IT Security News Weekly Summary – Week 13

• IT Security News Daily Summary 2022-04-03

• Three Ways IP Data Enhances Cyber Security

• Your Guide to the NIST Cybersecurity Framework

• Info Stealing BlackGuard Malware is Advertised for Sale on Russian Hacking Forums

• Viasat: Acid Rain Virus Disable Satellite Modems

• Adversarial AI and the dystopian future of tech

• Dispersive Holdings Announces Version 4.3 Network Fabric, Showcasing New User Experience

• Apriori Network System’s Innovative Optical Fiber Hack-Proof Solution a Better Value Proposition than Quantum Encryption

• Changes to the CISSP Exam Length Coming Soon

• China-linked APT Deep Panda employs new Fire Chili Windows rootkit

• What Does Arming an Insurgency in Ukraine Mean?

• BlackGuard – New Password Stealing Malware Sold In Russian Hacking Forum

• Mar 27 – Apr 02 Ukraine – Russia the silent cyber conflict

• Blockchains Have a ‘Bridge’ Problem, and Hackers Know It

• Security Affairs newsletter Round 359 by Pierluigi Paganini

• Severe Flaws in Rockwell PLC Could Allow Attackers to Implant Malicious Code

• NSA Employee Indicted for ‘Leaking Top Secret Info’ To a Woman

• Week in review: Spring4Shell vulnerability, attackers exploiting patched RCE in Sophos Firewall

• PCI DSS Launches New Version to Tackle Cyber Security Threats

• CrowdStrike Achieves 100% Prevention in Fourth Round of MITRE Engenuity ATT&CK® Enterprise Evaluations

• Tips from a CISO: How to Create a Security Program

• Aparavi partners with Wasabi to improve data storage and management strategies for organizations

• VMware says 3 Tanzu products impacted by Spring4Shell vulnerability

• Ermetic announces strategic investment from Splunk Ventures to help customers solve security challenges

• Anonymous leaked 15 GB of data allegedly stolen from the Russian Orthodox Church

• Versa Networks moves company headquarters location to a new facility

• Eddie Pickle joins Crunchy Data as SVP of Public Sector

• PCI SSC publishes PCI Data Security Standard v4.0 to secure global payment data

• IT Security News Daily Summary 2022-04-02

• UK Police charges two teenagers for their alleged role in the Lapsus$ extortion group

• Spring4Shell Zero-Day Vulnerability

• After 17 years, the Zlib Crash-An-App Flaw Has Been Patched

• Pune Police Recover Over Rs. 84 Crore Worth of Bitcoins From Two Cyber Experts

• Cybersecurity, Especially in Critical Infrastructure and State Government, Is A Huge Issue Right Now

• Log4j Showed Us That Public Disclosure Still Helps Attackers.

• Cynet Announces Results in 2022 MITRE Engenuity ATT&CK® Enterprise Evaluations

• Meet the Young Women Tackling Gender Bias in Cybersecurity

• Russia Linked Android Malware Access Camera, Audio & Location

• See How Dell Technologies is Elevating the Hybrid Work Experience

• Beastmode Mirai botnet now includes exploits for Totolink routers

• Crooks use fake emergency data requests to get personal info out of Big Tech – report

• Fake Cops Scammed Apple and Meta to Get User Data

• You Need a Password Manager. Here Are the Best Ones

• Chinese Hackers Are Abusing Log4Shell to Deploy Rootkits on VMware Horizon Servers

• Hive Ransomware Employs New ‘IPfuscation’ Tactic to Conceal Payload

• US Health Provider LEHB Hit by Ransomware Attack, Network Compromised

• Ukraine intelligence leaks names of 620 alleged Russian FSB agents

• Critical CVE-2022-1162 flaw in GitLab allowed threat actors to take over accounts

• Trend Micro fixed high severity flaw in Apex Central product management console

• 15-Year-Old Bug in PEAR PHP Repository Could’ve Enabled Supply Chain Attacks

• GOING FOR (ISC)² CERTIFICATION? GET THE FACTS BEFORE YOU CHOOSE A TRAINING PROVIDER

• Google Meet looks to match Zoom with key security feature

• GitLab Releases Patch for Critical Vulnerability That Could Let Attackers Hijack Accounts

• British Police Charge Two Teenagers Linked to LAPSUS$ Hacker Group

• SentinelOne Leads MITRE Engenuity ATT&CK® with 100% Prevention, Detection, and Highest Scores

• Week in security with Tony Anscombe

• Report: Majority of execs believe data is vital to sustain the metaverse

• Congress Invests in National Cyber Resilience but Misses Important Opportunities in the Consolidated Appropriations Act

• Layoffs in China’s Tech Sector Stoke Larger Unemployment Fears

• Data Theorem offers security notifications within AWS Security Hub to prevent data breaches

• California: Speak Up For Biometric and Student Privacy

• Gunjan Aggarwal joins Confluent as CPO

• BeamUP attracts $15M for facilities digital twins

• Apple’s Zero-Day Woes Continue

• X1 appoints Larry Gill as CEO

• Scammers are Exploiting Ukraine Donations

• The pros and cons of Netskope SASE

• New UAC-0056 activity: There’s a Go Elephant in the room

• IT Security News Daily Summary 2022-04-01

• Report: One in four employees who made security mistakes lost their job

• Blockchain can power up government processes, GAO says

• Login.gov plans to scale up without facial recognition tech – for now

• New Subscription: Learn Fundamentals

• Agencies can accelerate AI deployments with ModelOps

• Apple Releases Security Updates

• Apple releases macOS 12.3.1, iOS 15.4.1, watchOS 8.5.1 and more

• How safe are your crypto assets?

• This Week in Security News – April 1, 2022

• New bill takes aim at veterans records backlog

• FBI urges local agencies to prepare for ransomware attacks

• NSA Employee Indicted for Sending Classified Data Outside the Agency

• GitLab issues critical update after hard-coding passwords into accounts

• Spring Releases Security Updates Addressing “Spring4Shell” and Spring Cloud Function Vulnerabilities

• Update now! Apple patches two zero-day vulnerabilities that may have been actively exploited

• Globant suffers network breach due to LAPSUS$ compromise

• Hive ransomware impacts California non-profit health organisation

• Only a transformation of service delivery can rebuild trust in government. Here’s how.

• The benefits of digital payments automation for local government

• Google survey suggests government workers dissatisfied with legacy software, concerned over cyberattacks

• House Passes Better Cybercrime Metrics Act

• Public.Resource.Org Can Keep Freeing the Law: Court Allows Posting Public Laws And Regulations Online

• Two teenagers charged in connection with investigation into hacking group, says City of London police

• What You Need to Know About PCI DSS 4.0’s New Requirements

• FBI Warns Election Officials of Credential Phishing Attacks

• Experts Warn Defenders: Don’t Relax on Log4j

• New Spear Phishing Campaign Targets Russian Dissidents

• Log4Shell is Employed in 31% of Malware infections, Lacework Labs Identifies

• 82% Applications in Public Sector Have Security Flaws

• Spring4Shell vulnerability: Should you patch?

• US Cyber Command Partners with APUS

• NSA Employee Accused of Sharing National Defense Secrets

• CERT/CC Releases Information on Spring4Shell Vulnerability

• JupyterLab Web Notebooks Targeted by Unique Python-Based Ransomware

• New AcidRain malware hit Viasat’s modems downing Ukraine’s internet

• Generosity Beware: Protecting Your Organization and Its Members From Cyber Theft

• tru.ID Adds Sorenson Ventures to $9m Seed Round to Scale the Mobile Cybersecurity Platform

• What Concerns Cyber Pros Most About the Invasion of Ukraine

• Zimperium acquired by Liberty Strategic Capital for $525M

• Report: Facebook Has Failed To Label 80 Percent Of Posts Promoting Russian Conspiracy Theory

• Modem-wiping malware was behind Viasat cyberattack

• Best VPN for Windows PC (2022)

• More Charged In UK Lapsus$ Investigation

• Apple Rushes Out Patches For Two Zero Days Threatening Users

• Deep Panda Returns With Log4Shell Exploits, New Fire Chili Rootkit

• Ubiquiti Sues Brian Krebs Alleging Defamation

• Ukraine Accuses Russia Of Using WhatsApp Bot Farm To Ask Military To Surrender

• Report: 84% of enterprises struggle to manage their endpoint security

• Anonymous targets oligarchs’ Russian businesses: Marathon Group hacked

• 5G edge and security deployment evolution, trends and insights

• Viasat’s Satellite Modems Wiped

• FBI Warns of Ransomware Attacks Targeting Local Governments

• More Than Ever, Security Matters

• Russian Wiper Malware Likely Behind Recent Cyberattack on Viasat KA-SAT Modems

• An In-Depth Look at ICS Vulnerabilities Part 1

• Russian Bailiffs Seize $12m From Google – Report

• More charged in UK Lapsus$ investigation

• Russian Wiper Malware Responsible for Recent Cyberattack on Viasat KA-SAT Modems

• AcidRain, a wiper that crippled routers and modems in Europe

• Results overview: 2022 MITRE ATT&CK Evaluation – Wizard Spider and Sandworm edition

• SunVia bets that controlling your own identity will make the metaverse successful

• Chinese hackers Deep Panda return with Log4Shell exploits, new Fire Chili rootkit

• FBI: Ransomware attacks are piling up the pressure on public services

• Cybersecurity survival tips for small businesses: 2022 edition

• Apple Rushes Out Patches for 0-Days in MacOS, iOS

• PCI Data Security Standard v4.0 Released to Address Emerging Threats

• What Is S/MIME?

