IT Security News Weekly Summary – Week 14

• IT Security News Daily Summary 2021-04-11

• Apple Agrees to Provide Executive to Testify At Upcoming App Store Senate Hearing

• Iran Calls Natanz Atomic Site Blackout ‘Nuclear Terrorism’

• XKCD ‘Eradication’

• BSides Philly 2020 – Christopher Lopez’ ‘Asking Questions And Writing Effectively’

• Android apps on APKPure store caught spreading malware

• BSides Philly 2020 – Kelley Robinson’s ‘What If We Had TLS For Phone Numbers’

• Is the recent accident at Iran Natanz nuclear plant a cyber attack?

• Al-Qaeda After Ayman al-Zawahiri

• Top-21 Cybersecurity Experts You Must Follow on Twitter in 2021

• Cybercriminals Used Facebook Ads to Lure Users into Installing the Fake Clubhouse App

• Developer Recreates Flappy Bird as Interactive macOS Notification

• 2021 Cybersecurity Outlook: The More Things Change, The More They Stay the Same

• Next Generation Software Fills Some Gaps – But Agencies Still Need Accelerated Visibility and Control of Endpoints

• Personal data of 1.3 million Clubhouse users leaked online

• An Insider’s View into Blocking Email Threats

• HUSH – THIS DATA IS SECRET

• How to Log In to Your Devices Without Passwords

• Three Years In: An Update on the Georgia Cyber Center

• Bitcoin Touches the Peak at $60,000 – Everything you Need to Know!

• “You shouldn’t treat knowledge like it’s a competition”

• Security Affairs newsletter Round 309

• Joker malware infected 538,000 Huawei Android devices

• Week in review: SAP apps under attack, Zero Trust creator talks, Patch Tuesday forecast

• New Wormable Android Malware Disguised as a Netflix Tool Spreads Through WhatsApp Messages

• Slack and Discord are Being Hijacked by Hackers to Distribute Malware

• Penetration testing

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Cybersecurity experts warned of a possible attack on Russian accounts in May

• IT Security News Daily Summary 2021-04-10

• CommitStrip ‘The Secret Of A Successful Code Review’

• BSides Philly 2020 – Shail Patel’s ‘How I Pwned The ICS Data During My Internship’

• Chrome Blocks Port 10080 to Prevent Slipstreaming Hacks

• Zoom Security Flaw: Now Hackers Can Take Control Of Your PC, Wait For Patch

• Hackers compromised APKPure client to distribute infected Apps

• Building an IDS Sensor with Suricata & Zeek with Logs to ELK, (Sat, Apr 10th)

• Security News In Review: Could IcedID Be the New Emotet?

• BSides Philly 2020 – Chris Myers’ ‘Home Labs Without Hardware Building In The Cloud’

• CareFirst Data Breach: Sensitive Information of Customers Leaked Online

• The Physical Impact of Manufacturing Cyber Threats

• Crooks abuse website contact forms to deliver IcedID malware

• Oh Look, LinkedIn Also Has a 500M User Data Leak

• Top Stories: ‘Find My’ Expansion, iPhone 13 Pro Mockup, Largest-Ever iMac?

• Homeland Isn’t an American Word

• On #DFIR Analysis, pt II – Describing Artifact Constellations

• This man was planning to kill 70% of Internet in a bomb attack against AWS

• Cryptojacking Spree: Targeting Washington State Educational Institutions

• Microsoft open-sources tool to use AI in simulated attacks

• The User Data of Swarmshop Card Shop has been Leaked Online

• ‘Build’ or ‘Buy’ your own antivirus product

• Maze/Egregor Ransomware Earned over $75 Million

• Hackers Tampered With APKPure Store to Distribute Malware Apps

• Data from 500 million LinkedIn accounts put up for sale

• Week in security with Tony Anscombe

• New Malicious Document Builder Named “EtterSilent” Used by Top Hackers Groups

• Weekly Update 238

• SecDef plans new screening, training to weed out extremism

• New OPM survey heralds rethink of federal job design

• Facebook Had Years to Fix Flaw That Leaked 500M Users’ Data

• 2021-04-09 – IcedID (Bokbot) infection from zipped JS file

• Microsoft open sources tool to use AI in simulated attacks

• Deceptive Checkboxes Should Not Open Our Checkbooks

• 2 scraped LinkedIn databases with 500m and 827m records sold online

• Extremist Charged With Plot to Blow Up Amazon Data Centers

• Don’t Put Off Cybersecurity Incident Response Planning

• 5 consejos para evitar los ciberataques en plataformas de EdTech

• Annual Pwn2Own Contest Reveals No User Interaction Zoom Remote Code Execution

• Battle for the Endpoint

• CISA Launches New Threat Detection Dashboard

• Unofficial Android App Store APKPure Infected With Malware

• Zerodium will pay $300K for WordPress RCE exploits

• Friday Squid Blogging: Jurassic Squid and Prey

• Texan’s alleged Amazon bombing effort fizzles: Militia man wanted to take out ‘about 70 per cent of the internet’

• IT Security News Daily Summary 2021-04-09

• White House preps new requirements for industrial control system security

• Advanced satellites illuminated by computer vision are changing how we see the world

• VR, AR training helps forward observers direct fire support

• DOJ: Creep Coach Finagles Nude Athlete Photos

• Common network vulnerabilities and how to prevent them

• 12 Microsoft Exchange Server security best practices

• 8 Security & Privacy Apps to Share With Family and Friends

• U.S. Senators Urge Apple to Reconsider Decision Not to Testify in Upcoming App Store Hearing

• Technology innovation gives government leverage to drive down emissions fast – here’s how

• Epic’s Case Against Apple in Australia Might Be Over

• Scientists harness chaos to protect devices from hackers

• Duo Network Gateway – Reduce VPN Dependency Using Zero Trust

• Am I FLoCed? A New Site to Test Google’s Invasive Experiment

• EFF Challenges Surreptitious Collection of DNA at Iowa Supreme Court

• Help Your Security Team Sleep Better at Night by Reducing False Positives

• HMD Revamps Budget, Midrange Nokia Handsets

• 623M Payment Cards Stolen from Cybercrime Forum

• Microsoft Open-Sources ‘CyberBattleSim’ Enterprise Environment Simulator

• Consider IoT TPM security to augment existing protection

• Exploring GRC automation benefits and challenges

• Facebook Removes 16k Groups for Trading Fake Reviews

• ATO Severely Harm User Experience and Brand Reputation

• MacRumors Giveaway: Win a Set of Fuse Cable Organizers for Your Apple Devices

• The U.S. Government Needs to Overhaul Cybersecurity. Here’s How.

• Was the recent Ubiquiti data breach catastrophic?

• Biden’s $1.5 trillion 2022 budget plan tilts spending toward civilian agencies

• CISA Releases Tool to Detect Microsoft 365 Compromise

• Report: Facebook Is Still Promoting Violent Groups To Users Despite Ban

• Joy Of Tech® ‘Its Always Listening’

• Cisco will not release updates to fix critical RCE flaw in EoF Business Routers

• Apple Wants to Draw Subscribers to Apple TV+ With More Feature Films

• Gigaset Android smartphones infected with malware after supply chain attack

• Healthcare Benefits Data Stolen During Belden Breach

• REvil / Sodinokibi Updates New Safe Mode Functionality

• Android Malware Infiltrated Huawei’s Official App Store

• Facebook ads dropped malware posing as Clubhouse app for PC

• FCW Insider: April 9, 2021

• Quick Hits

• LifeLabs Launches Vulnerability Disclosure Program

• US Jails Cyber-stalker Who Targeted Attack Survivor

• Man Sentenced To 12 Years For Attempting To Purchase Chemical Weapon On The Dark Web

• BSides Philly 2020 – Sasi Siddharth’s ‘A SAST Story Effectively Adopting Static Analysis For Profit’

• Malicious code in APKPure app

• Justin Timberlake to Star as Game Show Host Doubling as CIA Assassin in Upcoming Apple TV+ Series

• Investigating a unique “form” of email delivery for IcedID malware

• Cring Ransomware spreading because of Fortinet vulnerability

• New Ransomware Threats Are Getting Bolder: How to Rewrite the Script

• Nation-state cyber attacks targeting businesses are on the rise

• Network Detection & Response: The Next Frontier in Fighting the Human Problem

• UK’s National Cyber Security Centre recommends password generation idea suggested by El Reg commenter

• Visa: Hackers Use Web Shells to Compromise Servers and Steal Credit Card Details

• Introducing “Attacker Reachability”: Reduce open-source vulnerability tickets by 90% or more.

