IT Security News Weekly Summary – Week 04

• IT Security News Daily Summary 2021-01-31

• Exabeam joins cybersecurity ecosystem revolving around Snowflake

• Robert M. Lee’s & Jeff Haas’ Little Bobby Comics – ‘WEEK 314’

• BSidesSF 2020 – Ari Eitan’s ‘Mapping The Connections Inside Russia’s APT Ecosystem’

• Microsoft patent reveals chatbot to talk to dead people

• See No Evil, Hear No Evil, Police No Evil

• BSidesSF 2020 – Byron Roosa’s ‘A Look At Jython-Enhanced Reverse Engineering With Ghidra’

• 5 Reasons to Implement Certificates

• Experts explain how to bypass recent improvement of China’s Great Firewall

• Leverage the Tools and Telemetry You Trust

• 5 Ransomware Trends in 2021 All Businesses Need to Prep For

• The Most Common Types of Malware in 2021

• Apple Silently Enhanced iMessage Security With BlastDoor Sandbox in iOS 14

• ‘Android Worm’ Malware is Spreading Via WhatsApp User Contact List

• Practical Ways Older Adults Can Manage Their Security Online

• OT Cybersecurity Firm Mission Secure Raises $5.6 Million in Series B Funding

• New Data Proves Reagan Scuttled Iran Embassy Hostage Release — Harmed America to Win Election

• Security Affairs newsletter Round 299

• New Pro-Ocean crypto-miner targets Apache ActiveMQ, Oracle WebLogic, and Redis installs

• Google Researcher Groß Identifies the BlastDoor Device in Apple iOS 14

• YARA v4.0.4, (Sun, Jan 31st)

• Wireshark 3.4.3 Released, (Sun, Jan 31st)

• Week in review: Sudo vulnerability, Emotet takedown, execs targeted with Office 365 phishing

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Penetration testing

• Perl.com, the Official Site for Perl Programming Language Hijacked

• GnuPG crypto library can be pwned during decryption – patch now!

• Bonobos – 2,811,929 breached accounts

• Popular Shopify app exposes private data of thousands of shoppers

• BSidesSF 2020 – Jayson Grace’s ‘MOSE: Using Configuration Management For Evil’

• IT Security News Daily Summary 2021-01-30

• UScellular data breach: attackers ported customer phone numbers

• Apple Pays $25+ Million for Worldwide Rights to Upcoming Film ‘CODA’

• Windows finger command abused to download MineBridge backdoor

• BSidesSF 2020 – Vanessa Sauter’s ‘The Voight-Kampff Test For Discovering Vulnerabilities’

• XKCD ‘Metacarcinization’

• UK Research and Innovation (UKRI) discloses ransomware attack

• The Privacy Feud Between Facebook And Apple Is Heating Up

• The Justice Department is Prosecuting an American for Election Interference—in 2016

• Trickbot- A Banking Trojan Returns With Latest Phishing Campaigns and Attacks

• Sberbank is the most targeted organization in Europe by hackers, says Herman Gref

• Update Your iPhone and iPad Now If You Haven’t Recently

• The Best VPNs to Protect Yourself Online

• Victims of FonixCrypter ransomware could decrypt their files for free

• PacketSifter as Network Parsing and Telemetry Tool, (Sat, Jan 30th)

• Top Stories: iOS 14.4, Record Apple Earnings, Apple Watch Series 7 Rumors

• Ghost Accounts used by Nefilim Ransomware Actors

• Apple Fixes One of the iPhone’s Most Pressing Security Risks

• Parler Whack-a-Mole

• Apple Extends Monthly Credit Deposits to Apple TV+ Subscribers Through June

• Rocke Group’s Pro Ocean Crypto-jacking Malware now Comes with Worm Feature

• Avast Hacker Archives Episode 2 – Katie Moussouris | Avast

• ‘Build’ or ‘Buy’ your own antivirus product

• Open Source Software Vulnerabilities Leads to RCE

• Ransomware: The rise of Misfortune 500 businesses

• Week in security with Tony Anscombe

• What You Should Know About Mobile Or Web App Security and How To Achieve It

• Wireshark 3.2.11 is now available which contains Bug Fixes – https://www.wireshark.org, (Sat, Jan 30th)

• Asset Management, The Weakest Link in Cybersecurity Risk

• The Rising Tide of Security Threats in The Industrial Internet of Things

• FonixCrypter ransomware gang releases master decryption key

• Reverse Engineering and Information Security

• Google QUIC-ly left privacy behind in its quest for a speedier internet, boffins find

• 5 cases when ethical hackers saved companies from devastating hacks

• BSidesSF 2020 – Sarah Young’s ‘Hanging On The Telephone: Hacking VoIP’

• Use ItsMyData to stop ecommerce sites from abusing your valuable data

• Domain for programming website Perl.com hijacked

• IT Security News Daily Summary 2021-01-29

• Powering today’s soldier: Wearable batteries will be stronger, yet safer for combat

• Army seeks smarter exoskeletons for soldiers

• IRS deploys bots to streamline procurement processes

• Microsoft 365 Becomes Haven for BEC Innovation

• WordPress Pop-Up Builder Plugin Flaw Plagues 200K Sites

• Cloud Security Startup Armo Emerges from Stealth with $4.5M

• What Do the Facebook Oversight Board’s First Decisions Actually Say?

• The National Security Imperative to Tackle Illegal Fishing

• 4 Cloud Data Security Features to Reassure Nervous SMBs

• The Importance of Mobile Technology in State Electronic Visit Verification (EVV) Programs

• DOD signals it could move on from JEDI if court battles drag out

• Espionage attempts like the SolarWinds hack are inevitable, so it’s safer to focus on defense – not retaliation

• See the unseen: Using RF detection for health, safety, and security

• Google deploys Chrome mitigations against new NAT Slipstreaming attack

• Why endpoint security is important and how it works

• Miss England Held to Ransom by Cyber-attackers

• Cyber-Cop Charged with Forgery and Bigamy

• Ransomware Payoffs Surge by 311% to Nearly $350 Million

• FBI Encounters: Reporting an Insider Security Incident to the Feds

• Threat Roundup for January 22 to January 29

• Severe bug in Libgcrypt – used by GPG and others – is a whole heap of trouble, prompts patch scramble

• TrickBot returns with campaign against legal and insurance firms

• Distributed denial of service (DDoS) attacks: A cheat sheet

• The Taxman Cometh for ID Theft Victims

• Texas Tech Company Scoops Fourth Equality Title

• MacRumors Giveaway: Win an ‘iBoy’ Retro iPod Toy From Classicbot

• The Old Media and the New Must Work Together to Preserve Free Speech Values

• Cleaning up after Emotet: the law enforcement file

• Security Researchers Likely Targeted With Multiple Attack Methods

• Volatile Cedar Compromising Telcos and Internet Service Providers

• Trickbot Returns With Fresh Phishing

• BlastDoor: iOS 14’s Shield Over Zero-Click Attacks

• Experts addressed flaws in Popup Builder WordPress plugin

• Including Hackers in NATO Wargames

• Apple’s iPhone 13 Could Feature Optical In-Display Fingerprint Sensor

• Data Protection Day 2021, the view from the frontline

• Data Driven Security Hardening in Android

• Arizona High Court Misses Opportunity to Uphold Internet Users’ Online Privacy

• Will a VPN Protect Me From a Data Breach?

• Hezbollah linked hackers hit companies in global malware attack

• Industrial Gear at Risk from Fuji Code-Execution Bugs

• Azure Information Protection P1 vs. P2: What’s the difference?

• Detecting and Exploiting XXEs: AppSec Simplified

• Xiaomi Announces ‘Mi Air Charge’ Remote Wireless Charging Technology

• Anne Hathaway and Jared Leto to Star in Upcoming Apple TV+ WeWork Series ‘WeCrashed’

• Replacement AirPods Max Ear Cushions Now Arriving to Customers

• Can a Former President Assert Executive Privilege in an Impeachment Trial?

