IT Security News Weekly Summary – Week 12

• IT Security News Daily Summary 2022-03-27

• Latest Google Chrome Update Fixed Another Zero-Day Flaw

• Prepare Your Business for the Future of Cyberwar: A Review of The Art of Cyberwarfare>

• Ransomware as a Service: The Trending Business Model for Attacks

• How To Add a Social Login to Your Website With Supertokens (Custom UI Only)

• Mar 20- Mar 26 Ukraine – Russia the silent cyber conflict

• Chat and Encrypted Messaging Apps Are the New Battlefields in the Propaganda War

• Hackers Can Use a Replay Attack Due to a Honda Vulnerability

• Trojanized Apps are Being Employed to Steal Cryptocurrency From iOS and Android Users

• US Adds Kaspersky to List of Firms Posing Threat to National Security

• US Adds Kaspersky to List of Firms Posing Threat to National Security

• Scheduled Tasks and Batteries

• Security Affairs newsletter Round 358 by Pierluigi Paganini

• Western Digital addressed a critical bug in My Cloud OS 5

• Google Issues Emergency Fix for Chrome Zero-Day

• Week in review: Lapsus$ breaches Okta and Microsoft, Red Team 101, cybersecurity during M&As

• Social Engineering Attacks Resulted in Compromise of Morgan Stanley Client Accounts

• Penetration testing

• CISA adds 66 new flaws to the Known Exploited Vulnerabilities Catalog

• What Can Flexible Work Conditions Do for Cyber?

• Contrast Security works with global businesses to build overall security readiness and resilience

• SparkCognition acquires Integration Wizards to deliver visual AI capabilities across industries

• Clear Skye raises $14 million to close the gap between identity and business processes

• AuditBoard opens new European headquarters in London

• IT Security News Daily Summary 2022-03-26

• Azurite – An Azure AD Enumeration Tool

• How to Fix Mid-Market Security Using Intelligent Automation and AI

• 5 Ways Cybersecurity Will Change In 2022

• Milliseconds matter: The business impact of data responsiveness

• 5-Step Cyber Threat Hunting Process

• Anonymous Plan to Release 35,000 Documents, Targeting Russia’s Central Bank

• Microweber Creators Patched XSS Flaw in CMS Software

• HackerOne Removed Kaspersky Bug Bounty Program From Its Platform

• Vidar Spyware Exploits Microsoft Help Files to Bypass Detection

• KnowBe4 Spreads Cyber Awareness Training to Their Community

• FCC adds Kaspersky to Covered List due to unacceptable risks to national security

• Securing the metaverse: 3 critical concepts

• Hunt for Lapsus$ Hackers Leads to a British Teen

• Build or Buy your own antivirus product

• Another Chinese Hacking Group Spotted Targeting Ukraine Amid Russia Invasion

• FCC Adds Kaspersky and Chinese Telecom Firms to National Security Threat List

• Changes to the CISSP Exam Length Coming Soon

• Top 12 client-side security threats

• DataStax unveils CDC for Astra DB to stream real-time operational data across an enterprise data ecosystem

• ‘Precursor malware’ infection may be sign you’re about to get ransomware, says startup

• Google Issues Urgent Chrome Update to Patch Actively Exploited Zero-Day Vulnerability

• 2022-03-21 – Hancitor infection with Cobalt Strike and Mars Stealer

• 2022-03-21 – Traffic analysis exercise – Burnincandle

• 2022-03-24 – Emotet E4 with Cobalt Strike

• Unit 42: Ransomware demands we’re aware of averaged $2.2m last year

• Confirmed: Anonymous Hacks Central Bank of Russia; Leaks 28GB of Data

• 5 Threat Intelligence Trends

• Foundries.io collaborates with Arduino to provide solutions for Linux-based IoT and edge products

• CoreStack partners with Nirmata to help enterprises protect and govern Kubernetes workloads

• SAML: Still Going Strong After Two Decades

• Unit 42: Ransomware demands averaged $2.2m last year

• DevSecOps: Best Practices for CI/CD Pipeline Security

• Okta on handling of Lapsus$ breach: ‘We made a mistake’

• Addressing Remote Desktop Attacks and Security

• IT Security News Daily Summary 2022-03-25

• Anonymous leaked 28GB of data stolen from the Central Bank of Russia

• DOJ Indicts Russian Gov’t Employees Over Targeting Power Sector

• Indictment of Russian National Offers Glimpse Into Methodical Targeting of Energy Firm

• CISA Adds 66 Known Exploited Vulnerabilities to Catalog

• What trends are driving public sector planning in 2022?

• The Labor Dept. wants to revise a Trump-era policy on handling discrimination claims against contractors

• US indicts Russian nationals for critical infrastructure attacks

• Chrome emergency update fixes actively exploited a zero-day bug

• 100s of Russian Building Controllers Can be Remotely Hacked

• The only winner in the Okta Lapsus$ breach is Microsoft

• World Backup Day reminds us all just how precious our data is

• The Fragile Open Source Ecosystem Isn’t Ready for ‘Protestware’

• Pay to play: Ransom demands averaged $2.2m last year

• The 2022 Cyber Incident Reporting Law: Key Issues to Watch

• Another Tracker Scanning App Highlights the Need for a Better Way to Protect Victims From Digital Stalking

• Fileless Malware on Linux: Anatomy of an Attack>

• 6 types of insider threats and how to prevent them

• How Do I Demonstrate the ROI of My Security Program?

• Review Microsoft Defender for endpoint security pros and cons

• WiCyS Members Now Have access to Cyber Defense Challenge Through Target

• Lawmakers move to protect healthcare infrastructure from potential Russian threat

• Week in security with Tony Anscombe

• US, EU Sign Data Transfer Deal to Ease Privacy Concerns

• Here’s How Fast Ransomware Encrypts Files

• EFF Client Erik Johnson and Proctorio Settle Lawsuit Over Bogus DMCA Claims

• Is the metaverse safe?

• We may never know the full details of Russia’s cyberwar against Ukraine

• Estonian Tied to 13 Ransomware Attacks Gets 66 Months in Prison

• Senate Committee Questions Pentagon’s Information Restrictions

• Hackers from China’s ‘Mustang Panda’ were Utilizing New ‘Hodur’ Malware

• Florida Sheriff’s Officer Charged with Cyber-Flashing Minor

• Strong Customer Authentication (SCA): what to expect

• Russia preparing to conduct cyberattacks, White House warns

• Chinese Hackers Target Betting Firms in South East Asia

• Modern Gaming Sucks Because of Abundance Fatigue

• Major League Baseball Players’ Personal Data Stolen

• Russia’s Invasion of Ukraine and CISA/FBI’s New Era of Transparency

• FBI Witnesses Rising Russian Hacker Interest in US Energy Firms

• 5 Prevalent digital marketing Cybersecurity concerns to watch out for

• Bots Buy Up Raspberry Pi Products | Avast

• Chinese Hackers Seen Targeting Ukraine Post-Invasion

• Risk & Repeat: Lapsus$ highlights poor breach disclosures

• Cisco Secure Endpoint Strikes Balance for School IT Teams

• What Is FOSS Software? Definition, Usage, and Vulnerabilities

• Atlassian flags Bitbucket and Confluence Data Center flaws

• Threat Protection – How to Be Fully-Protected From Cyber Threats

• MixMode Banks $45 Million in Series B Funding

• Utah Becomes Latest US State to Pass a Data Privacy Law

• Chinese threat actor Scarab targets Ukraine, CERT-UA warns

• Hackers remotely start, unlock Honda Civics with $300 tech

• Russian State-Sponsored Amplification of Bio Lab Disinformation Amid War in Ukraine

• 2021 Third-Party Intelligence Threat Landscape

• US Charges 4 Russian Hackers Over Attacks On Energy Sector

• Russia Hacked Ukrainian Satellite Comms, Officials Believe

• Frosties NFT Operators Arrested Over $1.1 Million Rug Pull Scam

• Social Engineering Attacks Target Morgan Stanley Client Accounts

• Oxford Teenager Arrested In Lapsus$ Crackdown

• Report: 57% of consumers are tired of password authentication questions

• Facial recognition inappropriate for high-risk applications, experts say

• A Honda Vulnerability Allows Hackers to Use a Replay Attack

• How to Know if Someone Has Muted You on Messenger?