• Data From 500M LinkedIn Users Posted For Sale Online

• How Your Phone Can Be Hacked For $16

• Hackers Hit 9 Countries, Expose 623,036 Payment Card Records

• Facebook Says Data From 530M Users Was Obtained By Scraping

• Windows And Linux Devices Are Under Attack By A New Cryptomining Worm

• Apple Music TV Expands to the UK and Canada

• Deals: Save on Anker Charging Accessories, Netgear’s Orbi Mesh Router System, and More

• New normal for automation

• PKI (public key infrastructure)

• Verizon finds companies relaxed mobile security policies to get employees online

• Data from 500M LinkedIn Users Posted for Sale Online

• North Korean Lazarus Group Attacks South African Freight Via New Weapon

• [WHITEPAPER] How to Achieve CMMC Security Compliance for Your Business

• Alert — There’s A New Malware Out There Snatching Users’ Passwords

• Ensuring Security and Compliance for Global Healthcare

• Pwn2Own 2021: participants earned $1,2M of the $1.5M prize pool

• Two-Thirds of iPhone Users Expected to Block Ad Tracking

• Chinese Social Media Cancels Companies Over Xinjiang Cotton Boycott

• Building a Security Conscious Workforce

• Data belonging to over 500 million LinkedIn users sold online to hackers

• Hackers Are Using Web Shells to Steal Credit Card Information

• About Data Encryption Software – And the Dark Side of This Moon

• U.S. blacklists 7 more Chinese supercomputing entities

• NCSC: Large Number of Brits Are Using Easily Guessable Passwords

• Women Are Facing an Economic Crisis & the Cybersecurity Industry Can Help

• How to Run a Security Tabletop Exercise

• Backdoor Added — But Found — in PHP

• New REvil Ransomware Version Automatically Logs Windows into Safe Mode

• Millions of Chrome users quietly added to Google’s FLoC pilot

• How Can I Find My Forgotten Password?

• Can You Get Into a Grad School Without Taking a GRE?

• Secure Access Service Edge (SASE) aka SASSY- Combining Network services with Security as a Service model

• LG Promises Three Years of OS Updates for Premium Android Smartphones

• Security Automation Firm Tines Raises $26 Million at $300 Million Valuation

• Learning from Recent Insider Data Breaches

• CISA releases post-compromise tool Aviary to review Microsoft 365

• 600,000 Stolen Credit Cards Leaked Following the Swarmshop Hack

• 5 Tips to Improve Cyber Security Monitoring of Your Vendors

• Cryptomining containers caught coining cryptocurrency covertly

• Deadline is Extended for 2021(ISC)² Global Achievement Awards Nominations!

• US Blacklists Seven Chinese Supercomputing Entities

• These are the terrible passwords that people are still using. Here’s how to do better

• Pwn2Own 2021 Participants Earn Over $1.2 Million for Their Exploits

• Belgian Police Crack Encrypted Chat App to Seize $1.65 Billion Worth of Cocaine

• Crypto at Risk After Facebook Leak: Here’s how Hackers Can Exploit Data

• Credit Card Hacking Forum Compromised 300,000 User Accounts Due To A Data Breach

• DTEX InTERCEPT Named Gold Winner for Cybersecurity Excellence Awards in Insider Threat Solution Category

• iPhone 12 Mini Missing From Top 5 Best Selling Smartphone List of January 2021

• Advertised Sites May Appear Genuine On First Glance

• Millions Of Brits Still Using Pet’s Names As Passwords Despite Risk

• New Study Highlights 100% Rise In Nation State Cyberattacks In Last Three Years

• Hackers Pretend To Be Your Friend In The Latest WhatsApp Scam.

• Fake Netflix App Allows Hackers to Hijack WhatsApp

• Cyber-attacks have potential to spark armed conflict

• CyberBattleSim: Microsoft’s open-source Holodeck in which autonomous attackers, defenders duke it out

• “The WAF Is Dead” (and we know who did it)

• Critical Zoom vulnerability triggers remote code execution without user input

• #COVID19 Fraud Surge Threatens to Overwhelm Banks

• LinkedIn Users’ details being sold online

• New Vyveva Malware Used by Lazarus Hacking Group to Attack South African Freight

• Victims Lured with Fake Antivirus Billing Emails by Tech Support Scammers

• WSJ: P&G helped test method to circumvent Apple privacy tools

• How do we stamp out the ransomware business model? Ban insurance payouts for one, says ex-GCHQ director

• Security Recruiter Directory

• 4 steps to better security hygiene and posture management

• Amazon Takes Early Lead In Historic US Vote

• Washington State educational organizations targeted in cryptojacking spree

• Hackers Hacked as Underground Carding Site is Breached

• Cisco Will Not Patch Critical RCE Flaw Affecting End-of-Life Business Routers

• Apple’s Rationale for Not Bringing iMessage to Android Revealed in Legal Documents

• Counterfeit ‘AirPods 3’ Hit the Market Prior to Official Announcement

• Outpost24 mark 20th anniversary by naming Karl Thedéen as new CEO

• Coordinated Cyberattack Targets EU Institutions | Avast

• Collaboration Platforms Increasingly Abused for Malware Distribution, Data Exfiltration

• UK Firms Suffer Record Number of Cyber-Attacks in Q1

• Apple Reportedly Planning Substantial Increase of Shipments for 5G mmWave iPhone Models in 2021

• Cring Ransomware Attacks Exploited Fortinet Flaw

• Gigaset Android Update Server Hacked to Install Malware on Users’ Devices

• Should You Hire a Computer Forensics Specialist?

• No Python Interpreter? This Simple RAT Installs Its Own Copy, (Fri, Apr 9th)

• DigiTimes: iPhone 13 Pro Models to Feature 120Hz ProMotion Refresh Rate and 15-20% Less Power Consumption

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• Understanding EtterSilent and the Cybercrime Supply Chain

• 330K stolen payment cards and 895K stolen gift cards sold on dark web

• India uses controversial Aadhaar facial biometrics to identify COVID vaccination recipients

• Italian data watchdog probes data breach of LinkedIn 500 million user accounts

• A Cyber Attack probability on Facebook, Instagram and WhatsApp cannot be ruled out

• (Are you) afreight of the dark? Watch out for Vyveva, new Lazarus backdoor

• Does data stolen in a data breach expire?

• Having a cybersecurity training program in place isn’t enough to ensure cyber safety

• New infosec products of the week: April 9, 2021

• April 2021 Patch Tuesday forecast: Security best practices

• India uses controversial Aadhaar facial biometrics to identify COVID vaccination recipeints

• Ransomware Gangs Using a new Method to Collect Ransom Payments from Victims

• Cyber Criminals began to use a new scheme to defraud Russians

• Most organizations have already migrated to a cloud VPN

• Cybersecurity threats and cybercrime trends of 2020

• Digging Into the Third Zero-Day Chrome Flaw of 2021

• ISC Stormcast For Friday, April 9th, 2021 https://isc.sans.edu/podcastdetail.html?id=7450, (Fri, Apr 9th)

• How global markets are adopting real-time payments

• Remote work: One of the legacies of the pandemic

• What is Cyber Risk?

• Alation Cloud Service fuels data intelligence across hybrid cloud environments

• Okta Privileged Access improves zero trust security posture for organizations

• ShiftLeft CORE: A unified code security platform

• IDC MaturityScape helps enterprises navigate critical business and IT transitions and transformations

• Privitar’s native pattern for AWS enables customers to protect sensitive data in the cloud

• Unit4 delivers ERPx, a unified cloud platform for mid-market, people-centric organizations

• SAP systems are targeted within 72 hours after updates are released

• US adds seven Chinese supercomputing organisations onto Entity List

• Pwn2Own 2021: Zoom, Teams, Exchange, Chrome and Edge “fully owned”

• Avaya OneCloud CCaaS enhances customer experience and employee engagement worldwide

• Guardicore extends microsegmentation and zero trust security to protect legacy infrastructure and IT

• GrammaTech CodeSonar SAST to help customers ‘shift left’ and develop more secure software

• A Single PAIN of Glass

• The Rise of Telemetry Architecture

• Protecting High-Level Personnel from IMSI Catchers

• Verizon Recalls 2.5 Million Hotspots Due to Fire Risk

• PQShield appoints Ben Marshall as a Cryptography Engineer

• Glassbeam partners with Deloitte to drive rapid change in the healthcare IoT analytics sector