• BlackGuard, a New Info-Stealer, for Sale on Russian Hacking Forums

• CISA Cautions of Attacks on UPS Devices

• Critical Bugs in Rockwell PLC Could Allow Hackers to Implant Malicious Code

• Russia Bans Acquisition Of Foreign Software For Critical Infrastructure

• Zyxel urges customers to patch critical firewall bypass vulnerability

• Is it OK to use text messages for 2-factor authentication? [Ask ZDNet]

• New Vulnerabilities Allow Stuxnet-Style Attacks Against Rockwell PLCs

• Russia Inches Toward Its Splinternet Dream

• Bypassing Two-Factor Authentication

• 2022-03-29 – Emotet E4 with Cobalt Strike

• Government workers rely on Microsoft. That could be a security problem, Google claims

• Trend Micro Patches Apex Central Zero-Day Exploited in Targeted Attacks

• Results Overview: 2022 MITRE ATT&CK Evaluation – Wizard Spider and Sandworm Edition

• Chinese Hackers Target VMware Horizon Servers with Log4Shell to Deploy Rootkit

• Security Experts On PCI DSS 4.0 Released

• Experts Insight On Spring4Shell Vulnerability

• UK spy chief praises fake news counter cell

• Majority of data security incidents caused by insiders

• Deep Panda Hacking Group Is Targeting VMware Horizon Servers

• JupyterLab’s Web Notebooks Hit Clipped Emergent Python-based Ransomware Strain

• Samsung Begins Self-Repair Program For Galaxy Devices

• The spectre of Stuxnet: CISA issues alert on Rockwell Automation ICS vulnerabilities

• Antimatter Emerges From Stealth Mode With $12M to Secure Customer Data

• Spring4Shell Exploitation Attempts Confirmed as Patches Are Released

• North Korean Hackers Distributing Trojanized DeFi Wallet Apps to Steal Victims’ Crypto

• Apple And Meta Shared Data With Hackers – Experts Reactioins

• Privilege Elevation and Delegation Management Explained: Definition, Benefits and More

• Google: Russian credential thieves target NATO, Eastern European military

• DDoS Protection Tips

• Cyber Threat warning issued to all internet connected UPS devices

• UK Spy Chief Hails Government Cell Tackling Kremlin Fake News

• Zyxel fixes a critical bug in its business firewall and VPN devices

• Over Half of Data Security Incidents Caused by Insiders

• UK Spy Chief Warns Russia Looking for Cyber Targets

• IT Services Giant Admits $42m Fallout from Ransomware Attack

• Tech Mentorships | Avast

• CISA adds Sophos firewall bug to Known Exploited Vulnerabilities Catalog

• New UK Study Shows Just 1/3rd Of Orgs Use MFA Auth, Practice Cyber Compliance

• Organizations need to up their cloud native security strategy

• Modem-wiping malware caused Viasat satellite broadband outage in Europe

• Weekly Update 289

• Spring4Shell: New info and fixes (CVE-2022-22965)

• Modem-wiping malware caused Viasat satellite broadband outage

• Defending the endpoint with AI

• Flaws in Wyze cam devices allow their complete takeover

• National Security Agency employee indicted for ‘leaking top secret info’

• Zyxel Releases Patches for Critical Bug Affecting Business Firewall and VPN Devices

• Does Cyber Risk Quantification Work? | Avast

• National Security Agency employee indicted for leaking top secret info

• JavaScript security: The importance of prioritizing the client side

• We need an industry-backed, tech-neutral resource to restore trust in voice communications

• New infosec products of the week: April 1, 2022

• Australia’s SkyGuardian drones shot down by spicy cybers

• Cloud native application security is a critical priority, risk perception is worryingly low

• Making security mistakes may come with a high price for employees

• MITRE Engenuity ATT&CK® Evaluations Announces Results from Fourth Round of Enterprise Evaluations

• Deep Instinct Shows a 100% Prevention Score in the 2022 MITRE Engenuity ATT&CK® Evaluations for Enterprise

• New Study Exposes Behaviors of Government Employees That Could Lead to Cybersecurity Breaches

• TD SYNNEX Achieves AWS Cloud Management Tools Competency

• Ransomware Study: 4 out of 5 Organizations Targeted Within The Past 12 Months

• Apple updates macOS, iOS, and iPadOS to fix possibly exploited zero-day flaws

• Is IT ready for the metaverse? If not, it should be

• MITRE ATT&CK® Evaluation results: Malwarebytes’ efficiency, delivered simply, earns high marks

• ASEGURE SUS CONFIGURACIONES CON EL GESTOR DE CONFIGURACIÓN DE TRIPWIRE

• Out of Band (OOB) Data Exfiltration via DNS

• 5G in defense market to reach $8,952.30 million by 2027

• Apple Issues Patches for 2 Actively Exploited Zero-Days in iPhone, iPad and Mac Devices

• ‘Marvel superpower’: Home Affairs wants industry to rely on its cyber powers more often

• Accops BioAuth helps businesses prevent authentication-related attacks

• Absolute announces new products to optimize and secure work-from-anywhere environments

• Obsidian Security’s session hijacking feature prevents attackers from stealing tokens

• SnapAttack Community Edition provides access to a vast library of attack and detection content

• CYTRACOM ControlOne empowers MSPs to secure modern cloud networks

• Anonymous targets Western companies still doing business in Russia

• Increasing Representation of Women in Security Research

• Apple pushes out two emergency 0-day updates – get ’em now!

• PCI Pal collaborates with Five9 to provide secure payments for customers

• Fusion Risk Management partners with UCF to help organizations navigate regulatory requirements

• Palo Alto Networks launches firewall service for AWS to protect enterprises from cyberattacks

• Dream Job Alert: EFF Seeks a Lawyer with Patent and Copyright Experience

• Google Cloud security survey is ‘aggressive’ move vs. Microsoft

• Spring Framework vulnerabilities sow confusion, concern

• Intel acquires Granulate to maximize compute workload performance for data center customers

• Continental selects Everbridge to improve enterprise resilience

• Gartner lists seven cybersecurity trends for 2022

• Fake Emergency Search Warrants Draw Scrutiny from Capitol Hill

• Vulnerabilities in Rockwell Automation PLCs Could Enable Stuxnet-Like Attacks

• Maximus names Tim Meyers as VP of Federal Cybersecurity

• MITRE promotes Stephen Kirin to VP of Enterprise Operations

• Island appoints Ellen Roeckl as CMO

• Reciprocity names Michael Maggio as CEO

• API Security Weekly: Issue 160

• Phishing scam targets election officials, FBI warns

• Keepit opens two data centers in Canda

• Jim Routh joins ADI Association Board of Directors

• ID.me appoints Anand Mehta as CPO

• Impinj hires Christina Balam as VP of Human Resources

• Vulnerability Discovered in Java Spring Framework. Check Point Customers using CloudGuard AppSec preemptive protection are fully protected from Spring4Shell Attacks

• Google surveys feds in fight with Microsoft for government market

• Apple emits macOS, iOS, iPadOS patches for ‘exploited’ security bugs

• IT Security News Monthly Summary – April

• IT Security News Daily Summary 2022-03-31

• authentication server

• As digital life gets cloudy, effective backups clear the sky for business continuity

• Air Force software factory looks to unleash ‘chaos’ on civilian IT shops

• Ransomware: Should Companies Ever Pay Up?

• Royal Enfield – 420,873 breached accounts

• SSA seeks $2.4B in IT funding and looks ahead after 5-year modernization plan

• Global BEC Crackdown Nets 65 Suspects

• Is Increased Remote Working Fueling a Cybersecurity Crisis?

