IT Security News Weekly Summary – Week 06

• IT Security News Daily Summary 2022-02-13

• Google Paid $8.7 Million in Bug Bounties Last Year

• Twitter cans 2FA service provider over surveillance claims

• 3 Opportunities for Startups Interested in the Defense Marketplace

• Organizations paid at least $602 million to ransomware gangs in 2021

• 2022 Predictions on the Cybersecurity Threat Landscape, from Forcepoint

• Adobe Releases Emergency Patch for Exploited Commerce Zero-Day

• Blackbyte ransomware hits San Francisco 49ers ahead of Super Bowl

• How Saudi Arabia Pushed Iraq Into the Arms of Iran

• Gurman: FaceTime for Apple AR/VR Headset Could Rely on Memojis and SharePlay

• Fixing Common AD Security Issues With BloodHound FOSS

• San Francisco 49ers NFL team discloses BlackByte ransomware attack

• How Cyber Resilience Reshapes Cybersecurity?

• How to Set Up Lock Screens on All Your Devices

• The Hacking Group ‘ModifiedElephant’ Remained Undetected

• Analyzing Phishing attacks that use malicious PDFs

• Security Affairs newsletter Round 353

• A Cyber-Attack has Disrupted Slovenia’s Most Popular TV Channel

• ICO Struck by 2650% Rise in Email Attacks in 2021

• Week in review: Malware targeting Linux-based OSes, Log4j exploitation risk

• Penetration testing

• Weekly Update 282

• U.S. Department of Defense selects DataRobot to power government’s AI initiatives

• Sardine raises $19.5 million to continue growth and product development

• Organizations are addressing zero-day vulnerabilities more quickly, says Google

• Rich Tortorelli joins BridgeComm as Chief Systems Engineer

• Bitrise expands physical expansion in Japan

• IT Security News Daily Summary 2022-02-12

• How the metaverse could shape cybersecurity in 2022

• How to frame meaningful security conversations with the corporate board

• CISA, FBI, NSA warn of the increased globalized threat of ransomware

• Decision Trees in Case of a Ransomware Attack

• Password Generation Using Dataweave in MuleSoft

• Attackers Revive 20-Year-Old Tactic in Microsoft 365 Phishing Attacks

• The CIA Has Secretly Run a ‘Bulk Collection’ Program

• Signal App Launches Change Number Feature While Retaining Old Data

• Deal alert: These 10 e-learning bundles teach ethical hacking, cryptocurrency trading, more

• What Are the Main Attack Vectors in Cybersecurity?

• The CIA Has Secretly Run a “Bulk Collection” Program

• Top Stories: Tap to Pay on iPhone, AirTag Privacy Updates, and More

• What Are the Main Attack Vectors in Cybersecurity and How Do They Work?

• FritzFrog Botnet Targeting SSH server, Data Center Servers, and Routers

• CISA Says ‘HiveNightmare’ Windows Vulnerability Exploited in Attacks

• Hackers Rigged Hundreds of Ecommerce Sites to Steal Payment Info

• By Attacking Healthcare, Education, and Government Systems, FritzFrog Botnet Grew Tenfold

• Several Magento Sites were Targeted by a Surge of MageCart Attacks

• Croatian phone carrier A1 Hrvatska discloses data breach

• Build or Buy your own antivirus product

• Group-IB Found 140 Resources with Fraudulent Schemes under the Guise of Olympic Games Broadcasts

• AI & ML Cybersecurity: The Latest Battleground for Attackers & Defenders

• SIEM vs. SOAR vs. XDR

• When love hurts: Watch out for romance scams this Valentine’s Day

• Week in security with Tony Anscombe

• Best Facial Recognition Software for Enterprises In 2022

• Apple Giving Many U.S. Retail Employees Raises

• Allure Security raises $6.8 million to accelerate go-to-market activities and grow its team

• Cloudflare acquires Vectrix to help businesses gain control of their SaaS applications

• Facebook exposes ‘god mode’ token that could siphon data

• Ruby raises $7.3 million to give users granular access control over their data

• FritzFrog P2P Botnet is back and targets Healthcare, Education and Government Sectors

• Apple emits emergency fix for exploited-in-the-wild WebKit vulnerability

• Crunch data while the sun shines and save it in an ‘information battery’

• EFF, ACLU, and 30+ Community Groups Oppose Weakening San Francisco’s Surveillance Ordinance

• IT Security News Daily Summary 2022-02-11

• Ransomware routed by fast-acting, info-sharing Texans

• Malwarebytes vs Bitdefender

• Aviatrix Enhances Secure Cloud Networking with Network Behavior Analytics

• DDoS Attacks on a Tear in Q4 2021

• Microsoft, Oracle, Apache and Apple vulnerabilities added to CISA catalog

• Europe’s biggest car dealer hit with ransomware attack

• Critical MQTT-Related Bugs Open Industrial Networks to RCE Via Moxa

• Apple emits emergency fix for exploited-in-the-wild browser vulnerability

• CISA adds 15 new vulnerabilities to its Known Exploited Vulnerabilities Catalog

• Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP)

• How technology vendors can best serve network incident responders

• LNK Files, Again

• Video: Would You Pay $2000+ for Apple’s AR/VR Headset?

• Lawmakers want the SEC to expand cyber regs

• Google Paid Record $8.7 Million to Bug Hunters in 2021

• ModifiedElephant APT hackers plant incriminating evidence on victims devices

• Google says nearly $9 million given out in 2021 vulnerability rewards

• Login.gov looks for a director

• Biden admin announces $5 billion to fund nationwide electric vehicle charging network

• Cybercrooks Frame Targets by Planting Fabricated Digital Evidence

• Feds Oppose Immediate Release of Voting Machine Report

• 9 Key Takeaways from Ask Us Anything: Passwordless Tips & Tricks

• We Need Answers About the CIA’s Mass Surveillance

• Overclassification and CMMC

• iPhone 13 is Significantly Faster Than Samsung’s New Galaxy S22 in Benchmarks

• AI could match ‘fingerprints’ of texts to their authors, under new intelligence program

• Google: Vendors took an average of 52 days to fix reported security vulnerabilities

• US govt: Here are another 15 security bugs under attack right now

• New Bill Could Force Facebook To Change Its News Feed Algorithm

• Prison for Nintendo Pirate

• Twitter down – You are not alone Twitter is down for many

• Marketing Firm Exposes Lead Data

• 2022-02-10 – Emotet epoch 5 infection with Cobalt Strike

• Immediata Agrees $1.125m Data Breach Settlement

• CISA Adds One Known Exploited Vulnerability to Catalog

• MacRumors Giveaway: Win a Deconstructed Apple Device From GRID Studio

• Must Russia Abstain on Security Council Votes Regarding the Ukraine Crisis?

• Intern with Lawfare!

• Microsoft fixes Defender flaw

• NetWalker ransomware gang member sentenced to 7 years in prison

• Understanding the Cybersecurity Risks Confronting Consumer Packaged Goods (CPG) Organisations

• CISA Adds One Known Exploited Vulnerability to Catalog

• Researcher Spotlight: Cyber Viking Nate Warfield is Here to Help

• UK Foreign Office Suffered ‘Serious Cyber Security Incident’

• ModifiedElephant APT Hacker Group Remain Secret For Years Using Advanced Sophisticated Techniques

• Darktrace on where security AI goes next: ‘Turning the tables’ on attackers

• Third-party risk management: No one size fits all

• Amazon steps in to close exposed FlexBooker bucket after December data breach

• India-Linked Threat Actor Involved in Spying, Planting Evidence

• FBI seized Colonial Pipeline ransom from DarkSide affiliate

• Apple Releases Security Updates for Multiple Products

• Deals: Apple’s Magic Keyboard on Sale for $49.99 (50% Off)

• DomainTools Announces Availability of Iris Detect

• Cryptocurrency Is Funding Ukraine’s Defense—and Its Hacktivists

• Raspberry Pi bootloader enables OS installs with no separate PC required

• Soon, iPhones will process contactless payments without extra hardware

• Amid rumors of Microsoft acquisition, Mandiant reports Q4 revenue of $132 million

• Russian researchers unlock Intel processors for reverse engineering

• Major UEFI vulnerability found in Microsoft, AMD and Intel servers

• UK Watchdog Accepts Google’s Revised Browser Cookie Pledge

• XML File Processing Vulnerabilities: XXE in C# Apps

• Apple Releases Security Updates for Multiple Products

• Blocking API Attacks: 3 Things To Consider

• Microsoft to Disable Autorun MOTW Macros – End of an Era for Macro Malware or Hard Reset?

