IT Security News Weekly Summary – Week 05

• IT Security News Daily Summary 2020-02-02

• DEF CON 27, Voting Village – Brian Varner’s ‘Beyond the Voting Machine: Other High Value Targets’

• The Joy of Tech® ‘Facebook, the Game!’

• Cyber Security Roundup for February 2020

• DEF CON 27, Recon Village – William Suthers’ ‘PIE HW Based Prebellico Intel Exfiltration Botnet’

• With voting nearly underway for 2020, who is in charge of policing disinformation?

• Hackers are hijacking smart building access systems to launch DDoS attacks

• Apple Arcade Ad Shared Ahead of Super Bowl: ‘A New World to Play In’

• Watch the Latest Apple Arcade Ad: ‘A New World to Play In’

• Pirated Software is All Fun and Games Until Your Data’s Stolen

• Tech Support Scam Hitting Microsoft Edge Start Page Takes a Break

• Russia’s watchdog Roskomnadzor threatens to fine Twitter and Facebook

• Ming-Chi Kuo Says Coronavirus Outbreak Impacting iPhone Supply, Lowers Shipment Forecast

• Calling BS on the security skills shortage

• The Top 5 Threats to Your IT Infrastructure

• The Mexican-American War and Constitutional War Powers

• The Russian Government blocked ProtonMail and ProtonVPN

• The Guardian helpfully provides Privacy Policies for the 577 Companies with whom they may share your data

• Terrorists and Technological Innovation

• Video: Stego & Cryptominers, (Sun, Feb 2nd)

• The Guardian helpfully provides Privacy Policies for the 577 Companies they may share your data with

• Raytheon engineer arrested for taking US missile defense data to China

• Week in review: UN hacked, new Kali Linux release, Win7 upgrade dilemma

• Microsoft announces the launch of a bug bounty program for Xbox

• Dashlane’s Super Bowl Ad Proves Password Managers Have Arrived

• Security Affairs newsletter Round 249

• Microsoft warns TA505 changed tactic in an ongoing malware campaign

• Everyone’s Creating Fake Social Media Accounts, Including Homeland Security

• Ransomware Hits Media Monitoring Company ‘TV Eyes’

• The Bitglass Blog

• Kali 2020.1 Default Username & Password – kali kali

• The Report: Impeachment, Day 10

• IT Security News Daily Summary 2020-02-01

• DEF CON 27, Voting Village – Christopher Krebs, Director of DHS’ CISA

• XKCD ‘Worst Thing That Could Happen’

• DEF CON 27, Voting Village – Dr. Linton Salmon’s The DARPA SSITH Program

• Devious Spamhaus Phishing Scam Warns You’re on an Email Block List

• Hackers using coronavirus scare to spread Emotet malware in Japan

• Forescout eyeSegment for Enterprise Wide Network Segmentation

• Can you find a bug in Xbox Live? Microsoft will pay you, if you do!

• Super Bowl 2020: How 5G will help keep fans safe at the game

• Rethinking Endpoint and Mobile Security for Remote Workers

• Configuring AWS Linux Servers With LDAP

• Coronavirus Phishing Attacks Are Actively Targeting the US

• Bitglass Security Spotlight: Mega Breach Exposes More Than 250 Million

• Improved Team Collaboration with G Suite, Powered by Bitglass & Okta

• Bitglass Security Spotlight: Vulnerability Found on TikTok Platform

• The Rise of Insider Threats in Verizon’s DBIR

• Partners in Cloud: Bitglass | Zscaler

• Crooks start exploiting Coronavirus as bait to spread malware

• Zero Trust Network Access with Bitglass

• “Out-of-band Real-time API Security”

• Bitglass: Deck the Cloud

• Apple Begins Selling Refurbished 2019 iPad Air and iPad Mini 5 Models

• POSITIVELY IMPACTING THE NEXT GENERATION WITH CYBER SAFETY DAY

• Windows 7 Gets One Last Update For the Road

• NO LIMITS, NO EXCUSES: COMMIT TO CERTIFICATION IN 2020

• CERTIFIED SECURE SOFTWARE LIFECYCLE PROFESSIONAL EXAM UPDATES

• 5 Best Password Managers of 2020: 1Password, Bitwarden, and More

• Wireshark 3.2.1 Released, (Sat, Feb 1st)