• US Levels Fresh Sanctions At Russia, Targetting Tech

• The two sides of the crypto coin in the Russia-Ukraine war

• Robocalls prompt states to join feds in crackdown

• Linux secure networking security bug found and fixed

• Apple Ships Emergency Patches for ‘Actively Exploited’ macOS, iOS Flaws

• Apple issues emergency patches to fix actively exploited zero-days

• Microsoft protects against human-operated ransomware across the full attack chain in the 2022 MITRE Engenuity ATT&CK® Evaluations

• Former Pentagon no. 2 named head of defense industry group

• Report reveals surveillance abuses in educational technology

• New ‘AcidRain’ malware may be connected to Viasat attack

• Phishers make a date with your calendar apps

• AV shuttles drive wider transit options

• Criminal justice algorithms: Being race-neutral doesn’t mean race-blind

• Complete Guide to Phishing Attacks: What Are the Different Types and Defenses?

• Colombian ISPs Show Steady Commitments to User Privacy But Key Transparency Gaps Remain

• Tech support scam campaign targets Japanese visitors to PornHub

• Google tests its Privacy Sandbox and unveils new user controls

• Don’t ignore Spring4Shell. But there’s still no sign it’s widespread

• Belarusian ‘Ghostwriter’ Actor Picks Up BitB for Ukraine-Related Attacks

• New Modem Wiper Malware May be Connected to Viasat Hack

• CISA Releases Security Advisories for Rockwell Automation Products

• New in SecureX: Device Insights

• Hackers Pushed Mars Stealer Malware via OpenOffice Ads on Google

• White House Announces Possible Rise in Cyberattacks—What You Can Do to Stay Safe

• SentinelLabs: New Modem Wiper Malware May be Connected to Viasat Hack

• U.S. Cyber Command Adds APUS as Member in Newly Formed Academic Network

• Imperva Protects from New Spring Framework Zero-Day Vulnerabilities

• March 2022 Web Server Survey

• Mozilla unveils vision for web evolution

• Two different “VMware Spring” bugs at large – we cut through the confusion

• CISA Adds Eight Known Exploited Vulnerabilities to Catalog

• FBI Releases PIN on Ransomware Straining Local Governments and Public Services

• 3 strategies to launch an effective data governance plan

• Ukraine Leaks Personal Details of 620 Alleged FSB Agents

• The Chatter Podcast: Ethical Space Exploration with Lucianne Walkowicz

• 7 ways to defend against a credential stuffing attack

• Senate AI data bill gets House counterpart

• Skiff Banks $10.5M for E2E Encrypted Workplace Collaboration

• Why CISOs need to understand the business

• The importance of HR’s role in cybersecurity

• CISA Issues UPS Warning

• Nvidia DGX Systems Prone To Side Channel, Covert Attacks

• QNAP Customers Adrift, Waiting On Fix For OpenSSL Bug

• FBI Efforts To Disrupt Business Email Compromise Scams Leads To 65 Arrests

• Are Tech Companies Removing Evidence Of War Crimes?

• RCE Spring4shell Hits Java Spring Framework

• ‘We’re seeing about a thousand vulnerabilities patched by Microsoft each year,’ says SentinelOne’s Weingarten

• Summary of March Inside (ISC)2 Webinar: Stay Vigilant

• US Federal Agencies Warn of Cyber Attacks Targeting UPS Devices

• Biden’s new Cybersecurity legislation is unrealistic says study

• MEDIA ALERT: Anomali Announces eXtends Virtual Event, Showcasing How Organizations Can Leverage The Anomali Platform and Cloud-Native XDR Solution to Stop Attackers and Their Breaches

• The OpenNMS Group Releases OpenNMS Meridian 2022 with Enhanced Network Monitoring and Security Capabilities

• SnapAttack Launches Community Edition to Drive Collaboration Across Cybersecurity Community

• CrowdStrike to Host Investor Briefing

• Tech Most Favoured Sector Amid ‘Great Resignation’

• Dyson’s First Wearable Is Air-Purifying Headphone Device

• Security ROI: Time & Resource Savings for IR/SOC Teams

• Nvidia is bringing zero trust security into data centers

• FBI efforts to disrupt business email compromise scams leads to 65 arrests

• Meet BlackGuard: a new infostealer peddled on Russian hacker forums

• WATCH: Fireside Chat With McDonald’s CISO Shaun Marion

• Australian Government to Invest $9.9bn in Cyber

• Cyber-attack on California Healthcare Organization

• New Version of PCI DSS Designed to Tackle Emerging Payment Threats

• Security Patch Releases for Critical Zero-Day Bug in Java Spring Framework

• Social Engineering Remains Key Tradecraft for Iranian APTs

• Ransomware Enforcement Operations in 2020 and 2021

• URI spoofing flaw could phish WhatsApp, Signal, Instagram, and iMessage users

• Ukraine War: Major Internet Provider Suffers Cyber-Attack

• US Privately Warned Businesses About Kaspersky, Day After Invasion

• Automaker Cybersecurity Lagging Behind Tech Adoption, Experts Warn

• Patch now: RCE Spring4shell hits Java Spring framework

• Cybersecurity Vendors Assessing Impact of Recent OpenSSL Vulnerability

• D.C. Circuit Rules That Public Health Law Empowers Government to Expel Asylum-Seekers—But Not to Countries Where They Face Persecution or Torture

• For Three Years, the Flaws in Wyze Cam Devices Have Gone Unpatched

• Why remote browser isolation is core to zero-trust security

• S3 Ep76: Deadbolt, LAPSUS$, Zlib, and a Chrome 0-day [Podcast]

• Protecting Your Organization Against a New Class of Cyber Threats: HEAT

• Google TAG details cyber activity with regard to the invasion of Ukraine

• 57% of people can’t recall if they ever backed up their important documents

• National Emergency in the United States Prolonged

• Nvidia DGX systems prone to side channel, covert attacks

• QNAP Customers Adrift, Waiting on Fix for OpenSSL Bug

• FBI: 65 People Arrested Worldwide in BEC Bust

• Nation-State Hackers Ramp Up Ukraine War-Themed Attacks

• Hackers Increasingly Using ‘Browser in a Browser’ Technique in Ukraine Related Attacks

• New Python-based Ransomware Targeting JupyterLab Web Notebooks

• Bugs in Wyze Cams Could Let Attackers Takeover Devices and Access Video Feeds

• Lazarus Trojanized DeFi app for delivering malware

• The National Emergency in the United States Has Been Prolonged

• 2022 Banking & Finance Security Intelligence Roundup

• A Blockchain Primer and a Bored Ape Headscratcher – Podcast

• The Importance of Open Source to an XDR Architecture

• IT Giant Globant Confirms Source Code Repository Breach

• 10 Best Monitors Under $400 2022 – Top Budget-Friendly Picks

• EU To Optimise Its Antitrust Rules – Report

• Cybersecurity managers with a direct line to executive boards set the tone for investment: study

• Google: Multiple hacking groups are using the war in Ukraine as a lure in phishing attempts

• It’s World Backup Day! Here’s How You Can Preserve Your Files

• FBI Warns of Phishing Attacks Targeting US Election Officials

• SaaS Security Startup Wing Emerges From Stealth With $26 Million in Funding

• The Total Economic Impact™ of Cisco Secure Firewall

• The 5 dimensions of security resilience

• Anonymous hacked Russian Thozis Corp, but denies attacks on Rosaviatsia

• Fraudulent Calls From Alleged Europol Employees | Avast

• The Last Cell Tower in Mariupol

• The Total Economic Impact™ of Cisco Secure Firewall

• Chrome Zero-Day from North Korea

• NATO Countries Targeted in Russian Phishing Attacks, Google Reports

• Microsoft: These are the Windows Update policies you should set for your PCs (and rollercoasters)

• Singapore, US expand bilateral economic cooperation to include AI governance

• Spring4Shell: Spring Flaws Lead to Confusion, Concerns of New Log4Shell-Like Threat

• The Total Economic Impact™ of Cisco Secure Firewall

• Spring4Shell: No need to panic, but mitigations are advised

• Crypto Hackers Steal $615m From Ronin Network

• Fraudulent Calls From alleged Europol Employees | Avast

• Hackers Got User Data From Meta With Forged Request

• The Total Economic Impact™ of Cisco Secure Firewall

• 820,000 NYC students have their personal data exposed

• Universal Control Comes to macOS Monterey – Intego Mac Podcast Episode 233

• Russian cyber attack on US mobile customers

• Lapsus$ ransomware group strikes software firm Globant

• Globant admits to data breach after Lapsus$ releases source code

• A Few Clicks from Data Disaster: The State of Enterprise Security

• The Total Economic Impact™ of Cisco Secure Firewall

• IT and Software Consultancy Company Globant Got Hacked

• Ukraine shuts down disinformation bot farm

• Expect ‘long tail of cyber retaliation’ from Russia for sanctions, says ExtraHop CEO

