IT Security News Weekly Summary – Week 10

• IT Security News Daily Summary 2022-03-13

• Five Tips for Ensuring Communications Security in Your Organization

• Q&A on Network Detection and Response (NDR)

• The Cybersecurity Job Shortage Won’t Continue to Decline without Enhanced Hiring Creativity

• The Foilies 2022

• Multiple Security Bugs Identified in Software Package Managers

• The Era of Ransomware: How to Respond in a Crisis

• Kuo: Only iPhone 14 Pro Models to Get ‘A16’ Chip, Standard Models to Retain A15

• Anonymous sent a message to Russians: “remove Putin”

• Is Europe Prepared for a Proxy War With Russia?

• Filter Blocked 70,000 Emails to Indiana Lawmakers on Bill

• The hidden C2: Lampion trojan release 212 is on the rise and using a C2 server for two years

• Mar 06- Mar 12 Ukraine – Russia the silent cyber conflict

• Corporate Website Contact Forms Used in BazarBackDoor Malware Campaign

• Misconfigured Keys are Tackled in ServiceNow’s Guidelines

• Wightlink Customers’ Details Compromised in Cyber Attack

• Security Affairs newsletter Round 357 by Pierluigi Paganini

• Russia Banned Instagram After Blocking Facebook and Twitter

• LockBit ransomware group claims to have hacked Bridgestone Americas

• UK Network Operators Target iCloud Private Relay in Complaint to Regulator

• Week in review: Linux bug gives root access to attackers, UPS devices’ vulns, IoT security for OEMs

• Penetration testing

• Kali Unkaputtbar – A new Boot Menu to Boot Directly into Snapshots

• Mavenir collaborates with Crexendo to provide business communications offerings for organizations

• Anonymous sent 7 million texts to Russians plus hacked 400 of their security cams

• IT Security News Daily Summary 2022-03-12

• Water Wars: Biden Administration Releases New Indo-Pacific Strategy

• Supplying Arms to Ukraine is Not an Act of War

• The Fourth Amendment and Geofence Warrants: A Critical Look at United States v. Chatrie

• Have We Learned from Our Past Mistakes to Prevent Future Cyberattacks?

• How to strengthen cyber resilience with Unified BCDR

• Cyber Security Incident Pushes Ubisoft to Issue Internal Password Reset

• Kuo: 2023 Mac Mini to Retain Same Design as Current Model

• Sparta- A Network Scanning and Enumeration Tool

• Vodafone Investigates Source Code Theft Claims

• Russia Opens Criminal Investigation Into Facebook For Allowing Posts Inciting Violence

• Attackers use website contact forms to spread BazarLoader malware

• Threat Actors Modified Open-Source Tool to Target organizations

• Russia Wants to Label Meta an ‘Extremist Organization’

• Visa Completes Acquisition of Tink

• Telegram Abused By Raccoon Stealer

• Legion By GoVanguard- An Automated Reconnaissance Tool

• New Exploit Circumvents Existing Spectre-V2 Mitigations in Intel and Arm CPUs

• Top Stories: Apple Event Recap With Mac Studio, Studio Display, New iPhone SE and iPad Air

• NFTs Don’t Work the Way You Might Think They Do

• Russian Internet watchdog Roskomnadzor is going to ban Instagram

• Ubisoft suffered a cyber security incident that caused a temporary disruption

• Russia Created Own TLS Certificate Authority (CA) to Access Problems Imposed by Western Companies

• Build or Buy your own antivirus product

• Apple Stops Selling 27-Inch LG UltraFine 5K Display

• SaaS Security Expert Jerich Beason Joins Axonius as Advisor

• How digital ID wallets are meeting the needs of modern society (part two)

• Consilio Announces Launch of Expanded Offerings to Evolve Capabilities Supporting Cloud-Based Sources

• Zuul Reveals Executive Advisory Board

• ESET Research webinar: How APT groups have turned Ukraine into a cyber‑battlefield

• Week in security with Tony Anscombe

• Guidewire partners with Wipro to enhance business processes for insurers

• Netsurit acquires EVOKE to accelerate digital transformation initiatives for businesses

• Jerich Beason joins Axonius as Advisor

• Edge computing will see new workloads, strong growth, IDC predicts

• Apple Not Planning to Launch Larger-Screened iMac

• Singapore uncovers four critical vulnerabilities in Riverbed software

• IT Security News Daily Summary 2022-03-11

• Blunting RDP brute-force attacks with rate limiting

• Report: Cybersecurity teams need nearly 100 days to develop threat defenses

• Rethinking a ‘lift and shift’ approach to cloud migration

• When IT Spending Plans Don’t Reflect Security Priorities

• Friday Squid Blog: 328-million-year-old Vampire Squid Ancestor Discovered

• Water Wars: Indo-Pac Is Back: Biden Administration Releases New Indo-Pacific Strategy as Tensions Between China and Its Neighbors Simmer

• How Enterprises Can Get Used to Deploying AI for Security

• Rural county puts land records on blockchain

• How to write an information security policy, plus templates

• Prisma Cloud Supply Chain Security Reduces Code Complexity and Risk

• Building a Virtual SOC with the Cortex Suite of Products

• Network Security Innovation and Prevention with PAN-OS 10.2 Nebula

• Celebrating the Changing Face of Leadership

• HBO sued for sharing subscriber data with Facebook

• Is XDR Right for My Organization?

• Review: Anker’s 535 Portable Power Station Keeps Your Devices Running While You’re Off the Grid

• Mac Studio vs. Mac Mini Buyer’s Guide

• Anonymous Hacks Russian Media Censoring Agency Roskomnadzor

• Hacked US Companies to Face New Reporting Requirements

• Ukrainian Man Arrested for Alleged Role in Ransomware Attack on Kaseya, Others

• Lawmakers worry about cyber risks in space

• Android’s March 2022 Security Updates Patch 39 Vulnerabilities

• Ranovus demonstrates co-packaged optics

• Why and how the U.S. should increase cyber protection: A call to arms

• Russia Issues Its Own TLS Certs

• Avast Suspends Operations in Russia and Belarus

• U.S. cloud service giants take action against Russia

• French Bank Denies Access to Russian Workforce

• Divestment From Russia by Foreign Business Could Increase Pressure on Putin

• Dunno about you, but we’re seeing an 800% increase in cyberattacks, says one MSP

• Report: Recent 10x Increase in Cyberattacks on Ukraine

• Apple Clashes With UK Regulator in Fierce Response to Warning That Could Require It to ‘Redesign the iPhone’

• MacRumors Giveaway: Win an Apple Watch Series 7 and Band From BluShark

• Russian based APT Groups Conduct Phishing Campaigns Targeting Ukraine

• DARPA taps OTAs to accelerate the making of a useful quantum supercomputer

• NetWalker Suspect Extradited to US

• New RURansom Wiper Targets Russia

• Unit 42 Publishes New Techniques to Mitigate Vulnerabilities in GKE Autopilot

• LastPass vs 1Password: Battle of the password manager titans

• Data centres are still a tempting target for hackers: Here’s how to improve your security

• Bringing Kenna Security into SecureX Orchestration

• DDoS Releases Alleged Leak Of Russian Censorship Agency

• ‘We Are Not Ready’: A Cyber Expert On US Vulnerability To A Russian Attack

• NetWalker Ransomware Affiliate Extradited To The US For Further Charges

• Deals: Discover the Best Carrier Offers on Apple’s New iPhone SE, iPad Air, and Green iPhone 13

• High rates of known, exploitable vulnerabilities still found in the wild, report reveals

• Cyber Attack news headlines trending on Google

• screened subnet

• Google Attempts to Explain Surge in Chrome Zero-Day Exploitation

• How to build a security champions program

• The Justice Department Faces a Setback in the Capitol Riot Cases

• Proxy vs VPN – Differences and Advantages

• Train to Retain: How Technology Can Deliver World Class Learning and Development for Your Business

• Anonymous Claims to Have Leaked Over 360,000 Files From Russian Federal Agency

• Alleged Kaseya ransomware attacker arrives in Texas for trial

• iPhone 13 in Green and iPhone 13 Pro in Alpine Green Reviews: A ‘Saturated’ but ‘Subtle Statement’

• Countering Harmful Content: A Research Agenda

• BazarBackdoor Malware Distributed via Corporate Website Contact Forms

• Google, Meta Investigated By EU, UK Over Ad Deal

• Raccoon Stealer Crawls Into Telegram

• How to Combat the No. 1 Cause of Security Breaches: Complexity

• Anonymous hacked Roskomnadzor agency revealing Russian disinformation

• Improve your hybrid cloud security with these 3 tips

• Linux “Dirty Pipe” vulnerability gives unprivileged users root access

• UK Announces Legislation to Govern Digital Identity Security

• Senate passes $1.5T funding bill

• Google: We’re spotting more Chrome browser zero-day flaws in the wild. Here’s why

• Russian Cyber Restraint in Ukraine Puzzles Experts

• Going Passwordless With py_webauthn

• Businesse’s Pascom Cloud Phone System Contains Severe RCE Flaws

• High-Severity Vulnerabilities Patched in Omron PLC Programming Software

• Multiple Security Flaws Discovered in Popular Software Package Managers

• Apple Now Accepting Pre-Orders for New iPhone SE and iPad Air

• 12 Best Tablets Under $150 to Buy 2022 – Top Quality for Low-Price

• Chip Shortage Fears Raised, After Ukraine Halts Neon Production

• Bridging the digital divide with American Rescue Plan Act funding

• Canadian NetWalker Ransomware Operator Extradited to U.S.

