IT Security News Weekly Summary – Week 07

• IT Security News Daily Summary 2022-02-20

• Squirrelwaffle Malware Loader Exploits Vulnerable Microsoft Exchange Servers

• New Unredacter Tool Extracts Text From Pixelized Images

• What is intelligent document processing? Why IDP matters in the enterprise

• Kraken botnet bypass Windows Defender to steal crypto wallet data

• Brakeman – A Code Security Auditing Tool for Ruby

• Kraken botnet bypass antivirus scan to steal crypto wallet data

• BEC scammers impersonate CEOs on virtual meeting platforms

• Credit Cards Were Forged from a Prominent e-Cigarette Store

• Why Ransomware is Only a Symptom of a Larger Problem

• Responding To the Ransomware Pandemic

• Building Iraqi Army Will to Fight to Prevent Another Disaster

• The who, what, and where of cryptography for the C-suite

• PseudoManuscrypt Malware Distributed as Crack and Keygen Steals Sensitive Information

• The Best Personal Safety Devices, Apps, and Alarms

• Threat actors stole at least $1.7M worth of NFTs from tens of OpenSea users

• Malicious Emails have the Potential to Bring Down Cisco Email Security Appliances

• PseudoManuscrypt Malware Proliferating Similarly as CryptBot Targets Koreans

• How to Use Google Chrome’s Enhanced Safety Mode

• Which New Mac Will Apple Release at Its March Event?

• Trickbot operation is now controlled by Conti ransomware

• Security Affairs newsletter Round 354

• Week in review: Kali Linux 2022.1 released, attackers leveraging Microsoft Teams to spread malware

• Penetration testing

• Master Key for Hive Ransomware Retrieved Using a Flaw in its Encryption Algorithm

• Chasing the Silver Petit Potam to Domain Admin

• Weekly Update 283

• Attivo Networks Honors its Global Partners in Cybersecurity Innovation with its Annual Excellence Awards

• Frost & Sullivan Recognizes Menlo Security as a Growth and Innovation Leader in the Global Secure Web Gateway Market

• Lasting Impact of the Pandemic – Lessons from the 2021 (ISC)² Workforce Study

• Chasing the Silver Petit Potam

• Evolve IP and Cisco deliver new unified communications solution for enterprises

• Jasjit Singh Kang joins Wipro as Head of Digital Operations & Platforms

• IT Security News Daily Summary 2022-02-19

• How assuming fraudsters are lazy can help prevent cyberattacks

• Versa Networks Included in Gartner® Magic Quadrant™

• Millions of WordPress Sites Got a Forced Update for a Serious Bug

• US senators introduce the Kids Online Safety Act (KOSA)

• Watch out for this bump in LinkedIn phishing

• Using CockroachDB Workloads With Kerberos

• Doxxing, The Internet, and How You Can Lock Down Your Data

• CISA compiled a list of free cybersecurity tools and services

• Code42 Deepens Cybersecurity Leadership with Appointment of Maria Izurieta as Chief Financial Officer

• Announcing SynSaber 1.0: Vendor-Agnostic Threat Sensor for Rapid OT Visibility

• Celebrating the Black History of Cybersecurity

• Why Do We Encourage Poor Coding Patterns?

• Your friends could help stop you getting locked out of your Apple ID

• Google Announces Privacy Sandbox on Android to Restrict Sharing of User Data

• Giant User Theft and Bot Attacks Target on Job Seekers

• How To Embed Data Protection Principles in the Application Development Process

• Russia Was Behind DDoS Attacks Against Ukraine, US Officials Say

• Top Stories: New Macs Incoming, iPhone 14 Pro Rumors, and More

• How to tell if someone is using your iPhone to spy on you (and how to put a stop to it)

• Justice Department Appoints First Director of National Cryptocurrency Enforcement Team

• White House and UK Gov attribute DDoS attacks on Ukraine to Russia’s GRU

• UpdraftPlus WordPress plugin update forced for million sites

• The USA will Continue to Support Ukraine in Ensuring Cybersecurity

• Baltimore City was Duped Out of $376K

• Build or Buy your own antivirus product

• U.S. Cybersecurity Agency Publishes List of Free Security Tools and Services

• Open Source Tool Unredacter restores text that has been pixelated

• Critical Flaw Uncovered in WordPress Backup Plugin Used by Over 3 Million Sites

• VMware Issues Patches for Shell Injection and Privilege Vulnerability

• Carahsoft Partners With Cyara to Provide Award-Winning Customer Experience Assurance Platform to the Public Sector

• HOW TO TAKE THE CISSP EXAM ONLINE – REGISTRATION IS OPEN!

• McAfee Enterprise Security Service Edge (SSE) Portfolio Named a Leader in 2022 Gartner® Magic Quadrant™ for SSE

• TSB Golden Gate release enables developers to configure policies for their applications

• US, Britain Accuse Russia of Cyberattacks Targeting Ukraine

• To pay or not to pay is the question for cloud ransomware

• Week in security with Tony Anscombe

• Linux Snap package tool fixes make-me-root bugs

• ‘Security service edge’ splits off from SASE in new Gartner Magic Quadrant

• Report: 63% of IT pros say cyberthreats are top obstacle to cloud adoption strategy

• CISA Insights: Foreign Influence Operations Targeting Critical Infrastructure

• Code42 appoints Maria Izurieta as CFO

• Copyright is Not a Shortcut Around the Constitution’s Anonymous Speech Protections, EFF Tells Court

• CISA Insights: Foreign Influence Operations Targeting Critical Infrastructure

• Singapore builds National Quantum-Safe Network to enhance network security for critical infrastructure

• Akamai CEO: Linode acquisition makes company ‘world’s most distributed cloud services provider’

• IT Security News Daily Summary 2022-02-18

• GSA’s Trump Hotel lease is under scrutiny again

• Vista modernization still a priority at VA, but funding is a question

• CISA posts catalog of free cyber services

• Linux developers patch security holes faster than anyone else, says Google Project Zero

• There’s a New 13-Inch MacBook Pro Coming, Here’s What We Know

• U.S., U.K. say Russia was behind Ukraine DDoS attacks

• Space acquisitions could see more ‘discipline’ from Biden pick

• Zero trust, CX, robotic process automation on deck for 2022

• Key Application Security Metrics Show Few Signs of Improvement

• Google Privacy Sandbox promises to protect user privacy online

• What To Expect With Cyber Surprise

• 2022-02-16 – Files for an ISC diary (Astaroth/Guildma)

• Revamping mobility with a renewed focus on communities

• White House Accuses Russia of Cyberattacks Targeting Ukraine

• How Steganography Allows Attackers to Evade Detection

• Businesses should build an off-line backup system, says fmr. Homeland Security chief Michael Chertoff

• CISA publishes list of free security tools for business protection

• McAfee Enterprise SSE: Named a Leader In 2022 Gartner Magic Quadrant for SSE

• Ukraine DDoS: ‘Cyberattack’ or Not?

• Axiomatics Introduces Orchestrated Authorization

• Free Cybersecurity Tools and Services List Published by CISA

• Why You Need An Adversary-First Approach to Threats in the Cloud

• WTF Is Our Most Critical Cybersecurity Resource? And How Can We Preserve It?

• Adobe warns of second critical security hole in Adobe Commerce, Magento

• The Top SIEM Challenges Modern Security Practitioners Face Today

• NCSC-NZ Releases Advisory on Cyber Threats Related to Russia Ukraine Tensions

• Executive Overview of Russian Aggression Against Ukraine

• Irony alert! PHP fixes security flaw in input validation code

• Oscar Nominated Apple TV+ Movie ‘CODA’ Releasing in Theaters for Free

• MacRumors Giveaway: Win an iPad Folio or Sleeve From Woolnut

• Kanye West’s ‘Donda 2’ Album Not Coming to Apple Music

• Today’s Digital Battlefield Demands Resilience Beyond Infrastructure

• Probation for Medicare Fraudster

• Network Security Automation using Cisco Secure Firewall and HashiCorp’s Consul

• Malware Seller Faces Charges for Peddling WhatsApp Espionage Tools

• SquirrelWaffle Adds a Spin of Fraud to Exchange Server Malspamming

• How to Automate Workflows with Falcon Spotlight

• New Mercedes-AMG F1 W13 E Rises to the Challenge for Formula One 2022

• CISA Creates List of Free Cybersecurity Tools and Services for Defenders

• US Goes After Crypto Criminals

• 5 Best Practices for Succeeding at Developer-First Application Security

• New Critical RCE Bug Found in Adobe Commerce, Magento

• Carpet Bombing Attacks on the Rise

• Justice Department Charges China’s Hytera With Conspiring to Steal Radio Technology

• Trump’s Presidential Records Act Violations: Short- and Long-Term Solutions

• What’s Happening with Afghanistan’s Assets?

