IT Security News Weekly Summary – Week 22

• IT Security News Daily Summary 2022-06-05

• A New Paradigm for Absolute Zero Trust and Infrastructure Resiliency

• Secure access for a connected world

• Alert Fatigue Puts Your Organization at Risk; Here’s What to do about it

• How SD-WAN Enables Digital Transformation

• Need Micro-segmentation Superpowers? Visit ColorTokens at RSA

• PoC exploits for Atlassian CVE-2022-26134 RCE flaw released online

• Microsoft Disrupts Bohrium Hackers’ Spear-Phishing Operation

• U.S. Agencies Seize Domains Employed for Selling Credentials

• CrowdStrike to Participate in Upcoming Investor Conferences

• Security Affairs newsletter Round 368 by Pierluigi Paganini

• ACY Accidentally Exposes User Data On Web

• The Ukraine Strain in the U.S.-UAE Partnership

• Get a light, powerful cybersecurity device for under $300

• Hackers stole over $250,000 in Ethereum from Bored Ape Yacht Club

• The Hacker Gold Rush That’s Poised to Eclipse Ransomware

• Atlassian rolled out fixes for Confluence zero-day actively exploited in the wild

• Week in review: Macro-less Office documents zero-day bug, FluBot takedown, growing DDoS threats

• Penetration testing

• CrowdStrike Ranks #1 in Worldwide Corporate Endpoint Security 2021 Market Shares

• Mirantis collaborates with Docker to accelerate application design and delivery for developers

• Imperva Customers are protected from Atlassian Confluence CVE-2022-26134

• Titi Cole joins Datadog Board of Directors

• Windstream Enterprise names Michael Fiacco as CRO

• IT Security News Daily Summary 2022-06-04

• Anonymous Hacktivists Leak 1TB of Top Russian Law Firm Data

• LuoYu APT Delivers WinDealer Malware Via Man-on-the-side Attacks

• Android Trojans are After Financial Apps With Over a Billion Downloads

• Why hybrid work is leading to cybersecurity mistakes

• GigNet Chairman and CEO Paul Moore Named to Advisory Committee of Paladin Capital Group

• Artificial Intelligence: Main Weapon to Counter Cyber Attacks

• China’s Draft Cybersecurity Rules Pose Risks For Financial Firms

• Artificial Intelligence: The Main Weapon to Counter Cyber Attacks

• Anonymous: Operation Russia after 100 days of war

• Experts Find Malware Controlling Thousands of Websites in Parrot TDS Network

• Serious RCE Vulnerability In Horde Webmail Threatens User Security

• Researcher Shows How An Attacker Can Hack WhatsApp Via Call Forwarding

• Google May Owe You a Chunk of $100 Million

• Your Tim Hortons Coffee App Knew Where You Were at All Times

• Critical 0-Day Bug in Atlassian Confluence Widely Exploited by Hackers

• Microsoft Found Numerous Bugs Affecting Pre-Built Android Apps From Telcos

• How to Protect Your CRM from Hackers

• Atlassian Releases Patch for Confluence Zero-Day Flaw Exploited in the Wild

• GitLab addressed critical account take over via SCIM email change

• Weekly Update 298

• 6 Ways Modern Technology Is Improving Legal Processes & Legal Profession

• Feeling highly stressed about your job? You must be a CISO

• Build or Buy your own antivirus product

• Clipminer Botnet Made 1.7 Million Dollars From Crypto Mining

• That Job Your Co-Worker Emailed You About? Yeah … No.

• Insight Acquires Hanu Software Solutions, Expands Its Public Cloud Service Capabilities

• (ISC)2 Supports Members with Thoughtful Response to SEC Proposed Rule on Cybersecurity Reporting

• 100 days of war in Ukraine: How the conflict is playing out in cyberspace

• Key insights from ESET’s latest Threat Report – Week in security with Tony Anscombe

• Contrast Security launches free code scanning tool for developers

• CybelAngel adds contextualized inventory technology within its ADM solution

• Scoop: Australian Trading Giant ACY Securities Exposed 60GB of User Data

• LuoYu APT delivers WinDealer malware via man-on-the-side attacks

• SnapAttack partners with Mandiant to protect organizations against cyber threats

• Even Russia’s Evil Corp now favors software-as-a-service

• 6 ways technology can streamline public records requests

• Tutorial: How to Build Your First Node.js gRPC API

• Ransomware coming for IoT devices, researchers warn

• IT Security News Daily Summary 2022-06-03

• Friday Squid Blogging: More on the “Mind Boggling” Squid Genome

• Accessing Ethereum Archive Nodes With Infura

• How to Prevent Software Supply Chain Attacks

• An Actively Exploited Microsoft Zero-Day Flaw Still Has No Patch

• Atlassian Releases New Versions of Confluence Server and Data Center to Address CVE-2022-26134

• CISA Releases Security Advisory on Dominion Voting Systems Democracy Suite ImageCast X

• Adopting MLSecOps for secure machine learning at scale

• 1Password vs Dashlane: Password manager comparison

• FDA: Patch Illumina DNA Sequencing Instruments, Stat

• Atlassian Releases New Versions of Confluence Server and Data Center to Address CVE-2022-26134

• CISA Releases Security Advisory on Dominion Voting Systems Democracy Suite ImageCast X

• Reno pilots blockchain for historic registry

• Zero trust leaders avert 5 cyber disasters per year on average

• What Counts as “Good Faith Security Research?”

• Announcing the winners of the 2021 GCP VRP Prize

• Critical Atlassian Confluence flaw exploited in the wild

• The Land of Data-Centric Security: Before and After

• Non-human Resources

• Italy Alerts Organizations of Incoming DDoS Attacks

• Tech trade group seeks bumps to TMF, agency-based IT funds

• Data gap poses risks for launch site of VA’s new health record

• FEMA leans into data science to ensure equitable disaster aid distribution

• Foxconn Confirms Ransomware Hit Factory in Mexico

• EFF to Inter-American Court of Human Rights: Colombia’s Surveillance of Human Rights-Defending Lawyers Group Violated International Law

• To cut off all nearby phones with these Chinese chips, this is the bug to exploit

• Digital twins are moving into the mainstream

• Actively Exploited Atlassian Zero-Day Bug Allows Full System Takeover

• Microsoft Disables Iran-Linked Lebanese Hacking Group Polonium

• Iconium Software Releases DataLenz v1.3 for IBM zSystems

• YourCyanide Ransomware Propagates With PasteBin, Discord, Microsoft Links

• The best privacy and security apps for Android

• Behind WhatsApp’s splashy privacy push

• Keeper vs LastPass: Which password manager is better for your business?

• Atlassian announces 0-day hole in Confluence Server – update soon!

