IT Security News Weekly Summary – Week 04

• IT Security News Daily Summary 2022-01-30

• Expert releases PoC for CVE-2022-21882 Windows local privilege elevation issue

• Germany’s White Supremacist Problem—and What It Means for the United States

• Latest Proof of Concept Details How iOS Malware May Snoop on Our Devices

• SLTT Organizations Targeted by Jupyter Malware

• Key Features Of Threat Intelligence Platforms

• Are there holes in your cybersecurity map?

• Some macOS 12.2 Users Experiencing Bluetooth-Related Battery Drain Issue During Sleep Mode

• A DDoS Attack Wiped Out Andorra’s Internet

• Security Affairs newsletter Round 351

• Gurman: Redesigned iMac Pro, New AirPods Pro, and More to Launch This Year

• What’s the Deal With Anti-Cheat Software in Online Games?

• Novel device registration trick enhances multi-stage phishing attacks

• Finland Alerted About Facebook Accounts Compromised via Messenger Phishing

• The Lazarus Group uses Windows Update to Spread Malware

• FBI Issued a Warning to U.S Firms Concerning Iranian Hackers

• Week in review: PolKit vulnerability, fake tax apps pushing malware, EU’s bug bounty for open source

• Penetration testing

• NEC Corporation acquires Blue Danube Systems to enhance its 5G product portfolio

• Zadara appoints Tony Craythorne as CRO

• Airspan hires Glenn Laxdal as President and COO

• Okta appoints Brett Tighe as CFO

• AvePoint expands FedRAMP authorization to meet hybrid workplace demands

• Trent Fitz joins Zenoss as CMO

• Get lifetime subscriptions to two apps that will keep your data safe online for $30

• IT Security News Daily Summary 2022-01-29

• Hey Siri, How Old Am I? Some iPhone Users Given the Wrong Age

• Fake Investor John Bernard Sinks Norwegian Green Shipping Dreams

• 5 Reasons Why Email Is the Top Attack Vector

• Apple Warns macOS Catalina Users About Installing macOS 12.3 Beta on Volume With FileVault Enabled

• Microsoft Claims it Countered the Largest-Ever DDoS Attack on Azure Servers

• Vermont Woman Suing State Because It Punished Her For Facebook Posts

• QNAP force-installs update against the recent wave of DeadBolt ransomware infections

• Top Stories: Universal Control Enabled in New Betas, Core i9 vs. M1 Max, and More

• US FCC bans China Unicom Americas telecom over national security risks

• Weekly Update 280

• 105 million Android Devices were Infected with ‘Dark Herring’ Invoice Malware

• Apple Wallet Vaccine Cards | Avast

• Attackers use Azure AD to Enroll Outlook on BYOD and then Send Phishing Emails

• REvil Ransomware Operations Seem Unaffected by Recent Arrests

• Build or Buy your own antivirus product

• SJW Group Appoints James P. Lynch as Chief Accounting Officer, Andrew Walters as Chief Financial Officer; San Jose Water Appoints Peter Fletcher as Vice President – Information Security Officer

• Area 1 Security Continues Strong Momentum in 2021, with Growth Rate Reaching 268% Compared to the Previous Year and Overall Business Growing by 160%

• Zenoss Appoints Trent Fitz as Chief Marketing Officer

• NFTs – Protecting the investment

• The Bitglass Blog

• Kubernetes Security Guide: High-Level K8s Hardening Guide

• Zoom Security Issues Are a Wakeup Call for Enterprises

• Confluent partners with AWS to accelerate cloud adoption with real-time data for organizations

• How Will 5G Technology Alter IoT Security And How Can We Prepare?

• Week in security with Tony Anscombe

• Coronavirus SMS scam offers home PCR testing devices – don’t fall for it!

• Zoom Security Issues a Wakeup Call for Enterprises

• Arkose Labs appoints Brett Johnson as Chief Criminal Officer

• Chris van Staden joins Balbix as CRO

• STG appoints Gee Rittenhouse as CEO of McAfee Enterprise

• Ingram Micro acquires Keenondots to strengthen its cloud platform

• Preserving Health Care Data Security in 2022

• Microsoft Fights Off Another Record DDoS Attack as Incidents Soar

• SailPoint announces AWS region in Japan to support growing demand for identity security

• NCSC warns UK entities of potential destructive cyberattacks from Russia

• California Prevails on Net Neutrality Rules

• IT Security News Daily Summary 2022-01-28

• Best Practices: 5 Risks To Assess for Secure CI Pipeline

• How agencies can prepare for 5G

• DARPA explores electronics recycling to extract critical elements

• Friday Squid Blogging: Cephalopods Thirty Million Years Older Than Previously Thought

• Lawmakers ask Biden to make sure DOD follows climate rules

• Better data for improved criminal justice

• QNAP users still struggling with Deadbolt ransomware after forced firmware updates

• Prepare for CompTIA exams and refresh your resume with this $30 training bundle

• Lazarus APT Uses Windows Update to Spew Malware

• Energy Sector Still Needs to Shut the Barn Door

• AI Weekly: AI supercomputers and facial recognition to verify taxpayers’ identities

• DISA’s assistant to the director to retire in April

• What responders really think about communications tech

• Teen hacker gets remote access to tens of Tesla EVs around the world

• App Store Now Supports Unlisted Apps Discoverable Only With a Direct Link

• WhatsApp Chief Confirms iPad App is a Possibility: ‘We’d Love to Do It’

• Testing iOS 15.4’s New Face ID With a Mask Feature

• Exit interview: Angie Bailey

• CISA Adds Eight Known Exploited Vulnerabilities to Catalog

• LockBit gang claims it stole data from French Ministry of Justice

• Protect APIs against attacks with this security testing guide

• CISA Adds Eight Known Exploited Vulnerabilities to Catalog

• Apple Seeds First Public Beta of macOS Monterey With Universal Control

• Extended reality sees potential, challenges across multiple industries

• Google unveils differential privacy tool for Python developers processing data

• French officials investigating LockBit claim of data theft

• The Looming CISO Mental Health Crisis — and What to Do About It, Part 1

• What’s New in the Federal Zero Trust Strategy?

• 4 data privacy predictions for 2022 and beyond

• Apple Seeds First Public Betas of iOS 15.4 and iPadOS 15.4 With Universal Control, Face ID With Mask Support and More

• Gartner® names Microsoft a Leader in the 2022 Magic Quadrant™ for Enterprise Information Archiving

• Kaspersky stopped more than 30,000 attempts to use the Log4Shell exploit in January

• FBI Issues Warning Over Iranian Cyber Company

• Could AI be used to cheat on programming tests?

• Google unveils new differential privacy tool for Python developers processing data

• Most Ransomware Infections are Self-installed

• MacRumors Giveaway: Win a Massive Bluetti 2048Wh Portable Power Station

• Build a privacy-resilient workplace with Microsoft Priva

• Real-Time Alerting with Snort>

• It’s Data Privacy Day: Here’s How to Stay Protected in 2022

• Lessons Learned From Successive Use of Offensive Cyber Operations Against Ukraine and What May Be Next

• Metaverse vs. data privacy: A clash of the titans?

• Report: 75% of containers found to be operating with severe vulnerabilities

• Zerodium Spikes Payout for Zero-Click Outlook Zero-Days

• Water Utilities Get 100-Day Cybersecurity Plan

• What Role Should Criminal Justice Play in Foreign Relations?

• QNAP update stops Deadbolt ransomware, annoys some users, starts debate

• New Safari Vulnerability Could have given Attackers Access to Your Mac Webcam

• Russia Readies Road Map For Cryptocurrency Regulation

• DeFi platform Qubit Finance begs hacker to return $80 million in stolen funds

• The future of work: Employee privacy

• How to avoid an open source security nightmare

• Scammers target us on social media now more than ever

• Network Security Firm Portnox Raises $22 Million in Series A Funding

• Apple TV Getting New Video Player Features and More With tvOS 15.4

• White House: Industrial Control Systems Cybersecurity Initiative to be extended to the water sector

• Data Privacy Day 2022

• Elon Musk offers $5k reward to hacker of his Private Jet

• Penetration Testing Services: Pricing Guide

• How to use Nmap to scan for open ports

• SolarWinds hackers still active, using new techniques

• Nmap use cases, tools and product comparisons

• Happy Data Privacy Day – and we really do mean “happy” 🙂

• Finnish diplomats’ devices infected with Pegasus spyware

• WhisperGate Malware Corrupts Computers in Ukraine

• A 19 year old security researcher was able to hack 25+ Teslas. Here’s what happened

• QNAP Force-Installs Update After Ransomware Attack

• Your personal data is valuable, and dangerous in the wrong hands. It’s time to protect it better