• NIST outlines what IoT and software ‘security labels’ could look like

• Croatian Police arrests minor over A1 Telecom data breach & ransom demand

• Report: 2021 hit a record high of security vulnerabilities

• Enterprises Look Beyond Antivirus Software for Remote Workers

• CISA Compiles Free Cybersecurity Services and Tools for Network Defenders

• Fast-Growing Golang-Based ‘Kraken’ Botnet Emerges

• CISA Compiles Free Cybersecurity Services and Tools for Network Defenders

• Russia steals information from US Defense Contractors

• Government Launches Consultation To Ban Huawei From FTTP, 5G

• NIST outlines what IoT and software ‘security labels’ could look like

• Google’s puny pledge to Android privacy leaves iPhone your securest platform

• Ransomware Adds New Wrinkle in Russian Cybercrime Market

• Iran-linked TunnelVision APT is actively exploiting the Log4j vulnerability

• Should we expect to keep communication private in the digital age?

• If the Cloud Is More Secure, Then Why Is Everything Still Broken?

• Severe WordPress Plug-In UpdraftPlus Bug Threatens Backups

• Microsoft Teams Abused for Malware Distribution in Recent Attacks

• UK Government Consults on Plans to Restrict Huawei’s Involvement in Telecoms Networks

• Lawmakers Introduce Bill That Would Require Facebook To Protect Young Users

• The Business of Fraud: Sales of PII and PHI

• Some Apple Store Employees in U.S. Reportedly Working to Unionize

• Attacks against Customers of Top Brands Bank of America and Wells Fargo by Trickbot

• Cybercrime: Dark web carding forum users are getting worried after a string of shutdowns

• Iranian State Broadcaster Clobbered by ‘Clumsy, Buggy’ Code

• What Is Buffer Overflow?

• Tesla, Elon Musk Accuse SEC Of ‘Unrelenting Harassment’

• Patch for Actively Exploited Flaw in Adobe Commerce and Magento Bypassed

• Network Security Automation using Cisco Secure Firewall and Hashicorp’s Consul

• Apple Is ‘Ungodly Well-Managed,’ Billionaire Investor Says

• GitHub Code Scanning Now Detects Additional Security Flaws

• 12 Best 4K Monitor for Video Editing 2022 – 4K Resolutions and High-Level Features

• Microsoft aims to improve anti-phishing MFA for White House ‘zero trust’ push

• Microsoft Warns of ‘Ice Phishing’ Threat on Web3 and Decentralized Networks

• ShadowPad Malware Attacks have been Linked to Chinese Ministry and PLA

• U.S. companies warned to prepare for Russian cyberattacks

• NSA Provides Guidance on Cisco Device Passwords

• New Report by U.K. NCSC Highlights the Impact of Diversity on the Cybersecurity Workforce

• Feds Warn About Critical Infrastructure Ransomware Attacks, Vulnerabilities

• PseudoManuscrypt Malware Spreading the Same Way as CryptBot Targets Koreans

• DSbD’s Four Nations Roadshow Begins

• 10 Common Network Vulnerabilities and How to Prevent Them

• Donald Trump’s ‘Truth Social’ App Emerges For Beta Testing

• VMware NSX Data Center Flaw Can Expose Virtual Systems to Attacks

• French Dad tries to block his kids internet, wipes out town WiFi

• Microsoft offers defense against ‘ice phishing’ crypto scammers

• Vulnerability found in major WordPress plugin

• Major vape vendor hacked

• 5 Fail-Safe Ways to Back Up Your Data

• Red Cross Cyberattack Links Back To A Zoho ManageEngine Vulnerability

• Trickbot Targets 140,000 Victims in 14 Months

• Obscura 3 Camera App Gains Overhauled Interface and New Capture Modes

• High Severity WordPress Plugin Bug Hits Three Million

• Thanks, dad: jammer used to stop kids going online, wipes out a town’s internet by mistake

• FlexBooker Data Leak Impacts Millions of End Customers

• CVE-2021-44731 Linux privilege escalation bug affects Canonical’s Snap Package Manager

• New RCE flaw added to Adobe Commerce, Magento security advisory

• New Linux Privilege Escalation Flaw Uncovered in Snap Package Manager

• Researchers created a PoC exploit for recently disclosed critical Magento CVE-2022-24086 bug

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Avast Anti-Phishing Products Outperform Others | Avast

• Metaverse Survey Spurns Facebook | Avast

• Iranian Hackers Targeting VMware Horizon Log4j Flaws to Deploy Ransomware

• New infosec products of the week: February 18, 2022

• When you’re fending off cyber-attackers, it is possible to be just too tooled up

• Ransomware’s savage reign continues as attacks increase 105%

• Hackers targeting aviation industry with sophisticated malware from years

• Revenue for Cybersecurity firms in UK increased by 14 percent

• 4 Cloud Data Security Best Practices All Businesses Should Follow Today

• Even when warned, businesses ignore critical vulnerabilities and hope for the best

• Software supply chain security still a pain point

• New Botnet Dubbed Kraken Deploys Backdoor to Steal Sensitive Information from Windows Hosts

• Attackers Can Crash Cisco Email Security Appliances by Sending Malicious Emails

• Is higher security a benefit of database migration to the cloud?

• How hackers could use popular virtual reality headsets to steal sensitive information

• Social Media: How to Steer Your Family Clear of Cryptomining Malware

• Apple Shares ‘Life is But a Dream’ Shot on iPhone 13 Pro Film

• Digital payment market to reach $180.4 billion by 2026

• CynergisTek Announces Two Six-Figure, Multi-Year Managed Cybersecurity Service Contracts with a New Client, and an Existing Renewal

• ERI’s John Shegerian Discusses ‘The Insecurity of Everything’ at Reverse Logistics Association Conference & Expo

• ISG to Publish Comprehensive Study on Cybersecurity Products and Services

• Another Critical RCE Discovered in Adobe Commerce and Magento Platforms

• N‑able DNS Filtering helps MSPs protect customers on and off corporate networks

• Hackers are using Microsoft Teams chat to spread malware

• Veriff’s identity verification solution enables healthcare organizations to prevent fraud

• Zenoss updates anomaly detection capabilities to improve predictive precision about anomalous events

• ReliaQuest GreyMatter platform enhancements allow security teams to track security posture

• This Week in Security News – February 18, 2022

• Vulnerability found in WordPress plugin with over 3 million installations

• Napatech 5G UPF offload solution increases user capacity of packet core infrastructure

• The Senate sidesteps obstacles to pass a 3-week shutdown-averting stopgap spending measure

• Lawmakers press for spectrum coordination after 5G squabble

• Apple Supplier BOE Facing iPhone Display Production Issues Due to Chip Shortages

• InQuest and OPSWAT join forces to offer email security solution for enterprises

• AuthenticID partners with 1Kosmos to provide identity proofing and authentication solutions for customers

• Taiwan cracks down on China spying on tech firms

• Multiple vulnerabilities found in Snap-confine function on Linux systems

• Taiwan targets Chinese espionage against tech firms

• The Tripod Foundation of a Database Analytics Solution for Today’s Threat Landscape

• JPMorgan Chase, Toshiba and Ciena build the Quantum Key Distribution network for mission-critical applications

• Comodo appoints Tim Bandos as EVP of SOC Services

• PCI SSC promotes Mike Thompson to Director of Emerging Standards

• Harold Byun joins AppOmni as CPO

• Deep Instinct expands its global team with three channel executives

• Twitter and Facebook Must Speak Out Against Ghana’s Repulsive Anti-LGBTQI+ Bill

• The Army’s top buyer wants to test limits of flexible software spending

• Philadelphia launches digital equity plan

• Democratic senators call for IRS and ID.me to help taxpayers delete selfies

• Want to see how many one-star Uber ratings you have? Here’s how

• Snyk enters cloud security market with Fugue acquisition

• FBI: BEC attacks spreading to virtual meetings

• Neustar Security Services Report Highlights Shifts in Threat Landscape Amid Maturing Cybercrime Economy

• Attackers Hone Their Playbooks, Become More Agile

• Darktrace Artificial Intelligence Stops Cyberattack at Italian Electronics Distributor

• Confluera Cloud Research Finds Cybersecurity Concern as Biggest Obstacle to Cloud and Multicloud Adoption

• NSA Issues Guidance for Selecting Strong Cisco Password Types

• Threat actors leverage Microsoft Teams to spread malware

• Center for Threat-Informed Defense at MITRE Engenuity launches affiliate program

• Chuck Cash joins Spire Global as VP of Federal Sales

• IT Security News Daily Summary 2022-02-17

• Data Privacy Lawsuit Could Cost Meta $90m

• Part of Biden’s $15 contractor minimum wage order was temporarily halted

• Security Teams Expect Attackers to Go After End Users First

• Why data-driven decision making is harder than it looks

• Stocks will go down, but good quality stocks will come back, says Roger Monteforte

• US Agencies Say Russian Hackers Compromised Defense Contractors

• 5 Tips to Get a Cybersecurity Job With No Experience

• DOJ names first director of unit focused on cryptocurrency and crime

• Apple Stops Signing iOS 15.3 Following iOS 15.3.1 Release, Downgrading No Longer Possible

• Hands On: Testing Fortnite on iOS Using GeForce NOW

• Should Judges Defer to Police Expertise?

