardized?

• AI to bring massive benefits, but also cause great concern

• SecOps teams are understaffed and overworked

• High-Severity Vulnerability in 3 WordPress Plugins Affected 84,000 Websites

• Why is intergenerational collaboration critical in advancing zero trust security progress?

• Many users don’t know how to protect their broadband Wi-Fi routers

• Ukrainian Government Officially Accuses Russia of Recent Cyberattacks

• The CISO’s guide to evaluating third-party security platforms

• Mobile device management market to reach $20.4 billion by 2026

• IT leadership appointments: Dialpad, Elastic, Everbridge, F5 Networks, and Netrix

• Georgia goes after crypto miners

• Mirantis Secure Registry 3.0 helps enterprises secure their software supply chain

• 10 Rules for Better Cloud Security

• 3 ways to improve your website security

• Safari Bug Allows Websites to Track Your Recent Browsing Activity in Real Time

• Microsoft says ‘destructive malware’ being used against Ukrainian organizations

• For security alone, we could try paying open source projects properly

• IT Security News Weekly Summary – Week 02

• IT Security News Daily Summary 2022-01-16

• Microsoft Uncovers Destructive Malware Used in Ukraine Cyberattacks

• A Cybersecurity Conversation with Vince Moore – Senior Network Engineer at OPSWAT

• European Union simulated a cyber attack on a fictitious Finnish power company

• Gurman: Apple Considered a Battery-Powered ‘HomePod’ Years Ago

• Russian Court Remands Hackers in Custody

• ProMotion Now Expected to Remain Exclusive to iPhone 14 Pro Models, Not Expand to Entire Lineup

• Why Did Russia Escalate Its Gray Zone Conflict in Ukraine?

• New Mexico Jail went on Lockdown due to Cyberattack

• Ukraine Government Websites Targeted in a Suspected Russian Cyber Attack

• 2021 (ISC)² Leadership Webinars On-Demand

• SnatchCrypto attack hits DeFi and Blockchain Platforms with backdoor

• Apple Requiring Employees to Submit Proof of COVID-19 Booster Shot or Face Frequent Testing

• Microsoft Warns of Destructive Malware Targeting Ukrainian Organizations

• Defense Contractor Hensoldt Confirms Lorenz Ransomware Attack

• Destructive Hacks Against Ukraine Echo Its Last Cyberwar

• Microsoft Warns of Destructive Malware Targeting Ukrainian Organizations

• Microsoft spotted a destructive malware campaign targeting Ukraine

• Ukraine Says Has ‘Evidence’ Russia Behind Cyberattack

• How Apple’s iCloud Private Relay Can Keep You Safe

• A new wave of Qlocker ransomware attacks targets QNAP NAS devices

• New Unpatched Apple Safari Browser Bug Allows Cross-Site User Tracking

• North Korea pulled in $400m in cryptocurrency heists last year – report

• Security Affairs newsletter Round 349

• Because of a Flaw in Microsoft Defender, Threat Actors can Evade Detection

• A New Destructive Malware Targeting Ukrainian Government and Business Entities

• Threat actors stole $18.7M from the Lympo NTF platform

• Week in review: 2022 cloud security trends, Microsoft fixes wormable RCE

• Penetration testing

• Is fighting cybercrime a losing battle for today’s CISO?

• New iPad Air Rumored to Launch This Spring With A15 Chip, 5G, Center Stage Camera, and More

Generated on 2022-01-23 23:59:21.553144