• Accenture partners with SAP to extend asset management solution functionality

• Fujitsu partners with Trend Micro to secure private 5G networks

• White House plans order on industrial control systems

• ODNI plans recruitment ad campaign

• Zoom Joins Microsoft Teams on List of Enterprise Tools Hacked at Pwn2Own

• Kaiser Permanente names Diane Comer as chief information technology officer

• Nick Tran joins Backblaze as VP of marketing

• Data belonging to 500 million LinkedIn users found for sale on hacker marketplace

• Preparing for AI-enabled cyberattacks

• Hackers are using fake messages to break into WhatsApp accounts

• Hackers leak data, 600k card info from Swarmshop cybercrime forum

• Zero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers

• Adware Spreads via Fake TikTok App, Laptop Offers

• Zero trust: The good, the bad and the ugly

• 600K Payment Card Records Leaked After Swarmshop Breach

• Fraudsters Use HTML Legos to Evade Detection in Phishing Attack

• StrikeForce Technologies Acquires Cybersecurity Risk Solutions LLC Expanding Its Identity and Endpoint Cyber-Defense Arsenal

• Security Researcher Earns $100,000 for Safari Exploit in Pwn2Own Hacking Contest

• Threat matrix for storage services

• IT Security News Daily Summary 2021-04-08

• Nation has Georgia on its mind, but many states are making voting easier

• Utah pilots mobile driver’s license

• States dive into unemployment system upgrades

• AFWERX invests in 5G-enabled IoT security

• DOD works to simplify processes, improve data quality and automate

• Moodle flaw exposed users to account takeover

• Apple Shells Out $3.4 Million to Chileans to Settle Planned Obsolescence Lawsuit

• LinkedIn Data Of 500 Million Users Being Sold Online – Report

• Unpatched vulnerable VPN servers hit by Cring ransomware

• An academic superstar urges us to get better at abandoning old beliefs

• IcedID Banking Trojan Surges: The New Emotet?

• Cring ransomware attacking vulnerable Fortigate VPNs

• Using Aviary to Analyze Post-Compromise Threat Activity in M365 Environments

• A Storm Might be Brewing at Molson Coors

• Samsung’s ‘iTest’ Lets You Try a Galaxy Device on Your iPhone

• Announcing the ‘After Trump’ Podcast

• How to use Docker Bench for Security to audit your container deployments

• Cost of Sandboxing Prompts Shift to Memory-Safe Languages. A Little Too Late?

• Cisco Patches Critical Flaw in SD-WAN vManage

• Apple’s Eddy Cue Reportedly Advising Tom Brady’s New NFT Company

• P&G Wanted to Skirt App Tracking Transparency Rules With China Data Collection Tech

• Threat Actor Sells 38 Million Dollars Worth of Gift Cards

• Backdoor Attack Allows Threat Actors to Access PHP Respository’s User Database

• Attackers are Using Discord and Slack Links to Spread Malware

• API Security Weekly: Issue #128

• Dodge Adversarial AI Attacks Before It’s Too Late!

• How Vulnerability Management Can Stop a Data Breach

• How to use FreeRADIUS for SSH authentication

• College Track Coach Accused of Cyberstalking

• Facebook Sucks: Huge 500M-User Breach ‘Is Your Fault’

• Apple Seeds Seventh Beta of macOS Big Sur 11.3 to Developers

• Apple’s TV App Currently Has Misleading Pricing for Movies

• Threat matrix for storage

• Why Security Assessment Is Important

• Unpatched applications threaten SAP security

• SASE options for the branch of one — work from anywhere

• Stimulus Stimulates Unemployment Scams

• IT Services Remain Disrupted At Two Colleges Of Ireland After Ransomware Attacks

• BSides Philly 2020 – Chris Maenner’s ‘How Microsoft Made Me Love SIEMs Again’

• Announcing ShiftLeft CORE — A Code Security Platform

• Swarmshop – What goes around comes around: hackers leak other hackers’ data online

• Apple Rolling Out Tags in App Store to Help Refine Popular Search Results

• Apple Picks Up ‘The Crowded Room’ Starring Tom Holland

• Imperva’s Comprehensive Data Security Platform for Cloud, Explained

• Cyber Risk Quantification Through the Lens of Financial Exposure

• Apple Inc to start take App Privacy Notifications seriously

• Facebook Responds To Data Leak – Says, ‘Data Not Hacked, But Scraped’

• Apple ‘Find My’ App To Locate Third-Party Items

• Hackers Abusing GitHub Infrastructure To Mine Cryptocurrency

• Library Dependencies and the Open Source Supply Chain Nightmare

• Americans Avoid Sites After Forgetting Passwords

• Beware of scam using the name of Europol’s Executive Director

• Russian intelligence was accused of cyber attacks on Lithuania’s top leadership

• Threat Actors are Using Telegram & Google Forms to Obtain Stolen User Data

• German Company Hit By Supply Chain Attack, Only Few Device Affected

• Solid8 Technologies Exclusive Distributor for comforte AG

• How to Test Application Comprehensively with Manual Web App Pen Testing?

• Pwn2Own 2021 Day 2 – experts earned $200K for a zero-interaction Zoom exploit

• Federal Privacy Rules Must Get “Data Broker” Definitions Right

• Gamifying machine learning for stronger security and AI models

• Making it look easy, NetApp and Google Cloud simplify digital transformation

• Focus on managing your data science workspaces, not your data volumes

• British Reseller Sues Microsoft Over Pre-owned Licences

• Microsoft Exchange server, Teams, Zoom, Chrome pwned at Pwn2Own

• OneTrust raises $210M to expand its enterprise compliance solutions

• Azure Functions Weakness Allows Privilege Escalation

• How password anxiety is impacting individuals and organizations

• Belden Says Health-Related Information Exposed in Data Breach

• Italian charged with hiring “dark web hitman” to murder his ex-girlfriend

• Cisco Releases Security Updates for Multiple Products

• Three ways ISE 3.0 enables visibility-driven network segmentation to gain zero trust

• What do you do when the Cyber Police call?

• Scraped data of 500 million LinkedIn users being sold online, 2 million records leaked as proof

• Apple, Google Slammed For Links To China

• Royal Flush: Privilege Escalation Vulnerability in Azure Functions

• Hackers Exploit Fortinet Flaw in Sophisticated Cring Ransomware Attacks

• Cring Ransomware Targets Industrial Organizations

• Watch Out For United Nations COVID-19 Compensation Email Scams

• Handcuffs Over AI: Solving Security Challenges With Law Enforcement

• Russia May Have Found a New Way to Censor the Internet

• Hackers Exploit Unpatched VPNs to Install Ransomware on Industrial Targets

• Researchers uncover a new Iranian malware used in recent cyberattacks

• Protecting an Airline from Bad Bots: A Case Study

• How to Increase & Justify Your Cyber Security Budget

• Meet the Developers Behind Sonatype’s Automated Malware Detection System Securing Open Source Supply Chains

• Ransomware Crooks Are Targeting Vulnerable VPN Devices

• Should Firms Be More Worried About Firmware Cyber-Attacks?

• Attackers Blowing Up Discord, Slack With Malware

• Tons Of PII Leaked Due To Swarmshop Hack

• Deals: Save Up to $50 on Apple’s 2020 iPad Air

• Samsung’s Galaxy SmartTag With UWB Beats AirTags to Market, Launches April 16 for $39.99

• Office 365 phishing campaign uses publicly hosted JavaScript code

• Zoom zero-day discovery makes calls safer, hackers $200,000 richer

• Securiti releases AI-powered data privacy and security platform to provide unified controls

• Computer vision development platform CrowdAI raises $6.25M

• Nation-state cyber attacks could lead to cyber conflict

• PHP Developers Share Update on Recent Breach

• Online Fraud in the UK Up 179% in the Last Decade

• NIST and HIPAA: Is There a Password Connection?

• Cisco fixed multiple flaws in SD-WAN vManage Software, including a critical RCE

• Experts Perspectives On Verizon Mobile Sec Index: WFH The New Normal

• Carding Mafia hack: 300,000 user accounts exposed

• Tines, which helps enterprise security teams automate repetitive workflows, raises $26M

• Ransomware crooks are targeting vulnerable VPN devices in their attacks

• Facebook tackles deepfake spread and troll farms in latest moderation push

• Vulnerability in ‘Domain Time II’ Could Lead to Server, Network Compromise

• $200,000 Awarded for Zero-Click Zoom Exploit at Pwn2Own

• S3 Ep27: Census scammers, beg bounties and data breach fines [Podcast]

• Armed Conflict Draws Closer as State-Backed Cyber-Attacks Intensify

• Over 40% of Applications Actively Leaking Data

• Forrester’s State Of Application Security Report, 2021: Key Takeaways

• How Insider DLP Risks Impact Cybersecurity & Student Data Privacy

• Cyber Resilience Starts With Visibility: How Risk Quantification is Imperative to Improving Security Posture

• Google’s Project Zero Finds a Nation-State Zero-Day Operation

• Facebook Tests New Contextual ‘Labels’ for Posts From Popular Pages

• University of California and Stanford University systems breached

• March 2021 Cyber Attacks Statistics

• Hush – This Data Is Secret

• FTC Asks US Court Not To Grant Facebook Antitrust Dismissal Request

• What is unified policy as code, and why do you need it?