• The Chatter Podcast: Lessons from Lincoln with John Avlon

• Chief Marketing Officers should engage in consumer data privacy initiatives

• Vulnerability in Linux program enables local privilege escalation, researchers report

• FBI Warns of BEC Scams Abusing Virtual Meeting Platforms

• Are You Prepared for 2022’s More Destructive Ransomware?

• Intel Software and Firmware Updates Patch 18 High-Severity Vulnerabilities

• Google Introduces ‘Privacy Sandbox’ for ​​Ads on Android

• EFF to Court: Security Research Is a Fair Use

• CrowdStrike Partners with MITRE CTID, Reveals Real-world Insider Threat Techniques

• 5 ways to manage the cybersecurity skills gap

• Interpol: Policing model needs to change with cybercrime

• US Warns Russian Hackers Targetting Defence Contractors

• Democratic senators call for $5B in federal funds for election security

• Interpol: Policing model needs to change with cybercrime’s

• Attivo Wins DoD Contract for Unique Approach to Ransomware Mitigation

• SonicWall: Ransomware attacks increased 105% in 2021

• Apple Announces Special Powerbeats Pro to Celebrate NBA’s 75th Anniversary

• US Government sets forth Zero Trust architecture strategy and requirements

• Snyk cofounder on IPO plans: ‘We’ll pick our time wisely’

• S3 Ep70: Bitcoin, billing blunders, and 0-day after 0-day after 0-day [Podcast + Transcript]

• Software-Developer Security Vendor Snyk Buys Cloud Security Company

• Man pleads guilty to selling WhatsApp hacking tool, Signal Jammers & StingRays

• Baby Golang-Based Botnet Already Pulling in $3K/Month for Operators

• Fertility Clinic Hit with Ransomware

• NSA Best Practices for Selecting Cisco Password Types

• 4 best practices to implement a comprehensive Zero Trust security approach

• Firefox and Chrome reaching major versions 100 may break some websites

• Singapore to build quantum-safe network for critical infrastructure trials

• Phishing Top Threat to US Healthcare

• NSA Best Practices for Selecting Cisco Password Types

• Possible Government Surveillance of the Otter.ai Transcription App

• Businessman Admits To Working As Spyware Broker In US / Mexico

• Google Expands Privacy Sandbox To Android

• US Says Russian State Actors Lurked In Defense Contractor Networks For Months

• SonicWall on ransomware 2022: ‘Every good vendor’ was hit

• 6 Best OSINT Tools for Penetration Testing

• Remote Code Execution Bug Found In Apache Cassandra – Patch Now!

• Microsoft Reopening Campuses, Offices As Pandemic Eases

• Drupal Releases Security Updates

• Cisco Releases Security Updates for Email Security Appliance

• Architecting Your Dream Security Automation? Here’s What You Need To Know

• Deals: Nomad’s Outlet Sale Discounting USB-C Cables, Apple Watch Straps, iPhone and AirPods Cases, More

• Edison Mail Updated With Native Support for Apple Silicon Macs

• Attackers use Microsoft Teams as launchpad for malware

• Cambodia cans critics of its snoopy Internet Gateway, says every nation has one

• This Nintendo “insider” fooled thousands of followers with fake predictions

• Weeks after announcing it, Nvidia has gone silent on its flagship RTX 3090 Ti

• Ransomware attacks more than doubled last year – these cybersecurity basics can protect you

• Ukrainian DDoS Attacks Should Put US on Notice–Researchers

• Drupal Releases Security Updates

• Cisco Releases Security Updates for Email Security Appliance

• Relevant and Extended Detection with SecureX, Part Four: Secure Cloud Analytics Detections

• Specially crafted emails could crash Cisco ESA devices

• Cyber Reporting Proposals: Assessing Liability Protections and Legal Privileges

• Malicious Excel Files are Now Being Used to Spread Emotet Malware

• DDoS Attacks Hit Ukrainian Government Websites

• Trickbot has Corrupted over 140,000 Devices

• Zoho Vulnerability leads to data breach at International Committee of the Red Cross

• Amazon and Visa Agree Worldwide Truce

• Shane Ryan Talks Workplace Diversity | Avast

• BlackByte Ransomware | Avast

• SASE vs. SSE – What’s the difference?

• 3 really exciting jobs to apply for before the weekend

• 4 Keys to Bridging the Gap Between Security and Developers

• European Data Protection Supervisor call for bans on surveillance spyware like Pegasus

• U.S. government warns that sensitive data is being stolen from defence contractors

• Microsoft Teams Targeted With Takeover Trojans

• iPhone 14 Pro Rumored to Feature 8GB RAM, Matching Galaxy S22

• 3 Common Cybersecurity Mistakes that Can Lead to Identity Theft

• Kill Cloud Risk: Get Everybody to Stop Fighting Over App Security – Podcast

• Malicious Emails Can Crash Cisco Email Security Appliances

• Your Guide to Incognito Mode in 4 Internet Browsers

• Hackers Had Access to Red Cross Network for 70 Days

• Google Bringing Privacy Sandbox to Android to Limit Sharing of User Data

• Record Year For UK Cyber Investment, Expert Weighs In

• “LinkedIn” Phishing Attacks Up 232% In Feb

• Expert Commentary On BlackCat Ransomware Claims Ownership Of Swissport Attack

• Google Almost Doubles Linux Kernel, Kubernetes Zero-day Rewards

• Snyk expands into cloud security with acquisition of Fugue

• Breaking Comments On Red Cross Cyber Attack

• High-Severity RCE Bug Found In Popular Apache Cassandra Database

• Google To Limit Ad Tracking On Android Apps

• Outage Lasting Hours Makes Canada’s Major Banks Go Offline

• Russian Cyberspies Stole U.S. Defense Data in Attacks on Contractors

• If Russia Invades Ukraine, TikTok Will See It Up Close

• GiveSendGo – 89,966 breached accounts

• Latest Crypto Vulnerability Leaks $320 Million: 3 Tips to Boost Your Crypto Confidence

• Microsoft warns of emerging ‘ice phishing’ threat on blockchain, DeFi networks

• Cybersecurity M&A Roundup for February 1-15, 2022

• Trickbot hits top brands, attacks customers

• Twitter Expands ‘Safety Mode’ To Tackle Trolls

• CPX customer awards showcase leaders and innovators in their fight against today’s sophisticated threats

• Trickbot abuses top brands including Bank of America, Wells Fargo in attacks against customers

• New Kraken botnet is allowing operators to earn USD 3,000 every month

• Privacy and computer security are too important to be left to political meddling

• Researchers Block “Largest Ever” Bot Attack

• Over 620 Million Ransomware Attacks Detected in 2021

• UK Cyber Sector Generates Record Investment and Revenue

• Baltimore tricked out of $375k

• Major Canadian banks go offline in unexplained outage

• Apple Vulns, Macro Viruses, and How Encryption Protects You – Intego Mac Podcast Episode 227

• Ukraine Defence Ministry Suffers DDoS Attack

• Top 10 Ways To Secure Containers

• Ransomware attacks surged 2X in 2021, SonicWall reports

• ‘Pathetic’ performance has left U.S. ‘well behind’ China in 5G race, ex-Google CEO Eric Schmidt says

• Vulnerable Exchange Server Hit by Squirrelwaffle Malware Loader

• Businessman admits to working as spyware broker in US and Mexico

• Facebook is one bad Chrome extension away from another Cambridge Analytica scandal

• This New Tool Can Retrieve Pixelated Text from Redacted Documents

• 10 Best Monitors Under $200 2022 – Top for Daily Use and Entertainment

• Do you know what your supply chain is and if it is secure?

• Missouri will not prosecute ‘hacker’ reporter for daring to view state website HTML

• Researchers Warn of a New Golang-based Botnet Under Continuous Development

• Nation-state actors hacked Red Cross exploiting a Zoho bug

• 10 Best Monitors With Built-In Speakers 2022 – Ideal For Gaming And Watching Movies

• 10 Best Phones for League of Legends Mobile 2022 – Game Like a Pro

• UK cybersecurity revenue up 14% on last year to £10.1bn

• Moses Staff Hackers Targeting Israeli Organizations for Cyber Espionage

• Is a focus on tech skills for CISOs holding us back in the boardroom?