• Using Google Authenticator? Here’s why you should get rid of it

• Winnti APT Group targeted Hong Kong Universities

• Beware of Dangerous Security Risks By Using Open-Source Software and Tools

• Firefox now shows what telemetry data it’s collecting about you

• Apple, Facebook Could Be Forced to Break Encryption by Children Protection Bill

• HTTPS Means You Should No Longer Be Afraid of Public Wi-Fi

• Ukrainian authorities proposed online media to track readers and transfer data to the cyber police

• Avast Shuts Down its Data Sales Subsidiary Due to Privacy Backlash

• Cybersecurity Predictions for 2020 and Beyond

• Super Bowl 54: How 5G will help keep fans safe at the game

• Microsoft detects new Evil Corp malware attacks

• Apple Offering Onsite Device Repairs in Select Cities Through Go Tech Services

• The Week in Ransomware – January 31st 2020 – Taking it to The Courts

• How to Deal With Orphaned Accounts in Your Business

• Exculpated: The Iowa Confusion

• How to Check When Your Systems Were Last Rebooted

• IT Security News Daily Summary 2020-01-31

• Advanced Obfuscation Marks Widespread Info-Stealing Campaign

• Watch Out for Coronavirus Phishing Scams

• Evil Corp Returns With New Malware Infection Tactic

• 10 recommendations for cloud privacy and security with Ponemon research

• Earn Beacon Gold While Becoming a Ninja at Using Our Products

• New Intel Microcodes for Windows 10 Released to Fix CPU Bugs

• AI for wildlife management

• Apple Providing Free Replacement AirPods Pro Tips Under AppleCare+

• Pentagon finalizes CMMC standard for contractors

• Cyber criminals using Coronavirus emergency to spread malware

• Ashley Madison breach victims have more to worry about

• Securing data, even in the fog

• NARA looks to PICARD for the next-generation enterprise

• Congress Must Stop the Graham-Blumenthal Anti-Security Bill

• Friday Squid Blogging: The Pterosaur Ate Squid

• GSA launches second phase of buying schedule consolidation

• two-factor authentication (2FA)

• Clearview AI—Yet Another Example of Why We Need A Ban on Law Enforcement Use of Face Recognition Now

• FCC: Wireless Carriers Violated Federal Law by Sharing Consumer Location Data

• ‘George’ the Most Popular Password That’s a Name

• What It’s Like to Be a CISO: Check Point Security Leader Weighs In

• Can the Netanyahu Government Annex Parts of the West Bank?

• Iowa Prosecutors Drop Charges Against Men Hired to Test Their Security

• Class Action Lawsuit Over iPhone 7 Audio Chip Defect Narrowed, But Allowed to Proceed

• Lawsuit in India Seeks to Shut Down Access to U.S. Journalism Website

• Iranian Hackers Target U.S. Gov. Vendor With Malware

• Ashley Madison Breach Returns with Extortion Campaign

• Can IDaaS adoption improve enterprise security posture?

• Threat Roundup for January 24 to January 31

• Microsoft Offers Free Windows 10 VMs for Edge Legacy Testing

• Detecting Citrix CVE-2019-19781

• Remember those infosec fellas who were cuffed while testing the physical security of a courthouse? The burglary charges have been dropped

• Get in the Security Fast Lane with a Stealthwatch and Encrypted Traffic Analytics Test Drive!

• DEF CON 27, Voting Village – Secretary Alex Padilla’s, Noah Praetz’, Barb Byrum’s, Amber McReynolds’, Eric Geller’s ‘State And Local Preparations On Election Security’

• The Joy of Tech® ‘Keep Calm About Coronavirus!’

