IT Security News Weekly Summary – Week 18

• IT Security News Daily Summary 2022-05-08

• India’s ongoing outrage over Pegasus malware tells a bigger story about privacy law problems

• Conti ransomware claims to have hacked Peru MOF – Dirección General de Inteligencia (DIGIMIN)

• OpenSea Warns of Discord Channel Hack

• Russian Group Attack on Bulgarian Refugee Agency

• What is tokenization, what are the types of tokenization, and what are its benefits for eCommerce businesses?

• May 01 – May 07 Ukraine – Russia the silent cyber conflict

• New Ideas for Over-the-Horizon Counterterrorism in Afghanistan

• NIST published updated guidance for supply chain risks

• Misconfiguration Identified in Google Cloud Platform

• Google, Apple, and Microsoft step hand in hand into a passwordless future

• Google, Apple, and Microsoft walk hand-in-hand into a passwordless future

• Considering Replacing Your Endpoint Security Solution? 5 Questions Worth Asking

• US agricultural machinery manufacturer AGCO suffered a ransomware attack

• Google: Two Major Pixel Vulnerabilities Patched

• Anonymous Leaks 82 GB Police Data as Protest Against Australian Detention Centre

• Security Affairs newsletter Round 364 by Pierluigi Paganini

• Week in review: F5 BIG-IP flaw, critical bugs in Aruba and Avaya network switches, Patch Tuesday forecast

• US DoS offers a reward of up to $15M for info on Conti ransomware gang

• This New Raspberry Robin Worm Utilizes Windows Installer to Drop Malware

• Attackers Inject Fileless Malware Directly into Windows Event Logs

• CoreStack partners with Persistent Systems to help enterprises automate their cloud operations

• Salesforce hires William MacMillan as SVP, Security Product and Program Management

• Appgate achieves SOC 2 Type 2 certification

• Cisco releases Cloud Controls Framework to meet customer demand for security certifications

• Splunk names Katie Bianchi as CCO

• IT Security News Daily Summary 2022-05-07

• Post-Quantum Cryptography Set to Replace RSA, ECC

• Heroku Admits to Customer Database Hack after OAuth Token Theft

• SEEQC’s Statement in Support of President Biden’s Executive Order and National Security Memorandum on Quantum Computing

• Blackpoint Cyber Announces Launch of New Podcast, The Unfair Fight, Hosted by Founder and CEO Jon Murchison

• Appgate Achieves SOC 2 Type 2 Certification

• Stories from the SOC – Lateral movement using default accounts

• Cybersecurity reporting mandates could make us more vulnerable, not less

• The Colonial Pipeline ransomware attack a year on: 5 lessons for security teams

• Raspberry Robin spreads via removable USB devices

• FBI: Business Email Compromise is a $43 Billion Scam

• European Organizations Targeted by ‘Mustang Panda’ Hacking Group

• VHD Ransomware Linked to North Korea’s Cyber-Army Targets Financial Institutions

• Your Phone May Soon Replace Many of Your Passwords

• Will VPN Providers and the Indian Government Clash Over New Rules on User Data Collection?

• Data Brokers Track Abortion Clinic Visits for Anyone to Buy

• Malware campaign hides a shellcode into Windows event logs

• Apple Mail Now Blocks Email Tracking. Here’s What That Means

• US gov sanctions cryptocurrency mixer Blender also used by North Korea-linked Lazarus APT

• Shrinking the Cyber Skills Gap by Taking Advantage of Diversity, Unique Opportunities, and Automation

• Vulnerable Today, Hacked Tomorrow: How a Lack of OT Cybersecurity Affects Critical Infrastructure

• New Malware NetDooka Deployes Payload: Trend Micro Report

• False-flag cyberattacks a red line for nation-states, says Mandiant boss

• Google to Implement Passwordless Logins in Android and the Chrome Web Browser

• This New Fileless Malware Hides Shellcode in Windows Event Logs

• U.S. Sanctions Cryptocurrency Mixer Blender for Helping North Korea Launder Millions

• QNAP Releases Firmware Patches for 9 New Flaws Affecting NAS Devices

• SimSpace collaborates with ACSC to provide cyber range exercises for organizations

• Defending against APT attacks – Week in security with Tony Anscombe

• Exabeam partners with ZeroFox to improve cyber defense capabilities for customers

• Report: 36% of security pros have adopted hardware-assisted cybersecurity

• The 4 best travel VPNs of 2022

• KSOC announces executive advisory board to guide product and strategy developments

• CyberArk appoints Simon Mouyal as CMO

• SafeGraph’s Disingenuous Claims About Location Data Mask a Dangerous Industry

• NASA weaves a data and AI fabric for drone intelligence

• Post-Quantum Cryptography Set to Replace RSA, AES, ECC

• Weekly Update 294

• IT Security News Daily Summary 2022-05-06

• Do Macs Need Antivirus Software?

• How to Remove Personal Information From Data Broker Sites

• The Pentagon wants to prevent personnel data tracking, breaches

• NIST’s supply chain security guidance tells agencies to look to FedRAMP

• EV charging station map highlights infrastructure disparities

• Cryptocurrency mixer sanctioned over Lazarus Group ties

• How the thriving fraud industry within Facebook attacks independent media

• FBI: Business Email Compromise: The $43 Billion Scam

• Are You Playing A Role In Protecting Your Online Privacy?

• One year removed from the Colonial Pipeline attack, what have we learned?

• Scammer Infects His Own Machine with Spyware, Reveals True Identity

• What We’ve Learned in the 12 Months Since the Colonial Pipeline Attack

• Ikea Canada Breach Exposes 95K Customer Records

• Expert Advice On Colonial Pipeline Ransomware Attack Anniversary

• Cryptocurrency laundromat Blender shredded by US Treasury in sanctions first

• White House Moves to Shore Up US Post-Quantum Cryptography Posture

• QNAP fixes multiple flaws, including a QVR RCE vulnerability

• Today’s Headlines and Commentary

• USB-based Wormable Raspberry Robin Malware Targeting Windows Installer

• Every Google Chrome user should click this button now

• Microsoft Defender vs Carbon Black: EDR software comparison

• Expert Advise On Colonial Pipeline Ransomware Attack Anniversary

• Hackers exploit vulnerable Adminer for AWS database thefts

• AT&T Expands Access to Advanced Secure Edge and Remote Workforce Capabilities

• The Declaration for the Future of the Internet Is for Wavering Democracies, Not China and Russia

• Britain’s National Health Service Hit by Massive Phishing Campaign

• Crypto Scammers Exploit: Elon Musk Speaks on Cryptocurrency

• As data privacy laws expand, businesses must employ protection methods

• Austin becomes the first Texas city to experiment with ‘guaranteed income’

• Zero Trust VPN Company Tailscale Raises $100 Million

• You didn’t leave enough space between ROSE and AND, and AND and CROWN

• DDoS Attacks by Hacktivists Disrupted Russian Alcohol Supply Chain

• DOD-VA health record modernization not hitting interoperability targets, watchdogs say

• 6 in 10 Americans would quit current job for remote position

• Senate Dems seek full UI administration funding

• Data breach Discovered at IKEA Canada impacts 95,000 Customers

• Cloudflare Appoints Carlos Torales Montero as VP, Head of Sales Latin America

• U.S. Public Sector Picks Up Pace in Procurement

• Frontdoor Announces First-Quarter 2022 Revenue Increased 7 Percent to $351 Million

• Adlumin Expands Executive Leadership Team with Two Industry Experts

• Cybersecurity and resilience: board-level issues

• Steer clear of these Instagram “Get rich with Bitcoin” scams

• OpenSea warns of Discord channel compromise

• Killnet Hacking group of Russia pledges to disrupt ventilators across UK Hospitals

• Take Control of Your Application Security

• How Microsoft will publish info to comply with executive order on software bill of materials

• How to secure your internet activity on iOS devices

• NIST Updates Supply Chain Cybersecurity Guidance

• WooCommerce Credit Card Stealer Found Implanted in Fake Images

• Nvidia Charged By SEC For ‘Inadequate Disclosures’ About Crypto Mining

• Man Arrested For Fake Facebook Page Loses Civil Suit Against Police

• Passwords: Do Actions Speak Louder Than Words?

