IT Security News Weekly Summary – Week 11

• IT Security News Daily Summary 2022-03-20

• How to Use JWT Securely

• We are headed for an ecosystem of cyber haves and cyber nots: Cisco advisory CISO

• 5 Reasons Organizations Need Comprehensive AD Security Across Cloud and On-Prem

• Directed Analytics – The Future of Data Management

• Phishing Techniques in Disguise: What to Look for And Why You Should

• Theft of 54 million SA Records, as per TransUnion Linked to the Current Breach

• Multiple Similarities Identified in BlackMatter And BlackCat Ransomware

• Gurman: Redesigned MacBook Air Delayed to Second Half of 2022, No New High-End MacBook Pro Likely Until Next Year

• Why client-side web application security is critical to protecting from Magecart and other similar attacks

• Anonymous leaked data stolen from Russian pipeline company Transneft

• Mar 13- Mar 19 Ukraine – Russia the silent cyber conflict

• Some iPad Air 5 Users Complain About Creaking and Build Quality Downgrade

• Gurman: MacBook Air Delayed to Second Half of 2022, No New High-End MacBook Pro Likely Until Next Year

• Europe After the Ukraine War

• The Enduring Danger of Russia’s Cluster Bombs in Ukraine

• Security Affairs newsletter Round 358 by Pierluigi Paganini

• The risk of undermanaged open source software

• Apple Updates Boot Camp to Support Studio Display

• Mac Studio Teardown Indicates That SSD Storage May Be Upgradeable

• How to Limit Who Can Contact You on Twitter

• EU and US agencies warn that Russia could attack satellite communications networks

• Severe Vulnerability Patched in CRI-O Container Engine for Kubernetes

• Week in review: The secret to app security, new issue of (IN)SECURE Magazine

• Penetration testing

• This New Russian Cyclops Blink Botnet Targets ASUS Routers

• Perimeter 81 hires Gily Netzer as VP of Marketing

• ZAP-Hosting – 746,682 breached accounts

• Weekly Update 287

• IT Security News Daily Summary 2022-03-19

• Anonymous Leaks 79GB of Russian Oil Pipeline Giant’s Email Data

• Avoslocker ransomware gang targets US critical infrastructure

• Ghostwriter in the Shell: Expanding on Mandiant’s Attribution of UNC1151 to Belarus

• Gh0stCringe Malware Recently Attacked Insecure Microsoft SQL and MySQL Servers

• DirtyMoe Worming Malware is Targeting Hundreds of Thousands Devices Per Day

• Top 12 client-side security threats

• Crooks claims to have stolen 4TB of data from TransUnion South Africa

• AwareGO Integrates with Microsoft Teams to Help Organizations Fight Security Fatigue

• ZPE Systems Announces TD SYNNEX Partnership to Bolster Growth Strategy

• What Can Flexible Work Conditions Do for Cyber?

• How to Customise SuperTokens APIs

• After retiring Bitdefender Free, Bitdefender launches Antivirus Free for Windows

• Mac Studio and Studio Display Unboxing

• Caketap: A New Unix Rootkit Used to Steal ATM Banking Data

• Indian Banks Failing to Protect Their Cyber Security

• Exotic Lily initial access broker works with Conti gang

• Top Stories: Mac Studio and Studio Display Now Available, iOS 15.4 Released, and More

• TSA’s First Crack at Guarding Pipelines From Hackers Falls Short

• A Developer Altered Open Source Software to Wipe Files in Russia

• Emsisoft releases free decryptor for the victims of the Diavol ransomware

• Build or Buy your own antivirus product

• Award-Winning Cybersecurity Executive Nicole Dove Joins CyberSaint Growth Advisory Board

• Pontera and SageView Advisory Group Announce Partnership to Enable Advisors to Manage Client Retirement Accounts

• Changes to the CISSP Exam Length Coming Soon

• KnowBe4 Spreads Cyber Awareness Training to Their Community

• 5 Prevalent digital marketing Cybersecurity concerns to watch out for

• Defending the data center: The time to act is now

• Week in security with Tony Anscombe

• Conti Leaks Reveal the Ransomware Group’s Links to Russia

• AwareGO integrates with Microsoft Teams to improve cybersecurity awareness in the workplace

• Most Hood Plants Up After Cyber ‘Event,’ Schools Concerned

• Nicole Dove joins CyberSaint Growth Advisory Board

• Beware of this bogus (and phishy) “Instagram Support” email

• Seeking truth in crisis times shows importance of metadata

• Double header: IsaacWiper and CaddyWiper

• Meet Exotic Lily, access broker for ransomware and other malware peddlers

• IT Security News Daily Summary 2022-03-18

• 2022-03-16 – Pcap and malware for an ISC diary (Qakbot)

• Half of Orgs Use Web Application Firewalls to Paper Over Flaws

• This Week in Security News – March 18, 2022

• Code-Sabotage Incident in Protest of Ukraine War Exposed Open Source Risks

• China-linked threat actors are targeting the government of Ukraine

• Friday Squid Blogging: The Costs of Unregulated Squid Fishing

• Top 10 Reasons Cyber Defense Firms Should Hire Veterans

• This browser-in-browser attack is perfect for phishing

• How crowdsourced data helps cities fight litter

• Agencies Warn on Satellite Hacks & GPS Jamming Affecting Airplanes, Critical Infrastructure

• Menlo Security: Less Than Three in 10 Organizations Are Equipped to Combat Growing Wave of Web-Based Cyber Threats

• A Chance to Raise Shields Right

• CyCognito Launches Exploit Intelligence

• Data Deletion Methods: What’s Best for Sensitive Data?

• Mac Studio vs. Mac Pro Buyer’s Guide

• Hands-On With the New M1 iPad Air

• Targeting Satellite? CISA, FBI Warns of Attacks on SATCOM Network Providers

• Best encryption software 2022: Protect your data

• Best security camera 2022: Secure a home, inside and out

• DarkHotel APT Targets Wynn, Macao Hotels to Rip Off Guest Data

• Cyclops Blink malware sets up shop in ASUS routers

• Android Trojan Spotted in Multiple Applications on Google Play Harvesting User Credentials

• Emotet Malware Campaign Masquerades the IRS for 2022 Tax Season

• The IC’s 4-year emerging tech investment plan

• Teleworking DOD civilians may be recalled to in-person work

• Some states are making it harder to vote, some are making it easier – but it’s too soon to say if this will affect voter turnout in 2022

• Financial regulator says use of crypto helps—not hurts—ransomware investigations

• High-Severity Vulnerabilities Patched in BIND Server

• OpenSSL patches infinite-loop DoS bug in certificate verification

• Russian Hackers Allegedly Compromise Ukrainian News Sites, Displaying ‘Z’ Symbol

• A Third of Malicious Logins Originate in Nigeria

• Ugandan Writers Charged with Cyber Stalking President

• Written IT Security Policies: Why You Need Them & How to Create Them

• Security Teams Struggle to Get Started With Zero Trust

• Sandworm APT Hunts for ASUS Routers with Cyclops Blink Botnet

• JavaScript apps hit with pro-Ukraine supply chain attack

• Satellite Networks Worldwide at Risk of Possible Cyberattacks, FBI & CISA Warn

• MacRumors Giveaway: Win a Custom Colored Magic Mouse and Magic Keyboard From ColorWare

• Chinese Tech Companies Deepen Roots in Russia in Spite of U.S. Sanctions

• Mobile App Data Found Exposing API’s & Data In 1,000’s Of Cloud Databases

• VA plans new health record deployments, despite critical watchdog reports

• Arkansas Sues Health System for Abandoning Patient Files

• CISA Adds 15 Known Exploited Vulnerabilities, Expert Weighs In

• A Worldwide Fraud Campaign Used Targeted Links to Rob Millions of Dollars

• An Entry-Level Cybersecurity Certification: Why Every Employer Should Want Their Staff to Have One

• Igniting Adoption of a Secure Software Development Lifecycle – A Guide for Secure Software Champions

• DevSecOps code process

• US Critical Infrastructure Targeted by AvosLocker Ransomware

• Netflix to Charge Password Sharers

• Hackers Target Bank Networks with new Rootkit to Steal Money from ATM Machines

• Apple Highlights iPad Air M1 Chip, Colors and Other Features in New Ad

• How to protect RDP

• Satellite jamming by Russia leads to aircraft rerouting in Europe

• Why Ransomware Attacks Steer Clear of the Cloud

• CynergisTek Will Host Conference Call on Thursday, March 24, 2022, To Discuss Fourth-Quarter and Full-Year 2021 Financial Results

• Online Safety Bill’s provisions for “legal but harmful” content described as “censor’s charter”