• Hackers Use XLL Files to Deliver Obfuscated Version of JSSLoader

• EU and US Agree Deal to Reopen Seamless Transatlantic Data Flows

• The Elusive Goal of Network Security

• HR Alone Can’t Solve the Great Resignation

• Frosties NFT operators arrested over $1.1 million ‘rug pull’ scam

• What is ransomware? Everything you need to know about one of the biggest menaces on the web

• These fake crypto wallets want to steal from iPhone and Android users

• UK police arrest seven individuals suspected of being hacking group members

• Google Chrome Zero-Day Bugs Exploited Weeks Ahead of Patch

• U.S. Charges 4 Russian Govt. Employees Over Hacking Critical Infrastructure Worldwide

• Tips from a CISO: How to Create a Security Program

• Japanese Healthcare Firm ‘Doctors Me’ Exposed Images of 12,000 Patients

• Bandura Cyber relaunches as ThreatBlockr with a new solution to block malicious network traffic

• FBI: 649 Ransomware Attacks Reported on Critical Infrastructure Organizations in 2021

• Modernizing Secure Remote Access for a Hybrid Workforce

• Treasury Secretary Janet Yellen on crypto: I have some skepticism, but there are benefits

• Silicon UK In Focus Podcast: Post-Pandemic Entrepreneurs

• UK police arrested 7 alleged members of Lapsus$ extortion gang

• Most IT Bosses View Skills Gap As ‘Urgent Concern’

• Google: We stopped these hackers who were targeting job hunters and crypto firms

• Avast acquires SecureKey Technologies in authentication, identity management push

• How European Rulings Imperil Flagship Google Product

• 7 Suspected Members of LAPSUS$ Hacker Gang, Aged 16 to 21, Arrested in U.K.

• 1-15 March 2022 Cyber Attacks Timeline

• London DJ Surrenders £214,000 of Music Kit in Money Laundering Case

• Gus Simmons’s Memoir

• Teens arrested amidst Lapsus$ crackdown

• Anonymous Claims Hack Of Russia’s Central Bank

• Cybersecurity for banks – Assuring a secure & compliant cloud migration

• Four Russians Charged with Dragonfly Attacks on Critical Infrastructure

• Honda bug allows hackers to unlock and start your car

• What Is Data Loss Prevention and How You Can Approach DLP Security

• UK Teen Arrested in Lapsus Crackdown

• US accuses four Russian Government Officials for launching Cyber Attacks

• Western Australia to invest AUS $25.5 million to bolster state cyber security services

• Lack of Cybersecurity Preparation in SMBs | Avast

• Selenium vs BDD 2.0 (SDD): Which Is Best for End-to-End Testing?

• Introducing Silicon.eu

• Mitek Acquires HooYu for $129m

• Experts Uncover Campaign Stealing Cryptocurrency from Android and iPhone Users

• US indicted 4 Russian government employees for attacks on critical infrastructure

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Data literacy: The most in-demand skill in the future workplace

• The impact of the cloud skills gap on businesses

• The 2021 threat landscape: Trends, threats and techniques

• Most Common Cyber Threats for Businesses

• How AI can fend off supply-chain attacks

• WA government allocates AU$25.5m to expand cybersecurity services

• PJCIS supports passage of second tranche of critical infrastructure cyber laws

• North Korean Hackers Exploited Chrome Zero-Day to Target Fintech, IT, and Media Firms

• New infosec products of the week: March 25, 2022

• Weekly Update 288

• North Korean Hackers Exploited Chrome Zero-Day to Target Fintech, IT and Media Firms

• The challenge of planning an IAM strategy for multi-cloud environments to avoid risk

• US DoJ reveals Russian supply chain attack targeting energy sector

• Trends, threats and techniques that comprised the 2021 threat landscape

• The Largest Online Marketplace of Stolen Login Credentials Seized by Law Enforcement

• Morrison wants organisations to prioritise trust over efficiency for data security

• How the cloud skills gap is hindering business development

• This Week in Security News – March 25, 2022

• Data literacy to lead global workplaces by 2030

• How to unlock a resilient hybrid work plan

• Big data as a service market to reach $101 billion by 2028

• Distributor dumps Kaspersky to show solidarity with Ukraine

• CynergisTek Reports Fourth Quarter and Full Year 2021 Financial Results

• Semperis Extends Breach Preparedness and Incident Response Services for Identity-Based Cyberattacks to Broader Customer Set

• Working with MSSPs to optimize XDR

• US Charges Russian Hackers Over Infamous Triton, Havex Cyberattacks on Energy Sector

• TRIMEDX improves medical device cybersecurity with new cloud-based features

• Entrust announces four solutions to help enterprises prepare for the post quantum world

• Tobii Aware enhances privacy and security in the new commercial line of MSI laptops

• DTEX Systems extends scope and protection of Microsoft 365 E5 modules

• Attivo Network enhancements strengthen protection of Active Directory in Azure

• Qumulo CSI driver simplifies Kubernetes workflows on unstructured data

• Cisco accelerates hybrid cloud operations with new innovations

• Ermetic launches open source tool that analyzes AWS CloudTrail AccessDenied events

• Russian Court Bans Facebook And Instagram For “Extremist Activities”

• UK police arrest 7 hacking suspects – have they bust the LAPSUS$ gang?

• We blocked North Korea’s Chrome exploit, says Google

• 5 Tips for a Successful Threat Hunt

• Russian nationals charged for alleged roles in DragonFly and Triton hacks

• EY collaborates with Infosys to accelerate digital transformation for organizations

• DCSA selects C3 AI to improve security clearance processing

• Ping Identity partners with TD SYNNEX to offer identity security solutions to North America

• Feds Allege Destructive Russian Hackers Targeted US Refineries

• Justice Department Charges Four Russian Nationals for Global Hacking Campaign Targeting the Energy Sector

• Bobby Napiltonia joins Okera as President

• Karlsgate raises $4 million to bring zero trust approach to data connectivity

• Mitek acquires HooYu for £98 million to help businesses combat fraud

• Avast acquires SecureKey Technologies to expand its identity product and services portfolio

• Anti-war open-source software developer targets Russians and Belarussians with “protestware”

• Windows Event Log Evasion Review

• Shing Pan and Susan Sumner join VIQ Solutions Board of Directors

• Cowbell Cyber hires Joshua Chan as CTO

• Netskope names Daniel Hartert CxO Advisor in Europe

• UK-Based Teen Suspected of Operating LAPSUS$ Data Extortion Group

• Downloaders Currently the Most Prevalent Android Malware

• Russian Nationals Indicted for Epic Triton/Trisis and Dragonfly Cyberattacks on Energy Firms

• Drawbridge launches Industry Advisory Board

• Microsoft Azure developers targeted by 200-plus data-stealing npm packages

• IT Security News Daily Summary 2022-03-24

• Will Okta recover its cred after Lapsus$ breach? We’ll see

• New bill looks to modernize 50-year-old rulebook for federal-state cooperation

• Experts explained how to hack a building controller widely adopted in Russia

• British cops arrest seven in Lapsus$ crime gang probe

• Health officials see bright future in poop surveillance

• UK Cops Collar 7 Suspected Lapsus$ Gang Members

• State-Sponsored Russian Cyber Actors Targeted Energy Sector from 2011 to 2018

• Tactics, Techniques, and Procedures of Indicted State-Sponsored Russian Cyber Actors Targeting the Energy Sector

• Google Tests Health Monitoring Via Smartphone Sensors

• North Korea Gov Hackers Caught Sharing Chrome Zero-Day

• How to overcome GDPR compliance challenges

• The Kids Online Safety Act Is a Heavy-Handed Plan to Force Platforms to Spy on Young People

• Ukraine war puts US cities, states on cyber alert

• Microsoft Azure Developers Awash in PII-Stealing npm Packages

• Navy CIO says the service is ‘on the cusp’ of CAC-less cloud access

• Ransomware getting ahead of state, local governments, survey finds

• What is Spyware?