• Deliver Security and Trust to IoT, with this IoT Security Guide by IDC

• ACC Launches Data Security Program for Law Firms

• Work Continues on Apple’s Second Berlin Store in Eastern Part of German Capital

• What The Govt Is Missing From Its Recent Cybersecurity Improvement Act

• Unpatched Fortinet VPN Devices Are Attacked by New Cring Ransomware

• Introducing ZecOps Anti-Phishing Extension

• Belgian police seize 28 tons of cocaine after ‘cracking’ Sky ECC’s chat app encryption

• Facebook, Google, and Stolen iPhones – Intego Mac Podcast Episode 182

• Umbraco CMS Vulnerability Could Allow Privilege Escalation

• What is IAM? Identity and access management explained

• Experts fear that Biden’s cybersecurity executive order will repeat mistakes of the past

• Chip Shortage Hits Apple iPad, Mac Production – Report

• Vyveva: Lazarus hacking group’s latest weapon strikes South African freight

• Italian man arrested after allegedly paying hitman in cryptocurrency

• Number of US Breach Victims Jumps 564% in Q1 2021

• China and its Humongous Bitcoin Mining Industry has Severe Impact on the Global Climate

• AMD Admits Ryzen 5000 CPU Exploit Could Leave Your PC Open to Hackers

• User database was also hacked in the recent hack of PHP ‘s Git Server

• Leaked Dummy Units Show iPad Mini 6 With Thick Bezels and Home Button, New iPad Pro Models

• iPad and MacBook Production Reportedly Delayed Due to Global Chip Shortage

• Hackers are using web shells to steal credit cards

• On AI Neural Network – How It Works, History, Application, Learning Strategies

• Why do phishing attacks work? Blame the humans, not the technology

• Italian Arrested After Allegedly Paying Hitman to Murder Ex-Girlfriend

• Welcoming the Ukrainian Government to Have I Been Pwned

• Simple Powershell Ransomware Creating a 7Z Archive of your Files, (Thu, Apr 8th)

• Survey finds 96% of execs are adopting ‘offensive AI’ against cyberattacks

• Fake Netflix App Spreads Malware via WhatsApp Messages

• Secrets Detection: An Emerging AppSec Category

• Epic Games Began Planning Antitrust Lawsuit Against Apple Two Years Ago With ‘Project Liberty’

• There’s a whole wide world of web application firewall options – so how do you choose the right one?

• Want to add antivirus to your existing portfolio?

• Mobile Security worse during COVID-19 lockdown says Verizon

• VMware adds Cloud Security extension to Containers and Kubernetes

• “Garry on Lockdown” Episode 7 | Avast

• Time to Retire a Cybersecurity Cliché

• Man arrested after hired a hitman on the dark web

• Supply‑chain attacks: When trust goes wrong, try hope?

• $38 million worth of gift cards stolen and sold on dark web

• PHP Site’s User Database Was Hacked In Recent Source Code Backdoor Attack

• Cybercriminals are using Telegram bots, Google Forms to gather stolen user data

• A rush to remote working leaving businesses vulnerable to cybercriminals

• Cloud-native watering hole attack: Simple and potentially devastating

• 4 things you can do to minimize cyberattacks on supply and value chains

• IETF RFC 4041 – Requirements for Morality Sections in Routing Area Drafts

• Fraudulent purchase attempts value increased 69% in 2020

• Businesses shifting to remote work need to focus on securing endpoint devices

• Indian defense chief admits China’s cyber-weapons would ‘disrupt large number of systems’ whenever Beijing presses the button

• Integrity: How It’s More than Just Data Security and FIM

• Financial organizations struggling to secure data in the cloud

• 68% of construction executives have no cybersecurity measures in place

• Hackers Exploit FortiOS Vulnerabilities to Access Government and Technology Services Networks

• 7 Reasons Active Threat Monitoring is the New Business Norm

• Las cuatro labores indispensables de ITSM para 2021

• ISC Stormcast For Thursday, April 8th, 2021 https://isc.sans.edu/podcastdetail.html?id=7448, (Thu, Apr 8th)

• nFront Weak Password Scanner helps orgs scan breached passwords

• 2021-04-06 and 07 – Data dump: Hancitor activity

• 2021-04-07 – Quick post: BazaCall activity

• OpenNebula 6.0 “Mutara”: Laying groundwork for an integrated and automated enterprise edge cloud

• VMware increases visibility, enables compliance and enhances security for containerized applications

• Fortanix powers new applications of confidential computing

• Intel launches performance data center platform to power a broad range of workloads

• Perimeter 81 FWaaS helps organizations scale and protect their expanding perimeters

• Resolving SQL Connection Errors Due to SSL Certificate Issues

• DOD bets big on financial data to improve business performance

• SecOps and DevOps: From Cooperation to Automation

• Cisco and Intel deliver server innovations to hybrid cloud infrastructure

• Yellowbrick Manager brings deeper integration with cloud object stores

• Lenovo ThinkSystem servers accelerate and secure a broad range of workloads

• Trifacta expands platform to deliver a data engineering cloud

• Okta expects annual revenue to jump by 30% with addition of new products

• Did 4 Major Ransomware Groups Truly Form a Cartel?

• Veracode launches Technology Alliance Program to deliver secure software at scale

• CMMC Accreditation Body announces Industry Advisory Council backed by DIB leaders

• SAP partners with Onapsis to mitigate active threats against unprotected SAP applications

• Threat Stack partners with Liquid Web to extend the Threat Stack Oversight IDS to customers

• Okta CEO: We have a massive addressable market

• Why E-Commerce Security Matters Now More Than Ever

• O fator de produtividade em um local de trabalho híbrido

• Questões a serem consideradas ao contratar um DPO e CISO

• New Cring ransomware deployed targeting unpatched Fortinet VPN devices

• Christy Lynch joins deepwatch as CMO

• Venafi surpasses $100M in annual recurring revenue

• Cofense acquires Cyberfish to eliminate the need for legacy email security solutions

• Code42 Incydr and Okta Identity Cloud integration improve organizations’ data security risk postures

• Top cyber slots still unfilled amid multiple crises

• IRS floats plans to digitize more data

• Army wants to clean up biometric ID data

• When software reaches end of life, what’s your plan?

• 2021 Brings new security challenges and regulations for European CISOs

• Voice-Changing Software Found on APT Attackers’ Server

• T-Mobile Launches Unlimited 5G Home Internet for $60/Month

• A Broader Look at Privacy Remedies

• IT Security News Daily Summary 2021-04-07

• BrandPost: What’s Next in Battling Ransomware? Human-driven Threat Hunting

• Census delay spells election chaos for states

• Attackers Blowing Up Discord, Slack with Malware

• Cring Ransomware Used in Attacks on European Industrial Firms

• Is the Value of Bitcoin Tied to Ransomware Rates?

• Another supply-chain attack? Android maker Gigaset injects malware into victims’ phones via poisoned update

• How To Remove Ransomware From Android Phone Easily?

• Garry on Lockdown — Episode 7

• Using the Threat Modeling Manifesto to Get Your Team Going

• EPA eliminates Trump workforce orders from labor contract

• How to better combat malware delivered through email

• Utilizing existing tech to achieve zero-trust security

• Fortune 500 Security Shows Progress and Pitfalls

• CERIAS – Cory Doctorow’s ‘Technology, Self-Determination, And The Future Of The Future’

• Protocol Police: The RFC

• VanMoof E-Bikes Gain Find My Integration as Belkin Prepares to Launch Find My SOUNDFORM Earbuds

• What Movie Studios Refuse to Understand About Streaming

• The Ultimate Guide to iPhone and iPad Backups and Storage

• SAP Applications under Cyber Attack

• Joint Alert by CISA and FBI Warns of Active Exploitation Against FortiOS Devices

• VMWare Issues Fix for Carbon Black Cloud Workload Authentication Bypass

• Exposed and Unpatched SAP Applications Are Currently Being Targeted

• System update app in Gigaset Android phones identified as malware

• Fake Netflix app on Play Store caught hijacking WhatsApp sessions

• What Does Modern Even Mean? How to Evaluate Data Security Solutions for the Hybrid Cloud and Beyond

• Experian: Consumers prefer ‘invisible security’ to passwords

• Trust and Safety – Rebranding of an Old Concept, or a New Way to Look at Customer Interaction?