• Meta Releases Open Source Browser Extension for Checking Code Authenticity

• 1Password Raise Bug Bounty Rewards To $1 Million

• Meta Allows Calls For Violence Against Putin And Russian Soldiers

• Google: More Chrome browser zero-day flaws are being spotted in-the-wild. That’s not always a bad thing

• EU Lawmakers to Probe ‘Political’ Pegasus Spyware Use

• Ukraine’s IT Army Targeted by Disguised Malware

• Open database leaves major Chinese ports exposed to shipping chaos

• Telegram Messenger Gains Download Manager, New Attachment Menu, and More

• SaaS Security Explained: Definition and Best Practices

• Cybersecurity for banks – Securing growing data centers and high-frequency trading platforms

• #DSbD: Cybersecurity Advances Must Focus on Building Trust in Technologies

• Conti ransomware group spent millions in 2021

• Microsoft calls for more women in cyber

• SaaS Security: How to Protect Your Enterprise in the Cloud

• Ukrainian IT Army Hijacked by Info-stealing Malware

• Russian Pushing New State-run TLS Certificate Authority to Deal With Sanctions

• Kali Linux on bare-metal gets snapshotting functionality

• SEC Proposes Four-Day Breach Notification Rules

• Vodafone and Mercado Libre Likely Hit by Ransomware Attacks

• Have We Seen the Last of the 27-inch iMac?

• Here’s How to Find if WhatsApp Web Code on Your Browser Has Been Hacked

• Lapsus$ Ransomware Group is hiring, it announced recruitment of insiders

• Spoofing: What It Is and How Can You Prevent It?

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Setting the Bar for Government Access to Have I Been Pwned

• Kuo: New High-End Mac Mini Won’t Arrive Until Next Year

• Infosys, Wipro silent on their Russian operations

• Infosys, Wipro, silent on their Russian operations

• Here’s How to Find If WhatsApp Web Code on Your Browser Has Been Hacked

• Apple Store Down Ahead of New iPad Air and iPhone SE Pre-Orders

• New infosec products of the week: March 11, 2022

• Weekly Update 286

• Shipping fraud quickly emerging as one of the top fraud types

• Single Packets Launching DDoS Attacks in the Wild

• Conti Ransomware gang pays salaries and develops cryptocurrency

• Ukraine now faces MicroBackdoor malware threat from Russia

• Critical Vulnerabilities In APC Smart-UPS Devices Let Attackers Remotely Manipulate The Power

• Vodafone investigates claims of a data breach made by Lapsus$ gang

• Cosumers don’t think they can dodge identity fraud

• New DDoS Does 4 Billion Times The Damage | Avast

• What is fueling the adoption of passwordless authentication?

• Organizations need to evolve their data management strategy

• Check Point Research Reveals Leaks of Conti Ransomware Group

• Mobile data protection market to reach $13.999 billion by 2026

• Consumers demand a digital banking experience with security at its foundation

• Moscow to issue HTTPS certs to Russian websites

• New Report by U.K. NCSC Highlights the Impact of Diversity on the Cybersecurity Workforce

• ‘Game-changer’: SEC rules on cyber disclosure would boost security planning, spending

• Druva unveils cloud backup capabilities for Amazon EC2 to improve data security

• Armorblox Advanced Data Loss Prevention protects critical business workflows

• VPN use in Russia is surging as citizens try to bypass government’s tightening internet control

• True or false? How to spot – and stop – fake news

• Malwarebytes’ cloud console updates simplify threat management processes for SMBs

• Darktrace platform enhancements provide additional vulnerability insights

• Beware the Never-Ending Disinformation Emergency

• Canadian accused of unleashing NetWalker ransomware extradited

• GSA plans follow-on to e-commerce platform pilot

• NetWalker ransomware affiliate extradited to the US for further charges

• Telenor Sweden collaborates with YesWeHack to defend its critical infrastructure

• BT selects Google Cloud to boost digital transformation efforts

• Analysis of leaked Conti files blows lid off ransomware gang

• Lid blown off Conti ransomware gang after leaked internal files analyzed

• Kevin Powers joins CyberSaint Growth Advisory Board

• Safe Security appoints Michael Johnson to Board of Directors

• Thrive acquires SouthTech to strengthen IT service offerings for the Florida market

• HelpSystems acquires Alert Logic to address cybersecurity skills shortage with hybrid IT approach

• Big Tech Pay-Outs to European ISPs Would Just Concentrate Their Power

• Over 40% of Log4j Downloads Are Vulnerable Versions of the Software

• Richard Orange joins Exabeam as VP of EMEA Sales

• MSP360 hires Alexandra Courson as VP of Sales

• Thomas Dekens joins At-Bay as CSO

• Codenotary appoints Alan Fudge to Board of Directors

• Zuul reveals executive advisory board to drive company advancements

• Quantum Xchange appoints Vincent Berk as Chief Revenue and Strategy Officer

• ACP and security platform provider Gradient Cyber look to bring 24/7 monitoring to enterprises

• Security Teams Prep Too Slowly for Cyberattacks

• Federal Court in Virginia Holds Geofence Warrant Violates Constitution

• IT Security News Daily Summary 2022-03-10

• Log4Shell vulnerability continues to menace developers

• MacBook Air and ‘MacBook’ With M2 Chips Slated for Launch Later This Year

• Utah: Urge Governor Cox to Veto This Weak Data Privacy Bill

• Fortinet says it’s all about the security ASICs

• USDA looks to modify a key nutrition program for the online age

• Compliance fatigue: Can states stay on top of privacy monitoring?

• Use microsegmentation to mitigate lateral attacks

• Crooks target Ukraine’s IT Army with a tainted DDoS tool

• Alleged Ukrainian Member of REvil Ransomware Gang Extradited to US

• How You Can Use Our New Open-Source Database Access Control Tool

• WhatsApp emits extension to detect tampering with desktop web apps

• Watch Dogs – An Entertaining Simulation of a Fantasy Hacking World

• Alleged Ukrainian member of REvil Ransomware Gang extradited to US

• metamorphic and polymorphic malware

• WhatsApp emits browser extension to detect tampering with desktop web apps

• Inside China’s National Defense Mobilization Reform: Capacity Surveys, Mobilization Resources, and “New-Type” Militias

• Netflix Raises Prices For British And Irish Users

• Avast Response To War In Ukraine | Avast

• Class Action Suit Alleges That Facebook “Built The Largest Real-Time Surveillance System In Existence”

• Spotlight on First Dan Kaminsky Fellow: Jonathan Leitschuh

• Don’t Become a Horrible Headline: Some Tips on Redesigning Your Threat Posture for The 2022 Threat Landscape

• The 7 Top Cybersecurity Conferences for 2022

• Malware Posing as Russia DDoS Tool Bites Pro-Ukraine Hackers

• Ex-Canadian Government Employee Charged in NetWalker Ransomware Attacks

• Nearly Half Of UK Organisations Suffer Multiple Breaches

• Come Join the Scam Party

• How agencies can reshape online and in-person services delivery

• Enhance Critical Communications During Natural Disasters

• Oculus Quest 2 Movement Data Will Sync With Apple Health App Starting in April

• Sony Offering Three Month Apple TV+ Trial for PS4 Users

• What Is Whaling Phishing?

• Here’s How ICE Illegally Obtained Bulk Financial Records from Western Union

• The IRS “Dirty Dozen” – Top Tax Season Scams to Steer Clear of This Year

• What’s up with in-the-wild exploits? Plus, what we’re doing about it.

