IT Security News Weekly Summary – Week 07

• IT Security News Daily Summary 2021-02-21

• BSidesSF 2020 – Yu-Jye Tung’s ‘An Effective Approach To Software Obfuscation’

• Robert M. Lee’s & Jeff Haas’ Little Bobby Comics – ‘WEEK 317’

• BSidesSF 2020 – Atul Gaikwad’s & Moses Schwartz’ ‘Mistakes Made Integrating Security Scanning Into CI/CD’

• Experts warn of threat actors abusing Google Alerts to deliver unwanted programs

• Redefining Communications for Today’s Mobile Workforces

• Apple Investigating Issue With ‘Pink Squares’ Appearing on Displays Connected to M1 Mac Mini

• 6 Security Methods to Protect You and Your Customers

• Bug bounty hacker earned $5,000 reporting a Stored XSS flaw in iCloud.com

• Russian state systems are in danger because of Internet Explorer

• Hezbollah Amid Lebanese Collapse

• FBI warns of the consequences of telephony denial-of-service (TDoS) attacks

• Cyber Attack: Computer Systems of Lakehead University Remains Offline

• A Trippy Visualization Charts the Internet’s Growth

• Innovation, Agility and Securing the Mobile World in 2021

• Security Affairs newsletter Round 302

• Alleged Leaked Image Claims to Show Third-Generation AirPods and Case

• Sequoia Capital Told Investors it was Hacked

• WhatsApp Reveals What Happens to Users Who Don’t Agree to Upcoming Privacy Policy Changes

• Bug in Brave Browser Expose Users’ Dark Web History

• Week in review: Most used MITRE ATT&CK tactics, boosting the “Sec” in DevSecOps

• Penetration testing

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Chrome Used 10X More RAM Than Safari on macOS Big Sur in Recent Test [Updated]

• The Healthcare Breach Report: Hacking and IT Incidents on the Rise

• HOW YOU CAN TAKE THE CISSP EXAM FROM HOME

• Manchin’s opposition could sink OMB nominee

• The US Government is going to respond to the SolarWinds hack very soon

• A Look at Recent Attacks on K-12 Distance Learning Providers Using Domain Intelligence

• Quickie: Extracting HTTP URLs With tshark, (Sat, Feb 20th)

• IT Security News Daily Summary 2021-02-20

• Introducing Crowdsec: A Modernized, Collaborative Massively Multiplayer Firewall for Linux>

• BSidesSF 2020 – Sourya Biswas’ ‘How The Coasts Approach Information Security Differently’

• M1 Macs Targeted by Additional Malware, Exact Threat Remains a Mystery

• Chrome Used 10X More RAM Than Safari on macOS Big Sur in Recent Test

• Brave browser Tor feature leaked .Onion queries to ISPs

• BSidesSF 2020 – Jacob Brackett’s ‘RIS-ky Business: Exploiting Medical Information Systems’

• XKCD ‘Perseverance Microphones’

• Sequoia Capital Venture Capital firm discloses a data breach

• Mitsubishi Begins Adopting Wireless CarPlay

• Why is Wikepedia So Racist?

• Robot Detained a Google AI Ethicist, Terminated Her

• SolarWinds hackers accessed source code of Azure, Exchange, Intune

• Privacy Bug in Brave Browser Exposes Dark-Web Browsing History of Its Users

• SonicWall releases second firmware updates for SMA 100 vulnerability

• Revisiting Apple’s MagSafe Leather Wallet After 3 Months of Usage

• Experian challenged over massive data leak in Brazil

• Brazilian firms fail to increase security spend through Covid-19

• Malware Affecting Apple’s New M1 Chip Detected by Researchers

• CLoP Hacker Group Purloined Data From Jones Day

• Think Before Investing – A Mantra for Investors Who Bindly Follow the Tweets of Elon Musk

• Sites Have a Sneaky New Way to Track You Across the Web

• Omegle investigation raises new concerns for kids’ safety

• Silver Sparrow, a new malware infects Mac systems using Apple M1 chip

• Microsoft Rolls Out “Kids Mode” For Safe Browsing In Edge Browser

• Cybercrime Undercover: Phishing Attacks Imitating Famous Brands Proliferate

• Top Stories: More iOS 14.5 Beta Changes, iPhone 13 Rumors, Apple Watch Charging Issue Fixed

• Happy birthday, Python, you’re 30 years old today: Easy to learn, and the right tool at the right time

• ScamClub Malvertiser Exploited WebKit Zero-Day To Redirect Users To Shady Sites

• ‘Build’ or ‘Buy’ your own antivirus product

• TDoS attacks could cost lives, warns FBI

• Week in security with Tony Anscombe

• 2021-02-19 – Mensagem “Pascholotto” empurra malware

• The data of 110 thousand customers was stolen from the Lithuanian car rental service

• The Cloud Shift Is Now: Boost Your Enterprise Security Portfolio

• The massive coronavirus IT blunder with a funny side

• Getting Into the Rhythm of Chart Typography with {ragg} and {hrbragg} (a.k.a. It’s {ragg}-time}

• Gurman: No Apple Event Happening on March 16

• iPadOS 14.5 Beta Adds Apple Pencil Scribble Support for German, French, Spanish, Italian and Portuguese

• Threat Roundup for February 12 to February 19

• Kia Denies Ransomware Attack as IT Outage Continues

• Mandiant Exposes APT1 – One of China’s Cyber Espionage Units &
  Releases 3,000 Indicators

• Privacy bug in the Brave browser exposes Tor addresses to user’s DNS provider

• Come Work With Lawfare, As Our Bookkeeping Office Manager!

• How You Can Take The CISSP Exam From Home

• IT Security News Daily Summary 2021-02-19

• Malformed URL Prefix Phishing Attacks Spike 6,000%

• How do cybercriminals steal credit card information?

• Facebook To Begin Cracking Down On Climate Change Misinformation

• Shares of Long-Range Wireless Charging Company Energous Nearly Double Today on Years-Old Rumors of Apple Partnership

• Mitigating Memory Safety Issues in Open Source Software

• Ransomware is Evolving – Agencies Must Prioritize Data Backup

• Top 100 Managed Security Service Providers (MSSPs)

• NIST updates smart grid framework

• CISA looks inward to stop future supply chain attacks

• DOD’s 5G-powered smart warehouse network kicks off

• How robots would help the Post Office

• Zero Trust is not a security solution. It’s a strategy

• Kia outage may be the result of ransomware

• Suspected Russian Hack Fuels New US Action on Cybersecurity

• BSidesSF 2020 – Chloé Messdaghi’s, Ryan Louie’s & Susan Peediyakkal’s ‘Panel: Mental Health for Hackers – Contents Under Pressure’

• XKCD ‘Animal Songs’

• BSidesSF 2020 – Brianne Hughes’ ‘How To Write Like It’s Your Job’

• Apple Highlights Upcoming Spring and Summer TV Shows

• Cybersecurity for a Cloud-First, Work-from-Home World (Part 2)

• Facebook tries to explain the WhatsApp privacy changes one more time

• Credential-Stuffing Attack Targets Regional Internet Registry

• Mysterious Silver Sparrow Malware Found Nesting on 30K Macs

• How to find details about user logins on Linux

• New malformed URL phishing technique can make attacks harder to spot

• US Arrests Six Alleged Cyber-Scam Money Launderers

• Windscribe VPN review

• MacRumors Giveaway: Win an Executive Laptop Backpack and AirPods Max Shield Case From WaterField Designs

• ‘Mythic Quest’ Season 2 Premiering on Apple TV+ on May 7

• Zero Trust Meets OS Patch Management

• How Do Copyright Rules Affect Internet Creators? And What Can They Do About It?