• Burn, drown, or smash your phone: Forensics can extract data anyway

• The Authoritarian Arguments for Trump’s Acquittal

• Imperva Received Top Scores in Gartner’s “Critical Capabilities for Cloud Web Application Firewalls”

• In-house vs. outsourced cybersecurity operations center capabilities

• Ransomware Dashboard Tells If and Where Firms Vulnerable to Attack

• NSA Security Awareness Posters

• Cyber News Rundown: Magecart Hackers Arrested

• [Webinars] “Open source” management and secure development

• Top 10 Best Writing Tools

• Name That Toon: Private (Button) Eye

• Hackers penetrated NEC defense business division in 2016

• Russia Threatens Facebook, Twitter With Fines, Demands User Data

• A Drug Molecule “Invented” By Artificial Intelligence (AI) To Be

• REvil Ransomware Crew Sponsors Underworld Hacking Competition

• Ransomware hits TV & radio news monitoring service TVEyes

• US County’s Computers Still Down Nine Days After Ransomware Attack

• Apple Engineers to Standardize the Format of the SMS Messages Containing OTPs

• ProBeat: Why your company should care about the latest Ring scandal

• A Drug Molecule “Invented” By Artificial Intelligence (AI) To Be Used In Human Trials

• Fake investors busted in Belgium and France

• AppSec Concerns Drove 61% of Businesses to Change Applications

• Facebook Says It Will Remove Coronavirus Conspiracy Theories And Misinformation

• Trickbot Evolves with new RDP scanner:

• Livestream: Senate Impeachment Trial Day 10

• Winnti Group Targets Hong Kong Universities, Updates Backdoor

• Serious Security – How ‘special case’ code blew a hole in OpenSMTPD

• FBI and Binary Defense Warn of E-Skimming Threat to Online Retailers

• Facebook to give $550 Million as a Settlement in a Lawsuit

• OECD Confirms Rewrite Of Global Tax Laws

• January ’20 Newsletter: New Year, New Updates!

• How to change iOS 13 settings for better security

• Russia’s ProtonMail block – New revelations and information

• Tick, Tock: Windows 7 Obsolescence

• Winnti Group Infected Hong Kong Universities With Malware

• IoT security products address threats posed by connected devices

• Fighting bots and comment spam

• Exclusive: Expercom Offers MacRumors Readers Best Prices on Custom 16-Inch MacBook Pros (Up to $409 Off), Apple TV 4K, and Apple Watch Series 5

• Zero Day Initiative Bug Hunters Rake in $1.5M in 2019

• Japanese Electronics Giant NEC Discloses Old Data Breach

• Abusing DLL Misconfigurations — Using Threat Intelligence to Weaponize R&D

• Protecting the Hospitality Sector With Security Intelligence

• Windows 7 End of Support: What Does It Mean for Your Organizations?

• Apple TV Gets New Underwater Screensavers

• Coronavirus Death Toll Rises Above 200; Experts Expect It to Spread

• What is Transport Layer Security (TLS)? Strengths and Vulnerabilities Explained

• Election Officials Get Training Before 2020 Voting Begins

• AI in Healthcare: It’s All About the Data Scientists

• Eclypsium Researchers Demonstrate Direct Memory Attacks

• Google trending Cyber Attack news headlines

• The Report: Impeachment, Day Nine

• Breach at Indian Airline Affects 1.2 Million Passengers

• Adobe Releases Security Updates for Magento

• $20,000 up for grabs in Xbox Live security hole hunt

• BDO survey: US tech firms fear trade war and Chinese innovation

• Three suspects arrested in Maltese bank cyber-heist

• Week in security with Tony Anscombe

• Wawa Card Breach Becomes Huge Problem Since 30M Stolen Cards Are Put Online For Sale

• Google Open Sources Code for Security Key Devices

• Social Media Phishing: Beyond Credential Theft

• Arcadia makes supporting clean energy easier

• Embracing a Prevention Mindset to Protect Critical Infrastructure

• Hacked! SCPI Protocol Vulnerabilty; Measurement Instruments Could be Hacked!

• Kenya Court Halts Biometric ID Over Data Fears

• How to watch Super Bowl LIV live online

• A cyberattack known as e-skimming is getting more common with the rise of online shopping

• Jeff Bezos Met FBI Investigators In 2019 Over Alleged Saudi Hack

• Cybersecurity Lacking At Most Of The World’s Major Airports

• Three Suspects Arrested In Maltese Bank Cyber Heist

• How to avoid the mistakes made in the UN data breach

• Modern CyberSOC – A Brief Implementation Of Building a Collaborative Cyber Security Infrastructure

• Cloud Visibility Challenges

• US continues to press UE members to ban Huawei and Chinese 5G technologies

• E-skimming is getting more common with the rise of online shopping

• How AI will improve API security

• This Week in Security News: Over 2,000 WordPress Accounts Compromised and Facebook to Pay $550M to Settle Class Action Case Over Facial Recognition

• AlphaBay Dark Web Market Moderator Faces up to 20 Years in Prison

• What Is the Country with Highest Digital Quality of Life?