• Smart Tips for Staying Safer Online

• Just-Released Dark Souls Game, Elden Ring, Includes Killer Bug

• The Chaos (and Cost) of the Lapsus$ Hacking Carnage

• HP finance manager went on $5m personal spending spree with company card

• Biggest Cyber Trend in 2022

• On The Frontline in The War Against Hackers

• FBI: Ransomware hit 649 critical infrastructure entities in 2021

• API Gateway or not, You Need API Security

• US Court Ends China’s ZTE Probation

• With threats like Lapsus$, security playbooks ‘go out the window’

• Apple Wallet goes live for ID verification at TSA checkpoint

• LAPSUS$ Cyber Crime Spree Nabs Microsoft, Okta, NVIDIA, Samsung

• For MSPs, Next-Gen Email Security Is a Must

• How Casinos Can Prevent Loyalty Incentive and Account Takeover Fraud

• Panel closes in on federal data use recommendations

• GSA announces four-fold increase in contracting opportunity goals for SDBs

• This is how fast a ransomware attack encrypts all your files

• Lawmakers request agency support in broadband rollouts

• Crypto malware in patched wallets targeting Android and iOS devices

• Is a nation‑state digital deterrent scenario so far‑fetched?

• HubSpot Data Breach Ripples Through Crytocurrency Industry

• US Indicts Russian Over “Carding Shop”

• Indian Police Bust Online Helicopter Scam

• VMware Releases Security Updates

• IsaacWiper Continues Trend of Wiper Attacks Against Ukraine

• Stop Invasive Remote Proctoring: Pass California’s Student Test Taker Privacy Protection Act

• Looking to become a tech hub? Level up your local talent in 3 steps

• Okta provides new details on Lapsus$ attack

• APIs & the Software Supply Chain — Evolving Security for Today’s Digital Ecosystem

• Several Dell Systems are Affected by New BIOS Bugs

• BitRAT Malware Spreading Via Unofficial Microsoft Windows Activators

• Mandiant Launches mWISE, Uniting the Global Security Community in the Fight Against Cyber Threats

• Drawbridge Launches Industry Advisory Board to Promote Cybersecurity Innovation and Collaboration Across the Alternative Investment Industry

• A lasting trend: As a Service

• ISO 27002 2013 to 2022 mapping

• Bank Of England Begins To Outline UK’s Crypto Regulatory Approach

• HubSpot Data Breach – Major Cryptocurrency Companies Impacted

• 2022-03-21 – Infection from Brazil malspam

• First Annual Insider Risk Excellence Award Winners Protect Sensitive Company Data and Intellectual Property in Groundbreaking Ways

• Datto MSP Technology Day Addresses Security for SaaS Applications

• SIMBA Chain to Build Blockchain Backed Local Health Supply Chain System, Fueling MxD Medical Marketplace

• YugabyteDB 2.13 Delivers Breakthrough Developer Experience and Performance Improvements

• NetWitness Incident Response Team Urges Enterprises to Prepare for Potential Cyberattacks Related to Russia/Ukraine Conflict

• Lapsus$ Hacking Group Claims to Have Stolen Sensitive Data From Software Gaint Okta Solutions

• New Vidar Infostealer Campaign Hidden in Help File

• Reform or Revolution?

• Job Post: Lawfare Fellowship through Emerging Tech Policy Leaders Program

• The Chatter Podcast: Putin’s People with Catherine Belton

• Private Details of 43,000 London Voters Leaked to Strangers

• Intel CEO: Chip Fabs Are As Strategical Important As Oil

• Everywoman In Tech Awards | Avast

• Getty Images launches first model release supporting biometric data privacy in AI

• Over 100 Building Controllers in Russia Vulnerable to Remote Hacker Attacks

• Anonymous targets western companies still active in Russia, including Auchan, Leroy Merlin e Decathlon

• Clear Skye lands $14M to simplify identity governance on ServiceNow

• These tax season scams aim to steal your passwords and bank details. Here’s what to watch out for

• Enterprise Browser Startup Island Snags Massive Funding Round

• Chinese APT Combines Fresh Hodur RAT with Complex Anti-Detection

• S3 Ep75: Okta hack, CryptoRom, OpenSSL, and CafePress [Podcast]

• Apple Co-Founder Slams Facebook For Privacy Flaws

• What the Conti Ransomware Group Data Leak Tells Us

• ExtraHop Adds AI To Bolster Threat Detection For AWS

• Blast From the Past: What the Y2K Bug Reveals About Cybersecurity Today

• Vidar spyware is now hidden in Microsoft help files

• These tax season scams aim to steal your passwords and bank details – here’s what to watch out for

• Microsoft Help Files Disguise Vidar Malware

• Russian Operator of Cybercrime Marketplace Indicted in US

• How to Build a Custom Malware Analysis Sandbox

• Chinese APT Hackers Targeting Betting Companies in Southeast Asia

• 23-Year-Old Russian Hacker Wanted by FBI for Running Marketplace of Stolen Logins

• Report: 80% increase in application-level cyberattacks

• Tax-Season Scammers Spoof Fintechs Stash, Public

• Top 3 Attack Trends in API Security – Podcast

• Many Critical Flaws Patched in Delta Electronics Energy Management System

• Be Aware of What is Out There in Cybersecurity Threats and Protection 2022

• An Investigation of Cryptocurrency Scams and Schemes

• Meta’s Universal Translator Will Not Be the End of Human Translation

• So, what’s the big deal about ISE 3.x?

• Russian Cybercrime Market Owner Added to FBI’s Most Wanted List

• ISPs and Diplomats Targeted by New Mustang Panda Hacking Campaign

• Why I’m Proud to Protect

• Ransomware is scary, but another scam is costing victims much, much more, says FBI

• Mustang Panda hacking group takes advantage of Ukraine crisis in new attacks

• VMware Patches Critical Vulnerabilities in Carbon Black App Control

• Linux Improves Its Random Number Generator

• Elden Ring exploit traps players in infinite death loop

• Achieving Positive Outcomes With Multi-Domain Cyber and Open Source Intelligence

• Researchers trace LAPSUS$ hacks to English teenager

• Ransomware payments peaked in 2021

• Okta names contractor involved in Lapsus$ gang’s attack

• A coordinated nation-state cyber attack is a worst-case scenario, says former U.S. chief technology officer

• Update now! Many HP printers affected by three critical security vulnerabilities

• Arizona To Accept Digital Driver’s Licences On iPhones

• UK Ministry of Defence takes recruitment system offline, confirms data leak

• Ransomware Payments Hit Record Highs in 2021

• ISACA: Two-Thirds of Cybersecurity Teams Are Understaffed

• Phishing-kit market: what’s inside “off-the-shelf” phishing packages

• Fake android app fraudulently helps harvests Facebook credentials

• A 16-old teenager suspected behind Lapsus$ ransomware attack

• Malicious npm packages target Azure developers to steal personal data

• Investment Fraud Surges as Cybercrime Losses Hit $7bn in 2021

• Okta CSO: Lapsus Incident Was “Embarrassing”

• The Jargon Episode, Part II – Intego Mac Podcast Episode 232

• Serious Vulnerability Exploited at Hacking Contest Impacts Over 200 HP Printers

• Anonymous claims to have hacked the Central Bank of Russia

• New cyberespionage campaign targeting ISPs, research entities

• ADB Commands: A Beginner’s Guide

• ¿QUÉ ES FIM (FILE INTEGRITY MONITORING)?

• IT outage at Scotland’s Heriot-Watt University enters second week

• Researchers Trace LAPSUS$ Cyber Attacks to 16-Year-Old Hacker from England

• Zero trust implementation for device access falling behind

• Security threats today’s businesses need to look out for

• Do you know what your supply chain is and if it is secure?

• 10GB of Data Belonging to Nestlé Exposed [Updated]

• Hundreds of HP Printer Models Affected by Critical Remote Code Execution

• Most Singapore IT leaders cannot identify fake messages, but only half concerned about phishing risks

• Over 200 Malicious NPM Packages Caught Targeting Azure Developers

• How will recent risk trends shape the future of GRC

• Avast Invests in Digital Trust with SecureKey Acquisition

• Okta says 375 customers impacted by the hack, but Lapsus$ gang says it is lying

• The biggest security threats to today’s businesses

• Strengthening third-party vendor programs in times of crisis and beyond

• Check Point spreading AI goodness throughout its security portfolio

• Enterprises are engaged in a powerful battle to retain cybersecurity staff

• The importance of ramping up digital forensics and incident response tech investments

• What’s holding back zero trust implementation for device access?

