IT Security News Weekly Summary – Week 16

• IT Security News Daily Summary 2022-04-24

• Sensitive Data: Securing Your Most Important Asset

• Spain Vows to be Transparent in Probe of Pegasus Spyware Use

• New iPhone Zero-Click Bug Exploited In Pegasus Attacks Against Catalans

• Watch Out For This Fake Windows 11 Upgrade Lure

• AWS, and Alibaba Cloud was Attacked by Crypto Miners

• Docker Servers Targeted by LemonDuck Cryptomining Campaign

• How Emerging Technology Is Breaking Arms Control

• The Metaverse Is Coming

• Atlassian addresses a critical Jira authentication bypass flaw

• Cybersecurity and Other Top Risk Factors in 2022

• The Security Vulnerabilities Facing Remote Workforces

• Since declaring cyber war on Russia Anonymous leaked 5.8 TB of Russian data

• Phishing Attacks grew by 29% in 2021 overall. Smishing is on the rise

• Apr 17 – Apr 23 Ukraine – Russia the silent cyber conflict

• Security Affairs newsletter Round 362 by Pierluigi Paganini

• Week in review: Outdated open source, the role of the lawyer in cybersecurity

• How Do You Become an Expert in Mergers and Acquisitions

• Most Important Web Application Pentesting Tools & Resources – 2022

• Emotet Malware: Shut Down Last Year, Now Showing a Strong Resurgence

• We Stand with All of You

• CoreStack partners with Zeblok Computational to enable secure deployment of AI for multiple industries

• PTC and ITC Infotech expand partnership to accelerate customer digital transformation initiatives

• IT Security News Daily Summary 2022-04-23

• [Video] Exploiting Windows RPC – CVE-2022-26809 Explained | Patch Analysis

• T-Mobile confirms Lapsus$ had access its systems

• Dangerous malware is up 86%: Here’s how AI can help

• Are you using Java 15/16/17 or 18 in production? Patch them now!

• To Reliably Govern Multi-Cloud Workloads, IT Leaders Demand Better Security Insights

• FBI Issues Warning as BlackCat Ransomware Targets More Than 60 Organizations Worldwide

• What Does Volunteering at (ISC)² Mean? Hear From Volunteer Lisa Vaughan

• Critical Chipset Flaws Enable Remote Spying on Millions of Android Devices

• Pwn2Own – Hackers earn $400K for 26 zero-day Exploits

• Veracode Named a Leader in the 2022 Gartner® Magic Quadrant™ for Application Security Testing for Ninth Consecutive Time

• BreachBits Announces BreachRisk, The New Standard in Cyber Risk Scoring

• SOC Prime Appoints Industry Veteran To Grow Worldwide Sales

• Gartner Announces Gartner Security & Risk Management Summit 2022

• What Do You Mean My Email Isn’t Free?

• Cyberattack Causes Chaos in Costa Rica Government Systems

• Phishing attacks using the topic “Azovstal” targets entities in Ukraine

• Now Mandiant says 2021 was a record year for exploited zero-day security bugs

• T-Mobile Admits Lapsus$ Hackers Gained Access to its Internal Tools and Source Code

• Atlassian Drops Patches for Critical Jira Authentication Bypass Vulnerability

• Cybersecurity threats to critical infrastructure – Week in security with Tony Anscombe

• D2iQ Kubernetes Platform enhancements accelerate mission-critical production deployments

• Amazon Aurora Serverless v2 removes the complexity of managing database capacity

• Neustar Security Service integrates with Terraform to help customers manage DNS strategy

• How to protect AI from cyberattacks – start with the data

• CertiK raises $60 million to address the growing demand for Web3 security

• Skyflow collaborates with Plaid to enhance fintech ecosystem security

• Many Medical Device Makers Skimp on Security Practices

• Conti ransomware claims responsibility for the attack on Costa Rica

• Top 8 Cyber Insurance Companies for 2022

• Cryptomining Overview for DevOps

• Cybersecurity for a More Sustainable Future

• Michigan, National Park Service to test mobility tech in local national parks

• Get ready for the metaverse

• Defense against the dark arts: CISOs prep for critical infrastructure attacks

• IT Security News Daily Summary 2022-04-22

• Unethical vulnerability disclosures ‘a disgrace to our field’