• RDP abused for DDoS attacks

• European Commission redacts AstraZeneca vaccine contract – but forgets to wipe the bookmarks tab

• UK Regulator To Probe Uber Purchase Of Autocab

• A network of Twitter bots has attacked the Belgian government’s Huawei 5G ban

• Apple iOS 14 Thwarts iMessage Attacks With BlastDoor System

• 5 data categories to learn for faster cybersecurity responses

• Vishing: FBI says beware of voice phishing at large organizations

• Is your boss spying on you? It’s possible, and privacy laws aren’t there yet

• CISA warns of attacks on cloud-based services

• SolarWinds attack: Cybersecurity experts share lessons learned and how to protect your business

• Tanium Announces $150 Million Funding Investment From Ontario Teachers’

• Unemployment Fraud – Preying on Those Most in Need

• UScellular Breach Allowed Hackers to Port Customer Phone Numbers

• More Than a Dozen Apps With ‘Misleading or Flat-Out Inaccurate’ Privacy Labels Found on App Store

• Deals: Get $50 Off iPad Air, $30 Off 10.2-Inch iPad, and Up to $100 Off iPad Pro in New Sales

• Data Privacy concerns erupt with Robotic Vacuums

• Build your hybrid cloud in just 5 minutes

• Track-and-Trace Personal Data Stolen In The Netherlands

• Deploying The New VMware Carbon Black Container Security Solution

• Identifying data terms can improve cybersecurity efficiency

• How the SolarWinds vulnerability affects networking

• A Fifth of Sunburst Backdoor Victims from Manufacturing Industry

• New iMessage Security Features

• New Exploit Development Course: EXP-301

• Data Integrity: What it Means and Why Any Organization Should Maintain It

• When cryptographers looked at iOS and Android security, they weren’t happy

• Vulnerability found in top messaging apps let hackers eavesdrop

• A Senior’s Guide to Navigating Tech Issues in 2021

• Ethical hacking, the best prevention against cyber attacks

• Trickbot is back again – with fresh phishing and malware attacks

• Deep Analysis of More than 60,000 Breach Reports Over Three Years

• Elusive Lebanese Threat Actor Compromised Hundreds of Servers

• The mystery of the missing Perl website

• Windows 7 Remain Vulnerable to Blind TCP/IP Hijacking Attacks

• Is the Web Supply Chain Next in Line for State-Sponsored Attacks?

• Google uncovers new iOS security feature Apple quietly added after zero-day attacks

• Emotet infrastructure disrupted after coordinated action

• Emotet is disrupted, but the malware it installed lives on

• 2021 KuppingerCole Leadership Compass names Imperva an overall leader for Database and Big Data Security

• Microsoft: North Korea-linked Zinc APT targets security experts

• Triage Attacks More Efficiently With AI for Cybersecurity

• Lazarus Affiliate ‘ZINC’ Blamed for Campaign Against Security Researcher

• Attacks on Individuals Fall as Cybercrime Shifts Tactics

• The mystery of the missing Perl webite

• #DataPrivacyDay: Organizations Must Increase Focus on Data Privacy in 2021

• Trickbot—New Year | Old Lure

• Apple Comes Out Swinging Against Facebook Over Data Privacy

• Google Bans Another Misbehaving CA From Chrome

• Bitcoin Soars 14% After Elon Musk Namecheck On Twitter

• Rocke Group’s Malware Now Has Worm Capabilities

• Original Film ‘Palmer’ Out Now on Apple TV+, Starring Justin Timberlake

• “Severe” Vulnerability found in Libgcrypt

• ‘Cyber Threats and Trends: Pandemic Style’

• USCellular suffers data breach

• Catching and dealing with naughty devices on my home network – V2

• Space Cybersecurity: How Lessons Learned on Earth Apply in Orbit

• Telegram now lets you bring across chat history from WhatsApp

• Encrypted Services Providers Concerned About EU Proposal for Encryption Backdoors

• 66% of Workers Risk Breaching GDPR by Printing Work-Related Docs at Home

• FTC Warns US Citizens of ‘Instant Cash Payments’ Scammers Impersonating the Agency

• 2020 Marked a Renaissance in DDoS Attacks

• This Encrypted Gun Registry Might Bridge a Partisan Divide

• Lawmakers Take Aim at Insidious Digital ‘Dark Patterns’

• New CISOs Survey Reveals How Small Cybersecurity Teams Can Confront 2021

• Signal Private Messenger Gains Chat Wallpapers, Animated Stickers, ‘About’ Profile Section, and More

• Stranded Australians’ Data “unintentionally” Shared

• Facebook Oversight Board Overrules Zuckerberg In Four Cases

• SolarWinds attack is not an outlier, but a moment of reckoning for security industry, says Microsoft exec

• Apprenticeships Could Solve Cyber-Skills Crisis, Say Experts

• Node.js Detected with Vulnerability encountered by Captain Freak

• Musings on Data Privacy Day

• Emotet taken down in major international operation, but is the malware gone for good?

• New US CISO appointments, January 2021

• How decision-making psychology can improve incident response

• Rethinking Endpoint Security

• FCW Insider: Jan. 29

• Delivery Biz Exposes 400 Million Records in Privacy Snafu

• USCellular Notifies Customers of Data Breach after Employees Unknowingly Download Malware

• Hezbollah Hacker Group Targeted Telecoms, Hosting, ISPs Worldwide

• Removing Terrorists Who Infiltrated US Police and Military

• Hyundai Executives Said to Be ‘Divided’ Over Prospect of Apple Car Partnership

• “Serious” vulnerability found in Libgcrypt, GnuPG’s cryptographic library

• Everything You Need to Know About Defense in Depth Layers

• Android releases patch for two critical vulnerabilities

• Ransomware attack on Palfinger Hydraulics

• Electronic health records provider Athena to pay $18m settlement in kickback lawsuit

• US Breach Volumes Fell 19% in 2020 as Ransomware Surges

• LogoKit Can Manipulate Phishing Pages in Real Time

• Apple Shares ‘Shot on iPhone’ Short Film By Lulu Wang for Chinese New Year

• Security Expert Re: Study Cites Biggest Security Threats To WordPress Sites

• Expert Insight: Dark Web Criminals Selling Stolen Tesco Customers’ Account Details

• Experts Insight On New Cybercrime Tool Can Build Phishing Pages In Real-Time

• Apple’s Mac mini: The Long Story of a Small Computer

• Twitter Launches Birdwatch to Address Misinformation | Avast

• Securing IoT with PKI

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• Check to See if EMOTET Botnet Has Your Email Password

• U.S. the 4th Worst Privacy Offender for Government Collection of Biometric Data

• Organised crime groups fuel a rise in violent crime in the EU

• Weekly Update 228

• Sensitive Data Shared with Cloud Services, (Fri, Jan 29th)

• Google bans another misbehaving CA from Chrome

• Is it Time for Some Threat Hunting?

• Building a Culture of Inclusion: Employee Network Groups Offer Support and Amplify Voices

• Extortion demands grow as cybercriminals target new online industries

• Scams, terror, and national security: Problems with Chinese microloan apps in India

• Data Privacy Day: Top tips for safe remote learning

• Emotet botnet disrupted in global operation

• Emotet Ransomware Surge Alarms Experts

• SOC challenges within the current cyber skilling climate

• Privacy and security practices are essential for post-pandemic recovery

• Many WordPress Sites Affected by Vulnerabilities in ‘Popup Builder’ Plugin

• TPG Capital Acquires Majority Stake in PAM Solutions Provider Centrify

• Russian IT expert Menshakov listed the ways to protect personal data

• Out of band authentication market to reach $846.80 million by 2025

• The state of corporate legal departments and the role of the Chief Legal Officer

• Air Force chief looks to combat extremism in military ranks.

• ISC Stormcast For Friday, January 29th, 2021 https://isc.sans.edu/podcastdetail.html?id=7350, (Fri, Jan 29th)

• Port53 unveils platform that empowers cybersecurity pros to shape their orgs’ threat postures at will

• Researchers develop tool that ensures secure sensitive data sharing

• Most Important Cyber Attack Techniques that often used by Hackers

• OAIC asks Home Affairs to create ‘information champ’ role for overseeing FOI requests

• Stord Cloud Supply Chain: End-to-end logistics services integrated through a cloud-based platform

• Wind River debuts Wind River Studio, a cloud-native platform powering mission-critical intelligent systems

• Coronavirus variants: What they do and how worried you should be

• WallStreetsBets craze pushes dogecoin up 5x in 24 hours

• The Next Target for a Facial Recognition Ban? New York

• From first to sixth: Huawei’s phone business tanks thanks to US sanctions

• Apple CEO sounds warning of algorithms pushing society towards catastrophe

• NSW taskforce wants Australia-wide cyber standards harmony

• Extracting Toolmarks from Open Source Intel

• DirectDefense unveils Enterprise Security Program Review to address unnoticed cyber risks

• Oracle helps orgs increase the efficiency of their global supply chains

• AccessData AD Enterprise 7.4.2: Remote data collection for endpoints outside of the network