• Exotic Lily is a business-like access broker for ransomware gangs

• Caketap, a new Unix rootkit used to siphon ATM banking data

• Best Custom PC Builder Websites for Building PC in 2022

• PwnKit, or How 12-Year-Old Code Can Give Root To Unprivileged Users

• Google Analyzes Activity of ‘Exotic Lily’ Initial Access Broker

• Cisco Secure Endpoint goes Pro

• Agencies Aware Of Hacking Threats To US, Allied Satellite Networks

• Google Blows Lid Off Conti, Diavol Ransomware Ops

• SAP Community Website Leaks Member Data To Savvy Users

• Why We Haven’t Seen Debilitating Cyberwar In Ukraine

• Attacks Are Crippling Russian Government Websites

• Linux Patch Management Primer – Challenges, Pros, and Cons

• Deepfake Zelenskyy video surfaces on compromised websites

• Google Blows Lid Off Conti, Diavol Ransomware Access-Broker Ops

• TransUnion Confirms Data Breach at South Africa Business

• CRI-O Security Update for Kubernetes

• Red TIM Research (RTR) team discovers a bug on Ericsson Network Manager

• Regulatory compliance at scale with Red Hat Insights

• CRI-O Security Update for Kubernetes

• Lock Adapter to Secure Mac Studio Coming Soon

• AWS To Spend £1.8bn On UK Data Centres

• Cyber Threats and The Ukraine Conflict | Avast

• Cygna Labs completes acquisition of Diamond IP for added security expertise

• The Road Ahead for Cyber and Infrastructure Security

• Lawmakers traded defense, energy and cybersecurity stocks ahead of Russia’s Ukraine invasion

• Meet the Young Women Tackling Gender Bias in Cybersecurity

• How to Protect Yourself from March Madness Scams

• Best security camera 2022: Secure your home, inside and out

• Gh0stCringe RAT Targeting Database Servers in Recent Attacks

• Apple Studio Display Runs Full Version of iOS 15.4

• Mac Studio and Studio Display Now Available for Same-Day Pickup at Select Apple Stores

• Deals: Shop Record Low Prices on iPad Mini, Apple Watch Series 7, and iPad Pro Magic Keyboard

• CISOs face ‘perfect storm’ of ransomware and state-supported cybercrime

• Experts Find Some Affiliates of BlackMatter Now Spreading BlackCat Ransomware

• Russia-linked Cyclops Blink botnet targeting ASUS routers

• 5 Actions to Comply with NCSC’s New BYOD Rules

• 76,000 online scams taken down after tip-offs, but hacking incidents still on the rise

• CISA and FBI warn over threats to satellite communications networks

• Franchises, partnerships emerge in Ransomware-as-a-Service operations

• SATCOM Cybersecurity Alert Issued as Authorities Probe Possible Russian Attack

• LG Working to Bring OLED Displays to Future iPad and MacBook Models

• Porsche Considering ‘Exciting’ Joint Projects With Apple

• 76,000 scams taken down through email reporting

• US Critical Organizations Alerted of Threats to SATCOM Networks by CISA and FBI

• SAP community website leaks member data to savvy users

• Ofcom Revokes RT’s Broadcast Licence

• Australia Sues Meta Over Facebook Scam Adverts

• Top 9 Git Secret Scanning Tools for DevSecOps

• Aircraft Disrupted by Satellite Jamming Following Russian Invasion

• Cyclops Blink Malware Expands to Target Asus

• NCSC Launches Awareness Campaign to Strengthen Password Practices

• Conti Leaks Reveal the Ransomware Group’s Links to Russia

• Why Vaccine Cards Are So Easily Forged

• New “initial access broker” working with Conti gang

• The TTPs of Conti’s initial access broker

• Ofcom Revokes RT’s Broadcast Licence

• Australia Sues Meta Over Facebook Scam Adverts

• Top 9 Git Secret Scanning Tools for DevSecOps

• Cloud-Based Email Threats Surge 50% in 2021

• Aircraft Disrupted by Satellite Jamming Following Russian Invasion

• Cyclops Blink Malware Expands to Target Asus

• Russia facing severe IT crisis with data storage, cyber security and other software issues

• FBI sets up a Virtual Assets Unit to stop cyber crime

• Phishers exploit Ukraine conflict to solicit crypto

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• CISA Has Added 15 New Flaws to the List of Actively Exploited Vulnerabilities

• Google Uncovers ‘Initial Access Broker’ Working with Conti Ransomware Gang

• New infosec products of the week: March 18, 2022

• Microsoft releases open-source tool for checking MikroTik Routers compromise

• Why EDR is not sufficient to protect your organization

• How prepared are organizations to face a ransomware attack on Kubernetes?

• Top 5 myths businesses believe about bots

• The problem with multiple cloud security tools: Alert fatigue and burnout

• New Variant of Russian Cyclops Blink Botnet Targeting ASUS Routers

• How to build and retain a strong IT team

• IoT in manufacturing market to reach $87.9 billion by 2026

• Semperis Wins Frost & Sullivan’s Competitive Strategy Leadership Award for Global Active Directory Security and Recovery Industry Excellence

• Lenovo Study: Three in Five CIOs Would Replace Half or More of Their Current Technology If Given Opportunity

• The Dilemma of Defense in Depth

• Catching up with Kaleb Worku, 2020 KnowBe4 Black Americans in Cybersecurity Scholarship Recipient

• Working with MSSPs to optimize XDR

• NSW Supreme court orders local elections impacted by iVote failure to be recast

• Swissbit iShield FIDO2 protects access to applications and online services

• Progress WhatsUp Gold reduces the risk of threat actors and infrastructure compromise

• Actiphy ActiveVisor v.7 monitors overall system protection of the backup source PCs

• Infobip introduces SMS and WhatsApp messaging for Adobe Commerce clients

• ZPE Systems and TD SYNNEX join forces to address modern business demands

• Best Bluetooth tracker 2022: AirTag and other alternatives

• All in a day’s work: Google details Exotic Lily access broker for ransomware gangs

• Tech execs could face jail time under revised UK Online Safety Bill

• Cymulate partners with New York University to offer offensive and continuous security validation training

• NTT collaborates with Schneider Electric to launch Private 5G network trial

• Philips partners with SecureLink to protect healthcare systems from sophisticated cyber threats

• node-ipc NPM Package sabotage to protest Ukraine invasion

• Netrix acquires Edrans to expand portfolio of public cloud solutions

• Platform9 hires Vishwa Kapadia as CPO

• Raytheon Technologies names Barbara Borgonovi as SVP of Corporate Strategy & Development

• David Stoicescu joins Deepwatch as CISO

• How to use the Gartner® 2022 Strategic Roadmap for Data Security Platform Convergence

• UJET expands global operations and announces new hires

• Pro-Ukraine ‘Protestware’ Pushes Antiwar Ads, Geo-Targeted Malware

• 6 Reasons Not to Pay Ransomware Attackers

• IT Security News Daily Summary 2022-03-17

• Facebook Removes Viral Deepfake Video Of Ukrainian President

• Strengthening Cybersecurity of SATCOM Network Providers and Customers

• Apple Using Streamlined Purchase Process for T-Mobile and AT&T iPhone SE Buyers

• First Mac Studio and Studio Display Orders Begin Arriving to Customers in Australia and New Zealand

• Pentagon releases JADC2 implementation plan

• North Carolina launches cybersecurity task force

• ThreatMapper Updated With New Scanning Tools

• Strengthening Cybersecurity of SATCOM Network Providers and Customers

• Ukranian News Channel Hacked to Run Deepfake video of President Zelensky

• Report: Bots cost businesses millions of their online revenue

• OMB kicks off search for new deputy federal CIO

• Intel launches research, education grant program for Ohio chip manufacturing

• Best Bluetooth tracker 2022: Never lose your keys again

• What Microsoft Defender Antivirus features are on Windows?