• An introduction to binary diffing for ethical hackers

• US DOJ probes Google’s $5.4b Mandiant acquisition

• Sophos Buys Alert-Monitoring Automation Vendor

• 5 reasons the U.S. could lose its quantum leadership

• Report: Facebook Posts Casting Doubt On Alleged War Crimes Shared 208,000 times In One Week

• FBI Warns Ransomware Attacks on Agriculture Co-ops Could Upend Food Supply Chain

• Neustar Security Services’ UltraDNS Integrates Terraform for Streamlined, Automated DNS Management

• Best backup software (2022)

• LemonDuck Cryptomining Botnet Hunting for Misconfigured Docker APIs

• GSA plans to publish zero trust playbooks

• AI is already learning from Russia’s war in Ukraine, DOD says

• Early Discovery of Pipedream Malware a Success Story for Industrial Security

• 12 Women in Cybersecurity Who Are Reshaping the Industry

• Report: Orgs spend 3,850 hours annually cleaning up email-based cyberattacks

• GSA plans to publish a zero trust playbooks

• Russian cyberattack could capitalize on election doubts

• China’s NFT Plans Are a Recipe for the Government’s Digital Control

• DISA is gearing up for the ‘technician of the future’

• FBI Releases IOCs Associated with BlackCat/ALPHV Ransomware

• Google Researchers: ‘Zero-Day’ Hacks Hit Record in 2021

• Cyware is Changing the Cybersecurity Landscape

• The push toward climate-friendly grid security and resilience

• Strike Security Scores Funding for ‘Perpetual Pentesting’ for SMBs

• FBI Releases IOCs Associated with BlackCat/ALPHV Ransomware

• ZingoStealer – A Potent Infostealer, CryptoStealer, And Malware Dropper

• Multi-Cluster Kubernetes Management and Access

• Wawa Sues Mastercard Over Data Breach Penalties

• Security software companies are going to be steady if we go into a recession, says ACME’s Hany Nada

• Hive ransomware affiliate zeros in on Exchange servers

• SuperCare Health Faces Lawsuits Over Data Breach

• YES Launches Free Cybersecurity Training Program

• CyberUSA, and Superus Careers Launch Cyber Career Exchange Platform

• PerimeterX Code Defender Extends Capability To Stop Supply Chain Attacks

• Forescout Enhances Continuum Platform With New OT Capabilities

• Contrast Security Introduces Cloud-Native Automation

• Bitdefender Enhances Premium VPN Service With New Privacy Protection Technologies

• Microsoft announces new collaboration with Red Button for attack simulation testing

• In 2021, the UK Government was Plagued by Hundreds of Spam Emails

• Nigeria blocks 73 million mobile numbers for security reasons

• When Attacks Surge, Turn to Data to Strengthen Detection and Response

• QNAP warns of new bugs in its Network Attached Storage devices

• Bolstering Security Standards: How A Consolidated IT Infrastructure Can Arm Businesses Against Cyber-Criminals

• Government Cloud On-Ramping

• Cyber Insurance and the Changing Global Risk Environment

• Proactive 5G Cybersecurity Strategy Enables Sustainable Growth

• New FedRAMP Authorization Secures IoT Devices for Federal Agencies

• MS Exchange Servers Found Deploying Hive Ransomware

• 5 Cybersecurity Trends and Mitigation Strategies for CISOs

• Musk In Talks With Thoma Bravo Over Joint Twitter Bid – Report

• Creating Cyberattack Resilience in Modern Education Environments

• A stored XSS flaw in RainLoop allows stealing users’ emails

• Water Wars: AUKUS Goes Hypersonic

• Apple To Scan Children Messages In UK For Nudity

• XSS Prevention Cheatsheet

• Motorola Launches Cyber Threat Information Sharing Hub for Public Safety

• How Companies Can Protect the Country from Acts Of Cyberwarfare

• Is Microsoft really going to cut off security updates for my “unsupported” Windows 11 PC? [Ask ZDNet]

• Ransomware attacks are hitting universities hard, and they are feeling the pressure