• Notorious malware network Emotet taken down in global sting

• Dealing with Out-of-memory Conditions in Rust

• State Dept. can’t justify move to open cyber office, GAO finds

• Pandemic response drives DOD’s sharp uptick in OTA spending

• Apple CEO Tim Cook: Privacy is ‘One of the Top Issues of the Century’

• iOS 14 Features New ‘BlastDoor’ Messages Security System

• Intel names Sunil Shenoy senior vice president and general manager of Design Engineering Group

• Offensive Security EXP-301: A course teaching the fundamentals of exploit development

• Refinitiv expands due diligence reports, adds cybersecurity and company credit risk ratings

• Oscorp, a new Android malware targets Italian users

• Archana Puri joins Galileo as chief product officer

• Industry Experts Share Their Opinion on Website Security Trends for 2021

• Google researcher discovers new iOS security system

• Data privacy laws: A mini glossary

• Digital Demand Generation Specialist

• Lebanese Cedar APT group broke into telco and ISPs worldwide

• 4 Must-have Best Practices for Better Vendor Risk Management

• IT Security News Daily Summary 2021-01-28

• Sending the All Clear Signal: The Implications of WhatsApp’s New Data Privacy Policy

• Huge gaps in vaccine data make it next to impossible to know who got the shots

• Getting started with TIC 3.0

• Hiring data shows a better way to fill jobs

• Cameras monitor masks, social distancing in Peachtree Corners’ city hall

• Apple CEO Escalates Battle With Facebook Over Online Privacy

• Law Enforcement Aims to Take Down Netwalker Ransomware

• Top 5 healthcare security and privacy events of 2020

• Apple Continues to Dominate Tablet Market With an Estimated 19.2 Million Shipments in Q4 2020

• Apple Seeds Third Release Candidate Version of macOS Big Sur 11.2 to Developers

• BYKEA data breach: Pakistani ride-hailing app exposed 400m records

• Data Protection Day: Harnessing the Power of Big Data Protection

• Hassan, Cornyn try again with cyber Guard bill

• Rocke Group’s Malware Now Has Worm Capabilities

• Apple Adds ‘BlastDoor’ to Secure iPhones From Zero-Click Attacks

• DOJ charges suspect in NetWalker ransomware attacks

• Social Media Influencer Charged with Election Interference

• Sharp Increase in Emotet, Ransomware Droppers

• Emotet Botnet Infrastructure Disrupted in International Takedown

• CommitStrip ‘The Best Bet For 2030’

• This is HUGE: Cops Nuke Emotet Crimeware C2

• Dumb as Rocks: How California Caught a WWI German Spymaster

• BSidesSF 2020 – Maria Mora’s, Chloé Messdaghi’s, Jeff Boothby’s, Tanner Emek’s & Ben Sadighepour’s ‘Panel: Let’s Get 360 With Bug Bounty!’

• Hands-On With Samsung’s $30 Bluetooth-Enabled ‘SmartTags’

• Practical Suggestions for EU CISOs From the Authorities

• Why DDoS Attacks Are Still One of the Biggest Cyberthreats

• Facebook To Reduce Political Content After Posting Healthy Profit

• How to Secure Your Unified Communications Deployment

• Data Privacy Day: 10 experts give advice for protecting your business

• How to install and use ClamAV on Ubuntu Server 20.04

• For Microsoft, Security is a $10 Billion Business

• Leapfrogging with Smart Tech Refresh

• The Facebook Oversight Board Issued Its First Decisions. Here’s How We’re Tracking Them.

• The Facebook Oversight Board’s First Decisions: Ambitious, and Perhaps Impractical

• Why Data Security and Privacy in the digital age are crucial

• Enhanced Security at the Edge with Imperva DNS Protection

• Why operational resilience will be key in 2021, and how this impacts cybersecurity

• Department of Justice Launches Global Action Against NetWalker Ransomware

• Apple Addresses Three iOS Zero-Day Flaws

• Pan-Asian Retail Group “Dairy Farm” Attacked by REvil

• Accellion Flaw Affects the Australian Securities and Investments Commission (ASIC)

• Paid family and medical leave for feds in new House bill

• The top 5 reasons data privacy should be practiced every day

• How to protect your organization’s remote endpoints against ransomware

• Security Resolutions to Make in 2021

• Veeam backups save Alaska community from ransomware attack

• Return to SMS as Security Feature

• Facebook Content Moderation Oversight Board Issues First Rulings

• $12m Grindr fine shows GDPR’s got teeth

• Cygilant and SentinelOne Partnership Offers Businesses Automated Cybersecurity for the Endpoint and Cloud

• What You Need To Know About Bitcoin Before Investing Your Money In It

• Why Do Subdomain Lookups for Cybersecurity?

• Using Digital Certificates for IoT Root of Trust

• Utah Ponders Making Online ‘Catfishing’ a Crime

• US Launches Global Action Against NetWalker

• Deals: Shop for Discounts on Apple Watch Series 6 ($60 Off) and M1 MacBook Pro/Air (Up to $80 Off)

• Tim Cook Implies That Facebook’s Business Model of Maximizing Engagement Leads to Polarization and Violence

• The White Hat Ball 2021

• ZINC attacks against security researchers

• Cybercriminals Now Targeting Celebrity Plastic Surgery

• Data of 176 Million Pakistani Citizens Found For Sale On Dark Web

• Massive Cyberattacks that Shook the World in 2020

• This malware hides behind free VPN, pirated security software keys

• Fix your Misconfigured Docker API Ports

• January 2021 Web Server Survey

• Facial recognition: Don’t use it to snoop on how staff are feeling, says watchdog

• DDoS attacks: Big rise in threats to overload business networks

• Hezbollah’s cyber unit hacked into telecoms and ISPs

• LogoKit Simplifies Office 365, SharePoint ‘Login’ Phishing Pages

• Many European CISOs Shift Focus to Mobile Security: Survey

• Schneider Partners with Immersive Labs to Launch Virtual Training Platform

• Breach Data Highlights a Pivot to Orgs Over Individuals

• Default Email Security Might Not be Secure Enough

• 5 identity priorities for 2021—strengthening security for the hybrid work era and beyond

• Google uncovers North Korea espionage campaign

• Cynet 2021 CISO Survey Reveals Need for SMEs with Small Security Teams to Rethink Cybersecurity Strategy

• Delivering Exponential Returns for Employees

• Qualcomm Ordered To Hand Over Data To EU Antitrust Regulators

• Setting up a quick and easy status page with Cloudflare Workers!

• API Security Weekly: Issue #118

• Dell and SK Telecom debut OneBox MEC, a turnkey private 5G edge system

• Mimecast Confirms SolarWinds Hack as List of Security Vendor Victims Snowball

• #RSAC365: How to Achieve Next Level Security Automation

• Emotet – ‘Most Dangerous Malware in the World’ Disrupted by the Law Enforcement Agencies

• Facebook Ad Services Let Anyone Target US Military Personnel

• Data Privacy Day

• Incident Management Startup Kintaba Announces “Milestones” to Document Significant Moments During a Major Outage or Security Breach in Real-Time

• TeamTNT group adds new detection evasion tool to its Linux miner

• Keyloggers and Stealers Help Harvest Lifeblood Data of Criminal Activities

• CARROT Weather 5.0 Launches With Fresh Design, More Snarky Dialogue and Customization Options

• Facebook Preparing Antitrust Lawsuit Against Apple for ‘Unfair’ Approach to Privacy and Default Apps

• Placement of Weapons in Outer Space: The Dichotomy Between Word and Deed

• No Light at the End of the Tunnel: Chad Wolf’s Unlawful Homeland Security Policies Are Still Unlawful

• 10 Best Laptop Bags for Men 2021

• 7 Best Laptop Bags For Women 2021

• 7 Best Laptop Stands 2021

• How to Make Extra Money Online in 2021

• 5 Best Folding Bike Brand 2021

• Looking for Resources on Privacy? You’ve Come to the Right Place

• Google Maps To Display Coronavirus Vaccination Locations

• How We Escaped Docker in Azure Functions

• Improving Elder Care With Smart Devices | Avast

• What You Need to Know About Scam Text Messages in 2021

• S3 Ep17: Facemasks, hidden ads and paranormal hacking [Podcast]

• Building Your Personal Privacy Risk Tolerance Profile

• Digital Identity Is the New Security Control Plane

• Time to Refresh: Leapfrogging Security with Cisco SecureX

• Exabeam Announces Partnership with Snowflake

• New Illumio Report Reveals Poor Endpoint Visibility and High Risk of Ransomware Spreading

• Acronis issues warning of critical privacy risks in 2021 ahead of Data Privacy Day