• The leap of a Cycldek-related threat actor

• Chipolo Announces New ‘ONE Spot’ Item Tracker With Find My Integration

• Find My’s New Third-Party Accessory Support Works With iOS 14.3 and Later

• Fake Netflix App on Google Play Spreads Malware Via WhatsApp

• Crossing the Line: When Cyberattacks Become Acts of War

• Report: Supplier Impersonation Attacks a Major Risk

• Open Source Security Management Firm WhiteSource Raises $75 Million

• Modern network infrastructure design taps security, flexibility

• IT Pros Share Work Devices with Household

• Consulting Firm Data Breach Impacts MSU

• US Senators Warn Bit-Tech Companies about Data-Gathering Practices

• Canadian IoT Solutions Provider, Sierra Wireless Hit by a Ransomware Attack

• Rethinking Cyberattack Response: Prevention & Preparedness

• Twitch Will Act on ‘Serious’ Offenses That Happen Off-Stream

• Okta Launches New Customer Identity Risk Ecosystem and Workflow Integrations

• Apple Looking To Close Gap Between Web And App Privacy

• Update On PHP Code Compromise: User Database Leak Suspected

• Apple Seeds Seventh Beta of tvOS 14.5 to Developers

• Apple Seeds Seventh Beta of watchOS 7.4 to Developers

• Apple Seeds Seventh Betas of iOS 14.5 and iPadOS 14.5 to Developers

• Apple Announces Find My Network With Support for Third-Party Devices

• Third-Party Accessory Makers Can Access U1 Chip in iPhones for Find My

• Recent African Court Ruling Spells Trouble for Rusesabagina and Rwanda

• India’s Strict Rules For Online Intermediaries Undermine Freedom of Expression

• Here’s how Apple is battling Big Tech over privacy

• Tesla Car Cameras Not Activated Outside North America

• Where Digital Meets Physical: Integrating Your Threat Intel Strategy

• Fake Netflix App Luring Android Users to Malware

• Chemical Weapon Shopping Sends Dark Web User to Prison

• Phishing Emails Most Commonly Originate from Eastern Europe

• Data Stolen from 500 Million LinkedIn Users Leaked Online

• Android to Support Rust Programming Language to Prevent Memory Flaws

• How Misconfigured Amazon S3 Buckets Can Lead to a Ransomware Attack

• Pwn2Own 2021 Day 1 – participants earned more than $500k

• Lockdown Saw Rise in Wine Domains and Wine Scammers

• San Jose Easter Church Service Hacked By Racist Hackers

• New Wormable Android Malware Poses As Netflix To Hijack WhatsApp Sessions

• Expert Commentary On CISA Warns Of APTs Exploiting Fortinet Vulnerabilities

• Experts Insight On CISA Advisory Regarding Attackers Targeting SAP

• $38M Worth of Gift Cards Sold by a Hacker

• SAP Application Vulnerabilities Targeted by Hackers

• The EU Online Terrorism Regulation: a Bad Deal

• Fake Trezor app steals more than $1 million worth of crypto coins

• SAP warns of malicious activity targeting unpatched systems

• The Ultimate Guide to Backups and Storage for iPhone and iPad

• Genomics gets a new backbone – FlexPod shared infrastructure solution!

• European Commission Suffers ‘IT Security Incident’ – Report

• Microsoft Edge Overtakes Firefox On Desktops

• Infrastructure Intrusion: America Under Attack

• Mobile devices proved vulnerable during pandemic lockdowns

• Facebook Removes 14 Networks Fueling Deceptive Campaigns

• What Cybersecurity Policy Changes Should We Expect from the Biden Administration?

• The Russian who hacked JPMorgan was demanded $20 million in compensation

• Mark Zuckerberg’s Details Leaked in Facebook Data Breach

• SAP applications are getting compromised by skilled attackers

• What Is Residual Risk in Information Security?

• European Commission Suffers Major Security Incident

• Top Cybercriminal Gangs Are Using EtterSilent Maldoc Builder

• TU Dublin and National College of Ireland Face Ransomware Attack

• Cybercrooks targeting UK organisations started 2020 strong only for attacks to wither away by Christmas

• Update on PHP source code compromise: User database leak suspected

• Microsoft Submerges Servers In Boiling Liquid

• Apple looking to close the gap between web and app privacy

• Cybercrooks targeting UK organisations started 2020 strong only for attacks to whither away by Christmas

• Details Disclosed for GitHub Pages Flaws That Earned Researchers $35,000

• Janeleiro a New Banking Trojan Targeting Corporate, Government Targets

• Attackers Actively Seeking, Exploiting Vulnerable SAP Applications

• 5 Ways to Transform Your Phishing Defenses Right Now

• WitFoo Announces Partnership with CyberOpz MSSP leader to offer SIEM/SOAR as a service

• The Cybereason Difference: Introduction to the Malop

• Password Storage Using Java

• Signal Adds Cryptocurrency Support

• WiFi IDS and Private MAC Addresses, (Wed, Apr 7th)

• Deals: Save Up to $79 on Apple’s M1 MacBook Air, Starting at $949 for 256GB

• Apple Forecasted to Sell Record-Breaking 240+ Million iPhones in 2021

• What Is A Packet Sniffer and How Does It Work?

• Under the Hood: Inside (ISC)² Exam Development Cycle

• WhiteSource raises $75M to move beyond open source security and compliance management

• A new headache for ransomware-hit companies. Extortionists emailing your customers

• Facebook: Stolen Data Scraped from Platform in 2019

• Privacy Concerns Raised Over Scotland’s New #COVID19 Check-In App

• Cartoon Caption Winner: Something Seems Afoul

• Hackers Are Exploiting Discord Links to Serve Up Malware

• Leaving WhatsApp – Treating the Symptom, Not the Cause

• Digital Shadows announces new threat intelligence capabilities mapping to MITRE ATT&CK framework

• Crooks use Telegram bots and Google Forms to automate phishing

• Apple Attempts to Block ‘Nearly Identical’ Logo From Trademarking

• Apple Details Ways Advertisers Can Measure the Impact of Ads Without Tracking Users Ahead of iOS 14.5 Launch

• What is Malvertising and How to Remove It?

• Scientists harness chaos to protect devices from hackers

• Duo Network Gateway – Reduce VPN Dependency Using Zero Trust

• Google Research Manager Resigns After Recent AI Firings

• Man jailed for trying to buy chemical weapon online able to kill ‘hundreds’ of people

• Google Patches Critical Code Execution Vulnerability in Android

• Cybersecurity Industry Must Find Solutions for Third Party Data Security

• WTF: Signal Adds Cryptocurrency Support

• Scotland Capital’s Schools to Get 39,000 iPads in ‘Edinburgh Learns for Life’ Initiative

• Developer Highlights How Fake Apps Scam Users Via Apple’s In-App Purchasing System

• Multiple EU organisations have been hit by a cyber-attack

• Was the recent Ubiquiti data breach catastrophic?

• Autoreply attack! New Android malware found in Google Play Store spreads via malicious auto-replies to WhatsApp messages

• Blue Dot raises $32M for AI that helps companies comply with tax codes

• New wormable Android malware poses as Netflix to hijack WhatsApp sessions

• White Hats Earn $440,000 for Hacking Microsoft Products on First Day of Pwn2Own 2021

• Wormable Netflix Malware Spreads Via WhatsApp Messages

• Dark web hitman identified through crypto-analysis

• Sophos Uncovered Connection Between Mount Locker and Astro Locker Team

• Active Cyber Attacks on Mission-Critical SAP Apps

• The VMware Carbon Black Cloud Workload Patched a Vulnerability

• 11 Useful Security Tips for Securing Your AWS Environment

• WhatsApp-based wormable Android malware spotted on the Google Play Store

• Gigaset Android smartphones infected with malware after supply chain attack

• Fake Trezor app steals more that $1 million worth of crypto coins

• How to reset Kerberos account passwords in an Active Directory environment

• Nokia, Lenovo Settle Patent Dispute

• FCW Insider: April 7, 2021

• Quick Hits

• Data of 553m Facebook users dumped online: how to see if you are impacted

• CISA: Patch Legacy SAP Vulnerabilities Urgently

• Critical Auth Bypass Bug Found in VMware Data Center Security Product

• Apple Podcasts Now Lists 2 Million Shows, But Almost Half of Those Titles Have Only Three or Fewer Episodes

• Reddit App Ends Support for iOS 12, Now Requires iPhone 6S or Later to Work

• Office Depot Configuration Error Exposes One Million Records

• Critical Auth Bypass Bug Found in VMWare Data Centre Security Product

• Layers and Telemetry — What We Can Learn from the Stanford University Breach

• ZecOps Announces The Formation of Defense Advisory Board and Appoints Former Commander of Unit 8200 Ehud Scneorson as Chairman

• Pre-Installed Malware Dropper Found On German Gigaset Android Phones

• Education In The Crosshairs Of Cyberattacks | Avast

• Breach Clarity Data Breach Report: Week of April 5

• Hackers actively exploiting SAP Bugs

• Looking for adding new detection technologies in your security products?