• Satellite Modems Nexus of Worst Cyberattack of Ukraine War

• The Total Economic Impact™ of Cisco Secure Firewall

• NHS 111 urgent care provider leads the way in secure and flexible workforce identity and access management with My1Login

• Unpatched SpringShell bug threatens web app security

• Hackers Posing as Police Convinced Apple and Meta to Share Basic Subscriber Info

• No Patch Available Yet for Critical SpringShell Bug

• The Total Economic Impact™ of Cisco Secure Firewall

• Mysterious disclosure of a zero-day RCE flaw Spring4Shell in Spring

• Viasat: Denial of Service Attack Impacted Tens of Thousands

• Global Police Arrest 65 in Multimillion-Dollar BEC Bust

• The Total Economic Impact™ of Cisco Secure Firewall

• Cyber resiliency is top proactive priority for organizations

• Most companies don’t have a mature CLM program in place

• The Total Economic Impact™ of Cisco Secure Firewall

• Google Chrome 100 Released – Security Fixes, New Logo & More

• The Total Economic Impact™ of Cisco Secure Firewall

• Bad OPSEC allowed researchers to uncover Mars stealer operation

• The Total Economic Impact™ of Cisco Secure Firewall

• The Total Economic Impact™ of Cisco Secure Firewall

• The current state of enterprise backup and recovery

• Cryptomining groups fight fiercely for cloud resources

• Spring4Shell vulnerability likely to affect real-world apps, analyst says

• Unpatched Java Spring Framework 0-Day RCE Bug Threatens Enterprise Web Apps Security

• The Total Economic Impact™ of Cisco Secure Firewall

• Where should companies start when it comes to device security?

• The Total Economic Impact™ of Cisco Secure Firewall

• Lack of CLM maturity is putting organizations at risk

• The Total Economic Impact™ of Cisco Secure Firewall

• DDoS attacks becoming larger and more complex, finance most targeted sector

• The Total Economic Impact™ of Cisco Secure Firewall

• Deploying pseudonymization techniques to protect health data

• Island Names Ellen Roeckl as Chief Marketing Officer

• Additional Budget funds for AFP to be used for deploying ‘hacking’ Bill warrants

• Australia’s second tranche of cyber laws passes both Houses

• UK spy boss warns China hopes Russia will help it take over tech standards

• QNAP Warns of OpenSSL Infinite Loop Vulnerability Affecting NAS Devices

• The Total Economic Impact™ of Cisco Secure Firewall

• Why do organizations need to prioritize cyber resiliency?

• QNAP Warns of OpenSSL Infinite Loop Vulnerability Affecting NAS Device

• The Total Economic Impact™ of Cisco Secure Firewall

• BYOD and enterprise mobility market to reach $157.3 billion by 2026

• The Total Economic Impact™ of Cisco Secure Firewall

• Russia, Iran, Saudi Arabia are top sources of online misinformation

• Russia, Iran and Saudi Arabia are top sources of online misinformation

• The Total Economic Impact™ of Cisco Secure Firewall

• SEON unveils product updates to help customers battle online fraud

• Veriff launches HR identity verification solution to reduce friction in hiring and recruiting

• MetricStream Danube enables organizations to quantify risk in monetary terms

• The Total Economic Impact™ of Cisco Secure Firewall

• EfficientIP SOLIDserver 8.1 allows organizations to simplify and automate their cloud management

• Banyan Security Team Edition provides zero trust access to hosted apps and infrastructure services

• Yale finance director stole $40m in computers to resell on the sly

• The Total Economic Impact™ of Cisco Secure Firewall

• HID Global OMNIKEY Secure Element enhances security for organizations

• The Total Economic Impact™ of Cisco Secure Firewall

• The Total Economic Impact™ of Cisco Secure Firewall

• The Total Economic Impact™ of Cisco Secure Firewall

• SimSpace collaborates with (ISC)² to help cyber security professionals advance their knowledge

• Zlib crash-an-app bug finally squashed, 17 years later

• The Total Economic Impact™ of Cisco Secure Firewall

• Cyera launches with new cloud data security platform and raises $60 million

• LambdaTest raises $45 million to scale its software test orchestration platform

• Kroll acquires Resolver to address the next generation of complex demands

• Fastly acquires Fanout to enable real-time app development at the edge

• Avaya partners with Alcatel-Lucent Enterprise to accelerate customers’ transformation to the cloud

• The Total Economic Impact™ of Cisco Secure Firewall

• Riskonnect hires Fritz Hesse as CTO

• Jeffrey Wheatman joins Black Kite as SVP Cyber Risk Evangelist

• Wing Security emerges from stealth and raises $26 million to accelerate growth

• Spring Core vulnerability doesn’t seem to be Log4Shell all over again

• Zero-Day Vulnerability Discovered in Java Spring Framework

• The Total Economic Impact™ of Cisco Secure Firewall

• Exterro introduces free digital forensics training for law enforcement officers

• KSOC announces that its Kubernetes security platform supports hardening NSA/CISA guidelines

• AuditBoard appoints Cherry Ellis as SVP of People

• Senators call for ban on U.S. government personnel use of Chinese ride-sharing apps

• How agencies can build data literacy

• The Total Economic Impact™ of Cisco Secure Firewall

• IT Security News Daily Summary 2022-03-30

• Cyber Command’s acquisition growing pains

• New cyber bill calls for shadow IT assessment at VA

• Tracking transaction data on the ‘pseudo-anonymous’ blockchain

• The Total Economic Impact™ of Cisco Secure Firewall

• Viasat confirms cyber attack on Ukraine customers

• The Total Economic Impact™ of Cisco Secure Firewall

• Too Hot to Handle:The case for Zero Trust and SASE

• Monetized ransomware: emergent cyber threats and rise of the Ransomware-as-a-Service industry

• Executive Order Instructs Certain Organizations to Improve Their Cybersecurity Stance

• CISA, DOE Warn of Attacks on Uninterruptible Power Supply (UPS) Devices

• A Sinister Way to Beat Multifactor Authentication Is on the Rise

• The Total Economic Impact™ of Cisco Secure Firewall

• Digital Rights Updates with EFFector 34.2

• Viasat: Feb. cyber attack impacted tens of thousands of customers in Ukraine, Europe

• RCE Bug in Spring Cloud Could Be the Next Log4Shell, Researchers Warn

• Ubiquiti sues Krebs on Security for defamation

• Study: Facebook May Be Getting Worse At Tracking You

• The Total Economic Impact™ of Cisco Secure Firewall

• Ubiquiti sues Krebs on Security for defamation over alleged false claims

• Axie Infinity hack results in $600M cryptocurrency heist

• The Total Economic Impact™ of Cisco Secure Firewall

• How Democracies Can Respond to the Invasion of Ukraine

• Waymo Expands Phoenix Driverless Service, Offers San Fran Staff Rides

• $625m Stolen From Ronin Network – The Blockchain Behind Axie Infinity Game

• Can chatrooms replace courtrooms?

• The Total Economic Impact™ of Cisco Secure Firewall

• Lapsus$ is clearly not done leaking

• The Total Economic Impact™ of Cisco Secure Firewall

• A critical RCE vulnerability affects SonicWall Firewall appliances

• So you want to get into cybersecurity? Here’s how

• Soaring Ransomware payments, consistent infections, deceptive URLs and more in this year’s 2022 BrightCloud® Threat Report

• Critical RCE Bug in Spring Could Be the Next Log4Shell, Researchers Warn

• The Total Economic Impact™ of Cisco Secure Firewall

• FBI Investigating More than 100 Ransomware Variants

• Meta says its Anonymous Credentials Service (ACS) will help reduce data collection activities

• Why digital ID for airport check-in is taking so long

• Cyberattackers Target UPS Backup Power Devices in Mission-Critical Environments

• “VMware Spring Cloud” Java bug gives instant remote code execution – update now!