• Facebook, YouTube Remove Zelensky Deepfake Video

• Cybersecurity has 53 unicorns. Here are 10 to watch

• Has Trickbot gang hijacked your router? This scanner may have an answer

• The HP cybersecurity acquisition made for a world of increasing malware threats

• Has Trickbot gang hijacked your MikroTik router? This scanner may have the answer

• Lawmakers want answers on FOIA backlogs

• M1 Ultra Doesn’t Beat Out Nvidia’s RTX 3090 GPU Despite Apple’s Charts

• VT4Browsers++ Any indicator, every detail, anywhere

• Why You Need Both IT and OT Cybersecurity

• How to neutralize security threats to your cloud native applications (VB On-Demand)

• IARPA project aims to identify people from drones by more than just their face

• Nok Nok Labs Unveils S3 Authentication Suite

• Firefly Announces Release of ValidIaC Open Source Solution

• Microsoft Data Centre Region In Finland To Heat Nearby Cities

• Dev Sabotages Popular NPM Package to Protest Russian Invasion

• Sandworm APT ramps up Cyclops Blink botnet with Asus routers

• Glasswall Launches Freemium Version of its Desktop Content Disarm and Reconstruction App

• Titaniam Announces Completion of Product Suite

• Cloudflare Announces API Gateway

• Saint Patrick’s Day Deals: Save on Apple-Related Accessories From Mophie, Satechi, Casely, More

• Sony’s New LinkBuds vs. Apple’s AirPods 3

• Network Security 101 – Definition, Types, Threats, and More

• Flipped procurement gives city easy access to innovative solutions

• Todyl Banks $28M Series A Investment

• Russian Court Overturns Import Ban On Samsung Smartphones

• Upcoming EU Sideloading Bill Would ‘Cripple the Privacy and Security Protections’ iPhone Users Expect, Says Apple

• Got rats? These cities trap ’em and zap ’em

• Best DevSecOps Tools

• UKG Faces Payroll Violations Class Action Lawsuit in Multiple U.S. District Courts

• VA’s new health record still putting patients at risk

• Apple Executives Discuss How Mac Studio Fills the Gap Between iMac and Mac Pro

• Forrester positions KnowBe4 as a leader in security awareness and training solutions

• Eugene Kaspersky Labels BSI Decision ‘Unfair, And Outright Wrong’

• Ukrainian Secret Service Arrested Hacker Helping Russian Troops

• Hundreds of GoDaddy’s Managed WordPress Sites Infected With Same Backdoor Payload

• Microsoft Releases Open Source Tool for Securing MikroTik Routers

• LokiLocker ransomware crew bursts onto the scene

• Phishers Using Ukraine Invasion to Solicit Cryptocurrency

• Stopping Russian Cyberattacks at Their Source

• Anonymous continues to support Ukraine against the Russia

• The Chatter Podcast: Arctic Security and Cooperation with Marisol Maddox

• Letter to Iran, Regarding the Regulatory System for Cyberspace Services Bill

• EFF Tells E.U. Commission: Don’t Break Encryption

• Dell Technologies Hit Record Full-Year Revenue of $101.2 Billion, up 17%

• Meta shares how it detects silent data corruptions in its data centres

• Software Supply Chain Weakness: Snyk Warns of ‘Deliberate Sabotage’ of NPM Ecosystem

• FBI Launches Virtual Assets Unit

• China’s Government Is Learning From Russia’s Cyberattacks Against Ukraine

• LG’s UltraFine 5K Display Will Be Returning as Alternative to Apple’s Studio Display

• A Leader in multiple Zero Trust security categories: Industry analysts weigh in

• Women in Cyber Webinar – Tackling Gender Bias and Defining Success

• SpecterOps BloodHound Enterprise Now Supports Attack Path Management for Microsoft Azure

• Maximus Names Scott Barr as Senior Vice President for Federal Consulting

• ISO 27002 2013 to 2022 mapping

• 5 Threat Intelligence Trends

• Russian Cyclops Blink Botnet Launches Assault Against Asus Routers

• CafePress Fined For Covering Up 2019 Customer Info Leak

• Misconfigured Firebase Databases Exposing Data In Mobile Apps

• Hackers Provide Livestream Of Dozens Of Cameras Inside Russia

• Be Ready To Lose All Your Money In Crypto, EU Regulators Warn

• Several QNAP NAS Devices are Vulnerable by Dirty Pipe Linux Bug

• Thousands of Secret Keys Discovered in Leaked Samsung Source Code

• Malware threat alert for websites hosted on GoDaddy

• Ditching LastPass? Here are some alternatives to try

• As tax deadlines approach, Emotet malware disguises itself in an IRS email

• Apple-Backed ‘Matter’ Smart Home Standard Again Delayed Until Fall 2022

• Senate Banking Committee holds hearing on crypto and illicit finance

• Government Introduces Amended Online Safety Bill

• These four types of ransomware make up nearly three-quarters of reported incidents

• Cequence Security Report Reveals Top 3 API Attack Trends, Expert Weighs In

• Expert Insight On New Features Released By Instagram To Protect Young Users

• New Linux Botnet Exploding Log4J, DNS Tunnelling Used To Conceal Comms Traffic

• Misconfigured Firebase Databases Exposing Data in Mobile Apps

• US Passes “Game-Changing” Cyber Incident Reporting Legislation

• Apple Studio Display Reviews: ‘A Confounding Miss’

• PSA: Studio Display Power Cable is Non-Removable

• Apple Says Improvements to Studio Display’s Webcam Coming in Software Update After Several Poor Reviews

• CSO Says “New LokiLocker Ransomware Is An Identity Problem”

• FTC Fines CafePress After Data Breach – Expert Reaction

• Gh0stCringe RAT makes database servers squeal for protection

• Top 5 Cybersecurity Podcasts to Follow in 2022

• Most NASA Systems at Risk From Insider Threats: Audit

• SolarWinds Warns of Attacks Targeting Web Help Desk Users

• S3 Ep74: Cybercrime busts, Apple patches, Pi Day, and disconnect effects [Podcast]

• Cut Down on Alert Overload and Leverage Layered Security Measures

• Russian Cyclops Blink botnet launches assault against Asus routers

• Microsoft: Here’s how this notorious botnet used hacked routers for stealthy communication

• Reporting Mandates to Clear Up Feds’ Hazy Look into Threat Landscape – Podcast

• Popular NPM Package Updated to Wipe Russia, Belarus Systems to Protest Ukraine Invasion

• macOS Monterey 12.3 Update Bricking Macs That Have Had Logic Board Replacements

• Deals: Take $250 Off Apple’s 14-Inch MacBook Pro With All-Time Low Prices

• Mac Studio Reviews: Faster Than a $13,000 Mac Pro

• Clouding the issue: what cloud threats lie in wait in 2022?

• How CAPTCHAs can cloak phishing URLs in emails

• NIST Releases ICS Cybersecurity Guidance for Manufacturers

• The Golden Hour of Incident Response

• DirtyMoe Botnet Gains New Exploits in Wormable Module to Spread Rapidly

• Ukraine SBU arrested a hacker who supported Russia during the invasion

• Selective Service Reform AWOL in 2022 NDAA (again); What Happens Now?

• FBI catches up with one of its Most Wanted, arrests head of advance-fee crime network

• How is the CISSP-ISSMP Exam Changing?

• Cloudflare and CrowdStrike partner to accelerate shift to zero trust security

• Cyber Security Takeover May Harm Competition: UK Regulator

• ‘LokiLocker’ Ransomware Packs Data Wiping Capabilities

• Public and Private Sector Security: Better Protection by Collaboration

• Enhancing DLP With Natural Language Understanding for Better Email Security

• WordPress Releases Security Update

• Reputable Analyst Doubles Down on Claim Apple Will Unveil 27-inch Mini-LED Product in June

• Mobile apps are exposing your data

• New ransomware threatens to wipe Windows PCs

• Gh0stCringe Malware Impacts Unsecured Microsoft SQL, MySQL Servers

• Death of the Password? FIDO Alliance Reveals Its New Plan

• WordPress Releases Security Update

• Trickbot uses compromised MikroTik routers as C2 communication proxies

• SolarWinds Issues Warning on Possible Web Help Desk Instances Attacks

• Brit data regulator fines five cold-calling fiends £405k

• ‘Everyone loses’: This new ransomware threatens to wipe Windows PCs if its victims don’t pay up

• Cloudflare debuts Friendly Bot validation service

• Raspberry Pi Users Urged to Change Default Passwords as Attacks Surge

• Conversation Hijacking Soars 270% to Enable BEC

• Landmark Online Safety Bill Introduced to UK Parliament

• Conti Leak: A Ransomware Gang’s Chats Expose Its Crypto Plans

• TrickBot Malware Abusing MikroTik Routers as Proxies for Command-and-Control

• B1txor20 Linux botnet use DNS Tunnel and Log4J exploit

• “Change Password”

• 5G iPhone SE Shipments Expected to Reach Up to 30 Million Units This Year

• Ex CafePress owner fined $500,000 for ‘shoddy’ security, covering up data breach

• Russia Uses Deepfake of Zelensky to Spread Disinformation

• Disability service provider suffers cyber-attack

• Your mobile apps are exposing your data

• Netflix To Start Charging For Password Sharing

• Ex CafePress owner fined $500 million for ‘shoddy’ security, covering up data breach

• TrickBot Malware Abusing Hacked IoT Devices as Command-and-Control Servers

• Alleged iPhone 14 CAD Renders Reveal Virtually No Design Changes With Same Notch and Rear Camera Design

• Apple Peek Performance Review – Intego Mac Podcast Episode 231

• Crypto fundraising for Ukraine found on the Darknet, used by cyber criminals for fraud

• Meta faces $19m fine over Data Breach

• UK Markets authority concerned about NortonLifeLock and Avast acquisition deal

• Ukraine Secret Service Arrests Hacker Helping Russian Invaders

• Do you know what your supply chain is and if it is secure?