• Sodinokibi Ransomware Group Sponsors Hacking Contest

• UK High Court Approves Freezing Injunction on $1M Ransomware Payment

• 71% of ransomware attacks target SMEs

• Certified Secure Software Lifecycle Professional Exam Updates

• First all-optical, stealth encryption technology developed

• Cameradar – Hack RTSP Video Surveillance CCTV Cameras

• New Project Informs Security Teams of Phished Users

• Fraud alert: Google temporarily suspends publishing Chrome Web Store extension

• IT Auditors in the Spotlight

• UK High Court Clears Freezing Injunction on $1M Ransomware Payment

• Windows 7 Gets New Final Update to Fix the Previous Final Update

• UK Departure From EU To See End Of Free Roaming

• Don’t get sacked! Scams to look out for this Super Bowl

• Do You Need to Create Segmented Networks to Protect Critical Assets?

• Make your own security key with Google’s OpenSK

• Pavel Durov again warned about the danger of using WhatsApp

• FBI warns of new online threat to personal, credit card information

• The biggest data breach fines, penalties and settlements so far

• U.S. Department of Interior Grounding All Drones

• Mozilla Confirms Thunderbird Email Client Move

• What Is SSL Offloading and How it Works

• Japanese company NEC confirms 2016 security breach

• Ashley Madison cyber-breach: 5 years later, users are being targeted with ‘sextortion’ scams

• Researcher Finds Over 60 Vulnerabilities in Physical Security Systems

• UN hacked via unpatched SharePoint server

• China’s Winnti hackers (apparently): Forget the money, let’s get political and start targeting Hong Kong students for protest info

• US Interior Dept extends drone grounding over foreign hacking fears

• A vulnerability in Zoom platform allowed miscreants to join Zoom meetings

• Four Ways to Keep Kubernetes’ Secrets Secret

• Here’s how cybercriminals gain access to customer data through e-skimming

• British Council Blocked Over 10 Million Malicious Emails in 2019

• Financial tech firms disagree on ban of customer data screen-scraping

• Security Recruiter Directory

• A year after Bank of Valletta ‘cyber heist’, cuffs applied as cash-cleansing case continues

• NIST Tests Forensic Methods for Getting Data From Damaged Mobile Phones

• Microsoft Offers Rewards of Up to $20,000 in New Xbox Bug Bounty Program

• Apple Engineers Propose Standardized Format for SMS One-Time Passcodes

• US Says EU Understands 5G Risks But Pushes on Huawei

• Social Captain Instagram Account Exposed And Experts Reactions

• Microsoft invites gamers and researchers to new Xbox bug bounty program

• US Defense Contractor Hit by Ryuk Ransomware

• With Intelligence, Fans, Businesses and NFL Can Remain Protected Against Cyber Threats

• How Do You Measure the Success of Your Patch Management Efforts?

• Attempts to define international infosec rules of the road bogged down by endless talkshops, warn diplomats

• Avast acknowledges collecting user data; shuts down Jumpshot

• VB2019 paper: Rich headers: leveraging the mysterious artifact of the PE format

• Italian Spyware Company Execs Arrested After Company Employees Spied On Innocent Citizens

• Facebook to remove misinformation about the coronavirus

• 10 biggest cybersecurity M&A deals of 2019

• Apple releases iOS 13.3.1 and macOS Catalina 10.15.3

• 6 Best Websites for Streaming

• Ryuk ransomware impacts websites of DOD contractor

• Experts On Data Breach At Indian Airline SpiceJet Affects 1.2 Million Passengers