• Karakurt Team hits North America and Europe with data theft and extortion

• Ten Eleven Ventures Raises $600M Fund for Cybersecurity Investments

• Ransomware: May 2022 review

• Five Steps to a Secure Cloud Architecture

• Kasada Fortifies Anti-Bot Platform to Disrupt “Solver Service” Supply Chain, Defending Organizations Against the Latest and Stealthiest Automated Threats

• Spirent Federal Presents Multiple Technical Papers at Joint Navigation Conference 2022

• Cyware Grows Sales Channel Leadership in North America by Bringing Aboard Industry Veterans Matt Courchesne and Shashi Nair

• How to Prevent Burnout Among Cybersecurity Professionals Before, During and After a Breach

• New ERMAC 2.0 Trojan Variant Actively Targeting Android Users

• Fake Updates Continue To Be A Digital Risk: What To Do?

• Digital Experience Monitoring: More Important Than Ever

• Attackers are leveraging Follina. What can you do?

• Healthcare providers prefer paying ransom in ransomware attacks

• Conti reforms into several smaller groups, are they now more dangerous than ever?

• Authorities Take Down SMS-based FluBot Android Spyware

• Linux Cybersecurity Education & Training is Integral to Growing Your Career

• Zero-Day Exploitation Of Atlassian Confluence

• Evil Corp Pivots LockBit To Dodge U.S. Sanctions

• Clipminer Rakes In $1.7m In Crypto Hijacking Scam

• FDA Urges Patch Of Illumina Devices

• U.S. Sanctions Curb Chinese Technology Exports to Russia

• Return of the Angry Political Man

• Deadly Secret: Electronic Warfare Shapes Russia-Ukraine War

• Chainguard Bags Massive $50M Series A for Supply Chain Security

• GitLab Issues Security Patch for Critical Account Takeover Vulnerability

• Clipminer Botnet already allowed operators to make at least $1.7 Million

• Unpatched Atlassian Confluence vulnerability is actively exploited

• Software developers, how secure is your software ?

• Why Network Object Management Is Critical for Managing Multicloud Network Security

• Actively Exploited Microsoft Zero-Day Still Doesn’t Have a Patch

• Chinese LuoYu Hackers Using Man-on-the-Side Attacks to Deploy WinDealer Backdoor

• LockBit Malware Is Now Used by Evil Corp

• Parental controls: What they can and can’t do for you

• Internet Safety Month: Avoiding the consequences of unsafe Internet practices

• Expert Posts About Blogger’s CSP Flaw

• IoT and OT Impacted by Forescout Proof-of-Concept Ransomware Attack

• CVE-2021-26084: Critical Atlassian Confluence Flaw Exploited in the Wild

• Old Hacks Die Hard: Ransomware, Social Engineering Top Verizon DBIR Threats – Again

• CISA Warns of Critical Vulnerabilities in Illumina Genetic Analysis Devices

• Meta Sees Huge Rise In Hate Speech And Violent Content Across Its Platforms In April

• Over 3.6M MySQL Servers Found Unguarded Online

• For Ransomware, Speed Matters

• GM’s Cruise Granted San Francisco Permit For Self-Driving Taxis

• Laminar doubles funding for cloud data security to $67M

• Evil Corp Pivots LockBit to Dodge U.S. Sanctions

• Malwarebyes vs Norton: Compare top antivirus software solutions

• Zero-day Exploited to Target Atlassian Confluence

• Clipminer rakes in $1.7m in crypto hijacking scam

• Lebanese Threat Actor ‘Polonium’ Targets Israeli Organizations

• Industrial Spy Is Now Targeting Corporate Websites to Display Ransom Notes

• The Impact of Technology on Legal Processes for Personal Injury

• The Fight Against Robocall Spam and Scams Heats Up in India

• Healthcare organizations face rising ransomware attacks – and are paying up

• New York Signs Bill To Ban Certain Crypto Mining Operations

• TXOne Unveils New OT Network Security Appliance for SMB Manufacturers

• Researchers Uncover Malware Controlling Thousands of Sites in Parrot TDS Network

• Build an Effective Network Defence by Using NDR

• How to Prevent Cyber Theft?

• Atlassian Confluence Servers Hacked via Zero-Day Vulnerability

• Alert! Unpatched critical Atlassian Confluence Zero-Day RCE flaw actively exploited

• Unpatched Atlassian Confluence zero-day exploited, fix expected today (CVE-2022-26134)

• Musk ‘Super Bad’ Feeling About Economy, Wants To Axe 10,000 Tesla Staff

• Microsoft Blocks Iran-linked Lebanese Hackers Targeting Israeli Companies

• How to Troubleshoot Home Internet

• Interior issues draft cloud RFP valued at up to $1B

• DDoS attackers continue to innovate, devising new threats and altering attack strategies

• Singapore officially launches digital platform to ease supply chain data flow

• Atlassian: Unpatched critical flaw under attack right now to hijack Confluence – and it’s been there since 2013

• Microsoft blocked Polonium attacks against Israeli organizations

• Twitter fined $150M for selling user data

• White House internships will soon be paid

• Vulnerabilities on UNISOC Processors loaded Android Phones

• Russia to the cyber-attack United States with the help of its Ransomware gangs

• Why You Should Care About Fitness Tracker Security

• Seniors: How to Keep Your Retirement Safe from Online Scams

• New infosec products of the week: June 3, 2022

• Why are many businesses still not using a password manager?

• 5 ways to prevent Ransomware attacks

• Suspicious behavior: OTX Indicator of Compromise – Detection & response

• Vishing attacks: What they are and how organizations can protect themselves

• Hackers Exploiting Unpatched Critical Atlassian Confluence Zero-Day Vulnerability

• 40% of enterprises don’t include business-critical systems in their cybersecurity monitoring

• Intelligence is key to strategic business decisions

• Armis Asset Vulnerability Management enables organizations to prioritize their mitigation efforts

• Atlassian Releases Security Advisory for Confluence Server and Data Center, CVE-2022-26134

• Traceable AI introduces API Catalog solution to help organizations manage API-related security threats

• SecurityScorecard platform enhancements empower customers to manage and reduce cyber risks

• F5 adds new capabilities to provide customers with more control over modern application architectures

• Parallels RAS 19 improves deployment flexibility for workloads and optimizes data security

• Appgate SDP 6.0 accelerates zero trust implementations for enterprises

• Atlassian Releases Security Advisory for Confluence Server and Data Center, CVE-2022-26134

• VMware Workspace ONE updates enable proactive security for all employee devices

• DarkOwl Ransomware API offers insight into content from ransomware websites hosted on the darknet

• Atlassian Releases Security Advisory for Confluence Server and Data Center, CVE-2022-26134

• Swissbit launches CFexpress 2.0 Type B cards for industrial use

• Arcserve OneXafe 4500 Series delivers increased data security with larger data store

• ESET Threat Report T 1 2022

• Arista Networks announces next generation 7130 Series systems designed for demanding in-network apps

• Solarium successor wants the White House to lead on cyber workforce strategy

• Atlassian: Unpatched critical flaw under attack right now to hijack Confluence

• FBI, CISA: Don’t get caught in Karakurt’s extortion web

• Space Force preps to take on Army, Navy SATCOM this year, official said

• CISA Adds One Known Exploited Vulnerability (CVE-2022-26134) to Catalog  

• Atlassian Releases Security Updates for Confluence Server and Data Center, CVE-2022-26134