• Leaked Chats Show LAPSUS$ Stole T-Mobile Source Code

• Several Critical Vulnerabilities Affect SmartPPT, SmartICS Industrial Products

• Java Cryptography Implementation Mistake Allows Digital-Signature Forgeries

• International Intelligence Agency Warns Of Russian Cyber Attacks

• Android security: Flaw in an audio codec left two-thirds of smartphones at risk of snooping, say researchers

• Zero-Trust For All: A Practical Guide

• Researcher Releases PoC for Recent Java Cryptographic Vulnerability

• QNAP firmware updates fix Apache HTTP vulnerabilities in its NAS

• Toshiba Says It Will Seek Buyout Offers

• GitLab vs GitHub: Which is right for you?

• Skeletons in the Closet: Security 101 Takes a Backseat to 0-days

• Audio Codec Made by Apple Introduced Serious Vulnerabilities in Millions of Android Phones

• VMware’s Head of Cybersecurity Strategy Discusses Modern Bank Heists

• Unpatched Vulnerability Allows Hackers to Steal Emails of RainLoop Users

• Infosecurity Europe Announces Live Training Courses for this Year’s Event

• A $3 Billion Silk Road Seizure Will Erase Ross Ulbricht’s Debt

• 7 Ransomware Protection Tips to Help You Secure Data in 2022

• LemonDuck botnet plunders Docker cloud instances in cryptocurrency crime wave

• The new Elastic CEO puts cloud front and center

• North Korea funding nuclear program with cyber campaigns

• FBI warns US farmers of ransomware attacks

• Issue in digital COVID-19 test could have allowed individuals to falsify results

• Microsoft Defender’s protective capabilities suffer offline

• FBI Warns US Farmers of Ransomware Surge

• State Actors Drive Record Number of Zero-Day Exploits in 2021

• Watch Out! Cryptocurrency Miners Targeting Dockers, AWS and Alibaba Cloud

• Remote Work Makes it More Important Than Ever to Trust Zero Trust

• Building the CASE for the Vehicle Security Operations Center

• Crypto-Mining Botnet Goes After Misconfigured Docker APIs

• Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure

• Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure

• Cisco Releases Security Updates for Multiple Products

• Drupal Releases Security Updates

• Hive Ransomware Affiliate Attacking Microsoft Exchange Servers vulnerable to ProxyShell Flaw

• QNAP Advises Users to Update NAS Firmware to Patch Apache HTTP Vulnerabilities

• Pwn2Own Miami hacking contest awarded $400,000 for 26 unique ICS exploits

• New infosec products of the week: April 22, 2022

• Quantum Cybersecurity: Addressing the Boogeyman in the Room

• JekyllBot:5 Threatens Hospital Robots | Avast

• Weekly Update 292

• Lemon_Duck cryptomining botnet targets Docker servers

• 4 Tips To Boost Your Security Posture

• REvil resurrected? Ransomware crew appears to be back. Keyword: Appears

• FBI issues ransomware alert to the agriculture sector in the United States

• Netflix bans password sharing to cut misuse

• Cisco Releases Security Patches for TelePresence, RoomOS and Umbrella VA

• The Great Resignation meets the Great Exfiltration: How to securely offboard security personnel

• How to improve the efficiency of enterprise backup

• IvySys Technologies Awarded the DoD’s Joint Artificial Intelligence Center’s (JAIC) Data Readiness for Artificial Intelligence (DRAID) Basic Ordering Agreement

• Ciphertex Data Security® Shows Film and TV Industry How To Protect Against Data Piracy At NAB Show In Las Vegas

• Code42 Named a Representative Vendor in 2022 Gartner® Market Guide for Insider Risk Management Solutions Report

• SECURE London stokes debate on the future of the cybersecurity workforce

• Earth Day 2022: Why the Financial Services Sector Should Invest in ESG Initiatives Now

• New threat groups and malware families emerging

• Backup is key for cyber recovery

• PCI DSS 4.0: Meeting the evolving security needs of the payments industry

• Why Broadcom Software is Optimistic About Global Standards in Cyber Security

• What is a VPN and what does data logging by a VPN means?