• Facebook is prepared to pay up to $550M to settle facial recognition lawsuit

• NEC Defence Contracts Info Potentially Compromised in Breach

• More Challenges for Intel Hardware Product Security

• Weekly Update 176

• TrickBot Uses a New Windows 10 UAC Bypass to Launch Under the Radar

• AlphaBay Moderator Faces 20 Years Jail Time

• Flying Blind: 70% of Airport Websites Contain Vulnerabilities

• Microsoft Announces Xbox Bounty Program With Potential Payout of $20K

• FBI launches investigation into Pegasus spyware vendor over US citizen hacks

• UK Cyber Sector Tops £8bn as Brexit Looms

• What the Last Decade tells us About the Increased Need for Enterprise Security

• EU Lawmakers Vote Overwhelmingly in Favor of Charging Cable Standard, Despite Apple’s Protestations

• Number of Web Certs Up, More Public Education Needed

• Winnti Group targeting universities in Hong Kong

• Facebook to pay $550m to settle face-tagging suit

• FCW Insider: Jan. 31

• Hacker snoops on art sale and walks away with $3.1m, victims fight each other in court

• Video: Damon Motorcycles, BlackBerry, and the Safe and Secure 200 MPH Electric Superbike

• Critical Flaw in Zoom Could Allow Attackers to Mess With Meetings

• Need for “Big Data Biology” as Users Create More Data

• UK’s HMRC tax authority seeks tools to track down cryptocurrency criminals

• Quantum Computing is Here, Look to a Post Quantum Future

• Change Is Inevitable: Tripwire File Analyzer

• Report: Threat of Emotet and Ryuk

• 7 Key Features of a Breach and Attack System

• Iran-linked APT34 group is targeting US federal workers

• New infosec products of the week: January 31, 2020

• FTCode: PowerShell’s Own Ransomware

• 80% of successful breaches are from zero-day exploits

• Secure 5G networks: EU toolbox of risk mitigating measures

• Cloud Security vulnerability detected on Microsoft Azure

• Critical RCE & Spoofing Vulnerabilities in Microsoft Azure Cloud Let Hackers Compromise Microsoft’s Cloud Server

• 93% of attempted mobile transactions in 2019 were fraudulent

• Facebook to pay $550 million as Privacy Concerns settlement

• ISC Stormcast For Friday, January 31st 2020 https://isc.sans.edu/podcastdetail.html?id=6848, (Fri, Jan 31st)

• Researchers develop new optical stealth encryption technology

• Cloud Workload Security – Part 1: Introducing the Forrester Wave Report

• Kanguru Remote Management Console: Managing and monitoring encrypted USB devices

• Healthcare security: How can blockchain help?

• Roskomnadzor blocked the email service Protonmail

• Slice Labs’ new services help insurers protect carriers, businesses, and consumers from risk

• Cisco Small Business Switches Vulnerabilities allows Attackers to Access Sensitive Information and Cause DoS

• myDevices’ new panic button technology eliminates the dead zone problem

• Semtech releases LoRa-based Asset Tracking Reference Kit

• Keysight’s new PROPSIM channel emulator verifies radio links critical for aerospace applications

• 2020-01-30 – Traffic analysis exercise: Sol-Lightnet

• Understanding and Executing Compliance Audits

• Univa Navops Launch 2.0 helps enterprises easily extend HPC workloads to the cloud

• Concentric launches with a deep learning approach to fixing broken file permissions

• Fusion Risk Management unveils Fusion Connector for Everbridge Risk Intelligence

• ThreatStack partners with Tevora to streamline cloud security and compliance initiatives

• 2020-01-29 – Qbot (Qakbot) infection

• ServiceNow acquires Passage AI to advance deep learning AI capabilities

• The DOJ Is Finally Suing US Telecom Providers for Robocalls

• Microsoft Detects New Evil Corp Malware Attacks After Short Break

• Arceo appoints Mike Convertino as CSO

• Omnitracs to further support the work of Truckers Against Trafficking

• O’Reilly and Formulatedby announce new conference about smart cities and mobility industries

• Daniel Kollberg joins SentinelOne as VP of EMEA

• How organizations should handle data breaches

• Two Vulnerabilities Found in Microsoft Azure Infrastructure

• The Continuing Story Of Bad Corporate Behavior: Avast Antivirus Subsidiary Now Shuttering

• Android Malware for Mobile Ad Fraud Spiked Sharply in 2019

• IT Security News Daily Summary 2020-01-30

• Russian Cybercrime Forum Contests Bring Cash, Visibility to Winners

• At hearing, IGs look to curb reprisals against whistleblowers

• As states prepare for disasters, they acknowledge things will get worse

• Google open-sources the firmware needed to build hardware security keys

• 200K WordPress Sites Vulnerable to Plugin Flaw

• Huawei set for limited UK 5G role, but can we Trust Huawei?