• North Korean hackers charged with $1.3 billion of cyberheists

• FBI Warns of Telephony DDoS Attacks

• Multiple Cities Disclose Data Breach After Vendor’s Ransomware Attack

• RIPE NCC targeted With Credential Stuffing Attack

• Jamaica’s Immigration Website Exposed Thousands of Travelers’ Data

• ELF Malware Analysis 101: Part 3 – Advanced Analysis

• cracker

• Take security to the Zero Trust Edge

• 1Kosmos Emerges from Stealth Mode With $15 Million in Funding

• Healthcare Data Breaches Halved in January

• Kia Denies Ransomware Attack

• Attackers Already Targeting Apple’s M1 Chip with Custom Malware

• New Masslogger Trojan variant exfiltrates user credentials

• Cops Using Music to Try to Stop Being Filmed Is Just the Tip of the Iceberg

• New variant of MassLogger Trojan stealing Chrome, Outlook data

• FCW Insider: Feb. 19

• IRS issues urgent notice on scams aimed at tax professionals

• The massive coronavirus pandemic IT blunder with a funny side

• Omdia’s On-Demand Webinars

• Reducing the Time to Discovery: How to Determine if You Have Been Hacked

• Apple TV+ Series ‘Physical’ Starring Rose Byrne Coming This Summer

• Apple Shares Teaser for ‘The Mosquito Coast’ Coming to Apple TV+ April 30

• Reflections On Reform of the Impeachment Process

• CEOs Comments On Report: Rise In Healthcare Attacks

• Expert Reaction On UK Cyber Security Attracts Record Investment

• Cloud Data Security is Now Available in AWS Marketplace

• International law firm Jones Day hacked with data posted on dark web

• Racial and Immigrant Justice Groups Sue Government for Records of COVID-19 Data Surveillance

• WhatsApp To Press Ahead With Privacy Update

• 11 Ways To Fix the ERR_SSL_VERSION_INTERFERENCE Chrome Error

• Manufacturing Cybersecurity Threats and How To Face Them

• Brave browser leaks onion addresses in DNS traffic

• Inside the Battle to Control Enterprise Security Data Lakes

• Mexican Politician Removed Over Alleged Ties to Romanian ATM Skimmer Gang

• Personal Information of Nearly 1,30,000 Singtel Users’ Stolen in a Data Breach

• SolarWinds Hack: ‘All is Well,’ Microsoft Shrugs

• Deals: Numerous Sales Hit Apple’s 2020 iPad Air, Prices Start at $549 for 64GB Wi-Fi

• Apple Reportedly in Active Talks With Multiple LiDAR Sensor Suppliers for Self-Driving Vehicle

• WhatsApp gives new data privacy deadline of May 15

• Malaysia arrests 11 suspects for hacking government sites

• Linux 101: How to block users from setting up their own cron jobs

• Forrester report highlights Zero Trust Edge model for networking and security infrastructure

• Brussels Okays EU-UK Personal Data Flows

• Draft Adequacy Decision Paves the Way for EU-UK Data Flows to Continue Freely

• DoppelPaymer Gang Reportedly Attacked Kia Motors America with Ransomware

• Police dismantle criminal network linked to international VAT fraud trading vegetable oil

• New Hack Lets Attackers Bypass MasterCard PIN by Using Them As Visa Card

• Industry Recognition for Runtime Application Security: Omdia Research

• It’s not stupid if it works: best tech support MacGyver moves

• AppSec Bites Part 3: Has the New Virtual Reality Created Opportunities for AppSec?

• Ghost Camaro of Bosnia

• How to change region on Steam

• Plex Testing TV App Integration Across iPhone, iPad, and Apple TV

• Apple Demanded Sales Information on 30,000+ Games From Steam in Ongoing Lawsuit With Epic Games

• Companies unprepared for cloud migration

• Apple details major security, privacy enhancements in its devices

• EPP EDR: What Is Each and How They Differ

• What Is a Zero-Day Vulnerability?

• The Biggest Data Breaches of 2021

• More Supply-Chain Cyberattacks are in the Wind

• Fireside Chat – Running A Cyber Crisis Drill For The US Government, Homeland Security & Tabletops For Enterprise Board Members

• Myanmar arrests 11 suspects for hacking government sites during protests

• Microsoft: SolarWinds Attackers Downloaded Azure, Exchange Code

• After IT Outage, Carmakers Kia and Hyundai Say No Evidence of Ransomware Attack

• Kaspersky: Decline in DDoS Attacks Linked to Surge in Cryptocurrency Value

• How to Fine-Tune Vendor Risk Management in a Virtual World

• New version adds encrypted communication

• AirPods Max in Silver Now Available to Ship on Verizon

• US cities affected after ATFS Ransomware attack

• SECURITY ALERT: Newly Discovered Fan Courier Phishing Campaign Targets Romanian Companies

• Blueprint for fault-tolerant qubits

• Quantum computing: When ignorance is wanted

• Leaving LastPass? Here’s how to get your passwords out

• WhatsApp tries again to explain what data it shares with Facebook and why

• Virginia Lawmakers Advance Consumer Data Protection Act

• Carmakers Kia and Hyundai Say No Evidence of Ransomware Attack

• Shift to Remote Work Necessitating Greater Innovation in Cybersecurity

• 2021 Security Outcomes Study: Stress Relief for CISOs

• Microsoft Wraps SolarWinds Probe, Nudges Companies Towards Zero Trust

• Browser Tracking Via Favicons Affects Multiple Browsers

• BBC Select Now Available Through Apple TV Channels

• Clubhouse Reportedly Surpasses 8 Million App Store Downloads

• How to Understand Iranian Information Operations

• The Weeds and Flowers of Information Security

• Google Appoints Executive At Troubled AI Research Group

• MyData Global Data Trust Network | Avast

• Microsoft: SolarWinds Hackers Attempted to Access Our Systems Until January 2021

• Protecting Against Vaccine-Themed Attacks and Misinformation

• CrowdStrike Snaps Up London Start-Up Humio

• Lakehead University Shuts Down Campuses and Computers After Cyberattack

• Experts spotted the first malware tailored for Apple M1 Chip, it is just the beginning

• Router Security

• Bloomberg: iPhone Reverse Charging for Apple Watch and AirPods ‘Unlikely in the Near Future’

• Apple Maps Expands Turn-by-Turn Directions for United Arab Emirates

• Millions of Californian DMV records possibly exposed in breach

• People’s Postcode Lottery scam claims you could have won £1,000

• Red Canary closes $81 million Series C financing round led by Summit Partners

• Microsoft: Solorigate attackers grabbed Azure, Intune, Exchange component source code

• UK Court Rules Uber Drivers Are Workers

• SolarWinds Attackers Breached 100+ Private Firms

• HomeKit Support Rolling Out to IKEA’s TRADFRI Motion Sensor and Shortcut Button

• Bloomberg: Apple Working on MagSafe Battery Pack for iPhone 12

• The CSO guide to top security conferences, 2020

• Egregor ransomware group explained: And how to defend against it

• Internet Registry RIPE NCC Warns of Credential Stuffing Attack

• Banks Investing in Automated Cyber-Defenses to Fight Business Email Compromise, Survey Shows

• Masslogger Campaigns Exfiltrates Clients Credentials

• “LinkedIn Private Shared Document” Shared Via Phishing Email by Hackers

• Tim Cook: 2020 Was Apple’s ‘Top Year of Innovation Ever’

• RIPE NCC reveals failed brute-force assault on its SSO service

• Cybersecurity in Cyberpunk 2077: the good, the bad, and the cringeworthy

• How to make Microsoft Office (mostly) unhackable

• Capital Group Appoints Marta Zarraga as Global Chief Information Officer

• Masslogger Trojan Upgraded to Steal All Your Outlook, Chrome Credentials

• Hackers steal credit card data abusing Google’s Apps Script

• iPhone Production in India Reportedly Impacted By Tensions Along Chinese Border

• Apple to Hold Preview Event At Second Apple Store in South Korea on February 24

• CityBee – 110,156 breached accounts

• Study Proves AI Can Encourage Dishonesty | Avast

• Fight Back Against COVID-19 Cyberfraud

• Dynamic Data Exchange (DDE) is Back in the Wild?, (Fri, Feb 19th)

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• Accelerate your storage—first the cloud, then to infinity and beyond

• Weekly Update 231

• SolarWinds Hackers Stole Some Source Code for Microsoft Azure, Exchange, Intune

• Nation-State Espionage in ‘The Flight Attendant’

• Ransomware attack on California Department of Motor Vehicles

• United States charges 3 North Koreans for Global Cyber Attacks

• SolarWinds hackers downloaded some Microsoft source code for Azure, Exchange, and Intune

• What behavioral experts can teach us about improving security

• Atheists warn followers of unholy data leak, hint dark deeds may have tried to make it go away

• Malware authors already taking aim at Apple M1 Macs

• Apple Donating to Texas Relief Efforts

• Season 2 of ‘For All Mankind’ Now Available on Apple TV+

• The Coronavirus Pandemic Is Widening the Cybersecurity Skills Gap

• CXOs consider mainframe and legacy modernization a business priority

• Most security pros think a WAF is high maintenance

• Business email compromise is a top concern for banks

• 5G security market to reach 5.226 billion by 2026

• Ukrainian police arrested members of a well-known cyber ransomware group

• ISC Stormcast For Friday, February 19th, 2021 https://isc.sans.edu/podcastdetail.html?id=7380, (Fri, Feb 19th)

• ShiftLeft Illuminate reduces risk to organizations’ software code base

• CIS launches MDBR, a no-cost ransomware protection service for private hospitals

• Beyond Clubhouse: Vulnerable Agora SDKs Still in Widespread Use

• Calix updates AXOS to expand infrastructure APIs to enable full modularity across network functions

• CircleCI announces privacy enhancements for engineering teams

• Microsoft admits some Azure, Exchange, Intune source code snaffled in SolarWinds schemozzle

• What is SQL Injection? How to Prevent SQL Injection

• Bitglass further expands its SD-WAN integration ecosystem

• JEDEC issues JESD304-4.01 DDR4 NVDIMM-P Bus Protocol

• Marvell and Toshiba extend HDD controller and preamplifier collaboration

• D-Link unveils DCS-8300LHV2 Full HD Wi-Fi Camera with AI-based person detection

• Windstream WE Connect gives customers enhanced insight into their networks

• Lawmakers press OPM, CDC for vaccine allocations for federal employees

• Microsoft Concludes Internal Investigation into Solorigate Breach

• Backblaze expends Board of Directors with three new members

• CrowdStrike acquires Humio to expend its XDR capabilities

• Neustar’s digital and call center identity service approved by Kantara

• Pentagon plans for spectrum policy changes, modernizing IT tools

• S3 Ep20: Corporate megahacking, true love gone bad, and tax grabs [Podcast]

• Un año de resiliencia con espíritu latino.