• Asimily collaborates with Extreme Networks to secure IoT devices for healthcare providers

• Okta and Secure Code Warrior join forces to reduce the risk of developers committing insecure code

• Spirion partners with Spire Solutions to address enterprise data privacy needs in the MEA region

• CISA Adds One Known Exploited Vulnerability (CVE-2022-26134) to Catalog  

• Atlassian Releases Security Updates for Confluence Server and Data Center, CVE-2022-26134

• Bitwarden integrates with three email forwarding services to add another layer of security for users

• FBI Seizes WeLeakInfo, IPStress and OVH-Booter Cybercrime Portals

• Millions of MySQL Servers are Publicly Exposed

• Mark Clayton joins Datto as VP for Asia Pacific

• Obsidian Security strengthens engineering team with four new senior hires

• Accenture appoints Jack Azagury as Group Chief Executive – Strategy & Consulting

• Logicalis US hires Mohammed Ibrahim as VP of Managed Services

• Conti spotted working on exploits for Intel Management Engine flaws

• 45% of cybersecurity professionals have considered quitting the industry

• How to manage your security questions for a local Windows account

• Axon Must Not Arm Drones with Tasers

• IT Security News Daily Summary 2022-06-02

• May ransomware attacks strike municipal governments, IT firms

• Cerberus Sentinel Completes Acquisition of Creatrix, Inc.

• Remotely Controlling Touchscreens

• This dangerous botnet has found a new way to infect your endpoints

• New Microsoft Office zero-day used in attacks to execute PowerShell

• CISA Adds 75 Flaws to Known Vulnerability Catalog in 3 Days

• Three Nigerian men arrested in INTERPOL Operation Killer Bee

• Remembering Apple’s Newton, 30 years on

• Guidance for CVE-2022-30190 Microsoft Support Diagnostic Tool Vulnerability

• With this VPN and 90+ training courses, take cybersecurity to the next level

• Gurucul Launches Cloud-Native SOC Platform Pushing the Boundaries of Next-Gen SIEM and XDR with Identity Threat Detection and Response

• Intel Chipset Firmware Actively Targeted by Conti Group

• Research Reveals 75% of CISOs Are Worried Too Many Application Vulnerabilities Leak Into Production, Despite a Multi-Layered Security Approach

• Cybersecurity is a pillar of strength in this market, and it’s been oversold, says Wedbush’s Ives

• 45% of cybersecurity professionals have considered quitting the industry due to stress, research reveals

• Automated buses will still need skilled human operators

• pfSense vs Netgear router: What are the main differences?

• Cyber threats in gaming—and 3 tips for staying safe

• Majority of CIOs say their software supply chains are vulnerable, execs demand action

• CyberQ Technologies Inc. Launches Managed AI for Splunk UBA Customers

• US Sanctions Force Evil Corp to Change Tactics

• Microsoft Philanthropies Collaborates With WiCyS to Help Close the Cybersecurity Skills Gap

• New Cloud Pricing and Products Proof of RSA’s Transformation

• Phishers Having a Field Day on WhatsApp, Telegraph

• Update on (ISC)² Entry-Level Cybersecurity Certification Pilot

• Improve Azure storage security with access control tutorial

• Microsoft Leads in Exploited Vulnerabilities; Office is Latest Target

• Threat Detection Software: A Deep Dive

• Enhance Network Resiliency with Contingency DDoS Protection

• San Francisco Police Nailed for Violating Public Records Laws Regarding Face Recognition and Fusion Center Documents

• Apple To Shift Some iPad Production To Vietnam – Report

• Webroot managed detection and response (MDR) purpose-built for MSPs

• LockBit ransomware attack impacted production in a Mexican Foxconn plant

• Singapore Ups Investemnt in Quantum Technology, to Stay Ahead of Security Risks

• States must ramp up to administer broadband funding

• Turbulent Cyber Insurance Market Sees Rising Prices and Sinking Coverage

• CISA Updates Advisory on Threat Actors Chaining Unpatched VMware Vulnerabilities

• CISA Releases Security Advisory on Illumina Local Run Manager

• Turns Out It Is Not 85 Percent

• Drone Strikes and Evidence-Based Counterterrorism

• Has the Time for an EU-U.S. Agreement on E-Evidence Come and Gone?

• Cybersecurity is recession resistant, says Truist’s Joel Fishbein

• Introducing EDR for Linux: Remediating and isolating threats on Linux servers

• ExpressVPN Removes VPN Servers in India Rejecting Data Collection Law

• Microsoft: Next version of Exchange Server not until 2025

• Exiled Iran Group Claims Tehran Hacking Attack

• Report: Clipminer Botnet Operators Rake in $1.7 Million

• CISA Updates Advisory on Threat Actors Chaining Unpatched VMware Vulnerabilities

• CISA Releases Security Advisory on Illumina Local Run Manager

• Dear Europe, here again are the reasons why scanning devices for unlawful files is not going to fly

• Conti leaked chats confirm that the gang’s ability to conduct firmware-based attacks

• Introducing Malwarebytes DNS Filtering module: How to block sites and create policy rules

• ‘Clipminer’ Malware Actors Steal $1.7 Million Using Clipboard Hijacking

• Building America’s Cybersecurity Infrastructure

• ABS Consulting Among First Certified as Nozomi Networks MSSP Elite Partner to Provide Advanced OT and ICS Security

• SentinelOne Announces Integration with AWS Security Hub

• The No-code Security Automation Industry’s First Global Partner Program is Launched by Award-Winning Torq

• How to counter smart home device breaches

• Building trust in a Zero-Trust security environment

• Why SMEs Should Worry About Cybersecurity in 2022

• Logging and Security Analytics Firm Devo Banks New $100 Million Investment

• Exposing POLONIUM activity and infrastructure targeting Israeli organizations

• LockBit ransomware strikes Foxconn Electronics of Mexico

• Is your Windows license legal? Should you even care?

• S3 Ep85: Now THAT’S what I call a Microsoft Office exploit! [Podcast]

• Multiple Vulnerabilities Identified in NSW Digital Driver License

• Oracle’s Cerner Purchase Given EU Antitrust Blessing

• Follina abuses Microsoft Office to execute remote code

• Dutch Used Pegasus Spyware on Most-Wanted Criminal: Report

• Millions of Budget Smartphones With UNISOC Chips Vulnerable to Remote DoS Attacks

• ‘Clipminer’ Malware Actors Steal $1.7 Million Using Clipboard Hijackingp

• The Chatter Podcast: The Secrets of Gay Washington with Jamie Kirchick

• Elon Musk Return To Office Demand Opposed By German Union

• Types of Web Hosting and How Much Does It Cost To Host A Website?

• Experts Warn Against Ransomware Hitting Government Organizations

• Hundreds of Poorly Secured Elasticsearch Database Targeted in Ransom Attacks

• Incognia expands focus to combat increased identity fraud

• How to stop spam messages on your iPhone fast

• Yet another zero-day (sort of) in Windows “search URL” handling

• A Ransomware Group Claims to Have Breached the Foxconn Factory

• Toshiba Receives Multiple Proposals, As It Mulls Strategic Options

• Recovering Ransom Payments: Is This the End of Ransomware?