• BlackBerry Seeks to Restore Its Past Glory With Services Push

• Spanish Police Arrest Suspects In SIM-Swapping Ring

• Ransomware Crew Dumps Stolen Optionis Files Online

• Sharp SIM-Swapping Spike Causes $68M In Losses

• Apple Moves To Stop AirTag Tracking Misuse

• After Lying Low, SSH Botnet Mushrooms And Is Harder Than Ever To Take Down

• Get updating: Apple releases iOS 15.3.1 patch for ‘actively exploited’ security flaw

• What CISOs Should Tell the Board About Log4j

• Could ‘expiration dates’ for AI systems help prevent bias?

• Apple zero-day drama for Macs, iPhones and iPads – patch now!

• Apple SSD Supplier Hit With Contamination Disaster, Flash Storage Prices Expected to Spike

• 15 Best 27-inch Full HD Monitor for Gaming 2022 – Better Gaming Experience

• Apple Patches Actively Exploited WebKit Zero Day

• Spanish Authorities Dismantle SIM Swapping Gang

• These cybercriminals plant criminal evidence on human rights defender, lawyer devices

• Apple addressed a third zero-day in 2022, which is actively exploited

• Xiaomi Pledges ‘War of Life and Death’ Against Apple to Become World’s Biggest Smartphone Brand

• FritzFrog Botnet Is Back and Focuses on Education, Healthcare, and Government Entities

• Online Safety Bill will legally require porn sites to verify users’ age

• Tesla Sued For Racial Discrimination By California

• Google Paid Out $8.7 Million in Bug Bounty Rewards in 2021

• Hacking Group ‘ModifiedElephant’ Has Been Living Out of Sight For a Long Time

• Ransomware crew dumps stolen Optionis files online

• Optionis Group leak: Vice Society ransomware crew dumps stolen files online

• On the Irish Health Services Executive Hack

• Health data of thousands of Dorset patients leaked by mistake

• WANT TO SPEAK AT (ISC)² SECURITY CONGRESS 2022? THE CALL FOR SPEAKERS IS NOW OPEN

• Lawmakers Introduce Combined Bill for Strengthening Critical Infrastructure Security

• Are You Being Tracked by an AirTag? Here’s How to Check

• Hackers Planted Fake Digital Evidence on Devices of Indian Activists and Lawyers

• Update now! Apple fixes actively exploited zero-day

• Iranian Hackers Employed a New Marlin Backdoor in a Surveillance Operation

• Android privacy settings to adjust

• How Does a WAF detect and respond to attacks?

• Apple To Issue AirTag Warning Amid Stalking Fears

• Senators: CIA Has Secret Program That Collects American Data

• Former NFL Player Gets Five Years for Healthcare Fraud

• Half of Global Emails Were Spam in 2021

• Apple fixes actively exploited iOS, macOS zero-day (CVE-2022-22620)

• Nearly $1.3 billion ransom paid to hackers since 2020

• DDoS attacks hit historic peak

• Last Year, Brute-Forcing Passwords and ProxyLogon Exploits were Among the Most Common Attack Vectors

• Spanish Cops Bust SIM Swap Fraud Gang

• Silicon UK In Focus Podcast: Workforce Trends and Technology

• Spanish police arrest suspects in SIM-swapping ring

• Vulnerabilities Found by Google Researchers in 2021 Got Patched on Average in 52 Days

• $1.3 billion lost to romance scams in the past five years: FTC

• Log4j exploitation risk is not as high as first thought, cyber MGA says

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• How Pure Storage helps customers guard against ransomware

• Health Sites Share User Info With Facebook | Avast

• Top Product Award From AV-TEST | Avast

• France Rules That Using Google Analytics Violates GDPR Data Protection Law

• CIA illegally harvested US citizens’ data, senators assert

• Why identity and access management strategies need a booster

• Cloud security training is pivotal as demand for cloud services explode

• New infosec products of the week: February 11, 2022

• CIA illegally collected and accessed US citizens’ data during trawls aimed at ISIS, Senators assert

• Apple fixes active zero-day vuln with macOS 12.2.1, iOS 15.3.1, Safari 15.3

• Chinese APT27 Hacking Group targeting German companies

• Beware of Romance Frauds for Valentines Day 2022

• How to prepare your organization for this year’s cybersecurity incidents

• The most common cyber gaps threatening supply chain security

• Beware of spies and radicalisation attempts online: ASIO chief

• Spanish police dismantled SIM swapping gang who stole money from victims’ bank accounts

• AI can spot biometric spoofing attacks with ease

• Execs concerned about failing to deliver working arrangements that meet employee expectations

• Is it Easier to Turn Cloud Professionals into Security Practitioners or Vice Versa?

• Organizations and the cloud: How they use it and how they secure it

• Tech Pros Gain Environmental, Social and Governance Good Practices in New ISACA Primer

• Messaging, Malware and Mobile Anti-Abuse Working Group Members Gather to Address Email, Messaging and Online Security and Abuse Issues

• Attivo Networks Innovations in Identity Security Snap up 6 Golds at the 2022 Cybersecurity Excellence Awards

• Online CISSP Exam Coming Soon

• 6 Cybersecurity challenges facing digital banking

• DDoS Attacks Hit All-time High

• Digital identity revenue to exceed $53B in 2026

• Gigamon’s new ThreatINSIGHT Guided-SaaS NDR provides visibility into historical network data

• Cofense Validator identifies overlaps in email security controls

• Apple Releases iOS, iPadOS, macOS Updates to Patch Actively Exploited Zero-Day Flaw

• Jetico BCWipe Privacy Guard empowers users to disable Microsoft’s default tracking features

• NordVPN Threat Protection improves online safety and browsing experience

• Dynatrace strengthens cloud application security with real-time attack detection and blocking

• Appgate’s behavioral biometrics service identifies fraudulent activity online

• ADVA Ensemble Simulator enables end-to-end configuration testing

• Critical Microsoft vulnerability from 2020 added to list of exploited flaws

• French privacy regulator finds using Google Analytics can breach GDPR

• 2022-02-08 – Files for an ISC diary (Emotet with Cobalt Strike)

• Attack Surface Management Driving Secure Digital Transformation

• FalconStor and Hitachi Vantara deliver disaster recovery and cloud-enabled protection for enterprises

• Moxa customers urged to patch five vulnerabilities found in MXview network management software

• Hidden in plain sight: How the dark web is spilling onto social media

• Microsoft Disabling Macros Is a Huge Win for Security

• BigID appoints Sigal Zarmi to Board of Advisors

• BIO-key acquires Swivel Secure Europe to expand channel partnerships and customer base within EMEA

• CISA Adds 15 Known Exploited Vulnerabilities to Catalog

• Aqua Security expands its channel and sales team with new appointments

• Suzanne Muchin joins Knightscope Board of Directors

• 3 cybersecurity trends & mitigation strategies for CISOs

• Over 500 Magento sites hacked in payment skimmer attack

• Nearly $700 million spent on ransomware payments in 2020 alone: report

• Decryptor Keys Published for Maze, Egregor, Sekhmet Ransomwares

• Credential-Stuffing Attacks on Remote Windows Systems Took Off in 2021

• Retailers’ Offboarding Procedures Leave Potential Risks

• CISA Adds 15 Known Exploited Vulnerabilities to Catalog

• Apple’s 2022 Mac Mini Refresh: Everything We Know

• Our ‘Arbiters of Truth’ Podcast Series Has Its Own Feed!

• Riverbed | Aternity appoints two executives to accelerate company strategy

• This malware gang plants incriminating evidence on PCs, gets victims arrested

• IT Security News Daily Summary 2022-02-10

• WhiteSource report warns of NPM registry risks

• AI engine exposes online fraud

• New VA CIO talks digital transformation

• Why StateRAMP works for state and local cloud procurements

• Cloudflare reports $656 million revenue in 2021, strong Q4

• Sharp SIM-Swapping Spike Causes $68M in Losses

• For past decade, malware gang planted incriminating evidence on victims’ PCs

• Alphabet’s CapitalG Makes Big Bet on Salt Security

• Apple Releases Security Update for Webkit Flaw

• This malware gang plants incriminating evidence on victims’ PCs. Who are they?

• Mike Bloomberg named chair of Defense Innovation Board

• 3 Reasons We Forget Small & Midsized Businesses are Major Targets for Ransomware

• Key Senators Have Voted For The Anti-Encryption EARN IT Act

• Cloudflare acquires ‘modern’ CASB, aims to become most-deployed SASE

• F-35 program seeks cyber reinforcements

• Selfies now optional for ID.me verification

• 6 blockchain use cases for cybersecurity

• Apple Releases Safari Technology Preview 140 With Bug Fixes and Performance Improvements

• Universal Control Not Working? Here’s How to Fix It

• Ways to Keep Your Business Data Secure From Cyber Attacks

• Evidence-based policing platform boosts state police effectiveness

• Ransomware: Who’s likely to pay?