• Personal Data of 820,000 NYC Students Exposed

• New Research Claims Biden’s Disclosure Deadlines Are Unrealistic

• The Total Economic Impact™ of Cisco Secure Firewall

• Combatting Data and Credential Exposure With Intelligence

• Agents and Agentless: Better Together

• Hackers Exploit Microsoft Exchange for IcedID Reply-Chain Hijacking Attacks

• Two-factor authentication is a great idea. But not enough people are using it

• Cyera Emerges From Stealth Mode With $60M to Protect Cloud Data

• “VMWare Spring Cloud” Java bug gives instant remote code execution – update now!

• Smart Cities: Secure by Design? It Takes a Village

• The Total Economic Impact™ of Cisco Secure Firewall

• The Military Is Making Progress in Its Counter-Extremism Efforts, but Gaps Remain

• Viasat spills on the Russian attack, warns of continued risks

• More than the Metaverse: IoT and Private Networks are in the 5G spotlight

• How can home security be improved with IoT?

• AT&T Cybersecurity earns four Cybersecurity Excellence Awards

• 10 Things cybercriminals love about you

• A lasting trend: As a Service

• Tesla Signs Deal To Source More Nickel – Report

• Google Chrome Bug Actively Exploited as Zero-Day

• Lapsus$ ‘Back from Vacation’

• The Total Economic Impact™ of Cisco Secure Firewall

• Breezeline Launches “WiFi Your WayTM” for Business

• SimSpace Offers Advanced Cyber Range Exercises Through Partnership With (ISC)²

• MetricStream Enables Customers to Quantify Risks in Monetary Terms, Identify Cloud Risks Faster, and Accurately Report Climate-related Financial Metrics

• Kasada Partners With Retail and Hospitality ISAC to Demonstrate Modern, Simple and Effective Approach to Stopping Bots

• Baker McKenzie Survey: As Usage of Artificial Intelligence Proliferates, Companies May Underestimate AI’s Business Risks

• Investors Bet on Cyberpion in Attack Surface Management Space

• Cloud Security Architecture Needs to Be Strategic, Realistic, and Based on Risk

• The Total Economic Impact™ of Cisco Secure Firewall

• VMware Horizon platform pummeled by Log4j-fueled attacks

• Hackers steal $615 million from a gaming cryptocurrency wallet

• Pentagon’s JEDI Contract Successor, JWCC, Delayed Until December

• VMware Horizon platform being pummeled by Log4j-fueled attacks

• Chrome Browser Gets Major Security Update

• World Backup Day: 5 data recovery tips for everyone!

• The Total Economic Impact™ of Cisco Secure Firewall

• CISA and DoE warns of attacks targeting UPS devices

• Remote ‘Brokenwire’ Hack Prevents Charging of Electric Vehicles

• Rapid7 finds zero-day attacks surged in 2021

• Infosecurity Europe Unveils Keynote Speakers for 2022 Event

• Google Releases Security Updates for Chrome

• FBI Releases PIN on Phishing Campaign against U.S. Election Officials

• The Total Economic Impact™ of Cisco Secure Firewall

• Lapsus$ extortion gang claims to have hacked IT Giant Globant

• The Complete Guide to Desktop Virtualization and Its Importance

• How Security Complexity Is Being Weaponized

• Researchers Expose Mars Stealer Malware Campaign Using Google Ads to Spread

• The Total Economic Impact™ of Cisco Secure Firewall

• Company Official: Hackers Are Still Inside Viasat

• Hackers Steal $625 Million From Ronin Network In Largest Ever Crypto Theft

• MSHTML Flaw Exploited To Attack Russian Dissidents

• Hackers Who Stole $50 Mil In Crypto Say They Will Refund Some Victims

• Ronin Network Cryptocurrency Hack, Experts Commentary

• For Three Years, Leading Messaging Servers were Scammed Using a URL Rendering Method

• V8 Type Confusion Vulnerability Hits Google Chrome & Microsoft Edge Browser

• What’s happening in the attack surface market: mitigating threats in the cloud era

• Ukrainian software developers share their stories and photos from the war zone

• How you can help Ukraine: Donation sites and resources

• Get an extra 50% off these 10 ethical hacking e-learning bundles

• Women in tech: Unique insights from a lifelong pursuit of innovation

• Researchers Find Python-Based Ransomware Targeting Jupyter Notebook Web Apps

• The Need for Resilient Zero Trust

• The Total Economic Impact™ of Cisco Secure Firewall

• Shutterfly Discloses Data Breach After Conti Ransomware Attack

• Nebulon Touts Rapid Ransomware Recovery Solution

• MSHTML Flaw Exploited to Attack Russian Dissidents

• Researchers Used a Decommissioned Satellite to Broadcast Hacker TV

• The Total Economic Impact™ of Cisco Secure Firewall

• Mars Stealer malware pushed via Google Ads and phishing emails

• Update now! Google launches Chrome version 100 and fixes 28 vulnerabilities

• How to Set Up and Use Universal Control with macOS Monterey

• Lapsus$ Claims Hack of IT Giant Globant After Arrests of Alleged Members

• Shutterfly Employee Data Compromised in Ransomware Attack

• The Total Economic Impact™ of Cisco Secure Firewall

• “A little gift for you” SMS spam appears to come from your own phone number

• Palo Alto Networks debuts cloud-native firewall service for AWS

• Police look to doorbell cameras to reduce crime

• As Lapsus$ comes back from ‘vacation,’ Sitel clarifies position on data breach

• These remote work job scams promise easy money but aim to steal your savings

• US Government Warns of Attacks Targeting UPS Devices

• The Total Economic Impact™ of Cisco Secure Firewall

• New Subscription: Learn Fundamentals

• Critical Vulnerability Affecting Western Digital My Cloud OS 5 Devices – Patch Now

• The State of Malware Analysis and Responses to Emerging Threats

• A mitmproxy Vulnerability Could Allow HTTP Request Smuggling Attacks

• Honda’s Keyless Access Bug Could Let Thieves Remotely Unlock and Start Vehicles

• Stalking with an Apple Watch

• A third of malware infections use Log4Shell

• Election Officials Warned by the FBI of Credential Phishing Campaigns

• 10 Best Laptops for Medical Students 2022 – Making Your Studies Easier

• How to Unlock Iptv Adult Channels on Stb Emulator

• Report: U.S. Workers Worry About Cyberattacks

• How safe are your crypto assets?

• Electric Vehicle DC charging tripped by a wireless hack

• Risks of Using Russian Tech Analyzed by UK Cybersecurity Agency

• NCSC suggests rethinking Russian supply chain risks

• Mars Stealer: a New Popular Malware on the Cyberthreat Landscape

• FBI Warns Russian Hackers Scanning US Energy Systems

• Introducing Personal Data Cleanup

• Check Point’s Quantum Maestro Orchestrates Best-Ever Performance for Listrak

• This new ransomware targets data visualization tool Jupyter Notebook

• State-backed hacking attacks are a big worry, but most firms don’t know what to watch out for

• Six Ways to Expand Your Fraud Program

• Finland’s Spy Service Warns of Russian Interference, Attacks

• Federal Agencies Instructed to Patch New Chrome Zero-Day

• A Third of UK Businesses Experience Cyber-Attacks at Least Once a Week

• Ronin blockchain hit with $620 million crypto heist

• Shutterfly Hit by Data Breach

• Improve Your Hacking Skills with 9 Python Courses for Just $39

• Meta Suspends Plan To Build Dutch Data Centre After Opposition

• NCSC: Time to Rethink Russian Supply Chain Risks

• Watch out for LinkedIn fakes who want to get connected

• Startup Equity firm invests $525 million in Cybersecurity firm Zimperium

• Log4Shell Used in a Third of Malware Infections

• IoT warning: Hackers are gaining access to UPS devices. Here’s how to protect yours

• Attackers Steal $618m From Crypto Firm

• Ransomware news headlines trending on Google

• World Backup Day: Simplicity and Patience is Key

• LAPSUS$ Claims to Have Breached IT Firm Globant; Leaks 70GB of Data

• The importance of implementing continuous security in the development lifecycle

• Ransomware payments hitting new records in 2021

• Google Play Store Safety | Avast

• Threat actors actively exploit recently fixed Sophos firewall bug

• UK Cyber Security Centre advises review of risk posed by Russian tech

• CISA Warns of Ongoing Cyber Attacks Targeting Internet-Connected UPS Devices

• Web3 and the future of data portability: Rethinking user experiences and incentives on the internet

• Lapsus$ back? Researchers claim extortion gang attacked software consultancy Globant

• How to recruit cybersecurity talent from atypical backgrounds

• Product showcase: Secure online authentication “Made in Germany” by Swissbit

• Ethereum sidechain Ronin that powers play-to-earn game is fleeced for over $600m

• Posts on name-and-shame dark web leak sites climbed 85% in 2021

• indie Semiconductor Announces Retirement of Bill Woodward and Appointment of Diane Biagianti to Its Board of Directors

• Pentera Finds Two Zero-Day Vulnerabilities in VMWare vCenter, Exposing More Than 500,000 Companies Globally

• Rod Carew is Featured on the Impact Podcast with John Shegerian

• TD SYNNEX Provides Medium-Term Financial Model at 2022 Investor Day

• Healthcare focus:  Need for resilience

• The hiring surges in Biden’s 2023 budget proposal

• The benefits of implementing continuous security in the development lifecycle

• How hard is it to address Apple’s in-app deletion requirements and implement privacy compliance?