• SharkBot Android Trojan Mimics Legit Apps To Appear On Google Play Store

• Anonymous & its affiliates hacked 90% of Russian misconfigured databases

• Keeper vs 1Password: Compare Password Managers

• Dirty Pipe Privilege Escalation Vulnerability in Linux

• MacRumors Giveaway: Win a New Mac Studio From GRID Studio

• How the NTIA Can Fund Future-Proof Open Access Fiber

• Changes to the CISSP Exam Length Coming Soon

• Anonymous and affiliates hacked 90% of Russian misconfigured databases

• Colorado Elections Clerk Charged with Identity Theft

• Cyber Insurance and Business Risk: How the Relationship Is Changing Reinsurance & Policy Guidance

• Dirty Pipe Privilege Escalation Vulnerability in Linux

• An attacker’s toolchest: Living off the land

• Ransomware: February 2022 review

• UPI Turns Webless

• PROPHET SPIDER is Abusing Citrix ShareFile Remote Code Execution Bug to Deploy Webshell

• Fresh Flaws in Facebook Canvas Second Time

• Identity and the Battle For Privacy | Avast

• Qakbot Debuts New Technique

• Chinese hackers target state governments

• Alleged Kaseya Attacker Extradited to US

• Bugcrowd’s Top Bug Bounty Reward Increases To $1 Million

• Qakbot Botnet Sprouts Fangs, Injects Malware Into Email Threads

• Mitel VoIP Systems Used In Staggering DDoS Attacks

• Alleged REvil Suspect Extradited And Arraigned On Ransomware Spree Charges

• Republican County Clerk Indicted In Voting Machine Breach, Arrest Warrant Issued

• 5G has military promise but security concerns are still being untangled

• Redistricting delays scramble state elections

• S3 Ep73: Ransomware with a difference, dirty Linux pipes, and much more [Podcast]

• AI Accountability Framework Created to Guide Use of AI in Security

• Why decentralization is the future of digital identities

• US Lawmakers Urge DoJ Investigation Of Amazon

• House Committee’s cyber training bill targets public sector responders

• Microsoft: There’s a critical shortage of women in cybersecurity, and we need to do something about it

• Watch out for this phishing attack that hijacks your email chats to spread malware

• Ragnar Locker ransomware – what you need to know

• 6 potential enterprise security risks with NFC technology

• CISA added 98 domains to the joint alert related to Conti ransomware gang

• First M2 Macs Expected to Launch Later This Year Using TSMC’s 4nm Chip Process

• The ICC Investigates the Situation in Ukraine: Jurisdiction and Potential Implications

• Russia might take help of ransomware payments to fund Ukraine war costs

• The House approves a 6.7% full-year domestic spending increase, and another CR

• From Cyber Threats to Cyber Talent, Insights From the Front Lines

• U.S. Warns of Conti Ransomware Attacks as Gang Deals With Leak Fallout

• Alleged REvil suspect extradited and arraigned on ransomware spree charges

• Most Orgs Would Take Security Bugs Over Ethical Hacking Help

• Iranian Hackers Targeting Turkey and Arabian Peninsula in New Malware Campaign

• Deals: Apple’s 12.9-Inch iPad Pro Magic Keyboard on Sale for $293 ($56 Off)

• The Chatter Podcast: Recovering from a Russian Attack with Toomas Ilves

• SQL Injection Vulnerability Discovered in Moodle

• Surfshark Review: A Robust Online Privacy Solution On Budget

• Vodafone Investigates Hacker Threat To Release Source Code

• Starting at Home: Cybersecurity in the Hybrid Workplace

• 1Password Increases Top Bug Bounty Reward to $1 Million

• Why You Should Be Using CISA’s Catalog of Exploited Vulns

• ‘Dirty Pipe’ Kernel Bug Enables Root Patched via Linux Distros

• Anonymous Has Hacked Public Cameras in Russia and Announced a Clamorous Leak

• Multi-Ransomwared Victims Have It Coming–Podcast

• Russia May Use Ransomware Payouts to Avoid Sanctions

• Log4j and Livestock Apps: APT41 Wages Persistent Cyberattack Campaign on US Government

• New Exploit Bypasses Existing Spectre-v2 Mitigations in Intel, AMD, Arm CPUs

• 3 Steps to Putting a Modern Database Security Solution into Practice

• 10 Best Tablets Under $400 to Buy 2022 – Top Reasonably Priced Tablets

• 1Password launches the largest financial incentive program for ethical hackers

• Qakbot Botnet Sprouts Fangs, Injects Malware into Email Threads

• Toshiba’s Top Shareholder Opposes Breakup Plan

• Extortion scheme impersonates government officials, law enforcement

• Latin e-commerce giant Mercado Libre hacked

• In a world of deepfakes, this billion-dollar startup wants you to trust AI-powered ID checks

• It’s time to stop hoping that cybersecurity problems will just go away

• Vodafone Investigating Source Code Theft Claims

• What Security Controls Do I Need for My Kubernetes Cluster?

• Introducing the new ‘Defending Against Critical Threats’ report

• App Store and iTunes Purchases Reportedly ‘Turned Off’ in Russia

• Click, Click, BOOM: The Digital Evidence Surge Behind Prosecuting Jan. 6 Rioters

• What Top Security Controls Do I Need for My Kubernetes Cluster?

• Fewer Than Half Of London Boroughs Have Invested In Cyber Insurance

• War in Ukraine: What type of cyber attacks can we expect next?

• Russian Government Sites Hacked

• Brave browser goes the extra mile to block third party cookies

• All About the Bots: What Botnet Trends Portend for Security Pros

• New Variant of Spectre Attack Bypasses Intel and Arm Hardware Mitigations

• Threat Intelligence Firm Cybersixgill Raises $35 Million

• 90% of MSPs Hit By a Successful Cyber-Attack in the Past 18 Months

• Where’s the Russia-Ukraine Cyberwar?

• Your Biometric Data in Danger of Being Exploited by Hackers

• Mitel VoIP systems used in staggering DDoS attacks

• KnowBe4 Spreads Cyber Awareness Training to Their Community

• New Emotet botnet is rapidly growing, with +130K unique bots spread across 179 countries

• China’s Hacking of European Diplomats Aligns With Russia-Ukraine Conflict

• Conti Group Spent $6m on Salaries, Tools and Services in a Year

• UK Security Agency Issues New Guidance on Data Center Protection

• Studio Display Outputs At 1440p Resolution When Connected to 4th-Gen iPad Air and iPad Mini 6

• Geekbench Scores of New iPhone SE Show On-Par Performance With iPhone 13

• Twitter Launches Dark Web Site To Bypass Russian Block

• Dark web threat intelligence firm Cybersixgill lands $35M

• Over 90% of Exposed Russian Cloud Databases Compromised

• DSbD claims UK is on the path to “cyber disaster”

• February 2022 Cyber Attacks Statistics

• China takes control of 6 government networks in the United States

• Hackers selling high-value targets in the United States

• Reg reader rages over Virgin Media’s email password policy

• 11-Inch iPad Pro No Longer Expected to Gain Mini-LED Display in 2022

• Up to 30% of WordPress plugin bugs don’t get patched

• The Jargon Episode – Intego Mac Podcast Episode 230

• State of Crypto Crime | Avast

• Italy Fines US Facial Recognition Firm

• 27-Inch ‘Studio Display Pro’ With Mini-LED and ProMotion Could Launch in June

• Do you know what your supply chain is and if it is secure?

• New Video Offers First Hands-On Look at New Green and Alpine Green iPhone 13 and iPhone 13 Pro Colors

• Vodafone investigating threat from hackers behind Samsung breach to leak source code

• Samsung Confirmed that Hackers Stole Galaxy Devices Source Code

• Ukrainian Hacker Linked to REvil Ransomware Attacks Extradited to United States

• Does the future of digital identity offer us greater security and convenient experiences?

• Emotet Botnet’s Latest Resurgence Spreads to Over 100,000 Computers

• Why are CAPTCHAs still used?