• Tackling supply chain security head-on

• How do I select an API security solution for my business?

• Trio of Home Affairs Bills covering cyber, ransomware, telco data enter Parliament

• 28,695 vulnerabilities were disclosed in 2021 – the highest number on record

• Cloud usage by Public Sector to be seriously probed by European Data Protection Board

• Cyber War now excluded from Cyber Insurance

• U.S. Says Russian Hackers Stealing Sensitive Data from Defense Contractors

• Top threat activities this year

• How challenging is corporate data protection?

• Key drivers for the shift to public DNS resolvers

• Prioritizing Cybersecurity Throughout All Web Development Sprints

• How to Take Care of Yourself When Things Go Wrong: Self-Care Tips When Dealing with a Cyber Attack

• Quantum cryptography market to reach $291.9 million by 2026

• IronNet Expands Global Reach in Singapore with Addition of Leading Healthcare and Finance Customers

• Westinghouse, Kozloduy Strengthen Nuclear Cybersecurity

• InQuest Partnership With OPSWAT Enables Customers to Fill Gaps in Their Existing Email Security Stacks

• At-Bay Partners With Cloudflare to Provide Insurance Customers 3 Free Months of Cloudflare Pro

• Four ways technology can improve your Christmas celebrations

• Mandiant Ransomware Defense Validation helps prevent specific ransomware attacks

• Blueshift XDR provides cybersecurity protection for SMB businesses

• New Relic’s infrastructure monitoring empowers teams to proactively identify issues in private and hybrid clouds

• Neuro-ID unveils two identity screening products to enhance fraud detection

• Verimatrix Secure Delivery Platform enables customers to protect their content and devices

• Laminar Cloud Data Security Platform monitors public cloud data

• Bugcrowd PTaaS features deliver real-time visibility into testing progress

• Google expands Privacy Sandbox to Android

• InfluxData announces product enhancements for IoT and IIoT applications

• Nutanix launches simplified cloud solution packages for hybrid cloud infrastructure

• NETSCOUT nGeniusEDGE Server addresses IT visibility gaps in remote work environments

• Russia stole US defense data from IT systems, says CISA

• Artera partners with Deepwatch to advance security operations and protect critical infrastructure

• LogicMonitor collaborates with HBR Consulting to improve security for legal industry

• Keysight Technologies partners with Samsung to accelerate development of 6G technology

• Sysdig collaborates with Snyk to deliver end-to-end container security

• Folding the impossible into the reality of normal life

• Akamai acquires Linode to offer a single cloud-to-edge platform for businesses

• CoreStack and Prodapt join forces to provide multi-cloud governance capabilities for TMT market

• Privacy Experts to Federal and State Agencies: End Use of Facial Verification Services

• Defend Against Ransomware and Malware with Falcon Fusion and Falcon Real Time Response

• Can Madison Cawthorn Be Blocked From the North Carolina Ballot as an Insurrectionist?

• ThreatSwitch appoints Patricia Stokes to Advisory Committee

• Atiq Raza joins CyberSaint Growth Advisory Board

• Meta’s RSC supercomputer brings revolutionary power — and privacy and bias concerns

• LinkedIn phishing scams increase 232% since Feb 1: report

• Best Risk Management Software for 2022

• Cybercriminals Have Changed Tactics

• MITRE Engenuity Center for Threat-Informed Defense Unveils New Affiliate Program

• FBI: Cybercriminals Using Virtual Meeting Platforms to Wage BEC Attacks

• SentinelOne Launches DataSet

• How to Fight the Novel Software Supply Chain Attacks of Tomorrow

• Welcoming the New Zealand Government to Have I Been Pwned

• Michele Docharty joins HYPR Board of Directors

• IT Security News Daily Summary 2022-02-16

• GSA won’t hang up on legacy telecom just yet

• Biden can do more to protect inspectors general, says former watchdog fired by Trump

• TrickBot Ravages Customers of Amazon, PayPal and Other Top Brands

• Apple’s 2022 iPad Pro: What to Expect

• Best Tech Jobs In the UK

• How secure are agency mobile devices?

• Russia-linked threat actors breached US cleared defense contractors (CDCs)

• Not Just San Francisco: Police Across the Country are Retaining and Searching DNA of Victims and Innocent People

• New Underactor tool reveals pixelated text to expose sensitive data

• Coastal cities expecting the greatest sea-level rise

• CISA adds vulnerabilities in Adobe Magento, Google Chrome and Internet Explorer to catalog

• Massive LinkedIn Phishing, Bot Attacks Feed on the Job-Hungry

• Emergency updates: Adobe, Chrome patch security bugs under active attack

• Will $1.9 Billion of Government Funding for Cybersecurity Help Protect the Nation’s Infrastructure?

• Imperva Mitigates Massive Bot Attack of 400 Million Requests

• Shift Left API Security Testing: The Manual API Testing Process

• Russian hackers are hitting cleared defense contractors, security agencies warn

• Microsoft Defender gets better at preventing Windows passwords from being stolen

• Missouri maps COVID in wastewater

• Allcome clipbanker is a newcomer in underground forums

• Think twice before scanning that QR code

• Apache Cassandra users urged to upgrade after vulnerability disclosed

• Trickbot targets customers of 60 High-Profile companies

• Apple Seeds Third Public Beta of macOS Monterey With Universal Control

• Deals Exclusive: Get Your First Year of the 1Password Individual Plan for 50% Off

• Shareholders Advisory Group Doesn’t Want Tim Cook to Get $99 Million Pay Package

• How to Use OneDrive for Office 365 on Desktop

• Win Your War Against Hackers and Secure Your Network

• DDoS attack was ‘largest’ ever in Ukraine, Russia suspected

• Kronos attack fallout continues with data breach disclosures

• VMware Releases Security Updates for Multiple Products

• Mozilla Releases Security Update for Thunderbird  

• DoD Awards Attivo Networks Contract for Ransomware Mitigation

• Laminar Announces General Availability of Cloud Data Security Platform

• SANS Institute Launches Cybersecurity Education Scholarship for HBCU Students and Alumni

• Is Firefox OK?

• VMware Releases Security Updates for Multiple Products

• Mozilla Releases Security Update for Thunderbird  

• New York Attorney General Issues AirTag Consumer Alert Over Stalking Concerns

• Safari Will No Longer Save Passwords Without Usernames in iOS 15.4

• Apple Seeds Third Public Betas of iOS 15.4 and iPadOS 15.4 With Universal Control, Face ID With Mask Support and More

• 5 Ways to Protect Your Workplace from Cybersecurity Threats

• security clearance

• DOJ’s 3-year roadmap to zero trust

• Devious hackers are using NFT hype to hijack your PC and webcam

• Red Cross traces hack back to unpatched Zoho vulnerability

• VMWare fixes holes that could allow virtual machine escapes

• Grand Prix CFO Sentenced for Identity Theft

• CrowdStrike sees 82 percent increase in ransomware-related data theft and extortion

• Customers  Threatened by a Data Breach at Hong Kong’s Harbour Plaza Hotel

• Better Cloud Services: Tech giant Google Unveils Compute Optimized Virtual Machines (VMs) Powered by AMD EPYC Processors

• Apple Lawsuit By Norfolk County Council Upgraded To Class Action Status

• Trickbot malware infects 140,000+ customer devices of tech giants

• Bot Detection Firm Netacea Closes $12 Million Funding Round

• Healthcare Data Breaches Impact 147k Illinoisans

• Lithuania and Poland Issue Cyber-Attack Warnings

• Watch CNBC’s full interview with George Kurtz, CrowdStrike CEO

• ‘Ice phishing’ on the blockchain

• Roblox Beamers steal items from kids

• Titaniam lands $6M to bolster data privacy solutions

• Singapore bank gives customers ‘kill switch’ to freeze accounts in case of fraud

• Apache Cassandra vulnerability puts servers at risk

• Red Cross Hack Linked to Iranian Influence Operation?