• Cybercriminals Expand Attack Radius and Ransomware Pain Points

• Cloud Data Security Startup Laminar Raises $30 Million

• Fighting Follina: Application Vulnerabilities and Detection Possibilities

• While There Be More Cyber Attacks Due To Ukraine Conflict?

• 57% of All Digital Crimes in 2021 Were Scams Says Group IB

• US Authorities Seize Domains Selling Stolen Data, DDoS Services

• Neutralizing Novel Trickbot Attacks With AI

• Conti Leaks Reveal Ransomware Gang’s Interest in Firmware-based Attacks

• An international police operation dismantled FluBot spyware

• Costa Rica Public Health Service Ransomware Attack

• EnemyBot Malware Adds Exploits For Critical VMware, F5 BIG-IP Flaws, What Do You Think?

• Devo Technology announces $100M in funding to develop ‘autonomous SOC’

• Cloud Security Startup JupiterOne Lands $70 Million at ‘Unicorn’ Valuation

• US Warns Organizations of ‘Karakurt’ Cyber Extortion Group

• Leaks Show Conti Ransomware Group Working on Firmware Exploits

• Healthcare Pays More Ransom Demands, But Get Less Data Back

• Coralogix Raises $142 Million for Data Observability Platform

• Researchers Demonstrate Ransomware for IoT Devices That Targets IT and OT Networks

• JupiterOne raises $70M to secure the cloud attack surface

• Scammers Target NFT Discord Channel

• VMware launches ‘threat intelligence cloud’ Contexa

• ExpressVPN Removes Servers in India After Refusing to Comply with Government Order

• Dell’Oro Names Cisco the 2021 Overall SASE Market Share Leader

• SECURITY ALERT:  Zero-Day Microsoft Support Diagnostic Tool Vulnerability CVE-2022-30190 Enables Remote Code Execution

• New RuneScape Phishing Scam Aimed at Stealing Accounts and In-game Item Bank PINs

• The Evolution of Video Slots Technology Over the Last Decade

• Dear Europe, once again here are the reasons why scanning devices for unlawful files is not going to fly

• Here is how to protect Windows PCs from Protocol vulnerabilities

• International Authorities Take Down Flubot Malware Network

• Automation. Where do We Go from Here?

• Why Ransomware Timeline Shrinks By 94%?

• Sheryl Sandberg To Leave Facebook After 14 Years

• Check Point Research unveils vulnerability within UNISOC baseband chipset

• Access Brokers and Ransomware-as-a-Service Gangs Tighten Relationships

• ExpressVPN’s Response To Changing Indian VPN Directive

• How to Find Shippers for Your Produce Business

• Being prepared for adversarial attacks

• Critical flaw found inside the UNISOC smartphone chip

• Cybercriminals Hold 1,200 Unsecured Elasticsearch Databases for Ransom

• 10 Companies Chosen to Test Next-Generation Cybersecurity Technologies

• Critical UNISOC Chip Vulnerability Affects Millions of Android Smartphones

• WinDealer dealing on the side

• Microsoft Office apps are vulnerable to IDN homograph attacks

• Microsoft collaborates with Tenable to support federal cybersecurity efforts

• US Conducts Offensive Cyber Operations To Support Ukraine

• 7 Convincing Reasons to Replace Your VPN for ZTNA

• Singapore mandates ‘kill switch’ for banks as safeguard against online scams

• Concentric’s AI technologies simplify and automate data security

• What Is Model Transformation?

• Waiting for WWDC – Intego Mac Podcast Episode 242

• What to do if your Android Phone gets lost

• Europol seizes Flubot malware operations and infrastructure

• SideWinder Hackers Use Fake Android VPN Apps to Target Pakistani Entities

• CIOs and network engineers rank cybersecurity among the biggest risks

• Super-spreader FluBot squashed by Europol

• 3 Ways AI Technology Is Reshaping The Legal Profession

• DOJ Seizes 3 Web Domains Used to Sell Stolen Data and DDoS Services

• How to support women in cybersecurity

• Cyber Risk Management Strategies from Arjo CIO

• A critical RCE flaw in Horde Webmail has yet to be addressed

• ExpressVPN moves servers out of India to escape customer data retention law

• A closer look at the 2022 Microsoft Vulnerabilities Report

• Bitwarden’s username generator now supports SimpleLogin, AnonAddy, and Firefox Relay email alias services

• Talking to children about the internet: A kid’s perspective

• The cyber posture of the U.S. Federal Government

• SentinelOne Announces First Quarter Fiscal Year 2023 Financial Results

• Media Alert: Intel at RSA Conference 2022, BSides SF

• Journey Into Cybersecurity – Conversations with Cyber Newcomers, Part 1

• (ISC)² Advocates for Membership – Shares Opinions on Proposed UK Standards and Pathway

• Challenges that impact the Cybersecurity talent pipeline

• Massive shadow code risk for world’s largest businesses

• HR Manager of Private Company Duped of ₹28 Lakh

• Language-based BEC attacks rising

• Top CVE Trends — And What You Can Do About Them

• Autonomous vehicles can be tricked into erratic driving behavior

• Over 3.6 Million MySQL Servers are Publicly Exposed on The Internet

• Horizon3.ai extends its NodeZero platform to include both internal and external penetration testing

• Semperis Purple Knight Post-Breach accelerates malware-free recovery from Active Directory attacks

• LookingGlass Suite enables organizations to identify relevant cybersecurity issues

• Tufin Orchestration Suite R22-1 increases security and compliance across the hybrid environments

• SecurityMetrics Pulse helps businesses detect and monitor cyber threats

• ESET NetProtect suite protects customer devices connected to Telco and ISP networks

• SecureAuth Arculix strengthens passwordless authentication for enterprises

• US ran offensive cyber ops to support Ukraine, says general

• Kingston Digital launches hardware-encrypted USB drive for data security

• US conducted offensive cyber ops to support Ukraine against Russia, says general

• Ransomware attack turns 2022 into 1977 for Somerset County

• Swimlane partners with NTT DATA to enhance customer’s risk posture with actionable intelligence

• Mandiant collaborates with Interos to advance supply chain cyber risk management for enterprises

• More than a quarter of Americans fell for robocall scam calls in past year

• Netskope acquires WootCloud to help customers protect IoT devices on their networks

• Kroll acquires Crisp to accelerate its digital service capabilities

• Lookout acquires SaferPass to deliver online identity solutions for consumers and businesses

• ReliaQuest to acquire Digital Shadows for $160 million

• LDRA integrates with Microsoft Azure DevOps to improve ‘shift left’ strategy for organizations

• TrustPid is another worrying, imperfect attempt to replace tracking cookies

• New PoC Shows IoT Devices Can Be Hacked to Install Ransomware on OT Networks

• What is Software Supply Chain Security?