• What is DNSSEC and Why Is It Important?

• Check Point detailed two flaws in Microsoft Azure that could have allowed taking over cloud servers

• House Committee Passes Bills Improving CISA Leadership and Authority

• Payment cards from Wawa data breach found on dark web

• Qualys Reveals Critical OpenBSD Mail Server Security Flaw

• NEC Defense Contracts Info Potentially Compromised in Breach

• NSA Offers Guidance for Improving Cloud Security

• I’m an SMB. What Should I Watch for When Choosing Security Vendors?

• Can the U.S. compete in R&D?

• Enterprise laptops vulnerable to critical direct memory access attack

• Top 10 tech policy trends to watch in 2020

• TrickBot Uses a New Windows 10 UAC Bypass to Launch Quietly

• Members of the House Are on Notice: No Tweeting Deepfakes

• SEC Shares Cybersecurity and Resiliency Observations

• The Fractured Future of Browser Privacy

• I’m an SMB. What Should I Watch for When Choosing Security Vendors and Their Products?

• Try these 6 official practice questions for CCNA 200-301

• 97 of the world’s 100 largest airports have massive cybersecurity risks

• Hackers Can Earn $20,000 for Xbox Vulnerabilities

• A look inside ‘CCNA 200-301 Official Cert Guide, Volume 2’

• Facebook’s Latest Privacy FAIL Costs Company $550M

• Iranian Hackers Target U.S. Research Organization in Ongoing Campaign

• How to Secure Your IoT Ecosystem in the Age of 5G

• Warren Pledges to Fight Disinformation, but Her Arsenal Is Limited

• Check Point Reveals Azure Cloud Security Flaw

• Is VDI Cost Effective vs Win10 Laptops?

• Brexit Endgame: Britain’s EU Departure Marks the End of Brexit’s Beginning

• Iranian hackers target US government workers in new campaign

• Microsoft launches Xbox bug bounty program with rewards of up to $20,000

• Electronic Warfare Associates (EWA) Infected by Ransomware

• Recently Patched Vulnerabilities in Microsoft Azure Stack Could Have Allowed Server Takeovers

• Microsoft Launches Xbox Bounty Program With $20K Maximum Payout

• Israel Defended Against a “Very Serious Cyber-attack” on Power Infrastructure

• Cybersecurity Firm to Create 164 New Jobs in Virginia

• Coronavirus Campaigns Spread Emotet, Malware

• United Nations Data Breach Started with Microsoft SharePoint Bug

• AI-based Document Classification Firm Concentric Emerges From Stealth

• CommitStrip – ‘When I Get The Results From The Security Audit’

• DEF CON 27, Voting Village – Alex Stanev’s ‘Machine Voting: The Bulgarian Experience’

• Same Old NFL: League Abuses Trademark to Shut Down New York Jets Parody Store

• Announcing the Xbox Bounty program

• Fake Exec Tricks New York City Medical Center into Sharing Patient Info

• The Adware Families That Changed the Antivirus Industry

• Apple Confirms Redesigned Maps App Has Rolled Out to All Users Across United States

• Sophisticated Hackers Infiltrate Dozens of U.N. Servers

• Livestream: Senate Impeachment Trial Day 9

• Navy seeks unmanned fleet, but Congress needs convincing

• Cisco Patches Two High-Severity Bugs in its Small Business Switch Lineup

• New Iranian Campaign Tailored to US Companies Utilizes an Updated Toolset

• Bezos, WhatsApp Cyberattacks Show Growing Mobile Sophistication

• Automating API Security in the Cloud

• What is SMBv1 and Why You Should Disable it

• Trello exposed! Search turns up huge trove of private data

• Time to celebrate Data Privacy Day!