• Baltimore Conned Out of $375k

• Where AI Falls Down in Cybersecurity

• Russian State-Sponsored Cyber Actors Target Cleared Defense Contractor Networks to Obtain Sensitive U.S. Defense Information and Technology

• Russian State-Sponsored Actors Target Cleared Defense Contractor Networks

• Critical VMware Bugs Open ESXi, Fusion, Workstation To Attackers

• Right Wingers Try To Spin DNS Traffic Logged As Intercepting Emails

• How The Initial Access Broker Market Leads To Ransomware Attacks

• NSW Government Database Compromises 500,000+ Addresses

• The DLBI Expert Called the Cost of Information about the Location of any Person

• Elon Musk’s Neuralink Refutes Animal Abuse Allegations

• Solving the Quantum Decryption ‘Harvest Now, Decrypt Later’ Problem

• Russian State-Sponsored Cyber Actors Target Cleared Defense Contractor Networks to Obtain Sensitive U.S. Defense Information and Technology

• Russian State-Sponsored Actors Target Cleared Defense Contractor Networks

• Google Launching Privacy Sandbox to Limit Ad Tracking on Android, Calls ‘Blunt Approaches’ Like Apple’s ‘Ineffective’

• AppOmni Names Harold Byun Chief Product Officer

• Online CISSP Exam Coming Soon

• Texas to sue Meta for data privacy violation over Facial Recognition

• Donald Trump alleges Hillary Clinton of interference and espionage on election campaigns

• Russia withdraws troops from Ukraine only to lodge cyber war

• Critical VMware Bugs Open ESXi, Fusion & Workstation to Attackers

• High-Severity RCE Bug Found in Popular Apache Cassandra Database

• [Webinar] When More Is Not Better: Solving Alert Overload

• Virgin Galactic Reopens Space Tourism Ticket Sales

• Experts disclose details of Apache Cassandra DB RCE

• Quantum Cryptanalysis: Hype and Reality

• Lessons Learned From the 2022 NPM Corruption

• Phishing Emails Impersonating LinkedIn Surge by 232% Amid ‘Great Resignation’

• High-Severity Vulnerability Found in Apache Database System Used by Major Firms

• Be Flexible About Where People Work — But Not on Data Privacy

• Hybrid Work Accelerated Fraud; Now, CSOs Are Taking a Seat at the Executive Table

• Ban Pegasus spyware, urges European Union Data Protection Supervisor

• A Data Breach at a Croatian Phone Company Affects 200,000 Customers

• A Guide to the Well-Architected Framework

• 3DEXPERIENCE World 2022: “The new economy is the experience economy”

• Three quarters Of Ransomware Payments Go To Russian Hackers

• ShadowPad Modular Malware Platform Used by Chinese Hackers in High-profile Attacks

• Trickbot Malware Targeted Customers of 60 High-Profile Companies Since 2020

• Deals: Apple’s 24-Inch iMac Hits New Low Price of $1,199 ($100 Off)

• AWS’s AI code reviewer now spots Log4Shell-like bugs in Java and Python code

• How the initial access broker market leads to ransomware attacks

• Ukraine crisis: Russian cyberattacks could affect organisations around the world, so take action now

• Google’s Chrome OS Flex supporting Macs that Apple has long forgotten

• Emotet Now Spreading Through Malicious Excel Files

• SquirrelWaffle Is Using Typosquatting in Latest Campaign

• 5 Things Retailers Should Know About Cybersecurity

• RSA Advisory Board Discuss Pressing Issues in Cybersecurity

• Headcount alone isn’t enough for your headaches

• Vendors are Fixing Security Flaws Faster

• Govt Agencies and Banks in Ukraine Targeted in DDoS Attacks

• Windows vs. Linux: Which environment is more beneficial for use in Virtual Private Server (VPS)?

• Infrastructure-as-code provider DuploCloud lands $15M to expand its platform

• CISA Urges Organizations to Patch Recent Chrome, Magento Zero-Days

• Infineon’s Latest Chip Tackles Post-Quantum Security

• 10 Best Monitors With Built-In Speakers – Ideal For Gaming And Watching Movies

• Electric vehicle charging stations are vulnerable to hacker attacks

• Security Analytics Firm Securonix Scores $1 Billion+ Growth Investment

• Is Firefox Okay?

• Google Wants to Turn Your Old Mac into a Chromebook With Chrome OS Flex

• New Attack Targeting Microsoft Exchange Servers

• Nude Photos Shared On Telegram Without Consent

• Cyberattack On Ukraine Amid Tensions With Russia

• Five Cryptography Best Practices For Developers

• 12 Best Trackball Mice 2022 – Wireless & Wired Roller Ball Mouse

• Journalist won’t be indicted for hacking for viewing a state website’s HTML

• Mexican Businessman Pleads Guilty in U.S. to Brokering Hacking Tools

• Google doubles bug bounties

• Hackers targeting people with fake Track and Trace texts

• 8 Best Trackball Mice 2022 – Wireless & Wired Roller Ball Mouse

• EU Watchdog Begins Joint Investigation Into Public Sector Cloud Use

• Wrongly Convicted Post Office Staff Demand Prison For Former Bosses

• Ransomware-Related Data Leaks Nearly Doubled in 2021: Report

• COVID’s Silver Lining: The Acceleration of the Extended IoT

• Trickbot has infected 140,000-plus machines since late 2020

• VMware Issues Security Patches for High-Severity Flaws Affecting Multiple Products

• 3 out of 5 cyber-attacks in 2021 were malware-free

• DDoS attacks knock Ukrainian government, bank websites offline

• Cambodia Delays Controversial Internet Gateway

• DDoS attack hits Ukraine Defence and Bank Networks

• Windows Patch Management: Definition, How It Works and Why It Helps

• January 2022 Cyber Attacks Statistics

• We get the privacy we deserve from our behavior

• Beyond Files: Automate URL Analysis with Intezer Analyze

• Finance Officer Jailed After Stealing £200,000 from Charity

• CISA added 9 new flaws to the Known Exploited Vulnerabilities Catalog, including Magento e Chrome bugs

• More Than Half of Apple Music Listeners Using Spatial Audio, Says Apple Exec

• 8 Ways to Secure Your Home Wi-Fi Network

• Meta Agrees $90 Mn Settlement in Facebook Privacy Suit

• CISA Puts Chrome and Magento Zero-Days on Must-Patch List

• Ukraine Defense and Bank Networks DDoS-ed

• VMware fixes flaws demonstrated at Chinese Tianfu Cup hacking contest

• Why Cybersecurity Is Important for Companies?

• EU Data Protection Watchdog Calls for Ban on Pegasus-like Commercial Spyware

• WhiteSource acquires DefenseCode and Xanitizer to enter into the SAST market

• Build your own Android security product

• How Everything We’re Told About Website Identity Assurance is Wrong

• How QR code ease of use has broaden the attack surface

• Supply chain shortages create a cybersecurity nightmare

• Singapore introduces potent anti-scam measures

• Securing IoT from the ground up

• The Gold Rush of Fraud: Why Scammers Have Flocked to Social Media

• Why Staying Calm May Be One Of The Best Ways Of Keeping Your Kids Safe Online

• WAFs can’t give organizations the security they need

• India’s Reserve Bank deputy governor calls for crypto ban

• Fraud and scam activity hits all-time high

• 2022-02-16 – Files for an ISC diary (Astaroth/Guildma)

• Australian encryption laws used to force provider to help in homicide case

• High-Severity RCE Security Bug Reported in Apache Cassandra Database Software

• Cambodia doesn’t have the gear for controversial National Internet Gateway

• Facebook Agrees to Pay $90 Million to Settle Decade-Old Privacy Violation Case

• The seven themes driving the future of cybersecurity

• Traditional MFA is creating a false sense of security

• 2021 was a year of ‘law enforcement wins’ against cyber crime, says Chainalysis

• Elevating the Risk Discussion – Quantitative Analytics

• Register Today! By Popular Demand, More Entry-Level Cybersecurity Certification Pilot Exam Review Offerings Now Available

• How can home security be improved with IoT?

• Why smart meters will be essential to our sustainable future

• IoT in manufacturing market to reach $200.3 billion by 2030

• SentinelOne Announces Date of Fourth Quarter and Fiscal Year 2022 Financial Results Conference Call

• Options Announce 12 Years of AICPA Service Organisation Controls (SOC) Compliance

• Verimatrix Launches Secure Delivery Platform to Provide Revenue Protection, Agility and Additive Value for Securing Content, Applications and Devices

• Cambodia hasn’t bought the gear it needs for controversial National Internet Gateway

• Kali Linux 2022.1 Released with New Tools and Kali Everything Image

• Cloudera Data Engineering in CDP Private Cloud 1.3 uses containers to run on a private cloud

• Calix Cloud enhancements enable broadband service providers to proactively resolve network issues

• Cloudentity adds GraphQL support to its API access control platform

• Qrypt Key Generation generates symmetric encryption keys at multiple endpoints

• F5 Distributed Cloud Services improves modern application security

• Backup Plays Key Role in Ransomware Response, But Not a Complete Solution

• Texas Sues Meta Over Facebook Facial Recognition Technology

• Nebulon Red Hat Ansible Collection accelerates automation efforts for IT organizations

• Edgecore Networks Pocket WFA offers business continuity for enterprises

• Social media platforms have ‘assured’ 24/7 misinformation monitoring for Australia’s upcoming federal election