• Gucci Stores To Accept Crypto Currencies In US

• Russia Hammered By Pro-Ukrainian Hackers After Invasion

• Catalans Demand Answers After Spanish Spy Chief Confirms Phone Hacking

• USB-Based Wormable Malware Targets Windows Installer

• Here’s How The Lazarus Hackers Start Their Attacks

• German Government Touts $14.7bn State Aid For Chip Factories

• Raspberry Robin – A a Windows Malware Spreads Using External USB Drives

• Cyberespionage: New Mustang Panda campaign targets Europe

• Anonymous and Ukraine IT Army continue to target Russian entities

• Facebook: Bogus Event Scammers are Targeting Vendors

• Google, Microsoft and Apple commit to passwordless sign-in standard

• The Growing Danger of Data Exfiltration by Third-Party Web Scripts

• Heroku Shares Details on Recent GitHub Attack

• Colonial Pipeline 1 Year Later: What Has Yet to Change?

• Tech Giants Unite in Effort to Scrap Passwords

• NetDooka framework distributed via a pay-per-install (PPI) malware service

• Climate Security Next Steps for the U.S. Government

• Help! I have 100,000 unread messages in my Gmail inbox. Where do I even start? [Ask ZDNet]

• ‘Once they have access to your screen, they have complete control’. Watch out for these screen-sharing scams

• Security researchers: Here’s how the Lazarus hackers start their attacks

• China Not Happy With South Korea Joining NATO Cyber Defense Center

• GoBrut Botnet Targets Sites and Devices: Heimdal Security Report

• Security Advisory Issued For Critical F5 Vulnerability

• World Password Day 2022 – Commentary

• Windows Installer Used by New Raspberry Robin Worm

• NIST Releases Advisory Guide on Supply Chain Attack Protection

• Impact of Alexa Ranking Service Shutdown on Cybersecurity Industry

• Breaking: Expert OpenSea Phishing Vulnerability

• NIST Update Supply Chain Guidance

• Steer clear of fake premium mobile app unlockers

• The Operational Structure of Bitcoin

• Increasing entropy in our CSP nonces

• USB-based Wormable Malware Targets Windows Installer

• Small Drones Are Giving Ukraine an Unprecedented Edge

• Researchers Warn of ‘Raspberry Robin’ Malware Spreading via External Drives

• Corporate Involvement in International Cybersecurity Treaties

• Killnet Threatens To Shut Down Hospital Ventilators, After London Arrest

• Secure Your Migration to AWS, Part I: The Challenges

• The complete guide to SSH keys in GitLab

• White House warns of cryptography-cracking quantum computers

• How Instagram scammers talk users out of their accounts

• Vulnerable Docker Installations Are A Playhouse for Malware Attacks

• HHS Information Security Program ‘Not Effective’

• South Korea joins NATO Cyber Defence Centre

• NIST updates guidance for cybersecurity supply chain risk management

• Mobile subscription Trojans and their little tricks

• Ukrainians DDoS Russian Vodka Supply Chains

• Special Police Constable Used Encrypted Chat to Post Child Abuse Content

• Hackers Using PrivateLoader PPI Service to Distribute New NetDooka Malware

• Biometrics: Powerful, but if handled improperly, very dangerous.

• Microsoft, Apple and Google Team Up on Passwordless Standard

• Ransomware: April 2022 review

• Conti, REvil, LockBit Ransomware Flaws Exploited to Block Encryption

• The 5 best secure browsers for privacy in 2022

• Attackers are Employing Multiple Malwares to Target Ukrainian System

• Experts Uncover New Espionage Attacks by Chinese ‘Mustang Panda’ Hackers

• Ukraine IT Army hit EGAIS portal impacting Russia’s alcohol distribution

• Bank for International Settlements calls for reform of data governance

• Walking away from ransomware unscathed. Can you? Really?

• Deepfake threats: Risk of false electronic evidence, extortion

• Wipro earns Microsoft Cloud Security Specialization certification

• Microsoft says to ditch passwords all together on World Password Day

• Critical Cisco NFVIS Software Flaw Let Attacker Injects Commands at The Root Level

• Google Releases Android Update to Patch Actively Exploited Vulnerability

• South Korea becomes first Asian member of NATO cyber research centre

• New infosec products of the week: May 6, 2022

• May 2022 Patch Tuesday forecast: Look beyond just application and OS updates

• Smart government agencies are opting for multicloud environments

• Heroku fesses up to customer password theft due to OAuth token attack

• Nothing personal: Training employees to identify a spear phishing attack

• AuditBoard introduces enhanced automation capabilities to accelerate compliance management

• Exterro upgrades FTK Connect to enhance digital forensic and incident response automation

• WALLIX PAM4ALL offers protection for user access and workstations

• Self-propelled, endlessly programmable artificial cilia

• F5, Cisco admins: Stop what you’re doing and check if you need to install these patches

• What Are Dark Web Search Engines and How to Find Them?

• AST Extends 2022 ‘ASTORS’ Early Entry Discount – by Popular Demand

• WhatsApp to roll out larger file size sharing, bigger groups, and new reactions feature

• Sternum integrates with Kibana and Grafana to enhance IoT protection

• Mphasis partners with Securonix to prepare customers against advanced cyber security risks

• Apple, Google and Microsoft expand support for FIDO Alliance’s passwordless sign-in standard

• Rambus acquires Hardent to address customer needs for next-generation data center solutions

• T-Mobile and Cradlepoint join forces to provide businesses with 5G fixed wireless internet solutions

• Citrix partners with Google Cloud to enable secure remote work for customers

• Onapsis collaborates with NextGen Cyber Talent to address the cybersecurity talent shortage

• Immuta expands partnership with Starburst to scale secure data access through automation

• Sentry raises $90 million to drive adoption of application performance monitoring

• Magnet Forensics acquires Comae Technologies to continue developing the memory analysis platform

• Crypto Scammers exploit talk on Cryptocurrency

• Senate Dems seek funds for UI administration

• White House sounds alarm on threat from quantum computers

• California dives into blockchain

• Can AI step up to offer help where humans cannot?