• Building Password Purgatory with Cloudflare Pages and Workers

• ITOps teams are getting buried beneath too many disparate solutions for endpoint management

• Organizations taking nearly two months to remediate critical risk vulnerabilities

• TLStorm flaws allow to remotely manipulate the power of millions of enterprise UPS devices

• Organizations need to change their current password usage and policies, and do it fast

• Huawei UK board members resign over silence on Ukraine invasion

• Businesses under pressure as consumers exercise their privacy rights

• Still too many parents don’t monitor their children’s online activity

• BigBear.ai to Showcase Advanced AI Solutions for Space, Intelligence, and Logistics at Upcoming Industry Conferences

• Cloud Security Alliance Sets Countdown Clock to Quantum

• New Study Uncovers Behavior and Beliefs of Financial Industry Employees Could Lead to Cybersecurity Risks

• Building Cyber Resilience in a heightened alert environment

• Facial recognition market to reach $12.67 billion by 2028

• Allison Transmission Announces Collaboration with Freightliner Custom Chassis Corporation on Walk-In Van Program

• CrowdStrike Reports Fourth Quarter and Fiscal Year 2022 Financial Results

• Palo Alto Networks Prisma Cloud Supply Chain Security reduces code complexity and risk

• SpyCloud Session Identity Protection prevents fraud from compromised web sessions

• AvePoint Ransomware Detection identifies suspicious behavior within users’ Microsoft OneDrive

• Asigra enhances data protection suite to secure backups against Log4j vulnerabilities

• Veeam Backup for Microsoft 365 v6 boosts customers’ data resilience and mitigates SaaS data risks

• Elastic introduces platform enhancements to protect customers against advanced cyber threats

• ACI Worldwide Fraud Scoring Services provides fraud protection for financial institutions

• Alleged Ukrainian Hacker in US Court After Extradition From Poland

• Spirent Communications brings new test solutions to maintain explosive growth of the cloud

• Legion Cyberworks and Horizon3.ai join forces to improve security controls for organizations

• Ingram Micro and Okta expand relationship to help global channel partners prevent ransomware attacks

• Curricula collaborates with Drata to streamline security awareness training

• Updated Mac Mini Still Coming With M2 and M2 Pro Chips

• CircleCI acquires Ponicode to improve product capabilities for software developers

• Major tech firms launch Security First Initiative to combat third-party data breaches

• Republican county clerk indicted in voting-machine breach, arrest warrant issued

• The secret US mission to bolster Ukraine’s cyber defenses ahead of Russia’s invasion

• Apple Continues Its Slow March Toward the MacPad Future

• AWS Reports Malware Targeting Aid Organizations in Ukraine

• Nvidia’s hacked data is being actively used to disguise malware as legit files

• Is Hacktivism Good or Bad? How Could It Affect Your Business?

• Researchers disclose new Spectre V2 vulnerabilities

• NetAbstraction appoints Alissa Knight to Board of Advisors

• Ukraine invasion: This may be the quiet before the cyber-storm, IT staff warned

• Log4j and Livestock Apps: China’s APT41 Wages Persistent Cyberattack Campaign on US Government

• Island expands into UK market and appoints Ashley Brinsford as Head of EMEA Sales

• Megaport appoints Jim Brinksma as CTO

• Christopher Kenessey joins AlertMedia as CEO

• Using Your Phone in Times of Crisis

• How a public defender’s office transformed client management into a people-centered solution

• Crowdstrike reports Q4 revenue of $431 million and $1.45 billion for full year

• Alleged hacker behind Kaseya ransomware attack extradited, arraigned in Texas

• Using your phone in times of crisis

• IT Security News Daily Summary 2022-03-09

• Why the U.S. can engage Russia on cyber over Ukraine

• City gains real-time visibility into snow removal operations

• Critical Exchange Server bug fixed for March Patch Tuesday

• FBI Alert: Ransomware Attacks Hit Critical Infrastructure Organizations

• iPad Air 2022 vs. iPad Pro 2021 Buyer’s Guide

• SEC proposes mandatory breach reporting for publicly traded companies

• APT41 Spies Broke Into 6 US State Networks via a Livestock App

• Russia Officially Blocks Facebook Access For Its Citizens

• Google blocked China-linked APT31’s attacks targeting U.S. Government

• SEC proposes four-day rule for public companies to report cyberattacks

• Happy birthday, TMF!

• Top Cybersecurity Trends to Watch Out for in 2022

• Dirty Pipe Makes Linux Privilege Escalation Easy

• 10 Signs of a Poor Security Leader

• Palo Alto Networks Introduces Prisma Cloud Supply Chain Security

• Bitdefender Launches New Password Manager Solution for Consumers

• Biden Signs Executive Order on Digital Assets

• Ransomware — Encrypt Your Data Before Others Do

• Endpoint Malware and Ransomware Volume Already Exceeded 2020 Totals by the End of Q3 2021

• Twitter makes the leap to Tor

• Updated: Conti Ransomware

• Australia Stresses Cybersecurity Precautions in Wake of Ukraine Conflict

• FormBook spam campaign targets citizens of Ukraine️

• Update now! Microsoft patches three zero-day vulnerabilities on Patch Tuesday

• Bitcoin Rises After Biden Signs Crypto Executive Order

• FormBook spam campaign targets citizens of Ukraine️

• Updated: Conti Ransomware

• iPhone SE 3 vs. iPhone 11 Buyer’s Guide

• M1 Ultra Mac Studio is 2 Pounds Heavier Than M1 Max Version Due to Thermal Differences

• Apple Confirms Studio Display Will Work With PCs, But With Some Caveats

• Third-Generation iPhone SE Features Increased 4GB of RAM

• Cybersecurity Platform CrowdSec Expands Into the United States with Collaborative Solutions Suite Launch

• Twitter Goes on Tor with New Dark Web Domain to Evade Censorship

• Detecting, Investigating, and Verifying Fixes for Security Incidents and Zero-Day Issues Using Lightrun

• ServiceNow releases guidance on Access Control List misconfigurations

• App, security teams need closer bond to fend off cyberattacks

• Consumers Worried About Digital Banking Security

• Blink launches out of stealth with $26M to automate cloud management tasks

• CISA warns of ransomware gang, issues indicators of compromise

• New Zealand Identifies 90,000 CSAM Trading Accounts

• Microsoft Fixes Critical Azure Bug That Exposed Customer Data

• Patches for Firefox Updates in an Emergency Two Zero-Day Vulnerabilities

• Threat Actors are Using Leaked Stolen Nvidia Certificates to Hide Malware

• Romanian Extradited to US to Face Cybercrime Charge

• Deals: Take Up to $150 Off 2021 iPad Pro, iPad Mini, and iPad in Latest Sales

• Mac Pro Now Starts With 512GB of Storage and Radeon Pro W5500X Graphics

• Deals: Expercom Offers First Discount on Apple’s New Studio Display

• Come Compete in the White Hat Cyber Forecasting Challenge

• ServiceNow releases guidance on Access Control List misconfigurations after report highlights prevalence

• Securing healthcare: An IT health check on the state of the sector

• 52 Critical Infrastructure Orgs Hit by Ragnar Locker Ransomware Gang – FBI

• Most ServiceNow Instances Misconfigured, Exposed

• HelpSystems to Acquire MDR Services Firm Alert Logic

• Microsoft Patch Tuesday, March 2022 Edition

• Ciaran Martin and Leeza Garber to Headline at the Infosecurity Magazine Online Summit

• Multiple Russian government websites hacked in a supply chain attack

• Seventy-One Vulnerabilities Addressed By Microsoft On Patch Tuesday

• Millions Of APC Smart-UPS Devices Vulnerable To TLStorm

• New Method That Amplifies DDoSes By 4 Billion-Fold. What Could Go Wrong?

• Chinese APT Zero Days Compromised US State Governments

• Artificial Intelligence to help communicate with animals

• New 16 High-Severity UEFI Firmware Bugs Uncovered in Millions of HP Devices

• SEC to vote on new cybersecurity disclosure rules as Ukraine crisis gives them ‘special relevance’

• Microsoft Patch Tuesday March Addressed 71 Bugs Including 3 Zero-Day

• Elon Musk Asks Judge For End Of Oversight Of His Tweets

• Is Anyone Doing Anything About the Explosion in Crypto Crime?