• Managing Extended Software Supply Chain Risks

• Darktrace’s Brianna Leddy on How Ransomware Groups Adapt to New Defenses

• Nucleus Security expands leadership team with new appointments

• Coralogix raises $142 million to expand its offerings into further markets

• Paladin Capital Closes $372 Million Cyber Fund II

• David Lucey joins Biscom as CEO

• Getting ahead of the next pandemic

• New York: Tell Your Assemblymembers to Pass This Landmark Repair Bill

• IT Security News Daily Summary 2022-06-01

• Database for a secure EV battery supply chain

• FluBot Android Malware Operation Disrupted, Infrastructure Seized

• Hunting for Threats Using Network Traffic Flows

• Feds Seize Domains Dealing Stolen Personal Data

• Darktrace’s David Masson on What Attacks on Critical Infrastructure Look Like

• 12K Misconfigured Elasticsearch Buckets Ravaged by Extortionists

• Netenrich Debuts Resolution Intelligence Secure Digital Operations Platform at RSA 2022

• NetSPI’s New Breach and Attack Simulation Enhancements Help Organizations Achieve Behavior-Based Threat Detection

• New XLoader Botnet version uses new techniques to obscure its C2 servers

• Foreign Equities and Informational Restraints on U.S. Prosecutors

• Tell us about your experience with the Public Service Loan Forgiveness program

• NanoLock Combats Cyber Chaos with Device-Level Industrial Cybersecurity

• ReliaQuest to Acquire Digital Shadows

• Netskope Acquires WootCloud, Extending Zero Trust Capabilities to Enterprise IoT

• 3 ways DNS filtering can save SMBs from cyberattacks

• 3 Gmail tools that stop hackers from breaking into your email

• Video: A Civil Discourse on SBOMs

• Why Commerce went against Microsoft on rule to control cyber exploits

• GSA shares specs on governmentwide cloud BPA

• All eyes on the FCC as deadline for 911 overhaul approaches

• Wray: FBI Blocked Planned Cyberattack on Children’s Hospital

• How zero trust unifies network virtualization

• Thoughts on the Michael Sussmann Verdict

• First Amendment Absolutism and Florida’s Social Media Law

• The Emergence of Dynamic Threat Hunting

• INTERPOL Arrests Three Nigerians in Relation with a Global Scam

• Elon Musk Tells Tesla Staff To Return To Work Or Resign

• Feds’ vaccine mandate enforcement could be days away, but agencies are not yet prepping

• Singapore aims to drive digital trust with $36.3M research facility

• Best VPN for streaming (2022)

• Apple Attacks Facebook Over Privacy Practices In New Ad

• Clever — and Exploitable — Windows Zero-Day

• Using Python to unearth a goldmine of threat intelligence from leaked chat logs

• Why edge and endpoint security matter in a zero-trust world

• Experts reveal the average ransomware attack takes just 3 days

• Five Steps to Prepare Data for a Zero-Trust Security Model

• How the Pentagon plans to manage inflation costs in contracts

• What are digital twins? A pair of computer modeling experts explain

• Want to advance your career in tech? Focus on these three areas

• Europol Confirms Takedown of SMS-based FluBot Spyware

• Help Organizations to Mitigate Risk in Microsoft 365 with ‘Vectra Protect’

• Zero Trust Research Reveals Nearly Half of All Security Leaders Do Not Believe They Will Be Breached Despite Increasing Attacks and Adoption of Zero Trust Strategies

• Enhanced Threat Intelligence Portal Provides Consolidated Access to Kaspersky Threat Intelligence Expertise

• 10 No-BS Tips for Building a Diverse and Dynamic Security Team

• Security at the Edge: Why It’s Complicated

• Bad News: The Cybersecurity Skills Crisis Is About To Get Even Worse

• Microsoft Releases Workaround For 1-Click 0-Day Under Active Attack

• Industrial IoT Ransomware Attacks Control Systems Directly

• EnemyBot Malware Adds Enterprise Flaws To Exploit Arsenal

• Tim Horton’s App Tracked Movement In Violation Of Privacy Laws

• FAQ: Mitigating Microsoft Office’s ‘Follina’ zero-day

• Phishing mail claims a 3D Secure upgrade is required

• U.S. Citizens Lost $39.5 Billion to Phone Frauds Alone Over the Past Year

• Report: Cybersecurity Skills Gap Creates Vulnerabilities

• CMMC 2.0: key changes

• Unofficial Micropatch for Follina Released as Chinese Hackers Exploit the 0-day

• Pentagon issues guidance on inflation costs for contracting officers

• How to improve cyber attack detection using social media

• How ransomware kill chains help detect attacks

• StorCentric Launches Nexsan EZ-NAS -Network-Attached Storage for SMBs and Enterprise Edge Deployments

• Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

• Microsoft Now Permits IT Administrators to Evaluate and Deactivate Inactive Azure AD users

• Industrial Open Automation Software filled with vulnerabilities

• ChromeLoader – A New Browser Hijacking Malware Spreading Globally

• Amazon Hits Out At US Congress Antitrust Bill

• USDA launches outreach project for key nutrition program

• Microsoft sets multi-factor authentication as default for all Azure AD customers

• ReliaQuest to Buy Digital Shadows for $160 Million

• Connecticut Becomes Fifth US State to Enact Consumer Privacy Law

• Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

• Is SASE the Solution for Third-Party Risk?

• Why cloud security matters and why you can’t ignore it

• Don’t let your cloud cybersecurity choices leave the door open for hackers

• Cloud computing security: Where it is, where it’s going

• Cloud computing security: Five things you are probably doing wrong

• Cloud computing dominates. But security is now the biggest challenge

• Karakurt Data Extortion Group

• Karakurt Data Extortion Group

• SecureX and Secure Firewall: Integration and Automation to Simplify Security

• The Law of Armed Conflict in 2040? A New Volume

• Community Activists Reach Settlement with Marin County Sheriff for Unlawfully Sharing Drivers’ Locations with Out-Of-State and Federal Agencies

• Hearing Wednesday: EFF Testifies Against SFPD for Violating Transparency Laws

• TomTom Confirms Hundreds Of Job Losses

• Ordr Raises $40 Million to Secure Connected Devices

• Unpatched Vulnerability Exposes Horde Webmail Servers to Attacks

• Firefox 101 is out, this time with no 0-day scares (but update anyway!)

• Karakurt Data Extortion Group

• Karakurt Data Extortion Group

• New Unpatched Horde Webmail Bug Lets Hackers Take Over Server by Sending Email

• North Orange County Community College District Suffered Ransomware Attack

• IBM X-Force Finds New Ransomware Group Black Basta

• CISOs say ransomware is the least concerning threat to enterprises

• Implementing wireless security in the enterprise

• How to design architecture for enterprise wireless security

• FluBot Android Spyware Taken Down in Global Law Enforcement Operation

• Distinguishing AI Hype From Reality in SecOps

• FluBot Android Spyware Taken Down by Global Law Enforcement Operation

• SafeBreach Expands Global Reach with Launch in EMEA

• Berkshire Bank Selects Salt Security for API Security as its Business Operations Scale

• YODA Tool Found ~47,000 Malicious WordPress Plugins Installed in Over 24,000 Sites

• Experts uncovered over 3.6M accessible MySQL servers worldwide

• WhatsApp accounts hijacked by call forwarding

• Apple To Make Many Changes To iPhone, iPad Operating Systems – Report

• Coralogix raises $142M for lightweight full-stack observability platform

• Ordr raises $40M for IoT monitoring tool

• Best Software Development Tools

• Twice as Many Healthcare Organizations Now Pay Ransom

• The United States Department of Justice Will no Longer Prosecute Ethical Hackers

• Ransomware Group Claims to Have Breached Foxconn Factory

• Europol Announces Takedown of FluBot Mobile Spyware

• FluBot takedown: Law enforcement takes control of Android spyware’s infrastructure

• Coralogix Raises $142M for lightweight full-stack observability platform

• Researchers Devise Attack Using IoT and IT to Deliver Ransomware Against OT

• Vendor Refuses to Remove Backdoor Account That Can Facilitate Attacks on Industrial Firms

• The Race to Hide Your Voice

• Can iPhone be hacked when turned off?