• UN hacked, becomes target of massive state-sponsored spying op

• Russia Blocks ProtonMail and ProtonVPN, Tor to the Rescue

• SIM-Free iPhones Now Qualify for 24-Month Interest-Free Financing With Apple Card

• Facebook Settles Facial Recognition Lawsuit

• Speaking Freely: An Interview with Christian Frank

• Data Security for the Future: DLP and Secure Access Service Edge

• Apple wants to standardize the format of SMS OTPs (one-time passcodes)

• How does a government censor the Internet? A rare peek from Jammu and Kashmir

• VirusTotal MultiSandbox += BitDam ATP

• United Nations Covered Up Hack – Report

• S2 Ep24: Tinder, angry customers and weleakinfo takedown – Naked Security Podcast

• Security pros hampered by burnout, lack of diversity – how do we fix this?

• Blocking Privilege Escalation Attacks in Amazon Web Services (AWS)

• Enterprise Hardware Still Vulnerable to Memory Lane Attacks

• Election Security 2020: How We Should Allocate $425M in Funding

• Say hello to OpenSK: a fully open-source security key implementation

• Changing the Monolith—Part 3: What’s your process?

• GSA names permanent acquisition chief

• The Report: Impeachment, Day Eight

• Malicious emails sent in German on behalf of the Post

• Securing the MSP: their own worst enemy

• Flaw in ‘Code Snippets’ Plugin Exposed Many WordPress Sites to Attacks

• Facebook knows a lot about your online habits – here’s how to stop it

• Cisco Releases Security Updates for Cisco Small Business Switches

• How we Developed a Unified Binary Store (UBS): Part 2

• Digital Change: How Can You Support Employees Through The Process?

• Please don’t fall for these surprisingly bad phishing scam emails

• U.N. Hack Stemmed From Microsoft SharePoint Flaw

• Wawa Breach: Hackers Put 30 Million Stolen Payment Card Details for Sale

• Security Analysis of Devices That Support SCPI and VISA Protocols

• Comment: WordPress Plugin Bug Exposes 200K+ Sites

• Singapore, Malaysia clamp down on online falsehoods about coronavirus

• Prevent Fraud with AI

• VB2019 paper: Medical IoT for diabetes and cybercrime

• Difficult season: Antivirus-flinger Avast decides to ‘wind down’ Jumpshot

• 2020 Cybersecurity Marketer of the Year Nominees and Judges Announced

• Cost of Insider Threats Rises 31%

• Cisco Small Business Switches affected by DoS and information disclosure flaws

• Dell, HP Memory Access Bugs Open Attacker Path To Kernel Privileges

• UN Withheld News Of Systems Hack In European Offices

• LabCorp Exposed Thousands Of Medical Documents

• DOD takes AI to school

• Facebook Agrees To Pay $550 Million To End Facial Recognition Tech Lawsuit

• Ransomware Attack on US DOD Contractor

• Check Point Aims to Expand Reach of Cloud Service

• DOD plans for security-focused guidance for DevSecOps

• The Army’s night court fuels the cloud

• Experts On Ledger Warns Over New YouTube Phishing Streams

• Collating Hacked Data Sets

• Is Cyber Insurance a Substitute for Cybersecurity?

• Experts On Snake Ransomware

• JEDI legal fights plays out in two courts

• Experts Analysis Of Wawa Breach Potentially Compromised 30 Million+ Payment Cards

• RawCap Redux

• Cyber Breach Causes Shares To Fall For Medical Manufacturing Firm Tissue Regenix

• New IoT security regulations: what you need to know

• Avast Shuts Down Jumpshot After Getting Caught Selling User’s Data

• This Software Called Otter; What it is and what it does

• Lockheed’s board adds former joint chiefs chair

• An Emotet campaign hits the United Nations

• Malware spotlight: Droppers

• BP’s CISO: Gov’t Agencies “Still Polishing Intel” as Adversaries Move

• ProtonMail and StartMail blocked as Russia hunts for bomb threat spammers

• Network Traffic Analysis for IR: SSH Protocol with Wireshark

• The Case for Integrating Dark Web Intelligence Into Your Daily Operations

• Cisco Patches DoS, Information Disclosure Flaws in Small Business Switches

• The NHS has suffered only six ransomware attacks since the WannaCry worm, investigation reveals

• Employers can’t force you to get microchipped, Indiana reps say

• Come Meet Duo’s A-Team at RSA 2020!