• Microsoft, Apple, and Google Promise to Expand Passwordless Features

• How to Protect Your Digital Privacy if Roe v. Wade Falls

• Dave Wilner joins Styra Board of Directors

• Intel appoints Matt Poirier as SVP of Corporate Development

• Diana Massaro joins Skyhigh Security as CMO

• Arcanna.ai assembles a team of advisors and security professionals

• Tailscale raises $100 million to help enterprises eliminate connectivity problems

• FBI: Cyber-scams cost victims $6.9b-plus worldwide in 2021

• Drive-by property appraisals streamline data collection

• IT Security News Daily Summary 2022-05-05

• Google, Apple, Microsoft promise end to passwords, courtesy of your mobile phone

• How to use KDE Plasma’s Konsole SSH plugin

• CrowdStrike vs FireEye: Compare EDR software

• Check Point vs Palo Alto: Comparing EDR software

• How to manage your Alexa voice recordings and privacy

• Heroku: Cyberattacker Used Stolen OAuth Tokens to Steal Customer Account Credentials

• CIA Wants Russians to Share Secret Info with the Agency via its Darknet Site

• HBCUs could be one key to improving equity in federal contracting and technology

• SentinelOne finds high-severity flaws in Avast, AVG

• US Cyber Command Team Helps Lithuania Protect Its Networks

• NIST Issues Guidance for Addressing Software Supply-Chain Risk

• Google addresses actively exploited Android flaw in the kernel

• EU Antitrust Head Calls For Global Approach To Tackle Big Tech

• Senator not sold on Army’s $22 billion bet on IVAS

• Why rural communities struggle to bring in much-needed federal grants

• A Third of Americans Use Easy-to-Guess Pet Passwords

• Microsoft, Apple, Google accelerate push to eliminate passwords

• Critical Cisco VM-Escape Bug Threatens Host Takeover

• Cisco Releases Security Updates for Enterprise NFV Infrastructure Software

• [Video] Introduction to Use-After-Free Vulnerabilities | UserAfterFree Challenge Walkthrough (Part: 1)

• Top Cyber Threats to the Telecom Industry

• NASA chief calls out the ‘plague’ of cost-plus contracts

• FBI: Bank Losses From BEC Attacks Top $43B

• Cisco Releases Security Updates for Enterprise NFV Infrastructure Software

• Demystify the Cybersecurity Risk Management Process

• India to Collect User Data from VPNs, Data Centers, and Cloud Service Providers

• Phishing threats attempt to hook new government victims

• Catalan: Spain Spy Chief Admits Legally Hacking Some Phones

• Google cloud misconfiguration poses risk to customers

• GitHub to Enforce Two-Factor Authentication

• Hunter Biden Laptop Repairman Sues Over Hacker Allegations

• Magnet Forensics Acquires Cybersecurity Software Firm Comae Technologies

• Attackers Use Event Logs To Hide Fileless Malware

• Avast Patches Decades Old Vulnerabilities In Antivirus Product

• VHD Ransomware Linked To North Korea’s Lazarus Group

• Stung By 3 Court Losses, ISPs Stop Fighting California’s Net Neutrality Law

• India to Collect User Data from VPNs, Crypto, Data Centers, and Cloud Service Providers

• Modern Identity and Access Management Makes a Difference, Especially at a Mega-Scale

• Cisco Announces Cloud Controls Framework Is Now Available to Public

• World Password Day: Why we need a password-less future

• World Password Day: Why are passwords still a problem in 2022?

• Dutch Watchdog To Investigate Google Play Store Practices

• Report: Cybersecurity workforce must grow by two-thirds to protect assets

• It’s World Password Day! Here’s the one simple tip you need to keep your accounts secure online

• Multichannel Phishing Concerns Cybersecurity Leaders in 2022

• Safeguarding From Container Attacks Inside the Cloud

• NHS Email Servers used for Phishing Attacks

• X-Force Research Update: Top 10 Cybersecurity Vulnerabilities of 2021

• GitHub Announces Mandatory 2FA for Code Contributors

• Illuminate Data Breach Impacts More School Districts

• VPN Providers Threaten to Quit India Over New Data Law

• The Movement to Ban Government Use of Face Recognition

• The $43 billion Business Email Compromise threat

• US VP Kamala Harris To Meet Amazon Labor Union At White House

• SYN flood attack

• Cisco adds predictive networking SaaS options to improve uptime and security

• White House: Quantum computers could crack encryption, so here’s what we need to do

• FBI: Email fraud keeps getting worse. Here’s how to protect yourself

• US Gov Issues Security Memo on Quantum Computing Risks

• 1,000+ Attacks in 2 Years: How the SideWinder APT Sheds Its Skin

• One Identity Guest Blog – The password checklist

• Nigerian Tesla: 419 scammer gone malware distributor unmasked

• Cisco addresses three bugs in Enterprise NFVIS Software

• Security recommendations for SAP HANA on RHEL

• The Chatter Podcast: Why We Fight with Christopher Blattman

• Chinese State-Sponsored APT Naikon Resurfaces with New Tactics, Techniques, and Procedures (TTPs).

• Google fixes two critical Pixel vulnerabilities: Get your updates when you can!

• NSA chief: Cyber Command did 9 international missions last year

• $43 billion stolen through Business Email Compromise since 2016, reports FBI

• S3 Ep81: Passwords (still with us!), Github, Firefox at 100, and network worms [Podcast]

• Docker Under Siege: Cybercriminals Compromise Honeypots to Ramp Up Attacks

• NIST Releases Updated Cybersecurity Guidance for Managing Supply Chain Risks

• Vendor Email Compromise (VEC) Explained

• AvosLocker Ransomware Uses Driver Files to Disable Anti-Virus Solutions

• Android’s May 2022 Security Updates Patch 36 Vulnerabilities

• Why Security Matters Even More in Online Gaming

• Google to Add Passwordless Authentication Support to Android and Chrome

• A couple of 10-Year-Old flaws affect Avast and AVG antivirus

• Why a Focus on Gender Increases National Security

• NCSC Warns Of Threats Posed By Malicious Apps

• Google chases sovereignty market with EU Workspace Data product

• AutoRABIT Raises $26 Million for Salesforce DevSecOps Platform

• Forrester Report Reveals the 5 Benefits IT Teams Really Need from API Security Tools

• Kellogg Community College Closes after Ransomware Attack

• Car Rental Giant Sixt Hit by Cyberattack, Operations Shut Down

• Cloudflare Successfully Thwarted One of The Largest DDoS Attacks

• Data Theorem launches attack surface management product that identifies 3P assets & appsec violations

• Apple, Microsoft and Google announce plans to enable passwordless authentication for billions of devices

• Google unveils passwordless log-in plans on World Password Day

• NSA chief: Cyber Command did 9 cyber defense missions last year

• How Can Healthcare Keep a Stronger Lock Down on their Cybersecurity

• F5 Warns of Critical Bug Allowing Remote Code Execution in BIG-IP Systems

• CANs Reinvent LANs for an All-Local World

• Latest Cohort Announced for NCSC For Startups

• Every ISP in the US Must Block These 3 Pirate Streaming Services

• UK National Health Service Email Accounts Compromised by Hackers to Steal Microsoft Logins

• This World Password Day consider ditching passwords altogether

• 5 Advantages of Fraud Scoring

• NetDooka Framework Distributed via PrivateLoader Malware as Part of Pay-Per-Install Service

• VHD Ransomware Linked to North Korea’s Lazarus Group

• GitHub to Developers: Turn on 2FA or Lose Access

• Announcing the public availability of the Cisco Cloud Controls Framework (CCF)

• Researchers discover ‘dangerous functionality’ in Google Cloud control pane

• Decade-old bugs discovered in Avast, AVG antivirus software

• A security researcher told me my passwords and more: How 15 years of digital footprints left me exposed

• Google, Apple, Microsoft make a new commitment for a “passwordless future”

• OT Security Firm Network Perception Raises $13 Million

• The Importance of Defining Secure Code

• FBI: Losses From BEC Scams Surpass $43 Billion

• Flaws in Avast, AVG Antiviruses Could Have Facilitated Attacks on Millions of Devices

• Researchers Disclose 10-Year-Old Vulnerabilities in Avast and AVG Antivirus

• 15.3 Million Request-Per-Second DDoS Attack

• Critical F5 BIG-IP flaw allows device takeover, patch ASAP! (CVE-2022-1388)

• BIG-IP RCE Bug Could Allow Device Takeover

• April 2022 Cybersecurity Roundup: Funky Pigeon cyber attack, Costa Rica ransomware attack, Mailchimp cybersecurity negligence lawsuit

• It’s business as usual for REvil ransomware

• OpenSSF Launches Package Analysis Tool To Detect Malicious Packages

• What is a Progressive Website Application?