• What To Do About The Facebook Leak | Avast

• Atheists appeal to higher power for intercession over alleged sins against privacy

• The Security Digest: #55

• 6 Myths About Storing and Protecting CUI

• On Beauty Queens, Hackers and the U.S. Supreme Court

• Mitigating Threats to the Application Layer

• European Commission and other institutions were hit by a major cyber-attack

• Cyber Attack on European Union Institutions

• Ransomware attackers are now emailing customers of victimized companies

• What To Do About Facebook Leak | Avast

• Janeleiro, the time traveler: A new old banking trojan in Brazil

• Experts uncover a new Banking Trojan targeting Latin American users

• SASE or zero trust? Why security teams should be using both

• How do I select an attack detection solution for my business?

• Vulnerabilities in ICS-specific backup solution open industrial facilities to attack

• Massive increase in endpoint attacks, rising rate of encrypted malware and new exploits targeting IoT

• People are the weakest link in data breaches, but can they be held accountable?

• Managing Your Assets with Tripwire Enterprise

• ISC Stormcast For Wednesday, April 7th, 2021 https://isc.sans.edu/podcastdetail.html?id=7446, (Wed, Apr 7th)

• IT security budgets to increase over the next 12 months

• Not all eSignature solutions are necessarily right for business

• Rust support moves into Android underpinnings

• Facebook Says Hackers ‘Scraped’ Data of 533 Million Users in 2019 Leak

• Zyxel launches XGS1250-12 12-Port Web-Managed Multi-Gigabit Switch for homes and offices

• RICOH Return to Work Security Services: Safety and security measures for the physical workspace

• Siemens PCBflow enables secure collaboration between PCB designers and manufacturers

• DefenseStorm expands security for financial institutions with CyberFraud

• Detecting Sensitive Data Leaks That Matter

• Senators Press for More on SolarWinds Hack After AP Report

• Mosyle boosts Apple device management and security with Mosyle Fuse

• Majesco now speeds distribution on-boarding and optimizes the distribution operation

• LogRhythm NextGen SIEM Platform 7.7 offers enhanced detection and response capabilities

• Absolute’s additional platform enhancements respond to potential endpoint security risks

• What Really Caused Facebook’s 500M-User Data Leak?

• LG Launching 2021 Sound Bar Lineup With AirPlay 2 Support

• Jumio collaborates with Microsoft to improve verifiability and secure information exchange

• Companies pay out hundreds of millions in ransomware attacks

• FlexPod VDI Rapid Deploy Bundles – The name says it all

• ThreatQuotient raises $22.5M to accelerate execution of new innovations

• Onfido’s identity verification to power onboarding for Microsoft’s digital wallet for identity credentials

• Socure provides identity verification for Microsoft Azure AD verifiable credentials

• Perpetual Disruption Part 1: What is Good Cybersecurity Governance in Health Care?

• Too slow! Booking.com fined for not reporting data breach fast enough

• Microsoft Teams, Exchange Server, Windows 10 Hacked in Pwn2Own 2021

• I’m Writing a Book with Rob Conery, and It’s Gonna Be Awesome

• Gazelle Decides Not to End Device Trade-In Program After All

• Splunk appoints Teresa Carlson as President and Chief Growth Officer

• Cyble raises $4M to provide early warning intelligence on cyber threats

• Cookie Hijacking: More Dangerous Than it Sounds

• CMMC announces new advisory council to collect industry feedback

• SmartCityPHL: Where data makes an impact

• Facing wave of retirements, Connecticut looks to digitization for efficiency and savings

• The Edge Pro Tip: Update Your DDoS Defense Plan

• Crime Service Gives Firms Another Reason to Purge Macros

• Security Falls Short in Rapid COVID Cloud Migration

• What is SAML (Security Assertion Markup Language)?

• SSL is Not Just a Compliance Necessity- Don’t End-Up Buying Any SSL Certificate

• Tweetbot 6 for iOS Gains Revamped Video Player With Picture in Picture Support

• SAP: It takes exploit devs about 72 hours to turn one of our security patches into a weapon against customers

• IT Security News Daily Summary 2021-04-06

• Biden taps 18F veteran Robin Carnahan to lead GSA

• Senators seek details on Einstein’s performance and limitations

• The emergency 911 system where callers still don’t always get proper CPR instructions

• Bandwidth issues haunt National Weather Service

• White House taps Robin Carnahan for top GSA spot

• Iowa taps into FirstNet for 911 backup

• Chinese Hackers Selling Intimate Stolen Camera Footage

• Critical Cloud Bug in VMWare Carbon Black Allows Takeover

• Threat Actors Quick to Target (Patched) SAP Vulnerabilities

• 6 ways to prevent insider threats every CISO should know

• Apple’s Revamped Apple Music for Artists Icon Leads to Speculation About iOS 15 Design Plans

• Pre-installed auto installer threat found on Android mobile devices in Germany

• Top cybercrime gangs use targeted fake job offers to deploy stealthy backdoor

• Risk & Repeat: Recapping the Exchange Server attacks

• Aurora campaign: Attacking Azerbaijan using multiple RATs

• IoT Provider Sierra Wireless Hit with Ransomware

• A Company Paid Millions to Get Their Data Back – Then Fell Victim to the Same Attack Again

• New Maldoc Builder EtterSilent Being Used by Top Threat Actors

• Fake LinkedIn Job Offer Delivers More_eggs Backdoor

• BrandPost: Getting a Grip on Basic Cyber Hygiene with the CIS Controls

• BrandPost: How Configuration Assessments Help Improve Cyber Defenses

• Chinese APT group spying on Vietnam military with FoundCore RAT

• McAfee Defender’s Blog: Cuba Ransomware Campaign

• McAfee ATR Threat Report: A Quick Primer on Cuba Ransomware

• Connolly, Hice urge White House to fill MSPB slots

• Okta releases new starter plan for developers with free support for up to 15k monthly users

• SAP Bugs Under Active Cyberattack, Causing Widespread Compromise

• Are You One of the 533M People Who Got Facebooked?

• Australia Considers Social Media ID Requirement

• Parrot Launches Bug Bounty Program

• Florida School District Held to Impossibly High Ransom

• Facebook Data Breach: How To Check If Your Details Were Leaked

• FBI & CISA Warns of Active Attacks on Fortinet FortiOS Servers

• Hackers Send Fake Census Form Alerts to UK Respondents

• The Opportunities—and Obstacles—for Women at NSA and Cyber Command

• Introducing the Veracode Technology Alliance Program

• A Modern SOC Should Not Be Entirely Dependent On Human Operators and Their Personal Experience

• SAP systems are targeted within 72 hours after updates are released

• Malspam with Lokibot vs. Outlook and RFCs, (Tue, Apr 6th)

• All of Google’s Main Apps Now Feature Privacy Labels

• Apple’s Third-Party Find My Accessory Program Gets Closer to Launch With New Test App

• The al-Mawla Tactical Interrogation Report Mixtape

• Water Wars: Philippines ‘No Fool’ about Chinese Maritime Militia, While China Keeps Pressure on Taiwan

• Rust in the Android platform

• Data scraped from 500 million LinkedIn users found for sale online

• Hacked Data Of Over 500 Million Facebook Users Leaked Online

• Activision Warns of Remote-Access Trojans Hidden Within Fake ‘Call of Duty’ Cheat Tools

• California Man Indicted in Shopify Data Breach

• Ryuk’s Rampage Has Lessons for the Enterprise

• Signal Adds a Payments Feature—With Cryptocurrency

• CERIAS – Santiago Torres-Arias’ ‘Practical Software Supply Chain Security And Transparency’

• Cybercriminals Continue to Exploit Human Nature Through Phishing and Spam Attacks

• How Can Security Training Harden Your DevOps Process?