• Hacking Robots: The Future of Production Poses a Security Risk

• Critical Remote Code Execution Vulnerability Found In Parse Server

• FBI Warns that Hackers Gain Network Access by Exploiting MFA and “PrintNightmare” Vulnerability

• New Vulnerability in CRI-O Engine Lets Attackers Escape Kubernetes Containers

• How to plan for increased security risks resulting from the Great Resignation

• Top data governance challenges and strategies for high-growth startups

• Google could ask for your licence or passport on YouTube and Google Play in Australia

• Four key risks exacerbated by Russia’s invasion of Ukraine

• Healthcare cybersecurity trends: Organizations not quite ready to deal with threats

• CDEK (unverified) – 19,218,203 breached accounts

• Severity of mobile threats rising, 10+ million mobile endpoints impacted

• Attackers have come to love APIs as much as developers

• Realizing the importance of data literacy

• Fortanix Supports Government Agencies to Bolster Federal Data Security with Confidential Computing

• CSC Unveils 3D Domain Monitoring Solution on DomainSec℠ Platform

• Former FBI Cyber Agent, Author and Keynote Speaker Scott Augenbaum Headlines New Cybersecurity Webinar Series on “Building The Zero Trust Concept” Hosted by Cyemptive Technologies

• (ISC)² PULSE SURVEY: LOG4J REMEDIATION EXPOSES REAL-WORLD TOLL OF THE CYBERSECURITY WORKFORCE GAP

• BlackCat ransomware

• To Governance and Beyond: Cybersecurity as a Journey

• IaaS market to grow steadily by 2031

• Indonesian Interbank Network Giant, ALTO, Adds ACI Worldwide Fraud Management to Enhance National Payment Experience

• Devil-may-care Lapsus$ gang is not the aspirational brand infosec needs

• CSC 3D Domain Monitoring enables enterprises to identify suspicious domains created by third parties

• Deepfence ThreatMapper 1.3.0 allows users to scan workloads and hosts for sensitive secrets

• Codenotary Cloud enhancements provide end-to-end software supply chain security

• Cloudflare API Gateway increases security of devices and systems for enterprise customers

• Ostrich Cyber-Risk Birdseye identifies organization’s financial and operational risks

• Russia may aspire to a China-style internet, but it’s a long way off

• Cyclops Blink Sets Sights on Asus Routers

• Motorola Solutions Video Intercom Pro enhances building security for organizations

• Cisco and NetApp introduce FlexPod XCS to increase hybrid cloud connectivity

• IDnow partners with Interpol to share expertise via global training programmes

• Noname Security collaborates with HighPoint to offer API security solutions for businesses

• Eric Hanson joins OneSpan as CMO

• Invicti Security appoints Steven Fitz as CRO

• CSW acquires CYR3CON IP to provide organizations with predictive insights into exploitable vulnerabilities

• Booz Allen Hamilton acquires EverWatch to accelerate analytics capabilities for clients

• Top Security Orchestration, Automation and Response (SOAR) Solutions for 2022

• Kion appoints Brad Herold as SVP of Sales

• Zilla Security hires Melodye Mueller as CMO

• Simple Tips to Protect Youself From Being Catfished

• CodeHunter Enterprise pilot program provides early access to its automated malware hunting platform

• Anomali releases Resilience Partner Program to meet growing demand for cybersecurity services

• Coralogix launches Snowbit to help companies monitor their entire cloud environment’s security

• Joseph Feiman joins Avocado as CSO

• NSW confirms iVote system will be scrapped for next year’s state election

• TAC Security Survey Reveals: 88% of Businesses Rely on Manual Processes to Identify Network Vulnerabilities

• How Pen Testing Gains Critical Security Buy-in and Defense Insight

• Russia’s disinformation uses deepfake video of Zelenskyy telling people to lay down arms

• IT Security News Daily Summary 2022-03-16

• 4 Critical Capabilities for a SaaS Security Posture Management (SSPM) Solution

• Google I/O to Take Place in May, Will Once Again Be Online

• CafePress fined for covering up 2019 customer info leak

• IOCs vs. IOAs — How to Effectively Leverage Indicators

• How NVMe storage powers government analytics

• CISA adds 15 new flaws to the Known Exploited Vulnerabilities Catalog

• The Federal Bureau of Investigation and Foreign Intelligence Collection

• “Threatening and coercive” cold-callers who targeted the elderly hit with big fines

• LokiLocker ransomware family spotted with built-in wiper

• Identity Protection Service: The Best Solution to a Growing Problem

• Is low-code safe and secure?

• GSA’s DUNS replacement set to go live

• FTC accuses CafePress of covering up 2019 data breach

• What the Newly Signed US Cyber-Incident Law Means for Security

• Microsoft the No. 1 Most-Spoofed Brand in Phishing Attacks

• You Should Not Trust Russia’s New “Trusted Root CA”

• New LokiLocker ransomware family includes wiper function

• Facebook Will Finally Add Parental Supervision Tools To VR Apps

• Why the Future of Threat Detection and Prevention is Unified Security and Risk Analytics

• Tips And Trends for OT Cybersecurity In 2022: More SOAR, Cyber Hygiene And Renewed Compliance

• Soldiers, Statesmen and Cyber Crises: Cyberspace and Civil-Military Relations

• The Seizure of a Russian Merchant Vessel Raises Questions About High Seas Freedoms

• JWT Authentication and Authorization

• Tesla Halts Production At Shanghai Factory, Amid Covid Outbreak

• City makes cross-agency data sharing easier

• Solve city IT problems in AWS cloud education game

• Biden signs law on reporting critical infrastructure cyber attacks

• A tribute to the Voice of America

• IRS plans to add 200 technologists

• Linux botnet exploits Log4j flaw to hijack Arm, x86 systems

• Netflix Testing Add-On Payment for People Who Share Accounts Outside Their Households

• Linux botnet exploits Log4j flaw to pwn Arm, x86 systems

• Utimaco launches u.trust Data File completing its Data Protection Portfolio

• Sioux Falls Funds DSU Cybersecurity Lab

• ‘CryptoRom’ Crypto-Scam is Back via Side-Loaded Apps

• Avast Merger Raises Competition Concerns

• Irish Watchdog Fines Meta $19m Over Data Breach

• Supply chain data-sharing pilot aims to ease shipping bottlenecks

• Russia State-Sponsored Hackers Used Misconfigured MFA to Breach NGO

• Breaking RSA through Insufficiently Random Primes

• Fraudsters Use Intelligent Bots To Attack Financial Institutions

• RSA Sells Conference To Become Standalone Business

• The 300,000 Volunteer Hackers Coming Together To Fight Russia

• OpenSSL Patches Crash-Me Bug Triggered By Rogue Certs

• Most QNAP NAS Devices Affected By Dirty Pipe Linux Flaw

• Updating the Universal Prompt: Collaboration, Simplification and Democratizing Security

• This Linux Flaw in Netfilter Firewall Module Enables Attackers Gain Root Access

• Google Authenticator Codes for Android is Targeted by Nefarious Escobar Banking Trojan

• Automotive Components Supplier Denso Targeted by Pandora Ransomware Group

• CELEBRATING YOUNG WOMEN IN CYBERSECURITY – WEIJIA YAN, (ISC)² UNDERGRADUATE SCHOLARSHIP RECIPIENT

• ​​​​​​​Staying safe online when you live off-grid

• HackerOne Apologized to Ukrainian Hackers After Blocking their Bounty Payouts

• Another Destructive Wiper Targets Organizations in Ukraine

• Hackuity Emerges From Stealth With $13 Million in Funding

• Apple Releases Security Updates for Multiple Products

• Manage subject rights requests at scale with Microsoft Priva

• Cider Security Publishes New Research Identifying the Top 10 CI/CD Security Risks

• Audubon Engineering Company Promotes David Robison to CEO

• NortonLifeLock, Avast Merger Faces UK Competition Probe

• 16 Ways to Stay Safe While Online Shopping

• NSA and CISA: Here’s how to improve your Kubernetes cluster security

• Google Patches Critical Vulnerability With Chrome 99 Update

• Beware bogus Betas – cryptocoin scammers abuse Apple’s TestFlight system

• Apple Releases Security Updates for Multiple Products

• Russia Kaspersky to be banned in Germany

• Russia-linked attackers breach NGO by exploiting MFA, PrintNightmare vuln

• Google Releases Security Updates for Chrome

• Deals: Apple Watch Series 7 Models Discounted by $50, Starting at $349 for 41mm GPS

• Kuo: Mini-LED Versions of 11-Inch iPad Pro and Studio Display Unlikely This Year

• Uncovering Trickbot’s use of IoT devices in command-and-control infrastructure

• BMW Blames Russian Invasion, As It Lowers Profit Forecast

• This sneaky type of phishing is growing fast because hackers are seeing big paydays

• US military vs. Silicon Valley – a cultural divide

• CISA Adds 14 Windows Vulnerabilities to ‘Must-Patch’ List

• Google Releases Security Updates for Chrome

• Cybellum joins Health-ISAC Navigator Program to provide security services for the healthcare industry

• Secure your APIs with Private Link support for Azure API Management

• CafePress faces $500,000 fine for data breach cover up

• Banking Trojan ‘Escobar’ replaces ‘AbereBot’ With New Capabilities

• Cloudflare Announces New Security Tools for Email, Applications, APIs

• New “B1txor20” Linux Botnet Uses DNS Tunnel and Exploits Log4J Flaw

• iPad Air 5 Reviews: Great Value With M1 Chip at $599 Starting Price

• Over 500 Domains Were Used in Phishing Operation to Steal Credentials

• A MAP for Kubernetes Supply Chain Security

• Integrating IAM and SIEM to Boost Event and Anomaly Detection

• iPhone, Android users lose life savings to romance fraud, cryptocurrency operation

• Would ‘Cyber Geneva Conventions’ Defuse Online Aggression?