• Netflix Sued By Shareholders Over Subscription Disclosure

• World Password Day: Brushing up on the basics

• The Age of Zero-day Java Vulnerabilities

• Check Point Software Outlines Five Must-Haves for Creating a Secure Password

• There’s no sugarcoating it: That online sugar daddy may be a scammer

• Thousands of Borrowers’ Data Exposed from ENCollect Debt Collection Service

• Heroku Forces User Password Resets Following GitHub OAuth Token Theft

• Cisco Patches Critical VM Escape in NFV Infrastructure Software

• OWASP patches path traversal flaw

• 1-15 April 2022 Cyber Attacks Timeline

• It’s time for Internet Providers to Become Primary Security Providers

• Industry Groups Drop Challenge To California Net Neutrality Law

• F5 warns its customers of tens of flaws in its products

• China stealing intellectual data from Europe and North America

• Google is protecting Ukraine from State Sponsored Cyber Attacks of Russia

• FBI warns of new reverse instant payments banking scam

• South Korea Admitted to NATO Cyber Defense Center

• 1000s of phishing emails sent from NHS inboxes

• Multi-factor authentication: Busting a handful of common myths

• FBI: Thailand and Hong Kong Banks Used Most in BEC

• NHS Inboxes Hijacked to Send 1000+ Malicious Emails

• Apple AirTags: One Year On – Intego Mac Podcast Episode 238

• ID theft tools small businesses should invest in 2022 – Tighten your security

• Try the Cloud NGFW Free Trial in AWS Marketplace

• VM escape and root access bugs fixed in Cisco NFV infrastructure software

• Federal Court finds RI Advice failed to manage cybersecurity risks in landmark decision

• Phishing operation hits NHS email accounts to harvest Microsoft credentials

• Biden orders new quantum push to ensure encryption isn’t cracked by rivals

• How the EPL tackles piracy and stops people going around the wall

• Beijing-backed gang looted IP around the world for years, claims Cybereason

• Tackling the threats posed by shadow IT

• What Does Volunteering at (ISC)² Mean? Hear From Volunteer Lisa Vaughan

• Passwords are secrets that should never be shared

• Australian Businesses That Adopt Eagle Eye Networks Cloud Video Surveillance Are Eligible for Tax Break

• 3 most dangerous types of Android malware

• GitHub to require two factor authentication for code contributors by late 2023

• 7 threat detection challenges CISOs face and what they can do about it

• World Password Day is Dead. Long Live World Password Day!

• Cisco Issues Patches for 3 New Flaws Affecting Enterprise NFVIS Software

• How to identify vulnerabilities with NMAP

• Computer Malfunction Leads to Death of Over 27,000 Chickens

• F5 Warns of a New Critical BIG-IP Remote Code Execution Vulnerability

• Data Theorem Supply Chain Secure identifies third-party vulnerabilities across the application software stack

• Building on Your Existing DAM Instance is Smart Budget Planning

• Variscite enhances IoT and edge security with over-the-air software updates

• BIO-key MobileAuth enhancements safeguard access to critical data

• Uptycs helps security teams strengthen security posture with CIEM capabilities

• Noname Security Active Testing allows businesses to stop vulnerabilities before they reach production

• Veracode Continuous Software Security Platform enables organizations to mitigate their security risk

• Idaho Needs to Shore Up Cybersecurity, Task Force Says

• World Password Day – the 1960s just called and gave you your passwords back

• Syniti Migrate optimizes data migration for enterprise customers

• Elastic Observability 8.2 provides fine-grain control over data collection and storage

• Atos partners with VMware to help organizations drive value from data

• Binarly collaborates with immune to secure modern computer infrastructure

• Votiro partners with Thales to strengthen zero trust security for enterprises

• US Cyber Command shored up nine nations’ defenses last year

• Megaport and Bechtle join forces to accelerate digital and network transformation for companies

• Report: 75% of companies are focusing on cloud-native apps

• GitHub to Developers: Turn on 2FA, or Lose Access

• Brian Stone joins NetAbstraction as CRO

• Digital Security and Privacy Tips for Those Involved in Abortion Access

• Workshop: Simplifying Network Security in the Cloud

• India Forces All VPN Providers to Log and Store User Data

• China-linked Winnti APT steals intellectual property from companies worldwide

• Radware launches SkyHawk Security to improve the overall security posture for organizations

• DocuSign hires Steve Shute as President of Worldwide Field Operations

• Island appoints Jennifer Park as CPO

• Tetrate appoints Paul Machle as CFO

• Traceable AI raises $60 million for unique API security platform

• IT Security News Daily Summary 2022-05-04

• 2022-05-03 – Contact Forms campaign –> Bumblebee –> Cobalt Strike

• Senator calls on Biden to fill OSTP leadership role

• Space Force to bring data scientists, coders on board this summer

• City, state cybersecurity programs follow Washington’s lead

• IRS leader explains why the IRS went to ID.me

• FirstNet boosts in-building coverage

• Need help finding broadband grants? Tool helps sift through opportunities

• EU Hands Police Agency New Powers Over Personal Data

• Microsoft Releases Defender for SMBs

• China-Backed Winnti APT Siphons Reams of US Trade Secrets in Sprawling Cyber-Espionage Attack

• Q&A: How China Is Exporting Tech-Based Authoritarianism Across the World

• Appwrite launches fund to help sustain open-source software development

• FBI says Business Email Compromise attacks have cost over $43 billion since 2016

• Kubernetes 1.24 Stargazer: An exceptional release with two major changes

• Google Sees More APTs Using Ukraine War-Related Themes

• Kaspersky Warns of Fileless Malware Hidden in Windows Event Logs

• Groundbreaking Cybersecurity Book Published

• F5 Releases Security Advisories Addressing Multiple Vulnerabilities

• Cisco StarOS Forensic Guide Published

• Google SMTP Relay Service Exploited for Sending Phishing Emails

• Cisco Predictive Networks To Recognise Future Network Outages, Issues

• What Are the Best Ways to Protect Your CAD/CAM Data?

• How the TMF helps agencies pave the way toward zero trust

• Wastewater monitoring took off during the COVID-19 pandemic – and here’s how it could help head off future outbreaks

• Hubble Technology Banks $9 Million for Asset Visibility Platform

• Mozilla Releases Security Updates for Firefox and Firefox ESR

• F5 Releases Security Advisories Addressing Multiple Vulnerabilities

• F5 Informs BIG-IP Customers About 18 Serious Vulnerabilities

• Court Rules That Facebook Can Turn Over Private Info To Law Enforcement

• Mozilla Releases Security Updates for Firefox and Firefox ESR

• Tax Sanctions and Foreign Policy

• Russia-linked APT29 Targets Diplomatic World Wide

• China-linked APT Caught Pilfering Treasure Trove of IP

• Coveware: Double-extortion ransomware attacks fell in Q1

• New Ransomware Variant Linked to North Korean Cyber Army

• This World Password Day, Here’s How a Password Manager Can Simplify Your Life

• China-Linked Winnti APT Group Silently Stole Trade Secrets for Years: Report

• SIM Fraud Solution Sparks Privacy Fears

• Security Stuff Happens: What Will the Public Hear When You Say You’ve Been Breached?

• Anonymous Hacks Russian Energy Companies, Leaking 1Million+ Emails

• Mental Health Apps Fail Privacy Guidelines Spectacularly, Says Mozilla

• Bridging the Needs of Security and Development Teams, Veracode Unveils Next-Generation Software Security Platform

• Microsoft releases open-source tool for securing MikroTik routers

• What are the Most Common Types of SSL Errors and How to Fix Them?

• Android monthly updates are out – critical bugs found in critical places!