• An In-Depth Look at ICS Vulnerabilities Part 1

• Senator calls on Nick Xenophon to detail his Huawei contract terms

• Critical SonicOS Vulnerability Affects SonicWall Firewall Appliances

• DevOps market to exceed $30 billion by 2028

• What is Bundesamtes für Sicherheit in der Informationstechnik (BSI)?

• What Trust and Compliance Looks Like in a Cookieless Digital World

• Design, prioritize, and implement a cyber defense program with CIS CDM 2.0

• Donald Trump, John Eastman and the Silence of the Justice Department

• Very Good Security Network Tokens enhances payment security

• Nebulon TimeJump offers ransomware recovery for critical application data and infected operating systems

• Rapid7 introduces cloud workload protection in InsightCloudSec

• CRITICALSTART launches enhanced capabilities for Microsoft 365 Defender to detect user account attacks

• Detailed: Critical hijacking bugs that took months to patch in Microsoft Azure Defender for IoT

• Ivanti Wavelink’s operational insights offering improves supply chain operations for customers

• Aruba Central NetConductor enables IT teams to automate network configuration

• Arista CUE enables commercial customers to accelerate new services and technology innovations

• RemotePC allows users to access their office computers and servers via RDP Connector

• Comcast Business Gateway improves protection and connectivity for businesses

• 2022-03-29 – Emotet E4 with Cobalt Strike

• Australia may not be able to fill Coalition’s 1,900 proposed cyber jobs

• Swimlane and 1898 & Co. join forces to defend critical infrastructure companies against rising cyber threats

• How Meta detects and mitigates ‘silent errors’

• Hive ransomware group claims to steal California health plan patient data

• Ping Payments selects Sentinels to reinforce its AML controls

• Cybellum partners with AVL to provide cybersecurity vulnerability management for the automotive industry

• Understanding Private 5G LANs in the Enterprise

• Log4j Attacks Continue Unabated Against VMware Horizon Servers

• Guidepost Solutions acquires significant equity interest in Truvantis to help address cybersecurity risks

• HSBC collaborates with IBM to accelerate quantum computing readiness

• Cloudera announces a series of senior executive appointments

• Celonis acquires Process Analytics Factory to strengthen its process mining offering

• Mutating Verblecon malware in illicit cryptomining … so far

• $625M stolen from Axie Infinity ‘s Ronin bridge, the largest ever crypto hack

• Donald Trump, John Eastman, and the Silence of the Justice Department

• Alkira opens headquarters in Amsterdam to expand its presence in EMEA

• Xalient strengthens its presence in North America with key appointments

• Accela names Kara Wilson to Board of Directors

• Pentagon’s effort to supply departmentwide cloud capabilities is delayed, again

• IT Security News Daily Summary 2022-03-29

• CYE launches new group to provide advanced cyber architecture

• Hackers Steal Over $600M in Major Crypto Heist

• Former Facebook Exec Warns Of “Privacy And Security Nightmare” For WhatsApp

• Private Equity Firm Led by Mnuchin Acquires Mobile Security Vendor Zimperium

• My Child Wants a Phone. Should I Say ‘Yes’?

• Biden’s budget calls for increases in key state and local programs

• Zlib data compressor fixes 17-year-old security bug – patch, errrm, now

• Hardware upcycling: A new option for ‘rip and replace’

• Log4JShell Used to Swarm VMware Servers with Miners, Backdoors

• Ronin Network Ethereum theft is ‘largest-ever DeFi exploit,’ investigator says

• It’s time for another look at election security – through a technological lens

• Smart city pilots target workflow, analysis challenges

• How to put cybersecurity sustainability into practice

• FBI confirms increase in Russian cyber scanning of U.S. companies

• Russia threatens ‘grave consequences’ over cyberattacks, blames U.S.

• Labor Dept. seeks $3.4 billion for UI programs, including IT modernization

• Senator questions crypto companies’ impact on local communities

• Atlas VPN Debuts MultiHop+ for Added Layer of Internet Privacy and Security

• Singapore offers certification scheme to tag companies with robust security posture

• Cloaked Snags $25M Funding to Tackle Data-Sharing Privacy

• With War Next Door, EU is Warned on Cybersecurity Gaps

• CriticalStart Releases Enhanced Capabilities for Microsoft 365 Defender

• New spear phishing campaign targets Russian dissidents

• Ex-Trump Treasury Secretary’s PE Firm Buys Mobile Security Company Zimperium for $525M

• VMware vCenter Server Vulnerability Can Facilitate Attacks on Many Organizations

• Biden Requests Nearly $11B for Federal Cybersecurity Spending

• 1-in-6 election officials report being threatened

• Cyberattack in New York City, Sensitive Data of 820,000 Students was Exposed

• One arrested in ₹1,200-Crore Crypto Fraud Case, 900 Investors Scammed

• Muhstik Botnet Targeting Redis Servers by Exploiting Recently Published Bug

• Hackers steal $620M in Ethereum and dollars from Axie Infinity maker Sky Mavis’ Ronin network

• Cryptocurrency cyber attacks on the rise as industry expands

• Zlib data compressor fixes 17-year-old security bug – patch, errr, now

• Personal Data of 620 FSB Officers Published Online

• NetAbstraction and Jacobs Expand Alliance to Offer Advanced Cyber Solutions to Commercial Clients

• Anchore to Contribute Grype Open Source Vulnerability Data to the Global Security Database

• KSOC Addresses Critical Components of Kubernetes Security Detailed in Federal Report

• Gartner Analyst Joins Black Kite as New Cyber Risk Evangelist

• PKI Solutions Announces $2M Credit Facility from Northwest Bank

• Cyera Launches From Stealth With $60M to Identify, Secure, and Remediate Cloud Data Security Risks

• Forcing WhatsApp and iMessage to Work Together Is Doomed to Fail

• 3 steps to secure your multicloud and hybrid infrastructure with Azure Arc

• Ransomware driving you to distraction? Here’s how to recover

• Russian cybercriminals are finding it hard to make a living

• Europe’s quest for energy independence – and how cyber‑risks come into play

• Mnuchin’s private equity firm buys security startup Zimperium for $525m

• Yandex is Sending iOS Users’ Data to Russia

• Podcast Episode: Securing the Internet of Things

• Retro Computing Museum Destroyed By Russian Bombing

• 6 takeaways On cybersecurity policy from the president’s FY 2023 budget

• Hackers are getting faster at exploiting zero day flaws. That’s going to be a problem for everyone

• Why Bullying Employees Into Compliance Won’t Work

• Dental Practice Fined for Sharing Patient Data on Social Media

• 82% of Public Sector Applications Contain Security Flaws

• Mitigating Attacks Against Uninterruptable Power Supply Devices

• Compromised WordPress sites launch DDoS on Ukrainian websites

• Creepy Spyware Company Goes Broke

• Exchange Servers Speared In IcedID Phishing Campaign

• Ukraine Internet Provider Suffers Cyber Attack

• Lapsus$ And SolarWinds Hackers Both Use The Same Old Trick To Bypass MFA

• Ukraine Security Agency Shutters Russian Disinformation Bot Farms

• Ukraine security agency shutters Russian disinformation bot farms

• Introducing the new Azure Front Door: Reimagined for modern apps and content

• US Senate Approves $52 Billion US Chips Act

• Critical Vulnerabilities Found in Microsoft Defender for IoT

• Hackers Gaining Power of Subpoena Via Fake “Emergency Data Requests”

• Europe and US Agree Trans-Atlantic Data Sharing Deal

• Using Russian tech? It’s time to look at the risks again, says cybersecurity chief

• Exchange Servers Speared in IcedID Phishing Campaign

• Deploy an information barrier policy for Microsoft Teams

• Exploring the Intersection of Physical Security and Cybersecurity

• 2 New Security Incidents Happening Now

• IcedID Targets Msoft Exchange Hijacking Campaign

• White Increase Cybersecurity Budget

• How To Avoid Investment Scams On Social Media, As 25% Of UK Victims Are Youths Online