• iOS and iPadOS Apps Worth Checking Out – February 2021

• Why Are Farmers Protesting in India?

• Situational Ethics Drove the Military’s Decision to Delay Female Officer Promotions

• CloudSense appoints two new executives to its leadership team

• The Most Commonly Hacked Smart Home Tech

• Domain Age as an Internet Filter Criteria

• Millions Affected by Malware Attributed to Android Barcode-Scanning App

• How 2020 Has Shaped The Way We Live Our Lives

• How to help newly elected local officials understand government finance

• Pandemic tests electronic records management

• Warner wants answers on Florida water utility hack

• White House plans executive action in response to massive breach

• SolarWinds fallout has enterprise CISOs on edge

• Shining a Light on SolarCity: Practical Exploitation of the X2e IoT
  Device (Part One)

• Shining a Light on SolarCity: Practical Exploitation of the X2e IoT
  Device (Part Two)

• IT Security News Daily Summary 2021-02-18

• Ransomware gangs are running riot — paying them off doesn’t help

• Apple Outlines 2021 Security, Privacy Roadmap

• Cybercriminal Enterprise ‘Ringleaders’ Stole $55M Via COVID-19 Fraud, Romance Scams

• White House: 100 companies compromised in SolarWinds hack

• CrowdStrike Buys Log Management Startup Humio for $400M

• The NSA Wants Businesses to Use DoH. Here’s What You Need to Know.

• Apple Offers Its Closest Look Yet at iOS and MacOS Security

• Credential stuffing attack hit RIPE NCC: Members have to enable 2FA

• Apple Maps Cycling Directions Expand to Portland and San Diego

• The Best Approach To Elasticsearch Security

• CISA eyes changes to combat future supply chain hacks

• Kia Motors Hit With $20M Ransomware Attack – Report

• Apple Offers Closer Look at Its Platform Security Technologies, Features

• 1Kosmos Secures $15 Million in Series A Funding From ForgePoint Capital

• Oracle is Said to Help China Find Dissidents and Jail Minorities

• SolarWinds hackers had access to components used by Azure, Intune, and Exchange

• Apple Updates Platform Security Guide, Says Kernel Extensions Won’t Be Supported on Future Apple Silicon Macs

• Microsoft Office 2021 Coming to macOS and Windows Later This Year

• University Health Network Launches Apple Watch Heart Failure Study That Uses Blood Oxygen App

• iPhone 12 MagSafe Cases Expanding to Include More Third-Party Companies Like Nomad and Casely

• Kia Motors USA Suffered Nationwide IT Outage – Reason Undetermined

• 2021-02-01 thru 2021-02-18 – Quick post: 46 malicious emails

• Microsoft Azure Front Door Gets a Security Upgrade

• Security Intelligence Handbook Chapter 9: Manage Third-Party Risk in Real Time

• Bitcoin and EV stocks are vulnerable to a correction: Expert

• Malvertiser “ScamClub” Bypasses Iframe Sandboxing With postMessage() Shenanigans [CVE-2021–1801]

• Micro-patch Released for Internet Explorer Zero Day

• Russian Military Intelligence Agency Targeting Outdated Versions of Centreon Software

• Ninja Forms WordPress Plugin Left One Million Sites Vulnerable

• US Indicts DPRK Hackers for $1.3billion Theft

• Hackers Targeting Apple’s M1 Chip with Mac Malware

• US charges 3 North Korean hackers for extorting $1.3+ billion

• RIPE NCC discloses failed brute-force attack on its SSO service

• Ethernet: Why your home office could use more of it

• Microsoft says SolarWinds hackers downloaded some Azure, Exchange, and Intune source code

• Exploit Details Emerge for Unpatched Microsoft Bug

• Cybersecurity needs to be proactive with involvement from business leaders

• Access Governance Company SPHERE Raises $10 Million

• IT certification vs. degree: Which is better for your career?

• US names three North Koreans in laundry list of cybercrime charges

• US Jails Celebrated Nigerian Entrepreneur for Cyber-Fraud

• California DMV Halts Data Transfers After Vendor Breach

• Software Firm Owner Admits Fraud and CSAM Possession

• Data security accountability in an age of regular breaches

• Hiding in Plain Sight: What the SolarWinds Attack Revealed About Efficacy

• Cross Company manages IT efficiently using OpManager’s push notifications and email alerts

• North Korean Hackers Charged in WannaCry Ransomware & $1.3 Billion Cybercrime Spree

• The Rise of Software Supply Chain Attacks

• WatchDog botnet targets Windows and Linux servers in cryptomining campaign

• macOS 11.3 Could Ensure Your Mac is Fully Charged in Time for Calendar Events

• Apple TV App Now Available on Google’s Latest Chromecast Device

• Apple Seeds Second Public Beta of macOS Big Sur 11.3

• Sonnet Introduces Thunderbolt 4 Dock With Up to 90W Charging for Macs

• The Indo-Pacific Strategy Is a Recipe for Disaster

• Congress’s IT Infrastructure Is a Disaster Waiting to Happen—Here’s How to Start Fixing It

• Forrester Consulting TEI Study: Azure Security Center delivers 219 percent ROI over 3 years and a payback of less than 6 months

• Romance scams: FTC reveals $304 million of heartache

• Just 2.6% of 2019’s 18,000 tracked vulnerabilities were actively exploited in the wild

• How to Use Content Caching on macOS to Save Bandwidth

• SHAREit Android App Vulnerabilities Remain Unfixed For Three Months

• Malware Now Targets Apple’s M1 Processors

• Kia Motors America Faces $20 Million Ransomware Demand – Report

• Member Profile: My Expedition Through nmap Lab How to get through the NMAP room in Tryhackme >

• Mac Malware Targets Apple’s In-House M1 Processor

• How to Run a Successful Penetration Test

• Why SAST and DAST are Crucial for The Security of Web and Mobile Applications?

• Identity and Access Management Solutions Provider BIO-key Announces Expanded Partner-Centric Channel Alliance Program

• CalDigit and OWC Unveil Thunderbolt 4 and USB 4 Cables

• Roadmapping Privilege Escalation in Windows Systems

• Turning the page on Solorigate and opening the next chapter for the security community

• Microsoft Internal Solorigate Investigation – Final Update

• How to keep backed up data safe from ransomware attacks

• US Charges Three North Korean Hackers

• Cyber Resilience Strategy Changes You Should Know in the EU’s Digital Decade

• Uplevel your SOC with one tool and the insights behind it- Part 2

• Why You Can’t See The App For The Microservices

• Emerging Mobile Threats and How to Prevent Them

• CrowdStrike acquires log data analysis startup Humio for $400 million

• FCW Insider: Feb. 18

• Quick Hits

• Weathering the storm: What public utilities can learn from cloud computing

• CrowdStrike acquires Humio for $400 million

• France to Boost Cyberdefense After Hospital Malware Attacks

• Virginia Takes Different Tack Than California With Data Privacy Law

• Cisco Releases Security Updates for AnyConnect Secure Mobility Client

• WhiteHat Research Finds 50% of Apps are Vulnerable

• AirPlay Support for Apple Fitness+ Begins Working in Second Beta of iOS 14.5

• Deals: Save on Apple Watch Series 6 From $339 and Official iPhone 11 Cases From $16.49

• What Is a Software Patch?