• New Infinite Loop Bug in OpenSSL Could Let Attackers Crash Remote Servers

• Unpatched RCE Bug in dompdf Project Affects HTML to PDF Converters

• FBI, CISA Warn of Russian Hackers Exploiting MFA and PrintNightmare Bug

• Russia-linked threats actors exploited default MFA protocol and PrintNightmare bug to compromise NGO cloud

• First Alleged CAD Renders of iPhone 14 Pro Show Pill-Shaped and Circular Cutouts Replacing Notch

• Cloudflare aims to boost API security with new gateway

• Severe Vulnerability Patched in CRI-O Container Engine for Kubernetes

• How Should My Security Analyst Use the MITRE ATT&CK Framework?

• Report: Payment Fraud Attacks Against Fintech Companies Soar By 70% In 2021

• Expert Comment: Facebook Fined $18.6M Over String Of 2018 Breaches Of EU’s GDPR

• New Linux Botnet Discovered

• Android Trojan On the Google Play Store With Over 500,000 Installs Steals from Notifications

• Senators Ask DHS About Efforts to Protect US Against Russian Cyberattacks

• US Warns About Russian Attacks Exploiting MFA Protocols, PrintNightmare Flaw

• CISA warning: “Russian actors bypassed 2FA” – what happened and how to avoid it

• What Kind Of Security Tools Should I Provide My Developers?

• Continuity and recovery on the path towards resiliency

• Telco Co-ordination Required For Newly Implemented Three-factor Authentication To Occur Without Disruption

• Valorant cheats on YouTube are actually information-stealing malware

• Germany’s Cyber Agency BSI Warns Against Kaspersky AV

• Cybersecurity M&A Roundup for March 1-15, 2022

• QNAP Warns Severe Linux Bug Affects Most Of Its NAS Devices

• Israel Government Hit By Cyber Attack

• Hackers Spread BazarBackdoor Malware Via Website Contact Forms

• CISA and FBI warning: Hackers used these tricks to dodge multi-factor authentication and steal email from NGO

• UK regulator puts NortonLifeLock merger with Avast on ice

• iPhone Maker Foxconn Restarts Production in Shenzhen As Lockdown Partially Lifts

• Meta Fined $19m For 2018 Data Breach

• Fake Royal Mail chatbot offers up…a new iPhone?

• Cloud Services Under Attack: Closing the Virtual Open Doors to Cyber Crime

• The Workaday Life of the World’s Most Dangerous Ransomware Gang

• German government warns against using Kaspersky

• Tesla Raises Prices For Second Time In Days

• Germany Warns Against Russia’s Kaspersky Anti-Virus Software

• Thousands of Mobile Apps Expose User Data Via Cloud Misconfigurations

• Cyber Threat to SWIFT Banking System

• Google introduces Context-Aware Cyber Threat detection to Chronicle

• Kaspersky Hits Back at “Politically Motivated” BSI Advisory

• CISA: Fix MFA and Patch Promptly to Stop Russian Attackers

• Almost 300k cardiac patients have data exposed

• Build your own Android security product

• German Government Warns Against Using Russia’s Kaspersky Antivirus Software

• Multiple Flaws Uncovered in ClickHouse OLAP Database System for Big Data

• (IN)SECURE Magazine issue 71 released

• Will vacancies create security voids?

• Hacker breaches key Russian ministry in blink of an eye

• How to build a security tool that sells

• Why a modern vulnerability management strategy requires state-of-the-art solutions

• Facebook Hit With $18.6 Million GDPR Fine Over 12 Data Breaches in 2018

• Attackers using default credentials to target businesses, Raspberry Pi and Linux top targets

• Salesforce sued in attempt to block release of Capitol riot info

• 2022-03-14 – Emotet epoch4 and epoch5 activity

• 2022-03-16 – Pcap and malware for an ISC diary (Qakbot)

• Australia’s big four banks tackling cybersecurity with a team sport mentality

• How fast can organizations respond to a cybersecurity crisis?

• Biden legitimizes cryptocurrency with regulatory exploration

• Take a walk on the client side: The importance of front-end JavaScript security assessments

• Australia’s cyber laws potentially harmful to security: Critical Infrastructure community

• Perimeter intrusion detection systems market to reach $5.98 billion by 2026

• Phony Instagram ‘Support Staff’ Emails Hit Insurance Company

• Protegrity Data Protection Platform 9.0 enhances security and data-sharing

• InterSystems HealthShare Health Connect Cloud accelerates critical healthcare data integration

• On-demand webinar: Demystifying zero trust to protect connected assets in OT

• How Tripwire Log Center and Tripwire Industrial Visibility Can Work Together

• Juniper Apstra platform enhancements simplify operations of data center networks

• Zumigo deRiskify verifies mobile and payment card ownership identity for all transactions

• Contrast Security adds software supply chain security capabilities to its Secure Code Platform

• Incognia introduces fraud prevention module offerings to detect sophisticated spoofing techniques

• The Windows malware on Ukraine CERT’s radar

• Spectro Cloud Palette Edge enables IT teams to operate Kubernetes application stacks at edge locations

• China’s internet regulator squeezes famously freewheeling Reddit-alike

• China’s internet regulator moves on famously freewheeling social network

• “Russian actors bypass 2FA” warning – what happened and how to avoid it

• Kaspersky complains about ‘political’ German advisory against it

• Irish Regulator Fines Facebook for Privacy Law Violations

• German Authorities Warn Against Using Kaspersky Products

• Hackuity emerges from stealth and raises €12 millions to improve security posture for organizations

• CyberRes acquires Debricked to expand software supply chain security

• Finite State hires Gün Akkor as CTO and Kirk Appelman as EVP of Sales

• Cyberterrorism: Governments, not tech companies, must lead the defense

• CVE-2022-0778 DoS flaw in OpenSSL was fixed

• Napier expands EMEA footprint to help clients through digital transformation

• Fortress Information Security’s new Trust Center allows suppliers to share cybersecurity information

• iProov launches Global Partner Program to maximize online security

• Radiant Logic adds three members to its Board of Directors

• CrowdStrike CEO: Cyberattacks are on the rise as hackers use Russia-Ukraine war as a distraction

• IT Security News Daily Summary 2022-03-15

• Russian hackers exploited MFA and ‘PrintNightmare’ vulnerability in NGO breach, U.S. says

• White House order covers contractor pay equity

• Twitter concerned Australia’s anti-trolling Bill leaves minority communities vulnerable

• No rational basis: Defamation law expert says Australia’s anti-trolling Bill should be canned

• Private Equity Firm Snaps Up RSA Conference

• A sustainable look at secure device destruction

• How endpoint encryption works in a data security strategy

• DDoS barrage against Israel described as the “largest ever” cyberattack its faced

• Escobar is the new Android banking Trojan we’ve met before

• NAS Vendor Says Several of Its Products Likely Contain Linux ‘Dirty Pipe’ Flaw

• CISA Adds 15 Known Exploited Vulnerability to Catalog

• Some Apple Park Employees Evacuated Due to Possible Hazmat Situation

• Samsung’s Galaxy Tab S8 Ultra vs. Apple’s iPad Pro

• Wedbush’s Dan Ives calls Palo Alto stock a ‘table pounder’

• Update now! Apple fixes several serious vulnerabilities in iOS and macOS

• Anonymous cripples Russian Fed Security Service (FSB) & other top sites

• CaddyWiper: Third Wiper Malware Targeting Ukrainian Organizations

• SentinelOne acquires Attivo Networks for $617M

• Mobile App Developers Leave Behind 2,100 Open Databases

• CISA Adds 15 Known Exploited Vulnerability to Catalog

• Cyber Actors Bypassing Two-Factor Authentication Implementations

• How to Prevent Cyber Actors from Bypassing Two-Factor Authentication Implementation

• OpenSSL patches crash-me bug triggered by rogue certs

• Lawmakers mull updates to records management legislation

• Lucky Customer Receives Mac Studio Days Ahead of Schedule

• Palo Alto Networks CEO: I’ve never been worried about cybersecurity more than now

• Nasty Linux netfilter firewall security hole found

• Cyberattacks Against Israeli Government Sites: ‘Largest in the Country’s History’

• SentinelOne acquires Attivo Networks for identity-based threat detection

• High-Severity DoS Vulnerability Patched in OpenSSL

• Microsoft Azure DevOps revives TLS 1.0/1.1 with rollback

• Intel Confirms ‘Mega Factory’ In Germany

• Google Chronicle adds ‘context-aware’ cyber threat detection

• Securing communications infrastructure from traffic-routing risk

• Infosec news cycles: How quickly do they fade?