• Security Leaders Find Value in Veterans to Solve Cyber Skills Shortage

• Google Blocks Chinese Phishing Campaign Targeting U.S. Government

• Immersive Labs: Average cyberthreat response takes 96 days

• Zero Trust Can’t Stop at the Federal Level

• Anonymous hacked Russian cams, websites, announced a clamorous leak

• Russian APTs Furiously Phish Ukraine – Google

• Online Safety Bill To Include Online Scam Protections

• CrowdStrike and Cloud Security Alliance Collaborate to Enable Pervasive Zero Trust

• Zscaler, Okta, CrowdStrike seek to combat zero trust ‘confusion’

• SlashNext launches anti-phishing solution for Microsoft 365

• Siemens Addresses Over 90 Vulnerabilities Affecting Third-Party Components

• Want to donate to Ukraine relief? Here’s a list of top-rated charities to help the relief effort

• Telegram Founder Reassures Ukrainian Users Of Privacy

• Smartphone malware is on the rise, here’s what to watch out for

• Hackers Abuse Mitel Devices to Amplify DDoS Attacks by 4 Billion Times

• Stay on target: How accurate threat detection leads to better defense

• The Conflict in Ukraine Has Brought Attention to the Vulnerability of Critical Energy Infrastructure

• What Caused The Ransomware Attack On Toyota? Experts Insight

• 68% Govt Covid Passport Apps At Risk

• Ukraine Conflict Puts Organisations’ Cyber-Resilience To The Test

• Small Danish Businesses Can Apply for a 50.000 DKK Government Grant to Spend on Cyber Resilience

• Zero-Click Flaws Discovered in UPS Devices

• Ukrainian CERT Alerts Citizens of Phishing Attacks Using Hacked Accounts

• Meet our new improved VirusTotal Graph

• Millions of APC Smart-UPS devices vulnerable to TLStorm

• Mitel Devices Abused for DDoS Vector With Record-Breaking Amplification Ratio

• Security and the Peter Principle – Seven Signs That You Are Working for a “Peter”

• UK Announces New Rules to Tackle Surging Online Scam Adverts

• Fraud on Zelle

• PSA: Studio Display Stands Are Not Interchangeable

• Log4j Breaches At Least 6 U.S. State Governments

• New Specops Report Reveals Passwords Are Weakest Link For Networks

• Expert Reacted On ‘Dirty Pipe’ Linux Vulnerability

• Comment: Chinese Spies Hacked A Livestock App To Breach US State Networks

• Linux Dirty Pipe Exploit Gives Root Access – Patch Now

• New Nokoyawa Ransomware Possibly Related to Hive

• China Backed Hackers Compromised Six US State Governments – Mandiant

• Microsoft Warns of Spoofing Vulnerability in Defender for Endpoint

• The Incident Response Plan – Preparing for a Rainy Day

• Critical Bugs Could Let Attackers Remotely Hack, Damage APC Smart UPS Devices

• HP addressed 16 UEFI firmware flaws impacting laptops, desktops, PoS systems

• US critical infrastructure hit by ransomware

• RagnarLocker ransomware gang breached 52 critical infrastructure organizations

• Experts Estimated the Probability of Disconnecting Russia From the Internet

• Apple Releases Mac Studio, Studio Display, and Updates iPhone SE and iPad Air

• How To Make A Messenger App

• Lawmakers face tight deadline to pass funding bills

• The Psychology of Ransomware Response

• 16 Vulnerabilities Found in Firmware of HP Enterprise Devices

• Apple’s $1599 Standard Studio Display Does Not Come With a Polishing Cloth

• Studio Display Supports 5th-Gen iPad Air, But Not the 4th-Gen or the iPad Mini 6

• Chinese phishing accounts are targeting EU diplomats

• Sextortion scams are on the rise

• Apple Raises Price For Entry-Level iPhone SE

• February 2022’s Most Wanted Malware: Emotet Remains Number One While Trickbot Slips Even Further Down the Index

• #DSbD: UK Could Face a “Cyber Disaster” on its Current Security Trajectory

• China state-backed hackers compromised networks of at least 6 U.S. state governments, research finds

• There is no proof of a Russian TV hack

• Ragnar Locker Ransomware compromises 52 of critical infrastructures in the United States

• Where are the (serious) Russian cyberattacks?

• Chinese APT41 Group Compromises Six US Government Networks

• Car Dealership Employees Begin Legal Case Following Breach

• Chinese APT41 Hackers Broke into at Least 6 U.S. State Governments: Mandiant

• Azure AutoWarp brings automation headaches

• Microsoft Fixes 71 Bugs Including Three Zero Days

• Critical RCE Bugs Found in Pascom Cloud Phone System Used by Businesses

• SharkBot – New Generation Malware on Google Play Distributed as Android Antivirus App

• 10 Best Tablets Under $500 to Buy 2022 – Tablet For Home Use Under a Reasonable Budget

• Build your own Android security product

• Wartime Hacktivism Is Not The Answer | Avast

• Samsung data breach: Lapsus$ gang stole Galaxy devices’ source code

• Data privacy laws are an opportunity to become more honest in reaching your target audience

• Understanding US Defense Department’s relaxed cybersecurity protocols under CMMC 2.0

• Mid-market tackling high rate of costly attacks, worsened by complex, siloed defences and staff burnout

• Internet backbone provider Lumen quits Russia

• Critical Security Patches Issued by Microsoft, Adobe and Other Major Software Firms

• Ragnar ransomware gang hit 52 critical US orgs, says FBI

• Consumers fed up with passwords and KBAs, looking to voice enabled technology as the future

• Sharp rise in SMB cyberattacks by Russia and China

• UPS flaws allow for remote code execution and remote fire-based interruptions

• Small business owners worried about the cybersecurity of their commercial vehicles

• PCS-Mosaic Holdings Welcomes Intelligence Community Veteran and Technology Entrepreneur Larry Cox to Board of Managers

• Domini 2021 Impact Report Highlights a Just Climate Transition, Corporate Emissions, and Access to Affordable Housing

• An Entry-Level Cybersecurity Certification: Why Every Employer Should Want Their Staff to Have One

• Back to Barcelona: MWC 2022 Survival Guide

• DevSecOps code process

• Digital transformation market to reach $1,759.4 billion by 2028

• Ingram Micro Expands Relationship with Okta Identity Solutions

• Start a cybersecurity career with the help of (ISC)², exam costs only $125

• Niagara Networks empowers security teams with deep network inspection visibility

• CyberGRX platform enhancements provide real-time notifications to third-party breaches

• Dasera Mt. Rainier release allows enterprises to scale data protection efforts

• Reciprocity ROAR Platform enables companies to mitigate risk in business processes

• Observe.AI Selective Redaction reduces compliance risk without losing important data

• FBI says Ragnar ransomware gang hit 52 critical US orgs

• In-the-wild DDoS attack can be launched from a single packet to create terabytes of traffic

• FBI says Ragnar ransomware hit 52 critical American orgs

• Cloudflare and Akamai refuse to pull services out of Russia

• Microsoft patches critical remote-code-exec hole in Exchange Server and others

• Adobe Releases Security Updates for Multiple Products

• Kuo: 2022 MacBook Air to Feature M1 Chip, More Color Options and All-New Design

• ADVA MicroMux Edge BiDi boosts capacity and address fiber constraints in access networks

• Mandiant reminds us: Don’t forget about Log4j

• Adobe Releases Security Updates for Multiple Products

• Trellix partners with Gotara to help women navigate and grow their careers in STEM

• Cow-counting app abused by China ‘to spy on US states’

• CISA Releases Security Advisory on PTC Axeda Agent and Desktop Server

• FBI Releases Indicators of Compromise for RagnarLocker Ransomware

• Mozilla Releases Security Updates for Firefox and Firefox ESR

• Microsoft Releases March 2022 Security Updates

• SAP Releases March 2022 Security Updates

• Microsoft March 2022 Patch Tuesday updates fix 89 vulnerabilities

• HomePod Mini Launching in Belgium, Netherlands, and Switzerland at End of March

• M1 Ultra CPU is 60% Faster Than 28-core Mac Pro, GPU is 80% Faster Than Highest-End Radeon Pro W6900X Graphics Card

• M1 Ultra Outperforms 28-Core Intel Mac Pro in First Leaked Benchmark

• Apple’s New Studio Display Includes 1-Meter Thunderbolt Cable With 3-Meter Option Coming Soon

• Delivery Estimates for Mac Studio and Studio Display Slip to April

• Cydarm raises $3 million to enhance its platform and expand globally

• Axonius raises $200 million to meet global customer demand for CAASM and SaaS management solutions

• Chinese hacking groups target US and European governments

• Crypto exchange Coinbase says it already blocks 25,000 Russian addresses

• Twitter launches Tor website to tackle Russian censorship

• Cow-counting app ‘abused by China to spy on US states’

• Identity Theft Statistics You Need to Know in 2022

• For defense IT, acquisitions need to be more than ‘just in time’

• Microsoft’s latest Windows patches fix the bug causing user data not to be erased