• BrandPost: Prioritize Your Security Automation Tasks in 4 Steps

• US charges North Koreans in relation to global cyber attacks

• FDM Group Makes Pledge to Hire 2000+ New Global IT Trainees in 2021

• Data Breach at DMV Contractor Exposes Vehicle Registration Data of Millions of Californians

• Europol and the World Anti-Doping Agency to tackle doping together

• Egregor Arrests a Blow, but Ransomware Will Likely Bounce Back

• Pro Tip: Say What You Know

• Controlling Smart Lights Using Dumb Switches with Shelly and Home Assistant

• For threat actors, cyberinfrastructure is akin to a cash-filled vault – the head of IBM

• Weebly vs WordPress – main features compared

• SPHERE Secures $10 Million in Series A Funding

• Sensitive data of more than 257,000 online gamblers put for sale on hacker forum

• StrikeForce Launches PrivacyLok Delivering Multi-Layered Privacy Protection Built for New Remote Work Realities

• DDoS attacks in Q4 2020

• Three More North Korean Hackers Charged

• SolarWinds Attack Hit 100 Companies And Took Months Of Planning, Says White House

• ScamClub Cybergang Campaign Leveraged Safari Flaw

• Masslogger Swipes Outlook, Google Chrome Credentials

• Instagram Confirms Bug With iMessage Link Previews, Promises Fix Soon

• Safari for Mac to Support WebM Video Playback 11 Years After Its Launch

• Singtel Breach Compromises Data Of 129,000 Customers And Former Employees

• Expert On Hundreds Of Thousands Immigration And COVID Records Exposed In Jamaica

• Now-Patched Telegram Vulnerabilities Could Allow Spying On Chats Via Animated Stickers

• White House Takes On Silicon Shortage, Identifies Choke Points

• Braced for Impact: Fostering Good Cloud Security Posture Management

• How Intel is building a culture around security 3 years after Meltdown and Spectre

• Private firms can’t protect us from digital attacks. Government must step in.

• SDK Bug Lets Attackers Spy on User’s Video Calls Across Dating, Healthcare Apps

• Stored XSS Vulnerability on iCloud.com Earned Researcher $5,000

• Elevate the Value of Threat Intelligence in the SOC

• Half of Apps Contain at Least One Serious Exploitable Vulnerability

• Cybercriminal Gang Clop Attacked an International Law Firm Jones Day For Ransom

• Phishers tricking users via fake LinkedIn Private Shared Document

• Garfield Teaches Hawaii Students how to be Safe and Secure Online

• Masslogger Trojan reinvented in quest to steal Outlook, Chrome credentials

• Windows and Linux servers targeted by new WatchDog botnet for almost two years

• SolarWinds attack hit 100 companies and took months of planning, says White House

• Hackers Target Myanmar Government Websites in Coup Protest

• Breaches Cost US Healthcare Organizations $13bn in 2020

• TalaTek Named a StateRAMP 3PAO Assessor

• iPhone Assembler Pegatron Acquires Land for Production Base in India

• Bloomberg: Apple Hiring Engineers to Work on 6G Wireless Connectivity

• Experts Reaction On Kia Motors Suffers Ransomware Attack

• UK Crypto Exchange EXMO Knocked Offline Amid DDoS Attack

• The Complete Soldier Romance Scam Support Site

• Mystery Shoppers Challenge Gift Card Warnings

• Nurserycam horror show: ‘Secure’ daycare video monitoring product beamed DVR admin creds to all users

• When you go fighting malware don´t forget your VT plugins

• Mac Malware Targeting Apple’s M1 Chip Emerges

• Two More Lazarus Group Members Indicted for North Korean Attacks

• Facebook Blocks All News Sharing on Its Platforms in Australia

• Windows Starts Removing Adobe Flash Player via KB4577586 update

• A New Amazon Phishing Scam, Malvertizing, and Apple Activation Lock Removal – Intego Mac Podcast Episode 175

• 3.27 Billion Reasons to Change Your Password

• Annoying macOS Big Sur Data Loss Vulnerability Gets A Fix

• Facebook Pulls News From Australia, Citing Incoming Law

• UK’s Cybersecurity Sector Experiences Record Growth

• First Malware Designed for Apple M1 Chip Discovered in the Wild

• Industrial Remote Access: Why It’s Not Something to Fear

• Fun To Financially Driven Cybercrime | Avast

• Google Maps iOS App Will Soon Let You Pay for Parking and Transit Rides

• How to select a DLP solution: 9 unusual considerations

• The HITECH Act explained: Definition, compliance, and violations

• New York Sues Amazon Over Pandemic Protection For Workers

• AV-Comparatives Top Rated Product Of 2020 | Avast

• Singtel Breach Hits 129,000 Customers

• Apple Lobbies Indian Government to Begin Local iPad Production

• Data Leakage Prevention: What It Is and How It Can Help Your Business

• Data of 14 Million Amazon and eBay Accounts Leaked on Hacking Websites

• New IoT Legislation Means Advance Planning is Key

• Has your cloud app suite left you feeling insecure? There’s a reason for that

• Want to add antivirus to your existing portfolio?

• U.S. Charges 3 North Korean Hackers Over $1.3 Billion Cryptocurrency Heist

• Cyber Privateering Complicates Attack Attribution

• Significantly Reduce TCO and Increase Operational Efficiency with Centralized Management and Automation of ADC Infrastructure

• The OpenSSL Project addressed three vulnerabilities

• Cred-stealing trojan harvests logins from Chromium browsers, Outlook and more, warns Cisco Talos

• Lithuanian Police Investigate Leak of 110,000 User Records of CityBee

• Emotional intelligence playing an increasingly important role for CISOs

• Homomorphic encryption: Myths and misconceptions

• CrowdStrike Redefines True XDR With Humio Acquisition

• How can we protect ourselves against fake news and manipulation?

• Healthcare breaches increased over 50% in 2020

• DoppelPaymer Ransomware hits Kia Motors America databases

• SHAREit app filled with vulnerabilities

• Unpatched SHAREit Flaw Let Attackers Execute Remote Code

• Apple New Proxy Feature to Prevent Leaking IP Addresses to Google

• Labor calls for an Australian ransomware strategy

• Coming to Life: A Detailed Tutorial on Building Your First ATT&CK Procedure

• Hacking Christmas Gifts: Brushing with Bluetooth

• UK Cryptocurrency Exchange EXMO Suffers a ‘Massive’ DDoS Assault

• Why do enterprise SOC teams need CIEM now?

• $432.14 billion to be invested in the data center market by 2025

• The press secretary of the Russian president denied Russia’s connection with the hackers who attacked France

• ISC Stormcast For Thursday, February 18th, 2021 https://isc.sans.edu/podcastdetail.html?id=7378, (Thu, Feb 18th)

• Can security and compliance for managed database services be simple?

• Tigera launches Calico Cloud, a pay-as-you-go SaaS for Kubernetes security and observability

• Cyemptive Web Fortress protects web servers against zero-day cyberattacks in real time

• Free certification Exam Action Plan from (ISC)²

• US Still Unraveling ‘Sophisticated’ Hack of 9 Gov’t Agencies

• Samsung HBM-PIM brings AI computing capabilities inside high-performance memory

• Cobwebs visual link analysis tool enables investigators to visualize digital footprints

• Index Engines releases API-based developer kit for integration of data integrity software Cybersense

• Protegrity Partner Network secures global innovation in AI, analytics and cloud

• Learn How to Make Your Dream Business a Reality

• Lawfare Live: Merrick Garland’s Forthcoming Confirmation Hearing

• Astadia Mainframe Transformation now available in AWS Marketplace

• Confluent launches Premium Connector to Oracle Databases to accelerate IT modernization

• Optiv announces new capabilities to help clients navigate Cybersecurity Maturity Model Certification

• C3 AI announces enhancements to its AI application development platform and AI applications

• VigiTrust VigiOne now enables users to conduct full risk assessments before managing compliance

• API Security Weekly: Issue #121

• LastPass password management app: A cheat sheet

• Apple Pay With Express Transit Mode Coming Soon to San Francisco Bay Area’s Clipper Card

• Zadara acquires NeoKarm enabling MSPs to offer an on-demand private cloud

• SoftServe receives AWS Healthcare Competency status for its innovative healthcare solutions

• DataRobot Feature Discovery integration with Snowflake improves models’ accuracy

• Datadog and Moogsoft integration allows SRE teams to swiftly get to the cause of a service outage

• How Technology is Important to Your Business

• Why You Should Run Your WordPress Site On Ubuntu

• 4 Steps to Resilient SMB Cybersecurity

• What New Zealand’s Privacy Act 2020 Means for APIs

• CrowdStrike Falcon X Recon

• GSA preps guidance for using CMMC in civilian contracts

• Defence lists cyber mitigation as key factor for building ethical AI

• US Unseals Indictments Against North Korean Cyberattackers for Thefts Totaling $1.3B

• Egregor Arrests a Blow, But Ransomware Will Likely Bounce Back

• Malspam pushing Trickbot gtag rob13, (Wed, Feb 17th)

• Darcey Harrison joins Avaya as Vice President of Cloud Acceleration, North America

• SolarWinds adds Kevin Kline to the Head Geek team

• EFF to First Circuit: Schools Should Not Be Policing Students’ Weekend Snapchat Posts

• 2021-02-17 – Pcap and malware for an ISC diary (Trickbot gtag rob13)

• Changes coming to federal cyber in wake of massive breach

• Despite security concerns, online voting advances

• How AI can save money, spare lives and reduce downtime

• Microsoft starts removing Flash from Windows devices via new KB4577586 update

• White House Says 100 Private Sector Orgs Hit in SolarWinds Campaign

• US DoJ charges three members of the North Korea-linked Lazarus APT group

• Mobile Ad Companies Form ‘Post-IDFA Alliance’ to Navigate Upcoming App Tracking Transparency Changes

• First Malware Running Natively on M1 Chip Discovered

• Uncle Sam accuses three suspected North Korean govt hackers of stealing $1.3bn+ from banks, crypto orgs

• IT Security News Daily Summary 2021-02-17

• The weirdest hacking techniques you’ve never heard of

• New WatchGuard Cloud Platform Capabilities Usher in the Era of Simplified Security Management for MSPs

• Egregor ransomware takes a hit after arrests in Ukraine

• Cybersecurity Risk: What It Is and How Can It Be Reduced?