• ​​​​​​​Staying safe online when you live off-grid

• Data center networking market to reach $40 billion by 2028

• IronNet to Announce Fourth Quarter and Fiscal Year 2022 Results on April 6, 2022

• State of the Cybersecurity Workforce: New ISACA Research Shows Highest Retention Difficulties in Years

• VMware Issues Patches for Critical Flaws Affecting Carbon Black App Control

• Checkmarx Supply Chain Security identifies potentially malicious open source packages

• Ninja Ticketing updates provide additional context and increase efficiency for IT teams

• MailStore 22.1 boosts compliance and security for administrators

• ExtraHop Reveal(x) 360 for AWS detects malicious activity across workloads

• Perle Systems IRG7440 5G Router & Gateway enables secure communications to multiple back-end systems

• F-Secure spins out new enterprise security business: WithSecure

• 4 Challenges of Using Anonymous User Data for UEBA

• Hawk AI and Weavr join forces to deliver contextual risk management for embedded finance

• Endace partners with Cubro to eliminate network blind spots and accelerate event investigation

• MixMode raises $45 million to automate cyberattack detection for organizations

• Nexthink collaborates with Qualtrics to improve employee experience in hybrid work environments

• Dialpad partners with MIA Distribution to expand its reach throughout Australia

• Secure Code Warrior collaborates with GitLab to enhance real-time secure coding guidance

• Sophos appoints Rob Lalumondier as VP of Federal Business

• Island raises $115 million to enable innovation on Enterprise Browser

• Spectro Cloud raises $40 million to accelerate growth and expand its go-to-market plan

• Theta Lake raises $50 million to help organizations manage complex security and compliance issues

• Nucleus Security raises $20 million to boost product development and enhance customer experience

• Report: Cloud automation is key to future-proofing cybersecurity

• Some developers are fouling up open-source software

• Guidewire opens new EMEA headquarters in Dublin

• F-Secure rebrands its corporate security business under the new name

• IriusRisk launches Open Threat Model Standard to simplify the generation of threat models

• Katya Gozias joins Guidepost Solutions as Managing Director in Los Angeles

• Uptake appoints Linda Bartman as President

• VMware fixes command injection, file upload flaws in Carbon Black security tool

• Data Breach: A 5-Step Response Plan

• Okta and the Lapsus$ breach: 5 big questions

• CISA’s Easterly wants to close the cyber workforce gender gap by 2030

• Can CDM work for state, local governments?

• Older Americans are given the wrong idea about online safety – here’s how to help them help themselves

• Data key to ensuring pandemic funding accuracy

• US says Russian ran online marketplace of stolen logins

• IT Security News Daily Summary 2022-03-23

• Okta names Sitel in Lapsus$ security incident impacting up to 366 customers

• BitLocker Guide: How to use this Windows encryption tool to protect your data

• A Closer Look at the LAPSUS$ Data Extortion Group

• Threat-resilient workforce key to preventing cyberattacks

• NJ mulls cyber incident reporting

• Serious Security: DEADBOLT – the ransomware that goes straight for your backups

• Ukrainian enterprises hit with the DoubleZero wiper

• Nestlé says it leaked its own test data, not Anonymous

• Re-bloom! Pwned Passwords v8

• Your Current Endpoint Security May Be Leaving You with Blind Spots

• CrowdStrike Named a Strong Performer in 2022 Forrester Wave for Cloud Workload Security

• Falcon OverWatch Threat Hunting Contributes to Seamless Protection Against Novel BlackCat Attack

• Senate bill would push replacement of legacy IT systems

• APT Attacks & Prevention

• Why Cybersecurity Incidents Are Among The Greatest Threats

• A Complete and Comprehensive Guide to ISO 27001 Compliance

• Cyber and future defense budgets

• Mustang Panda’s Hodur: Old tricks, new Korplug variant

• Prison for New Orleanian who Exploited Patients’ Stolen Data

• EFF Director of Investigations Dave Maass Honored With Sunshine Award For Driving Public Disclosure of Government Surveillance Records

• Lawsuit claims Kronos breach exposed data for ‘millions’

• FBI: Cybercrime Victims Suffered Losses of Over $6.9B in 2021

• Sysmon for Linux PowerShell Module

• Single-photon source paves the way for practical quantum encryption

• Logpoint Unleases SaaS-delivered Converged SIEM

• New Zscaler zero trust offering Redefines Zero Trust Network Access To Protect Against The Most Sophisticated Cyberattacks

• Microsoft and Okta Confirm Data Breach Claims by LAPSUS$

• A Parent’s Guide to TikTok

• Proposed bill would let people know when law enforcement is surveilling them

• Welcoming the Italian Government to Have I Been Pwned

• Ransomware, Malware-as-a-Service Dominate Threat Landscape

• Theta Lake Raises $50 Million in Series B Funding Round

• Okta Says 366 Customers Impacted via Third-Party Breach

• Celebrating Women’s History Month: Women Senior Leaders from Duo Share Their Stories

• Six strategic cyber investments for the next six months – and beyond

• Serious Security: DEADBOLT – the ransomware that goes straight for for your backups

• US and Canada Collaborate to Tackle Cybercrime

• Microsoft confirms breach, attributes attack to Lapsus$

• #IMOS22: Leeza Garber Explains How to Hire the Human Element

• CISA Warns CISOs to Brace for Attacks

• Payment Fraud Attack Rate Across Fintech Increased by 70% in 2021

• Apple Acquires UK Fintech Credit Kudos – Report

• West Blocks Russia’s Access to Weather Data

• Could Gaming Close the Cyberskills Gap?

• What’s up with in-the-wild exploits? Plus, what we’re doing about it.

• HubSpot Hack Results in Data Leak at Prominent Cryptocurrency Firms

• Cyber Security Risks That You Should Be Careful Of While Streaming

• Browser in the Browser Attacks | Avast

• DeadBolt Ransomware Resurfaces to Hit QNAP Again

• Cyber Insurance and War Exclusions

• Energy is going to be a target of cyber attacks, says CrowdStrike co-founder

• Okta admits 366 customers may have been impacted by LAPSUS$ breach

• White House urges US businesses: Protect against potential Russian cyberattacks

• Ukrainian Security Researcher  Source Code for New Conti Malware Has Been Exposed

• Now buy Raspberry Pi systems only with a 2-factor authentication

• Microsoft has Confirmed that they Were Compromised by the Lapsus$ Hacking Group

• After the China Initiative

• How a leading Microsoft engineer extends culture to service resiliency

• Cybercriminals made $7bn in pure profit in 2021, says FBI

• U.K. Cyber Firm Expands to North America Following Multi-Million Investment

• Meet the Young Women Tackling Gender Bias in Cybersecurity

• How to manage privileged users in IT

• 10 Things cybercriminals love about you

• UK Watchdog Warns 50 Crypto Firms Of ‘Misleading Ads’

• AvosLocker ransomware – what you need to know

• How was cybercriminals’ fiscal 2021? Nearly $7bn in pure profit, says FBI

• NOW LIVE: Supply Chain Security Summit & Expo (Virtual)

• A Sheep in Wolf’s Clothing: Technology Alone is a Security Facade

• This Is How Much The Average Conti Hacking Group Member Earns A Month

• Lockbit Wins Ransomware Speed Test, Encrypts 25,000 Files Per Minute

• Hackers Are Targeting European Refugee Charities

• Someone Hacked The Spelling Bee

• ImpressCMS: From Unauthenticated SQL Injection To RCE

• The NATO Treaty Does Not Give Congress a Bye on World War III

• GOING FOR (ISC)² CERTIFICATION? GET THE FACTS BEFORE YOU CHOOSE A TRAINING PROVIDER

• Americans more inclined to voluntarily give away personal information

• Report: Only 48% of orgs say they have implemented a formal ransomware strategy

• Microsoft: Lapsus$ Used Employee Account to Steal Source Code

• F-Secure Rebrands as WithSecure, Spins Off Consumer Products

• FBI warns of growing risks of Russia-linked attacks on US energy firms

• Microsoft and Okta confirm, detail impact of Lapsus$ gang’s attacks

• Internet crime in 2021: Investment fraud losses soar

• Okta Now Concedes Hundreds Of Customers Impacted By Breach

• Password Stealer Disguised as Fortnite Server Spreading On Discord | Avast

• Compliance Startup Trustero Emerges From Stealth With $8 Million in Funding

• Enterprise Patch Management: What It Is and Why You Need It

• Analysis Shows How Fast Various Ransomware Strains Encrypt 100,000 Files

• Chinese Cyberspies Seen Using macOS Variant of ‘Gimmick’ Malware

• Helping Mom & Dad: Family Video Chats

• This is how much the average Conti hacking group member earns a month

• Darktrace AI Stops Cyberattack Exploiting Log4j Vulnerability at Global Financial Services Provider

• Building a Red Team: How to Get Started

• Hacktivists Leak Email Data from Russian Pipeline Giant Transneft

• IBM Sues LzLabs Over Mainframe Patents

• IAM Secures the New, Perimeter-less Reality

• Building and scaling a security plan for your cloud-native apps (VB On-Demand)

• Virtual Event Today: Supply Chain Security Summit & Expo

• China-linked GIMMICK implant now targets macOS

• What to Do to Strengthen Your Security Ahead of Possible Cyberattacks Coming from Russia

• 10GB of Data Belonging to Nestlé Exposed

• Facestealer Spyware Fooled 100K+ Users On Google Play Store

• Island adds $115M for security-focused enterprise web browser

• Hundreds of HP printers affected by critical security issues

• Anonymous hacks unsecured printers to sends anti-war messages across Russia

• Nucleus Security generates $20M for unified vulnerability management

• Microsoft, Okta Confirm Data Breaches Involving Compromised Accounts

• 12,000 sensitive patient images leaked

• Sen. Rounds on growing cyber threats: Russia is frustrated, wants to send message to U.S.