• VERT Threat Alert: March 2022 Patch Tuesday Analysis

• Internet Backbone Giant Lumen Shuns .RU

• Mandiant achieves FedRAMP Ready designation to improve security for federal agencies

• Juniper Networks UMSP provides end-to-end network visibility and optimization for MSPs

• Intelsat appoints David Wajsgras as CEO

• QuintessenceLabs secures additional funding to scale its quantum-safe crypto solutions

• Cloud performance: How to measure the things that matter

• Microsoft Patches Critical Exchange Server Flaw

• IT Security News Daily Summary 2022-03-08

• With Mandiant, Google can challenge Microsoft’s security dominance

• How states can streamline broadband grant administration

• Water, power utilities, hospitals get free access to zero-trust tools

• Utah inches closer to becoming fourth state to pass privacy law

• Microsoft Addresses 3 Zero-Days & 3 Critical Bugs for March Patch Tuesday

• SAP Patches Critical Security Flaws in Monitoring Solutions

• Even ‘Perfect’ APIs Can Be Abused

• SAP Releases March 2022 Security Updates

• Google TAG: Russia, Belarus-linked APTs targeted Ukraine

• Access:7 Supply Chain Flaws Impact ATMs, Medical, IoT devices

• Microsoft March 2022 Patch Tuesday: 71 vulnerabilities fixed

• Patch Tuesday: Microsoft Fixes Multiple Code Execution Flaws

• FBI finds Ragnar Locker hit 52 U.S. critical infrastructure targets

• “Dirty Pipe” Linux kernel bug lets anyone write to any file

• What should we do about ‘systemic’ cyber risks? But wait, what even are those

• How to Give Your Apple Devices a Cybersecurity Review

• McAfee Teammates Share How They’ll Help #BreakTheBias this International Women’s Day

• White House reminds agencies to adopt NIST’s software supply chain security framework

• Native American health agencies struggled to access federal data amid pandemic

• Rave Mobile Safety Sees 12th Consecutive Year of Revenue Growth

• What should we do about ‘systemic’ cyber risks? First, what even are those…

• Bitwarden vs 1Password: Compare Top Password Managers

• Security Industry Association Reveals the 2022 Women in Security Forum Power 100 List

• Dark Reading Reflects on International Women’s Day

• Microsoft Releases March 2022 Security Updates

• Access:7 flaws impact +150 device models from over 100 manufacturers

• March 2022 Patch Tuesday: Microsoft fixes RCEs in RDP client, Exchange Server

• What should we do about ‘systemic’ cybersecurity risks? First, what are those…

• Mandiant has ‘more exciting’ future with Google than Microsoft, analyst says

• A new rule aims to boost Biden’s ‘Made in America’ program

• Insurance policies may tighten amid U.S.-Russia tensions, cyber pros warn

• Ermetic Launches New Synergia Global Channel Partner Program

• Within hours of the Log4j flaw being revealed, these hackers were using it

• Chronicles Of Mandiant: Google put a ring on it

• Researchers uncover vulnerabilities in APC Smart-UPS devices

• Google to Buy Mandiant, Aims to Automate Security Response

• FBI Releases Indicators of Compromise for RagnarLocker Ransomware

• Mozilla Releases Security Updates for Firefox and Firefox ESR

• New 16 High-Severity UEFI Firmware Flaws Discovered in Millions of HP Devices

• CISA urges to fix actively exploited Firefox zero-days by March 21

• The Seizure of A Russian Merchant Vessel Raises Questions About Neutrality

• U.S. Cyber Command’s Annual Legal Conference

• Guidance for CVE-2022-23278 spoofing in Microsoft Defender for Endpoint

• IT security is at crisis point – so what are you going to do about it?

• Cybersleuths probe what makes a cyber risk ‘systemic’

• Rivian Sued By Shareholder, Alleging Misleading IPO Data

• Pactera Edge tackles challenges in digital fraud protection

• More rules for IT radicals

• Adobe Patches ‘Critical’ Security Flaws in Illustrator, After Effects

• “Dirty Pipe” Linux kernel bug lets anyone to write to any file

• Oklahoma Hospital Data Breach Impacts 92,000 People

• Prison for Man Who Scammed US Government to Buy Pokémon Card

• Russia, China May Be Coordinating Cyber Attacks: SaaS Security Firm

• Google to Acquire Mandiant; EDR Acquisition Next?

• CISA Releases Security Advisory on PTC Axeda Agent and Desktop Server

• 2.5 million-plus cybersecurity jobs are open—women can fill them

• Anonymous Hacks Russian State TV Stations

• Intel’s Mobileye Files For IPO

• Similarities and Difference Between Ransomware and DDoS Extortion Attacks

• How Ivanti hopes to redefine cybersecurity with AI

• Best crypto wallet 2022: Secure your cryptocurrency

• What If Trump Were Still the President?

• The Open App Markets Bill Moves Out of the Senate Judiciary Committee

• Google to acquire cybersecurity company Mandiant for $5.4 billion

• DoS Attackers are Employing ‘TCP Middlebox Reflection’ to Knock Websites Offline

• IsaacWiper, The Third Wiper Spotted Since the Beginning of The Russian Invasion

• Coalition Named to Fast Company’s Annual List of the World’s Most Innovative Companies for 2022

• Igniting Adoption of a Secure Software Development Lifecycle – A Guide for Secure Software Champions

• Google to buy security firm Mandiant for $5.4 billion

• Attackers can Exploit Dirty Pipe Linux Vulnerability to Overwrite Data

• security identifier (SID)

• States use road sensors to combat treacherous ‘tire carcasses’

• Okta, Airbnb, Zendesk, Asana and Snap join Whistic in forming cybersecurity consortium

• Zero-Click Flaws in Widely Used UPS Devices Threaten Critical Infratructure

• The Uncertain Future of IT Automation

• U.S. State Governments Targeted by Chinese Hackers via Zero-Day in Agriculture Tool

• Webinar Today: Protect the Software Supply Chain, Eliminate Risks in Code

• Medical, IoT Devices From Many Manufacturers Affected by ‘Access:7’ Vulnerabilities

• #DSbD: Embrace Change and Collaboration to Revolutionize Cybersecurity

• Google to Acquire Mandiant

• Chinese Spies Hacked a Livestock App to Breach US State Networks

• Ragnar Locker ransomware group breached at least 52 organizations across 10 critical infrastructure sectors

• The Media Environment and Domestic Public Opinion in China Toward Russia’s War On Ukraine

• Google buys threat intel giant Mandiant for $5.4bn

• Google WAF Circumvented Via Oversized POST Requests

• Google To Acquire Mandiant For $5.4 Billion

• Why You Need a Diversity and Inclusion Program in Cybersecurity

• Bug in the Linux Kernel Allows Privilege Escalation, Container Escape

• 8 More Women in Security You May Not Know but Should

• 7 Essentials for More Security-Aware Design Automation

• Google: Russian Hackers Target Ukrainians, European Allies via Phishing Attacks

• AutoWarp: Critical Cross-Account Vulnerability In Microsoft Azure Automation Service

• Phishing Attempts From FancyBear And Ghostwriter Stepping Up

• 7 Vulnerabilities Patched In Axeda IIoT Remote Mgmt Tool

• Russia Mulls Legalizing Software Piracy As It’s Cut Off From Western Tech

• Linux Has Been Bitten By Its Most High Severity Bug In Years

• The Rules Don’t Apply To Me: Addressing The Cultural Aspect Of Cyber Security

• Meet PCI compliance with credit card tokenization

• Google buys threat intel firm Mandiant for $5.4bn

• New RURansom Wiper Targets Russia

• IT professionals plan to adopt passwordless technology, according to ESG report

• Axonius, which brings asset visibility to complex IT environments, raises $200M

• Google to acquire cybersecurity company Mandiant for $5.4B

• The rise of confidential blockchains

• FBI warns: This ransomware group has gone after critical infrastructure firms again and again

• Palo Alto: More than 100,000 infusion pumps vulnerable to 2 vulnerabilities

• Cloud computing: Microsoft fixes Azure flaw that could have allowed access to other accounts

• 1Password review: Pretty close to perfect

• Android’s March 2022 Security Updates Patch 39 Vulnerabilities

• Millions of APC Smart UPS Devices Can Be Remotely Hacked, Damaged

• CISA Urges Organizations to Patch Recent Firefox Zero-Days

• Breaking the Bias for International Women’s Day 2022

• War Is Calling Crypto’s ‘Neutrality’ Into Question

• Samsung Confirms Data Breach After Hackers Leak Galaxy Source Code

• Google Buys Cybersecurity Firm Mandiant for $5.4 Billion

• Why I Joined Cisco

• Experts Reactions On Samsung Data Breach

• Patch Tuesday March 2022 – Microsoft Releases Fixes for 21 Common Vulnerabilities