• Cybersecurity lab identifies a surge in watering hole attack

• Newly Discovered “System Update” Android Malware Steals Photos, Videos & GPS Location

• dumpster diving

• IG pushes DOD to update pandemic plans to support telework

• Space Force satcoms contract gets CMMC nod

• Could 2022 see the end of OCO?

• Best bitcoin hardware wallet in 2021

• How poor password habits put your organization at risk

• ThreatQuotient Adds $22.5 Million in Funding

• Solving the opportunity divide: Podcast interview with Dr Christine Izuakor

• Don’t be the weak link in your customers’ supply chain security

• Exclusive Deals: Get 20% Off Sitewide at Nomad This Week

• Bonus Episode of ‘Mythic Quest’ Coming Ahead of Season 2 Premiere

• A battle cry for SMBs to address cybersecurity

• A Ransomware Attack Affected Personal Touch Patients and Employees Across U.S.

• Useful Tips for Choosing an Antivirus Software

• gau (GetAllUrls) Review – A Tool For Discovering URL’s

• Unified storage: The change you need

• Conti ransomware gang demanded $40m from US school district

• Rocke Group Actively Targeting the Cloud: Wants Your SSH Keys

• How To Maintain and Rotate Keys and Tokens With Zero Downtime

• Perimeter 81 launches new Firewall-as-a-Service offering

• SAP and Onapsis detail findings of potential exploits on unprotected SAP apps

• How the quick shift to the cloud has led to more security risks

• The Rise of Industrial IoT and How to Mitigate Risk

• US DoD Launches Vuln Disclosure Program for Contractor Networks

• APT Group Using Voice Changing Software in Spear-Phishing Campaign

• Ransomware Attacks Grew by 485% in 2020

• The data of potential borrowers of Bank Dom.RF are being sold on the Internet

• NFT Thefts Reveal Security Risks in Coupling Private Keys & Digital Assets

• 9 Modern-Day Best Practices for Log Management

• Announcing Zero Trust Authentication for Managed Devices and BYOD

• Veracode Launches Technology Alliance Program

• Venafi Poised for Hypergrowth Amid Rapidly Evolving Security Landscape

• ThreatQuotient Closes $22.5 Million in New Financing to Accelerate Innovation and Execution

• Axis Security Named in the 2021 CRN® Partner Program Guide

• Apple Launches True Crime Podcast to Accompany New Apple TV+ Series ‘The Line’

• Apple’s Search Engine Deal With Google Expected to Drive Services Revenue Growth Through 2022

• Mass Production of A15 Chip for iPhone 13 Set to Begin Ahead of Schedule in Late May

• Hundreds of OnlyFans Creators had Their Adult Content Published Online

• Job-Matching Service Data Compromised by a Security Breach

• Over 200 Bangladesh Organizations Hit by Hafnium Hacker Group

• Catch NVIDIA GTC 21 live right here

• Ex-Akamai CSO will guide security startups on strategy as new YL Ventures partner

• SAP issues advisory on the exploit of old vulnerabilities to target enterprise applications

• Conti Gang Demands $40M Ransom from Florida School District

• Watch Out—That ‘Call of Duty: Warzone’ Cheat Might Be Malware

• Watch Out! Mission Critical SAP Applications Are Under Active Attack

• Chinese Cycldek APT targets Vietnamese Military and Government in sophisticated attacks

• SAP Issues Advisory On Old Vulns Being Exploited

• Hands-On With the New Sonos Roam Speaker

• Deals: Get the 40mm (Product)RED Apple Watch Series 6 for New Low Price of $319.99 ($79 Off)

• iOS 14 Adoption Reaches Estimated 90% Less Than Seven Months After Launch

• CNA Financial Fell Victim to a ‘Sophisticated’ Ransomware Cybersecurity Attack

• Their ‘next job could be in cyber’: UK Cyber Security Council launches itself by pointing world+dog to domain it doesn’t own

• Don’t Drown your Security Team in Low-Value WAF Alerts

• Join NetApp at GTC21

• Malicious Cyber Activity Targeting Critical SAP Applications

• Decouple your ShiftLeft AppSec policies with Open Policy Agent

• Top 5 Cyber Risk Questions Board Members Ask Axio

• M1 Mac RAM and SSD Upgrades Found to Be Possible After Purchase

• Review: Nomad Launches New $50 Mount for Housing Your MagSafe Charger

• Imperva’s Comprehensive Data Security Platform for Cloud, Explained

• Fortinet FortiOS vulnerabilities are being exploited, warns FBI

• Apple Mail zero-click vulnerability could allow attackers to take-over victims accounts

• More Data Accessed During Atascadero State Hospital Security Breach

• Why businesses pay off ransomware attackers

• Cyber Risk Quantification Through the Lens of Financial Exposure

• Has Facebook leaked your phone number?

• Threat intelligence platform ThreatQuotient secures $22.5M

• All Eyes on PCAP: The Gold Standard of Traffic Analysis

• AddSecure Acquires Telia Finland’s Alerta Business

• Phone Cloning Scam

• 16-31 March 2021 Cyber Attacks Timeline

• The extortion economy: Inside the shadowy world of Ransomware payouts

• Research claims Google Pixel phones share 20 times more data than iPhones

• Want to Buy a Secondhand iPhone? Here’s How to Check if it was Stolen

• Facebook Says Massive Leak Involves ‘Old’ User Data

• Amazon Apologises For Denying Staff Pee In Bottles

• Cryptocurrency Market Capitalisation Hits $2tn

• Russia Extends Punitive Twitter Slowdown Into May

• Meet Janeleiro: a new banking Trojan striking company, government targets

• Industries critical to COVID-19 response suffer surge in cloud cyberattacks

• Sophos Links Mount Locker to Astro Locker Ransomware

• MITRE Madness: A Guide to Weathering the Upcoming Vendor Positioning Storm

• The Benefits of Conducting Identity Access Reviews

• Experts Insight On Facebook Data Leak

• Brad Hedlund joins Aviatrix as a Principal Solutions Architect

• MITRE names Dana Jackson as senior VP and GM, MITRE National Security

• AT&T evolves FirstNet to help the public safety community stay mission ready

• TP-Link introduces Archer AX5400 Wi-Fi 6 Router to improve network efficiency and bandwidth

• Code42 accelerates insider risk response using automated Slack workflows

• What’s next for encryption if the RSA algorithm is broken?

• Coca-Cola trade secret theft underscores importance of insider threat early detection

• FCW Insider: April 6, 2021

• CISA: Patch These Three Fortinet Bugs Now to Avoid Compromise

• The Less Progressive but Consistent, Cycldek Threat Actors

• The Facebook Phone Numbers Are Now Searchable in Have I Been Pwned

• This service allows checking if your mobile is included in the Facebook leak

• Facebook – 509,458,528 breached accounts

• LG Quits Smartphone Business, Citing Losses

• Google Wins Over Oracle In Decade-Long Case

• LinkedIn Users Targeted by Spear-Phishing Campaign

• Furniture Retailer Vhive’s Data Breach: Customer Information Leaked Online, Under Investigation

• Microsoft To Do App Ends Support for iOS 12, Now Requires iOS 13 or Later

• US Labour Officials Find Amazon Illegally Fired Internal Critics

• FBI, CISA warn Fortinet FortiOS vulnerabilities are being actively exploited

• Hackers Targeting professionals With ‘more_eggs’ Malware via LinkedIn Job Offers

• Hackers From China Target Vietnamese Military and Government

• Smart IAM: The Key to Seamless Sign-Ons

• Experts found critical flaws in Rockwell FactoryTalk AssetCentre

• Experts discovered a privilege escalation issue in popular Umbraco CMS

• WhatsApp Testing Ability to Transfer Chats Between iOS and Android

• What is operations-centric security?