• Introducing Thundra Sidekick IntelliJ IDEA Plugin

• Talkdesk first to earn ISO 27701:2019 security certification

• Considering privacy in a work from home world

• Apple Begins Selling Refurbished Intel-Based 27-Inch iMac Released August 2020

• VIP Games Data Breach Exposes Millions Of Users’ Data

• Pirated themes and plugins are the most widespread threat to WordPress sites

• Stack Overflow: Here’s what happened when we were hacked back in 2019

• Emotet botnet takedown – what you need to know

• Law Enforcement Planning Emotet Cleanup Operation Following Botnet Takedown

• Cybersecurity tips for university students

• #RSAC365: Organizations Must Prepare for New #COVID19 Data Privacy Challenges

• Patch Your iGear Now – iOS 14.4 Fixes ’Actively Exploited‘ Security Flaws

• App Variety — and Security Innovation — Surged in 2020

• Italy CERT Warns of a New Credential Stealing Android Malware

• Our ESG Commitment: Investing in a Better World

• LogoKit, a new phishing kit that dynamically creates phishing forms

• New Socia Media Site Pillowfort Is Riddled With Basic Bugs

• 2019 Stack Overflow Hack Guided By Advice On Stack Overflow

• TikTok Vulnerability Left Users’ Private Information Exposed

• $2.3 Million Settlement Reached With Citrix Over Data Breach

• Apple Reaps Benefit From Soaring Pandemic Sales

• Utah tests the waters in turning online catfishing into a criminal act

• A month after a high-level cyberattack, charity says many IT systems are still offline

• Stack Overflow Shares Technical Details on 2019 Hack

• Apple to Crack Down on Tracking iPhone Users in Early Spring

• Remote Workers Could Offer Brexit Britain Cybersecurity Lifeline

• Police Have Disrupted the Emotet Botnet

• Telegram Working on Tool That Lets You Import WhatsApp Chats

• Emotet Takedown – What’s Next

• Apple: New App Tracking Transparency

• McAfee launches cloud-native MVISION XDR to optimize threat detection and response

• Defense in Depth Strategy: the Key For Outstanding Cybersecurity

• Apple Updates, Web Browsers, and Ergonomics – Intego Mac Podcast Episode 172

• Apple Patched Three Zero-Days With The Release Of iOS 14.4

• Emotet Botnet Offline After Global Takedown By Police

• Venafi Study: CIOs Massively Underestimate SSH Risks

• Apple Takes Top Spot in Global Smartphones Market With Record 82 Million iPhone Shipments in Q4 2020

• Mozilla: Internet Ecosystem Becoming More Fragmented

• How to stay safe while remote working this Data Privacy Day

• CSO’s ultimate guide to security and privacy laws, regulations, and compliance

• Collaborative global effort disrupts Emotet, World’s most dangerous malware

• Preventing multi-stage attacks with Check Point SandBlast Threat Emulation

• FCW Insider: Jan 28

• Citrix’s $2.3 million settlement offer for employees impacted by data breach approved

• Consumers Falling for $100m Clone Firm Scams

• Half a million in fake euros seized in Romania

• Sophos Victim to Nefilim Ransomware Attack

• Authorities Seize Dark-Web Site Linked to the Netwalker Ransomware

• ManagedMethods Becomes a 2021 Data Privacy Day Champion

• It Is Wrong To Penalize Companies That Pay Ransoms – What Expert Says

• Five Ways Businesses Can Pave The Way For Growth Amid The Widespread Caution Of 2021

• Grindr hit with $11.7m data privacy fine

• New toolkit can build phishing pages in real-time

• (ISC)² elects new officers for its Board of Directors

• Australia launches Cyber Attack probe via SBS

• VMware Carbon Black Champions Data Privacy Day 2021

• Mozilla: Racism, misinformation, anti-worker policies are ‘undermining’ the Internet

• #DataPrivacyDay: Leaks and Breaches Soared 93% in 2020

• International fraud in forex trade and binary options busted in Andorra

• Cyber News Rundown: Cryptomining Malware Resurgent

• European Authorities Disrupt Emotet — World’s Most Dangerous Malware

• Privacy predictions for 2021

• WhatsApp to Require Face ID or Touch ID When Linking Accounts to Web and Desktop Apps

• Expert Reaction On Apple iOS 14.4 Fixes Three Critical Security Bugs

• 3 tips to top up your privacy

• If you want to leg it through China’s Great Firewall, don’t forget to pull on your newly darned Shadowsocks

• NetWalker ransomware spreader arrested

• Data Protection Day | Avast

• Pwn2Own 2021 Will Also Cover Zoom, MS Teams Exploits

• CISA warns of high-severity flaws in Fuji Electric Tellus Lite V-Simulator and Server Lite

• Why Data Privacy Day matters: A Lock and Code special with Mozilla, DuckDuckGo, and EFF

• Why Data Privacy Day matters

• Want to add antivirus to your existing portfolio?

• APIs Exposed by Manual Penetration Testing

• Babuk Locker: Mediocre, But Gets the Job Done

• App Security Takes a Back Seat in the Drive to Digital Transformation

• Four Steps to Protect Strategic Information

• New cybercrime tool can build phishing pages in real-time

• Data Privacy Day 2021: Pandemic Response Data Must Align with Data Privacy Rules

• Marry IGA with ITSM to avoid the pitfalls of Identity 2.0

• Google says iOS privacy summaries will arrive when its apps are updated

• Apple patches three iOS zero‑days under attack

• Announcing Navigating the Digital Age, Third Edition

• Apple Will Require Apps to Request Permission to Track Users Starting With Next iOS 14 Beta Version

• A Day in the Life of Your Data: Apple Details How Companies Can Track You Across Apps and Websites

• CISOs increasingly focus on mitigating mobile security risks

• Everyone’s talking about Data Privacy Day, but who’s listening?

• 519 data breach notifications include 33 from Australian government entities

• The Russian pleaded guilty to cybercrime charges in the United States

• What Data Privacy Day 2021 Means for Individuals

• The Right to Privacy: Navigating Personal, Physical and Digital Safety

• Global IoT in manufacturing market size to reach $1.0388 billion by 2026

• Most network outages exceed $1 million in damages

• ISC Stormcast For Thursday, January 28th, 2021 https://isc.sans.edu/podcastdetail.html?id=7348, (Thu, Jan 28th)

• Owl XDE: Embedded security modules that secure devices and the IoT, from the inside

• Vyopta launches Intelligent Monitoring Engine, purpose-built for collaboration

• If you want to leg it through China’s Great Firewall, don’t forget to pull on your newly darned Shadowsocks

• Veritas NetBackup 9: Additional choices for deployment across edge, core and cloud

• Veritas updates its Enterprise Data Services Platform to expand cloud capabilities

• Myth Buster: Data Fatigue is Not Real

• Emotet vs. Windows Attack Surface Reduction, (Thu, Jan 28th)

• Group-IB granted Innovation Excellence award for its Digital Risk Protection

• ARMO raises $4.5M to expand its go-to-market efforts and commercial offering of its technology

• HPE awarded $35+M to build supercomputer using its end-to-end HPC technologies for the NCAR

• NetWalker ransomware disrupted – Cryptocurrency and domain seized

• Final rule, formal training orgs on CMMC could hit this summer

• Can better data improve federal hiring?

• Facebook’s Zuckerberg takes aim at Apple’s privacy pitch, motives with iOS 14

• NSW running Data61 de-identification tool across COVID data prior to public release

• Breach Clarity Data Breach Report: Week of Jan. 26

• Law enforcement announced global action against NetWalker Ransomware

• Facebook CEO Mark Zuckerberg Says Apple’s Privacy Changes are Self-Serving and Anti-Competitive

• CloudSphere appoints Jane Gilson as CEO

• Army CIO talks digital strategy, trimming IT spending

• Oversight Dems push $9B TMF boost

• Can data from traffic stops end disparities in policing?