• The Dilemma of Defense in Depth

• Decade-Old Critical Vulnerabilities Might Affect Infusion Pumps

• Samsung Admits Hackers Stole Source Code

• Ukraine’s CERT-UA warns of phishing attacks against Ukrainian citizens

• Using Radar to Read Body Language

• TLStorm: Armis finds Three Critical Zero-Days in APC Smart-UPS devices that could impact over 7 in 10 organisations worldwide

• Hive Ransomware Gang Impacts Rompetrol Gas Station Network

• Ragnar Locker Ransomware Breached 52 US Critical Infrastructure Organizations

• Axonius Valued at $2.6 Billion After New $200 Million Funding Round

• Google to Acquire Mandiant for $5.4 Billion in Cash

• Widely used UPS devices can be hijacked and destroyed remotely

• Google to acquire Mandiant for $5.4 billion

• Over 25,000 Russian-linked Cryptocurrency Addresses Have Been Blocked by Coinbase

• IBM, Joins Microsoft, Oracle, SAP With Russia Suspension

• 8 Top Git Security Issues & What To Do About Them

• Empowering Women in Cybersecurity with Check Point’s Majority-Female Senior Leadership Team

• IT professionals plan to adopt passwordless technology

• Dirty Pipe Exploit Rings Alarm Bells in the Linux Community

• Coinbase: We’re Blocking 25,000 Russian Accounts

• Critical “Access:7” Supply Chain Vulnerabilities Impact ATMs, Medical and IoT Devices

• 16-28 February 2022 Cyber Attacks Timeline

• When fake dating profiles try the military approach

• PressReader witnesses cyber attack on its IT Infrastructure

• Password characters that neutralize brute force attacks

• Emergency Patch – 2 New Mozilla Firefox 0-Day Bugs Under Active Attack

• The Five Stages of File Integrity Monitoring (FIM)

• 25,000 Russian-linked accounts blocked by Coinbase

• Cyberattack hits PressReader

• Easily exploitable Linux bug gives root access to attackers (CVE-2022-0847)

• Silicon UK Roundtable: International Women’s Day 2022

• Lapsus$ Ransomware Gang – A Malware in Disguise

• Researchers Warn of Linux Kernel ‘Dirty Pipe’ Arbitrary File Overwrite Vulnerability

• The Continuing Threat of Unpatched Security Vulnerabilities

• An attacker’s toolchest: Living off the land

• Dirty Pipe Linux flaw allows gaining root privileges on major distros

• Looking for adding new detection technologies in your security products?

• Increasing security for single page applications (SPAs)

• China’s annual parliament gives tech industry much to ponder

• Microsoft Azure ‘AutoWarp’ Bug Could Have Let Attackers Access Customers’ Accounts

• ICS vulnerability disclosures surge 110% over the last four years

• 5 steps that simplify IoT security for OEMs

• Azure flaw allowed users to control others’ accounts

• Russia, China May Be Coordinating Cyber Attacks: SaaS App Security Firm

• Critical Bugs Expose Hundreds of Thousands of Medical Devices

• Improve your organization’s cyber hygiene with CIS CSAT Pro

• Fraud detection and prevention costs merchants more than fraud itself

• Application security market to reach $22.655 billion by 2026

• 70% of breached passwords are still in use

• Linux distros patch ‘DirtyPipe’ make-me-root kernel bug

• OpenVPN, Inc. Promotes “Operation Information Freedom”

• Intertek Issues First UL 2900-2-1 Certification to Medical Device Manufacturer NuVasive, Inc.

• KnowBe4 Revolutionizes Security Culture Measurement With Industry-First Maturity Model

• What Google, Amazon and Microsoft revealed about Ukraine’s cyber situation

• The Challenge of Asset Tracking in Industrial Environments

• Imperva API Security protects data across legacy and cloud-native applications

• Medigate PROS establishes cyber physical system security service standards for HDOs

• Coinbase blocks 25,000 Russian-linked accounts and promotes crypto over fiat for sanctions

• Conti Ransomware Group Diaries, Part IV: Cryptocrime

• FBI warns of online scammers impersonating government officials, law enforcement

• Google Enters Bidding War for Mandiant: Reports

• Trio of Vendors Offer Free Services to Organizations at Risk of Russian Cyberattacks

• SS8 Networks acquires Creativity Software to help CSPs comply with precise location data requests

• Infosys partners with Telenor Norway to enhance business agility and operational efficiency

• Sherweb collaborates with Trend Micro to provide more security tools for MSPs

• Grading the FITARA scorecard

• Cyber range training for government IT pros, students

• ‘Dirty Pipe’ Linux vulnerability discovered

• Google in Talks to Acquire Mandiant

• UN mulls Russia’s pitch for cybercrime treaty

• Ukraine: We’ve repelled ‘nonstop’ DDoS attacks from Russia

• Access management builds resilience to insider threats

• Report: Facebook Gaming Platform Is Full Of Scams

• Samsung Source Code Compromised in Hack

• ConnectWise Expands Collaboration with Intel to Further Strengthen Cybersecurity for SMBs

• Name That Edge Toon: Animal Instincts

• IT Security News Daily Summary 2022-03-07

• Why You Must Shine a Light on the Data Lurking in the Shadows

• BEST ENDPOINT SECURITY SOLUTIONS FOR 2022

• Anonymous hacked Russian TV and streaming services with Ukraine war footage

• I Can Probably Hack Your Password in MINUTES!

• Layered defenses, segmented networks key in shoring up infrastructure, NSA says

• Trading in your old phone? Here’s how to factory reset it and everything else you need to know

• PressReader service partially returns after cyberattack impacts 7,000+ publications

• Russia bans walkie-talkie app Zello

• Novel Attack Turns Amazon Devices Against Themselves

• Top DevSecOps certifications and trainings

• CISA Adds 11 Known Exploited Vulnerabilities to Catalog 

• CISA’s Zero Trust Guidance for Enterprise Mobility Available for Public Comment

• Coinbase blocked 25,000 crypto addresses linked to Russian individuals and entities

• Mandiant spikes 16% on report Google is in talks to acquire the company

• Mandiant surges after report Google interested in acquisition

• TMF announces two new awards

• Cyber‑readiness in the face of an escalated gray zone conflict

• CISA Adds Eleven Known Exploited Vulnerabilities to Catalog 

• Does Foreign Sovereign Immunity Apply to Sanctions on Central Banks?

• The Role of The CFO In Enterprise Cyber Security

• The Safest Ways for Bitcoin Trading

• Update now! Mozilla patches two actively exploited vulnerabilities

• UN mulls Russia’s own pitch for new cybercrime treaty

• Fake Antivirus Apps on Play Store Loaded with SharkBot Banking Trojan

• The struggle to reduce bug-fixing time is real

• State attorneys general open investigation into TikTok

• PressReader service partially returns after cyberattack causes outages at 7,000+ publications

• Samsung Confirms Lapsus$ Ransomware Hit, Source Code Leak

• Samsung breached, Nvidia hackers claim responsibility

• Imperva Ships API Security Providing Continuous API Discovery and Data Classification with Two Deployment Models

• Imperva Suspends Operations in Russia and Belarus

• UN debates Russia’s own pitch for new cybercrime treaty

• PROPHET SPIDER Exploits Citrix ShareFile Remote Code Execution Vulnerability CVE-2021-22941 to Deliver Webshell

• Billionaire-backed group enlists Trump-supporting citizens to hunt for voter fraud using discredited techniques

• Trading in your old phone soon? Here’s how to get it ready

• NVIDIA’s Stolen Code-Signing Certs Used to Sign Malware

• Industrial Systems See More Vulnerabilities, Greater Threat

• Mozilla Releases Security Updates for Multiple Products

• 2021 Brand Intelligence Trends

• Tech Advancements That are Boosting Cybersecurity

• Nmap Firewall Evasion Techniques>

• PressReader Suffers Cyber-Attack

• Nvidia’s Stolen Code-Signing Certs Used to Sign Malware

• U.S. Security Vendors Launch Critical Infrastructure Defense Project

• Samsung Source Codes Stolen

• Weight Management Companies Settle Data Privacy Suit

• The Aftermath, Episode 2: Scattered to the Four Winds

• EFF to European Court: “Right to be Forgotten” Shouldn’t Stop The Public From Reading The News