• Warner seeks answers from FBI, EPA on Florida water utility breach

• Census data delay disrupts state redistricting plans

• Fighting fires with data

• Richard Simone Named CEO of 2020 ‘ASTORS’ Award Winner CHERRY

• Windows, Linux Devices Hijacked In Two-Year Cryptojacking Campaign

• Stolen Jones Day Law Firm Files Posted on Dark Web

• LastPass: A cheat sheet

• Wide net cast on potential Accellion breach victims

• U.S. Indicts North Korean Hackers in Theft of $200 Million

• Facebook Fined For Misleading Users About What It Does With Their Data

• Brydge Brings Multi-Touch Support to Pro+ Keyboards, Debuts New 10.2-Inch Max+ Model

• Top 100 Cybersecurity Movies

• Channeling as A Challenge

• 3 Reasons to Use Manual Testing Alongside Automation Testing

• BrandPost: HP Predicts More Targeted Cyberattacks in 2021

• DOJ charges three in WannaCry attacks, attempts to steal $1.3B

• Risk & Repeat: SolarWinds and the hacking back debate

• Index Engines’ CyberSense SDK expands its third-party reach

• Applied Insight Acquires Maryland Cyber Firm

• Kia Faces $20M DoppelPaymer Ransomware Attack

• Malicious Life Podcast: Should Law Enforcement Use Facial Recognition? Pt. 2

• LG Reportedly Assisting Apple on Foldable Display Development

• Apple Car Sensor Manager Departs Company for Space Startup Astra

• China Blocks Clubhouse

• Civilian Oversight as a Police Accountability Mechanism

• The U.S. Needs a Cyber State of Distress to Withstand the Next SolarWinds

• DOJ’s John Demers on North Korea crypto hack, SolarWinds hack

• A Ban on Ad Targeting: Why Did EU Regulators Call for It?

• Malware quiz: Test your knowledge of types and terms

• Security Pros Pursue Hobbies at Work

• Ninja Forms WordPress Plugin Bug Opens Websites to Hacks

• You’ve got millions of open-source software components to choose from… and so do cybercriminals

• Kaspersky: Goofing off a little at work may help security teams stay focused

• Jones Day Denies Network Breach

• Parler Says It’s Back

• Feds Indict North Korean Hackers for Years of Heists

• Google Releases Security Updates for Chrome

• Wake on LAN com gerenciador de endereço IP: uma abordagem holística para inicialização remota

• IDC: Chromebooks Outsold Macs for the First Time in 2020

• Disney+ Plans International Rollout of Adult-Friendly ‘Star’ Channel to Subscribers Starting Next Week

• Apple Inks Multi-Year Deal With Skydance Animation for Kid-Friendly TV Shows and Movies

• Deals: Purchase Parallels Desktop 16 and Get 10 Mac Apps for Free (1Password Families, Fantastical, and More)

• Twitter Expands Support for DM Voice Messages on iOS and Android to India

• WH cyber adviser: Solarwinds Hack compromised 9 agencies, about 100 private companies

• Shared SDK Vulnerability Allows Attackers to Infiltrate Calls on Multiple Applications

• QNAP Patches Critical Vulnerability in Surveillance Station App

• CityBee Users Information Sold on Hacking Forum

• Don’t Call Us We’ll Call You: McAfee ATR Finds Vulnerability in Agora Video SDK

• 5 Types of Software Malware and How To Recognize Them

• US charges two more members of the ‘Lazarus’ North Korean hacking group

• U.S. Accuses North Korean Hackers of Stealing Millions

• “ScamClub” gang outed for exploiting iPhone browser bug to spew ads

• Ransomware? Let’s Call It What It Really Is: Extortionware

• ScamClub malvertising gang abused WebKit zero-day to redirect to online gift card scams

• 6 strategies to reduce cybersecurity alert fatigue in your SOC

• [SKP’s Novel Concept #01] Information Engineering Principles for the Internet

• Solving for DOD’s AI education gap

• Expect more nation-state cyberattacks, Krebs says

• Phishing: These are the most common techniques used to attack your PC

• U.S. Charges North Korean Hackers Over $1.3 Billion Bank Heists

• #DTX Tech Predictions Mini Summit: How to Build a Strong Cybersecurity Culture

• Enterprise Windows Threats Drop as Mac Attacks Rise: Report

• Breach Etiquette: How to Mind Your Manners When It Matters

• The new “LinkedInSecureMessage” ?, (Wed, Feb 17th)

• Mitigating Memory Safety Issues in Open Source Software

• DOJ: Cryptocurrency exchanges targeted in illicit hack

• Blockchain.com founder on cryptocurrency hack

• Google Signs News Corp To ‘News Showcase’ Scheme

• Clop ransomware gang leaks Jones Day law firm data on dark web

• 5 Considerations When Implementing A SOC Program

• Don’t Get Schooled: Understanding the Threats to the Academic Industry

• DOD eyes CMMC-FedRAMP reciprocity by end of FY 2021

• Key weapons programs need new cyber requirements, IG finds

• Singtel breach compromises data of customers, former employees

• Masslogger Swipes Microsoft Outlook, Google Chrome Credentials

• Adversarial attacks: 5 things to know

• Microsoft’s Power BI gets new tools to prevent leakage of confidential data

• Top 5 things to know about adversarial attacks

• North Korean Malicious Cyber Activity: AppleJeus

• How to Block BYOD from Accessing Your Apps with a Device Trust Policy

• In Biotech, the Industry of the Future, the U.S. Is Way Ahead of China

• Water Wars: Chinese Military Takes Aim While Biden’s China Strategy Takes Shape

• Clubhouse under scrutiny for sending data to Chinese servers

• You don’t have clearance for that: Microsoft ups the paranoia with a preview of Azure Firewall Premium

• Automated cars are vulnerable to Cyber Attacks

• How Web Application Security Solution Helps Businesses of any size, from all Different Industry Verticals?

• Details Tied to Safari Browser-based ‘ScamClub’ Campaign Revealed

• Actions Enterprises Can Take to Combat Common Fraud Types

• Research Shows How Solar Energy Installations Can Be Abused by Hackers

• Red Canary Raises $81 Million to Grow Security Operations Business

• Telegram Vulnerabilities Could Let Attackers Send Malicious Animated Stickers, Research Finds

• 4 Predictions for the Future of Privacy

• MAR-10322463-4.v1 – AppleJeus: Kupay Wallet

• MAR-10322463-5.v1 – AppleJeus: CoinGoTrade

• MAR-10322463-6.v1 – AppleJeus: Dorusio

• MAR-10322463-7.v1 – AppleJeus: Ants2Whale

• AppleJeus: Analysis of North Korea’s Cryptocurrency Malware

• Oldsmar’s Cyber Attack Raises the Alarm for the Water Industry

• Introducing Prisma Access 2.0

• Prisma Cloud Shifts Left With Proposed Acquisition of Bridgecrew

• Hackers Are Starting To Code Malware For Apple’s M1 Computers

• Trump’s Election Fighting Law Firm Jones Day Gets Breached

• France Ties Russia’s Sandworm To A Multiyear Hacking Spree

• Dutch Police Post Friendly Warnings On Hacking Forums

• Spy Pixels In Emails Have Become Endemic

• Op-ed: Hackers are targeting Covid-19 vaccinations. Here’s how to stop them

• IBM Pledges ‘Net Zero’ Greenhouse Emissions By 2030

• Ericsson Claims Samsung Infringed 4G, 5G Patents

• ELF Malware Analysis 101: Part 3 – Advanced Analysis

• Sextortion Email Scams | Avast

• The Uncertainty of Cybersecurity Hiring

• Think your backups will protect you from ransomware? What do you think the malware attacked first?