• Lockbit wins ransomware speed test, encrypts 25,000 files per minute

• Apple Services Resume After Multiple Outages

• TokenEx raises $100M to enhance its anti-data breach cloud tokenization solution

• Medical Service Leaks 12,000 Sensitive Patient Images

• Fastest Ransomware Encrypts 100k Files in Four Minutes

• Chinese ‘Mustang Panda’ Hackers Spotted Deploying New ‘Hodur’ Malware

• Microsoft and Okta comfirm, detail impact of Lapsus$ gang’s attacks

• Putin and Biden Must Choose: How Does Russia Want to Lose?

• NASA’s Insider Threat Program

• Anonymous leaks 10GB of Nestle Data

• Microsoft Source Code Allegedly Leaked: Updated

• White House warns U.S. corporations of potential Russian cyber threat

• Elon Musk Opens Tesla Gigafactory In Germany

• MixMode lands $45M for self-learning security platform that combats zero days

• Okta Confirms 2.5% of Customers Impacted by Lapsus Breach

• It’s official, Lapsus$ gang compromised a Microsoft employee’s account

• Most Important Facts You Need To Know About Cyber Security in the Cloud

• New Variant of Chinese Gimmick Malware Targeting macOS Users

• FBI – Hackers Scanned 5 US Energy Firms, Expert Reaction.

• Lapsus$ Ransomware Continues Its Attack: OKTA Is Its Latest Victim

• Theta Lake raises $50M to secure use of collaboration apps

• Over 200,000 MicroTik Routers Worldwide Are Under the Control of Botnet Malware

• Lapsus$ Ransomware Continues Its Attack: OKTA Is Its Latest Victim – Synopsys

• Okta confirms hack, 2.5% of customers affected

• Two new nations join the list of countries posing as hacking threat

• Moscow denies possible cyber attacks on United States and Banditry rumors

• Fresh concerns about ‘indefinite’ UK government access to doctors’ patient data

• Build your own Android security product

• Okta now says: Lapsus$ may in fact have accessed customer info

• Three steps to secure an organization during mergers and acquisitions

• Companies should evolve their cybersecurity strategy in light of the Great Resignation

• ‘We want them to go to the Stone Age’: Ukraine coders split time between work and cyber warfare

• BitRAT Disguised as Windows 10 License Verification Tool to Compromise PC

• Okta should’ve ‘moved more swiftly’ to assess Lapsus$ breach, CSO says

• As breaches soar, companies must turn to cloud-native security solutions for protection

• The challenges audit leaders need to look out for this year

• Cybersecurity compliance: Start with proven best practices

• BEC Still #1, but Investment Fraud passes Romance Scams

• Okta: Lapsus$ breach may impact hundreds of customers

• CIOs’ growing responsibilities going beyond IT

• Unpacking OMB’s federal strategy for implementing Zero Trust

• Okta revises LAPSUS$ impact upwards to potentially 2.5% of customers

• EDoS: The Next Big Threat to Your Cloud

• Biden Approves Cybersecurity Reporting, Issues Rare Warning

• PagerDuty announces two products to drive automation throughout the enterprise

• Unpacking OMB’s federal strategy for implementing Zero Trust

• Perimeter intrusion detection systems market to reach $21.3 billion by 2026

• Okta admits Lapsus$ attack revealed customer data

• Okta revises LAPSUS$ impact upwards to potentially 2.5% of customers

• EDoS: The Next Big Threat to Your Cloud

• Biden Approves Cybersecurity Reporting, Issues Rare Warning

• Microsoft and Okta Confirm Breach by LAPSUS$ Extortion Group

• iPhone 15 Pro Rumored to Feature Under-Screen Face ID System From Samsung

• PagerDuty announces two products to drive automation throughout the enterprise

• Sequitur Labs EmSPARK Security Suite protects AI models powered by the NVIDIA Jetson platform

• Sonrai Security’s workload security capabilities remove risks across customer’s public cloud

• AvePoint Cloud Records enhancements improve information lifecycle management for enterprises

• Nvidia’s Morpheus AI security framework to land in April

• Microsoft confirms LAPSUS$ hit account with limited access after gang released alleged Bing and Cortana source

• Device Authority and Entrust join forces to provide machine identity automation for IoT

• RNT partners with Cloudian to offer ransomware protection for organizations

• FBI Sees Growing Russian Hacker Interest in US Energy Firms

• The Third-Party Okta Hack Leaves Customers Scrambling

• Apple Stops Signing iOS 15.3.1 Following iOS 15.4 Release, Downgrading No Longer Possible

• IDnow appoints Johannes Leser as VP Trust Services

• Tom McDonough joins Netography Board of Directors

• authID.ai raises $22.5 million to meet projected working capital requirements through 2023

• Neustar collaborates with Permutive to protect advertiser and publisher first-party identity data

• The metaverse may bring new cyber risks. Here’s what companies can do

• Microsoft discloses its findings on hacker group Lapsus$

• Security Teams Need to Investigate the Okta Breach Themselves

• Anonymous hacked Nestlè and leaked 10 GB of sensitive

• Apple Music, App Store and Other Apple Services Again Experiencing Outage [Update: Fixed]

• STG launches Skyhigh Security to protect data regardless of where it lies

• Fidelis Cybersecurity promotes Cameron Pforr to President

• Sean Tilley joins NormCyber as Sales Director

• Report: 60% of security threats are precursors to ransomware

• IT Security News Daily Summary 2022-03-22

• Lapsus$ Data Kidnappers Claim Snatches From Microsoft, Okta

• F-Secure splits in two as WithSecure launches

• Apple Music, App Store and Other Apple Services Again Experiencing Outage

• DEV-0537 criminal actor targeting organizations for data exfiltration and destruction

• Zoom’s new security authorization might mean expanded use by defense components

• Ransomware Group Claims Major Okta Breach

• Pentagon acquisition reforms may get more scrutiny

• Okta: Lapsus$ attackers had access to support engineer’s laptop

• New Warning from the White House Calls for Urgent Action

• A new rootkit comes to an ATM near you

• 4 leading practices for delivering business through the cloud

• Red Canary’s Annual Threat Detection Report Reveals Top Threats and Techniques Targeting Most Organizations

• A new wave of DeadBolt Ransomware attacks hit QNAP NAS devices 

• Are You Prepared for the New Normal of Jekyll and Hyde Data?

• How To Defend Railway Subsystems from Targeted Cyber-Attacks

• Facebook users wary of security mail find themselves locked out of accounts

• Authentication Specialist Okta Denies Data Breach

• CEOs: How to withstand potential cyber conflict

• ‘Secrets Sprawl’ Haunts Software Supply Chain Security

• Agencies look to streamline payment data collection in contracting

• Tiny, cheap solution for quantum-secure encryption

• Apple Releases Updated Firmware for Beats Fit Pro

• How To Do Preemptive Cybersecurity

• Cisco Looks To Hybrid Workplaces With Webex Updates

• LAPSUS$ Hackers Leak Trove of Data, Claim to Breach Microsoft and Okta

• Okta says attacker accessed engineer’s laptop for five days

• Facebook Group For Ukrainian Refugees Infiltrated By Trolls and Traffickers

• ‘The NSA could put the Russians back to the 19th century,’ in cyber warfare, says Christopher Rouland

• Google Settles Lawsuit With Fired Engineers

• Background Check Company Sued Over Data Breach

• Harness acquires ChaosNative to bring chaos engineering to software delivery

• Claimed Okta customer breach could be ‘extremely serious’

• White House warns of potential Russian cyberattack based on new intel

• Russia Lays Groundwork for Cyberattacks on US Infrastructure – White House

• Well done patching Log4j. Now, are you ready for the next zero day disaster?