• CISA Adds Five Known Exploited Vulnerabilities to Catalog

• How a senior product manager is leading the passwordless movement at Microsoft

• Unfixed vulnerability in popular library puts IoT products at risk

• Cyber Attack on Nile Dam foiled by Ethiopian Authorities

• Yubico Releases MFA Guide in Recognition of World Password(less) Day

• Araali Networks Selected as Finalist for RSA Conference 2022 Innovation Sandbox Contest

• German Minister Urges Tougher EU Antitrust Action

• HHS Information Security Program ‘Not Effective’

• Can New York court and regulate the crypto industry at the same time?

• CISA Adds Five Known Exploited Vulnerabilities to Catalog

• 8 security tips for small businesses

• Tailscale raises $100M for its zero-trust VPN

• GitHub launches new 2FA mandates for code developers, contributors

• Communication around Heroku security incident dubbed ‘train wreck’

• AI for Cybersecurity Shimmers With Promise, But Challenges Abound

• Vulnerabilities Allow Hijacking Of Most Ransomware To Prevent File Encryption

• Bangladesh Cyber Incident Response Team has Issued a Warning About Malware Attacks Around Eid

• Kubernetes taps Sigstore to thwart open-source software supply chain attacks

• UK to Place Security Requirements on App Developers and Store Operators

• Pro-Ukraine attackers compromise Docker images to launch DDoS attacks on Russian sites

• The House Should Fine Bannon, Meadows, Navarro and Scavino Now If It Wants Their Testimony

• BT Opts For AWS As Cloud Provider To Assist In IT Transformation

• Instagram Hack Results in $1 Million Loss in NFTs

• Magniber Ransomware Tricking Users via Fake Windows 10 Updates

• Cisco Issues Fresh Warning Over Counterfeit Switches

• Webinar Today: Blast Radius & Simulated Attack Paths

• Uptycs Announces New Cloud Identity and Entitlement Management (CIEM) Capabilities

• AutoRABIT Secures $26M in Series B Investment from Full In Partners to Expand DevSecOps Platform

• What Stars Wars Teaches Us About Threats

• SEC Plans to Hire More Staff in Crypto Enforcement Unit to Fight Frauds

• US To Impose Sanctions On China’s Hikvision – Report

• This unpatched DNS bug could put ‘well-known’ IoT devices at risk

• This sneaky hacking group hid inside networks for 18 months without being detected

• Attackers Use Event Logs to Hide Fileless Malware

• SAC Health System Impacted By Security Incident

• Chinese Hackers Caught Stealing Intellectual Property from Multinational Companies

• White House Boosting Quantum Technology And Cybersecurity

• Unpatched DNS Bug Puts Millions Of Routers, IoT Devices At Risk

• SEC Nearly Doubles Crypto Currency Cop Roles In Special Cyber Unit

• Cybersecurity firm Cybereason uncovers Chinese espionage campaign

• Anonymous Leak 82GB of Police Emails Against Australia’s Offshore Detention

• One Small Error by DevOps, One Giant Opening for Attackers

• Mosyle raises $196M for its mobile device management platform for Apple devices

• GitHub to enforce 2FA for all code contributors by the end of 2023

• Tailscale raises $100 million for its zero-trust VPN

• Appwrite launches fund to help sustain open source software development

• Experts linked multiple ransomware strains North Korea-backed APT38 group

• This Sneaky Hacking Group Hid Inside Networks For 18 Months Without Being Detected

• The 2022+ Fit-for-Purpose OSINT Toolkit In The Age Of Digital Risk Growth

• Watch Out! Verified Twitter Accounts Are Targeted in Phishing Attacks

• Fake Cyberpunk Ape Executives target artists with malware-laden job offer

• Board, (Dash)board and Bored

• Critical RCE Bug Reported in dotCMS Content Management Software

• Application Security Firm ShiftLeft Raises $29 Million

• Aryaka, Carnegie Mellon’s CyLab to Research New Threat Mitigation Techniques

• A Step-By-Step Guide on How To Remove Ransomware?

• Chinese Hackers Abuse Cybersecurity Products for Malware Execution

• India’s New Super App Has a Privacy Problem

• New Sophisticated Malware

• Transport for NSW Suffered a Cyber Incident

• Cybersecurity for banks – Securing advanced e-Banking services

• Mosyle raises $200 million for its mobile device management platform for Apple devices

• Vulnerabilities Allow Hijacking of Most Ransomware to Prevent File Encryption

• NCSC updates build environment best practices

• A checklist to help healthcare organizations respond to a serious cyberattack

• The EU’s Copyright Directive Is Still About Filters, But EU’s Top Court Limits Its Use

• Chinese ride-hailing giant Didi says U.S. regulator is investigating its $4 billion IPO

• Apple Store Union Vote To Take Place Next Month

• Unpatched DNS Bug Puts Millions of Routers, IoT Devices at Risk

• A new secret stash for “fileless” malware

• SEC bolsters cyber and crypto assets team

• Musk Touts ‘Slight Cost’ For Business Use Of Twitter

• Healthcare and Education Sectors Most Susceptible to Cyber Incidents

• An expert shows how to stop popular ransomware samples via DLL hijacking

• NCSC Updates Code of Practice for Smart Building Security

• State-Backed Chinese Hackers Target Russia

• A Tripwire Milestone: ASPL – 1000 is here

• SEC Doubles Cyber and Crypto Assets Team

• Ukraine War Themed Files Become the Lure of Choice for a Wide Range of Hackers

• Is It Easy to Install a Hard Drive on Your Computer – 2022 Guide

• Chinese Hacker Group Targeting Telecommunication Service Providers

• DHS manipulated report on Russian election interference during the Trump administration, watchdog says

• Lnkbomb- Exploit Insecure File Shares

• Allowing too many exceptions leaves you wide open to infection

• Transport for NSW struck by cyber attack

• How I almost fell for an online rental scam

• Heroku to begin user password reset almost a month after GitHub OAuth token theft

• Putin threatens supply chains with counter-sanction order

• Wiper malware threat to the healthcare sector in US and Ukraine

• Norton to pay Columbia University a penalty for Malware patent infringement

• Stealthy APT group plunders very specific corporate email accounts

• AV-Comparatives: Microsoft Defender has a large impact on system performance

• Self-promotion in cybersecurity: Why you should do it, and how

• Google TAG sees China PLA group go after multiple Russian defence contractors

• Chinese hackers perform ‘rarely seen’ Windows mechanism abuse in three-year campaign

• Winnti threat group rides again with IP theft campaign

• The 6 steps to a successful cyber defense

• BigBear.ai to Highlight Artificial Intelligence and Machine Learning Capabilities at Upcoming Industry Events

• Endpoint security and remote work

• Good end user passwords begin with a well-enforced password policy

• How to enhance your cyber defense program with CIS SecureSuite

• Dell expands its offerings to help customers improve cyber resiliency

• Enpass Business allows organizations to choose where they store their data

• N-able Cove Data Protection provides cloud-first backup and disaster recovery for businesses

• OccamSec Incenter helps security teams uncover complex vulnerabilities

• SEC nearly doubles size of crypto and cyber enforcement unit

• Putting It All Together

• Instagram Credentials Stealer: Disguised as Mod App

• Cyber-spies target Microsoft Exchange to steal M&A info

• What Should I Know About Defending IoT Attack Surfaces?