• Critical infrastructure: Under cyberattack for longer than you might think

• Vicarius Nmap Scan Analysis helps security professionals identify high risk assets

• Marqeta RiskControl protects customers against fraudulent transactions

• ForgeRock Authenticator App reduces the number of steps users must take to authenticate

• Avast USB Protection safeguards company data from unauthorized removable storage devices

• AttackIQ and Vectra join forces to help customers optimize their security control effectiveness

• Teradici and HP announce a solution for secure access to digital workspaces

• Bonifii and Entersekt provide context-aware biometric authentication technology for credit unions

• Zero-Day Exploit Use Exploded in 2021

• Beyond Identity announces integrations with leading SSO providers

• Arcion partners with Databricks to offer validated data replication for users

• Datadobi and Climb Channel Solutions expand collaboration across EMEA

• GSA seeks cyber expert for TMF

• Fortanix announces three new executive hires

• DXC Technology appoints Carrie W. Teffner to Board of Directors

• Sanjay Poonen joins Tetrate Board of Advisors

• Riverbed appoints Tom Pickett as CFO

• AlertEnterprise hires Jamshed Patel as VP of Value Engineering

• What Steps Do I Take to Shift Left in Security?

• Report: Karakurt attacks linked to Conti and Diavol ransomware groups

• Maine modernizes election administration with centralized voter registration

• Cryptocurrency theft leaves Beanstalk Farms’ future in doubt

• Devo Acquires Threat Hunting Company Kognos

• How to Stop New Employees from Becoming Insider Threats

• Critical bug in decoder used by popular chipsets exposes 2/3 of Android devices to hack

• Cybereason launches new automated incident response solution

• DIU sets up shop in Chicago

• Catalan Chief Accuses Spain’s Intelligence Agency of Hacking

• Comment: Linkedin Becomes The Most Impersonated Brand For Phishing Attacks

• Cybercriminals Are Shifting Their Gaze To Kubernetes

• USB-C and Thunderbolt: Understanding Ports and Cables for Macs and iPads

• How to Install macOS Monterey on Unsupported Macs, for Security Improvements

• Install macOS Monterey on a 15-Year Old Mac – Intego Mac Podcast Episode 236

• TenSec 2019

• Exploiting Wi-Fi Stack on Tesla Model S

• Tencent Keen Security Lab joins GENIVI Alliance

• Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars

• Tencent Security Keen Lab: Experimental Security Assessment of Mercedes-Benz Cars

• Hackers can infect >100 Lenovo models with unremovable malware. Are you patched?

• FBI warns sextortion of teenagers is on the rise

• What Is a Smurf Attack?

• Importance of Cybersecurity for Businesses

• Google Fixed The Third Chrome Zero-Day Bug In 2022

• Cross-Site Scripting (XSS) Vulnerability Found In PrivateBin

• US Warns Of Cyberattacks On Industrial Control System (ICS) Via Specialized APT Tools

• Firestick Upgrades: The Best Firestick Enhancement Tips and Apps for 2022

• Millions of Lenovo devices affected by BIOS vulnerability

• Critically Underrated: Studying the Data Distribution Service (DDS) Protocol

• Analyzing Attempts to Exploit the Spring4Shell Vulnerability CVE-2022-22965 to Deploy Cryptocurrency Miners

• Spring4Shell Vulnerability CVE-2022-22965 Exploited to Deploy Cryptocurrency Miners

• VirusTotal’s MISP modules get a fresh upgrade

• Tesla Asks Judge For Pause In California Racism Lawsuit

• NCSC Warns Of Russian Cyber Retaliation Against Critical Infrastructure

• OneWeb Signs Satellite Launch Deal With India

• Pixel Watch Render Suggests Fitbit Integration

• Musk Secures $46.5 Billion Funding For Twitter Takeover

• The Human Factor in Cybersecurity

• LAZARUS APT Using TraderTraitor Malware to Target Blockchain Orgs, Users

• How to Choose the Right Web Development Firm for Your Startup?