• Apple Says WebKit Zero-Day Hitting iOS, macOS Devices

• Defense Contractors Need to Check Their Six

• Malicious QR Codes Flood Twitter To Deliver a Malicious Chrome Extension

• Apple plans to make finding unwanted AirTags easier

• New Windows 11 test build includes promised features

• SIEM Explained: What is SIEM and How Does it Work?

• Warning: If You Use the Zimbra Webmail Older Version, you could be a Victim of Phishing!

• MISP and VT Collections

• Radare Plugin is Here for Intezer Community

• Orca Security Adds Expanded CIEM Capabilities and Multi-Cloud Security Score to Cloud Platform

• Dynatrace Launches DevSecOps Automation Alliance Partner Program

• Dynatrace Adds Real-Time Attack Detection and Blocking, Advancing Cloud Application Security

• ‘There’s a correlation between geopolitical tension and the rise of cyberattacks,’ says CyberArk CEO

• SIEM, XDR, and the Evolution of Cybersecurity Infrastructure

• Samsung Reveals S22 Galaxy Smartphones, Made From Fishing Nets

• Apple plans to make it easier to find unwanted AirTags

• Data Protection and Privacy Firm Titaniam Raises $6 Million in Seed Funding

• Ransomware Recovery Startup Calamu Banks $16.5M Investment

• What We Have and Haven’t Learned About Terrorism Financing

• Google Drive accounted for 50% of malicious Office document downloads

• Why Everyone Needs a VPN

• Gigamon revamps ThreatINSIGHT NDR solution to add 365-day data retention

• Titaniam Secures $6 Million in Seed Funding

• Allure Security Raises $6.8 Million Seed Funding Round

• Microsoft Defender Preview is now available on Windows 10 and 11

• House panel zeros in on missing Trump records

• Adobe urges customers to upgrade after 500 stores breached through Magento platform

• SAP Patches Severe ‘ICMAD’ Bugs

• Why Massachusetts’ data breach reports are so high

• Apple Releases watchOS 8.4.2 With Bug Fixes

• Apple Releases iOS and iPadOS 15.3.1 With Security Updates and Bug Fixes

• Apple Announces AirTag Updates to Address Unwanted Tracking

• Apple Releases macOS Monterey 12.2.1 With Bluetooth Battery Drain Bug Fix

• How To Improve Federal Endpoint Detection and Response Tactics and Gain Network Visibility

• Qbot Malware: Steals Your Data In 30 Minutes

• Falcon XDR: Why You Must Start With EDR to Get XDR

• Falcon XDR: Extending Detection and Response – The Right Way

• Californian College Attacked with Ransomware

• Vulnerability Reward Program: 2021 Year in Review

• What’s Next in Security from Microsoft

• Ransomware author releases decryption keys, says goodbye forever

• UK Nuclear Fusion Experiment Breaks Record

• Report: Companies face a 37% chance of losing IP when employees quit

• SAP to Give Threat Briefing on Uber-Severe ‘ICMAD’ Bugs

• SANS Institute Launches Nationwide Scholarship Program

• API Security in the spotlight as Salt Security becomes next Black Unicorn

• Free Decrypter Released for the TargetCompany Ransomware

• Russian Man and his Wife Arrested in U.S. for Stealing Record $4.5 billion in Bitcoins

• Pay to Play PrivateLoader Disseminates Smokeloader, Redline &Vidar malware

• Operator 5G Engagements Increase by More Than 50%, Driven by Standalone Core, Network Cloudification and Operational Agility

• HOW TO BECOME AN (ISC)² VOLUNTEER AND MAKE A DIFFERENCE IN THE CYBERSECURITY COMMUNITY

• How digital ID wallets are meeting the needs of modern society (part one)

• Ransomware hackers netted $1.3 billion in the last two years

• FBI Arrest Couple For Alleged Laundering Of $4.5bn In Bitcoin

• This Android banking trojan is spreading by copying the tactics of another malware menace

• 2021 Record Year for Cybersecurity M&A, Financing: Report

• 2021 Vulnerability Landscape

• Sexy Horror Comedy: Bitcoin Laundering Suspect Is Also Raunchy Rapper Razzlekhan

• Use Zoom On A Mac? You Might Want To Check Your Mic Settings

• Microsoft Will Block Macros By Default From Internet Downloads

• Hackers Are Helping People Regain Their Bitcoin Fortunes

• FritzFrog Botnet Returns To Attack Healthcare, Education, Government Sectors

• Apple Hit With Class Action Lawsuit Over ‘Jelly Scrolling’ on iPad Mini

• French Watchdog Says Google Analytics Poses Data Privacy Risks

• Using the Law to Advance Oppression: How Kazakhstan Presents a Veneer of Due Process to Silence Opposition

• The Chatter Podcast: China’s Hold on Hollywood with Erich Schwartzel

• ICO Hit by 2650% Rise in Email Attacks

• Facebook Whistleblower Outlines How Platform’s Algorithms Can Be Harmful

• Threat actors compromised +500 Magento-based e-stores with e-skimmers

• Deals: Take $50 Off Apple’s 256GB iPad Mini 6 ($599) and 12.9-Inch Magic Keyboard ($299)

• Cyber insurance paradigm shift: Protecting the business without the ‘hail mary’ remedy

• Biden Earmarks $5bn For US Electric Vehicle Charging Stations

• This password-stealing malware posed as a Windows 11 download

• FritzFrog botnet returns to attack healthcare, education, government sectors

• Data Transparency Hasn’t Made Us Safer Yet. Can It Uncover Breach Causality?

• Cybersecurity Association of Maryland to set up Centres of Excellence

• European banks told to step up cyberattack defenses amid Russia-Ukraine crisis

• SOAR: What it is, how it works, and its main advantages

• API protection platform Salt Security raises $140M

• Meta Sues Two Nigerians Who Lured Facebook Users to Phishing Sites

• Playing With Crypto? You’ll Need a Wallet (or Several)

• Apple Supplier Foxconn Says Shortages Now Easing

• A new Magecart campaign is making waves

• Use Zoom on a Mac? You might want to check your microphone settings

• How to Have a Smooth Digital Breakup | Avast

• PHP Everywhere Bugs Put 30K+ WordPress Sites at Risk of RCE

• New Vulnerabilities Can Allow Hackers to Remotely Crash Siemens PLCs

• Almost $1.3bn Paid to Ransomware Actors Since 2020

• FritzFrog P2P Botnet Attacking Healthcare, Education and Government Sectors

• Attackers Increasingly Adopting Regsvr32 Utility Execution Via Office Documents

• How Ransomware Gangs Use Automation, and How You Can Beat It

• Russia:  The Cyber Global Protagonist

• $100K Bounty To Hack ExpressVPN – YouAttest Comments

• Data From Washington Data Breach May Be On ‘Dark Web’

• Men Are 35% Less Likely Than Women To Have No Home Security Measures In Place, Despite Rise In Burglaries Warning

• FCA Warns Banks On Cyber Threats, Expert Reaction

• Announcing the 2022 Federal 100

• COVID Does Not Spread to Computers

• Simplify Security at the Virtual Edge with Cisco Secure Firewall and Network Edge from Equinix

• Elevating the Risk Discussion – Quantitative Analytics

• Legit Security raises $30M to launch SaaS-based solution for supply chains

• Critical Code Execution Flaws Patched in ‘PHP Everywhere’ WordPress Plugin

• How Does An IPv6 Proxy Work & How Enterprises Can Get Benefit?

• Gov Tighten Online Safety Laws

• Why Things MUST Change This Safer Internet Day, Experts Weigh In

• 2021 Trends Show Increased Globalized Threat Of Ransomware – Expert Commentaries

• Mobile Device Management: A Journey Through A Decade

• Apple Turns iPhone Into Mobile Payments Terminal

• FBI: Ransomware attackers have code to halt critical infrastructure

• Ransomware Targeted 14 of 16 U.S. Critical Infrastructure Sectors in 2021

• Bunnie Huang’s Plausibly Deniable Database

• Goals for Your Cybersecurity Career Path:Setting New Year’s Resolutions

• Maze, Egregor and Sekhmet Master Decryption Keys Provided by Their Developer

• 30,000 WordPress Websites Are at Risk Due to RCE Bugs in PHP Everywhere

• ThriveDX raises $100M to bring security training to both new talent and corporate employees

• Web Skimmer Injected Into Hundreds of Magento-Powered Stores

• University Project Cataloged 1,100 Ransomware Attacks on Critical Infrastructure

• The SASE Conversation in 2022, a Resolution for the Future

• Spyware, ransomware and Nation-state hacking: Q&A from a recent interview

• Linux malware attacks are on the rise, and businesses aren’t ready for it

• CISOs Reveal Biggest Challenges for Security Teams

• Rapper accused of laundering billions worth of bitcoin

• MageCart attacks hit hundreds of outdated Magento sites

• Criminals Are Using SIM Swap Attacks to Steal Millions

• Vodafone Portugal Services were Disrupted due to a Cyberattack

• Hackers Linked to Palestine Use the New NimbleMamba Malware

• Breaking Up Is Hard To Do – Intego Mac Podcast Episode 226

• Share your love on Valentine’s Day, but keep your credentials to yourself

• PHP Everywhere code execution bugs impact thousands of WordPress websites

• New Ransomware Warning for Critical Infrastructure Providers

• FBI: SIM Swapping Attacks Have Surged Five-Fold

• CISA, FBI, NSA Issue Advisory on Severe Increase in Ransomware Attacks

• Critical RCE flaws in PHP Everywhere WordPress plugin affect thousands of sites

• Android Apple Music Beta Code Refers to Unreleased ‘Apple Classical’ App

• DDoS attacks in Q4 2021

• 16 Best Laptops for Linux 2022 (for Ubuntu & Other Linuxes) – HP, Dell, Acer

• SAP customers are urged to patch critical vulnerabilities in multiple products

• US citizens lost more than $68M to SIM swap attacks in 2021, FBI warns

• Do you know what your supply chain is and if it is secure?