• Cyberattacks Knock Out Sites of Ukrainian Army, Major Banks

• macOS Monterey 12.3 Beta 3 Makes Accessing Universal Control Settings Easier

• DDoS attacks cripple government and banking websites in Ukraine

• Questions linger after IRS’s about‑face on facial recognition

• Dragos partners with NSA and CISA to increase OT cybersecurity for United States critical infrastructure

• Thales expands partnership with Google Cloud to strengthen data security for customers

• Intel acquires Tower Semiconductor to expand its manufacturing capacity

• Allegion announces senior leadership appointments

• Kevin Collins joins Neustar Security Services as CFO

• Axis Security names Joe Mattioli as CRO

• EdgeQ appoints Ajit Pai to Board of Advisors

• Report: Only 21% of enterprises use zero trust architecture

• Broadband expansion depends on reliable data

• Akamai To Acquire Linode

• Securonix Secures Over $1B in Growth Investment From Vista Equity

• Uptime Institute SCIRA-FSI identifies physical and operational outage risk for financial institutions

• Druva launches MSP program in Asia-Pacific and Japan to improve operational efficiency

• Jeremy Freeland joins InfluxData as Chief Legal Officer

• Paysafe expands Digital Wallets team with two leadership appointments

• Maryland Bill Offers Strong Privacy Protections Against Biometric Data Collection

• The Worst Timeline: A Printer Company Is Putting DRM in Paper Now

• FBI, US Secret Service Issue Mitigations for BlackByte Ransomware

• Considering cloning? Combat data bloat with file transfers instead.

• CISA Adds Nine Known Exploited Vulnerabilities to Catalog

• Ukraine: Military defense agencies and banks hit by cyberattacks

• IT Security News Daily Summary 2022-02-15

• Unknown TA2541 group attacking aviation and defense sectors since 2017

• Ukraine Ministry of Defense confirms DDoS attack; state banks lose connectivity

• VMware patches released for vulnerabilities found during China’s Tianfu Cup

• SquirrelWaffle Adds a Twist of Fraud to Exchange Server Malspamming

• Machine Learning in 2022: Data Threats and Backdoors?

• CISA Adds Nine Known Exploited Vulnerabilities to Catalog

• Sony Announces ‘LinkBuds’ With Open Design to Let in Ambient Sound

• SecLists – A Pentester’s BFF

• Log4j Vulnerabilities: What Are They, and Are You at Risk?

• Akamai to acquire AWS competitor Linode for $900M

• Tigera launches platform to help cloud-native orgs reduce their attack surface

• NTIA, FCC to shore up spectrum policy cooperation

• Rooting out fraud in government programs

• How Nonprofits Can Continue to Evade Ransomware Attacks

• Journalist won’t be prosecuted for pressing ‘view source’

• Unclear if Russia behind latest Ukraine cyberattacks

• The metaverse is the last thing tech needs

• Ukraine Ministry of Defense confirms DDoS incident; state banks loses connectivity

• VMware patches released after vulnerabilities found during Tianfu Cup reported by Chinese gov’t

• Biometric technology like facial recognition is here to stay

• Sophos discovers new attack targeting Exchange Servers

• Feds Warn About Critical Infrastructure Ransomware Attacks, Vulnerabilities

• What the Defense Department’s 2021 China Military Power Report Tells Us About Defense Innovation

• Massive cyberattack takes Ukraine military, big bank websites offline

• Agencies shouldn’t use facial recognition for ID verification, groups say

• Red Canary Launches Partner Program

• QNAP extends security Updates for some EOL devices

• How Leading Security Teams Fight Ransomware Burnout with Automation

• The Business of Fraud: Tax Refund Fraud

• Deals: Buy Parallels Desktop 17 and Get Nine Mac Apps for Free in New Bundle

• Rare Check Signed by Steve Jobs and Steve Wozniak Expected to Fetch $25,000+ at Auction

• Oracle’s cloud can now host select Top Secret defense data

• Massive cyber-attack takes Ukraine military, big bank websites offline

• Victory! More Lawsuits Proceed Against Clearview’s Face Surveillance

• Massive cyber-attack takes Ukraine military, big banks offline

• Download Kali Linux 2022.1 with new tools and wider SSH compatibility

• DOD bets on small businesses to improve industry competition

• Ukraine Ministry of Defense confirms DDoS attack; state banks loses connectivity

• Google Offering $91,000 Rewards for Linux Kernel, GKE Zero-Days

• Swissport Investigating Ransomware Group’s Data Leak Claims

• The Unsettling Reason Why Your Help Desk May Be Your Greatest Security Vulnerability

• Apple Seeds Third Beta of tvOS 15.4 to Developers

• Apple Seeds Third Beta of watchOS 8.5 to Developers

• Apple Seeds Third Betas of iOS 15.4 and iPadOS 15.4 to Developers

• Apple Seeds Third macOS Monterey 12.3 Beta to Developers

• Latest Kali Linux 2022.1 Version Arrives With “Everything” Flavor And More

• Ukraine defense ministry, banks hit by cyberattacks

• Canon U.S.A. a Double Award Winner in 2021 ‘ASTORS’ Awards Program

• Chrome Zero-Day Under Active Attack: Patch ASAP

• Agencies need to measure improvements to critical infrastructure cybersecurity, report says

• Meta agrees to pay $90 million settlement in decade-old Facebook privacy suit

• Singapore to step up security measures in aftermath of phishing scams

• Marine Charged with Cyber-Stalking

• 3 Critical Software Development Security Trends and Best Practices

• Hackers are Now Utilizing Office Documents to Launch the Regsvr32 Utility

• Why companies need cybersecurity and cyber resilience

• Internet Society Data Leaked

• The US Watches Warily for Russia-Ukraine Tensions to Spill Over

• Five Ways to Improve Sanctions Coordination Between the U.S. Government and Humanitarian Aid Groups

• Small businesses facing upwards of 11 cyberthreats per day per device

• What Spotify, Neil Young, and Joe Rogan Tell Us About Content Moderation

• Texas AG Sues Meta For Biometric Data Collection

• BlackCat gang claimed responsibility for Swissport ransomware attack

• UN Committee To Begin Negotiating New Cybercrime Treaty Amid Disagreement Among States Over Its Scope

• Mitigating Software Security Flaws with Automation

• The Ministry of Finance of Russia Named the Main Threat of Cryptocurrency Ban in Russia

• Oracle’s cloud can now host select top secret defense data

• Stellar Cyber’s Open XDR Debuts ‘Universal EDR’ to Optimize Data

• Google announces zero-day in Chrome browser – update now!

• Google Releases Security Updates for Chrome

• FBI and USSS Release Advisory on BlackByte Ransomware

• Deals: AirPods Pro With MagSafe Drop to New 2022 Low Price of $174.98

• Twelve South Launches New ‘BackPack’ Shelf for 24-Inch iMac

• Why Insisting on Complicated Passwords can be a Dangerous Security Practice

• Mandiant Helps Organizations Measure Their Ability to Prevent Specific Ransomware Attacks

• Artera Services Selects Deepwatch MDR to Advance Security Operations and Protect Critical Infrastructure

• Cyber Attack on Indian Sansad TV YouTube Channel

• Researchers Dissect Activity of Cybercrime Group Targeting Aviation, Other Sectors

• Google Releases Security Updates for Chrome

• FBI and USSS Release Advisory on BlackByte Ransomware

• Secret CIA Data Collection Program

• Vulnerability Assessment 101

• Google To Wind Down Currents, Final Remanent Of Google+

• TA2541: APT Has Been Shooting RATs At Aviation For Years

• Google To Pay Up To $91,337 For Exploits Of New Linux And Kubernetes Bugs

• EU To Launch Probe Over Use Of Cloud Services By Public Sector

• Linux Kernel Patches Remote Stack Overflow Bug

• Sugar daddy dating site CEO uses his own creation to see the light

• VMware Patches Vulnerabilities Reported by Researchers to Chinese Government

• How to Make Cybersecurity Effective and Invisible

• Top 5 essential open source cybersecurity tools for 2022

• Researchers Link ShadowPad Malware Attacks to Chinese Ministry and PLA

• Heimdal™ and the “New Normal” of Cybersecurity: An Exclusive Interview with CyberNews

• Update now! Chrome patches actively exploited zero-day vulnerability

• Croatian Network A1 Hrvatska Disclosed Data Breach

• Intel Acquires Israeli Chipmaker Tower Semiconductor For $5.4bn

• Red Canary adds 24/7 remediation service to wipe out ransomware

• WhiteSource adds detection, remediation for custom code vulnerabilities

• TA2541: APT Has Been Shooting RATs at Aviation for Years

• SMS PVA Services’ Use of Infected Android Phones Reveals Flaws in SMS Verification