• Asheville powers up its data analytics office

• Emotet taken down in global law enforcement operation

• Arrest, Seizures Tied to Netwalker Ransomware

• Intl. Law Enforcement Operation Disrupts Emotet Botnet

• Digital Defense, Inc. Technology Integration with LogRhythm Improves Threat Detection and Response Through Risk-Based Prioritization

• The New Year in Cybersecurity: Supply Chain Attacks, Part 1

• What are Windows Process Creation Events and Why You Should Enable Them

• Apple’s Services Revenue Hits All-Time High of $15.8B Billion in Q1 2021

• Apple’s Wearables Category Sets New Revenue Record in Q1 2021

• Tim Cook: We Love to Work on Products Where Hardware, Software, and Services Intersect

• Apple Saw Record Number of FaceTime Calls On Christmas

• Apple Saw Largest Number of iPhone Upgraders Ever in Q1 2021

• IT Security News Daily Summary 2021-01-27

• Law enforcement takes over Emotet, one of the biggest botnets

• Building a Security-First Culture

• Pwn2Own: A Tale of a Bug Found and Lost Again

• FirstNet expands product, services portfolio

• US and Bulgarian authorities disrupt NetWalker ransomware operation

• NetWalker Ransomware Suspect Charged: Tor Site Seized

• TeamTNT Cloaks Malware With Open-Source Tool

• NetWalker Ransomware’s Sites Seized by Law Enforcement

• Critical Vulnerability Patched in ‘sudo’ Utility for Unix-Like OSes

• ICS Purdue Model in Industrial Internet of Things (IIoT) & Cloud

• Celebrate Data Privacy Day with Advice from Top Data Privacy Experts

• Emotet Botnet dismantled in a joint international operation

• Apple Reports Record-Setting 1Q 2021 Results: $28.8B Profit on $111.4B Revenue

• Apple Now Has 1.65 Billion Active Devices Worldwide

• Transferring Whatsapp data from iPhone to Android with MobileTrans

• Remote Attackers Can Now Reach Protected Network Devices via NAT Slipstreaming

• Ten-Year Old Sudo Vulnerability Gives Root Privileges on Host

• North Korean hackers attempt to hack security researchers investigating zero-day vulnerabilities

• Fleeing WhatsApp for Privacy? Don’t Turn to Telegram

• Data Privacy Day in 2021

• XKCD ‘Trash Compactor Party’

• BSidesSF 2020 – Allan Friedman’s ‘How Software Transparency Can Help Save The World’

• Apple Shifting More iPhone and iPad Production to India and Vietnam

• What To Do if You Must Use SMS

• It’s Not 230 You Hate, It’s Oligopolies

• Knock, knock. Who’s there? NAT. Nat who? A NAT URL-borne killer

• McAfee ATR Launches Education-Inspired Capture the Flag Contest!

• Authorities plan to mass-uninstall Emotet from infected hosts on March 25, 2021

• ADT Security Camera Flaw Open Homes, Stores to Eavesdropping

• Sudo Bug Gives Root Access to Mass Numbers of Linux Systems

• Emotet malware taken down by global law enforcement effort

• Senator Grills Facebook On “Failed Commitment” To Stop Recommending Dangerous Content

• Microsoft Security Business Exceeds $10B in Revenue

• Some attack vectors Spamhaus is observing in early 2021

• Pwn2Own 2021, more than $1,500,000 in cash and prizes for contestants

• Apple Now Selling Standalone Ear Cushions for AirPods Max

• Pow! Emotet’s down. Is it out?

• Stack Overflow 2019 hack was guided by advice from none other than… Stack Overflow

• Emotet Botnet Dismantled Following International Police Operation

• Nefilim Actors Use Active Directory Account for a Month Before Deploying Ransomware

• 10 Year Old Heap Buffer-Overflow Vulnerability Discovered in Sudo

• Emotet Takedown Disrupts Vast Criminal Infrastructure; NetWalker Site Offline

• ADT Security Camera Flaw Opened Homes, Stores to Eavesdropping

• CISA Issues Advisory for High-Severity Vulnerabilities in Fuji Electric HMI Products

• 2021 cybersecurity predictions: Oh, where cybersecurity may go

• #RSAC365: Will Recent Treasury Guidance Reduce Ransomware Payments in the US?

• #RSAC365: #COVID19 Fundamentally Altered Global Attack Surface

• 4 Clues to Spot a Bot Network

• iCloud for Windows Gaining Support for iCloud Passwords Chrome Extension

• Apple Releases Safari Technology Preview 119 With Bug Fixes and Performance Improvements

• The state of apps by Microsoft identity: Azure AD app gallery apps that made the most impact in 2020

• North Korea APT Might Have Used a Mobile 0day Too?

• Building towards the richest and most interconnected malware ecosystem

• World’s Most ‘Resilient Malware’ Botnet Emotet Taken Down

• Emotet Botnet Takedown | Avast

• Grindr Faces $11.7m Data Privacy Fine

• UK Insurers Defend Covering Ransomware Payments

• Many Cybersecurity Job Candidates Are Subpar, While On-the-Job Training Falls Short

• Cops Disrupt Emotet, the Internet’s ‘Most Dangerous Malware’

• MAR-10319053-1.v1 – Supernova

• AirPods Max Available in Space Gray on Amazon [Updated: Verizon Too]

• 1-15 January 2021 Cyber Attacks Timeline

• Microsoft surpasses $10 billion in security business revenue, more than 40 percent year-over-year growth

• Protecting multi-cloud environments with Azure Security Center

• Announcing the general availability of Azure Defender for IoT

• Command ‘n’ control botnet of notorious Emotet Windows ransomware shut down in multinational police raid

• Amazon Appeals US Labor Ruling Over Union Vote

• Lifesaving Tech For Seniors | Avast

• Reinforcing Smart Home Security | Avast

• Why Ubuntu 21.04 is an important release, even without GNOME 40

• Apple Patches Three iOS Zero-Day Vulnerabilities

• Creating a LaMetric App with Cloudflare Workers and KV

• Is There A Better Alternative to Active Directory®?

• Connect, Share, and Learn at Imperva Amplify 2021

• Deals: Discounts Hit 16-Inch MacBook Pro ($300 Off), 27-Inch iMac ($200 Off), and More

• Google to Stop Collecting Advertising Identifiers in iOS Apps in Response to iOS 14’s Upcoming Tracking Prompt

• AirPods Overwhelmingly Dominate Global Wireless Headset Market

• A 12-Step Rehabilitation Program for American Election Administration

• Why the Senate Shouldn’t Hold a Late Impeachment Trial

• Lawfare Live: Lessons from the 2020 Election With Nate Persily and Charles Stewart

• Water Wars Special: How IUU Fishing Increases the Risk of Conflict

• More than 13,000 malware threats were detected every hour in 2020

• TikTok bug could have exposed millions of users’ data

• Google FLoC puts ad trackers on a cookie-free diet

• Nemty Ransomware hackers using dead staff credentials

• Why you need to monitor ONTAP FPolicy performance

• Cyclist Swept Into River Calls 999 From Apple Watch

• Top Cybersecurity Threats to Watch in 2021

• New Google cloud service aims to bring zero trust security to the web

• In the Hacker’s Crosshairs: Active Directory

• Global Public-Private Partnerships Key to Fighting Cybercrime

• Security’s Inevitable Shift to the Edge

• Apple Releases Security Updates

• Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

• New Docker Container Escape Bug Affects Microsoft Azure Functions

• Maritime port cybersecurity

• Today Marks the 11th Anniversary of Steve Jobs Unveiling the iPad

• Spigen AirTags Accessory Listed Online for ‘Late October’ Release

• Is BlueStacks Safe? Addressing Cybersecurity Concerns of Android Emulation Software

• Today’s ‘sophisticated cyber attack’ victim is the Woodland Trust: Pre-Xmas breach under investigation

• Google To Restore ‘News Showcase’ Service To Australia – Report

• How We Hacked Azure Functions and Escaped Docker

• How is Enterprise Security Like Writing a Novel?

• Emotet Botnet Disrupted in Global Law Enforcement Operation

• International Action Targets Emotet Crimeware

• Two Dutch Public Health Workers Arrested for Selling Coronavirus Patient Information

• Crawl, Walk, and Run with SASE Adoption

• ADT Installer Hacks Home Cams for Sexual Thrills

• Adaptiva Posts Record Growth as Company Rises To Solve Enterprise Challenges

• Dutch Insider Attack on COVID-19 Data

• Online fraud at an all-time high amidst the global pandemic

• We Answer Your Questions About The SolarWinds Hack

• Four cold calling marketing firms fined almost £500k by ICO

• Database of 176 million Pakistani mobile phone users sold online

• Armo comes out of stealth to secure cloud-native computing

• National Crime Agency warns novice and veteran traders alike of rise in clone company scams

• How ghost accounts could leave your organization vulnerable to ransomware

• Hundreds of Industrial Organizations Received Sunburst Malware in SolarWinds Attack

• Cypriot National Admits in U.S. Court to Extorting Website Owners

• Apple critical patches fix in-the-wild iPhone exploits – update now!