• 8 Penetration Testing Trends You Should Know in 2022

• Australian inquiry backs Taiwan CPTPP accession but doesn’t do the same for China

• Zero trust adoption will continue to mature

• Australian inquiry backs Taiwan CPTPP accession but doesn’t do the same for China

• Russia Cracks Down on 4 Dark Web Marketplaces for Stolen Credit Cards

• Tips to mitigate public-key cryptography risk in a quantum computing world

• Critical RCE Flaws in ‘PHP Everywhere’ Plugin Affect Thousands of WordPress Sites

• Low code applications are essential for cybersecurity development in applications

• 8 Penetration Testing Trends You Should Know in 2022

• Zero trust adoption will continue to mature

• Why the C-suite should focus on understanding cybersecurity and investing appropriately

• Product showcase: Sniper – automatically detect and exploit critical CVEs in minutes

• Ransomware attacks are changing tactics and might prove costlier to victims

• Banks in US and Europe put on high cyber attack alert

• Ransomware attacks, and ransom payments, are rampant among critical infrastructure organizations

• Canonic Security Emerges From Stealth With $6 Million and SaaS App Sandbox

• Cloud migrations are taking longer, and require bigger budgets than expected

• Swipe left: Snoops use dating apps to hook sources, says Australian Five Eyes boss

• The Reaction of Russian Hackers to the Arrests of REvil Became Known

• Register Today! By Popular Demand, More Entry-Level Cybersecurity Certification Pilot Exam Review Offerings Now Available

• DO YOU KNOW SOMEONE INTERESTED IN A CAREER IN CYBERSECURITY? AT JUST $125 THE NEW PILOT EXAM FOR THE (ISC)² ENTRY-LEVEL CERTIFICATION CAN CATAPULT THEIR CAREER FORWARD

• The ultimate guide to Cyber risk management

• Using KPIs to generate results in Cybersecurity

• What is Shift-Left Testing and What are the Benefits?

• Data center interconnect market to reach $17 billion by 2026

• EFF Sends Letter to the Senate Judiciary Committee to Oppose EARN IT

• Microsoft To Block Internet Macros by Default to Block Hack Attacks

• Auth0 Credential Guard prevents fraudulent access with stolen credentials

• Cybellum’s latest platform release enables product security teams to pinpoint threats and vulnerabilities

• Fastly Next-Gen WAF’s edge deployment option protects business-critical applications and APIs

• Zentera helps SMEs defend against insider threats and ransomware

• Federal Reserve releases Synthetic Identity Fraud Mitigation Toolkit to help businesses fight fraud

• DataStax’s new security capabilities in Astra DB prevents unauthorized access to sensitive PII data

• SpinOne for Salesforce allows enterprises to secure and manage Salesforce data

• Kong Enterprise 2.7 enables companies to manage APIs and microservices at scale

• Russian Govt. Continues Carding Shop Crackdown

• Becoming an MSSP: Tools, Services & Tips for Managed Security Services

• Australia’s anti-trolling Bill enters Parliament retaining defamation focus

• S3 Ep69: WordPress woes, Wormhole holes, and a Microsoft change of heart [Podcast + Transcript]

• CoreStack collaborates with Virtusa to deliver multi-cloud governance solution for enterprises

• MorganFranklin Consulting partners with OneTrust to help clients navigate compliance challenges

• NTT and ServiceNow join forces to accelerate private 5G adoption

• All You Need to Know About User Session Security

• ESET Threat Report T3 2021

• Brendan Peter joins Socure as VP of Government Relations

• Vicarius raises $24 million to expand its team and grow engineering operations

• What is an SFP transceiver? Tips on choosing the tight SFP transceivers

• Putting AI to Practical Use in Cybersecurity

• Arturo Pena joins SoftServe as CMO

• CertiPath promotes Jeff Torello to CTO

• SecureAuth appoints Paul Trulove as CEO and Mandeep Khera as CMO

• Robots Have No Place Filtering Creative Content, EFF Tells U.S. Copyright Office

• And the Winners of the 2022 Cybersecurity Excellence Awards Are …

• February 2022 Patch Tuesday: Windows Kernel Zero-Day and Servicing Stack Updates

• Cross-agency collaboration efforts are making progress

• Experts: Several CVEs From Microsoft’s February Security Update Require Prompt Attention

• The DOJ’s $3.6B Seizure Shows How Hard It Is to Launder Crypto

• Securiti expands presence in EMEA to offer data privacy and protection solutions

• NetWitness Partner Program improves threat detection and response capabilities for enterprises

• Auth0 puts new feature to detect breached passwords to the test

• Sensor, satellite data help map, predict heat islands

• Auth0 Credential Guard Detects Breached Passwords to Prevent Account Takeover

• Linux Malware on the Rise

• A Survey of Recent Developments and Trends in Universal Jurisdiction

• IT Security News Daily Summary 2022-02-09

• Rapid7 reports 2021 revenue of $535 million, beats Wall Street estimates

• CISA warns to address SAP ICMAD flaw immediately

• Microsoft acted too late on major security threat, Okta exec says

• Decryptor released for Maze, Egregor, and Sekhmet ransomware strains

• Telstra aims up at government cybers with new specialist arm

• Rapid7 reports 2021 revenue of $535 million

• Cybercriminals Swarm Windows Utility Regsvr32 to Spread Malware

• What Is DevSecOps and Why Is It Important for Cybersecurity?

• Tesla Design Chief on Apple Products: ‘There’s Nothing to Look Forward To’

• 3 Tips for Facing the Harsh Truths of Cybersecurity in 2022, Part I

• Microsoft February Patch Tuesday Addresses 51 Bugs Including A Zero-Day

• Researchers Found Zimbra Zero-Day XSS Vulnerability Under Attack

• “Merry-Maker” Card Skimmer Scanner Tool Released As Open Source

• CISA’s public-private cyber defense group helped speed Log4j mitigation, experts say

• Connected vehicle data often goes unused

• Ransomware groups shift from big game hunting

• Google: 2-step verification led to 50% fewer account hacks

• Cybersecurity threats are always changing—staying on top of them is vital, getting ahead of them is paramount

• 7 Keys to Customer Success Programs in Security

• ECB Warns Banks To Prepare For Russian Cyberattacks

• $3.6 billion worth of Bitcoin seized from crooks tied to 2016’s Bitfinex hack

• Identifying, Exploiting, and Preventing Host Header Attacks on Web Servers

• Activists, Writers, and Security Experts All Oppose the EARN IT Act

• Legislation Watch: 2021 State Cybersecurity Roundup and States to Watch in 2022

• How automated certificate management helps retain IT talent

• Ten Questions We Hope the Cyber Safety Review Board Answers—and Three It Should Ignore

• Four Takeaways From Samsung’s Galaxy S22 Event for Apple Users

• Apple Seeds Second Public Betas of iOS 15.4 and iPadOS 15.4 With Universal Control, Face ID With Mask Support and More

• Apple Seeds Second Public Beta of macOS Monterey With Universal Control

• Maryland Cyber Nonprofit to Create Centers of Excellence

• Microsoft Blocks VBA Macros by Default, Temporarily Shuts Down MSIX Protocol

• Congress pressures more agencies to end use of facial recognition after ID.me debacle

• Canonic Software Emerges From Stealth With $6 Million and SaaS App Sandbox

• Russia continues cybercrime offensive with SkyFraud takedown

• How to successfully scale software bills of materials usage

• Fifth of Young Women in UK Were Cyber-Flashed in Past Year

• Master decryption keys for Maze, Egregor, and Sekhmet ransomware leaked online

• MacRumors Giveaway: Win an iPhone 13 Pro to Celebrate the Launch of ‘RPG Dice: Heroes of Whitestone’

• UK, US, Australia issue joint advisory: Ransomware on the loose, critical national infrastructure affected

• Safer Internet Day 2022 – How Can The Online World Be A Safer Place?