• DevSecOps Firm Spectral Emerges From Stealth With $6.2 Million in Funding

• CISO Conversations: Princeton, Cal State and Ohio State CISOs Talk Higher Ed Cybersecurity

• Caren Havelock Joins SureCloud as New CMO

• XM Cyber Reports Strong 2021 Momentum Marked by Remarkable Growth and Key Leadership Appointments

• Yandex sysadmin caught selling access to email accounts

• Edgybees raises $9.5 million for AI that augments drone camera footage

• Spectral exits stealth with $6.2 million to find costly security mistakes buried in code

• Best password manager in 2021

• Bug in shared SDK can let attackers join calls undetected across multiple apps

• Ditching LastPass? Here are some alternatives to try

• Dutch police post ‘friendly’ warnings on hacking forums

• Information Posted Online After N Carolina Ransomware Attack

• Malware Is Now Targeting Apple’s New M1 Processor

• Parler Says It’s Back

• Agora SDK Bug Left Several Video Calling Apps Vulnerable to Snooping

• Cloudentity and Axway Partner to Deliver Zero Trust for Open Banking

• Spectral exits stealth with $6.2M to protect companies from costly coding mistakes

• Cybersecurity Expert Commentary: Hacker Claims To Have Stolen Files Belonging To Law Firm Jones Day

• New Malvertising Campaign by the ScamClub Group Is Actively Exploiting Zero-Days

• Responsibility and Accountability in the Cloud: Where Does the Buck Stop?

• SpaceX Raises Another $850 Million Funding – Report

• More bosses are using software to monitor remote workers. Not everyone is happy about it

• Tesla’s next business: Turning your solar roof and EV into Bitcoin mines

• Owner of app that hijacked millions of devices with one update exposes buy-to-infect scam

• Cybercriminals Leak Files Allegedly Stolen From Law Firm Jones Day

• F-Secure: CISOs Must Develop Emotional Intelligence Skills to Succeed

• Researchers Unmask Hackers Behind APOMacroSploit Malware Builder

• Centreon says that recently disclosed campaigns only targeted obsolete versions of its open-source software

• Apple Music Subscribers Can Share Lyrics and Song Clips in iOS 14.5 Beta 2

• Utah Launching COVID-19 Contact Tracing System With Apple and Google API This Week

• Soviet ‘Enigma’ cipher machine sells for $22k at collapsed museum’s exhibits auction

• Epic Games Files Apple Antitrust Complaint With EU

• Digital Warfare: Myanmar’s Cyber Crackdown Explained

• YouTube Terminates 3000 Channels in Russia and China Clampdown

• NHS Phishing Scam Promises #COVID19 Vaccine

• The Free Speech Triangle | Avast

• Apple Extends Lead Over Samsung As Biggest Buyer of Semiconductor Chips in 2020

• Expert Advise To Organization On North Korea Hacking Pfizer

• The Solarwinds Hack Is A One Of A Kind And Not The Norm

• How Businesses Can Look To Prepare For The Long-term Cyber Security Impacts Of COVID-19

• Expert Comments On State Of Malware Report: Shifted Tactics And Targets As A Result Of The COVID-19

• The Biggest Data Breaches of 2021

• Palo Alto Networks drops $156m to absorb DevSecOps firm Bridgecrew

• How to defend against OAuth-enabled cloud-based attacks

• Pfizer Attack Carried Out By North Korean Hackers

• Tracker pixels in emails are now an ‘endemic’ privacy concern

• Centreon: Sandworm Attacks Targeted Legacy Open Source Product

• Trend Micro Detects Vulnerabilities in The SHAREit Program

• Epic Games Takes Legal Battle With Apple to Europe With Antitrust Complaint

• Expert Reaction On SHAREit Recent Vulnerabilities

• Malvertisers Redirecting To Scam Sites Via Browser Zero-day

• Three New Vulnerabilities Patched in OpenSSL

• North Korea Allegedly Targets Pfizer to Steal #COVID19 Vaccine Data

• New version adds encrypted communication

• Fireside Chat – Running A Cyber Crisis Drill For The US Government, Homeland Security & Tabletops For Enterprise Board Members

• Bitcoin Surpasses $50,000 Mark For The First Time Ever

• Employee Security Training Proven Not Enough

• Tips for boosting the “Sec” part of DevSecOps

• “Are you satisfied?” Cyren sees increasing use of forms in account takeover attacks

• Looking for adding new detection technologies in your security products?

• Malvertisers Exploited WebKit 0-Day to Redirect Browser Users to Scam Sites

• Overcoming IoT Asset Management Challenges

• Latin American Javali trojan weaponizing Avira antivirus legitimate injector to implant malware

• Romance Scam Reached a Record of $304 Million Losses in 2020

• Microsoft Says SolarWinds Supply Chain Attack is the Work of 1,000-plus Developers

• On Opioids, Consultants and Information Security

• Breach Clarity Data Breach Report: Week of Feb. 15

• Indonesian internet regulatory laws are serious threat to free expression rights: EFF

• Record‑high number of vulnerabilities reported in 2020

• Beware of COVID‑19 vaccine scams and misinformation

• Romance scams in 2020: Breaking hearts, wallets – and records

• Attacks targeting IT firms stir concern, controversy

• Analysts need advanced automation tools to reduce fear of missing incidents

• 57% of vulnerabilities in 2020 were classified as critical or high severity

• Knowledge graphs: The secret of Google Search and now XDR

• Microsoft offers deep analyses of SolarWinds Hack

• Clop Ransomware hackers target Law firm Jones Day

• Malware increased by 358% in 2020

• Cybersecurity risks connected to AI in autonomous vehicles

• VERT at the Movies: Cybergeddon

• ISC Stormcast For Wednesday, February 17th, 2021 https://isc.sans.edu/podcastdetail.html?id=7376, (Wed, Feb 17th)

• DigiPli’s solution transforms AML and KYC protocols for FinTechs and other financial services firms

• ZeroNorth Advanced AppSec Risk Analytics helps orgs focus efforts on areas of greatest risk

• Secure Access Management for Your Cloud-Native Resources

• libhairshirt vs libfootgun

• The Security Digest: #48

• Palo Alto Networks Prisma Access 2.0 securely enables work-from-anywhere

• Sontiq Intelligent Identity Security: Enhanced identity theft and cyber threat protection

• Sportradar UFDS: A bet monitoring system for sport organizations

• TruNarrative expends product line-up with KYC and AML solution TruPortal

• Telstra recommends amending existing telco Acts instead of creating duplication

• Purdue University and MITRE form partnership to advance innovation and workforce development

• MaxLinear and Facebook collaborate on Evenstar OpenRAN solutions

• NVIDIA GPU now supports Sunlight NexVisor, moving AI to the edge

• X1 and Relativity launch one-touch ESI solution that meets the needs of today’s remote workforce

• CityBee – 110,156 breached accounts

• New VPN Risk Report by Zscaler Uncovers Hidden Security Risks Impacting Enterprises

• Misconfigured baby monitors exposing video stream online

• Centreon says only 15 entitites were targeted in recent Russian hacking spree

• The Evolution of Automation Technologies

• Apple Says COVID ‘Health Pass’ Apps Are Limited to Developers Working With Public Health Authorities

• Apple Pays $163.34 Million in Licensing Fees for Songwriters and Publishers

• AdaCore acquires Componolit to expand its market share in Germany

• Accenture acquires Edenhouse to support clients in their digital transformation journey

• The long road to electronic records management

• Pentagon watchdog flags cyber issues in DEOS, JRSS

• Compromised Credentials Show That Abuse Happens in Multiple Phases

• Security Catalyst Office Hours Recap for February 12, 2021

• No More Putting Out Fires (and Other Benefits of Working with Zscaler)

• Palo Alto Networks acquires Bridgecrew to enable “shift left” security

• If Work Is Going Remote, Why Is Big Tech Still Building?

• Bitcoin’s price rises to $50,000 as mainstream institutions hop on

• North Korea may have hacked into Pfizer servers looking for COVID data

• New type of supply-chain attack hit Apple, Microsoft and 33 other companies

• Lithuanian police investigate leak of 110,000 personal IDs

• Cyber Defense Magazine nominated Cobwebs Technologies for Its 2021 InfoSec Awards for threat intelligence

• LastPass to limit fans of free password manager to one device type only – computer or mobile – from next month

• Cybersecurity for a Cloud-First, Work-from-Home World

• SolarWinds Cyber Intel Analysis Part 2: A Look at Additional CISA-Published IoCs

• Firms Patch Greater Number of Systems, but Still Slowly

• Telegram flaw could have allowed access to users secret chats

• China’s New Coast Guard Law and Implications for Maritime Security in the East and South China Seas

• Questions to Ask Your Application Security Provider

• Speak Up for Real Privacy in Virginia

• IT Security News Daily Summary 2021-02-16

• Cybersecurity trends affecting cybersecurity stocks in 2021

• What’s the best cloud for OLTP?