• F5 launches new SaaS app security cloud, edge computing platform

• Warning over mysterious hackers that have been targeting aerospace and defence industries for years

• Security: Google to pay up to $91,337 for exploits of new Linux and Kubernetes bugs

• Squirrelwaffle, Microsoft Exchange Server vulnerabilities exploited for financial fraud

• Ransomware tied to attacks on critical infrastructure last year

• SafeDNS: Cloud-based Internet Security and Web Filtering Solution for MSPs

• NFL Teams Up with Cisco to Secure Super Bowl LVI

• 5 Tips to Get a Cybersecurity Job With No Experience

• Apple Music ‘Replay 2022’ Playlist Now Available

• Barclays: Scams Surged in Final Quarter of 2021

• SaaS platform KSOC looks to secure Kubernetes environments

• FBI Warns of BlackByte Ransomware Attacks on Critical Infrastructure

• QNAP Extends Security Updates for Some EOL Devices

• Apple to Unveil 13-inch M2 MacBook Pro With Unchanged Design Next Month, Claims Original MacBook Pro ‘Notch’ Leaker

• BlackByte Ransomware Breached US Critical Infrastructure

• Worry For Hackers As Popular Online Forum Raidforums Goes Down

• Amazon Removes Mask Requirement For Fully Vaccinated Staff

• How security provider Netacea mitigates automated bot attacks

• New F5 cloud platform shows ‘huge advantage’ in security, CEO says

• Moxa MXview Vulnerabilities Expose Industrial Networks to Attacks

• Twitter Has Started Blocking Porn in Germany

• Ransom payments are tip of the iceberg for the true cost of ransomware

• Apple Patches Actively Exploited Zero-day

• Google Discovers Attack Exploiting Chrome Zero-Day Vulnerability

• Three-Fifths of Cyber-Attacks in 2021 Were Malware-Free

• Crypto Lender Agrees to Pay $100m in Fines

• Google update fixes zero-day vulnerability

• One Identity launches Cloud Infrastructure Entitlement Management

• BlackByte Ransomware Has Had an Impact on the Critical Infrastructure of US, the FBI Announces

• Is Ukraine the Target of a Hybrid Warfare?

• 4 Benefits of Earning Your Masters in Cyber Security

• Post Office Horizon Scandal Public Inquiry Begins

• Critical Magento 0-Day Let Attackers Execute Arbitrary Code

• The Winter Olympics and Cybercrime: Caution Is Urged

• ‘Don’t Be Google’: The Rise of Privacy Focused Startups

• Ukraine Claims ‘Hybrid Warfare’ Already Underway

• Morley companies suffers data breach

• Japanese Sports Equipment and Sportswear Company Mizuno Fell Victim to a Ransomware Attack

• In an arms race with criminals to protect our privacy, it’s too early to admit defeat

• Apple Hit With Fourth Fine Over App Store Fees In Netherlands

• Beyond Files: Analyze URLs with Intezer Analyze

• Webinar Today: Meet the Inventors of Onion Routing

• Experts Warn of Hacking Group Targeting Aviation and Defense Sectors

• Google fixes a Chrome zero-day flaw actively exploited in attacks

• Apple Officially Obsoletes First iPad With Lightning Connector

• Local authority earmarks $380k for cyber-attack recovery

• Ukraine says it has been targeted by Russian cyber-attacks

• AMD Closes $50 Billion Xilinx Acquisition

• Cybersecurity: These countries are the new hacking threats to fear as offensive campaigns escalate

• New MyloBot Malware Variant Sends Sextortion Emails Demanding $2,732 in Bitcoin

• Kali Linux 2022.1 released: New tools, kali-linux-everything, visual changes

• Kimsuky Hackers Employ Commodity RATs with Custom Gold Dragon Backdoor

• Looking for adding new detection technologies in your security products?

• Apple releases mystery security updates for macOS Big Sur, Catalina

• iPhone 6 Plus Added to Apple’s ‘Vintage Product’ List

• This Nintendo “insider” fooled thousands of followers with fake predictions

• Weeks after announcing it, Nvidia has gone silent on its flagship RTX 3090 Ti

• 2022 Global Threat Report: A Year of Adaptability and Perseverance

• Surging ransomware data leaks point to ‘weaponization of data,’ CrowdStrike says

• Canada includes crypto and crowdfunding under laundering and terrorism finance laws

• Your software supply chain is under attack – how are you going to react?

• Fake Windows 11 Offers | Avast

• Cambodia cans critics of its snoopy Internet Gateway, says every nation has one

• Qualys Context XDR: Bringing context to an organization’s security efforts

• Energy, oil and utility sector most likely to pay ransoms

• Log4Shell: A retrospective

• Remote sex toys might spice up your love life – but crooks could also get a kick out of them

• The rise of the super malicious insider: Yes, we need to worry

• MoviePass new business feature might cause privacy concerns to many

• Over 74% of ransomware earnings reaching Russia

• New Chrome 0-Day Bug Under Active Attack – Update Your Browser ASAP!

• Can AI and Technology Wipe Out Dating Paltforms Frauds? Expert Weighs In

• The importance of implementing a zero trust strategy

• Five key trends that will shape digital identity and security in 2022

• Information systems and cybersecurity: Connections in UX and beyond

• WiFi as a service market to reach $11.1 billion by 2027

• Whitepaper: 5 steps to improved MFA adoption

• Soaring losses accelerate investments in anti-fraud tech

• Lockheed Martin says nations are more serious about tackling a broad range of security challenges

• MDT Expands Partnership with Advanced Fraud Solutions to Help Credit Unions Comply with WEB Debit Account Validation Rule

• Stellar Cyber’s Open XDR Platform Debuts “Universal EDR” to Optimize Data From Any EDR for Enhanced Speed and Precision in Detecting Attacks

• Generational Equity Advises I.T. Right in its Sale to VC3

• Lasting Impact of the Pandemic – Lessons from the 2021 (ISC)² Workforce Study

• Security Through Obscurity. It Doesn’t Work.

• eSafety grilled about lack of WA Police awareness on its new takedown powers

• Stellar Cyber Universal EDR optimizes event and alert data across different EDR products

• Report: Facebook Vulnerability Could Allow Apps To Improperly Harvest User Data

• BlackByte Tackles the SF 49ers & US Critical Infrastructure

• Foxconn and Vedanta to manufacture semiconductors in India under new JV

• Pondurance partners with GuidePoint Security to provide MDR services for organizations

• Fraugster collaborates with Payaut to offer fraud prevention services to marketplaces

• SEC issues warning to crypto lenders as BlockFi hit with $100m in fines

• From the back office to the till: Cybersecurity challenges facing global retailers

• GiveSendGo – 89,966 breached accounts

• BlackByte Ransomware Gang Target San Francisco 49ers

• SSU: Russia-linked actors are targeting Ukraine with ‘massive wave of hybrid warfare’

• Andrew Peterson joins Nucleus Security Advisory Board

• Appgate appoints Leo Taddeo as CISO

• Matt Hathaway joins TrueFort as CMO

• 5 Simple Tips to Keep Dockerized Apps Secure

• Usercentrics hires Donna Dror as CRO

• Adobe Warns Users Of A Critical Magento Zero-Day Vulnerability Under Attack

• Zero-Day Bugs Spotted In Nooie Baby Monitors

• What does a CR mean for DOD tech talent?

• Getting to grips with protecting industrial systems? It’s going to get messy

• CISA says ‘Shields Up’ as Russia-Ukraine tensions escalate

• Adobe fixes zero-day exploit in e-commerce code: update now!

• IT Security News Daily Summary 2022-02-14

• Labor, USDS pilot new unemployment insurance tech

• Cyber primer for local leaders

• Outrage over Telenor Myanmar sale grows as more ties between military and new owner revealed

• 8 of the Biggest Cybersecurity M&As & Investment Deals in 2021

• San Francisco 49ers Hit With a Ransomware Attack

• Apple is Finally Making a Cheaper Display: What We Know

• San Francisco 49ers catch ransomware, sample files leaked online

• Security Automation with Vision One & Palo Alto

• BlackByte ransomware breached at least 3 US critical infrastructure organizations

• Fake Windows website dropped Redline malware as Windows 11 upgrade

• Phony Valentines: Online Dating Scams and How to Spot Them

• Q&A on the Future of Work

• Fallout from REvil arrests shakes up ransomware landscape

• Adobe Releases Security Updates for Commerce and Magento Open Source

• Stop swiveling: Modernize security and info sharing with multilevel security

• Adobe Releases Security Updates for Commerce and Magento Open Source

• How to accelerate tech modernization (and still play by the rules)

• Apple Releases macOS Big Sur 11.6.4 With Security Fixes

• Apple Updates Support App With Repair Cost Estimates in Some Locations

• Legit Security Raises $30M to Tackle Supply Chain Security

• CISA Ransomware report warns “triple threat” attacks still on the prowl

• City: Skylines developers warn of rogue mod

• Wazawaka Goes Waka Waka

• Upcoming Speaking Engagements

• 2022 Mini-LED iMac Pro Could Launch in June

• The Federal Circuit Helps a Patent Troll Block Public Access to Court Records

• Mitigating Risk from Insider Threats in 2022

• Web Application Penetration Testing Checklist with OWASP Top 10

• The Crossroads of Disinformation and Nation State Attackers

• ‘Cities: Skylines’ Gaming Modder Banned Over Hidden Malware

• Ransomware is a clear and present danger. So why rely on legacy DR to recover from it?