• 2021 Malware and TTP Threat Landscape

• SentinelOne pays $617m for identity biz Attivo Networks

• Best Enterprise Mobility Management (EMM) Solutions for 2022

• Fortress Information Security’s New Trust Center Allows Suppliers to Bridge the Cyber Communication Gap with Patrons

• OneLayer Secures $8.2M Seed Round to Protect Private 5G Networks

• Praetorian Launches Chariot Total Attack Life Cycle Solution

• Incognia Introduces New Location Identity Fraud Detection Tools

• How Does Blockchain Impact the Financial Industry?

• UK Blocks Assange’s Extradition Appeal

• UK Supreme Court snubs Julian Assange’s anti-extradition bid

• SentinelOne to Acquire Attivo Networks for $616M

• Hackers Hit Rosneft

• CISA Updates Conti Ransomware Alert with Around 100 Domain Names

• Behavior-based vs IOC-based Threat Detection Approaches: How to Prioritize?

• Nearly 300k Heart Patients’ Data Exposed

• Targeted threat intelligence is key to protecting enterprises against cyberattacks

• XDR-driven security industry consolidation continues, with SentinelOne to acquire Attivo

• The Lapsus$ Hacking Group Is Off to a Chaotic Start

• Apple Stores Can Now Update Firmware on Second-Generation AirPods

• Stolen Nvidia certificates used to sign malware—here’s what to do

• Huge DDoS attack temporarily kicks Israeli government sites offline

• Massive DDoS attack on Israel government websites

• How to Build a Serverless API with Lambda and Node.js

• Senators ask DHS for strategy to protect U.S. critical infrastructure from Russia

• Most QNAP NAS Devices Affected by ‘Dirty Pipe’ Linux Flaw

• Apple patches 87 security holes – from iPhones and Macs to Windows

• Updated: Kubernetes Hardening Guide

• What Happened the Last Time Congress Amended § 230

• Reckless Associations: A New Tort for a New Information Ecosystem

• The Emotet Malware is Alive and Using TrickBot to Rebuild its Botnet

• One in Three Mid-Market UK Organizations Suffered from Attacker Outages in 2021

• Apple ups its mobile security by unlocking phones with masked faces

• Russia to launch offensive cyber attacks on UK

• Ukraine government firms now jostling with a new wiper malware variant

• What To Do If Your VPN is Hacked? 2022 Edition

• How to secure NetOps initiatives using Agile methodology

• Updated: Kubernetes Hardening Guide

• Critical flaws affect Veeam Data Backup software

• Veeam fixes critical RCEs in backup solution (CVE-2022-26500, CVE-2022-26501)

• Unpacking OMB’s federal strategy for implementing Zero Trust

• How to manage privileged users in IT

• Russia’s Roskomnadzor Hacked By Anonymous

• Germany advises citizens to uninstall Kaspersky antivirus

• Lawmakers Probe Early Release of Top RU Cybercrook

• CaddyWiper: More Destructive Wiper Malware Strikes Ukraine

• Another Data Leaking Spectre Bug Found, Smashes Intel, Arm Defenses

• Banks On Alert For Russian Reprisal Cyberattacks On Swift

• Researcher Uses 379-Year-Old Algorithm To Crack Crypto Keys

• Warning: Objects in driverless car sensors may be closer than they appear

• What Generation Z can teach us about cybersecurity

• QNAP Escalation Vulnerability Let Attackers Gain Administrator Privileges and Inject Malicious Code

• Best Practices to Secure Your API

• Targeted threat intelligence, key for protecting enterprises against cyberattacks

• Russian demand for VPNs skyrockets by 2,692%

• OneLayer Emerges From Stealth With $8.2M to Build Security for Private 5G Networks

• Smartproxy– An Intelligent Proxy Service

• Legacy System Modernization

• Vulnerabilities In Pascom Phone System Could Allow RCE Attacks

• By the Numbers: The Cost of Insider Data Breach vs The Cost of Protection

• ARM To Axe 15 Percent Of Staff, 1,000 Jobs To Go

• Phishing attempts against smartphones are on the rise. And those small screens aren’t helping

• Cowbell Cyber Raises $100M in Series B Funding to Further Develop Cyber-Risk Underwriting

• e2e-assure Launches New Microsoft Defender-Focused SOC Services

• watchOS 8.5 Fixes Mail Privacy Protection Loophole That Could Expose IP Addresses

• Deals: AirPods Max on Sale for $449 in Every Color ($100 Off)

• Kuo: Apple Car Team Must Be Reorganized Soon to Meet 2025 Production Goal

• It’s Not Fair, But Cyber Crime Is Cheap

• Julian Assange Denied US Extradition Appeal

• SentinelOne to Buy Attivo Networks in $616.5M Deal

• As Log4j Continues to Remind Us, What’s Old Is New Again

• Ukraine Using Clearview AI On Dead Russian Soldiers

• Scale Incident Response With Detection Engineering: Detect & Hunt with Intezer

• Selector, which develops AIops tools for networking monitoring, raises $28M

• Cloud security teams are ‘overwhelmed and desensitized’ by alerts, survey shows

• Coralogix launches XDR solution for securing cloud environments

• CaddyWiper: More destructive wiper malware strikes Ukraine

• The role of cloud services, public tools in the Russia-Ukraine cyber conflict

• UK criminal defense lawyer hadn’t patched when ransomware hit

• Over 200 Organizations Take Part in CISA’s Cyber Storm Exercise

• A Step-by-Step Guide to Cybersecurity Risk Assessment

• Israel Government Sites Targeted by Major Cyberattack

• 15 Best Laptops to Buy 2022 – Dell, Asus, LG, Acer, HP, Microsoft

• Pandora Ransomware Hits Giant Automotive Supplier Denso

• The Rising Importance of Research Communities for Industrial Cybersecurity

• Nearly 34 Ransomware Variants Observed in Hundreds of Cyberattacks in Q4 2021

• The German BSI agency recommends replacing Kaspersky antivirus software

• A lack of diversity in cybersecurity puts organisations at risk

• Cobalt Strike Deployed in Ukraine Through Fake AV Updates

• Thousands of Secret Keys Found in Leaked Samsung Source Code

• Cyber Insurance Firm Cowbell Raises $100 Million

• PSA: Universal Control and Sidecar Can Be Used At the Same Time in macOS 12.3

• “Dirty Pipe” Linux Flaw Affects a Wide Range of QNAP NAS Devices

• Cybersecurity attacks surge as Ukraine-Russia war rages on. Here’s how to protect yourself

• What Can Flexible Work Conditions Do for Cyber?

• Importance Of Data Protection In 2022

• Stellar Repair for Access

• How OneLayer plans to secure 5G networks

• CaddyWiper: Another Destructive Wiper Malware Targeting Ukraine

• Israeli Government Websites Taken Offline in Large-Scale Cyber-Attack

• Dirty Pipe Linux flaw impacts most QNAP NAS devices

• Privacy Expert On Fake Valorant Cheats On YouTube Infect You With RedLine Stealer

• South Denver Cardiology Associates Discloses Data Breach Affecting 287,000 Patients

• 60% Of Mid-sized Indian Firms Faced 2021 Data Breach, Expert Reaction

• What Caused The Ransomware Attack On Toyota? Experts Insight

• Financially motivated threat actors willing to go after Russian targets

• Toyota To Cut Production By As Much As 20 Percent

• What Is a Crypto Wallet and How to Keep Your Wallet Secure?