• ‘Serpent’ Backdoor Used in Malware Attacks on French Entities

• ‘Spam Nation’ Villain Vrublevsky Charged With Fraud

• White House: Russia Preparing Cyber-Attacks on US

• Texan Accused of Credit Repair Scam

• Trustero Exits Stealth Mode and Launches its Compliance as a Service Platform

• Checkmarx Launches Comprehensive Supply Chain Security Solution

• Logpoint Unleashes SaaS-Delivered Converged SIEM

• Azure confidential computing with NVIDIA GPUs for trustworthy AI

• Attackers UtilizingDefault Credentials to Target Businesses, Raspberry Pi and Linux Top Targets

• According to Arkose Labs, the Bots Target Financial Organizations

• Scammers are Using Novel Technique to Target iPhone and Android Users

• Claimed Okta customer breach could be ‘extremely serious’

• White House warns of potential Russian cyberattack based on new intel

• Biden: Russia exploring cyber attacks against US

• Harness acquires ChaosNative to bring chaos engineering to software delivery

• Well done patching Log4j. Now, are you ready for the next zero day disaster?

• Shields Up: Securing Your Perimeter

• Exploring a New Class of Kernel Exploit Primitive

• What Concerns Cyber Pros Most About the Invasion of Ukraine

• Attackers UtilizingDefault Credentials to Target Businesses, Raspberry Pi and Linux Top Targets

• According to Arkose Labs, the Bots Target Financial Organizations

• Scammers are Using Novel Technique to Target iPhone and Android Users

• Google Settles Lawsuit With Fired Engineers

• Russia Lays Groundwork for Cyberattacks on US Infrastructure – White House

• ‘Serpent’ Backdoor Used in Malware Attacks on French Entities

• ‘Spam Nation’ Villain Vrublevsky Charged With Fraud

• White House: Russia Preparing Cyber-Attacks on US

• Texan Accused of Credit Repair Scam

• Background Check Company Sued Over Data Breach

• Trustero Exits Stealth Mode and Launches its Compliance as a Service Platform

• Checkmarx Launches Comprehensive Supply Chain Security Solution

• Logpoint Unleashes SaaS-Delivered Converged SIEM

• New iPhone SE Nearly as Tough as iPhone 13 in Drop Test Thanks to Improved Glass

• Deals: Get the Apple Pencil 2 for $103.99 ($25 Off), 32GB Apple TV 4K for $169 ($10 Off), More

• Azure confidential computing with NVIDIA GPUs for trustworthy AI

• Logz.io Achieves AWS Security Competency Status

• Tom McDonough Joins Netography’s Board of Directors

• Companies Failing to Protect Themselves Against Cyberattacks Even When Patches Exist According to New Survey

• Public Cloud Security Top of Mind as 1 in 2 Experienced a Breach During COVID-19

• 5 Industries that need advanced Cybersecurity measures

• Facestealer Infects 100,000+ Users Distributed Through Google Play

• Russia Lays Groundwork for Cyberattacks on US Infrastructure

• QNAP Devices Targeted in New Wave of DeadBolt Ransomware Attacks

• Zscaler Unveils Security Service Edge Innovations to Protect Enterprises From Cyberattacks

• Three critical RCE flaws affect hundreds of HP printer models

• Apple Podcast Creators Will Soon Be Able to Access Follower Metrics

• Apple’s Shazam App Gains Concert Discovery Feature

• Browser-in-The-Browser Attack – A New Phishing Strategy

• A Review of SecuX V20 Hardware Crypto Wallet

• KeePassXC 2.7.0 update with improved Auto-Type, Tags for entries launches out of beta

• Russia Finds Meta ‘Guilty’ Of Extremism Activity

• FIDO: Here’s Another Knife to Help Murder Passwords

• Drupal Releases Security Updates

• FBI and FinCEN Release Advisory on AvosLocker Ransomware

• LAPSUS$ Hackers Claim to Have Breached Microsoft and Authentication Firm Okta

• Lapsus$ Ransomware attack on Okta leads to a data breach

• ‘This Is Really, Really Bad’: Lapsus$ Gang Claims Okta Hack

• Drupal Releases Security Updates

• FBI and FinCEN Release Advisory on AvosLocker Ransomware

• Corrupted Open-Source Software Enters The Russian Battlefield

• Okta Breached Through Customer Support

• Biden: Russia Exploring US Cyber Attacks

• Serpent Backdoor Uses Chocolatey Installer

• iPhone 14 Pro and iPhone 14 Pro Max Schematics Reveal Larger Camera Bump and Thicker Overall Design

• Lapsus$ Hackers Claim to Have Breached Microsoft and Authentication Firm Okta

• White House Warns of Possible Russian Cyberattacks

• SOC Level Up: Introduction to Sigma Rules

• LAPSUS$ & OKTA: The Cyber Attacks Continue

• Serpent Backdoor Slithers into Orgs Using Chocolatey Installer

• Lapsus$ extortion gang claims to have stolen sensitive data from Okta

• Here’s a Sneak Peek Inside Apple’s New Studio Display

• IoT Security and the Internet of Forgotten Things

• LAPSUSS & Okta: The Cyber Attacks Continue

• Application Security Firm ForAllSecure Raises $21 Million

• Demystifying Zero Trust

• Security Teams are Responsible for Over 165k Assets

• The Secret to Zero Trust You Need to Know

• Microsoft Source Code Allegedly Leaked

• Microsoft Investigates After Lapsus$ Hack Claim

• OKTA breached by Lapsus$ Ransomware Gang

• Multi-factor authentication: How to enable 2FA to step up your security

• Wazuh Offers XDR Functionality at a Price Enterprises Will Love — Free!

• Deals: AirTag 4-Pack Available for $89 on Amazon ($10 Off)

• Trustero launches SOC 2 compliance platform

• More can be done to curb misuse of Cobalt Strike, expert says

• 97% of security findings are related to cloud, study finds

• Android app with 100,000 downloads contained password-stealing malware, say security researchers

• Social engineering attacks to dominate Web3, the metaverse

• White House warns: Do these 8 things now to boost your security ahead of potential Russian cyberattacks

• Authentication oufit Okta investigating Lapsus$ breach report

• Over 1 Million Impacted in Data Breach at Texas Dental Services Provider

• U.S. Government Warns Companies of Potential Russian Cyberattacks

• US critical infrastructure operators should prepare for retaliatory cyberattacks

• Authentication firm Okta says it has found no evidence of new attack after hackers claim breach

• #IMOS22: Ciaran Martin Discusses Cyber-Threats from the Russia-Ukraine Conflict

• #IMOS22: Ciaran Martin Discusses Cyber Threats from the Russia-Ukraine Conflict

• Modernizing our Certificates and Badges

• Apple Fined €5 Million for Ninth Time in the Netherlands Over Third-Party In-App Payment Systems

• Apple to Face Claims it Bars Third-Party Heart-Rate App Functionality on Apple Watch

• Sonrai expands cloud security platform, adding workload protection

• Microsoft, Okta Investigating Data Theft Claims

• High-Severity UEFI Vulnerabilities Patched in Dell Enterprise Laptops

• 100,000 Google Play Users Targeted by Android Password Stealing Malware

• OneWeb To Use SpaceX Rockets For Satellite Launches

• Okta says breach evidence posted by Lapsus$ hackers linked to January ‘security incident’

• SSE Company Skyhigh Security Emerges From McAfee Enterprise

• Discord With Native Apple Silicon Support Now Rolling Out

• New attack technique makes phishing near undetectable

• Apono emerges from stealth to redefine permissions management

• AvosLocker ransomware hits critical infrastructure

• Lapsus$ gang says it has breached Okta and Microsoft

• Malware as a Service. What It Is and How It Can Threaten Your Business?