• Countdown to Ransomware: Analysis of Ransomware Attack Timelines

• Lookout acquires password management company SaferPass

• Microsoft Releases Workaround for ‘One-Click’ 0Day Under Active Attack

• April 2022 Cyber Attacks Statistics

• Tech Firms Urged By Ofcom To Do More To Protect Women Online

• Chinese Threat Actors Exploiting ‘Follina’ Vulnerability

• New XLoader Botnet Version Using Probability Theory to Hide its C&C Servers

• China-linked TA413 group actively exploits Microsoft Follina zero-day flaw

• Watch out for phishing emails that inject spyware trio

• CTV Ad Fraud: Everything You Need to Know

• Multiple Vulnerabilities Found In Open Automation Software (OAS) Platform

• SecureAuth launches continuous passwordless authentication solution

• Turkish airline suffers 6.5TB data leak

• Darknet Market ‘Versus’ Shutting Down After Critical Exploit Leak

• US Supreme Court Blocks Controversial Texas Social Media Law

• How to Apply the Risk Management Framework (RMF)

• Nearly Three-Quarters of Firms Suffer Downtime from DNS Attacks

• SMSFactory Android Trojan producing high costs for victims

• Using Wi-Fi 6 to Power Hyper-Aware Healthcare Facilities

• Scanning Finds Over 3.6 Million Internet-Accessible MySQL Servers

• 7 Fascinating Gender-Related Emojis That You Should Know

• 7 Best Music Streaming Services That You May Enjoy Using

• Euro Cops Bust $47m Money Laundering Operation

• Scams account for most of all financially motivated cybercrime

• Hospitals are for healing humans. But protecting and healing hospitals needs machines

• Hive ransomware gang hit Costa Rica public health service

• What if ransomware evolved to hit IoT in the enterprise?

• Chinese Hackers Begin Exploiting Latest Microsoft Office Zero-Day Vulnerability

• Amazon to mimic Walmart in AI drone delivery

• Ransomware news trending on Google

• Paving your path to SASE: 4 tips for achieving connectivity and security

• How cybercriminals are targeting executives at home and their families

• Trellix Finds Workforce Shortage Impacts 85% of Organizations’ Cybersecurity Posture

• Xiologix Wins an Award for Top Emerging Managed Security Services Company for 2022 by Cyber Security Review

• NTT DATA Selects Swimlane to Deliver Low-Code Security Automation in EMEA

• (ISC)² Entry-Level Cybersecurity Certification Pilot Exam Reaches 1,000 Exam Milestone

• The 3 Biggest DDoS Attacks Imperva Has Mitigated

• DDoS threats growing in sophistication, size, and frequency

• Forescout proof-of-concept ransomware attack affects IoT, OT

• Contactless is reigning: Consumers can’t even remember their PIN

• EnemyBot malware adds enterprise flaws to exploit arsenal

• Almost half of Australians are back in the office and don’t want to be there: RMIT Online

• Building a More Secure Cloud: 5 Strategies for 2022

• Infosec products of the month: May 2022

• Vulnerabilities in Open Automation Software Platform Let Attackers Execute Remote Code

• Australian National Disability Insurance Scheme provider breached and treating its database as compromised

• Cyber Agency: Voting Software Vulnerable in Some States

• DDN improves data security and performance with AI software enhancements

• Orange Business Services launches Service Manage-Watch to enhance global IT performance supervision

• Costa Rica Public Health System Targeted by Ransomware

• PQShield collaborates with Microchip Technology to address quantum threat

• CyberCube and Kroll launch a new cyber incident response service for clients

• Armis partners with Torq to offer a module for security automation and threat response workflows

• ThriveDX acquires LUCY Security to expand cyber training offerings for enterprises

• What You Need to Know About Open-Source Software Security

• Shailesh Rao and Daniel Bernard join Authomize Advisory Board

• Seemplicity emerges from stealth and raises $32 million to help security teams remediate risk

• Picus Security achieves SOC 2 Type 2 compliance

• Entrust expands its PKIaaS offerings to data centers located in the EU

• Corsight AI appoints Moshe Fink as CFO

• IRS closes in on release of $2.6B software solicitation

• A step closer to seamless transit

• States look to electric utilities for broadband connections

• ESET Launches NetProtect Suite of Advanced Cybersecurity Offerings for Telcos and ISPs

• IT Security News Monthly Summary – June

• IT Security News Daily Summary 2022-05-31

• How process mining uncovers workflow bottlenecks

• 3.6M MySQL Servers Found Exposed Online

• Biometric Data Offers Added Security — But Don’t Lose Sight of These Important Risks

• New Microsoft Zero-Day Attack Underway

• Surefire Cyber Launches to Help Cyber Insurance Ecosystem from Response to Resilience, with $10 Million in Funding by Forgepoint Capital

• Threat profile: RansomHouse makes extortion work without ransomware

• Cops’ Killer Bee stings credential-stealing scammer

• How to get started with multi-cloud threat hunting

• Costa Rica May Be Pawn in Conti Ransomware Group’s Bid to Rebrand, Evade Sanctions

• Runescape phish claims your email has been changed

• Seemplicity raises $32M to launch productivity platform for security teams

• “Follina”- Zero-day vulnerability in Microsoft Office: Check Point Customers remain protected

• Report details 5G security assessment process

• Surefire Cyber Tackles Incident Response With $10M Series A Funding

• Three Nigerian Users of Agent Tesla RAT Arrested

• Microsoft Releases Workaround Guidance for MSDT “Follina” Vulnerability

• Cybersecurity Automation: How Can Businesses Benefit From It

• Why small businesses may want to pursue virtual CISO

• Fewer DDoS Attacks in 2021, Still Above Pre-Pandemic Levels

• Microsoft Releases Workaround Guidance for MSDT “Follina” Vulnerability

• Third of UK Firms Have Experienced A Security Breach Since 2020

• Vodafone Advertising ID System

• Microsoft’s identity services huddle under Entra umbrella

• New CyberCatch Research Discovers Alarming Increase in Cyber Vulnerabilities for Small and Medium Sized Businesses in US and Canada