• Conti, DeadBolt Ransomwares Target Delta, QNAP

• Vulnerabilities in Swiss E-Voting System Earn Researchers Big Bounties

• Zerodium offers $400,000 for Microsoft Outlook RCE zero-day exploits

• Safeguarding consumer data for banks: some guidelines for privacy engineering

• Apple Finally Removing Python 2 in macOS 12.3

• Deals: Apple’s 64GB Cellular iPad Mini 6 Drops to New Low of $599.99

• When it Comes to Stopping IoT Security Camera Breaches, Focus on Procurement

• Apple fixes Safari data leak (and patches a zero-day!) – update now

• Conti, DeadBolt Target Delta, QNAP

• Zerodium Offering $400,000 for Microsoft Outlook Zero-Day Exploits

• More Security Flaws Found in Apple’s OS Technologies

• Microsoft Fends Off Record Breaking 3.47Tbps DDoS Attack

• Intel Fails To Get Spectre, Meltdown Class Action Suits Thrown Out

• US Bans Telecom Giant China Unicom Over Spying Concerns

• 2FA App With 10,000 Google Play Downloads Loaded Well-Known Banking Trojan

• Shipment Delivery Scams Become The Favored Way To Spread Malware

• NCSC Warns UK Of Russian Cyberattacks Amid Ukraine Crisis

• Engineering Manager Jenn Wong on Leading with Empathy and Fearlessness

• Google releases differential privacy tools to commemorate Data Privacy Day

• Shlayer and Bundlore MacOS Malware Strains – How Uptycs EDR Detection Can Help

• Vital Ways To Secure A Startup In 2022

• Apple Shrugs Off Chip Shortage With Record Revenues

• Microsoft Azure customer hit by largest ever 3.47 Tbps DDoS attack

• BlackCat ransomware targeting US, European retail, construction and transportation orgs

• The modern workplace: Will remote tech workers tolerate being monitored?

• Who Wrote the ALPHV/BlackCat Ransomware Strain?

• Epic vs. Apple Takes a Twist As 35 US States and Department of Justice Weigh in to Back ‘Fortnite’ Maker

• VIrusTotal Multisandbox += SecneurX

• What You Need to Know About Data Encryption Right Now

• In the Hacker’s Crosshairs: K-12 Schools

• Conti Ransomware Targets Taiwanese Apple and Tesla Contractor Delta Electronics

• Internet Society condemns UK’s Online Safety Bill for demonising encryption using ‘think of the children’ tactic

• FBI Warns of Hacker Attacks Conducted by Iranian Cyber Firm

• HackerOne Bags $49 Million in Series E Funding

• White House Releases Zero Trust Strategy for Federal Government

• Tracking Secret German Organizations with Apple AirTags

• Beats Fit Pro Launch Worldwide With Similar Features as AirPods Pro

• Silkworm security? Researchers create new authentication method using silk fibers

• Xerox Quietly Patched Device-Bricking Flaw Affecting Some Printers

• Delta Electronics, a tech giants’ contractor, hit by Conti ransomware

• Web-Tracking ‘Cookies’ Meant to Protect Privacy: Inventor

• Hackers Using Device Registration Trick to Attack Enterprises with Lateral Phishing

• iOS 15.4 Will Let You Pay With Apple Pay Using Face ID While Wearing a Mask

• Calculate How Many Phishing Emails Your Existing Security Solution Misses

• NCSC Warns UK Organizations to Prepare for Russian Cyber-Attacks

• How Wazuh Can Improve Digital Security for Businesses

• Google Play app dropped Vultur banking Trojan on Android handsets

• UK security centre urges companies to boost their defences after cyberattacks on Ukraine

• Online Investment Fraud Network Taken Down by Law Enforcement

• Experts devise a technique to bypass Microsoft Outlook Security feature

• Over 100 Million Android Users Installed ‘Dark Herring’ Scamware

• Inherent Vulnerability in Linux Puts Russian OS at Risk

• APT27 Hackers are Backdooring Business Networks in Germany

• Threat Actors Blanket Androids with Flubot & Teabot Campaigns

• Threat Advert is a New Service Strategy Invented by AsyncRAT

• North Korean Hackers Using Windows Update Service to Infect PCs with Malware

• Big Mother is watching: What parents REALLY think about tracking their kids

• LockBit Linux-ESXi Locker Ransomware Variant Targets VMware ESXi Servers

• Data Privacy Day 2022: How Can AI Help in the Fight Against Ransomware?

• North Korean Hackers Return with Stealthier Variant of KONNI RAT Malware

• Malware source code discovered on GitHub puts millions of IoT devices at risk

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• iOS 15.4 Will Let EU Residents Add COVID-19 Vaccine Certificates to Wallet App

• How to Protect All Five Stages of the IoT Security Lifecycle

• Cybersecurity Experts Share Their Predictions for 2022

• Our Cyber Defenses Need to Be Battle-Tested to Withstand Future Threats

• Fitness Trackers Get More Personalized | Avast

• New infosec products of the week: January 28, 2022

• Why we can’t put all our trust into AI

• This Week in Security News – January 28th, 2022

• Ransomware families becoming more sophisticated with newer attack methods

• Ransomware news trending on Google

• Cyber Attack on Iran State TV leads to display of images of dissidents

• Healthcare industry most common victim of third-party breaches last year

• Silk could tie up all-but-unbreakable encryption, say South Korean boffins

• Microsoft Mitigated Record-Breaking 3.47 Tbps DDoS Attack on Azure Customers

• Use of AI to fight insurance fraud hits all-time high

• QNAP Warns of DeadBolt Ransomware Targeting Internet-Facing NAS Devices

• The state of SD-WAN and SASE planning

• Major Texas-based Bank Bolsters Cybersecurity Posture with Addition of IronNet Collective Defense Platform

• Symphony Technology Group Announces Gee Rittenhouse Appointment to Chief Executive Officer of McAfee Enterprise

• ‘Humor, Seriously’ Authors Dr. Jennifer Aaker and Naomi Bagdonas Featured on the Impact Podcast with John Shegerian

• Spending on edge computing to reach $176 billion in 2022

• RedDoorz – 5,890,277 breached accounts

• WhiteSource for Azure Repos scans open source code for security vulnerabilities

• Panorays’ free complimentary offering helps companies defend against supply chain attacks

• Five Data Privacy Tips for Consumers

• Home Affairs seeking support to build out Australia’s identity-matching system

• iOS 15.4 Beta Adds Support for Setting Up Custom Email Domains With iCloud Mail

• Rambus PCIe 6.0 Controller offers data security with integrated IDE engine

• Intel fails to get Spectre, Meltdown chip flaw class-action super-suit tossed out

• How Hackers Compromise the Software Supply Chain

• Fortanix adds support for AWS Nitro Enclaves to protect code and data in-use

• Pindrop partners with Five9 to prevent fraud with voice authentication technology

• Cequence Security collaborates with Tetrate to embed security into cloud native applications

• US DoD staffer with top-secret clearance stole identities from work systems to apply for loans

• Beyond the tick box: What to consider before agreeing to a privacy policy

• US DoD staffer with top-secret clearance stole identities from work to apply for loans

• iOS 15.4 Will Allow Third-Party Apps to Take Full Advantage of iPhone 13 Pro 120Hz ProMotion Displays

• Veriff raises $100 million to advance product expansion and accelerate global growth

• Portnox raises $22 million to deploy cloud-native network security for mid-market organizations

• Censys raises $35 million to accelerate product development and sales operations

• Weaveworks acquires Magalix to strengthen security for Kubernetes applications

• CACI acquires Ashburn to expand secure network modernization capabilities

• macOS 12.3 will break cloud-storage features used by Dropbox and OneDrive

• Android malware can factory-reset phones after draining bank accounts

• FCC tacks China Unicom onto list of Chinese telcos banned in the US

• Microsoft Mitigates ‘Largest Known DDoS Attack’

• What F-Secure learned from phishing 80,000 people

• CertiK adds three new members to its senior leadership team

• Arctic Wolf appoints Todd Ford and Jill Putman to Board of Directors

• BTC-Alpha – 362,426 breached accounts

• US DoD staffer with top-secret clearance stole identities from work SharePoint system to apply for $250k in loans

• QNAP warns NAS users of DeadBolt ransomware, urges customers to update

• Phishing Simulation Study Shows Why These Attacks Remain Pervasive

• Apple Working on ‘Cosmetic Scan’ Trade-In Tool for iPhone

• Hands-On With Universal Control in iPadOS 15.4 and macOS Monterey 12.3

• Radiant Logic expands executive team with two appointments

• Datadobi appoints Matthias Nijs as VP of EMEA Sales

• What is WooCommerce, and Why You Should Care

• Security Service Edge: 4 Core Tenets for Your SASE Journey

• EFF Launches Tracking Global Online Censorship Project to Shine Light on How Content Moderation Affects Freedom of Expression Around the World