• The Neo Digital Nomad

• 5 Social Engineering Attacks to Watch Out For

• LAPSUS$ claims to have breached Okta

• Joe Biden issues warning to all CEOs about Russian Cyber Attack

• Hotels in Macau Targeted in Attacks Linked to South Korea’s DarkHotel APT

• Dark Web Drug Peddler Gets Nine Years

• Lapsus$ extortion gang leaked the source code for some Microsoft projects

• CafePress slapped with $500,000 penalty for data breach

• Mitigate Top 5 Common Cybersecurity Vulnerabilities

• The Obsession with Faster Cybersecurity Incident Reporting

• Okta Investigates Possible Lapsus Breach

• Mikko Hyppönen: WithSecure will bring focus on ML to counter cybercrime

• Biden says Russia exploring revenge cyberattacks

• Looking for adding new detection technologies in your security products?

• Biden warns Russia exploring revenge cyberattacks

• Decentriq raises $15M to expand its data clean rooms platform

• President Biden warns Russia exploring revenge cyber attacks

• New Dell BIOS Bugs Affect Millions of Inspiron, Vostro, XPS, Alienware Systems

• Securing DevOps amid digital transformation

• Zscaler adds new zero trust network access capabilities

• Just how do you build a healthy software pipeline and make sure it’s secure?

• The not so scary truth about zero-day exploits

• Expanding threat landscape: Cybercriminals attacking from all sides

• Serpent backdoor targets French entities with high-evasive attack chain

• HEAT attacks: A new class of cyber threats organizations are not prepared for

• Podcast Episode: Hack to the Future

• EU and US Agencies Warns that Russia Could Attack Satellite Communications Networks

• APAC firms see need to train staff in digital skills, but few actually do so

• This is a BlackCat you don’t want crossing your path

• How the increase in ransomware has impacted the cyber insurance market

• McAfee Cloud Launches as Skyhigh Security

• A Search for API Security in the Operator’s Tool Box

• The value of running stateful applications on Kubernetes

• McAfee Enterprise’s security service edge business is now called Skyhigh Security

• Password management market to reach $2.9 billion by 2027

• McAfee Enterprise cloud security biz relaunches as Skyhigh

• Skyhigh Security rises from McAfee-FireEye’s SSE

• STG launches Skyhigh Security from McAfee cloud assets

• What does Go-written malware look like? Here’s a sample under the microscope

• NICE Actimize X-Sight Entity Risk enhances end-to-end enterprise fraud solutions’ effectiveness

• Finite State’s compliance mapping feature allows companies to confirm if their products meet compliance

• Hacking group claims to leak Microsoft source code

• Biden Warns US Companies of Potential Russian Cyberattacks

• Sandworm: A tale of disruption told anew

• Russia-linked InvisiMole APT targets state organizations of Ukraine

• ComplyAdvantage partners with Resistant AI to enhance AML capabilities for financial organizations

• Ban Online Behavioral Advertising

• 2022-03-21 – Infection from Brazil malspam

• 450connect collaborates with HUBER+SUHNER to help achieve Germany’s energy policy goals

• Cisco partners with Rakuten to create cloud-native 5G mobile networks based on O-RAN technology

• Bandwidth and Pindrop join forces to protect enterprises against voice-based attacks

• ForAllSecure raises $21 million to secure open source projects used by businesses around the world

• ‘Unintended consequences’: Officials warn amateurs against hacking Russia

• Illicit Crypto Activity Detected By US Treasury Department

• Firefox will efficiently play AV1 video—if you have a brand-new GPU

• White House warns of possible Russian cyberstrike on US critical infrastructure

• White House tells CEOs to brace for ‘long-term’ disruptions from Russia-Ukraine conflict

• Browser-in-the-Browser Attack Makes Phishing Nearly Invisible

• Logpoint appoints John Little as CFO

• Aparna Rayasam joins Trellix as CPO

• Is Russia exploring cyberattacks against U.S. in response to hacktivists?

• Ukrainian tech publications pivot to cover the war and provide survival advice

• Biden warns organizations to harden cyber defences against Russian cyber attacks

• Studio Display Enables ‘Hey Siri’ on Several Older Macs

• Report: 89% of enterprises have been attacked by Kubernetes ransomware

• Binarly Coordinates Patches for 3 Firmware Flaws With Dell

• Russia is exploring options for cyberattacks, and companies must be ready, says Biden

• IT Security News Daily Summary 2022-03-21

• iOS 15.4 Adds New ‘Scan Text’ Shortcut in Notes App

• ForAllSecure Raises $21M to Secure the World’s Software

• ‘Unique Attack Chain’ Drops Backdoor in New Phishing Campaign

• Anti-War Hacktivism is Leading to Digital Xenophobia and a More Hostile Internet

• The New Filter Mandate Bill Is An Unmitigated Disaster

• Fake Esports voting sites looking to phish Steam users

• A Whirlwind Tour Of Crypto Phishing

• Citing ‘evolving intelligence,’ White House flags risks of Russian cyberattacks on critical infrastructure

• PISCES trains entry-level cyber analysts to protect small municipalities

• Corrupted open-source software enters the Russian battlefield

• Lapsus$ gang claims to have hacked Microsoft source code repositories

• AvosLocker ransomware uses Microsoft Exchange Server vulnerabilities, says FBI

• Citing “evolving intelligence,” White House flags risks of Russian cyberattacks on critical infrastructure

• White House Warns of New Intel on Russia Mulling Cyberattack ‘Options’ Against US

• Smart cities awards names 17 winners

• iCloud and Many Other Apple Services Are Down or Experiencing Issues [Resolved]

• iOS 15.4 Lets You Instantly Scan Handwritten Text Into the Notes App

• Russia is exploring options for cyberattacks and companies must be ready, says Biden

• Cryptocurrency companies impacted by HubSpot breach

• What You Need to Know for a Safe Web Browsing Experience?

• Microsoft investigates after Lapsus$ gang brags of Bing, Cortana code heist

• Facestealer Trojan Hidden in Google Play Plunders Facebook Accounts

• How to Keep Your Kids Safe on the Internet

• Cyber Attacks from Chinese IPs on NATO Countries Surge by 116%

• GSA relaunches federal IT dashboard

• Russia-Linked Cyclops Blink Botnet Attacking ASUS Routers

• Agencies confront rising cyber insurance rates

• ASUS Warns of Cyclops Blink Botnet Targeting Its Routers

• Defending Against Misconfigured MFA & PrintNightmare Vulnerabilities

• iCloud and Many Other Apple Services Are Down or Experiencing Issues

• Chinese Call Center “Runner” Pleads Guilty in Georgia

• Nakasone nixes the idea of an info-ops sub command

• Conti Ransomware V. 3, Including Decryptor, Leaked

• FTC Accuses CafePress of Data Breach “Cover-Up”

• New Mexico Appoints Cybersecurity Advisor

• NRA Reacts to Allegations of a Ransomware Campaign

• China-Sponsored Hacking Groups are Targeting Ukrainian government

• SolarWinds Alerted About Attacks Targeting Web Help Desk Instances

• Web vendor CafePress fined $500,000 for giving cybersecurity a low value

• Dental Care Data Breach May Impact 1 Million Texans

• Vulnerability Summary for the Week of March 14, 2022

• Bridgestone Hit As Ransomware Torches Toyota Supply Chain

• FIDO Alliance Says It Has Finally Killed The Password

• Global Regulators Monitor Crypto Use In Ukraine War

• New Conti Ransomware Source Code Leaked

• Scottish Mental Health Charity SAMH Targeted In Cyber Attack

• Apple Stores Can Upgrade a Studio Display’s Stand After Purchase

• iCloud is Down and Other Apple Services Experiencing Issues

• Bionic raises $65M for solution to application layer attacks

• Name That Toon: Sleep Like a Baby

• Vulnerability Summary for the Week of March 14, 2022

• Tiny magnets could hold the secret to new quantum computers

• Multilingual Cybersecurity Awareness Training adapted for your needs

• There’s no final number yet for pandemic fraud, oversight leaders tell Congress

• Mac Studio Storage Not User-Upgradeable Due to Software Block

• Deals: Apple’s 24-Inch iMac Hits Record Low Prices at Up to $150 Off

• VPN For Streaming – Do You Need One?