• Will Iran Launch Cyberattack On US? | Avast

• UN hacked: Attackers got in via SharePoint vulnerability

• Book Review: Cult of the Dead Cow

• Ragnarok Ransomware Exploits Citrix Vulnerability To Target Vulnerable Servers

• Over 200K WordPress sites potentially exposed to hack due to Code Snippets flaw

• A Message From CEO Ondrej Vlcek | Avast

• Avast closes Jumpshot over data privacy backlash, but transparency is the real issue

• Phishing: You’re not as good at spotting scams as you think you are

• Photos: Cybertech Global Tel Aviv 2020

• Interior Department Halts Drone Operations Over Cybersecurity Concerns

• DailyObjects – 464,260 breached accounts

• Facebook agrees to pay $550 million to end facial recognition tech lawsuit

• Review: LogicHub expertly automates security

• Devices Still Vulnerable to DMA Attacks Despite Protections

• Ryuk Reportedly Behind Ransomware Infection at DOD Contractor

• Photos: Cybertech Tel Aviv 2020

• Azure: The Future for Your Datacentre?

• Facebook to Pay $550M to Settle Class Action Case Over Facial Recognition

• Microsoft Cloud Growth Pleases Wall Street

• The Trends in IT Security, As You See It

• Avast Closes Jumpshot Division After Privacy Row

• Microsoft Azure Flaws Could Have Let Hackers Take Over Cloud Servers

• Security Expert Re: Major Facebook Data Partner LiveRamp Hacked To Launch Scams

• The Best Treatment Plan for Your Security Pain Starts with a Data-Driven Diagnosis

• Mark Warner Takes on Big Tech and Russian Spies

• Government spyware company spied on hundreds of innocent people

• Exinda Management Center update

• Apple Matched or Surpassed Samsung for Smartphone Shipments in Q4 2019

• US Arrests Prominent Harvard Academic for China Ties

• US Govn contractor Electronic Warfare Associates infected with Ryuk ransomware

• Avast winds down Jumpshot, cites user data sale privacy concerns

• If only 3 in 100,000 cyber-crimes are prosecuted, why not train cops to bring these crooks to justice once and for all, suggests think-tank veep

• Taylor Swift has experienced the highest amounts of malware files

• Social Insurance Numbers targeted by phishing scam

• US Downs Drone Fleet on China Security Fears

• New Phishing Service Alerts Companies of Phished Employees

• Dell, HP Memory-Access Bugs Open Attacker Path to Kernel Privileges

• FCW Insider: Jan. 30

• 6.7M records exposed by Cornerstone Payment Systems database left open

• UK’s Cybersecurity Sector Now Worth £8.3 Billion, But Is A Skills Gap Looming

• How to set up Windows Firewall to limit network access

• Avast CEO Shuts Down “Jumpshot” Programme, Apologises to Users

• Wawa customer payment card data open for sale

• Check Point Research partners with Microsoft Azure to create a safer, better secured cloud infrastructure

• Quick Hits

• Magento patches critical code execution vulnerabilities, upgrade ASAP!

• Facebook Shares Fall Amid Sharp Rise In Costs

• IoT laws are coming: What to expect

• nCipher Security: More Americans trust encryption than know what it is

• UK’s Cybersecurity Sector Now Worth £8.3 billion, But is A skills Gap Looming

• Linux Kernel 5.6 Source Tree Includes WireGuard VPN

• Experts Reactions on CEOs Are deleting Their Social Media Accounts To Avoid Hacking

• New Ryuk Stealer Targets Government And Military Sectors

• Critical OpenSMTPD Bug Opens Linux and OpenBSD Mail Servers to Hackers

• Human Rights Fears as UN Admits Serious Breach

• DigiCert CEO: Focus Security and Privacy on the Person

• Why Organizations Need Manual Penetration Testing

• Leaked confidential report states United Nations has been hacked

• For MSPs and SMBs, the Best Defense is an Educated Defense

• Survey: Enterprises Losing Confidence in SD-WAN Security

• 2020-01-27 – Pcap and malware for an ISC diary (Emotet with Trickbot)

• Good Guy Hacker Tells Victims to Stop Masturbating, Still Wants $500 or Else

• How to prioritize IT security projects

• Organizational culture defines a successful cloud strategy

• 3 Cyberthreats Facing Federal and State Governments in 2020

• Fintechs divided on screen scraping ban

Generated on 2020-02-02 23:58:24.824106