• New Tracking Global Online Censorship Site Explains Content Moderation Practices and Impacts

• IT Security News Daily Summary 2022-01-27

• Increasing visibility into municipal water systems

• Apple Reports Record 1Q 2022 Results: $34.6B Profit on $123.9B Revenue [Live Coverage]

• Apple Reports All-Time Quarterly Revenue Records for iPhone, Mac, Wearables, and Services

• Supplies of Apple Products to Improve in March Quarter

• Apple Now Has More Than 1.8 Billion Active Devices Worldwide

• Let’s Encrypt to revoke “mis-issued” certificates

• Update now! Apple patches another actively used zero-day

• Biden Administration Announces ‘Zero Trust’ Strategy For Federal Agencies

• EPA leading White House effort to secure the water sector against cyberattacks

• Teamwork, trust and threat sharing key to cybersecurity

• Puerto Rico was hit by a major cyberattack

• Point of View: Russia’s Biggest Threat Is Its Instability

• Moonbounce is a persistent malware that can survive drive formats and OS reinstalls

• Outlook Security Feature Bypass Allowed Sending Malicious Links

• iOS 15.4’s Face ID With a Mask Feature Requires iPhone 12 or Newer

• The Navy’s plan to crack down on data duplication

• 2FA App Loaded with Banking Trojan Infests 10K Victims via Google Play

• guardDog.ai Joins Propel, Offering Discounts for CEDIA Members

• North Korea-linked Lazarus APT used Windows Update client and GitHub in recent attacks

• iOS 15.4 Adds New Emoji Like Melting Face, Biting Lip, Heart Hands, Troll, and More

• Everything New in iOS 15.4 and iPadOS 15.4: Face ID With a Mask, Emojis, Apple Card Widget, Universal Control and More

• Why VMware Horizon became a ‘top choice’ for Log4j attacks

• SEC looks to expand cyber coverage

• Google Has a New Plan to Kill Cookies. People Are Still Mad

• Apple Releases Security Updates for Multiple Products

• Red Cross Data Breach Update: Hackers Directly Targeted ICRC’s Servers

• Attack Surface Management Play Censys Scores $35M Investment

• White House Boosts Zero Trust with New Cybersecurity Strategy

• Apple Releases Security Updates for Multiple Products

• iOS 15.4 Beta Lets You Use Face ID With a Mask On

• iPadOS 15.4 and macOS Monterey 12.3 Betas Add Universal Control

• Apple Confirms macOS 12.3 Deprecates Kernel Extensions Used by Dropbox and OneDrive

• Popular apps left biometric data, IDs of millions of users in danger

• White House, EPA release 100-day cybersecurity plan for water utility operators

• Shipment-Delivery Scams Become the Favored Way to Spread Malware

• BotenaGo Botnet Code Leaked to GitHub, Impacting Millions of Devices

• How AI can help security teams detect threats

• S3 Ep67: Tax scams, carder busts and crypto capers [Podcast + Transcript]

• Best Managed Security Service Providers (MSSPs)

• Apple Seeds First Beta of tvOS 15.4 to Developers

• Apple Seeds First Beta of watchOS 8.5 to Developers

• Apple Seeds First Betas of iOS 15.4 and iPadOS 15.4 to Developers

• Apple Seeds First Beta of macOS Monterey 12.3 to Developers

• Measure the effectiveness of your Microsoft security with AttackIQ

• Report: Software supply chain attacks increased 300% in 2021

• Florida Considers Deepfake Ban

• IFSEC Seeks Security Pros for New Survey on Physical Access Control

• Israeli Police: From Warrantless Cellphone Searches to Controversial Misuse of Spyware

• What Is the U.S. Government Doing About Uyghur Forced Labor?

• The Global Trust Imperative

• BotenaGo Botnet Code Leaked to GitHub

• Hacker Flags Flaw in Swiss Railway System

• Data Breach at Drug Screening Lab

• Apple Restocks Refurbished iPhone 8 as Lowest-Priced iPhone It Sells

• FluBot and TeaBot malware targeting androids worldwide

• Discover 3 ways to take a holistic approach to data protection

• Data Protection Day 2022: To Protect Privacy, Remember Security

• Cloud-native network access control provider Portnox raises $22M

• Treasury considering state and local grants to implement digital ID systems

• Patch now: A newly discovered critical Linux vulnerability probably affects your systems

• With Cloud the Norm, Insiders Are Everywhere — and Pose Greater Risk

• Heimdal™ Threat Hunting Journal: January E.O.M Edition

• North Korea’s Lazarus APT leverages Windows Update client, GitHub in latest campaign

• LockBit ransomware hits French Ministry of Justice & European firms

• Dark Overlord collaborator imprisoned for trading stolen identities

• Data Privacy Day: Security experts’ tips for 2022

• French Ministry of Justice Targeted in Ransomware Attack

• Apple security update fixes zero-day vulnerability

• FBI Releases PIN on Iranian Cyber Group Emennet Pasargad

• 27-Inch iMac With Nano-Texture Display Unavailable From Apple Until Late March

• Targeted ransomware takes aim at QNAP NAS drives, warns vendor: Get your updates done pronto

• Data Privacy alert as advertisements are following you across the web

• Google Drops FloC For Topics In Cookie Replacement Move

• There’s been a big rise in phishing attacks using Microsoft Excel XLL add-ins

• Army General Falls Victim To Facebook Impersonation Scam

• FBI Releases PIN on Iranian Cyber Group Emennet Pasargad

• Microsoft mitigated a 3.47 Tbps DDoS attack, the largest one to date

• LockBit Ransomware Variant is Now Targeting VMware ESXI Servers

• one-time pad

• Microsoft Saw Record-Breaking DDoS Attacks Exceeding 3 Tbps

• Log4j Proved Public Disclosure Still Helps Attackers

• Censys Completes $35 Million Series B Funding Round Led by Intel Capital

• Barracuda Expands Email and Endpoint Protection Capabilities in MSP Security Offerings

• Lockbit ransomware gang claims to have hacked Ministry of Justice of France

• Deals: Beats Studio Buds on Sale for $109.95 in White ($40 Off)

• Apple Could Add User Authentication to AirPods

• Facebook To Close Down Diem Crypto Venture – Report

• Shipment-Delivery Scams a Fav Way to Spread Malware

• US Says National Water Supply ‘Absolutely’ Vulnerable to Hackers

• Discover and remediate security vulnerabilities faster with Red Hat Insights

• Attackers connect rogue devices to organizations’ network with stolen Office 365 credentials

• Stealthy Excel malware putting organizations in crosshairs of ransomware gangs

• Dark Herring Malware on the Hunt for 105M Android Devices

• Multiple Flaws in Control Web Panel Let Attacker Execute Code as Root on Linux Servers

• 3 Ways to Save Incident Response Time

• NVISIONx lands $4.6M to enhance data risk intelligence platform

• Apple patches Safari data leak (oh, and a zero-day) – patch now!

• Gemini Annual Report 2021: Magecart Thrives in the Payment Card Fraud Landscape

• Kentucky Hospital Reports Network Outage, Care Delays Amid Cyberattack

• Apple Fixes 2 Zero-Day Security Bugs, One Exploited In the Wild

• DeepDotWeb Operator Sentenced To Eight Years Behind Bars

• Let’s Encrypt To Revoke About 2 Million HTTPS Certificates In Two Days

• Indonesia Bars Financial Institutions From Offering Crypto Services

• iOS 15.3 Fixes Issue With HomeKit Camera Thumbnails Failing to Refresh

• The 3 Most Critical Cybersecurity Threats in 2022

• Active Ransomware Recovery: Five Steps for Success

• EyeMed agrees $600,000 settlement over 2020 data breach

• FBI warns over Iranian cyber group, tells organizations to up their defenses

• OffSec Standalone Course Pricing Changes

• How to Evaluate the True Costs of Multi-Factor Authentication

• GitHub Introduces 2FA On Its Mobile Apps

• Numerous ‘Anomalous’ Spyware Campaigns Actively Target Industrial Systems

• 7 Ways to Protect Your Business From Phishing Scams

• New BRATA Android Trojan Variants Exhibit More Sneaky Functionalities

• How to Secure Your SaaS Stack with a SaaS Security Posture Management Solution

• REvil Ransomware Operations Apparently Unaffected by Recent Arrests

• Windows 11 Adoption Strong, Microsoft Insists

• Early Bird Catches the Wormhole: Observations from the StellarParticle Campaign

• Sonatype, which secures open source code, lays groundwork for IPO

• Chaes Banking Trojan Hijacks Chrome Browser with Malicious Extensions

• Patching the CentOS 8 Encryption Bug is Urgent – What Are Your Plans?