• An Israeli Spy Agency, QuaDream, Hacks Devices

• Black Cat Ransomware Linked with Gangs DarkSide/BlackMatter

• Washington State Database Breach May Expose Personal Data

• North Korea Stealing Millions in Cyber Attacks

• Build a Champion SOC with VirusTotal and Palo Alto Networks Cortex XSOAR

• Space Storm To Destroy 40 Satellites, SpaceX Warns

• How to Secure Your Digital Wallet

• Ruby Protocol lands $7.3M for Web3 encryption solution

• COVID and U.S. culture — with lessons for government officials

• Best browser for privacy 2022: Secure web browsing

• UK, US, Australia issue joint advisory: Ransomware-as-a-service on the loose, critical national infrastructure affected

• Russian Law Enforcement Take Down Several Cybercrime Forums

• Cyber Attack disrupts Vodafone Portugal entire 4G and 5G Network

• Apple accidentally kept some Siri recordings from iPhones, even for opted-out users

• Hamas Cyberspies Return With New Malware After Exposure of Operations

• Microsoft Manages A Mere 51 Security Fixes For February Update Bundle

• Digital Art Auction Raises $52 Million For Assange Defense

• Feds Arrest Couple Who Allegedly Laundered $1 Billion In Stolen Bitcoins

• Critical Remote Escalation Flaw In Android 12 Fixed In Feb Security Patch

• Vodafone Portugal Mobile & TV Brought Down By Cyberattack

• Expert Reaction On Microsoft Disables Office Doc Macros

• IRS abandons facial recognition plans for online services

• 2021 Trends Show Increased Globalized Threat of Ransomware

• Deals: Get Apple’s 256GB Wi-Fi iPad for Record Low Price of $449

• Safari Team Asks for Feedback Amid Accusations That ‘Safari Is the Worst, It’s the New IE’

• Facebook Should Tighten Doxing Rules, Says Oversight Board

• IRS and Digital Identity | Avast

• Self-styled “Crocodile of Wall Street” arrested with husband over Bitcoin megaheist

• Log4j and the Role of SBOMs in Reducing Software Security Risk

• 2021 Trends Show Increased Globalized Threat of Ransomware

• 2021 Trends Show Increased Globalized Threat of Ransomware

• Microsoft February 2022 Patch Tuesday security updates fix a zero-day

• Defending Fire: A Need for Policy to Protect the Security of Open Source

• Can a Congressional Committee Subpoena Members of Congress?

• Washington Licensing Dept Data Breach, Experts Reacted

• A Quarter Of SMEs Still Avoiding Payroll Solutions – With Security A Top Cloud Concern

• End of 2021 witnessed an explosion of RDP brute-force attacks

• This malware is reading your email just 30 minutes after infecting your PC

• Ransomware warning: Attacks are rising, and they’ll keep coming if victims keep paying

• 2021 Trends Show Increased Globalized Threat of Ransomware

• U.S. Arrests Two and Seizes $3.6 Billion Cryptocurrency Stolen in 2016 Bitfinex Hack

• How to Detect and Defend Against Domain Abuse

• 20 Best Linux Laptops 2022 – Lenovo, ASUS, Dell, and HP

• 15 Best HP Laptops for College Students 2022 – For Easier Learning

• Ex-Gumshoe Nabs Cybercrooks with FBI Tactics

• MoleRats APT Flaunts New Trojan in Latest Cyberespionage Campaign

• Vulnerability Remediation Platform Vicarius Raises $24 Million

• Guide: Alert Overload and Handling for Lean IT Security Teams

• U.S. Arrests Two and Seizes $3.6 Million in Cryptocurrency Stolen in 2016 Bitfinex Hack

• What Is Digital Asset Management (DAM) and Why You Need It

• 20 Best Linux Laptops 2022 – Review and Buying Guide

• Data Highlights Growing Threat From Intelligent Bots Operated at Scale by Cybercriminals

• Defending Against Critical Threats: Analyzing Key Trends, Part 2

• Lasting Impact of the Pandemic – Lessons from the 2021 (ISC)² Workforce Study

• Romance Fraud Losses Increased by 91% During COVID-19

• Calamu raises $16.5M to enhance its virtual data harbor

• Wallaroo, an MLOps platform for enterprises, raises $25M

• FBI Received 1,600 SIM Swapping Complaints in 2021

• Google February 2022 Android security updates fix remote escalation bug

• North Korean APT Kimsuky Uses Commodity RATs with Custom Gold Dragon Backdoor

• Vodafone Portugal Networks Still Down After ‘Malicious’ Cyberattack

• How We Can All Work Together For a Better Internet

• Update now! Firefox and Adobe updates are more critical than Microsoft’s

• This malware is reading your email 30 minutes after the first infection

• ICS Patch Tuesday: Siemens, Schneider Electric Address Nearly 50 Vulnerabilities

• Protecting Cryptocurrencies and NFTs – What’s Old is New

• Breaking 256-bit Elliptic Curve Encryption with a Quantum Computer

• Vivaldi 5.1 Adds Ability to Scroll Through Browser Tabs Horizontally in the Tabs Bar

• News Corp Reportedly Targeted by Chinese Hackers

• Microsoft: Slow MFA adoption presents “dangerous mismatch” in security

• Wireless Network Security Best Practices

• Security VC hit nearly $30B in 2021, with startups rapidly going from ‘zero to billions’

• FBI warns: SIM-swapping attacks are rocketing, don’t brag about your crypto online

• Safer Internet Day 2022 – How Can The Online World Be Safer Place?

• Vodafone Portugal 4G and 5G Services Got Shut Down

• Microsoft Mulls Mandiant Purchase To Bolster Security – Report

• Brute-forcing passwords, ProxyLogon exploits were some of 2021’s most popular attack methods

• Iranian Hackers Using New Marlin Backdoor in ‘Out to Sea’ Espionage Campaign

• Molerats hackers deploy new malware

• How cybercriminals are using malware to target Linux-based operating systems

• UK Foreign Office Subjected to “Serious Cybersecurity Incident”

• Russian APT Hackers Used COVID-19 Lures to Target European Diplomats

• Foreign Office hit with ‘serious cyber incident’

• Ransomware gang affiliate sentenced to 7 years

• Cryptocurrency organisations hit with fake job offers

• Rise of the Privacy Industry | Avast

• Lazarus hackers target defense industry with fake Lockheed Martin job offers

• Home Workers More Likely to Be Concerned About Security

• Spam and phishing in 2021

• Apple’s ‘realityOS’ for Rumored AR/VR Headset Referenced in Source Code

• CISA Asks Federal Agencies to Fix Win32k Privilege Escalation Flaw as Threat Actors Actively Exploiting

• School-Aged Students Urged to Consider New Cyber Qualification

• No Critical CVEs Fixed in February Patch Tuesday

• Foreign Office Suffered ‘Serious Cyber Security Incident’

• The Pirate Bay clones target millions of users with malware and malicious ads

• Build your own Android security product

• Critical ‘remote escalation’ flaw in Android 12 fixed in Feb security patch batch

• Why security strategies need a new perspective

• Sri Lanka to adopt India’s Aadhaar digital identity scheme

• Microsoft and Other Major Software Firms Release February 2022 Patch Updates

• Product showcase: Oxeye.io – Cloud native application security testing

• Meter Claimed that a Hack on the Platform Resulted in the Theft of $4.4 Million

• 2021 was the most prolific year on record for data breaches

• Google Cloud to detect Crypto Mining in Virtual Machines

• Pentagon Senior Cybersecurity Official Katie Arrington resigns

• 78% of organizations expect to produce or consume SBOMs in 2022

• Organizations still struggling to use APIs effectively

• EFF Joins Activists And Human Rights Groups To Reject Attacks on Encryption

• Preventing software security vulnerabilities with automation

• Mandiant and SentinelOne Partner to Safeguard Organizations Against Cyber Threats

• Sarah Ashburn of Attivo Networks Named to 2022 Channel Chiefs by CRN

• ECS President John Heneghan Named Wash100 Award Winner by Executive Mosaic

• No Excuses: Get Your (ISC)² Certification Done in 2022

• Quantum computing brings new security risks: How to protect yourself

• Digital signature market to reach $7.1 billion by 2025

• Understanding the Cybersecurity Risks Confronting Consumer Packaged Goods (CPG) Organisations

• InterVision RPaaS helps organizations tackle growing ransomware attacks

• The metaverse should be ‘locally legislated’ — the way the real world is, says Second Life founder

• CORL’s medical device risk assessment toolkit protects medical and IoT devices

• Poland Launches Cybersecurity Military Unit

• Eclypsium partners with Macnica to expand security solutions and services in Japan and APAC

• Armorblox collaborates with Coalition to protect organizations against sophisticated email attacks