• Beware of Fake Windows 11 Update Delivering Malware

• Why Uploading Your Personal Data on Social Media is a Bad Idea

• A New zero-click iMessage Exploit Used to Install NSO Group Spyware on iPhones

• A New Version of SolarMarker Malware Steals Passwords and Credit Card Data

• Lazarus Group Targeting Organizations in the Cryptocurrency and Blockchain

• 2022-04-19 – Files for an ISC diary (Qakbot with DarkVNC)

• 2022-04-19 – Infection from Brazil malspam

• How to Analyze Malicious PDF Files

• To truly improve CX, the government should define its own metrics

• Tailoring services delivery to life events, not org charts

• Why You Need to Tune EDR to Secure Your Environment

• Researchers Discover DDoS Botnet, Enemybot

• Attacker Accessed Dozens Of Repositories After OAuth Token Theft

• FBI Warning On Ransomware Attacks Against The Agriculture Sector

• Ponemon Research – Businesses To Invest $172b On Cybersecurity In 2022

• Pegasus spyware found on UK government office phone

• Scalable JWT Token Revokation in Spring Boot

• $625 Million Stolen in Latest Crypto Attack: 5 Tips on How to Use Digital Currency Safely

• PCI DSS Update | Avast

• Tech Support Scams Targeting Seniors | Avast

• War and Cyberwar | Avast

• USB Protection Launch | Avast

• WLAN Authentication and Privacy Infrastructure (WAPI)

• security information management (SIM)

• 7 ways to avoid a cloud misconfiguration attack

• Social Networks Most Likely to be Imitated by Criminal Groups, with LinkedIn Now Accounting for Half of all Phishing Attempts Worldwide

• Largest Mobile Chipset Manufacturers used Vulnerable Audio Decoder, 2/3 of Android users’ Privacy around the World were at Risk

• Customer experience and data privacy need to go hand-in-hand

• AlphaMountain.ai raises $2.7M to launch AI-driven threat intelligence feeds

• Report: 88% increase in OT vulnerabilities last year

• Devo Technology acquires threat hunting provider to build next-gen autonomous SOC

• Dassana launches index-free cloud log lake

• TMF announces first-ever investment in VA to support transition to new sign-in service

• CISA seeks comment on visibility effort being piloted with cloud service providers

• CISA expands Joint Cyber Defense Collaborative

• White House looks to focus service delivery around ‘life events’

• CMMC interim rule could land in May

• Report: Phishing attacks on government up 110%

• How one state measures post-pandemic recovery

• Rural America gets help tapping into federal funding

• Why the infrastructure bill alone can’t solve digital connectivity challenges

• Survey: No clear winner in cloud wars

• Hive hackers are exploiting Microsoft Exchange Servers in ransomware spree

• Phishing emails targeting LinkedIn accounts are on the rise. Here’s what to watch out for

• Beanstalk DeFi project robbed of $182 million in flash loan attack

• FBI warning: Ransomware gangs are going after this lucrative but unexpected target

• It’s past time you started using a password manager (whether you like it or not)

• When “secure” isn’t secure at all: High‑impact UEFI vulnerabilities discovered in Lenovo consumer laptops

• How can we support young people in harnessing technology for progress?

• Is your Lenovo laptop vulnerable to cyberattack?

• What Makes Telecommunication Companies Such a Fertile Ground for Attack?

• Top Tips for Moving from Compliance to Cybersecurity Excellence

• The Four Stages to a Successful Vulnerability Management Program

• CIS Control 16 Application Software Security

• REvil reborn? Notorious gang’s dark web site redirects to new ransomware operation

• Protect Your Executives’ Cybersecurity Amidst Global Cyberwar

• ‘CatalanGate’ Spyware Infections Tied to NSO Group

• Rethinking Cyber-Defense Strategies in the Public-Cloud Age

• Google: 2021 was a Banner Year for Exploited 0-Day Bugs

• Most Email Security Approaches Fail to Block Common Threats

• Access Bypass, Data Overwrite Vulnerabilities Patched in Drupal

• Today’s Network Is Different, Not Dead – Here’s How You Secure It

• ICS Exploits Earn Hackers $400,000 at Pwn2Own Miami 2022

• Meta Offers Rewards for Flaws Allowing Attackers to Bypass Integrity Checks

• Google, Mandiant Share Data on Record Pace of Zero-Day Discoveries

• Traditional IT vs. critical infrastructure cyber-risk assessments

• U.S. warns of ‘increased’ threats from Russian hacking groups

• Comparing network segmentation vs. microsegmentation

• 7 best practices for Web3 security risk mitigation

• FBI warns of ‘timed’ ransomware attacks on agriculture sector

• Beanstalk cryptocurrency heist: scammer votes himself all the money

• Critical cryptographic Java security blunder patched – update now!