• San Francisco 49ers Hit by Ransomware

• GitBleed – Finding Secrets In Mirrored Git Repositories

• Spanish Police Arrested SIM Swappers who Stole Money from Victims Bank Accounts

• CNN Learned About the Preparation of the US Authorities to Repel Cyber Attacks from Russia

• Don’t let scammers ruin your Valentine’s Day

• ‘Cities: Skylines’ Modder Banned Over Hidden Malware

• Threat Actors Still Love a Romance Scam

• Data Breach at Morley Companies

• Linux Tops Google’s Project Zero Charts For Fastest Bug Fixes

• Full-Time Internet Surveillance Comes To Cambodia

• 74% Of Ransomware Revenue Goes To Russia-Linked Hackers

• A Hacker Group Has Been Framing People For Crimes They Didn’t Commit

• Apple Ranks Seventh With Over 2,500 U.S. Patents Granted in 2021

• Dutch Regulator Says Apple Shouldn’t Force Dating Apps to Offer Separate App for Alternative Payments

• Scammers increasingly targeting women on dating sites

• Team Xecuter hacker gets 40 months in prison for Nintendo Switch hacks

• How ML can solve root cause application failure mysteries for engineering and support teams

• IARPA seeks ways to track nontrackable space junk

• CISA’s public-private cyber defense group helped speed Log4j mitigation, experts say

• Adobe: Zero-Day Magento 2 RCE Bug Under Active Attack

• Apple AirTags: The Complete Guide to How to They Work, What to Track with Them, and More

• Technology is revolutionizing how intelligence is gathered and analyzed – and opening a window onto Russian military activity around Ukraine

• Over 28,000 Vulnerabilities Disclosed in 2021: Report

• Webinar Tomorrow: Meet the Inventors of Onion Routing

• There’s much to love about SASE

• Deals: Anker’s New Gold Box Sale Has Up to 40% Off USB-C and MagSafe-Compatible Accessories

• Ransomware gang hits 49ers’ network before Super Bowl kick off

• Russia acts swiftly to nab SkyFraud Credit Card Data stealing Cyber Criminals

• The challenges of community- vs vendor-led open source software

• Nametag launches ‘Sign in with ID’ to access online accounts securely

• Power company pays out $3 trillion compensation to astonished customer

• Three-Quarters of Ransomware Payments Linked to Russia

• LogRhythm Unveils New Brand Identity

• (ISC)² to Pilot Online Proctored Exams for CISSP in U.S., U.K. and Singapore

• One Identity Enhances Unified Identity Security Platform with CIEM, Application Governance and Teams Modules

• Can AI and Technology Can Wipe Out Dating Paltforms Frauds? Expert Weighs In

• Could Biology Hold the Clue to Better Cybersecurity?

• European Central Bank tells banks to step up defences against nation-state attacks

• Heimdal™ and Bechtle UK Partner Up for an Exquisite Webinar on the CyberSec Threat Outlook

• More and More Companies Are Getting Hit with Ransomware [2021-2022]

• HOW TO TAKE THE CISSP EXAM ONLINE – REGISTRATION IS OPEN!

• February 14th, 2022 – MISP and VT, Livehunt improvements and notifications on missing hashes

• Meta Patent Filings Reveal Metaverse Business Model Plans

• A Case Study of Russia’s Arctic Posture

• Heimdal™ and Bechtle Partner Up for an Exquisite Webinar on the Cybersec Threat Outlook

• Sardine Raises $19.5 Million for Fraud Prevention Platform

• Ransomware Threat Intel: You’re Soaking In It!

• How To Cybersecurity: Gravity Is A Harsh Mistress

• Faxploiting Or How Fax Machines Can Be Hacked

• Adobe patches actively exploited Magento/Adobe Commerce zero-day

• Linux tops Google’s Project Zero charts for fastest bug fixes

• Mobileye To Launch Autonomous Shuttles In US

• Government agencies warn of sophisticated, high-impact ransomware

• Tripwire for Real War? Cyber’s Fuzzy Rules of Engagement

• How to stop your smartphone ruining your life

• Database mess up – US marketing firm exposed data of 7 million users

• Cybersecurity M&A volume reaches $77.5 billion in 2021: report

• CISA Again Warns U.S. Organizations of Potential Russian Cyberattacks

• PCI SSC and the National Cybersecurity Alliance issue bulletin to highlight ransomware threat

• Linux tops Google’s Project Zero charts for fixing bugs fastest

• Microsoft Defender gets better at preventing Windows passwords from being stolen

• Sophisticated FritzFrog P2P Botnet Returns After Long Break

• Allcome clipbanker is a newcomer in underground forums

• 15 Best Monitors for Computers to Buy 2022 – Thrilling Gaming Experience

• Silicon UK In Focus Podcast: Network Transformation

• Where Is the Justice Department on the Trump Obstruction Offenses?

• Thousands Of WordPress Sites Threatened By PHP Everywhere RCE Flaws

• Cost Of Cyber Insurance Surging, Whats Your View?

• Confidential Health Data Of Thousands Of Dorset Patients Leaked By Accident

• Croatian phone carrier reports data breach

• Adobe Issues an Emergency Patch to Address an Exploited Commerce Zero-Day Vulnerability

• Molerats APT Makes a Comeback Now Leveraging NimbleMamba Malware

• The 49ers Hit by Blackbyte Ransomware Attack

• Chip Sales ‘Hit Record $555.9bn’ Last Year

• Cambodia Steps Up Surveillance With New Internet Gateway

• Redline Stealer Malware Hidden In Windows 11 Upgrade

• Major car dealer suffers ransomware attack

• Half of all emails in 2021 were spam

• Apple Patched A Zero-Day Under Attack With iOS 15.3.1

• Just Eat Takeaway Chief Says No Plans To Sell Grubhub

• San Francisco 49ers hit with ransomware attack

• Sensitive business addresses published in COVID data breach

• 16-31 January 2022 Cyber Attacks Timeline

• Local Authority Sets Aside £380k for Cyber-Attack Recovery

• Google: Vendors Accelerate Bug Fixes to Just 52 Days

• Critical Magento zero-day flaw CVE-2022-24086 actively exploited

• Facebook has Exposed a ‘God Mode’ Token that Might be Used to Harvest Data

• Microsoft Discreetly Upgrades Defender Antivirus to Patch a Major Flaw

• Patch now: Adobe releases emergency fix for exploited Commerce,  Magento zero-day

• Trustpilot Sues Immigration Biz for Alleged Fake Reviews

• A week in security (February 7 – February 13)

• HMRC Seizes NFTs In £1.4m Fraud Probe

• Spanish Police Arrest SIM Swappers Who Stole Money from Victims Bank Accounts

• Crypto Giant Binance To Take $200m Stake In Forbes

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of February 7, 2022

• Apple Files New Macs in Regulatory Database Ahead of Rumored Spring Event

• Celebrating the Black History of Cybersecurity

• Alleged ransomware attack disrupted operations at Slovenia’s Pop TV station

• Trying to register your antivirus in Windows Security Center?

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Critical Security Flaws Reported in Moxa MXview Network Management Software

• The world’s most coveted spyware, Pegasus: Lock and Code S03E04

• Better Cloud Services: Tech giant Google Unveils Compute Optimized Virtual Machines (VMs) Powered by AMD EPYC Processors

• Pezzullo frames Critical Infrastructure Bills as ‘defence’ and ransomware plan as ‘offence’

• Democratizing security with Open XDR

• Open banking innovation: A race between developers and cybercriminals

• Hackers Injected Credit Card Skimmers to 500 Stores Running With Magento

• Using mobile networks for cyber attacks as part of a warfare strategy

• The importance of implementing security scanning in the software development lifecycle

• Full-time internet surveillance comes to Cambodia this week

• BlackByte Ransomware targets San Francisco 49ers

• Hackers planting cyber crime evidence onto devices of innocent computer users

Generated on 2022-02-20 23:59:39.710446