• Growing Digital Adoption Providing Extra Opportunities for Cyber-Criminals

• NHS Urged Public to Remain Vigilant Regarding Fake Covid-19 Vaccinations

• Warning Issued Over Hackable ADT’s LifeShield Home Security Cameras

• 3 Security ‘Disconnects’ That Need To Be Addressed

• Apple addresses three iOS zero-day flaws exploited in the wild

• Emotet Botnet Disrupted By International Police Operation

• Apple Patches Three Actively Exploited Zero Days

• 23 Million Gamer Records Exposed In VIPGames Leak

• Insurers Defend Covering Ransomware Payments

• Experts Reaction On Hackers Can Access Your Phone Number From Facebook

• Retail giant falls Victim to REvil Ransomware Attack

• Emotet Malware Over the Years: The History of an Active Cyber-Threat [Updated]

• Biden Administration Seeks $9 Billion for Emergency Cybersecurity Improvements

• Emotet: ‘World’s most dangerous malware’ botnet disrupted by international police operation

• Apple Patches Three Actively Exploited Zero-Days, Part of iOS Emergency Update

• New Attack Could Let Remote Hackers Target Devices On Internal Networks

• New Exploit Development Course: EXP-301

• Expert Opinion On Fraud Epidemic In UK ‘Is Now National Security Threat’

• iOS 14.4 Released to Fix Three Security Bugs

• International law enforcement effort pulls off Emotet botnet takedown

• Best Office Chairs Under $100 – 2021 Buying Guide

• Best Laptops for Engineering Students 2021

• 7 Best SoundBars in India Under 10000 Rupees 2021

• Top 10 Best Laptop Accessories 2021

• Watch Out For This Wormable Malware Spreading Via WhatsApp

• Taiwanese Minister: Chip Makers To Address Car Silicon Shortage

• More Security Vendors Admit to SolarWinds Attacks

• Fake ICO consultant sentenced for embezzling cryptocurrency now worth $20 million

• Manufacturing Giant Suffers Major Cyber-Disruption

• World’s most dangerous malware EMOTET disrupted through global action

• Top Cyber Attacks of 2020

• Apple Execs Discussed Not ‘Leaving Money on the Table’ When Deciding Apple TV Subscription Fees

• Apple fixes three actively exploited iOS zero-days

• Vulnerability found in top messaging apps let hackers eavesdrop

• Tips to harden Active Directory against SolarWinds-type attacks

• Are your Endpoints Affected by the SolarWinds Sunburst Attack?

• Quick Hits

• FCW Insider: Jan. 27

• UK association defends ransomware payments in cyber insurance policies

• Chromebooks will now let you sign into websites with your fingerprint

• UK Spies Called on to Help in Fraud Fight

• Dutch Police Confiscated 2 Men for Stealing And Selling COVID-19 Patients Data

• Using the Manager Attribute in Active Directory (AD) for Password Resets

• TriOp – tool for gathering (not just) security-related data from Shodan.io (tool drop), (Wed, Jan 27th)

• The Hacked and Yet to Be Hacked: SolarWinds Breach Shows Detection is Key to Reducing Risk and Damage

• The Basics of Defense in Depth Cybersecurity

• YouTube Extends Donald Trump Suspension

• Pwn2Own 2021: Hackers Offered $200,000 for Zoom, Microsoft Teams Exploits

• DDoS Attacks Surge in 2020 Due to #COVID19

• Heap-based buffer overflow in Linux Sudo allows local users to gain root privileges

• Research Suggests Apple Doubled Its Market Share in India Last Year

• Sudo vulnerability allows attackers to gain root privileges on Linux systems (CVE-2021-3156)

• 66,000 Gamers Exposed due to Cloud Misconfiguration

• Experts Reaction On Palfinger Suffers Cyber Attack

• Expert Commentary: Phishing Attack Impersonates UK NHS To Obtain Sensitive Consumer Data

• Experts On North Korea Hacking Campaign Response

• Looking for adding new detection technologies in your security products?

• Why Enterprises Must Take Ransomware Attacks Seriously

• Apple Warns Against iPhone Camera Repairs With Non-Genuine Parts

• Cybersecurity marketing: Always think of the customer

• Streamlining cloud compliance through automation

• Wormable Android malware spreads via WhatsApp messages

• Apple Warns of 3 iOS Zero-Day Security Vulnerabilities Exploited in the Wild

• The complexity of moving legacy apps remains a huge cloud migration challenge

• Privacy is not a one-time, check the box activity

• Here’s how AI can help fight cybersecurity threats given the rise of remote working

• Merger and Acquisition news currently trending on Google

• Google offers secure BeyondCorp Enterprise Cloud model

• Predictive policing is just racist 21st century cyberphrenology

• 10-years-old Sudo bug lets Linux users gain root-level access

• In the Wake of the SolarWinds Hack, Here’s How Businesses Should Respond

• Sitdown with a SOC Star: 13 Questions With Adva Harosh of First Quality

• What Does Data Privacy Mean to Consumers and Corporations?

• Ghidra 101: Decoding Stack Strings

• Most with in-house security teams are considering outsourcing security efforts

• Isolation-based security technologies are gaining prominence

• Predictive policing is just racist 21st century cyber-phrenology

• TetherView Digital Bunker: A one-way-in and one-way-out private cloud solution for enterprises

• eBook: 20 tips for secure cloud migration

• How To Test If The App You Created Is Secure And Safe From Hacking

• Xanthe Cryptomining Botnet Attack Targeting Docker Installations

• Preparing for a High-Paying Career in Cyber Security

• 7 Reasons to Choose an Outsourced Security Services Provider

• What Password Managers Are Safe to Use in 2021

• Virtual Private Network: What is it and Why is it So Important To Protect Your Privacy?

• OAIC orders Home Affairs to compensate asylum seekers over data breach

• Norway to Fine Dating App Grindr $11.7M Over Privacy Breach

• ISC Stormcast For Wednesday, January 27th, 2021 https://isc.sans.edu/podcastdetail.html?id=7346, (Wed, Jan 27th)

• Quantum unveils H2000 Series, a line of hybrid storage arrays

• Syniverse RCS P2P hub advances messaging capabilities for mobile messaging users

• ONF SD-RAN 1.0: A cloud-native platform for software-defined RAN consistent with O-RAN

• Singapore must return data control to users to regain public trust

• ASIC reports server breached via Accellion vulnerability

• CloudLinux expands its Extended Lifecycle Support services for Linux distributions

• Aradatum launches self-powered macro cell tower to support 5G, edge and telecom

• D-Link COVR-X1870 Series Whole Home Mesh Wi-Fi 6 Systems provide faster speeds and greater capacity

• DOD moves to centralize security clearance disputes

• Pay-or-Get-Breached Ransomware Schemes Take Off

• Ransomware Disrupts Operations at Packaging Giant WestRock

• North Korea Targets—and Dupes—a Slew of Cybersecurity Pros

• Phishing Campaign Leverages WOFF Obfuscation and Telegram Channels for Communication

• Ivanti acquires Cherwell to expand the reach of its Neurons platform

• Deloitte bolsters cyber threat hunting capabilities with acquisition of Root9B

• TSP participants withdrew $2.9 billion last year under CARES Act

• North Korean Attackers Target Security Researchers via Social Media: Google

• Pay-Or-Get-Breached Ransomware Schemes Take Off

• There is No Cloud Security Market Segment with Richard Stiennon

• US cyber intelligence officer given 11 years for kidnapping her kid, trying to hawk top secrets to Russia in Mexico

• whaling attack (whaling phishing)

• Air Force chief looks to combat extremism in military ranks.

• Nvidia Squashes High-Severity Jetson DoS Flaw

• US cyber intelligence officer given 11 years for trying to sell top-secret info to Russia

• Google releases alarming report about North Korean hackers posing as security analysts

• Attackers Target Security Researchers via Social Media: Google

• FTC Reports Scammers Impersonating FTC

• Fidelis, Mimecast, Palo Alto Networks, Qualys also impacted by SolarWinds hack

• Apple Inviting Developers to Online Events on Building Widgets, Creating App Clips and Bringing iPad Apps to Mac

• Update your iPhone — Apple just disclosed hackers may have ‘actively exploited’ a vulnerability in its iOS

• North Korea hackers use social media to target security researchers

• TikTok fixes security flaw that exposed private user data

• Apple’s long-time hardware lead steps down to work on mysterious “new project”

• IT Security News Daily Summary 2021-01-26

• 128 vs. 256-bit SSL Encryption: What Are the Differences?