• US Critical Infrastructure Companies Will Have to Report When They Are Hacked

• UK Announces Plans For Digital ID Scheme

• Mobile Devices See 466% Annual Increase in Zero-Day Attacks

• Stop Neglecting Your Cloud Security Features: Check Point Research Found Thousands of Open Cloud Databases Exposing Data in the Wild

• Demand For VPNs In Russia Surges After Facebook, Instagram Block

• Cybersecurity tops agenda in Asean boardrooms

• Ukrainian machines hit with another Malware variant

• VT4Browsers++ Any indicator, every detail, anywhere

• Cowbell raises $100M to offer organizations continuous cyber insurance

• The Defense Department is a bad customer. Let’s change that.

• Israel Says Government Sites Targeted by Hack

• Ukrainian Targets Hit by Another Destructive Malware Variant

• CaddyWiper: Yet Another Data Wiping Malware Targeting Ukrainian Networks

• Ransomware groups target “enemies of Russia”

• Another data-leaking Spectre bug found, smashes Intel, Arm defenses

• Clearview AI Helping the Ukrainian War Effort

• Pandemic pushes cybersecurity to top agenda in Asean boardrooms

• Another data-leaking Spectre bug found, smashes through Intel, Arm chip defenses

• Looking for adding new detection technologies in your security products?

• The IT Security That Your Business Needs in The Cloud

• Massive DDoS Attack Knocked Israeli Government Websites Offline

• Are you willing to take a calculated risk? Quantifying your cyber risk and predicting future threats

• 1Password to Pay Record High Bounty for Security Researchers

• The simple secret to app security? Time

• The massive impact of vulnerabilities in critical infrastructure

• NASA in ‘serious jeopardy’ due to big black hole in security

• CaddyWiper, a new data wiper hits Ukraine

• Malicious web application requests skyrocketing, bad actors stealthier than ever before

• Podcast Episode: Watching the Watchers

• Top automotive tech obstacles: Cybersecurity, software quality and functional safety

• Top threats for the financial sector

• SXSW Donation Presentation to Boys & Girls Clubs of the Austin Area at Cybrverse Experience

• ISG to Publish Study on Power & Utilities Industry

• Cloudreach, an Atos Company, Works With AWS to Launch Talent Academy in the U.S.

• Protecting patients by securing medical devices and the Internet of Medical Things (IoMT)

• SaaS revenue declined by 46% in 2021

• Insight Explores the New Horizons of the Intelligent Edge and Digital Business in Tech Journal Magazine

• Ciphertex Data Security™ Introduces Safest, Most Secure Large Capacity Data Storage Options for Hospitals at HIMSS

• Zimperium’s 2022 Global Mobile Threat Report Provides Sweeping New Data and Analysis on the State of Mobile Security

• Vulnerability Summary for the Week of March 7, 2022

• ‘Dirty Pipe’ Linux Flaw Affects a Wide Range of QNAP NAS Devices

• Cloudflare announces email security products to prevent phishing and malware attacks

• PKI Spotlight detects operational disruptions in PKI and HSM environments

• Secureworks Hands-on-Keyboard Detector uncovers cybercriminal activity

• Como Afrontar las Vulnerabilidades de Log4j2: Cómo Puede Ayudar Tripwire

• Vulnerability Summary for the Week of March 7, 2022

• Ciphertex Data Security SecureNAS CX-160KHD-X protects healthcare data from cyber criminals

• CaddyWiper: New wiper malware discovered in Ukraine

• Russia’s invasion of Ukraine tears open political rift between cybercriminals

• Dell Technologies Hit Record Full-Year Revenue of $101.2 Billion, up 17%

• Ukraine invasion opens political rift between cybercriminals

• HUB Security collaborates with Enlitic to secure data for healthcare providers

• Catalogic and Backblaze join forces to provide protection against ransomware and data loss

• Assange’s request to appeal US extradition denied by UK Supreme Court

• Happy #PiDay – even if you aren’t in North America!

• SafeBase raises $18 million to help companies speed security reviews with self-serve access

• HD Moore’s Rumble Raises $15M Series A Investment

• Meta reiterates politician claims will not be fact-checked for Australian federal election

• Dan Neault joins Imperva as SVP and GM, Data Security

• China thrilled it captured already-leaked NSA cyber-weapon

• IT Security News Daily Summary 2022-03-14

• States must expand data sources for strategic flood resilience

• Report: Facebook Has A Problem With Child Predation Groups

• Denso ransomware attack – Pandora gang claims to steal 1.4 TB of data

• Funding for DOD’s software pilots holds strong in 2022

• Legacy vulnerabilities risk critical infrastructure security

• Staff Think Conti Group Is a Legit Employer – Podcast

• A massive DDoS attack hit Israel, government sites went offline

• How Web Applications Are Attacked Through APIs

• FCC seeks comments on internet traffic routing risks

• Mayors judge civic tech pitches at SXSW

• Claim your roadkill with 511 app

• Best YubiKey 2022: Top security keys compared

• CISA Hosts Eighth Cyber Storm Exercise With More than 200 Organizations

• Secureworks Adds Hands-on-Keyboard-Detector to Taegis Platform

• iOS 15.4 Features: Everything New in iOS 15.4

• China thrilled it has captured already-leaked NSA cyber-weapon

• GreyNoise Helps Organizations Defend Against Opportunistic Scan-and-Exploit Attacks in Real Time with Investigate 4.0

• DARKTRACE UPLIFTS SECURITY TEAMS WITH UPDATES TO ITS CYBER AI PLATFORM

• Armorblox Adds DLP to Email Security Platform

• Utility Cybersecurity: Situational Awareness Cuts Risk

• Small tweaks to IT policies, funding in $1.5 trillion funding bill

• 3 Cybersecurity Certainties for 2022

• Is XDR The Right Solution for Today’s Security Threats?

• De-Googling Carey Parker’s (and your) life: Lock and Code S03E06

• Do you know where your software comes from?

• Best YubiKey: You need this cheap security tool

• Cyber insurance war exclusions loom amid Ukraine crisis

• How Cobalt Strike Became a Favorite Tool of Hackers

• iOS 15.4 and watchOS 8.5 Allow You to Restore an Apple Watch Using an iPhone

• A first look at threat intelligence and threat hunting tools

• Four Climate Security Insights From the COVID-19 Pandemic Response

• Putin’s Revised Foreign Agent Law Could Enable Mass Repression

• Phishing Attacks In Ukraine | Avast

• Best YubiKey: Why everyone should have this cheap security tool

• China claims it has captured NSA NOPEN cyber-weapon

• Apple Patch Day: Gaping Security Holes in iOS, macOS, iPadOS

• Embracing Security by Design: Security Isn’t a Pretty Picture

• Apple Begins Selling Refurbished iPhone 12 and iPhone 12 Pro Models

• Cybercrooks’ Political In-Fighting Threatens The West

• Ukraine Reportedly Adopts Clearview AI To Track Russian Invaders

• Russia’s Disinformation Machinery Breaks Down In Wake Of Ukraine Invasion

• EFF Asks Federal Appellate Court to Re-hear Important Patent Transparency Case

• The difficulty of scaling a Frankencloud

• Cryptocoin ATMs ruled illegal – “Shut down at once”, says regulator

• Canada Cops Arrests Teen Cyber-Attack Suspect

• Mobile Threats Skyrocket

• Catching the Evasive REvil Ransomware Gang With AI

• New Bipartisan Bill Would Require Firms to Report Cyber Incidents Within 72 hours

• YARA “dotnet” module now available for Livehunt and Retrohunt

• Cyber Attacks on Government Organizations beyond Ukraine Surge by 21%

• Using the Sherlock Holmes method for cyber defense

• Leaks reveal the surprisingly mundane reality of working for a ransomware gang

• Hit by ransomware or paid a ransom? Now some companies will have to tell the government

• Apple Releases tvOS 15.4 With Support for Captive WiFi Networks

• Apple Releases HomePod Software 15.4

• Apple Releases watchOS 8.5 With Support for Apple TV Purchase Authorization, Irregular Heart Rhythm Notification Improvements and More

• Apple Releases macOS Monterey 12.3 With Universal Control, Spatial Audio Dynamic Head Tracking on M1 Macs and More

• Apple Releases iOS 15.4 and iPadOS 15.4 With Face ID Mask Unlock, New Emoji, Universal Control, and More

• How Arctic Wolf aims to ‘unify the cybersecurity market’

• Viasat, Rosneft hit by cyberattacks as Ukraine war spills online

• UK Unveils New Cyber Flashing Law

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Why client-side web application security is critical to protecting from Magecart and other similar attacks

• Car Parts Giant Denso Targeted by Ransomware Group

• Exclusive: iboss Issues School District Cybersecurity Warning

• Deals: Satechi Offering 25% Off Sitewide for Pi Day

• Secure your healthcare devices with Microsoft Defender for IoT and HCL’s CARE

• eXecutive Security: ThreatX Launches New Podcast on March 15

• Top 12 client-side security threats

• PKI Solutions Introduces PKI Spotlight Monitoring and Alerting Solution

• Ukraine Using Clearview AI Facial Recognition Tech to Monitor ‘People of Interest’