• WEBGAP partners with Intel to accelerate the adoption of remote browser isolation cybersecurity

• StorONE and Seagate join forces to solve important storage-related challenges

• Parfin selects Anjuna Security to protect MPC custody assets against risk and misuse

• Aryaka partners with Carnegie Mellon University CyLab to develop new threat mitigation techniques

• Instagram Credentials Stealers: Free Followers or Free Likes

• World Password Day and the importance of password integrity

• China-linked APT Curious Gorge targeted Russian govt agencies

• Network Perception raises $13 million to address the OT network cybersecurity needs of critical industries

• Sabanci acquires Radiflow to boost its cybersecurity offerings across various industrial sectors

• Sandbox AQ and Deloitte help organizations protect operations during the quantum transformation

• Deepwatch hires John Lionato as EVP of Security Operation

• Doug McNitt joins Calix as EVP and General Counsel

• ShiftLeft raises $29 million to expand coverage of cloud native application architectures and languages

• Transcend appoints Mike Orlick as VP of Sales

• Jason Fickett joins Booz Allen Hamilton to help lead its national cyber strategy

• Sustainability and the cloud

• How automation can enhance and empower the federal workforce

• Cyber-war gaming: A cybersecurity tabletop exercise

• New DNS Spoofing Threat Puts Millions of Devices at Risk

• API Security Company Traceable AI Lands $60 Million Series B

• Syxsense Enterprise Unifies Endpoint Security and IT Management for Real-Time Vulnerability Monitoring and Remediation

• IT Security News Daily Summary 2022-05-03

• NIST is building a 5G network to model cybersecurity for operators

• Cloud authorization ecosystem to expand, StateRAMP predicts

• Trend Micro discovers AvosLocker can disable antivirus software

• SolarWinds Attackers Gear Up for Typosquatting Attacks

• Ridiculous Ransomware Kill Switch

• RCE vulnerabilities found in Avaya, Aruba network switches

• Facebook Moderators Beg Company To Let Them Do More About Posts Praising Atrocities In Ukraine

• Unpatched DNS-Poisoning Bug Affects Millions of Devices, Stumps Researchers

• Open-source intelligence: The new frontier of digital investigations

• REvil Revival: Are Ransomware Gangs Ever Really Gone?

• Blockchain interoperability is essential to avoid the flaws of Web2

• Identity management beyond the CAC card

• Cyberespionage Group Targeting M&A, Corporate Transactions Personnel

• April ransomware attacks slam US universities

• New Magniber Ransomware Lures Victims Via Fake Windows 10 Updates

• Syxsense Launches Unified Endpoint Security and Management Platform

• SEC nearly doubles cryptocurrency cop roles in special cyber unit

• Former eBay Exec Pleads Guilty to Cyber Stalking

• Is Leaking a SCOTUS Opinion a Crime? The Law Is Far From Clear

• Google’s Safety Section Will Show What Android Apps Do With the User Data

• Beware of New Phishing Campaign Targeting Facebook Users

• German Finance Watchdog Sees ‘Very Big’ Risk of Cyberattacks

• Cyberespionage group exploiting network and IoT blind spots

• Firefox hits 100*, fixes bugs… but no new zero-days this month

• Third-Party App Access Is the New Executable File

• OFAC, the DPRK and the Tornado of Cash

• Customize your secure VM session experience with native client support on Azure Bastion

• ExtraReplica: Microsoft Patches Cross-Tenant Bug in Azure PostgreSQL

• Security Researchers Find Nearly 400,000 Exposed Databases

• Using Pupil Reflection in Smartphone Camera Selfies

• Automating your Microsoft security suite with D3 XGEN SOAR

• Sevco Security Selected as Top 10 Finalist for RSA Conference 2022 Innovation Sandbox Contest

• How and why you should secure APIs

• DevOps release process

• How to Choose Tech Stack for Mobile App Development

• Zero trust is more than just vendors and products – it requires process

• For Smaller Enterprises Infrastructure Security Starts With Hygiene

• Ransomware Attack Closes Michigan College

• NortonLifeLock Willfully Infringed Malware Patents

• How to Create a Cybersecurity Mentorship Program

• Digital Rights Updates with EFFector 34.3

• Intelligent application protection from edge to cloud with Azure Web Application Firewall

• State-backed hacking group from China is targeting the Russian military

• Storytelling and slide decks

• Trying to Catch the Big Phish

• Driverless vehicles are finally hitting city streets

• Hackers used the Log4j flaw to gain access before moving across a company’s network, say security researchers

• Radware Launches SkyHawk Security, a Spinoff of Its Cloud Native Protector Business

• A DNS flaw impacts a library used by millions of IoT devices

• How to Send Ctrl-Alt-Delete in a Remote Desktop Session?

• Cryptocurrency Usage – What Are the Numerous Uses?

• Elon Musk Said Twitter DMs Should Have End to End Encryption

• The Rise of Cybercrime – An Overview

• Cyberattack Causes Disruptions at Car Rental Giant Sixt

• OccamSec Unveils New Cybersecurity Platform

• Teleport Raises $110 Million Series C at $1.1 Billion Valuation Led by Bessemer Venture Partners

• Critical TLStorm 2.0 Bugs Affect Widely-Used Aruba and Avaya Network Switches

• Detecting Targeted Attacks on Public Cloud Services with Cisco Secure Cloud Analytics

• Botnet That Hid For 18 Months Boasted Some Of The Coolest Tradecraft Ever

• Spanish Prime Minister’s Phone Targeted With Pegasus Spyware

• Aruba, Avaya Network Switches Vulnerable To SSL Flaws

• Crypto Hackers Have Stolen More Than $370 Million In April Alone

• Phishers exploit Google’s SMTP Relay service to deliver spoofed emails

• All Organisations Must Report Cybersecurity Beaches Within 6 Hours: CERT-In

• SEC Proposes New Cybersecurity Rules for Financial Services

• Microsoft’s standalone Defender for Business hits GA

• DoD Announces Results of Vulnerability Disclosure Program for Defense Contractors

• Identity-Based Infrastructure Access Firm Teleport Raises $110 Million

• Traceable AI Snags $60M for API Security Tech

• Developing Software? Get Accountability Right First

• SOLARDEFLECTION C2 Infrastructure Used by NOBELIUM in Company Brand Misuse

• What Does the 2022 NDS Fact Sheet Imply for the Forthcoming Cyber Strategy?

• US Department of Defence Hit By $23m Phishing Attack

• Fortify Your Infosec Architecture & Zero Trust Strategy with Defense-in-Depth & Endpoint Encryption>

• Craft fair vendors targeted by fake event scammers on Facebook

• Here’s how hackers used the Log4j flaw to gain access before moving across a company’s network

• What’s behind the record‑high number of zero days?

• Hands-on Cybersecurity Skills Training on a Budget: Tips to Get the Most Out of Your Money

• Airdrop phishing: what is it, and how is my cryptocurrency at risk?

• US healthcare billing services group hacked, affecting at least half a million individuals

• CCSP Exam – Many Changes on the Way!

• Germany Warns Of Ukraine Crisis Hacking Risk

• Over 50 countries sign the “Declaration for the Future of the Internet”

• ShiftLeft Raises $29 million for AppSec platform that prioritizes vulnerabilities attackers are most likely to exploit

• Kintent is transforming compliance into a revenue-generating tool

• Teleport raises $110M to help engineers access infrastructure remotely

• Mozilla: Lack of Security Protections in Mental-Health Apps Is ‘Creepy’

• Deepfakes Are a Growing Threat to Cybersecurity and Society: Europol

• Many IoT Devices Exposed to Attacks Due to Unpatched Flaw in uClibc Library

• TLS Flaws Leave Avaya, Aruba Switches Open to Complete Takeover

• Experts Analyze Conti and Hive Ransomware Gangs’ Chats With Their Victims

• RSAC Innovation Sandbox Contest finalists announced

• Experts Analyze Conti and Hive Ransomware Gangs Chats With Their Victims

• Microsoft Plan To Launch Built-In VPN With Edge Browser

• Syxsense launches unified endpoint management and security solution

• Enpass launches first offline password management tool for enterprises

• What to expect when negotiating with Conti and Hive ransomware gangs

• VFunction deploys AI to improve code and fix technical debt

• Open-source security: It’s too easy to upload ‘devastating’ malicious packages, warns Google

• Vulnerabilities in Aruba and Avaya Switches Expose Enterprise Networks to Attacks

• California Man Convicted for Stealing Millions From DoD via Phishing Scheme

• SECURITY ALERT: Active Golang-Written Botnet StealthWorker Infects Thousands of Websites via Distributed Brute-Force Attacks.