• A new highly evasive technique used to deliver the AsyncRAT Malware

• Chaes Banking Trojan Wreaks Havoc Online

• Ransomware gangs are recruiting breached individuals to persuade companies to pay up

• Defending the Supply Chain: Why the DDS Protocol is Critical in Industrial and Software Systems

• White House Publishes Federal Zero Trust Strategy

• API and database issues cause Discord outage

• Apple fixes Mac bug that could have allowed takeover of webcams and browser tabs

• Court papers indicate text messages from HMRC’s 60886 number could snoop on Brit taxpayers’ locations

• VMware Warns of Log4j Attacks Targeting Horizon Servers

• Software Supply Chain Protection Startup Scribe Security Raises $7 Million

• 8 Best Gaming Laptops 2022 in Philippines – Review & Buying Guide

• The Enemy in Your Pocket – Intego Mac Podcast Episode 224

• BT To Recruit More Than 600 Apprentices

• Konni remote access Trojan receives ‘significant’ upgrades

• DeepDotWeb operator sentenced to eight years behind bars

• Attackers add rogue PC to victims’ networks in this sneaky phishing campaign

• Mentoring and Role Models Key to Improving Female Representation in Cybersecurity

• What is Eradication in Cybersecurity? An Essential Part Of Incident Response Plans

• The Biggest Data Breaches of 2022

• QNAP: Act Now to Mitigate DeadBolt Ransomware

• Nearly $9bn Laundered in Cryptocurrency in 2021

• Merck wins Not Petya claim – but the future of cybersecurity insurance is complicated

• 2022 Cybersecurity Forecast: The Threat Landscape & Protecting Your Organization

• Magecart Allegedly Hacked the Segway Online Store

• Apple’s Tim Cook Granted Restraining Order Against Alleged Stalker

• North Korea Loses Internet in Suspected Cyber-Attack

• Widespread FluBot and TeaBot Malware Campaigns Targeting Android Devices

• Apple releases macOS 12.2, iOS 15.3, watchOS 8.4 and more

• Australia Phishing Survey Results | Avast

• QNAP Warns NAS Users of DeadBolt Ransomware Attacks

• Experts analyze first LockBit ransomware for Linux and VMware ESXi

• InfoSec Experts Advise On A 12-year-old Vulnerability Discovered In Polkit For Linux

• Hackers Infect macOS with a New Backdoor Known as DazzleSpy

• This Android Malware Wipes Your Device After Stealing Data

• Malware resets Android devices after performing fraudulent wire transfers

• What Data Privacy Day 2022 Means for Individuals

• Do you know what your supply chain is and if it is secure?

• Indonesia bars financial institutions from offering crypto services

• Hackers Using New Evasive Technique to Deliver AsyncRAT Malware

• How would zero trust prevent a Log4Shell attack?

• What makes achieving cyber resilience difficult?

• DDoS Cyber Attack downs internet in North Korea

• China to spy through satellites over internet

• Hackers Infect Apple’s macOS by Leveraging a Safari Web Browser Exploit

• Digital IDs under attack: How to tackle the threat?

• Apple Releases iOS and macOS Updates to Patch Actively Exploited 0-Day Vulnerability

• 65% of organizations continue to rely on shared logins

• Familiarity with vaccine passport tech is laying the foundations for digital IDs

• U.S. Cyber Command Operation Targets ‘Real-life Cyber Threats’

• New Opportunity: Join (ISC)² Regional Event Committees

• The Future of Work without Workers

• Exploring influences on SSC grades for insurance companies

• Fraud detection and prevention market to reach $75,139.66 million by 2028

• Cybersecurity Laws – Get Ready Today to Save Some Money Tomorrow

• MetricStream ConnectedGRC reduces risk exposure for organizations

• Sotero data security fabric protects any data asset regardless of location

• DPP by Virsec secures software workloads against advanced cyberattacks

• China orders web operators to spring clean its entire internet

• Upcoming iOS Update Will Allow iPhones to Accept Credit Cards Directly Using NFC

• Canadian officials take down dark web marketplace, issue $300,000 in fines

• Tanium expands partnership With vArmour to address key CISA guidelines on threat prevention

• Verizon collaborates with Atos to strengthen 5G edge offers for businesses

• Every breath you take, every move you make: Do fitness trackers pose privacy risks?

• JFrog’s New Tools Flag Malicious JavaScript Packages

• IT Pros May Use Cloud, But They Trust On-Prem More

• Hunters raises $68 million to strengthen sales and partnerships across North America and EMEA

• Dremio raises $160 million to accelerate its technology innovation

• Worklyn Partners acquires Quadrant Information Security to expand security services

• KPMG accelerates investigations into cyberattacks with SentinelOne’s XDR platform

• Qualys Research Team Warns of Significant polkit Vulnerability Affecting All Linux Users>

• Yolanda Lee Conyers joins Seagate Board of Directors

• Appfire appoints Doug Kersten as CISO

• Apple Patches ‘Actively Exploited’ iOS Security Flaw

• ArmorCode Closes $11 Million Seed Funding Round

• Millions of Routers, IoT Devices at Risk as Malware Source Code Surfaces on GitHub

• ForgeRock continues to expand across Asia to support growing customer demand for cloud services

• tru.ID launches SIM-based authentication services in India

• TIA releases supply chain security standard for the ICT industry

• AirTag use in theft and stalking incidents prompts Apple to update its Personal Safety User Guide

• Cybersecurity: White House rolls out zero trust strategy for federal agencies

• TrickBot Crashes Security Researchers’ Browsers in Latest Upgrade

• Cybercriminals are exploiting COVID-19 tests in phishing attacks

• OMB Issues Zero-Trust Strategy for Federal Agencies

• IT Security News Daily Summary 2022-01-26

• BERT Embeddings: A New Approach for Command Line Anomaly Detection

• New DazzleSpy malware attacks macOS

• Apple Fixes 2 Zero-Day Security Bugs, One Exploited in the Wild

• Build a strong cyber resilience strategy with existing tools

• Apple fixed the first two zero-day vulnerabilities of 2022

• Apple Releases Safari Technology Preview 139 With Bug Fixes and Performance Improvements

• Passwords are Like Toothbrushes – Not to Be Shared!!

• How I Got Pwned by My Cloud Costs

• Port of Los Angeles & IBM Launch New Cyber Resilience Center

• ‘Dark Herring’ Billing Malware Swims onto 105M Android Devices

• Alert: Let’s Encrypt to revoke about 2 million HTTPS certificates in two days

• DISA awards Thunderdome zero trust prototype

• Watchdog: HUD disaster relief could use better data collection, analysis

• Integrating zero-trust practices into private 5G networks

• DeadBolt ransomware targeting QNAP NAS storage devices

• German intelligence agency warns of China-linked APT27 targeting commercial organizations

• How big does your quantum computer need to be?

• Montana builds data-driven broadband coverage map

• New Year, New Threats: 4 Tips to Activate Your Best Cyber-Defense

• Data, fines and threats to compel water conservation

• Loki, Godzilla, WandaVision, Justice League top list of most pirated content in 2021

• Update your iPhone and iPad right now. Apple just released a bunch of security fixes

• Cybercriminals Love Supply-Chain Chaos: Here’s How to Protect Your Inbox

• Easily Exploitable Linux Flaw Exposes All Distributions: Qualys

• Best Network Monitoring Tools for 2022

• Deals: Get the 64GB Wi-Fi iPad Air for $539 ($60 Off)

• Apple Fixed iCloud Bug Causing Syncing Issues for Third-Party Apps

• KONNI evolves into stealthier RAT

• TrickBot malware now crashes researchers’ devices to evade analysis

• Cybersecurity’s challenge for 2022 is defeating weaponized ransomware

• Experts Urge Firms to Patch Trivial-to-Exploit Flaw in Linux PolicyKit

• Experts Reported Data Theft in Dozens of Companies Through Modified 1C Modules

• Microsoft discloses ‘large-scale’ phishing campaign that uses new tactic

• Sophisticated Threat Actor Targets Governments, Defense Industry in Western Asia

• Apple Releases tvOS 15.3 for Apple TV HD and Apple TV 4K

• Apple Releases HomePod Software 15.3

• Apple Releases watchOS 8.4 With Fix for Apple Watch Charging Bug

• Apple Releases iOS 15.3 and iPadOS 15.3 With Fix for Safari Bug That Leaks Browsing Activity