• Mandiant cozying up to both Microsoft and SentinelOne, apparently

• US: Your AI has to explain its decisions

• Microsoft manages a mere 51 security fixes for February update bundle

• iOS 15.4 Beta 2 Fixes Bug That Caused Some iPhones to Record Siri Interactions Even When Users Opted Out

• Trellix announces three executive leadership appointments

• Trulioo acquires HelloFlow to advance its end-to-end identity platform

• Alteryx acquires Trifacta to meet enterprise customers’ analytics needs

• Russian researchers unlock Intel processors for reverse engineering

• OPM needs more reliable telework data, watchdog says

• SAP releases patches for ICMAD vulnerabilities, log4j issues, more

• NetWalker ransomware gang affiliate pleads guilty, slapped with 7-year sentence

• ConnectWise forms four Innovation Business Units and appoints new CISO

• NinjaOne appoints Mike Arrowsmith as Chief Trust Officer

• Silvio Pappalardo joins QuintessenceLabs as CRO

• VMware appoints two executives to the company’s Go-To-Market leadership team

• Russia seizes Trump Dumps, Ferum, and SkyFraud carding forums

• Houston’s smart kiosks aid wayfinding, promote local attractions

• SAP releases patches for ICMAD vulnerabilities, Log4J issues and more

• DOJ recovers $3.6B from 2016 Bitfinex hack

• Microsoft Issues 51 CVEs for Patch Tuesday, None ‘Critical’

• Pondurance Channel Partner Program helps organizations improve their cybersecurity posture

• VERT Threat Alert: February 2022 Patch Tuesday Analysis

• Microsoft Patch Tuesday, February 2022 Edition

• Adobe Releases Security Updates for Multiple Products

• Send Surveillance Robot Dogs to the Pound, Not the Border

• IT Security News Daily Summary 2022-02-08

• Report: 80% of security pros report their org suffered from ransomware attacks in 2021

• Multibillion Army headset program is ‘alive and well’ despite delays, secretary says

• Facebook Oversight Board Tells Company To Crack Down Harder On Doxxing

• Google Cuts User Account Compromises in Half With Simple Change

• Adobe Releases Security Updates for Multiple Products

• US seizes $3.6 billion worth of cryptocurrency stolen in 2016 Bitfinex hack

• Five Takeaways from FlexBooker’s Data Breach

• Chipotle is an expensive stock but I like it, says Guy Adami

• A Cloud Native Application Protection Platform Guide

• Amid rumors of Microsoft acquisition, Mandiant reports Q4 revenue of $132 million

• Microsoft disables VBA macros by default

• Citrix Releases Security Updates for Hypervisor

• A More Modern Approach to Logging in Go

• Threat Actors Revive 20-Year-Old Tactic in Microsoft 365 Phishing Attacks

• Get Started on Continuous Compliance Ahead of PCI DSS v4.0

• Citrix Releases Security Updates for Hypervisor

• macOS Monterey 12.3 Beta 2 Appears to Fix Bluetooth-Related Battery Drain Issue During Sleep Mode

• Everything New in iOS 15.4 Beta 2: Face ID Updates, Tap to Pay Code and More

• FBI seizes $3.6bn in Bitcoin after New York ‘tech couple’ arrested over Bitfinex robbery

• How To Compare The Top Home Security Brands of 2022

• Collecting, managing vaccination info advances agency data maturity

• How low code can strengthen existing systems to maximize investments

• Top Single Sign-On (SSO) Solutions for 2022

• If EARN IT Passes, What Happens On Your iPhone Won’t Stay On Your iPhone

• Government To Force Age Verification On Porn Websites

• Protect Children from Online Danger on Internet Safety Day

• Legislation to expand federal contracting opportunities reaches president’s desk

• DOJ seizes $3.6 billion in crypto from 2016 Bitfinex hack, arrests New York couple

• Microsoft February 2022 Patch Tuesday: 48 bugs squashed, one zero-day resolved

• No Critical Bugs for Microsoft February 2022 Patch Tuesday, 1 Zero-Day

• SAP Customers Warned About Critical ‘ICMAD’ Vulnerabilities

• Apple Preparing for Driver’s Licenses on iPhone in iOS 15.4 Beta

• Canadian Netwalker ransomware crook pleads guilty to million-dollar crimes

• Microsoft Patches for 51 Windows Security Defects

• The Alt-Right on Facebook Are Hijacking Canada’s Trucker Blockade

• A “light” February 2022 Patch Tuesday that should not be ignored

• Ohio: Don’t Give Big Tech a Pass On Privacy

• How Your Smartphone Can Be Used to Steal Your Data

• Adobe Patches 13 Vulnerabilities in Illustrator

• Top Single Sign-On (SSO) Solutions

• iOS 15.4 Beta 2 Adds ‘Tap to Pay on iPhone’ Framework

• Vodafone Portugal hit with cyberattack affecting 4G/5G network, TV, SMS services

• Microsoft Releases February 2022 Security Updates

• CISA Warns of Critical Vulnerabilities in Airspan Networks Mimosa

• The Examination of the Seized Equipment of the Lurk Group did not Reveal the Fact of an Attack on the US Government

• Vodafone Portugal hit with cyberattack affecting 4G/5G network, TV, SMS services and more

• Justice Dept. Announces $3.6B Crypto Seizure, 2 Arrests

• Vulnerability Scanning Triples, Leading to Two-Thirds Fewer Flaws

• Microsoft Releases February 2022 Security Updates

• Apple TV+ Movies ‘CODA’ and ‘The Tragedy of Macbeth’ Score Oscar Nominations

• Apple Seeds Second Beta of tvOS 15.4 to Developers

• Apple Seeds Second Beta of watchOS 8.5 to Developers

• Apple Seeds Second Betas of iOS 15.4 and iPadOS 15.4 to Developers

• Apple Seeds Second macOS Monterey 12.3 Beta to Developers

• Cybercriminals Hunt For Medical Data. Zero Trust As The Only Good Option To Keep The Healthcare System Secure

• How Do I Reliably Identify You If I Cannot See You?

• Microsoft Defender: Coming soon to a group of ‘family’ devices, including phones

• Pros and cons of manual vs. automated penetration testing

• Top Pentagon Cybersecurity Official Resigns

• Cyber Terrorism Is a Growing Threat & Governments Must Take Action

• Vodafone Portugal hit by a massive cyberattack

• Intuit Alerted About Phishing Emails Threatening to Delete Accounts

• Nissan To End Development Of New Combustion Engines – Report

• Christian crowdfunding site GiveSendGo hit by DDoS attack

• Former lead of CMMC resigns amid legal drama

• Microsoft 365 Phishing Attack Makes Comeback

• Apple Attracting Retail Workers With Improved Benefits

• Stripe Launches ‘Tap to Pay on iPhone’ Beta Program Ahead of ‘Spring’ Release

• New York couple arrested in alleged plot to launder $4.5 billion in crypto

• Meta blows safety bubble around users after reports of sexual harassment

• How and Why to Partner with DHS S&T in 2022 (Multi-Video)

• Law Enforcement Blowback, Cyber Insurance Renewals Powering Anti-Ransomware Success

• At last! Office macros from the internet to be blocked by default

• PRC Firm Allegedly Stole Motorola’s Secrets

• Amy Zegart on Spycraft in the Internet Age

• Can metal detectors be hacked?

• EC Proposes Easing State Aid Rules To Encourage Chip Factories

• Cyberattack Targets Vodafone Portugal, Disrupts Services

• Mozilla Releases Security Updates for Firefox and Firefox ESR

• IRS To End ID.me Facial Recognition Effort After Widespread Backlash

• CISA Orders Federal Agencies To Fix Exploited Windows Bug

• NSO Group Gave Pegasus Spyware Demo To The NYPD

• China Suspected Of News Corp Espionage Attack

• CalDigit’s New Thunderbolt 4 Dock for MacBook Pro Features 18 Ports

• Online CISSP Exam Coming Soon

• Google has auto enrolled 150 million users in 2-step verification

• Critical Flaws Expose Mimosa Wireless Broadband Devices to Remote Attacks

• Mozilla Releases Security Updates for Firefox and Firefox ESR

• Prioritize threat detection and reduce alert fatigue with Qualys Context XDR

• UK.gov threatens to make adults give credit card details for access to Facebook or TikTok

• Microsoft disables macros to curtail Malware Cyber Attacks

• Microsoft takes macros out of the equation for five Office apps

• New Research Reveals Large Salary Rises for Cybersecurity Workers

• InterVision Unveils Ransomware Protection as a Service

• Qualys Launches Context XDR

• Fantastical 3.6 Adds New Scheduling Features to Make It Easier to Find Meeting Times

• Apple Announces ‘Tap to Pay’ Feature Allowing iPhones to Accept Contactless Payments Without Additional Hardware

• US Carriers Ask FCC for $5.6bn For Chinese Kit Replacement

• Cloud monitoring software rank highly as companies overhaul infrastructure

• 50 security products that customers really love

• Salesforce DevOps Needs Guardrails

• Palestinian Hackers Use New NimbleMamba Implant in Recent Attacks

• Data of +6K Puma employees stolen in December Kronos Ransomware attack

• KP Snacks Hit By Ransomware – Experts Opinions

• Cyber Security: The UK Is The Most Safety Conscious Nation

• Data Privacy Day – Expert Commentary

• Lawmakers Urge IRS to Halt Plan To Use Facial Recognition Technology – Cyber Experts Comment

• A Traveler’s Guide to Keeping Your Private Information Safe

• China Suspected of News Corp Cyberespionage Attack

• Palestinian Hackers Using New NimbleMamba Implant in Recent Attacks

• Reflections on Failure, Part TwoStumbling toward the doors of progress

• LG Preparing Production Lines for iPad OLED Display Panels

• Deals: Get Up to $149 Off Apple’s 2021 iPad Pro Tablets, Starting at $999 for 12.9-Inch

• War Powers and State Sovereign Immunity in Torres v. Texas Dep’t of Public Safety

• Patch Tuesday February 2022 – Microsoft Fixes 120 Windows-side Flaws, Including Six Critical. Wormable HTTP Flaw Discovered and Patched.