• Podcast Episode: Teaching AI to Its Targets

• How To Safeguard Your Cryptocurrency Investments?

• TLStorm 2.0 – Airports, hospitals, hotels and enterprises at risk to new vulnerabilities

• SEC Nearly Doubles Staff Of Crypto Enforcement Group

• China-linked Moshen Dragon abuses security software to sideload malware

• TLStorm 2.0: Critical bugs in widely-used Aruba, Avaya network switches

• Hacking Group Moshen Dragon Targets Asian Telecommunication Companies

• Alibaba Shares Briefly Plunge After Report About ‘Ma’

• Most Reliable Hosting Company Sites in April 2022

• May The Fourth Be with You: Jedi Mind Tricks and Scams

• Russian Cyberspies Target Diplomats With New Malware

• Michigan College Cancels Classes After Ransomware Attack

• Threat Actors Sent Malicious Emails Using Google SMTP Relay Service

• Will Multi-Factor Authentication (MFA) Implementation Protect Countries from Cybercriminals?

• Why Do You Need a Malware Sandbox?

• Critical vulnerabilities found in ‘millions of Aruba and Avaya switches’

• Mental Health and Prayer Apps Fail the Privacy Test

• Cyber-espionage group targets Asian telecomms

• Internet scams are a daily reality for the UK

• Google Fires Senior Researcher In Latest AI Row

• Car Rental Giant Sixt Hit by Cyber-Attack

• Spyware discovered on Spanish PM’s phone

• Google Rolls Out Developer Preview of Android Privacy Sandbox

• UNC3524 APT uses IP cameras to deploy backdoors and target Exchange

• 4 Reasons Why Data Science Is One of the Best Fields of Work

• Union Loses Second Amazon Staten Island Vote

• Silicon UK In Focus Podcast: The Impact of SaaS

• Ponzi Scheme Suspect Deported to China After $36m Bust

• CISA’s 2021 Top-15 routinely exploited Vulnerabilities – Check Point customers remain fully protected

• Privacy pathology: It’s time for the users to gather a little data. Evidence

• How to keep your passwords safe online

• Musk ‘In Talks’ With Potential Partners For Twitter Financing

• Some US travel applicants now have to provide their social media account details

• Here’s how self-help apps violate your privacy, sell your information

• Google starts testing fenced frames to guard its Privacy Sandbox

• More transparency from developers is coming to the Google Play Store

• Phylum strengthens mission to defend the software supply chains

• ISE business value and ROI uncovered in Forrester study

• Package Analysis dynamic analyzes packages in open-source repositories

• Dell targets multi-cloud ecosystem with cyber recovery and data analytics

• Chinese Hackers Caught Exploiting Popular Antivirus Products to Target Telecom Sector

• AvosLocker Ransomware Variant Using New Trick to Disable Antivirus Protection

• Unpatched DNS Related Vulnerability Affects a Wide Range of IoT Devices

• CMS-based sites under attack: The latest threats and trends

• Pegasus malware installed on Spanish PM Phone

• Microsoft confirms Russian Cyber Attacks on Ukraine coincided with Military Strikes

• New Hacker Group Pursuing Corporate Employees Focused on Mergers and Acquisitions

• How to implement a best-in-class SASE architecture

• Corporate structure and roles in InfoSec

• GitHub Says Recent Attack Involving Stolen OAuth Tokens Was “Highly Targeted”

• Discover your public cloud exposure with Recon.Cloud

• Password tips to keep your accounts safe

• [Video] Introduction to Use-After-Free Vulnerabilities | UserAfterFree Challenge Walkthrough (Part: 1)

• CACI DarkBlue Intelligence now has access to cryptocurrency data

• CommScope XGS-PON: Accelerating FTTP deployments

• Computer Services to resell FINBOA dispute management software

• C2A Security and Stefanini to bring a robust cybersecurity solution to the automotive industry

• How XDR provides protection against advanced exploits

• Vulnerability Summary for the Week of April 25, 2022

• PagerDuty appoints Katherine Post Calvert as CMO

• Accenture acquires akzente to strengthen sustainability capabilities

• Vulnerability Summary for the Week of April 25, 2022

• Nicole Anasenes elected to the VMware board of directors

• Andrew Hallman joins Peraton as VP, National Security Strategy and Integration

• How to make SSH even easier to use with config files

• Russia to Rent Tech-Savvy Prisoners to Corporate IT?

• Grindr User Data For Sale, Expert Reaction

• Arctic Wolf appoints Duston Williams as CFO

• The Aftermath, Episode 3: Congress Responds

• How Can One Know When To Trust Hardware and Software?

• World Password Day 2022 – Commentary

• IT Security News Daily Summary 2022-05-02

• Ransomware attacks more frequent, damaging and costly

• Cybersecurity and supply chain essential for building tomorrow’s digital infrastructure

• Google Offers $1.5M Bug Bounty for Android 13 Beta

• New Bumblebee Malware Loader Emerges To Replace IcedID and BazaLoader

• NJ combats vehicle theft with license plate readers

• Do phishing simulations work? Sometimes

• CIA taps its first chief technology officer

• Technology trade groups urge Congress to add $300 million to the TMF

• Tracking Exposed: Demanding That the Gods Explain Themselves

• Using Unsupervised Learning to Combat Cyber Threats

• GAO dismisses final CIO-SP4 protests

• Security is a pain for American Dental Association: Ransomware infection feared

• WinMagic SecureDoc for Linux: Fortify Your Infosec Architecture & Zero Trust Strategy with Defense-in-Depth & Endpoint Encryption>

• Compliance does not equal security: 7 cybersecurity experts share their insights

• Onyx Ransomware Destroys Large Files Instead of Locking Them

• Microsoft announces Microsoft Defender for Business (for SMBs)

• SSE kicks the ‘A’ out of SASE

• Car rental company Sixt hit by a cyberattack that caused temporary disruptions

• Amid Ukraine War, China Announces “Global Security Initiative”

• The EU Digital Markets Act Places New Obligations on “Gatekeeper” Platforms

• Numerous “ExtraReplica” Bugs In Microsoft Azure Exposed Databases

• New Regulations in India Require Orgs to Report Cyber Incidents Within 6 Hours

• The EU Digital Markets Act’s Interoperability Rule Addresses An Important Need, But Raises Difficult Security Problems for Encrypted Messaging

• Microsoft launches Defender for Business to help protect small and medium businesses

• NIST Seeking Feedback for a New Cybersecurity Framework and Supply Chain Guidance

• GitHub Says Recent Attack Was Highly Targeted

• 6 Best Practices to Ensure Kubernetes Security Meets Compliance Regulations

• Latest Phishing Campaign Deploys Malware and Steals Critical Information

• Dell brings data recovery tools to Apex and the cloud

• Spyware Found on Spanish PM’s Phone

• Lapsus$ Targeting SharePoint, VPNs and Virtual Machines

• Attackers Use Stolen OAuth Access Tokens to Breach Dozens of GitHub Repos

• Analysis on recent wiper attacks: examples and how wiper malware works

• Next CISO headache: Vendor cyber insurance

• Indian Government Asked Requiring Organizations to Report Cybersecurity Incidents within Six Hours