• GreyNoise launches free tool to protect against ‘scary’ vulnerabilities like Log4j

• Smart devices spy on you – 2 computer scientists explain how the Internet of Things can violate your privacy

• RiskOps platform Feedzai grows +40% year-over-year

• Anonymous Rises Again Amid Russia Ukraine War

• Tencent ‘Facing Record Fine’ Over Payment Violations

• 10 Common Security Mistakes Sysadmins Make & How To Avoid These Pitfalls>

• Critical Vulnerabilities Patched in Veeam Data Backup Solution

• Deals: Fourth Gen iPad Air Discounted by $99, Starting at $499.99 for 64GB

• Benchmark Results Confirm Apple Hasn’t Downclocked M1 Chip in New iPad Air

• Apple Suppliers Hit By Fresh China Covid-19 Restrictions

• Ukraine is using Clearview AI’s facial recognition during the conflict

• Upcoming Speaking Events

• Ukraine’s “IT Army” Struck with Info-stealing Malware

• CVE-2022-0847 aka Dirty Pipe vulnerability in Linux kernel

• iPhone SE Reviews: Impressive Performance in a ‘Tired Design’

• Deals: Take $200 Off 2021 MacBook Pro Models in Amazon’s New Sale

• Report Highlights How Top Apple Executives Disagreed Over How Far iOS Anti-Tracking Measures Should Go

• Here’s When You Can Download iOS 15.4, iPadOS 15.4, and macOS Monterey 12.3 With Universal Control

• 93% of Organizations Have Network Vulnerabilities: Here’s How to Beat the Odds

• Cybercrooks’ Political In-Fighting Threatens the West

• Does the Free World Need a Global Cyber Alliance?

• Hackers Target German Branch of Russian Oil Giant Rosneft

• Governments Should Decide Who Gets to Buy Spyware

• Bridgestone USA Alleges to be Infiltrated by a LockBit Ransomware Cell

• Helping Mom & Dad: Online Doctor Visits and Telemedicine

• Ubisoft Resets Employee Passwords Following Cyberattack

• Why Enterprise Threat Mitigation Requires Automated, Single-Purpose Tools

• Gaming Company Ubisoft Confirms It was Hacked, Resets Staff Passwords

• What D’Hack Is DPoP?

• Ransomware Gang Threatens to Leak Files Stolen From Tire Giant Bridgestone

• AMD Updates Spectre Mitigations Following Intel Research

• Russian Ransomware Gang Retool Custom Hacking Tools of Other APT Groups

• Anonymous claims to have hacked German subsidiary of Russian energy giant Rosneft

• Duo Single Sign-On Now Supports Multiple Active Directory Forests

• 10 Most Expensive Gaming Mouse 2022 – Wireless & Wired

• New US law: Cyberattacks to be reported within 72 hours

• Meta Releases Open-Source Browser Extension for Checking Code Authenticity

• 3 Ways the Cybercriminals Getcha & How to Be Prepared

• Ford Expands Electric Vehicle Deal With Volkswagen

• Tesla, SpaceX Face ‘Significant’ Inflation Pressure, Musk Says

• Penetration Testing Azure: The User-Friendly Guide

• Report: 25% of mobile endpoints have faced malicious apps

• Over 500,000 Patients Hit by Data Breaches at Healthcare Firms in Alabama, Colorado

• UK Ferry Service Wightlink Admitted Data Breach

• Ubisoft reveals ‘security incident’ forcing company-wide password refresh

• Ukraine reportedly adopts Clearview AI to track Russian invaders

• Automotive giant Denso confirms hack, Pandora ransomware group takes credit

• The VC View: Incident Response and SOC Evolution

• 10 Best 32-Inch Monitors 2022 – Experience Gaming on Ultra Wide Screen

• SCA Rules Come into Force Today for E-commerce Transactions

• New Linux Bug in Netfilter Firewall Module Lets Attackers Gain Root Access

• Leak of Russian Censorship Data

• iPhone SE 5G Pre-Order Delivery Times Slip into Late March

• CISA list of 95 new known exploited vulnerabilities raises questions

• Brit techie shows us life in Ukraine amid Russian invasion

• Meta Bars Calls For Death Of Head Of State In Policy Shift

• Cloud vs. “Traditional” IT Compliance

• Critical Infrastructure Threat as Ransomware Groups Target ‘Enemies of Russia’

• On New Sec 4 Day Rule To Report Cyberattacks

• Malware hidden in fake Valorant aim-bot

• Ubisoft Was the Victim of a Cyber Security Incident

• Bogus Valorant Cheat Lures on YouTube Infect Users with RedLine Stealer Malware

• A week in security (March 7 – March 13)

• Australian electric grid vulnerable to Cyber Attacks via Solar Panels

• UK Regulator Warns Against ‘Illegal’ Crypto Cash Machines

• The Silicon UK In Focus Podcast: Beyond Productivity

• Legal Practice Fined £100k After Hacker Stole Court Info

• FCA: Crypto ATMs Are Illegal in the UK

• Brazilian trojan impacting Portuguese users and using the same capabilities seen in other Latin American threats

• Webinar on cyberattacks in Ukraine – summary and Q&A

• UK announces digital identity security legislation

• Is low-code safe and secure?

• Ukraine’s “IT Army” hit with info-stealing malware

• Russia Shuts Down Instagram Due To ‘Calls For Violence’

• Researchers Find New Evidence Linking Kwampirs Malware to Shamoon APT Hackers

• Apple Supplier Foxconn Forced to Suspend Operations in Shenzhen Due to Lockdown

• SSL Certificates and PKI Management For Better Your Web Security

• Trying to register your antivirus in Windows Security Center?

• Hackers Using Cheat Lures to Distribute Powerful Information Stealer Malware

• Russia-Ukraine cyber conflict poses critical infrastructure at risk

• Human Factors: Why Technology Alone Will Never Equal Cyber Secure

• Building trust in a zero-trust environment

• How to contain a privileged access breach and make sure it doesn’t happen again

• China: attacks from US IP addresses hit us, moved on to Russia and Ukraine

• Women in cybersecurity: How far have they come?

• Russia labels Meta an ‘extremist’ organization, bans Instagram

• The importance of building in security during software development

• Model contract language for medical technology cybersecurity published

• Poor data sanitization practices put public sector data at risk

• Taiwan rounds up 60 Chinese tech workers on suspicion of poaching tech and people

• Data and the cyber workforce

• Cloud computing market to reach $1,554.94 billion by 2030

• Consilio strengthens cybersecurity offerings with Complete Connector and Sightline 8.0

• IT leadership appointments: Axonius, Codenotary, CyberSaint, Intelsat, and NetAbstraction

• Texas SB 820 Advances K-12 Cybersecurity Despite Limitations

• Healthcare Providers Need to Increase Budgets for Cybersecurity

• MariaDB Xpand 6 improves performance of operational analytics

• Aura unveils Smart Network feature to protect users against zero-day threats

• IT Security News Weekly Summary – Week 10

• IT Security News Daily Summary 2022-03-13

• Five Tips for Ensuring Communications Security in Your Organization

• Q&A on Network Detection and Response (NDR)

• The Cybersecurity Job Shortage Won’t Continue to Decline without Enhanced Hiring Creativity

• The Foilies 2022

• Multiple Security Bugs Identified in Software Package Managers

• The Era of Ransomware: How to Respond in a Crisis

• Kuo: Only iPhone 14 Pro Models to Get ‘A16’ Chip, Standard Models to Retain A15

• Anonymous sent a message to Russians: “remove Putin”

• Is Europe Prepared for a Proxy War With Russia?

• Filter Blocked 70,000 Emails to Indiana Lawmakers on Bill

• The hidden C2: Lampion trojan release 212 is on the rise and using a C2 server for two years

• Mar 06- Mar 12 Ukraine – Russia the silent cyber conflict

• Corporate Website Contact Forms Used in BazarBackDoor Malware Campaign

• Misconfigured Keys are Tackled in ServiceNow’s Guidelines

• Wightlink Customers’ Details Compromised in Cyber Attack

• Security Affairs newsletter Round 357 by Pierluigi Paganini

• Russia Banned Instagram After Blocking Facebook and Twitter

• LockBit ransomware group claims to have hacked Bridgestone Americas

• UK Network Operators Target iCloud Private Relay in Complaint to Regulator

• Week in review: Linux bug gives root access to attackers, UPS devices’ vulns, IoT security for OEMs

• Penetration testing

• Kali Unkaputtbar – A new Boot Menu to Boot Directly into Snapshots

Generated on 2022-03-20 23:59:27.687931