• Microsoft Vulnerability Named Follina

• FBI warns of education sector credentials on dark web forums

• A New York man was Sentenced for Purchasing Stolen Cards & Assisting the Infraud Organization

• Singapore to pilot digital asset trading with blockchain, tokenisation

• Microsoft Acknowledges Zero-Day, Follina Office Vulnerability, Suggests Fix

• Stay Ahead of the Latest Threats with Threat Family Tracking

• Magniber Ransomware Now Targets Windows 11 Machines

• Australian Digital Driving Licenses Can Be Defaced In Minutes

• Guardian Launches Tor Onion Service

• ChromeLoader Browser Hijacker Provides Gateway To Bigger Threats

• The Underground Company That Hacks iPhones For Ordinary Consumers

• Germany Issues Fresh Warning To Banks Of Cyber Attacks Due To Ukraine War

• Italy on high alert as Russian Killnet group starts Cyber Attacks

• Pegasus Airlines Leaked 6.5TB of Data in AWS S3 Bucket Mess Up

• Microsoft launches Entra: A new identity and access family of products

• Microsoft zero day exploited in the wild, workarounds released

• Zyxel: Firewalls, Access Points, and Controllers are Vulnerable

• Speek! is a new encrypted chat service that uses Tor to offer secure communication

• 3 Ways to Attract Top Cybersecurity Talent to the Federal Government

• Comment: DuckDuckgo Browser Allows Microsoft Trackers Due To Search Agreement

• Twitter to Pay $150M Penalty for Selling Customers’ Data

• Microsoft launches Entra, a new identity and access family of products

• SideWinder carried out over 1,000 attacks since April 2020

• Broadcom Meta VR Chip Deal ‘Could Be Worth $1bn A Year’

• To Retain Cybersecurity Employees, Know What Drives Them

• Compromised academic credentials available on cybercriminal platforms

• How to Keep Your Enterprise Safe From Digital Supply Chain Attacks

• Greece, Saudi Arabia ‘To Build Europe-Asia Data Link’

• Cybersecurity Training Firm Hoxhunt Raises $40 Million

• Mysterious “Follina” zero-day hole in Office – here’s what to do!

• Secure access for a connected world—meet Microsoft Entra

• Streamlining employee onboarding: Microsoft’s response to the Great Reshuffle

• CIOs largely believe their software supply chain is vulnerable

• Serious Argo CD Vulnerability Could Allow Admin Access To The Attackers

• Critical Vulnerability Found In Screencastify Chrome Extension

• Microsoft announces new ‘family’ of identity and access management tools

• Latest Mobile Malware Report Suggests On-Device Fraud is on the Rise

• Examining State Bills on Data Brokers

• EnemyBot Malware Targets Web Servers, CMS Tools and Android OS

• Seemplicity Launches With Cybersecurity Productivity Platform, $32 Million in Funding

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Malware Targeting Linux Becoming More Prevalent

• Is quantum teleportation the future of secure communications?

• Journey Into Cybersecurity – Conversations with Cyber Newcomers, Part 2

• Zero-Day ‘Follina’ Bug Lays Microsoft Office Open to Attack

• ChromeLoader Browser Hijacker Provides Gateway to Bigger Threats

• Seventh Member of International Cyber Fraud Ring Sentenced to Prison

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Russian Oligarchs ‘Hired Israeli Private Eye’ To Carry Out Hacks

• This zero-day Windows flaw opens a backdoor to hackers via Microsoft Word. Here’s how to fix it

• Singapore ups investment in quantum computing to stay ahead of security threats

• Microsoft shared workarounds for the Microsoft Office zero-day dubbed Follina

• The Limits of Cyber Operations in Wartime

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• E-Recycler Attero Plans $1bn Expansion Into Electric Vehicles

• You Need to Update iOS, Chrome, Windows, and Zoom ASAP

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Microsoft Confirms Exploitation of ‘Follina’ Zero-Day Vulnerability

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Cybersecurity Doesn’t Have to be a Game of Last Man Standing

• Bosch Aishield To Protect AI Systems and Bolster Digital Trust

• Managing Cyber Risk: The People Element

• Three BEC Suspects Arrested in “Killer Bee” Sting

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Ericsson, BT Team Up For Private 5G Enterprise Networks

• UK Privacy Tsar: Stop Excessive Data Collection from Rape Victims

• Security and Human Behavior (SHB) 2022

• Italy tells organisations to brace for DDoS attacks

• Zero-day bug exploited by attackers via macro-less Office documents (CVE-2022-30190)

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• [Updated]Microsoft Office zero-day “Follina”—it’s not a bug, it’s a feature! (It’s a bug)

• Bitcoin Price Spikes After Weeks Of Declines

• Credentials of US academics posted on dark web forums

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Foxconn Sees Supply Chain Improvements For Second Half Of Year

• Turkish Airline Exposes Flight and Crew Info in 6.5TB Leak

• SideWinder Hackers Launched Over a 1,000 Cyber Attacks Over the Past 2 Years

• Flosum Trust Center secures Salesforce environments from cybersecurity threats and data breaches

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Digitalization and the Education Economy

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Learn Raspberry Pi and Arduino with 9 Online Developer Training Courses

• Experts warn of ransomware attacks against government organizations of small states

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Supply chain scams pull no punches

• Interpol Nabs 3 Nigerian Scammers Behind Malware-based Attacks

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Adecco – 4,284,538 breached accounts

• Podcast Episode: Wordle and the Web We Need

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Cybersecurity isn’t just a topic for experts, says Estonian minister

• Microsoft Releases Workarounds for Office Vulnerability Under Active Exploitation

• Future proofing: How companies can upgrade cyber defenses and be ready for tomorrow

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• US Universities credentials published on dark web

• CLOP Ransomware targets 21 victims in a single month

• Zero-trust-washing: Why zero trust architecture is the framework to follow

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• New Windows Subsystem For Linux Malware Steals Credentials & Record Keystrokes

• Coast Guard’s small IT programs suffer from inconsistent oversight policy, GAO finds

• Seven years in the making, DHS’s new cyber talent system boasts just one hire

• 57% of all digital crimes in 2021 were scams

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• How effective are public-private partnerships?

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• ICS Security in Healthcare: Why Software Vulnerabilities Pose a Threat to Patient Safety

• There is no good digital transformation without cybersecurity

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• HP Wolf Security: A new breed of endpoint protection

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Remembering Apple’s Newton, 30 years on

• Guidance for CVE-2022-30190 Microsoft Support Diagnostic Tool Vulnerability

• Hackers Selling US Colleges VPN Credentials on Russian Forums- FBI

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Australian digital driving licenses can be defaced in minutes

• Mysterious “Follina” zero-day hole in Office – what to do?