• Researchers Find CryptoRom Scam Active Via Sideloaded Apps

• In Cyber Warfare, Everyone Worldwide Can Become Collateral Damage

• Western Digital’s EdgeRover desktop program had a bug that granted elevated privileges on Windows and macOS

• CISA, FBI warn of Russian threat to satellite networks

• A bipartisan bill would make it easier to hire feds during public health emergencies

• Viasat chairman on recent hack: Can’t confirm whether Russia was behind cyber attack

• Report: Only 27% of orgs have advanced threat protection on endpoints

• How a few geothermal plants could solve America’s lithium supply crunch and boost the EV battery industry

• Western Digital tells EdgeRover users to patch app again

• Developer Sabotages Open-Source Software Package

• Judge Ketanji Brown Jackson on National Security Law: A Reader’s Guide

• mutual authentication

• FIDO Alliance says it has finally killed the password

• Italy’s data privacy watchdog investigates how Kaspersky manages Italian users’ data

• Ketanji Brown Jackson, Guantanamo and the Role of Defense Attorneys

• Leading Semiconductor Physicist Killed In Ukraine Fighting

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of March 14, 2022

• Bridgestone Hit as Ransomware Torches Toyota Supply Chain

• Satellite comms networks on alert after US govt warning

• Hacktivists Leak Data Allegedly Stolen From Russian Energy Giant Transneft

• 2 zero-trust cloud security models emerge as demands shift

• Ransomware Attack Led Bridgestone to Halt US Tire Production for a Week

• Third-Generation iPhone SE Teardown Reveals Larger Battery Capacity and Snapdragon X57 Modem

• Apple Removes Ability to Buy and Rent in Update to Apple TV App for Android TV and Google TV

• Moscow Court Rejects Meta Call To Dismiss Extremism Case

• The Big Reason Why You Should Update Your Browser (and How to Do It)

• Supply-Side Hackonomics: Supply Chain Attacks and Data Security

• Ukraine warns of InvisiMole attacks tied to state-sponsored Russian hackers

• AvosLocker group is targeting US critical infrastructure, FBI says

• Will the Biggest Clouds Win? Lessons From Google’s Mandiant Buy

• Crowdsourced Efforts Get Leveraged in Ukraine Conflict

• Brazil’s “Remuneration Right” Strengthens Big Tech and Big Media, At the Cost of Free Expression and a Free Press

• Hacker leaked a new version of Conti ransomware source code on Twitter

• Kuo: Apple Watch Series 3 May Finally Be Discontinued Upon Its Fifth Anniversary in Q3 2022

• Deals: AirPods Pro With MagSafe Drop to 2022 Low Price of $174.98

• EXPERT COMMENT: As British Army Bans WhatsApp Over Russia Fears, A Secure Comms Revolution Is Critical

• Cloudflare Launches “Friendly Bots” For Swift Bot Verification

• Hackers Now Use CAPTCHAs To Bypass Filters For Successful Phishing Attacks

• US CISA And FBI Warn SATCOM Networks Of Cyber Threats

• Italy Investigates Russia’s Kaspersky Antivirus Software

• New Phishing Toolset Allows for Browser in the Browser (BitB) Attacks

• Site Reliability Engineering Spotlight: Powering Our Platform to Support Our Customers

• To Make Social Media Work Better, Make It Fail Better

• Regulators Monitor Crypto Over Russia Sanction Fears

• Volkswagen Inks Joint Ventures For China EV Battery Supplies

• FBI warns on ransomware that uses DDoS to threaten victims. Here’s what to watch out for

• New Conti ransomware source code leaked

• Zoom agrees privacy conditions, gets low-risk rating from Netherlands

• Cryptocurrency Services Hit by Data Breach at CRM Company HubSpot

• New Browser-in-the Browser (BITB) Attack Makes Phishing Nearly Undetectable

• Diavol Ransomware Receives Free Decryptor

• Facebook phish claims “Someone tried to log into your account”

• ForAllSecure lands $21M for autonomous app security testing

• Ukrainian Security Researcher Leaks Newer Conti Ransomware Source Code

• A week in security (March 14 – 20)

• Suspected DarkHotel APT resurgence targets luxury Chinese hotels

• Apple Studio Display Contains 64GB of Storage, But Only 2GB Used

• Former Apple Employee Charged With Defrauding Company of Over $10 Million

• New laws to strengthen UK cybersecurity provisions

• Australia To Give Media Regulator New Powers In Misinformation Push

• Re-bloom! Pwned Passwords v8

• Seven Ways to Keep your Smart Home Devices out of the Hands of Hackers

• AvosLocker Ransomware Striking Critical Infrastructure Targets

• Hackers target luxury hotels in Macau

• Attackers employ novel methods to backdoor French organizations

• Meta Adds Parental Controls To VR, Instagram

• NFT Fraud in the UK Soars 400% in 2021

• Thew POWER Of OSINT (Open-Source Intelligence)

• Hubspot breach spreads to BlockFi, Swan Bitcoin

• Serious vulnerability observed on Unisoc processors loaded Android Phones

• WhatsApp ban issued across the UK for military personnel

• Sysmon for Linux PowerShell Module

• More Conti group source code leaked

• Heineken Launches Virtual Beer In Metaverse

• Anonymous Group Hacked Russian Oil Pipeline Giant and Released 79 GB of Stolen Data

• Welcoming the Italian Government to Have I Been Pwned

• New Backdoor Targets French Entities via Open-Source Package Installer

• ‘CryptoRom’ Crypto Scam Abusing iPhone Features to Target Mobile Users

• Qualys platform study: Log4Shell, the menace continues

• Trying to register your antivirus in Windows Security Center?

• DirtyMoe modules expand the bot using worm-like techniques

• South Korean DarkHotel Hackers Targeted Luxury Hotels in Macau

• Why machine identities matter (and how to use them)

• Russia Based Cyclops Blink Malware Targeting ASUS Routers Models

• Cybersecurity Red Team 101

• How to become a passwordless organization

• Payment fraud attack rate across fintech ballooned 70% in 2021

• What makes a successful development team?

• Hybrid cloud solutions are the long-term target for most companies

• Healthcare IT market to reach $484 billion by 2026

• IT leadership appointments: CyberSaint, Deepwatch, Imperva, Perimeter 81, and Zilla Security

• EPP/EDR: What Is It and How Can It Help to Keep Your Organization Safe?

• How to Combat Asset Blindness in OT Security

• Australia pledges new powers for combatting online disinformation

• Russian hackers’ Cyclops Blink botnet targets Asus routers around the world

• The TikTok-Oracle deal would set two dangerous precedents

• Server issues lock Gran Turismo 7 owners out of single-player races

• Review: Apple Mac Studio and Studio Display

• Russia’s Killer Drone in Ukraine Raises Fears About AI in Warfare

• CISA, FBI Warn of Russian Threat to Satellite Networks

• Australia launches federal cybercrime centre as part of national plan

• IT Security News Weekly Summary – Week 11

• IT Security News Daily Summary 2022-03-20

• How to Use JWT Securely

• We are headed for an ecosystem of cyber haves and cyber nots: Cisco advisory CISO

• 5 Reasons Organizations Need Comprehensive AD Security Across Cloud and On-Prem

• Directed Analytics – The Future of Data Management

• Phishing Techniques in Disguise: What to Look for And Why You Should

• Theft of 54 million SA Records, as per TransUnion Linked to the Current Breach

• Multiple Similarities Identified in BlackMatter And BlackCat Ransomware

• Gurman: Redesigned MacBook Air Delayed to Second Half of 2022, No New High-End MacBook Pro Likely Until Next Year

• Why client-side web application security is critical to protecting from Magecart and other similar attacks

• Anonymous leaked data stolen from Russian pipeline company Transneft

• Mar 13- Mar 19 Ukraine – Russia the silent cyber conflict

• Some iPad Air 5 Users Complain About Creaking and Build Quality Downgrade

• Gurman: MacBook Air Delayed to Second Half of 2022, No New High-End MacBook Pro Likely Until Next Year

• Europe After the Ukraine War

• The Enduring Danger of Russia’s Cluster Bombs in Ukraine

• Security Affairs newsletter Round 358 by Pierluigi Paganini

• The risk of undermanaged open source software

• Apple Updates Boot Camp to Support Studio Display

• Mac Studio Teardown Indicates That SSD Storage May Be Upgradeable

• How to Limit Who Can Contact You on Twitter

• EU and US agencies warn that Russia could attack satellite communications networks

• Severe Vulnerability Patched in CRI-O Container Engine for Kubernetes

• Week in review: The secret to app security, new issue of (IN)SECURE Magazine

• Penetration testing

• This New Russian Cyclops Blink Botnet Targets ASUS Routers

• Perimeter 81 hires Gily Netzer as VP of Marketing

• ZAP-Hosting – 746,682 breached accounts

Generated on 2022-03-27 23:59:27.508183