• 5 Best GPU Stress Testing/Benchmarking Softwares in 2021

• Fortinet shares could gain 17% from here as cyber threats mount, Barclays says

• Attacks on Ukraine communications are a major part of the war

• National Backup Day: Don’t Forget the Basics

• Low-Code/No-Code Tools Are Popular but Untrusted

• New Hacking Campaign by Transparent Tribe Hackers Targeting Indian Officials

• IceID trojan delivered via hijacked email threads, compromised MS Exchange servers

• Threat Hunting Journal – March 2022 E.O.M Edition

• Elon Musk Considers Building New Social Media Platform

• Log4Shell exploited to infect VMware Horizon servers with backdoors, crypto miners

• Ukraine destroys five bot farms that were spreading ‘panic’ among citizens

• Transparent Tribe APT returns to strike India’s government and military

• Sophos Warns of Attacks Exploiting Recent Firewall Vulnerability

• Six Ways to Improve Infosec in 2022

• Researchers release car exploit that allows hackers to lock, unlock and start Honda’s

• White House Proposes $10.9 Billion Budget for Cybersecurity

• Mobile security firm Zimperium to be acquired for $525M, eyes IPO

• Ukraine Suffers Significant Internet Disruption Following Cyber-Attack

• Stop Tracking Your Loved Ones

• Privid: A Privacy-Preserving Surveillance Video Analytics System

• A Detailed Look at the Conti Ransomware Gang

• SunCrypt Ransomware Still Alive in 2022

• Looking over your shoulder: when small mistakes have big consequences

• Why Organizations Should Take Cloud-Based Cryptocurrency-Mining Attacks Seriously

• Ukraine’s Ukrtelecom Suffers Outage After Cyberattack

• Australian Budget 2022 delivers AU$9.9 billion for spicy cyber

• SonicWall Patches Critical Vulnerability in Firewall Appliances

• Sanctions Hitting Russian Cyber-Criminals Hard

• Critical Sophos Firewall RCE Vulnerability Under Active Exploitation

• Threat Actors Hijack Email Reply Chains on Vulnerable Exchange Servers to Deliver IcedID Malware

• Cybercrooks target students with fake job opportunities

• Major Cyber Attack launched on Ukraine Ukrtelecom

• Racoon stealer malware suspends its operations due to war on Ukraine

• Is the global food supply chain in danger?

• March 2022 Web Server Survey

• Mozilla unveils vision for web evolution

• Security Incidents Reported to FCA Surge 52% in 2021

• European Police Bust Multimillion-Dollar Investment Fraud Gang

• Experts Detail Virtual Machine Used by Wslink Malware Loader for Obfuscation

• New Malware Loader ‘Verblecon’ Infects Hacked PCs with Cryptocurrency Miners

• 86% of organisations believe they have suffered a nation-state cyberattack

• Purple Fox Threat Actors Leverage New FatalRAT Version

• Satellites are critical infrastructure and need to be cybersecured

• US Brands Russian Cybersecurity Firm Kaspersky ‘Security Threat’

• US proposes healthcare cybersecurity bill

• Okta Admits ‘Mistake’ Waiting Two Months Before Breach Admission

• EU and US confirm transatlantic data flow

• Critically Exposed Web Apps Discovered Across Europe’s Top Chemical Manufacturers

• Attackers are exploiting recently patched RCE in Sophos Firewall (CVE-2022-1040)

• A Large-Scale Supply Chain Attack Distributed Over 800 Malicious NPM Packages

• Many businesses lack a formal ransomware plan

• COVID bounce: A massive 2021 resurgence of cyberthreats

• New Report on Okta Hack Reveals the Entire Episode LAPSUS$ Attack

• CISA adds Chrome, Redis bugs to the Known Exploited Vulnerabilities Catalog

• Resurgence of Increased Cyber Attacks on both Russia and Ukraine, a month into the war

• What is credential stuffing? And how to prevent it?

• The security gaps that can be exposed by cybersecurity asset management

• The Israeli cybersecurity funding landscape in the past year

• Product showcase: Specops uReset SSPR solution

• Ukrtelecom, a major mobile service and internet provider in Ukraine, foiled a “massive” cyberattack that hit its infrastructure

• Subdomain takeover attacks on the rise and harder to monitor

• EU and US confirm new transatlantic data flow agreement on the way

• API Security Explained

• 2021 COVID bounce: Malware has returned with a vengeance

• CRN® Honors Adlumin With 5-Star Rating in 2022 Partner Program Guide

• Mandiant Named a Leader in Cyber Security Incident Response Services by Independent Research Firm

• How is the CISSP-ISSMP Exam Changing?

• Unpacking OMB’s federal strategy for implementing Zero Trust

• The Bitglass Blog

• Not enough businesses have a formal ransomware plan in place

• What’s stopping organizations from becoming data-driven?

• AI market share to increase by $76.44 billion by 2025

• Okta says document ‘appears to be’ part of report on Lapsus$ breach

• IcedID malware, in the hijacked email thread, with the insecure Exchange servers

• Low-Code/No-Code Tools Are Popular, But Untrusted

• Fluke Networks upgrades LinkIQ Cable+Network Tester to help users test and troubleshoot IP networks

• Madeleine Albright and All the Women She Helped—Including Me

• Anonymous Hacks 2 Russian Industrial Firms, Leak 112GB of Data for Ukraine

• Accenture acquires capabilities for hyper-automation from Trancom ITS

• Netcetera partners with Covalent to expand online payments in Middle East and Africa

• The Pro Codes Act Is a Wolf in Sheep’s Clothing

• Zero-Day Surge Led to More Rapid Exploitation of Bugs in 2021

• Veridas opens new offices in USA and Mexico to facilitate its operations

• Gary Hayslip joins Keyavi Data Board of Directors

• Pentagon increases cyber funding request for 2023

• Triton Malware Still Targeting Energy Firms

• Anonymous is working on a huge data dump that will blow Russia away

• IT Security News Daily Summary 2022-03-28

• Severe XSS Vulnerability Found In Microweber CMS

• Senators look to root out contractor conflicts of interest

• Illinois joins states setting up cyber units

• New Lapsus$ Hack Documents Make Okta’s Response Look More Bizarre

• Welcoming the Bulgarian Government to Have I Been Pwned

• Redefining Resilience in The New World of Work

• Lessons Learned: In the Principle Of “Least Privilege,” Where Do Companies Fall Short?

• Update Chrome Browser Now – Google Releases Emergency Security Update

• Hive ransomware ports its encryptor to Rust programming language

• Ukraine says major cyberattack against telecom has been ‘neutralized’

• Researchers Hack Remote Keyless System of Honda Vehicles

• Facebook Is Criticized For Being Too Slow To Fight Russian Misinformation

• Sophos fixes critical hijack flaw in firewall offering

• Microsoft Azure Defender for IoT vulnerabilities could lead to ‘full network compromise’

• Top 7 enterprise cybersecurity challenges in 2022

• The benefits and challenges of SBOMs

• Vodafone Portugal: The Attack on Brand Reputations and Public Confidence Through Cybercrime

• CISA Adds 32 Known Exploited Vulnerabilities to Catalog

• You’re going to see Russian activity directed against government and military capabilities: Fmr. NSA director

• Under the hood of Wslink’s multilayered virtual machine

• Google Chrome, Microsoft Edge patched in race against exploitation

• Local governments are attractive targets for hackers and are ill-prepared

• Ransomware now encrypts so fast it ‘will burn the house down’

• Microsoft is adding a new driver-blocklist feature to Windows Defender on Windows 10 and 11

• Okta Says It Goofed in Handling the Lapsus$ Attack

• The Future of Digital Cash Is Not on the Blockchain

• Vulnerability Summary for the Week of March 21, 2022

• Madeleine Albright and All the Women She Helped — Including Me

• Ramping up cloud security with zero trust micro-segmentation

• Emotet is Back

• An EFF Investigation: Mystery GPS Tracker On A Supporter’s Car

• Okta: We made a mistake over Lapsus$ breach notification

• Critical Sophos Security Bug Allows RCE on Firewalls

• Washington Health District Suffers Another Data Breach

• Platforms at War

• What Happened to Post-Trump Reform?