• Apple Releases macOS Monterey 12.2 With Safari Vulnerability Fix

• Linux Bug in All Major Distros: ‘An Attacker’s Dream Come True’

• Cyber Insights 2022: Identity

• “PwnKit” security bug gets you root on most Linux distros – what to do

• Cybersecurity Is Broken: How We Got Here & How to Start Fixing It

• Report: Phishing Attacks Sustain Historic Highs

• Senate Committee passes new antitrust bill aimed at Big Tech companies

• White House starts the clock on zero trust adoption

• Best Cybersecurity Research Paper Revealed

• Benchmarks Confirm Intel’s Latest Core i9 Chip Outperforms Apple’s M1 Max With Several Caveats

• Intel Celebrates As EU Court Strikes Down 2009 Antitrust Fine

• Revelstoke nabs $13M to launch low-code SOAR solution

• Diversity and the cyber workforce

• Ransomware is still the biggest security worry for business, but it’s not the only headache

• #DataPrivacyWeek: Online Trackers Can Detect 80% of Users’ Browsing History

• EyeMed Fined $600k Over Data Breach

• Evolved phishing: Device registration trick adds to phishers’ toolbox for victims without MFA

• WhisperGate Wiper Malware Far More Dangerous Than Previous Malware

• New DazzleSpy malware infects macOS devices through hacked websites

• Cybercriminals laundered at least $8.6 billion worth of cryptocurrency in 2021: report

• New Open Source Tool Helps Identify EtherNet/IP Stacks for ICS Research, Analysis

• VPNLab.net Shuttered in Latest Spate of Global Takedowns

• New DeadBolt Ransomware Targets NAT Devices

• Deals: Take $50 Off the Apple Watch Series 7, Starting at $349 for 41mm GPS

• Merck wins NotPetya ransomware attack legal battle

• NIST releases final cybersecurity assessment guidance

• More than 90% of enterprises surveyed have been hit by successful cyberattacks

• Cybercriminals exploiting COVID-19 tests in phishing attacks

• New vulnerability rating framework aims to fill in CVSS gaps

• New DeadBolt ransomware targets QNAP NAS devices

• Threats to the 2022 Winter Olympics

• Mark Zuckerberg’s botched cryptocurrency project is reportedly for sale

• US Commerce Dept Warns Of Severe Chip Shortages

• Virtual Event Today: Ransomware Resilience & Recovery Summit – Doors Are Open

• iPhone 14 With eSIM Only Will Likely Be Optional Model, Says Analyst

• The Future of Consumer Tech in Business

• Log4J: BlackBerry finds Prophet Spider access broker exploiting VMware Horizon

• Why It’s Time to Rethink Incident Response

• A Bug Lurking For 12 Years Gives Attackers Root On Every Major Linux Distro

• New York Fines EyeMed $600k After Data Breach Investigation Finds Security Flaws

• What Enterprises Should Learn From Merck’s $1.4 Billion Insurance Lawsuit

• Chinese Hackers Target German Pharma And Tech Firms

• Experts warn of potential cyber fallout amid Russia-Ukraine tensions

• Google sued over deceptive location tracking

• IT pros say privacy regulations are more helpful than harmful

• Apple Pays Out $100,000 for Webcam, User Account Hacking Exploit

• Slim.AI Raises $31 Million to Secure Cloud-Native Applications

• WireGuard vs. OpenVPN: Comparing Top VPN Protocols

• iPhone Becomes Top Smartphone in China for First Time in Six Years

• Apple Launches Black Unity Braided Solo Loop With ‘Unity Lights’ Watch Face

• Protecting National Security, Cybersecurity and Privacy While Ensuring Competition

• Windows Update has changed over the years. Here are 25 group policies to avoid

• 10 Years Later, What Did LulzSec Mean for Cybersecurity?

• Scribe Security raises $7M to protect software supply chain

• Identity and authentication in the metaverse

• Threat Actors Blanket Androids with Flubot, Teabot Campaigns

• Apple Pays Out $100,000 for User Account, Webcam Hacking Exploit

• Webinar: How to See More, But Respond Less with Enhanced Threat Visibility

• Initial Access Broker Involved in Log4Shell Attacks Against VMware Horizon Servers

• How Well-integrated Tech Can Boost Your Organization’s Security

• OpenSubtitles Hacked – Over 7 million Subscribers Email, IP Addresses & Usernames Leaked

• Microsoft warns of phishy OAuth apps

• Initial Access Broker Involved in Log4Shell Attack Against VMware Horizon Servers

• VMware urges customers to patch VMware Horizon servers against Log4j attacks

• Slim.AI lands $31M to make container security ‘easy’ for developers

• Polkit Vulnerability Provides Root Privileges on Linux Systems

• Introducing Cisco Responsible AI – Enhancing Technology Transparency and Customer Trust

• Privacy Becomes Mission Critical

• WhisperGate Reflects The Gray Area Of Destruction, Says Expert

• Will Meta’s Ai Supercomputer Combat A New Breed Of Cyberfraud? Expert Reaction

• New Microsoft Phishing Email, Expert Weighs In

• SASE Solutions Won’t Secure The Edge Alone

• Segway Online Store Hacked via Magecart

• Best Practices: 5 Risks To Assess for Secure CI Pipeline

• DazzleSpy: Pro-democracy org hijacked to become macOS spyware distributor

• The Log4j flaw hasn’t led to massive hacking attacks. But that doesn’t mean the threat is over

• Europe’s Hypocrisy Over Personal Data Privacy Exposed

• Apple’s iCloud Service Experiencing Outage [Update: Apple Says Fixed]

• Cyberinsurance companies don’t want to pay out for “acts of war”

• Teen hacker gets remote access to tens of Tesla EVs around the world

• IMF Urges El Salvador To Drop Bitcoin As Legal Tender

• SonicWall Customers Warned of Possible Attacks Exploiting Recent Vulnerability

• Two More Poles Identified as Victims of Hacking With Spyware

• TrickBot Crashes Browser Tabs to Hinder Malware Analysis

• QNAP Devices Targeted in Ransomware Attack

• Protecting Critical Infrastructure Against Cyberattacks

• Three Key Facts About AI-Driven Network Detection and Response

• Infosec big dogs break out the bubbly over UK government’s latest cyber strategy emission

• Breach into Mahesh Bank’s Servers, Transfer Massive Amounts

• UK Government Launches First Ever Cyber Security Strategy

• ICS Security: What It Is and Why It’s a Challenge for Organizations

• PwnKit: Local Privilege Escalation bug affects major Linux distros

• Apple’s iCloud Service Experiencing Outage [Update: Fixed]

• DazzleSpy: macOS backdoor delivered through watering hole attacks

• Check Point Harmony Connect SASE just got Sassier

• Trickbot will now try to crash researcher PCs to stop reverse engineering attempts

• Government Trials Effort to Make Bug Scanning Easier

• Experts Reveals 29% Surge in Bugs Used by Ransomware Actors

• Fighting Supply Chain Email Attacks With AI

• 1-15 January 2022 Cyber Attacks Timeline

• Google Sued For ‘Deceptive’ Location Tracking Practices

• Home Working Drives 44% Surge in Insider Threats

• UK NCSC Releases Nmap NSE Scripts to Discover Unpatched Flaws

• PolKit vulnerability can give attackers root on many Linux distros (CVE-2021-4034)

• Servers for Dark Souls 3 Have Been Shut Down Due to a Critical RCE Bug

• How Australia’s Leader Lost Control of His Chinese Social Media Account

• WeChat Account Of Australian Prime Minister Removed

• UK government security center, i100 publish NMAP scripts for vulnerability scanning

• Infosec chap: I found a way to hijack your web accounts, turn on your webcam from Safari – and Apple gave me $100k

• Build your own Android security product

• Privacy Policies Are Hard to Read | Avast

• Google Drops FLoC and Introduces Topics API to Replace Tracking Cookies for Ads

• PrinterLogic fixes high severity flaws in Printer Management Suite

• Bipartisan Cybersecurity Legislation — Continuing the Progress in 2022

• Open-source code: How to stay secure while moving fast

• Product showcase: CIOs can optimize and secure hybrid IT environments with Runecast

• IBM develops a Cyber Resilience Center for Los Angeles

• Now jail for tech bosses in UK over Data Security concerns

• 12-Year-Old Polkit Flaw Lets Unprivileged Linux Users Gain Root Access

• Buy now, pay later fraud, romance and cryptocurrency schemes top the list of threats this year

• Proactive software supply chain security becoming critical as threats rise

• Biden administration touts ‘significant progress’ in Made in America Office’s first year

• How to achieve greater cyber resiliency

• What’s in for mobile operators this year?