• ‘If you’re thinking about investments now, I would think cybersecurity companies,’ says John Chambers

• Lapsus$ extortionists dump data online as Samsung admits breach

• ISO 27002 2013 to 2022 mapping

• Things to do as soon as you become a victim to a bank fraudster

• Cyber Frauds raise because of Russia Ukraine War

• Elon Musk warns that Starlink Internet Satellites can be bombed

• Samsung confirms no data breach from Cyber Attack

• Kids Back To School – The Perfect Time to Audit Your Family’s Online Safety

• The Easy Solution for Stopping Modern Attacks

• Critical Firefox Zero-Day Bugs Allow RCE, Sandbox Escape

• Critical Bugs in TerraMaster TOS Could Open NAS Devices to Remote Hacking

• Mozilla Fixes Two Critical Firefox Flaws That Are Being Actively Exploited

• Massive Meris Botnet Embeds Ransomware Notes From REvil

• Hackers Stoke Pandemonium Amid Russia’s War In Ukraine

• Global Consultancies Quit Russia

• What to Make of Microsoft’s Year in Cybersecurity

• Why GMSAs Present Such A Threat, Expert Insight

• Tesla CEO Musk Issues Warning Regarding the Use of Starlink Terminals in Ukraine

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Aniview Renews Partnership with HUMAN to Continue Safeguarding Its Video Ad Platform From Sophisticated Bot Attacks

• Tech Spend Shifting to Enable Enterprise-Wide Approach to Customer Experience, ISG Says

• Black Kite Named a Customers’ Choice in the 2022 Gartner Peer Insights™ ‘Voice of the Customer’: IT Vendor Risk Management

• Technology Services Company Easy Dynamics to Expand in Fairfax County, Create 61 Jobs

• The Critical Infrastructure Defense Project launches to protect U.S. from retaliatory Russian cyberattacks

• Russia-Ukraine: Threat of Local Cyber Operations Escalating Into Global Cyberwar

• Russia, Ukraine and the Danger of a Global Cyberwar

• SharkBot, the new generation banking Trojan distributed via Play Store

• Hackers Expose 190GB of Alleged Samsung Data

• Uber Raises Earnings Forecast Amidst Ride-Hailing Surge

• Samsung confirms data breach as Lapsus$ hackers leak its source code

• Helping Mom & Dad: Online Banking

• Data Fabric: What It Is and How It Impacts Cybersecurity

• Lapsus$ ransomware gang uses stolen source code to disguise malware files as trustworthy. Check Point customers remain protected

• Mozilla fixes two critical Firefox flaws that are being actively exploited

• AppSec Firm Cider Security Emerges From Stealth With $38 Million in Funding

• Adafruit suffers GitHub data breach – don’t let this happen to you

• Why the World Needs a Global Collective Cyber Defense

• SharkBot Malware Poses as Android Antivirus

• 10 Best Tablets Under $200 to Buy 2022 – Top Affordable Gadgets

• Samsung says hackers breached company data and source code for Galaxy smartphones

• Disclosure of Vulnerability in Azure Automation Managed Identity Tokens

• Cyberattack Logan Health and Server Intrusion

• Ukrainian CERT Warns Citizens of Phishing Attacks Using Compromised Accounts

• Understanding How Hackers Recon

• SASE and SSE: what you need to know

• Ukraine will join NATO cyber hub

• NVIDIA Code Signing Certificates Leveraged to Sign Malware

• 10 Best Monitors for Xbox One X Gaming 2022 – Amazing Features and Specs

• Third-Generation iPhone SE 5G Expected This Week

• Ransom DDoS Attack that Reached a Rate of 2.5 Million Requests per Second

• Major Microsoft Azure cross-tenant vulnerability caught by Orca Security

• Samsung confirms Galaxy source code breach but says no customer information was stolen

• Google Fights Phishing With Updated Workspace Notifications

• How Police Abuse Phone Data to Persecute LGBTQ People

• Hacking Alexa through Alexa’s Speech

• A Student Mentor’s EXP-312 and OSMR Learning Experience

• 190GB of Samsung Data Leaked

• Ukrainian Government Websites Shut Down due to Cyberattack

• How to increase the overall performance of your PC?

• After NVIDIA, Samsung Are The Next Victims Of Data Theft

• Microsoft Adds Azure Cloud Data Centres In India, China

• CISA Informs Organizations of Flaws in Unsupported Industrial Telecontrol Devices

• Emergency Firefox Update Patches Two Actively Exploited Zero-Day Vulnerabilities

• Musk Warns Starlink Could Attract Russian Bombs

• The ‘Revelations’ Chapter 2 – Waking Up To CyberWar And Conflict

• London Has The Highest Cybercrime Rate In The United Kingdom With Over 5,000 Incidents In 2021

• Mozilla fixes Firefox zero-days exploited in the wild (CVE-2022-26485, CVE-2022-26486)

• A week in security (February 28 – March 6)

• Ukraine To Issue NFTs To Fund War Effort

• Ukraine Set to Join NATO Cyber Hub

• Counterfeit and Pirated Imports Surge During Pandemic

• Prevent hackers by getting into their heads. Here’s how.

• Ukraine Calls Invasion First ‘Hybrid’ War Fought In Cyberspace

• Facebook Blocked In Russia Over ‘Discrimination’

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of February 28, 2022

• Firefox patches two actively exploited zero-day holes: update now!

• Anonymous hacked Russian streaming services to broadcast war footage

• TikTok, Netflix Latest To Limit Russian Services

• Trying to register your antivirus in Windows Security Center?

• SharkBot Banking Malware Spreading via Fake Android Antivirus App on Google Play Store

• Mozilla addresses two actively exploited zero-day flaws in Firefox

• Stop hackers getting into your systems – by getting into their heads. Here’s how

• IT leaders confident in their ability to manage a ransomware attack: They should know better

• Every business is a cybersecurity business

• Global consultancies quit Russia

• How frustrated and burned out are security analysts?

• Solving the problem of secrets sprawling in corporate codebases

• A Complete Guide to Perform External Penetration Testing on Your Client Network | Step-by-Step Methods

• Winning the war for cyber – and cyber talent

• OT Cybersecurity Concerns Are Increasing Across the Globe

• What Is CPS 234 and Who Needs to Comply with It?

• 2 New Mozilla Firefox 0-Day Bugs Under Active Attack — Patch Your Browser ASAP!

• BBC targeted with 383,278 spam, phishing and malware attacks every day

• Cynamics MSSPs offering optimizes network security for customers

• CDR market to reach $500 million by 2026

• RASP: The World Cup’s Last Line of Cyber Defense

• Australia launches federal election disinformation register to fight mistruths

• Anonymous offers $52,000 worth of Bitcoin to Russian troops for surrendered tank. Is it fake news?

• IT Security News Weekly Summary – Week 09

• IT Security News Daily Summary 2022-03-06

• Enhance Your Safety and Security Operations with Valor IMS

• See a Quick Demo of N2WS Backup & Recovery on AWS Marketplace

• CVE-2022-0492 flaw in Linux Kernel cgroups feature allows container escape

• Chrome Skype Extension Flaw Threatened User Privacy

• Imperva Mitigates 2.5 million RPS Ransom DDoS Assaults Targeting Unnamed Firm

• Foreign Fighters and Fellow Travelers: Right-Wing Extremism in Australia and the United States

• Is Malware Analysis Challenging?

• How a Simple Vulnerabilty Turned Out to be University Campus ‘Master Key’

• The IT department was asked to spy on co-workers. It didn’t go well

• Security Affairs newsletter Round 356

• DFIR Reporting

• The (Mis)Use of Artifact Categories, pt II

• Feb 27- Mar 05 Ukraine – Russia the silent cyber conflict

• Report: Telegram’s New Battleground for Cybercriminals Amid Russia-Ukraine War

• Charities and NGOs providing support in Ukraine hit by malware

• Russia Blocked Access to Facebook, Twitter, Foreign News Outlets

• Week in review: Medical device IP protection, how to select a CDR solution, Patch Tuesday forecast

• I can probably hack your password in MINUTES!

• Penetration testing

• VIDIZMO partners with Hexagon to improve digital evidence management for public safety agencies

• Susan Bryant joins NetAbstraction as VP of Sales – Americas

• SurePoint Technologies appoints Tim Radaich as CRO

Generated on 2022-03-13 23:59:27.868124