• Application security testing is not just buzzwords

• 533 Million Facebook Users’ Personal Data Leaked Online

• Dutch company booking.com fined €558,000 for serious data breach

• Microsoft collaborates with Argus to bolster cyber security in connected cars

• Third-party security breach compromises data of Singapore job-matching service

• BCPS hit by Conti Ransomware Gang, Hackers Demanded $40 Million Ransom

• Race to Cloud Continues Despite Security Concerns

• Fileless Malware, Endpoint Attacks on the Rise

• Review: Group-IB Threat Hunting Framework

• Zero Trust creator talks about implementation, misconceptions, strategy

• 10 Best Laptop for Adobe Creative Cloud 2021 – Review and Buyer’s Guide

• 533 MILLION Facebook Users Personal Data Leaked That Includes Mark Zuckerberg’s Cell Phone Number

• 58% of IT and security pros concerned about security in the cloud

• MindAPI makes API security research and testing easier

• Industrial IoT Needs to Catch Up to Consumer IoT

• 3 Best Practices for Building Secure Container Images

• ISC Stormcast For Tuesday, April 6th, 2021 https://isc.sans.edu/podcastdetail.html?id=7444, (Tue, Apr 6th)

• The LPWAN market to reach $109.76 billion by 2025

• 99% of security pros concerned about their IoT and IIoT security

• Silicon Valley Revs Up for a ‘Hot Startup’ Summer

• Encryption Has Never Been More Essential—or Threatened

• After a decade of failure, LG officially quits the smartphone market

• 2021 Microsoft Build conference dates confirmed, May 25-27

• ‘Anomalous surge in DNS queries’ knocked Microsoft’s cloud off the web last week

• Upcoming Apple TV Could Support 120Hz Refresh Rate According to tvOS 14.5 Beta Code

• 553,000,000 Reasons Not to Let Facebook Make Decisions About Your Privacy

• Victory for Fair Use: The Supreme Court Reverses the Federal Circuit in Oracle v. Google

• Getting to Know DevSecOps

• What is Third-Party Risk?

• China-Linked ‘Cycldek’ Hackers Target Vietnamese Government, Military

• LinkedIn Phishing Ramps Up With More-Targeted Attacks

• Fake LinkedIn job offers scam spreading More_eggs backdoor

• Army eyes CAC-less physical security

• Stopping ransomware in its tracks

• APT threat exploits Fortinet OS flaws, CISA, FBI warn

• Spy Operations Target Vietnam with Sophisticated RAT

• 533M Facebook Accounts Leaked Online: Check if You Are Exposed

• Ransom Gangs Emailing Victim Customers for Leverage

• Report: UK Government May Force Facebook To Provide Backdoor Access To Private Messages

• Bitdefender 2020 Consumer Threat Landscape Report – Attackers Increasingly Target the Human Layer

• Kaspersky Uncovers New APAC Cyberespionage Campaign

• First Circuit Upholds First Amendment Right to Secretly Audio Record the Police

• Facebook says leak of 533m accounts is old news. But my date of birth, name, etc haven’t changed in years, Zuck

• IT Security News Daily Summary 2021-04-05

• China Smashed World’s Largest Game Cheating Ring – Police Arrested 10, Seized Assets Worth $46 Million

• Data Of 533 Million Facebook Users Leaked On Dark Web For Free

• Google wins decade-old software case against Oracle

• Space Force satellite communications contract gets nod for CMMC

• A renewed push for secure modernization

• Data from 553 Million Facebook Accounts Leaked Online

• Apple Reminds Developers About Upcoming App Tracking Transparency Enforcement in iOS 14.5

• Apple Mail Zero-Click Security Vulnerability Allows Email Snooping

• LinkedIn Spear-Phishing Campaign Targets Job Hunters

• Most applications today are deployed with vulnerabilities, and many are never patched

• Vulnerabilities are high in new applications, expert says

• Can a new DHS cybersecurity strategy help the private sector?

• Lawfare Live: The Continuing Threat of White Extremism

• Hong Kong’s Election Overhaul in Context

• Has Kazakhstan Failed Xinjiang’s Ethnic Kazakhs?

• BrandPost: Four Essential SASE Security Must-haves

• How marketing principles can be used to enhance cybersecurity training

• CISA: APTs exploiting Fortinet FortiOS vulnerabilities

• Pastor Charged with Sharing CSAM

• Cyral Announces On-Call Access Management Trial at Oktane21

• Streamlining Third-Party Risk Management

• Facebook Doesn’t Want to Give Apple Requested Documents in Epic v. Apple Fight

• Microsoft Defender for Endpoint now supports Windows 10 on Arm devices

• Attackers Utilize GitHub’s CI/CD Actions Features

• Ransomware Attacks on Industrial Control Systems Hit 33.4% in H2 2020

• A Malware Incident is Preventing Emissions Checks in Eight US States

• BazarCall Malware Targets Windows Systems While Mimicking Call Centers

• How To Defend the Extended Network Against Web Risks

• Remote work increases demand for zero-trust security

• Data of Half a Billion Facebook Users Leaked

• “Engineering Oversight” Costs ForceDAO $367k

• Ransomware Defense: Three Implementations Every Security Team Needs

• Centrify Brings Privileged Identity Leadership in Support of First-Ever ‘Identity Management Day’ April 13, 2021

• Code42 Expedites Insider Risk Response Using Automated Slack Workflows

• Jumio Collaborates With Microsoft to Deliver on Its Vision of Decentralized Digital Identity

• Apple Fiddles While App Store Burns: $1M Bitcoin Scam FAIL

• Microsoft Pits Surface Pro 7 Against iPad Pro, Says Surface is ‘Still the Better Choice’

• More Money, Less Problems: XDR Investment Can Protect the Financial Services Industry

• CISA, FBI Warn of Attacks Targeting Fortinet FortiOS

• Hackers Exploit Windows BITS Feature To Launch Malware Attack

• How to Simplify and Secure On-Call Access Management

• Streamlining Third Party Risk Management

• A week in security (March 29 – April 4)

• Some newly found details about Chinese Hacking Group APT41

• Hackers exploiting critical vulnerabilities in Fortinet VPN – FBI-CISA

• 15 Cybersecurity Pitfalls and Fixes for SMBs

• University of California Victim of Nationwide Hack Attack

• VMware Patches Critical Flaw in Carbon Black Cloud Workload

• Vulnerability Summary for the Week of March 29, 2021

• The Mission of Supporting Healthcare Providers Continues…

• Active Content: What It Is & How It Becomes Malicious

• 2,5M+ users can check whether their data were exposed in Facebook data leak

• The Cesspool Of The Internet Is To Be Found In A Village In North Holland

• Review: Capra Leather’s AirPods Max Case is a Premium Alternative to the Apple Smart Case

• Expert Insight: Arup’s Data Breach

• Ransomware Is Quickly Becoming The Most Common Form Of Harmful “Ware” Attacks Levied By Threat Actors.

• Cisco Goes Passwordless

• Cisco Goes Passwordlesspatient PHIInadvertently Added To GitHub Artic Code Vault – Expert Perspective

• Expert Reaction On Broward District Attacker Demanded $40Mil Ransom

• GitHub Infrastructure Used to Mine Cryptocurrency

• Brown University Was Recently Hit by A Cyberattack

• Asset Management System Frequently Asked Questions and More

• Asteelflash Hit by REvil Ransomware Attack

• Protect your business from email phishing with multi-factor authentication

• XSS Vulnerability In Ivory Search WordPress Plugin Risked Over 60K Sites

• Italian Menswear Brand Boggi Milano Suffered Ransomware Attack

• HTTPX – A Tool to Fingerprint a Web Server

• Operationalize your AI workloads at the edge with NetApp and Lenovo for inferencing

• 8 Steps For Securing Your Linux Server | Avast

• cyber hijacking

• Linux 101: The different types of sudo and su

• US Lawmakers Press Online Ad Auctioneers Over User Data

• North Korean-Backed Group Sets Up Fake Security Company, Google Says

• Child Tweets Gibberish from US Nuclear Agency Account

• 7 Ways to Reduce Cyber Threats From Remote Workers

• How the Work-From-Home Shift Impacts SaaS Security

• Certifications, Audits and Compliance Made Easy

• Technology Could Make Fighting COVID Less Restrictive But Privacy Will Take A Hit

• Facebook Data For Over 500M Users Reportedly Leaks Online

• Ubiquiti Accused of Covering Up a ‘Catastrophic’ Data Breach

• Rust Programming Language Raises Privacy Concerns

• How Deliveroo Scared Customers into Believing They Had Been Scammed

• Data Breach at Facebook Leaks Information of 533 Million Users

• Molson Coors “Cyberattack Incident” Could Cost Company $140 Million

• 33.4% of ICS computers hit by a cyber attack in H2 2020

• Facebook Pay Introduces Personalized QR Codes for Person-to-Person Payments

• What Is Enable DEP in Windows?

• Broward County Public Schools Hit with $40 Million Ransom by Conti Ransomware Gang

• APT Groups Are Targeting Fortinet FortiOS Servers, FBI and CISA Warn

• 10 Best Laptops for Adobe Creative Cloud 2021 – Review and Buyer’s Guide

• Growth Strategies for China Must Prioritize WeChat Security

Generated on 2021-04-11 23:58:21.087395