• F5 Reports 10% First Quarter Revenue Growth Led by Strong Software Demand

• Hutch Incubator Announces a New Cohort of Digital Services Companies

• No Excuses: Get Your (ISC)² Certification Done in 2022

• What’s Next for Cybersecurity in 2022?

• DDoS protection and mitigation market to reach $6.7 billion by 2026

• Containment, Communication, and Remediation: The 3 Keys to a Breach Response

• CyberSheath Federal Enclave offers cybersecurity compliance requirements for federal contractors

• LiveAction ThreatEye NV provides visibility into encrypted traffic and network anomalies

• SafeBreach’s free assessment allows enterprises to utilize breach and attack simulation

• ISG Executive Insights helps users manage their complex supplier ecosystems

• Ivanti announces solutions and enhancements to automate complicated workflows

• Emotet Uses Unconventional IP Address Formats to Spread Malware & Evade Detection

• Samsung’s fingerprint security IC prevents fraudulent transactions made with stolen cards

• GitHub enables two-factor authentication mechanism through iOS, Android app

• Revelstoke Launches With SOAR Platform to Automate SOCs

• Samsung to Unveil New Flagship Smartphones at February 9 ‘Unpacked’ Event

• Apple’s iCloud Service Experiencing Outage

• Linux distros haunted by Polkit-geist for 12+ years: Bug grants root access to any user

• Safari Flaws Exposed Webcams, Online Accounts, and More

• Accenture collaborates with Celonis to help organizations optimize business processes

• Watering hole deploys new macOS malware, DazzleSpy, in Asia

• macOS 12.3 Will Include Cloud Storage Changes Affecting Dropbox and OneDrive

• Beats Studio Buds Gain Battery Pop-Up, Instant iCloud Pairing and More With New Firmware

• Expereo partners with Cato Networks to offer managed SASE services worldwide

• UK govt releasing Nmap scripts to find unpatched vulnerabilities

• Testing Intel’s 12th-gen Alder Lake laptop CPUs: Many cores make light work

• Booby-trapped sites delivered potent new backdoor trojan to macOS users

• Nvidia ready to abandon Arm acquisition, report says

• Here’s what Apple might announce at a spring event this March

• Survey: CIOs aren’t banking on TMF for modernization

• Splunk appoints Rolddy Leyva as Chief Diversity Officer

• Threat Actors Use Microsoft OneDrive for Command-and-Control in Attack Campaign

• The Benefits of Using a VPN on Your Home Network

• Equifax announces international expansion of its verification services

• IT Security News Daily Summary 2022-01-25

• ProtonMail Launches Email Tracking Protection For Web-Based Systems

• Microsoft Restricts Excel 4.0 Macros By Default To Contain Malware Attacks Via Malicious Documents

• Cyber-Partisans hackers hit Belarus railroad system with ransomware attack

• CISA preps update to the zero trust maturity model

• F5 beats Wall Street expectations, warns of supply chain constraints in 2022

• Segway e-store compromised in a Magecart attack to steal credit cards

• Sophos: Log4Shell impact limited, threat remains

• How Does Threat Modeling Work in Software Development?

• The Data-Centric Approach to Data Privacy

• Canadian government investigating hacking incident

• Why the Belarus Railways Hack Marks a First for Ransomware

• PwnKit: pkexec Local Privilege Escalation Vulnerability Discovered

• MacOS Malware ‘DazzleSpy’ Used in Watering-Hole Attacks

• Segway Hit by Magecart Attack Hiding in a Favicon

• Ozzy Osbourne NFTs Used to Bite Off Chunk of Crypto Coin

• Cyberattacks on Squid Game Minecraft Tourney Take Down Andorra’s Internet

• New Mexico Files Cybersecurity Bills

• LA Launches Cyber Resilience Center

• What is shellcode and how is it used?

• Linux vulnerability can be ‘easily exploited’ for local privilege escalation, researchers say

• UK NCSC is going to release Nmap scripts to find unpatched vulnerabilities

• Apple Explains How to Stay Safe With AirTag and More in Personal Safety Guide

• Nvidia Likely Pulling Out of Arm Acquisition After Failing to Win Regulatory Approval

• Apple Planning New Unity and Lunar New Year Apple Watch Activity Challenges in February

• Apple Updates Beats Studio Buds Firmware

• The Biden Administration’s Aggressive Policy Changes to Combat Corruption

• Ransomware to overtake phishing as top cause for data compromises, report says

• Bernalillo County ransomware attack still felt weeks later

• Scary Fraud Ensues When ID Theft & Usury Collide

• Apple’s $95 Million Settlement Over Refurbished Replacement Devices Not Being ‘Equivalent to New’ Moves Forward

• New MacOS Malware ‘DazzleSpy’ Used in Watering-Hole Attacks

• New macOS Malware ‘DazzleSpy’ Used in Hong Kong Attacks

• EU Ready to Send a Mission to Kiev to Fight Cyberattacks

• Snag a 4-pack of Tile Mates for just $39 and never lose your keys again

• Google reveals ‘Topics’ cookie replacement, acknowledges FLoC was problematic

• 8 Security Startups to Watch in 2022

• Here’s a First Look at the iPhone’s Convenient Hotel Room Key Feature

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of January 17, 2022

• Tax scam emails are alive and well as US tax season starts

• Striking a Balance Between Cybersecurity Awareness and Anxiety

• Indian Crypto Wallets Targeted by Newly Discovered ‘BHUNT’ Malware

• Cyber-Attack on Global Affairs Canada

• EXPLORE Security 2022: A Behind the Scenes Look with Cisco at the Security Startup World

• How CISOs are preparing to tackle 2022

• UK’s NCSC Pushes NMAP Scanner Scripts to Fill Defender Gap

• As IoT Attacks Increase, Experts Fear More Serious Threats

• Azure DDoS Protection—2021 Q3 and Q4 DDoS attack trends

• DDoS attacks on Minecraft event crippled the internet of a European country

• AdSanity, AccessPress Plugins Open Scads of WordPress Sites to Takeover

• 4 Steps Toward Knowing Your Exploitable Attack Surface

• Spotify Still Doesn’t Offer AirPlay 2 Nearly Six Months After Last Promising to Support the Feature

• SEC chair eyes tougher cyber rules to protect investors against hackers

• Volkswagen fires employee for exposing Cyber Security Vulnerabilities

• What does an IT security manager do?

• Sophisticated attackers used DazzleSpy macOS backdoor in watering hole attacks

• Merck Wins Insurance Lawsuit re NotPetya Attack

• Google Sued In US Over Deceptive Location Tracking

• Russia Makes More Arrests, But Cybercrime Harboring Reputation Hard To Shake

• Hacktivists Say They Hacked Belarus Rail System To Stop Russian Military Buildup

• BRATA Android Trojan Updated With Kill Switch That Wipes Devices

• Linux Servers At Risk Of RCE Due To Critical CWP Bugs

• Endpoint Antivirus Detection Has Reached its Apex

• Meta Building Fastest AI Supercomputer In The World

• WORM (write once, read many)

• Trellix finds OneDrive malware campaign targeting gov’t officials in Western Asia

• Hackers hijacking Instagram accounts of companies and influencers, demanding ransom

• Sophos: Log4Shell would have been a catastrophe without the Y2K-esque mobilisation of engineers

• PrinterLogic Patches Code Execution Flaws in Printer Management Suite

• Tesla Insurance Customers Can Now Add Their Insurance Cards to Apple Wallet

• Deals: 32GB Apple TV 4K on Sale for $159.99 ($19 Off)

• Chinese APT Hackers Deploys MoonBounce Implant In UEFI Firmware

• Cyber-Physical Security: What It Is and What You Should Do

• TianySpy Malware Uses Smishing Disguised as Message From Telco

• XDR Firm Hunters Raises $68 Million in Series C Funding Round

• Hackers Exploited MSHTML Flaw to Spy on Government and Defense Targets

• India Planning Homegrown Operating System to Rival iOS and Android

• Apple Announces Macro Photography ‘Shot on iPhone’ Challenge

• Apple Expected to Report Best Quarter in Company History

• Critical SonicWall RCE Bug Actively Targeted by Threat Actors

• Why Your Business Continuity Plan Should Cover Communication and Office Access

• Hunters lands $68M for cloud-driven security operations platform

• This cruel Android malware wipes phones after stealing money

• Data breaches reached an all-time high in 2021

• This sneaky ransomware is now targeting Linux servers, too

• BRATA Android Trojan Updated with ‘Kill Switch’ that Wipes Devices

• UK Government Announces New Cyber Strategy to Protect Public Sector

• Washington’s Election Misinformation Bill Demonstrates Dangers of Compromising First Amendment Values

• Users might have no idea their accounts are in danger

• Nvidia Preparing To Abandon $40bn ARM Acquisition – Report

• Combating the Surge in Retail Theft and E-Commerce Fraud With Open Source Intelligence

• Revelstoke Emerges From Stealth With SOAR Platform

• SentinelOne XDR enables growing list of top incident response firms

• Staff negligence is now a major reason for insider security incidents

• 53% Of Medical Devices Have A Known Critical Vulnerability

• Dark Souls Servers Taken Down Amid Hacking Reports

• OpenSea loophole allows purchase of NFTs for discounted prices

• Android Malware BRATA Is More Dangerous than Ever

• Why is cybersecurity one of the best fields for young people to enter?