• Russia-Ukraine war prompts security best practices refresher

• Name That Edge Toon: Flower Power

• MDT Recognized by NACUSO as 2022 CUSO of the Year

• Drawbridge Rebrands to Highlight its Evolution and Commitment to Client Centricity and Innovation

• SBA looks to promote disadvantage businesses with 2023 budget request

• Spanish PM, defense minister latest Pegasus spyware victims

• Californian Phished $23.5m from DoD

• American Idol Winner Accused of Spying on Ex-girlfriend

• Watch out for these 3 small business cybersecurity mistakes

• 17 Reasons Why You Should Use an iPod touch in 2022

• Meta, Tracking Code, And The Student Financial Aid Website

• Wikimedia Foundation Stops Accepting Cryptocurrency As Donations

• Data-Wiper Malware Surges As Ukraine Battles Ongoing Invasion

• Mozilla Finds Mental Health Apps Fail Spectacularly At User Security, Data Policies

• Announcing new investments to help accelerate your move to Azure

• AvosLocker Ransomware Variant Abuses Driver File to Disable Anti-Virus, Scans for Log4shell

• The mystery behind the samples of the new REvil ransomware operation

• Technologies Useful In the Pandemic Are Challenging Privacy Now

• Pentagon Names Chief Digital and Artificial Intelligence Officer (CDAO)

• Smallstep Raises $26 Million for Automated Certificate Management Platform

• Security Stuff Happens: What Do You Do When It Hits the Fan?

• Which Hole to Plug First? Solving Chronic Vulnerability Patching Overload

• Chinese “Override Panda” Hackers Resurface With New Espionage Attacks

• What Extremism Means to the Federal Government

• Spanish Prime Minister, Defence Minister ‘Hacked With Pegasus’

• CISA points to water sector in seeking $80 million more for FEMA grants

• Pentagon Names Chief Digital and Artificial Intelligence (AI) Officer

• New Black Basta Ransomware Possibly Linked to Conti Group

• 3 Best Practices to Avoid Inevitable Ransomware Attacks

• The Benefits of Hyperautomation

• European Commission Hits Apple Pay With Antitrust Charge

• Bad Actors Are Maximizing Remote Everything

• REvil Ransomware Makes a Comeback

• Deep Dive: Protecting Against Container Threats in the Cloud

• Google Offering Up to $1.5 Million for Android 13 Beta Exploits

• Google offers 50% higher bounties for bugs in Android 13 Beta

• Mental Health and Prayer Apps Do Not Meet Mozilla’s Minimum Security Standards

• UniverSIS Platform Vulnerability Could Allow Manipulating Students’ Grades

• Package Analysis – OpenSSf Tool to Detect Malicious Packages in Popular Open-Source Repositories

• Russian Hackers Targeting Diplomatic Entities in Europe, Americas, and Asia

• Google Calls For Dismissal Of £1.25bn EU Antitrust Fine

• The VC View: The DevSecOps Evolution and Getting “Shift Left” Right

• Cybersecurity M&A Roundup: 37 Deals Announced in April 2022

• Bored Ape Start-Up Raises Millions In Virtual Land Sale

• Check Point’s Quantum IoT Protect Identified Hacked IoT Devices & Protects a Customer from a Cyber-Attack

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of April 25, 2022

• New ‘Bumblebee’ Malware Loader Used by Several Cybercrime Groups

• Spain: 2021 Spyware Attack Targeted Prime Minister’s Phone

• Volkswagen In ‘Long-Term Chip Deal’ With Qualcomm

• Amazon Wins Hearing That Could Overturn Union Vote

• Mozilla finds mental health apps fail ‘spectacularly’ at user security, data policies

• A week in security (April 25 – May 1)

• Ransomware Study 2022: attacks are up, ransom payments are increasing

• Snap Releases Pocket-Sized ‘Flying Camera’ For Selfies

• IoT and Cybersecurity: What’s the Future?

• Group-IB CEO remains in prison – the Russian-led company has been ‘blacklisted’ in Italy

• Diversity initiatives needed to set cybersecurity skills shortage right

• 345,000 People are Affected by a Data Breach at ARcare

• Google Releases First Developer Preview of Privacy Sandbox on Android 13

• Russia-linked APT29 targets diplomatic and government organizations

• How is the U.S. government preparing for critical infrastructure attacks?

• PayHere – 1,580,249 breached accounts

• Insider Threat alert as school district employee mines cryptocurrency without permission

• Know more about YO-YO DDoS Attacks

• Here’s a New Tool That Scans Open-Source Repositories for Malicious Packages

• Pentagon still not taking full advantage of rapid acquisition authorities, former official says

• Cybersecurity skills shortage: Could training, certifications and diversity be a solution?

• How to avoid security blind spots when logging and monitoring

• OSINT: The privacy risks of sharing too much information

• Tripwire Patch Priority Index for April 2022

• 55% of people rely on their memory to manage passwords

• Directorate of Enforcement seizes $725 million from Xiaomi India

• Infosec products of the month: April 2022

• 11:11 Managed Security Services protects customers against malicious activities

• Aimware – 305,470 breached accounts

• Nebulon extends 4-minute ransomware recovery for 2-node management clusters on Dell PowerEdge servers

• Robo-debt Royal Commission, eSafety capabilities and anti-trolling laws on the Australian election agenda

• Data Protection as the Foundation of Trust: Celebrating Privacy Awareness Week in APAC

• GitHub Shares Details About The Stolen OAuth User Tokens Breach

• New RIG Exploit Kit Campaign Drops Redline Stealer Malware

• An npm Registry Bug Allowed Adding Random Maintainers To Malicious Packages

• Musk’s Twitter goal of authenticating all users is good for ending bots but bad for humans

• Devil-Torrents.pl – 63,451 breached accounts

• IT Security News Weekly Summary – Week 17

• IT Security News Daily Summary 2022-05-01

• Cybersecurity and the Pareto Principle: The future of zero-day preparedness

• 5 key industries in need of IoT security

• Researchers Claim RCE Vulnerability Could Affect VirusTotal Platform – VirusTotal Denies

• Multiple “Nimbuspwn” Vulnerabilities Allowed Linux Privilege Escalation

• A New Malware “Prynt” Comes Up As A Lethal Stealer, Keylogger, Clipper

• Google Mandates Play Store App Developers To Disclose The Data They Collect

• New Onyx Ransomware Skips Encrypting Large Files; Instead, Deletes Them

• 11 High-Severity Flaws in Security Products Patched by Cisco

• Is It Safe to Use a VPN on Your Phone?

• 3 Hacking Teams Working Under the Umbrella of TA410 Group

• Cybercriminal Steals $13 Million In DEUS Finance Exploit

• How Russia’s War in Ukraine Affects Its Meddling in Africa

• Synology Alerts Users of Severe Netatalk Bugs in Multiple Devices

• According to Europol, Deepfakes are Used Frequently in Organized Crime

• Synology and QNAP warn of critical Netatalk flaws in some of their products

• Hackers stole +80M from DeFi platforms Rari Capital and Fei Protocol

• Changes In The Use Of LNK Files

• How to Use Windows Security to Keep Your PC Protected

• How to Remove Your Personal Info From Google’s Search Results

• ‘Right to be Forgotten’: Israel Firm Promises to Purge Digital Footprint

• Week in review: Quantum Locker ransomware, most exploited vulnerabilities in 2021

• Security Affairs newsletter Round 363 by Pierluigi Paganini

• Apr 24 – Apr 30 Ukraine – Russia the silent cyber conflict

• Sev1Tech Opens Expanded Facility in Charleston, S.C. with an Eye Toward Growth

• Weekly Update 293

• API Security Weekly: Issue 163

• Work 365 integrates with Datto to simplify subscription billing for MSPs

Generated on 2022-05-08 23:59:37.216056