• California’s “Social Media Platform Duty to Children Act” is Destined to Fail—For Good Reason

• EFF Files FOIA Lawsuit Against DHS to Shed Light on Vetting Program to Collect and Data Mine Immigrants’ Social Media

• Chinese Hacker Scarab Targets Ukrainian System, CERT-UA Warns

• Hotel WiFi Across MENA Compromised, Private Information Leaked

• Biden’s 2023 budget includes $65B for civilian agency IT

• Biden proposes a 4.6% raise for federal workers for 2023

• Checkmarx Finds Threat Actor ‘Fully Automating’ NPM Supply Chain Attacks

• Trellix and CSIS Find Organizations Outmatched by Nation-State Cyber Threat Actors

• 5 Industries that need advanced Cybersecurity measures

• Why the White House is focused on community-level water cybersecurity

• China APT group using Russia invasion, COVID-19 in phishing attacks

• Estonian Ransomware Operator Sentenced to Prison in US

• US Proposes Healthcare Cybersecurity Act

• We’re not out of the woods yet from potential cyber attacks, says Cloudflare’s Prince

• TD SYNNEX Announces Corporate Citizenship Program

• Ivanti Honored With 5-Star Rating in the 2022 CRN® Partner Program Guide

• Formulating proper data destruction policies to reduce data breach risks

• Cybersecurity Luminary Gary Hayslip Joins Keyavi Data Board of Directors

• Terraform Tutorial: Drift Detection Strategies

• European Union Agrees DMA To Curb Big Tech

• 86% of Organizations Believe They’ve Faced a Nation-State Cyber-Attack

• Zero-day Attacks Doubled in 2021

• Telling stories securely, with Runa Sandvik: Lock and Code S03E07

• Introducing SECaaS (Security as a Service): A Comprehensive Guide

• Cyber warfare is a ‘watershed moment’ for the industry

• Man linked to multi-million dollar ransomware attacks gets 66 months in prison for online fraud

• Ransomware payments: Here’s how much falling victim will now cost you

• Top 6 API Security Best Practices for 2022

• Machine Identity Management (MIM): Responding to Critical Security Needs in the BYOD Era

• Sophos Fixed A Critical RCE Vulnerability In Sophos Firewall

• Organisations Outmatched By Nation-State Hackers, Survey Finds

• Google Chrome patches mysterious new zero-day bug – update now

• 86% of Organizations Have Faced a Nation-State Cyber-Attack

• Google Releases Security Updates for Chrome

• 5 security considerations for edge implementations

• Feds Allege Destructive Russian Hackers Targeted US Oil Refineries

• Sophos Patches Critical Remote Code Execution Vulnerability In Firewall

• FCC Puts Kaspersky On Security Threat List

• Hundreds More Packages Found In Malicious npm Factory

• Morgan Stanley Wealth Management Accounts Breached In Vishing Attack

• Synthetic data and the Wells Fargo-Hazy relationship

• Hundreds more packages found in malicious npm ‘factory’

• Critical Remote Code Execution Vulnerability in Sophos Firewall

• German Authorities Seize Spyware Firm FinFisher’s Accounts

• Security’s Life Cycle Isn’t the Developers’ Life Cycle

• Update now! Google releases emergency patch for Chrome zero-day used in the wild

• Apple To Cut iPhone Production – Report

• New Conversation Hijacking Campaign Delivering IcedID

• Low-Code Is Easy, but Is it Secure?

• Federal pandemic aid is providing a boost to city housing programs

• Tech support fraud is still very much alive, says latest FBI report

• Spotify Suspends Service In Russia

• Hackers Hijack Email Reply Chains on Unpatched Exchange Servers to Spread Malware

• While Twitter suspends Anonymous accounts, the group hacked VGTRK Russian Television and Radio

• RAV Antivirus: How to Protect Your Data in 2022

• CISA: Here are 66 more security flaws actively being used by hackers – so get patching

• Triton malware still a threat to energy sector, FBI warns

• Of Cybercriminals and IP Addresses

• HOW CAN YOU WIN BIG IN VEGAS? – Global Achievement Awards Nominations Open Now

• Chinese Threat Actor Targeting Ukraine Since the Russian Invasion

• New Conversation Hijacking Campaign Delivering IcedID

• V8 Vulnerability Hits Chrome and Edge

• Lapsus$ Attackers Gained Access to a Support Engineer’s Laptop, as per Okta

• New Korplug Variant Discovered

• Apple Not Fully Compiling On App Store, Says Dutch Watchdog

• Why are cybercriminals increasing their focus on mobile devices?

• Sophos patches critical remote code execution vulnerability in Firewall

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of March 21, 2022

• CISA Adds 66 Vulnerabilities to ‘Must Patch’ List

• Major League Baseball players’ personal data stolen

• The Silicon UK In Focus Podcast: Workforce Management

• 5G and 6G networks to give first responders and smart city projects a boost, researchers say

• Huawei sees revenue dip 28%, pivots to tap green demand

• Estonian Gets 66 Months for Ransomware Conspiracy

• UK Ransomware Doubles: ‘Cyber Criminals Have Gone Into Stealth Mode’

• UK Ransomware Attacks Double In Past Year, Expert Insight

• Improving Signal To Noise Ratio In Business Intelligence

• One tenth of UK staff bypass corporate security

• A week in security (March 21 – 27)

• The first step to data privacy is admitting you have a problem, Google

• Google SMS and phone app, sending user data to remote servers

• Russian Cybersecurity software provider Kaspersky is banned

• Russia’s Kaspersky, China Telecom Added To US National Security List

• GhostWriter APT targets state entities of Ukraine with Cobalt Strike Beacon

• CISA Alert – ICS Best Practices Against Known Russian Cyber Actors

• Honda Bug Lets A Hacker Unlock And Start Your Car via Replay Attack

• The All-too-real Achilles Heel Of IT

• Beware of old and new tax-themed scams and schemes

• What Is Multi-Factor Authentication, and What Does It Have to Do with You?

• Ransomware Attacks Soar by 100% in 2021

• ‘Purple Fox’ Hackers Spotted Using New Variant of FatalRAT in Recent Malware Attacks

• URL Rendering Trick Enabled WhatsApp, Signal, iMessage Phishing

• Trojanized Crypto Wallets Flood Android And iOS App Stores

• One in 10 UK Staff Circumvent Corporate Security

• Shopping trap: The online stores’ scam that hits users worldwide

• Number of DDoS attacks in 2021 reached 9.75 million

• Breaking the Bias With Elnaz Babayeva | Avast

• Will Chinese giants defy US sanctions on Russia? We asked a ZTE whistleblower

• Muhstik Botnet Targeting Redis Servers Using Recently Disclosed Vulnerability

• Cybercriminals focusing on crypto donations to Ukraine to trick victims

• Is next-gen threat modeling even about threats?

• Why low-code and identity must co-exist

• Expect cyberattacks from Russia against oil and gas infrastructure, says cybersecurity firm

• Extended Threat Intelligence: A new approach to old school threat intelligence

• Cybercriminals launched 9.75 million DDoS attacks in 2021

• Honda Bug Let Attackers Unlock and Start the Car

• What federal data platform owners need to know about the zero trust mandate

• Cloud-native adoption shifts security responsibility across teams

• Okta acknowledges ‘mistake’ in handling of Lapsus$ attack

• The importance of data in the metaverse

• Kaspersky blacklisted by FCC alongside China Telecom and China Mobile

• Chrome and Edge hit with V8 type confusion vulnerability with in-the-wild exploit

• Operational risk management solution market to reach $3,098.0 million by 2028

• How Tripwire ExpertOps Can Help Solve the UK’s Cybersecurity Challenges

• 6 Critical Areas of Cloud-Native Security That Are Influential in 2022

• Kaspersky, China Telecom, China Mobile named ‘threats to US national security’

• (ISC)² announces agenda and details for its SECURE London event

• Sophos Firewall affected by a critical authentication bypass flaw

• IT Security News Weekly Summary – Week 12

• IT Security News Daily Summary 2022-03-27

• Latest Google Chrome Update Fixed Another Zero-Day Flaw

• Prepare Your Business for the Future of Cyberwar: A Review of The Art of Cyberwarfare>

• Ransomware as a Service: The Trending Business Model for Attacks

• How To Add a Social Login to Your Website With Supertokens (Custom UI Only)

• Mar 20- Mar 26 Ukraine – Russia the silent cyber conflict

• Chat and Encrypted Messaging Apps Are the New Battlefields in the Propaganda War

• Hackers Can Use a Replay Attack Due to a Honda Vulnerability

• Trojanized Apps are Being Employed to Steal Cryptocurrency From iOS and Android Users

• US Adds Kaspersky to List of Firms Posing Threat to National Security

• US Adds Kaspersky to List of Firms Posing Threat to National Security

• Scheduled Tasks and Batteries

Generated on 2022-04-03 23:59:35.152131