• Software is crammed full of bugs. This ‘exciting’ project could banish most of them

• Microsoft warns about this phishing attack that wants to read your emails

• Application Security Company ArmorCode Raises $8 Million

• Delay in Creating New Cybersecurity Board Prompts Concern

• TrickBot Malware Using New Techniques to Evade Web Injection Attacks

• Hackers Infect macOS with New DazzleSpy Backdoor in Watering-Hole Attacks

• Twitter Close Friends Feature in Beta Now Called ‘Flock’ With 150-Person Limit

• Global Affairs Canada Was Recently Hit by a Cyberattack

• Vodafone To Switch Off 3G Network Next Year

• ArmorCode adds $8M for comprehensive application security platform

• Canada’s Foreign Ministry Targeted In Cyberattack

• Attackers are actively targeting critical RCE bug in SonicWall Secure Mobile Access

• One In Five UK Businesses Have No Incident Plan When It Comes To Cyber Breaches

• CyberSecurity Burnout: The Critical Risk For Organisations To Address In 2022, ThreatConnect Research

• Global Cybersecurity Study: Insider Threats Cost Organizations $15.4 Million Annually, Up 34 Percent From 2020

• DHS Issues Warning About Potential Russian Cyber Attack On The US

• Moonbounce is a persistent malware that can survive drive formats and OS reinstalls

• Port of Los Angeles Launches Cyber Resilience Center

• AT&T Cybersecurity Insights Report: Securing the Edge

• Belarus Hacktivists launch ransomware on Railway

• EU launches bug bounty programs for five open source solutions

• Citizen satisfaction with federal government services hits all-time low

• Experts Call for More Open Security Culture After VW Sacking

• Julian Assange Wins Right To Ask Supreme Court For Extradition Appeal

• Online Safety Bill Is A ‘Missed Opportunity,’ MPs Warn

• Belarus Activists Fire Ransomware at State Railway

• Cyber Essentials Overhauled for New Hybrid Working Era

• Has that password been compromised?

• UK government opens consultation on medic-style register for Brit infosec pros

• OWASP and Its 10 Vulnerabilities

• SparkCognition, which develops AI solutions for a range of industries, nabs $123M

• Mirai splinter botnets dominate IoT attack scene

• Fewer-Than-Expected Log4j Attacks, but Mirai Joins the Fray

• Emotet Spam Campaigns Use Unconventional IP Addresses to Avoid Detection

• ICO Disagrees With Government-Backed Encryption Campaign

• ISO27001:2021 – A New Way of Working

• Looking for adding new detection technologies in your security products?

• Podcast Episode: Data Doppelgängers

• Yes, your data is special. But do you know how special?

• Mobile Banking Trojan BRATA Gains New, Dangerous Capabilities

• Hackers Using New Malware Packer DTPacker to Avoid Analysis, Detection

• Beware of fake tax apps pushing malware

• 53% of medical devices have a known critical vulnerability

• Strong security starts with the strengthening of the weakest link: passwords

• Cyber Attack on Canada Foreign Affairs department

• Facebook owner Meta builds the world’s powerful AI Supercomputer

• Latest version of Android RAT BRATA wipes devices after stealing data

• Why organizations should consider adopting cloud governance as code

• A New Spyware Campaign Attack Industrial Enterprises To Steal Corporate Credentials

• AI to greatly enhance urban surveillance technologies

• When It comes to Cybersecurity – An ounce of prevention

• See No Evil, Hear No Evil: The Use of Deepfakes in Social Engineering Attacks

• ISO27001:2022 – A New Way of Working

• Healthcare fraud detection market to grow steadily by 2026

• Belarusian activists launch ransomware attack against railway in protest of dictatorship, Russian troop surge

• Deepfence ThreatMapper 1.2.0 helps DevSecOps professionals identify critical vulnerabilities

• Borderless Security launches FilesDNA to protect electronic document sharing

• Pentera’s security validation platform reduces corporate cybersecurity risk

• OpenSea to reimburse people affected by loophole used to purchase NFTs below market value

• Belarus Hacktivists Target Railway in Anti-Russia Effort

• Silicon Labs announces BG24 and MG24 wireless SoCs to improve AI/ML performances

• Darwinbox nabs $72M for its all-in-one HR cloud software solution

• Comcast Business collaborates with Nokia to bring private 5G networks to enterprises

• Guardicore partners with Medigate to secure healthcare networks from ransomware attacks

• LogRhythm and SecLytics offer cybersecurity solutions for Middle East organizations

• Internet service returns to Burkina Faso and Yemen after coup, bombings

• How I hacked my friend’s PayPal account

• Synalogik raises £3 million to enhance its software solution across different markets

• Underline selects Cynamics to neutralize security incidents in real time

• EU to fund bug bounty programs for LibreOffice, Mastodon, three others

• Hive View security camera customers left in the dark as some gear gives up the ghost

• Twitter’s top security staff out after incoming CEO shakes things up

• Can Apple Macs get Viruses?

• Top Network Access Control (NAC) Solutions for 2022

• Trickbot Injections Get Harder to Detect & Analyze

• Test Your Team, Not Just Your Disaster Recovery Plan

• Data Privacy Week 2022: The Security Awareness Canary in the Coalmine

• OpenText expands its executive leadership team with strategic appointments

• IDEMIA NSS appoints Patrick Clancey as CEO

• No easy fix for ID verification for government benefits

• Biden administration confirms it will mostly pause punishment of unvaccinated feds

• DHS: Americans should be prepared for potential Russian cyberattacks

• Linux Servers at Risk of RCE Due to Critical CWP Bugs

• Personal identifying information for 1.5 billion users was stolen in 2021, but from where?

• Imperva Champions Data Privacy Week 2022

• Gillian Tiltman joins Iron Mountain as SVP and Head of Investor Relations

• Segway store compromised with Magecart skimmer

• IT Security News Daily Summary 2022-01-24

• Report: Cloud adoption grew 25% in the past year

• DC, 3 States Sue Google Saying it Invades Users’ Privacy

• Monero and the complicated world of privacy coins

• European Privacy Regulator Calls For Ban On Facebook Political Microtargeting

• DHS Sounds Alarm on Potential for Major Russian Cyberattacks on US

• Registration for the (ISC)² Entry-Level Cybersecurity Certification Exam Pilot Program Is Now Open

• A flaw in Rust Programming language could allow to delete files and directories

• WCF Transport Security With Certificate Authentication — Test Validation With MSTest V2

• Red Cross worried about misuse of stolen data by nation states and cybercriminals after hack

• MoleRats APT Launches Spy Campaign on Bankers, Politicians, Journalists

• Major attacks using Log4j vulnerability ‘lower than expected’

• Surge in Malicious QR Codes Sparks FBI Alert

• The Case for Backing Up Source Code

• Researchers warn of new Rug Pull scam through fraudulent crypto tokens

• A USAF initiative for the hybrid workplace

• Dark Souls 3 Servers Shut Down Due to Critical RCE Bug

• REvil gang member arrests strike fear among cybercriminals on the Dark Web

• Court Awards Merck $1.4B Insurance Claim Over NotPetya Cyberattack

• Top 10 ransomware targets in 2022 and beyond

• Tens of AccessPress WordPress themes compromised as part of a supply chain attack

• Deals: Apple’s 256GB M1 MacBook Air Drops to $849.99 ($149 Off)

• Court block of contractor vaccine mandate does not bar workplace safety measures

• Mobile apps help community with annual homeless count

• CISA Publishes Infographic on Layering Network Security Through Segmentation

• Code Injection Vulnerability Found In HTML Mail WordPress Plugin

• Potential for Russian cyberattack against U.S. ‘not to be taken lightly’

• Log4j: Mirai botnet found targeting ZyXEL networking devices

• IRS to Require New ID Verification

• Ransomware Operators Are Feeling the Heat

• CISA Publishes Infographic on Layering Network Security Through Segmentation

• Deals: AirPods 2 Discounted to $99.99 and More AirPods Sales (Up to $100 Off)

• REGISTER TODAY FOR THE (ISC)² ENTRY-LEVEL CYBERSECURITY CERTIFICATION PILOT EXAM

• Agencies still rely on username-password for access management

• Can Apple Computers get Viruses?