• CISA looks to future-proof first responder communications

• How agencies are modernizing IT infrastructure with attribute-based access control

• Cloud driving public safety improvements

• Apple fixes another three iOS zero-days exploited in the wild

• F5 Networks fiscal Q1 revenue, profit beat expectations, revenue outlook higher as well

• DanaBot Malware Roars Back into Relevancy

• SolarWinds breach news center

• Bias is Anti-Balance: Consuming Media is Like Riding a Bicycle

• TetherView Unveils Digital Bunker Service for Virtual Desktops

• Testing the HomePod Mini’s New U1 Handoff Functionality

• Decade-old bug in Linux world’s sudo can be abused by any logged-in user to gain root privileges

• Building Culture Without the Office: Five Best Practices for Creating a Positive and Engaging Culture in the COVID Era and Beyond

• Detecting and Preventing Kernel Attacks

• Biden taps campaign veteran for federal CISO job

• FedRAMP adds services to marketplace

• Firefox Cracks Down on Supercookies to Improve User Privacy

• Report: 500 Million Facebook Users May Have Had Their Phone Numbers Compromised

• Mimecast: Recent Certificate Compromise Tied to SolarWinds Attacks

• Privacy Teams Helped Navigate the Pivot to Work-from-Home

• It’s a new year. What do we do now?

• Streamlining Cloud Smart Adoption With Prisma Cloud

• How Your Security Operations Team Can Maintain Zero Trust

• Palo Alto Networks Joins the Responsible Business Alliance

• iOS 14.4 Patches Vulnerabilities That May Have Been Actively Exploited

• Apple emits emergency iOS security updates while warning holes may have been exploited in wild by hackers

• TikTok vulnerability allowed hackers to access users’ phone numbers

• Four security vendors disclose SolarWinds-related incidents

• 23M Gamer Records Exposed in VIPGames Leak

• Apple Ships Emergency Fixes for Under-Attack iOS Zero-Day

• Mimecast certificate compromised by SolarWinds hackers

• IoT device authentication methods that increase security

• Hacker Admits Targeting Major US Websites

• Syntax Releases First IT Trends Report

• Cartoon Caption Winner: Before I Go …

• BEC Scammers Find New Ways to Navigate Microsoft 365

• TetherView Unveils DigitalBunker Service for Virtual Desktops

• TA551 (Shathak) Word docs push Qakbot (Qbot), (Tue, Jan 26th)

• Tweetbot 6 Launches With Design Updates and Subscription Pricing

• Plex Launches Plex Arcade With Retro Games to Play

• North Korean Threat Actors Target Security Researchers

• Targeted Phishing Attacks Strike High Ranking Company Executives

• Over 66,000 VIPGames Members’ Information Exposed Through Misconfigured Cloud Server

• UK Residents Targeted in COVID-19 Phishing Scam Pretending to be NHS

• Seeking more civility on Facebook

• Google’s new zero trust product is completely cloud native

• How to quickly block spam SMS in Android

• More Cybersecurity Firms Confirm Being Hit by SolarWinds Hack

• Twitter Asks Users to Police Misinformation

• Fighting the Rapid Rise of Cyber Warfare in a Changing World

• Sharp Increase in Emotet, Ransomware Droppers

• Healthcare Ransomware Attacks Continue Climbing

• Threat Report Portugal: Q4 2020

• Apple Releases tvOS 14.4 for Fourth and Fifth-Generation Apple TV Models

• Apple Releases watchOS 7.3 With Unity Watch Face, Expanded ECG Availability and More

• Apple Releases iOS 14.4 and iPadOS 14.4 With New Camera Warnings and Bug Fixes

• Apple Releases 14.4 Software for HomePod With New U1 Features for Mini

• iPhone 13 Models Again Rumored to Support Faster Wi-Fi 6E

• Nine Questions for the Capitol Insurrection Commission

• Is the SolarWinds Cyberattack an Act of War? It Is, If the United States Says It Is.

• TikTok Vulnerabilities Could Expose Users’ Private Data

• Your Guide to Endpoint Security

• Nefilim Ransomware Gang Hits Jackpot with Ghost Account

• Criminal, Domestic Violence Case Info Exposed in Cook County Leak

• Ghost hack – criminals use deceased employee’s account to wreak havoc

• Which AppSec Testing Type Should You Deploy First?

• Discovery capabilities: A core differentiator for Black Duck SCA

• Apple TV+ Espionage Thriller ‘Tehran’ Renewed for Second Season

• Silicon Valley legend Jim Clark on why he wants to eliminate passwords

• BrandPost: Choosing the Right XDR Solution for Your Organization

• Google Updates Plan To End Cookies In Chrome Browser

• Sonicwall Hacked with Highly Sophisticated Hackers By Exploiting Zero-Day Vulnerabilities

• How to Keep Mobile Phones Secure

• Google Cloud boosts security with general availability of zero-trust BeyondCorp Enterprise

• Firefox 85 removes Flash and adds protection against supercookies

• Privacy budgets soared in 2020, doubling to an average of $2.4 million

• Akamai: Extortion attempts increase in DDoS attacks

• Zero trust 2.0: Google unveils BeyondCorp Enterprise

• Cyber Criminals trying to hack Russian popular Telegram channels using ads from GeekBrains

• TetherView Launches Digital Bunker™, a Comprehensive One-Way-In and One-Way-Out Private Cloud for Enterprise Customers

• Apple CEO Tim Cook to Speak at EU Data Protection Conference This Thursday

• Second-Generation AirPods Pro Widely Rumored to Launch in First Half of 2021

• Have You Ever Installed a Malicious Chrome Extension?

• Ransomware Attack on WestRock

• Discover NetApp video: the grand unification theory of cloud

• Facebook News Launches In UK After Deals Signed

• Why you should never use free a VPN

• Using Digital Certificates for IoT Root of Trust

• South African government releases its own browser just to re-enable Flash support

• Governors hear about the dangers of a lackluster cybersecurity response, need for FBI coordination

• Veritas Technologies adds Flex Scale to NetBackup9 for scale-out functionality

• Bad actors launched an unprecedented wave of DDoS attacks in 2020

• NAT Slipstreaming 2.0 Exposes Devices on Internal Networks to Remote Attacks

• Learn SAML: The Language You Don’t Know You’re Already Speaking

• Take the Unhackable MFA Challenge

• TikTok privacy issue could have allowed stealing users’ private details

• Security Intelligence Handbook Chapter 7: Understand Your Adversaries

• Default Email Security Might Not be Secure Enough

• Apple Researching High-End Titanium MacBook Casings With Unique Textured Finish

• Apple Releasing iOS 14.4 and watchOS 7.3 Later Today

• Deals: Anker Gold Box Sale Has Up to 36% Off Wall Chargers, Lightning Cables, Portable Batteries, and More

• Apple CEO Tim Cook to Speak at EU Data Protection Conference This Thusday

• Expert Reaction On Research That 250% Jump In Phishing Sites

• Watch out as new Android malware spreads through WhatsApp

• Veritas, Fortinet launch new security tools, automation features

• Cybercriminals use deceased staff accounts to spread Nemty ransomware

• North Korea Targets Security Researchers in Elaborate 0-Day Campaign

• Several DDoS Attack Records Broken in 2020

• Google Says Chrome Cookie Replacement Plan Making Progress

• Dr Gary McGraw Appointed to IriusRisk Threat Modeling Technical Advisory Board

• DDoS Campaign Exposed by the Security Firm Radware

• Startup Offers Free Version of its ‘Passwordless’ Technology

• Mainframe Security Automation Is Not a Luxury

• Huntress Launches Managed Antivirus Service to Streamline Endpoint Security for MSPs and IT Administrators

• Gemini 2 for Mac Gains Real-Time Duplicate Files Monitor With Alerts

• Apple Celebrates Black History Month With Limited-Edition Watch, Featured Apps and Books, and More

• Rushing to Judgment: Examining Government Mandated Content Moderation

• Increase in Ransomware Attacks on Healthcare Industry

• Common Cybersecurity Vulnerabilities and Exposures to Pay Attention to in 2021

• SpaceX Launches 143 Satellites In One Launch

• Setting up a quick and easy status page with Cloudflare Workers!