• Understanding the intelligent edge

• How to increase access to supercomputers

• DDoS Attacks Wane in Q4 Amid Cryptomining Resurgence

• Let’s Encrypt Gears Up to Replace 200M Certificates a Day

• Complaint Blasts TikTok’s ‘Misleading’ Privacy Policies

• North Dakota Senate Shoots Down App Store Bill Apple Said Would ‘Destroy the iPhone’

• Apple Says Some iPhone 12 Hardware Issues Will No Longer Require Replacing the Entire Device

• Malvertiser abused WebKit zero-day to redirect iOS & macOS users to shady sites

• Neighbor Revealed as Cyber-Stalker

• Joy Of Tech®’s ‘Facebook’s New Mission: We Need To Inflict Pain On Apple!’

• BSidesSF 2020 – Or Katz’s ‘Creating Threat Intelligence Signals In A “Zero Trust” Environment’

• How Ayn Rand’s Philosophy Inspired Assassination of JFK

• Throwboy Offers Blankets Modeled After Classic Macintosh and Finder Icon

• Parallels 16 for M1 Macs Gets Technical Preview 2 Update With New Features

• SHAREit app for Android said to share way too much: Billion-download code with holes no one wants to fix

• Android app with 1 billion users fails to fix flaws; expose to malware

• Industry presses for tech funding in COVID relief amid Senate opposition

• Microsoft to add ‘Kids Mode’ to Chromium-based Edge browser

• Europeans Unhappy with TikTok’s Child Safety Policy

• Strata Identity Raises $11M in Series A Round

• Secure Workload Protection: Extending Micro Perimeters and Automation to Enterprise IaaS

• Everything New in iOS 14.5 Beta 2: New AirPods Max Emoji, Green Tint Fix, iPad Security and More

• Afternoon Cyber Tea: Evaluating individual and organizational cyber risk in a pandemic

• RDP, the ransomware problem that won’t go away

• ScamClub Malvertising Leveraged Zero-Day Vulnerability in Browsers

• ANSSI Links Attacks Against French Hosting Providers to Russian Military Intelligence Agency

• NPM Package Repository Seeing Flood of Supply Chain Attack Attempts

• VMware Patches Command Injection Vulnerability in vSphere Replication

• BrandPost: Next-generation SIEM for Healthcare: Here’s What to Consider When Considering SIEM

• NordVPN vs. Surfshark: Which VPN is best for you?

• Singapore puts budget focus on transformation, innovation

• The fine line between global COVID-19 protocols and privacy

• WebKit Zero-Day Vulnerability Exploited in Malvertising Operation

• Which? Flags Fake Amazon Reviews

• Under Attack: Hosting & Internet Service Providers

• The NSA Wants Businesses to Use DoH. Here’s What You Need to Know.

• Mandiant Exposes APT1 – One of China’s Cyber Espionage Units &
  Releases 3,000 Indicators

• A Totally Tubular Treatise on TRITON and TriStation

• How to Simplify Onboarding Employees to Their Applications with SCIM

• On Demand Webinar featuring Solid Sands | Safety and Security Critical Software: Start with the End in Mind

• Apple Seeds Second tvOS 14.5 Beta to Developers

• Apple Seeds Second Beta of watchOS 7.4 to Developers

• Apple Seeds Second Betas of iOS 14.5 and iPadOS 14.5 to Developers

• iPadOS 14.5 Beta 2 Mutes Built-In Microphone on iPad When Smart Folio is Closed

• Apple Offering Discounts on Fitness Subscription Apps for Apple Card Users

• Introducing DAIC: A Suggested System for Preventing BEC Fraud

• 7 steps for a network and IT security foundation

• Yandex Email Admin Sold His Inbox Access and Compromised Almost 5,000 Accounts

• More weirdness on TCP port 26, (Tue, Feb 16th)

• LastPass Limiting Free Accounts to Either Computer or Phone

• PSA: App Store Bug Hiding App Update Buttons for Some Users

• How the Federal Government Investigates and Prosecutes Domestic Terrorism

• Egregor ransomware hit by arrests

• Bitcoin Breaches $50,000 Barrier For First Time

• Firewall Services and More: What’s Next for IT?

• LastPass making changes free service

• NordVPN vs. ExpressVPN: Which VPN is best for you?

• Microsoft Pulls Bad Windows Update After Patch Tuesday Headaches

• Misconfigured Baby Monitors Allow Unauthorized Viewing

• Palo Alto Networks Buys Bridgecrew in ‘Shift Left’ Cloud Security Push

• Security Firm Sues Facebook For Banning Lookalike Domains Used For Phishing Tests

• Palo Alto Networks Plans to Acquire Cloud Security Firm

• Don’t let AppSec tool overload slow down your development

• Security Intelligence Handbook Chapter 9: Manage Third-Party Risk in Real Time

• Hyper Introduces MagSafe-Compatible Charging Stand for iPhone 12 and AirPods

• Cyber Attack news headlines trending on Google

• One sticker could have exposed your Telegram secret chats

• This cybersecurity threat costs business millions. And it’s the one they often forget about

• Facebook Announces Payout Guidelines for Bug Bounty Program

• Romance scams at all-time high: here’s what you need to know

• Black History Month 2021: Time to Talk Diversity and Cybersecurity

• Fighting Fileless Malware, Part 3: Mitigations

• Hackers abusing the Ngrok platform phishing attacks

• Inside the Cyber Fusion Center

• Mercedes Recalls Millions Of Cars Over Software Bug

• New Feature: Get More Context for your Analysis with TTPs

• Solving 5 Challenges of Contact Tracing Apps

• Pure Storage’s Purity software update includes ransomware recovery tools

• Unpatched Android App with 1 Billion Downloads Threatens Spying, Malware

• State of malware: 3 key findings in the latest Malwarebytes report

• Top 5 security risks to connected cars, according to Trend Micro

• French Firm Centreon Denies ‘Damaging’ Hacking Claims

• Strata Raises $11 Million to Tackle Multi-Cloud Identity Management

• Threat Actors Targeting British Users in a Facebook Phishing Campaign

• Strata Identity Raises $11M in Series A Funding Led by Menlo Ventures for Technology that Revolutionizes Multi-Cloud Identity

• VigiTrust Launches Foundational Risk Assessment on VigiOne Platform

• North Korea Accused Of Hacking Pfizer For Covid-19 Vaccine Data

• Obvious Supply Chain Attack Hits Dozens Of Companies

• Cybercrooks Rake In $304M In Romance Scams

• Unpatched Android App With 1 Billion Downloads Threatens Spying, Malware

• Apple Launches Entrepreneur Camp for Black Founders and Developers

• Apple Wins Patent for iPhone Display With Variable Refresh Rates Up to 240Hz

• Deals: Get Up to $100 Off Apple’s iPad Pro and iPad Air in Latest Sales

• IT Asset Management Best Practices: An Overview

• Extortion, precision malware, and ruthless scams. Read the State of Malware 2021 report

• Malvertiser “ScamClub” Bypasses Iframe Sandboxing With postMessage() Shenanigans [CVE-2021–1801]

• How Big Data Is Transforming the Education

• Member Profile: My Expedition Through nmap Lab How to get through the NMAP room in Tryhackme >

• Strata Identity raises $11 million to unify identity management in a multi-cloud world

• Several Vulnerabilities Found in Popular File Sharing App SHAREit

• #DTX Tech Predictions Mini Summit: Focus on Security When Expanding Digital Presence

• How to Avoid Phishing Emails and Scams

• Unpatched ShareIT Android App Flaw Could Let Hackers Inject Malware

• Learn How to Manage and Secure Active Directory Service Accounts

• Democratizing Threat Hunting: How to Make it Happen for Everyone

• ZeroNorth’s New Advanced AppSec Analytics Empower Organizations to Make Informed Strategic Risk and Operational Decisions

• Palo Alto Networks Updates Remote Security Platform

• Apple May Launch 7-Inch Foldable iPhone With Apple Pencil Support in 2023

• Hackers exploited Centreon monitoring software to compromise IT providers

• How Do I Advance My Career in the Cybersecurity Field?