• S3 Ep79: Chrome hole, a bad place for a cybersecurity holiday, and crypto-dodginess [Podcast]

• Google: Record Year for Zero Days in 2021

• Two-Thirds of Global Banks Report Surge in Destructive Attacks

• North Korea Funding Nuclear Program with Cyber Activity

• FBI Seeks Info on BlackCat

• Bob’s Red Mill Reports Data Breach

• Report: Facebook Struggles To Detect Bad Actors When They’re Real People And Not Bots

• Lawmakers Slam Facebook For A “Lack Of Progress” Over Spanish-Language Disinformation

• 3 Ways We Can Improve Cybersecurity

• Alert Logic Releases MDR Incident Response Capability for Addressing a Breach

• Cybereason Launches Digital Forensics Incident Response

• UntitledNew Zscaler Research Shows Over 400% Increase in Phishing Attacks With Retail and Wholesale Industries at Greatest Risk

• Exploring Biometrics and Trust at the Corporate Level

• LNK (Ab)use

• The Fake Federal Agents Case Baffling US Intelligence Experts

• It Was a Good Month for Fighting Cybercrime—Don’t Get Comfortable

• Netflix Can Cut Off Moochers Without a Password-Sharing Crackdown

• Hackers Are Getting Caught Exploiting New Bugs More Than Ever

• Oracle Releases April 2022 Critical Patch Update

• Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure

• Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure

• Cisco Releases Security Updates for Multiple Products

• Drupal Releases Security Updates

• New Incident Report Reveals How Hive Ransomware Targets Organizations

• Critical Chipset Bugs Open Millions of Android Devices to Remote Spying

• Unpatched Bug in RainLoop Webmail Could Give Hackers Access to all Emails

• Amazon’s Hotpatch for Log4j Flaw Found Vulnerable to Privilege Escalation Bug

• Hackers Sneak ‘More_Eggs’ Malware Into Resumes Sent to Corporate Hiring Managers

• Cisco Secure Endpoint Shines in the 2022 MITRE® Engenuity ATT&CK Evaluation

• Security Resilience in EMEA

• Criminals provide Ginzo stealer for free, now it is gaining traction

• Russian Gamaredon APT continues to target Ukraine

• US, Australia, Canada, New Zealand, and the UK warn of Russia-linked threat actors’ attacks

• CVE-2022-20685 flaw in the Modbus preprocessor of the Snort makes it unusable

• Static SSH host key in Cisco Umbrella allows stealing admin credentials

• Cybercriminals Deliver IRS Tax Scams & Phishing Campaigns By Mimicking Government Vendors

• Undetectable Backdoors in Machine-Learning Models

• Clever Cryptocurrency Theft

• Long Article on NSO Group

• The Role of Civil Society and the United Front in China’s Evacuation From Ukraine

• Live from KB4-Con: Security Culture in the Spotlight

• Access Bypass, Data Overwrite Vulnerabilities Patched in Drupal

• Today’s Network Is Different, Not Dead – Here’s How You Secure It

• ICS Exploits Earn Hackers $400,000 at Pwn2Own Miami 2022

• Meta Offers Rewards for Flaws Allowing Attackers to Bypass Integrity Checks

• Google, Mandiant Share Data on Record Pace of Zero-Day Discoveries

• Traditional IT vs. critical infrastructure cyber-risk assessments

• U.S. warns of ‘increased’ threats from Russian hacking groups

• Comparing network segmentation vs. microsegmentation

• 7 best practices for Web3 security risk mitigation

• FBI warns of ‘timed’ ransomware attacks on agriculture sector

• Beanstalk cryptocurrency heist: scammer votes himself all the money

• Critical cryptographic Java security blunder patched – update now!