• IT leaders see outsourcing cybersecurity as one solution to increased attacks

• Cybercriminals Impersonate UK’s National Health Service to Spread COVID-19 Vaccination Phishing Emails

• Successful hit against drug trafficking in the EU

• CounterCraft Brings World-Class Active Defense Technology to U.S. Department of Defense

• Google: North Korean Hackers Have Targeted Security Researchers Via Social Media

• The History Of The Connected Battlespace, Part One

• Dutch COVID-19 Patient Data Sold On The Criminal Underground

• Former LulzSec Hacker Releases SonicWall VPN Zero-Day

• New Malware spread through Whatsapp

• Business executives targeted with Office 365-themed phishing emails

• The massive SolarWinds hack and the future of cyber espionage

• Google says North Korean state hackers are targeting security researchers on social media

• I was targeted by North Korean 0-day hackers using a Visual Studio project, vuln hunter tells El Reg

• Evolution vs. Extinction

• An Augmented Reality Future?

• TrickBot’s Survival Instinct Prevails — What’s Different About the TrickBoot Version?

• CISO Conversations: Intel, Cisco Security Chiefs Discuss the Making of a Great CISO

• Australian Corporate Regulator Discloses Breach Involving Accellion Software

• Ready to take the red pill? Catch up with Keren Elazari at Sophos Evolve

• Mastercard Introduces Quantum-Resistant Specs to Enhance Contactless Security

• World’s Largest Crane Maker Suffers Global Cyber Attack, Operations at a Halt

• Hacker Releases Dating Site Data Belonging to 2+ Million Users

• Cigarette smugglers’ activities up in smoke after illegal factories dismantled across Europe

• Critical Vulns Discovered in Vendor Implementations of Key OT Protocol

• Targeted Phishing Attacks Strike High-Ranking Company Executives

• Privacy Comes of Age During the Pandemic

• Security Threats Loom in Your Cart: Malicious Activity From Online Shopping in the Enterprise

• WordPress security & hardening, the definitive guide

• Strengthening Online Applications Against Pass-the-Cookie Attacks

• Massive Brazilian Data Breach

• Default Email Security Might Not be Enough

• FCW Insider: Jan. 26

• Crane Maker Palfinger Says Cyberattack Had ‘Massive’ Impact on IT Infrastructure

• TikTok Bug Gave Access to Contacts’ Profile Details

• ‘2034: A Novel of the Next World War,’ an Exclusive Excerpt

• Targeted Phishing Attacks Target High-Ranking Company Executives

• North Korea-linked campaign targets security experts via social media

• Experts On Australia’s Securities Regulator Says Server Hit By Cybersecurity Breach

• How one multi-cloud-based business manages security controls

• Twitter ‘Birdwatch’ Trial To Allow Users To Flag Misleading Content

• Apple Issues Warning About iPhones And Pacemakers

• TikTok fixes privacy issue discovered by Check Point Research

• TikTok Flaw Lay Bare Phone Numbers, User IDs For Phishing Attacks

• Cook County Leaks 320,000 Court Records

• Machine Learning in Security – How Machine Learning helps security in the real-world?

• TikTok Bug Could Have Exposed Users’ Profile Data and Phone Numbers

• vCISO Shares Most Common Risks Faced by Companies With Small Security Teams

• Facebook News Tab Launches in the United Kingdom

• Expert Discussion On Third Party/Supply Chain Risks And Means Of Mitigating Them

• North Korean hackers target security researchers

• Crane manufacturer Palfinger hit by global cyberattack

• Security researchers targeted by North Korean hackers

• Misconfigured Cloud Server Exposes 66,000 Gamers

• Australian Cyber Security Centre Hit by Cyber Security Attack

• Spotify Tests Audiobooks Market With Collection of Literary Classics

• ‘There’s A Threat, Pass It On’: A Negative Communication Cycle Between Vendors, IT Leaders And Employees Leaves Enterprises At Risk

• Which Emulator to Choose to Play Epic Seven – 2021 Guide

• UK Cabinet Office spokesman tells House of Lords: We’re not being complacent about impact of SolarWinds hack

• Cyber Attacks on Vaccination centers of Germany

• SonicWall hit by a highly sophisticated cyber attack

• Cook County’s Court Related Records Exposed

• Application security testing is not just buzzwords

• Human and Software Flaws Leave Remote Workers Vulnerable

• How Educational Institutions can Disrupt Ransomware Attackers

• The impact of COVID-19 on how CISOs make buying decisions

• N. Korean Hackers Targeting Security Experts to Steal Undisclosed Researches

• Tailored AI-generated advice may stop the spread of misinformation

• Small security teams overwhelmed by onslaught of cyber attacks

• Standard SNMP Device Monitoring

• Jump Into 2021 With a Unified Approach to Remote Monitoring

• How to Protect Your Business From Supply Chain Attacks

• Internet regulation: Not a matter of freedom of speech, but freedom to conduct business

• Cybersecurity investments will increase up to 10% in 2021

• North Korea infected infosec bods with backdoors via dodgy blog pages, Visual Studio files – Google

• A Look at the Legal Consequence of a Cyber Attack

• Cyber News Rundown: Cryptomining Malware Resurgent

• How secure configurations meet consensus

• ISC Stormcast For Tuesday, January 26th, 2021 https://isc.sans.edu/podcastdetail.html?id=7344, (Tue, Jan 26th)

• Google: North Korean hackers have targeted security researchers via social media

• South Carolina County Suffers Weekend Cyberattack

• Google Warning: North Korean Gov Hackers Targeting Security Researchers

• Claroty Discloses Multiple Critical Vulns in Vendor Implementations of Key OT Protocol

• Ivanti Velocity and Ivanti Speakeasy now optimized for SAP environments

• Platform9 unburdens users from the complexities of Kubernetes while ensuring fast adoption

• End Two Federal Programs that Fund Police Surveillance Tech

• 6 Security Predictions for 2021—And Why They Matter

• Part Two: Secure Coding Urban Myths

• OMB lays out new COVID health and safety guidelines for feds

• House Dems call on AG nominee to protect immigration judges’ union

• Ashok Krishnan joins AXA XL as Chief Data and Analytics Officer

• Internet Society Foundation awards $1M to projects that examine the future and sustainability of the internet

• CloudNatix raises $4.5M to meet the demand for their product across multiple geographies and markets

• SonicWall Is Latest Security Vendor to Disclose Cyberattack

• Dutch police arrested two people for the illegal sale of COVID-19 patient data

• InfluxData appoints Vidya Peters to its Board of Directors

• Promoting an innovative workforce through DevSecOps

• CISA launches ransomware awareness campaign

• CDM needs zero trust

• IoT security picks up momentum

• Dan Riccio Transitioning to New Project, John Ternus to Lead Apple’s Hardware Engineering Team

• Biden said to be assembling cyber dream team to sort out US govt computer security

• IT Security News Daily Summary 2021-01-25

• 2.28M MeetMindful Daters Compromised in Data Breach

• Outgoing FCC Chair Issues Final Security Salvo Against China

• Breaking Down Joe Biden’s $10B Cybersecurity ‘Down Payment’

• Deloitte & Touche Buys Threat-Hunting Firm

• Is Biden’s Peloton Bike an IoT Cybersecurity Risk?

• Ransomware attack hit WestRock IT and OT systems

• Verizon Launches $75 mmWave 5G Plan for Prepaid Customers

• Designer Shares Deep Dive Into History of Classic Apple Watch Faces

• Decoding Microsoft Defender’s hidden settings

• SonicWall warns customers about zero-day vulnerabilities

• Gartner: The future of AI is not as rosy as some might think

• Passwordless Authentication Provider Axiad Raises $20 Million

• Phishers Target C-Suite with Fake Office 365 Password Expiration Reports

• SonicWall breached through ‘probable’ zero-day vulnerabilities

• Despite Crackdowns, COVID-19 Misinformation Is Still Spreading On Facebook

• Small Security Teams Have Big Security Fears, CISOs Report

• Cisco Secure Endpoint named an Endpoint Prevention and Response (EPR) Leader

• Hands-On With the New Apple Fitness+ ‘Time to Walk’ Feature

• Twitter and Interoperability: Some Thoughts From the Peanut Gallery

• For Many, the Arab Spring Isn’t Over

• Computer vision researchers develop city-scale smart tracking platform

• Clothing Brand Bonobos Notifies Users of Data Breach

• XKCD ‘Allow Captcha’

• BSidesSF 2020 – Fredrick “Flee” Lee’s ‘Keynote: Dumping Traditional Security Teams’

• Cryptomining DreamBus botnet targets Linux servers

• Apple Shares First Look at Upcoming Movie ‘Palmer’ Starring Justin Timberlake

• ZTNA and CASB: Combining Key Pieces of the SASE Puzzle

• Avaddon Ransomware Now Utilizing DDoS Attacks to Force Ransom Payment

• Drupal Addresses PEAR Archive_Tar Vulnerability

Generated on 2021-01-31 23:58:25.643154