• SBA Announces $3m Cybersecurity Program

• Developers Unhappy With Bug Causing iCloud Unreliability

• Facebook Trumpets Massive New Supercomputer

• Microsoft Restricts Excel 4.0 Macros by Default

• NSF Awards $29m to Cybersecurity Scholarships

• AT&T Bringing $180/Month 5-Gigabit Internet to 70 Cities

• What the Supreme Court’s Rejection of the Employer Vaccinate-or-Test Rule Means for Biden’s Agenda

• Discord scammers go CryptoBatz phishing

• The Infraud Organization Group Members Arrested by Russian Authorities

• Two in Five IT Security Managers Considering Quitting Their Jobs

• Fundamentals are best in cybersecurity and enterprise software, says Wolfe’s Zukin

• Suspected Founder of Hacker Group The Infraud Organization Arrested in Moscow

• Singapore Police Warns of Phony Bank Hotlines in Google Search Advertisements

• Multilingual Cybersecurity Awareness Training adapted for your needs

• What Hackers Want from Your Company

• CWP Flaws That Expose Servers to Remote Attacks Possibly Exploited in the Wild

• Pennsylvania not to use taxpayers money for Ransomware Payments

• Warning issued over tampered QR codes

• Microsoft is now disabling Excel 4.0 macros by default

• 5 Ways to Increase Your Cybersecurity and Reasons for Implementing Them

• Hacked AccessPress Site Served Backdoored WordPress Plugins, Themes

• ZTNAs Address Requirements VPNs Cannot. Here’s Why.

• Dutch Regulator Says Apple’s Plan for Third-Party In-App Payments is Insufficient, Fines Apple 5 Million Euros

• Three Months After Launch, Apple Still Struggling to Meet Demand for Redesigned 14-Inch and 16-Inch MacBook Pro

• Dark Souls servers taken offline over hacking fears

• Deepfence brings ‘attack path’ visualizations to ThreatMapper vulnerability platform

• GDPR Fines Surged Sevenfold to $1.25 Billion in 2021: Study

• A Level-Set on Russia-Borne Cyber Threats

• Are You Prepared to Defend Against a USB Attack?

• Russian authorities arrested the kingpin of cybercrime Infraud Organization

• Myanmar’s Military Junta Seeks Ban On VPNs And Digital Currency

• Tor Project Battles Russian Censorship Through The Courts

• McAfee Bug Can Be Exploited To Gain Windows SYSTEM Privileges

• How Will Tonga’s Broken Internet Cable Be Mended?

• VW Fired Senior Employee After They Raised Cyber Security Concerns

• What CISA Incident Response Playbooks Mean for Your Organization

• Assange Wins First Stage in Effort to Appeal US Extradition

• Enterprises reluctant to report cyber attacks to authorities

• Alleged carder gang mastermind and three acolytes under arrest in Russia

• Beats Fit Pro Available to Pre-Order Worldwide Starting Today

• Hive View security camera customers left in the dark as some gear goes TITSUP*

• Guantanamo Bay: Twenty Years Later

• How to Customize Duo and Deliver an On-Brand Access Experience

• Conti Cyberattack Reported via Bank Indonesia

• Researchers Demonstrate VirusTotal Hacking Attack To Steal Credentials

• Seventeen vulnerabilities added to Known Exploited Vulnerabilities Catalog

• Investigating APT36 or Earth Karkaddan’s Attack Chain and Malware Arsenal

• TrickBot Bolsters Layered Defenses to Prevent Injection Research

• Lacework hires Facebook VP of engineering to advance cloud security platform

• Cybersecurity: 11 steps to take as threat levels increase

• Ukraine Attack: Hackers Had Access for Months Before Causing Damage

• Balancing Privacy for Good

• MPs say some illegal content could evade new Online Safety Bill

• BHUNT password stealer targets crypto wallets through cracked software

• Researchers break down WhisperGate wiper malware used in Ukraine website defacement

• Tor Project battles Russian censorship through the courts

• Microsoft: We’re switching off Excel 4.0 macros by default to protect you against security threats

• Emotet spam uses unconventional IP address formats to evade detection

• MediaTek Demos Next-Gen Wi-Fi 7 Standard Boasting Near Thunderbolt 3 Speeds

• Have UK Police Gone Too Far With Facial Recognition Technology?

• Russian Authorities Arrest Head of International Cybercrime Group

• FBI alert: malicious QR codes stealing money

• Wikileaks founder Julian Assange wins right to take extradition case to UK’s top court

• A week in security (January 17 — 23)

• US Legislation To Boost Chip Funding Set For House

• DeepMind Co-Founder Suleyman Departs For Investment Firm

• Of hacks and patches

• Hackers Creating Fraudulent Crypto Tokens as Part of ‘Rug Pull’ Scams

• WatchGuard Technologies’ 2022 Predictions: State-Sponsored Mobile Threats, Space-Related Hacks and More

• Cyber Defense Media Group – 10 Year Anniversary – Daily Celebration in 2022

• What Are DeFi Flash Loans & How to Prevent Flash Loan Attacks?

• Treat Security as a Risk

• How Hackers Run Token Scams to “Rug Pull” Money

• US Data Breaches Surge 68% to All-Time High

• To Spread STRRAT Malware, Phishing Campaign Impersonates Shipping Giant Maersk

• Hackers Hit 483 Users in Crypto.com Attack That Witnessed $31M+ Coins Withdrawn

• European Commission Announces Bug Bounty Program For Opensource Software

• Google Asks Judge To Dismiss Most Of Texas Antitrust Case

• Twitter Shake-Up Sees Departure Of Top Security Staff

• Digital Bank Chime Financial Plans Massive IPO

• Intel Says Ohio Site Could Become World’s Biggest Chip Plant

• Hackers hijack smart contracts in cryptocurrency token ‘rug pull’ exit scams

• UK’s Privacy Tsar Mounts Fierce Defense of End-to-End Encryption

• US Adds 17 Exploited Bugs to “Must Patch” List

• China-Based BOE Rumored to Supply Displays for iPhone 15 Pro in 2023

• Google Details Two Zero-Click Bugs in Zoom Clients That Let Attackers Execute Malicious Code

• Unusual ‘Donald Trump’ Packer Malware Delivers RATs, Infostealers

• A New Way to Advertise Online | Avast

• Trying to register your antivirus in Windows Security Center?

• Netflix Shares Drop On Growth Concerns

• Researchers Find New BHUNT Cryptostealer Malware Active In The Wild

• How I Got Pwned by My Cloud Costs

• MFA Bypass Vulnerability Found In Box CMS And File Sharing Software

• Emotet Now Using Unconventional IP Address Formats to Evade Detection

• A 2022 priority: Automated mobile application security testing

• Myanmar’s military junta seeks ban on VPNs and digital currency

• Microsoft Lists 25 Windows Policies That Admins Should Not Use in Windows 10 & Windows 11

• High-Severity Rust Programming Bug Could Lead to File, Directory Deletion

• Crooks tampering with QR Codes to steal victim money and info, FBI warns

• Fraud detection is great, but you also need prevention

• F5 fixes 25 flaws in BIG-IP, BIG-IQ, and NGINX products

• COVID test related scam emails still highly popular among cybercriminals

• Ransomware hits Grandparents and TikTok Scams target young adults

• How to turn on ransomware protection on Microsoft Windows 10

• China accused of hijacking Australia Prime Minister Scott Morrison’s WeChat account

• Spike in brand abuse attacks, 3-D Secure transaction volume rising

• What is challenging multicloud adoption?

• Australian Prime Minister’s WeChat Shanghaied by Chinese patriots

• Red Cross Cyber Attack Resulted In Data Breach Affecting 515K People

• Kubernetes Incident Response: Building Your Strategy

• IoT data management market to grow steadily by 2026

• Digital transformation leaders reaping the fruits of their investments

• Cybercrime as-a-Service Gets Smarter in 2022

• Safari 15 Browser Vulnerability Potentially Exposes User Data – Apple Yet to Fix

• This Linux Kernel Bug Affects Numerous Distros – Patch Now!

• Inman Grant’s reappointment as eSafety commissioner comes with new powers

• IT Security News Weekly Summary – Week 03

• IT Security News Daily Summary 2022-01-23

• The Threat Landscape and Attribution

• OpenSubtitles data breach impacted 7 million subscribers

• How to Deal with Exchange Server Security Challenges?

• Gurman: Apple Preparing ‘Widest Array of New Hardware Products in Its History’ for Fall

• Ethics and ownership of AI-powered identities

Generated on 2022-01-30 23:59:24.220486