• S3 Ep79: Chrome hole, a bad place for a cybersecurity holiday, and crypto-dodginess [Podcast]

• Google: Record Year for Zero Days in 2021

• Two-Thirds of Global Banks Report Surge in Destructive Attacks

• North Korea Funding Nuclear Program with Cyber Activity

• FBI Seeks Info on BlackCat

• Bob’s Red Mill Reports Data Breach

• Report: Facebook Struggles To Detect Bad Actors When They’re Real People And Not Bots

• Lawmakers Slam Facebook For A “Lack Of Progress” Over Spanish-Language Disinformation

• Okta Wraps Up Lapsus$ Investigation, Pledges More Third-Party Controls

• LinkedIn Brand Now the Most Abused in Phishing Attempts

• Anti-Fraud Partnership Brings Confidential Computing to Financial Services

• 3 Ways We Can Improve Cybersecurity

• Alert Logic Releases MDR Incident Response Capability for Addressing a Breach

• LNK (Ab)use

• The Fake Federal Agents Case Baffling US Intelligence Experts

• It Was a Good Month for Fighting Cybercrime—Don’t Get Comfortable

• Netflix Can Cut Off Moochers Without a Password-Sharing Crackdown

• Hackers Are Getting Caught Exploiting New Bugs More Than Ever

• Oracle Releases April 2022 Critical Patch Update

• Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure

• Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure

• Cisco Releases Security Updates for Multiple Products

• Drupal Releases Security Updates

• New Incident Report Reveals How Hive Ransomware Targets Organizations

• Critical Chipset Bugs Open Millions of Android Devices to Remote Spying

• Unpatched Bug in RainLoop Webmail Could Give Hackers Access to all Emails

• Amazon’s Hotpatch for Log4j Flaw Found Vulnerable to Privilege Escalation Bug

• Hackers Sneak ‘More_Eggs’ Malware Into Resumes Sent to Corporate Hiring Managers

• Cisco Secure Endpoint Shines in the 2022 MITRE® Engenuity ATT&CK Evaluation

• Security Resilience in EMEA

• Criminals provide Ginzo stealer for free, now it is gaining traction

• Russian Gamaredon APT continues to target Ukraine

• US, Australia, Canada, New Zealand, and the UK warn of Russia-linked threat actors’ attacks

• CVE-2022-20685 flaw in the Modbus preprocessor of the Snort makes it unusable

• Static SSH host key in Cisco Umbrella allows stealing admin credentials

• Cybercriminals Deliver IRS Tax Scams & Phishing Campaigns By Mimicking Government Vendors

• Undetectable Backdoors in Machine-Learning Models

• Clever Cryptocurrency Theft

• Long Article on NSO Group

• The Role of Civil Society and the United Front in China’s Evacuation From Ukraine

• Beanstalk DeFi Project Robbed Of $182 Million In Flash Loan Attack

• Most Email Security Approaches Fail To Block Common Threats

• Emotet Reestablishes Itself At The Top Of The Malware World

• AWS’s Log4j Patches Blew Holes In Its Own Security

• Major Cryptography Blunder In Java Enables Psychic Paper Forgeries

• Former Top Chinese Communist Party Official Linked to Jack Ma’s Ant Group Indicted on Bribery Charges

• Moral Equivalence and Ukraine

• What’s the Status of Ukraine’s Case Against Russia at the ICJ?

• The Chatter Podcast: Spy Satire with Alex Finley

• Why Finlandization Is a Terrible Model For Ukraine

• The New Cyberthreat To Healthcare: Killware

• Joint Cybersecurity Advisory Warns Of Blockchain Hackers Targeting Developers And DevOps teams

• Expert Insight On Funky Pigeon Cyberattack

• Digital Trust Security Expert On Linkedin’s Fight Against Phishing

• MetaMask Crypto Wallet Seeds Exposed In iCloud Backups, $650K Theft Shows

• 4 Bad Bots Likely to Cause Problems for the Remainder of 2022

• Reading the API Security Tea Leaves for 2022

• NINETEEN GROUP APPOINTS QUEEN’S AWARD WINNING ESKENZI PR TO PROMOTE UK’S NEWEST CYBERSECURITY EVENT

• UK government staff hit with billions of malicious emails in 2021

• Synopsys’ OSSRA report reveals challenges with managing open source risk in software supply chains

• Five-Eyes issues Russian cyberattack warning

• Live from KB4-Con: KnowBe4 CEO introduces HDR – Human Detection and Response

• Slow deployment is hampering fraud prevention. What gives?