• “We absolutely do not care about you”: Sugar ransomware targets individuals

• Hybrid Work. Hybrid Business

• Qualys dives into XDR with ‘context-aware’ security platform

• Microsoft 365 phishing attacks revive old trick, email security firm says

• You’ve still not patched it? Hackers are using these old software flaws to deliver ransomware

• OT Security Firm Shift5 Raises $50M to Protect Planes, Trains, and Tanks From Cyberattacks

• Microsoft Ups Office Protections With Improved Blocking of Macros

• 7 Best 13 Inch Gaming Laptop 2022 – Review and Buying Guide

• Warning: If You Use the Zimbra Webmail Older Version, you could be a Victim of Phishing!

• SSL Certificate: 7 Important Factors to Know to Make an Informed Decision

• Radare Plugin is Here for Intezer Community

• Android’s February 2022 Security Updates Patch 36 Vulnerabilities

• Cryptocurrency Is Funding Ukraine’s Defense—and Its Hacktivists

• Myanmar’s Fight for Democracy Is Now a Scrap Over Phone Records

• Medusa Malware Increases the Number of Android SMS Phishing Cyberattacks

• SecurityWeek Study: Over 430 Cybersecurity Mergers & Acquisitions Announced in 2021

• Several Malware Families Using Pay-Per-Install Service to Expand Their Targets

• CoinStomp Malware is Aimed at Asian Cloud Service Providers

• Office 365 Provides Email Protection Against Downgrade and MITM Attacks

• European Oil Port Hubs Hit by a Cyberattack

• Nvidia’s $40bn Purchase Of ARM Holdings Collapses

• ‘Roaming Mantis’ Android Malware Targeting Europeans via Smishing Campaigns

• Nvidia Abandons Arm Acquisition in Face of ‘Significant Regulatory Challenges’

• Russian police arrested six people involved in the theft and selling of stolen credit cards

• Tracking Flaw May Have Exposed Customer Data

• 10 Best Gaming Laptops under $600 2022 – Reviews & Buying Guide

• Vice Society said to be behind digital break-in at UK umbrella and accounting group

• Microsoft Defender Preview is now available on Windows 10 and 11

• January 2022’s Most Wanted Malware: Lokibot Returns to the Index and Emotet Regains Top Spot

• Data of Puma Employees Stolen in Kronos Ransomware Attack

• Nothing ‘Ear (1)’ True Wireless Earbuds Gain Siri Support

• QBot steals data in 30 minutes

• Russia arrests hacking group

• Puma Suffers Data Breach Due to Kronos Ransomware Attack

• Pay to play PrivateLoader spreads Smokeloader, Redline, Vidar malware

• Microsoft Takes Aim at Malicious Office Macros

• #SaferInternetDay: Porn Sites Face Legal Duty to Verify Age of UK Users

• DPD Parcel tracking flaw may have exposed customer data

• Washington suspects POLARIS breach

• Labour reminds UK.gov that it’s supposed to be reforming the Computer Misuse Act

• Russia Arrests Third Cybercrime Group

• A Quarter of New Online Accounts Are Fake – Report

• MacBook Pro With Next-Gen M2 Chip Coming Next Month, Supply Chain Report Claims

• Bad Breakup? How To Stop Sharing Data with Your Ex on iPhone and iPad

• Mark Zuckerberg Mulls Closing Down Facebook, Instagram In Europe

• Chinese telecom Hytera charged for allegedly recruiting Motorola employees to steal trade secrets

• Roaming Mantis SMSishing campaign now targets Europe

• Looking for adding new detection technologies in your security products?

• Apple AirTags and Tracking | Avast

• Medusa Android Banking Trojan Spreading Through Flubot’s Attacks Network

• How Attack Surface Management Preempts Cyberattacks

• Experience is really everything with SASE

• Disaster recovery is critical for business continuity

• High-Severity Flaw in Argo CD Is Information Leak Risk

• Why cybersecurity and anti-fraud teams need to collaborate

• 3 key elements of a strong cybersecurity program

• Data sharing clause in GDPR may force Meta to shut down Facebook

• Washington State license information compromised in Cyber Attack

• Highly Evasive Adaptive Threats (HEAT) bypassing traditional security defenses

• Enterprise data safety during the Great Resignation

• ACTINIUM Hackers Group Targeting Government, Military, NGO to Steal Sensitive Data

• Microsoft Disables Internet Macros in Office Apps by Default to Block Malware Attacks

• Researchers propose a new method for quantum computing in trapped ions

• Ribose Achieves World’s First STAR Certification With CSA Cloud Controls Matrix v4

• Semperis’ Dave Evans Wins Coveted 2022 CRN Channel Chief Recognition

• ISACA Makes 2022 Conferences More Globally Accessible With Hybrid Format and New Pricing

• HOW TO BECOME AN (ISC)² VOLUNTEER AND MAKE A DIFFERENCE IN THE CYBERSECURITY COMMUNITY

• M&A Trending In Cybersecurity Industry Vertical For 2022

• Safer Internet Day 2022: 4 tips to help support the youth in our lives

• Runecast adds OS analysis to help CIOs find and resolve issues within their IT infrastructures

• Identity theft protection services market to surpass $24B by 2032

• Microsoft Temporarily Disables MSIX App Installers to Prevent Malware Abuse

• Nametag “Sign In With ID” secures user accounts with ID-based biometric authentication

• Microsoft to block downloaded VBA macros in Office – you may be able to run ’em anyway

• Microsoft’s latest vulnerability: ‘Clear disclosure, rapid fix’

• NIST gets reauthorization in $350 billion House tech bill

• Washington State licensing agency reports cyber incident, data from thousands potentially exposed

• Signal now allows you to keep messages and groups after changing phone numbers

• PJCIS backs expansion of intelligence oversight powers for IGIS and itself

• Russian APT Steps Up Malicious Cyber Activity in Ukraine

• NAVEX appoints Andrew Bates as CFO and A.G. Lambert as CPO

• Signal now allows you to keep messages and groups after changing phone numbers

• PJCIS backs expansion of intelligence oversight powers for IGIS and itself

• NIST gets reauthorization in $350 billion House tech bill

• Nmap Vulnerability Scanning Made Easy

• Department of Defense selects Veritone to accelerate AI capabilities of JAIC

• Washington State licensing agency reports cyber incident, data from thousands potentially exposed

• Russian APT Steps Up Malicious Cyber Activity in Ukraine

• NAVEX appoints Andrew Bates as CFO and A.G. Lambert as CPO

• Emily Tabak Epstein joins Datto as General Counsel

• Waratek names Douglas Ennis as CEO

• Aryaka appoints three chief officers as part of the company’s growth strategy

• Metaverse rollout brings new security risks, challenges

• Apple Acquires AI Music Startup That Can Generate Dynamic Soundtracks

• GLEIF vLEI Ecosystem Governance Framework supports digital identity for all legal entities

• GlobalPlatform MCU Protection Profile addresses the need for consistent and verifiable security

• Raynor Dahlquist rejoins Booz Allen Hamilton as SVP

• Mind the Password Hack Tool

• Congress Is heading toward yet another stopgap spending bill this week to avoid a shutdown

• Microsoft Win32k bug added to CISA’s exploited vulnerabilities list

• CISA Orders Federal Agencies to Fix Actively Exploited Windows Bug

• IT Security News Daily Summary 2022-02-07

• LockBit, BlackCat, Swissport, Oh My! Ransomware Activity Stays Strong

• Medusa Malware Joins Flubot’s Android Distribution Network

• UpdateAgent macOS Malware Becoming Stealthier, More Menacing

• High-Severity Flaw in Argo CD is Information Leak Risk

• FBI Publishes Indicators of Compromise for LockBit 2.0 Ransomware

• When Platforms Do the State’s Bidding, Who Is Accountable? Not the Government, Says Israel’s Supreme Court