• Google, Microsoft, Qualcomm Object To Nvidia Acquisition Of ARM

• Apple patches severe macOS Big Sur data loss bug

• Supply chain attacks are on the rise: Check your software build pipeline security

• Industry Leaders Javvad Malik and Wendy Nather to Headline Infosecurity Magazine Online Summit

• 124 Million Rows of Customer Data Exposed Through Leaky Adorcam Database

• Palo Alto Next Generation Firewall Detected With Four Vulnerabilities

• 2034, Part IV: The Spratly Islands Ambush

• Managed Service Provider? Watch This Video to Learn about Autonomous XDR

• First Smartphone Enabled COVID-19 Rapid Antigen Test Awaits FDA Approval

• Doppler Music Player to Gain Siri Support, Spotlight Integration, and CarPlay App

• Expert Reaction On Voice Call Exploitation Study

• Volkswagen Blames Chip Makers For Silicon Shortage

• North Korea ‘Tried to Hack’ Pfizer for Vaccine Info – South’s Spies: Reports

• Police Target Irish Family in €4m Money Laundering Probe

• Hackers Could Cause ‘Fake Earthquakes’ by Exploiting Vulnerable Seismic Equipment, Researchers Warn

• Employee Security Training Proven Not Enough

• Mac Malware Detections Dropped 38% in 2020, Most Still Adware

• Vivid Money Neobank Now Supports Apple Pay in France

• TikTok Faces Consumer Law and Child Safety Complaints Across EU

• What is DLP Security? Definition, Benefits, and More

• Diversity in security: How 3 organizations are making a difference—one relationship at a time

• CSO’s guide to the worst and most notable ransomware

• Parler App Back Online Using ‘Independent’ Tech

• Why You Can’t See The App For The Microservices

• Emerging Mobile Threats and How to Prevent Them

• Quick Hits

• FCW Insider: Feb. 16

• Most Europeans Don’t Know How to Report Cybercrime

• Vulnerability Scanning Tools – Why Not Open-Source?

• Expert Advise To New Phishing Campaign Using Bazar Trojan

• Keeping The COVID-19 Supply Chain Secure

• Google Has Not Updated Its iOS Apps For Two Months

• FDA Medical Device Cybersecurity | Avast

• Myanmar’s proposed cybersecurity bill draws wide condemnation

• Microsoft: 1000+ Hackers Worked on SolarWinds Campaign

• Popular SHAREit app is affected by severe flaws yet to be fixed

• DDoS attacks in Q4 2020

• Controlling Smart Lights Using Dumb Switches with Shelly and Home Assistant

• A new Bluetooth overlay skimmer block chip-based transactions

• France’s cyber-agency says Centreon IT management software sabotaged by Russian Sandworm

• Application security testing is not just buzzwords

• US court sentenced Ukrainian to seven years in prison for electronic fraud

• Yandex Suffers Data Breach, Exposes Email Accounts

• Measuring Security Risk vs. Success

• Cloud Security Remains Elusive in Public Sector

• Overcoming Privacy Inertia to Protect Data

• Top 10 most used MITRE ATT&CK tactics and techniques

• Indonesia’s Proposed Online Intermediary Regulation May be the Most Repressive Yet

• Turkey’s Free Speech Clampdown Hits Twitter, Clubhouse — But Most of All, The Turkish People

• Hackers targeted IT monitoring company Centreon to breach organizations over 3 year period

• Losses to romance scams reached a record $304 million in 2020

• Enable secure remote workspaces without trashing your entire IT infrastructure

• Ge.tt – 2,481,121 breached accounts

• Ransomware news trending on Google

• Keep your e-wallets safe from Cyber Attacks says Kaspersky

• Record‑breaking number of vulnerabilities reported in 2020

• Hackers Exploit IT Monitoring Tool Centreon to Target Several French Entities

• Microsoft’s Unified Office App for Mobile Now Compatible With iPad

• The cybersecurity issues of seismic monitoring devices

• Why contextual machine learning is the fix that zero-trust email security needs

• CISOs report that ransomware is now the biggest cybersecurity concern in 2021

• Operators Behind Egregor Ransomware Arrested by Ukrainian, French Police

• How Joining a Professional Community Can Supercharge Your Career and More

• Cybersecurity Challenges for the European Railways

• A Sticker Sent On Telegram Could Have Exposed Your Secret Chats

• White Paper – How Behavioral Biometrics Prevents Fraud While Ensuring Positive Customer Experiences

• Cybersecurity spending for critical infrastructure to reach $105.99 billion in 2021

• Consumers not protecting data online despite having privacy concerns

• Yandex Data Breach – Employee Caught Selling Access to User Accounts

• Automating scam call blocking sees Telstra prevent up to 500,000 calls a day

• ISC Stormcast For Tuesday, February 16th, 2021 https://isc.sans.edu/podcastdetail.html?id=7374, (Tue, Feb 16th)

• Cyber Underground General Intelligence Requirements Handbook

• How one man silently infiltrated dozens of high-tech networks

• Actiphy launches next-gen ActiveVisor, a management solution for ActiveImage Protector backup clients

• Belkin unveils Secure KVMs portfolio designed for NIAP protection Profile 4.0 compliance

• Uplevel your SOC with one tool and the insights behind it- Part 2

• Twitter deems Australia’s account takeover warrant as antithetical to democratic law

• Security bugs left unpatched in Android app with one billion downloads

• Researchers want Australia’s digital ID system thrown out and redesigned from scratch

• bp joins IBM Quantum Network to advance the use of quantum computing in the energy industry

• Tyto Athene and Tellabson launch ACUITY LAN to bring network readiness in a two person carry form-factor

• IQM Quantum project consortium to accelerate Europe’s Quantum leadership efforts

• Cisco and Japan collaborate on mass-scale digitization to support inclusive pandemic recovery

• Top 100 Cybersecurity Books

• Top 100 Cybersecurity News Sites

• uCloudlink partners with Cello to accelerate global expansion plans in North America

• Bluetooth Overlay Skimmer That Blocks Chip

• VMware fixes command injection issue in vSphere Replication

• IT Security News Daily Summary 2021-02-15

• Experts Believe Facebook Isn’t Doing Enough To Fight Vaccine Misinformation

• France agency ANSSI links Russia’s Sandworm APT to attacks on hosting providers

• Revised macOS Big Sur 11.2.1 Update Properly Checks Free Available Space to Prevent Installation Errors

• Cybercrooks Rake in $304M in Romance Scams

• France Ties Russia’s Sandworm to a Multiyear Hacking Spree

• BSidesSF 2020 – Bryan Zimmer’s ‘So You’re The First Security Hire’

• US Cyber Command Valentine’s Day Cryptography Puzzles

• Celebrating Black History Month on Insta

• Vulnerability Patching: Why Does It Fall Short So Often?

• Brave New World: Safari Content Blocking

• MSSP Visionary Takes Bold Step into the Future

• Google Meet is getting an important new security feature

• Sandworm Hackers Hit French Monitoring Software Vendor Centreon

• UK’s Top Cyber Schools Revealed

• Apple Offering Free Repairs for Apple Watch Series 5 and SE Models With Power Reserve Issue Not Fixed by watchOS 7.3.1

• French Hospital Hit with Egregor Ransomware

• Egregor Ransomware Members Arrested by Ukrainian, French Police

• Canadian Rental Car Company Targeted by DarkSide Ransomware

• Scammers Target U.S. Tax Professionals

• Court docs show FBI can unlock iPhones, access Signal messages

• Unleash the Power of MITRE for a More Mature SOC

• 270 addresses are responsible for 55% of all cryptocurrency money laundering

• Microsoft Azure and Canonical Ubuntu Linux have a user privacy problem

• France: Russian state hackers targeted Centreon servers in years-long campaign

• Linux 101: How to remove legacy communication services

• Mercedes Issues eCall Recall

• IRS Warns of EFIN Scam

• OSINT: Mapping Threat Actor Social Media Accounts

• BSidesSF 2020 – Amol Sarwate’s ‘Real Time Vulnerability Alerting’

• 10 Reasons Check-the-Box Compliance Puts Your Organization at Risk

• CommitStrip ‘Experts’

• DisplayLink Manager Updated With Native Support for M1 Macs and More

• Apple Releases watchOS 7.3.1 With Fix for Apple Watch Series 5 and SE Charging Issue

• Nuclei- A Fast and Customizable Vulnerability Scanner

• Members of the infamous Egregor ransomware arrested in Ukraine

• Naked Security Live – When is a bug bounty not a bug bounty?

• Apple Launches ‘For All Mankind’ Companion Podcast

• Talking Emotet’s takedown with Adam Kujawa: Lock and Code S02E01

• Network Segmentation Series: What is It?

• 270 addreses are responsible for 55% of all cryptocurrency money laundering

• Many SolarWinds Customers Failed to Secure Systems Following Hack

• Internal Leak of 4,887 Users: Yandex Employee Fate Unknown

• The malicious code in SolarWinds attack was the work of 1,000+ developers

Generated on 2021-02-21 23:58:27.235109