• Vulnerabilities that kept security leaders busy in Q1 2022

• The state of open-source software supply chain security in 2022

• Ransomware in fintech: Cybercriminals adopt new means as theft gives way to sabotage

• Ubuntu 22.04 LTS released, delivers enterprise-grade security

• Emotet Botnet Grows in Size and Activity

• REvil’s TOR Sites Are Back With New Ransomware

• Authentication vs. Authorization: the Difference Explained

• Microsoft Exchange Servers Targeted by Hive Ransomware

• The US Agriculture Sector Targeted with Ransomware Attacks, the FBI Says

• Netflix stock plummets 37% as CEO says company plans ad-supported tier

• For mRNA, Covid Vaccines Are Just the Beginning

• It Was a Good Month for Fighting Cybercrime. Don’t Get Comfortable

• CISA, Australia, Canada, New Zealand, & UK Issue Joint Advisory on Russian Cyber Threats

• ThreatLocker raises $100 million to strengthen zero trust endpoint security for organizations

• Q1 2022 Cyber Attacks Statistics

• Scraping Public Websites (Still) Isn’t a Crime, Court of Appeals Declares

• Stop Forced Arbitration in Data Privacy Legislation

• 10 Best Gaming Laptops Under $700 2022 – High-Quality Resolution Laptops

• 10 Best Laptops Under $300 2022 – Top Budget-Friendly Laptops

• 10 Best MMO Mice for Gaming 2022 – Deals, Reviews & Trending Products

• 15 Best Gaming Mouse 2022 – Wired & Wireless

• How to Optimize WordPress Website Speed

• Okta co-founder Frederic Kerrest on cyber threats from Russia, Elon Musk’s Twitter bid

• ‘I think you’re going to see a lot of value and growth in services companies,’ says Cyderes CEO Robert Herjavec

• Businesses are rightly worried about Russian cyber attacks, Darktrace CEO says

• Bessemer Venture’s Robinson likes the cybersecurity sector

• Protecting Critical Infrastructure from Cyberattacks Essential if U.S. is to Remain a Superpower

• How To Verify Who Is Who in The Digital Space Without Compromising Privacy?

• The future of compliance and data governance is here: Introducing Microsoft Purview

• Discover the anatomy of an external cyberattack surface with new RiskIQ report

• Congratulations and New Swag Awards for the Top MSRC 2022 Q1 Security Researchers!

• US warns of APT groups that can “gain full system access” to some industrial control systems

• Oracle releases massive Critical Patch Update containing 520 security patches

• The fake Elon Musk Bitcoin giveaway marathon will NOT make you rich

• It’s legal to scrape public data—US appeals court

• Beware of fake Twitter philanthropists offering to put $750 into your Cash App account

• Oracle already wins ‘crypto bug of the year’ with Java digital signature bypass

• AWS’s Log4j patches blew holes in its own security

• Five Eyes nations fear wave of Russian attacks against critical infrastructure

• Emotet reestablishes itself at the top of the malware world

• YouTube terminates account for Hong Kong’s presumed next head of government

• Celebrating Service and Diversity – Nominate a Colleague Today!

• Why Are Ransomware Attacks Increasing and How Can We Prevent Them?

• Beware of iCloud Phishing Attacks, MetaMask Warns Apple Users

• PYSA Ransomware Group: Experts Share In-Depth Details

• Security Breach Impacting 2.5 Million Users Revealed by Mortgage Servicer

• 42M+ People’s Financial Data Compromised in UK

• Researchers Warn of Fake Windows 11 Upgrade Containing Info Stealing Malware

• How SD-WANs improve security

Generated on 2022-04-24 23:58:48.944218