• DOD wants more software factories

• House Democrats join senators in urging the IRS to end ID.me facial recognition plan

• IRS to end ID.me facial recognition effort after widespread backlash

• Google Cloud Gets Virtual Machine Threat Detection

• Log4Shell Tools and Resources for Defenders

• Everything We Know About the 2022 iPad Air Coming in March

• New CoinStomp cryptomining malware targeting cloud services

• Roadway analytics helps cities manage traffic

• IRS to End Use of Facial Recognition to Identify Taxpayers

• IRS To Ditch Biometric Requirement for Online Access

• IRS backs away from facial recognition technology

• Procurement: The ‘tip of the spear’ for cybersecurity

• Microsoft to make enabling ‘untrusted’ Office macros tougher in the name of security

• House Democrats join senators in urging IRS to end plan for ID.me facial recognition

• Meta Threatens To Pull Facebook And Instagram From Europe Over Data Sharing Issue

• A Prophylactic Approach for Today’s Vulnerable Websites and Web Apps

• News Corp falls victim to cyberattack

• Microsoft: Key Office apps will block macros by default

• When Multifactor Authentication Is Compromised: Fighting Back With AI

• Avast released a free decryptor for TargetCompany ransomware

• Does the security industry reward ‘charlatans’?

• QuaDream, 2nd Israeli Spyware Firm, Weaponizes iPhone Bug

• New Mexico Lawmakers Propose $45M School Cybersecurity Fund

• House of Representatives Passes China Competition Bill

• Google Cloud launches agentless cryptojacking malware scanner

• Wormhole offers $10M to Ethereum thieves

• Meta May Quit Europe Over Data Regulations

• Safer Internet Day: The importance of training employees to keep organizations safe

• Microsoft Says Mac Trojan Becoming Stealthier, More Menacing

• Washington Warns of POLARIS Breach

• News Corp Discloses Cyber-Attack

• Google announces threat detection for virtual machines in its cloud

• Sberbank Called the Average Size of the Insurance Payment Cheated by Cybercriminals

• Morley Businesses Provider Uncovered a Ransomware Attack

• Chinese APT Actor Tracked as ‘Antlion’ Targeting Companies in Taiwan

• Google Cloud launches agentless cryptojacking malware scanning tool

• Roaming Mantis Expands Android Backdoor to Europe

• FBI Releases Indicators of Compromise Associated with LockBit 2.0 Ransomware

• Microsoft disables the ms-appinstaller protocol because it was abused to spread malware

• Deals: Apple’s 14-Inch MacBook Pro Drops to Record Low Price of $1,749.99 ($249 Off) [Update: Expired]

• Apple Fined Another 5 Million Euros by Dutch Competition Regulator Over Dating App Payment Requirements

• Detect active network reconnaissance with Microsoft Defender for Endpoint

• Google Cloud adds VM threat detection to counter crypto mining attacks

• NIST suggests agencies accept the word of software producers per executive order

• Microsoft 365 gives you the tools to run your business. But where are the tools to protect it?

• Microsoft blocks web installation of its own App Installer files

• FBI Releases Indicators of Compromise Associated with LockBit 2.0 Ransomware

• Bankers Worried About Data Security, CSI Research Suggests

• Dutch Court Fines Apple Third Time Over App Store Fees

• Ransomware attack on Swissport aviation firm causes flight delays

• 3 data privacy trends to watch in 2022 and beyond

• Microsoft Disables MSIX Protocol Due to Abuse by Malware

• Wormhole Network hack named fourth biggest crypto hack of all time

• China to compete with Intel and AMD by offering Silicon Processors

• Crypto Companies Band Together To Address Fraud Risk

• How the U.S. Government Built the Largest System of Prior Restraint in U.S. History

• Yummy Yummy – Look At That Lovely Dog Food

• Cybersecurity Experts React To DHS Launches Cyber Safety Review Board

• Cyber-Attacks On European Oil Facilities

• Zero-Day Vulnerability Exploited in Zimbra Email Platform to Spy on Users

• Microsoft: We’ve switched off this ‘critical’ MSIX protocol handler but we’re working to bring it back

• US Telecom providers requested $5.6B to replace Chinese equipment

• North Korean Missile Program Funded Through Stolen Crypto

• House Passes COMPETES Act For Federal Cyber Programs

• News Corp Says It Will Not Be Deterred After Getting Hacked

• CoinDesk CMS Vulnerability Let Hackers Trade On Nonpublic Info

• Deals: Get AirPods 2 for $99 and AirPods 3 for $150 With Amazon’s New Sales

• How to avoid being scammed this Valentine’s Day

• Will the Metaverse Usher in a Universe of Security Challenges?

• Gaining and Retaining Security Staff in The Age of the Great Resignation

• Log4j: Getting From Stopgap Remedies to Long-Term Solutions

• News Corp Journalists Emails Hacked, China Blamed

• Swissport Ransomware Attack Delays Flights, Disrupts Operations

• DO YOU KNOW SOMEONE INTERESTED IN A CAREER IN CYBERSECURITY? AT JUST $125 THE NEW PILOT EXAM FOR THE (ISC)² ENTRY-LEVEL CERTIFICATION CAN CATAPULT THEIR CAREER FORWARD

• FBI Publishes IOCs for LockBit 2.0 Ransomware Attacks

• Name That Edge Toon: Head of the Table

• An Insidious Mac Malware Is Growing More Sophisticated

• FCC: Telecom Firms Requested $5.6 Billion to Replace Chinese Gear

• New CapraRAT Android Malware Targets Indian Government and Military Personnel

• Modified AirTags pose big privacy concerns, especially for Android users

• FBI: Watch out for LockBit 2.0 ransomware, here’s how to reduce the risk to your network

• Ransomware gangs are changing their tactics. That could prove very expensive for some victims

• Hackers breached a server of National Games of China days before the event

• Reflections on Failure, Part OneStumbling toward the doors of progress

• Security During Virtual Meetings

• Tesla Bitcoin Holdings Valued At $1.99 Billion

• Falcon XDR: Delivered at the Speed and Scale of the CrowdStrike Security Cloud

• UN Experts: North Korea Stealing Millions in Cyber Attacks

• 8 Best Gaming Laptops 2022 in Philippines – Review & Buying Guide

• Exposed Corporate Credentials Endanger the Pharmaceutical Industry

• Microsoft: Security threats are rising but companies are still ignoring strong authentication

• Technology to Embed Face ID into MacBook Displays ‘Doesn’t Exist,’ Says Gurman

• Cybersecurity compliance still not a priority for many

• ALPHV Ransomware Connected to BlackMatter and DarkSide

• New Backdoor Deployed by Chinese Hackers Targets Taiwanese Financial Institutions

• EU Urged To Take Rapid Action Over Digital Finance Risks

• Securitas breached, 3TB of airport employee records exposed

• Ransomware Attack on Aviation Services Firm Swissport Leads to Flight Delays

• New Report Alleges Widespread Pegasus Spying by Israel Police

• BlackCat gang (ALPHV) linked with BlackMatter/Darkside ransomware operations

• Data Watchdog orders €9m penalty on telecom company for hiding cyber attack

• Apple iPhone users get improved mobile security

• A week in security (January 31 – February 6)

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of January 31, 2022

• CISA Urges Organizations to Patch Exploited Windows Vulnerability

• Sensitive information of over 500k people leaked

• Microsoft: Enterprise MFA adoption still low

• Ransomware Gangs Rethink Their Strategies

• SpaceX Team In Fiji ‘Working On Tonga Internet’

• European Police Flag 500+ Pieces of Terrorist Content

• UK Adds New Offenses to Online Safety Bill

• $4.4 million stolen in attack on blockchain infrastructure

• Swissport Ransomware Attack Delayed Flights

• North Korea Cryptocurrency Theft ‘Funding Missile Programmes’

• Crypto Firm Meter Loses $4.4m in Cyber-Heist

• Hackers Backdoored Systems at China’s National Games Just Before Competition

• Roaming Mantis reaches Europe

• Online Safety Bill Targets Social Media Giants

• IoT/connected Device Discovery and Security Auditing in Corporate Networks

• How iOS Malware May Snoop on Our Devices

• Trying to register your antivirus in Windows Security Center?

• Chinese Hackers Target Taiwanese Financial Institutions with a new Stealthy Backdoor

• Russian Gamaredon APT is targeting Ukraine since October

• The four types of remote workers your security awareness program must address

• Product showcase: Group-IB Atmosphere

• PJCIS concerned TSSR’s ‘do your best’ requirements are not enough anymore

Generated on 2022-02-13 23:59:27.671210