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• IT Security News Daily Summary 2022-05-30

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Three Nigerian men arrested in INTERPOL Operation Killer Bee

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Researchers Warn of New Microsoft Office 0-Day Vulnerability “Follina”

• Vulnerability Summary for the Week of May 23, 2022

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Vulnerability Summary for the Week of May 23, 2022

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Microsoft Office zero-day “Follina”—it’s not a bug, it’s a feature! (It’s a bug)

• Zero-day vuln in Microsoft Office: ‘Follina’ will work even when macros are disabled

• Anonymous Claims Attacks Against Belarus for Involvement in Russian Invasion of Ukraine

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Beware the Smish! Home delivery scams with a professional feel…

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Double-whammy attack follows fake Covid alert with a bogus bank call

• CyberCube Partners With Kroll to Launch Response Service for Cyber Insurance Industry

• SentinelOne Pioneers Inaugural Deception MITRE Engenuity ATT&CK® Evaluation

• The Bitglass Blog

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• China monitors UK and US populace through AI Satellites and thousands of CCTV Cameras

• LinkedIn Bug Bounty Program Becomes Available To The Public

• US Academic Credentials Displayed in Public and Dark Web Forums

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Users of Intuit QuickBooks Targeted in Phishing Scams

• FBI Warns of Hackers Selling US College VPN Credentials on Underground Forums

• A Complete Guide to Torrenting Safely in 2022

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• A New Linux-based Botnet Targeting Vulnerabilities in Web Servers & Android Servers

• Zero-Day ‘Follina’ Bug Lays Older Microsoft Office Versions Open to Attack

• 6 Steps to Ensure Cyber Resilience

• A new WhatsApp OTP scam could allow the hijacking of users’ accounts

• Red Hat Compliance service and the Red Hat Insights API

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• The Quad commits to strengthening cybersecurity in software, supply chains

• Check Point Software Technologies protects against malicious Chrome extensions

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• What Credit Score Is Needed for Debt Consolidation?

• May 2022 Web Server Survey

• Check Point protects against malicious Chrome extensions

• Keeping it real: Don’t fall for lies about the war

• CISA Adds 75 Actively Exploited Bugs To Its Must-Patch List In Just A Week

• The Mystery Of China’s Sudden Warnings About US Hackers

• Global Tech Industry Objects To India’s New Infosec Reporting Regime

• Ransomware Attack Sends US County Back To 1977

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Intuit phish says “we have put a temporary hold on your account”

• Twitter Refuses To Drop Egon Durban From Board

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• The Best Battle Royales in 2022

• Zoom Patched Multiple Bugs Including An RCE Flaw

• Meta ‘Redesigns’ Privacy Policy Elaborating On ‘Use Of Information’

• Google Release Chrome 102 Browser Update With 32 Bug Fixes

• Microsoft Warns Of Sneaky Web Skimming Attacks

• Russia Seeks New Fines Against Google, Other Tech Firms

• Is 3rd Party App Access the New Executable File?

• Clop Ransomware Has Returned and Is Busier than Ever

• 10K Followers on LinkedIn and Heimdal™’s LinkedIn Giveaway

• Multiple Microsoft Office versions impacted by an actively exploited zero-day

• That critical vulnerability might not be the first you should patch

• New WhatsApp OTP Scam Allows Scammers to Hijack Your Account

• As Malware Dissemination Drops, Mobile Trojan Detections Grow.

• Binance Registers In Italy Amidst Europe Push

• Document Exploiting New Microsoft Office Zero-Day Seen in the Wild

• GoodWill Ransomware victims have to perform socially driven activities to decryption their data

• Experts Insight On Facial Search Engine PimEyes

• Two In Three UK Companies Targeted By Fraudsters, Expert Advice On How To Protect

• Twitter To Pay $150 mln To Settle With The U.S. Over Privacy, Security Violations

• Biometric mobile payments set to exceed $1 trillion

• 8 Best High-tech Pet Devices You and Your Furry Friend Will Love

• Amazon Shareholders Narrowly Approve Executive Pay

• Good Luck Not Accidentally Hiring a North Korean Scammer

• Part 2: Practices, Procedures And Mitigations

• How are hackers targeting your network through mobile devices?

• Google Invests In India’s Mohalla Amidst Short Video boom

• Biometric Mobile Payments Set to Exceed $1 Trillion by 2027

• EnemyBot Linux Botnet Now Exploits Web Server, Android and CMS Vulnerabilities

• CISA adds 75 vulnerabilities to catalogue in 3 days

• 16-30 April 2022 Cyber Attacks Timeline

• General Motors Confirmed Suffering A Credential Stuffing Attack

• Predator Spyware Exploited 5 Android Zero-Day Bugs

• The Tech of ESG

• Third of UK Firms Have Experienced a Security Breach Since 2020

• Watch Out! Researchers Spot New Microsoft Office Zero-Day Exploit in the Wild

• How to Use iCloud Drive and Get the Most Out of It

• UK Cinemas To Accept Yoti Digital ID Verification

• Verizon’s 2022 data breach report: Key takeaways

• How Can You Fix A Cracked Phone Screen Yourself?

• Mobile Threat Volumes Slump 58% in a Year

• Outcry After DuckDuckGo Admits It Allows Microsoft Trackers

• How Is Technology Integrated In The Online Casino Industry?

• How is Modern Technology Changing the Restaurant Industry?

• RAV Endpoint Protection: Why Endpoint Security is Critical in Modern Day Threat Landscape

• EnemyBot malware adds new exploits to target CMS servers and Android devices

• TechRepublic Premium editorial calendar: IT policies, checklists, toolkits, and research for download

• New ‘GoodWill’ Ransomware Forces Victims to Donate Money and Clothes to the Poor

• Indian authorities issue conflicting advice about biometric ID card security

• FBI Warns About Hackers Selling VPN Credentials for U.S. College Networks

• Britain hospitals to be cyber attacked by Russian Sleeper cells

• Hackers pay a $5000 monthly fee to gain fraudulent access to banking apps

• Ransomware attacks still the #1 threat to businesses and organizations

• BlackCat Ransomware Group Demands $5Million to Unlock Austrian State

• $39.5 billion lost to phone scams in last year

• Tripwire Patch Priority Index for May 2022

• Protecting Against Bad Chemistry (with Cybersecurity)

• Moving toward a more adaptable and tech-driven compliance function

• thatDot Novelty Detector reduces false-positive findings for SOC analysts

• Why Managed Detection and Response (MDR) is your most important security investment

• Ransomware attack sends US county back to 1977

• Global tech industry objects to India’s new infosec reporting regime

• How DNS filtering can help protect your business from Cybersecurity threats

• The disruptive impact of EU digital ID wallets

• IT Security News Weekly Summary – Week 21

• IT Security News Daily Summary 2022-05-29

• 3 most common — and dangerous — holes in companies’ cyber defenses

• Pro-Russian hacker group KillNet plans to attack Italy on May 30

• Report: Facebook Profited Off Ads Promoting White Supremacist Content

• SQL Injection & the BillQuick Attack: Best Practices to Protect your Org

• Securing the data ecosystem

• Expanding U.S. Counterterrorism in Somalia Is Necessary but Insufficient

• New Variant of Magniber Ransomware is Targeting Windows 11 Users

• Security Affairs newsletter Round 367 by Pierluigi Paganini

• US man sentenced to 4 years in prison for his role in Infraud scheme

• Hacker Steals Database of Verizon Employees

• Facebook :”Is that you?” 500,000 People Were Victims of this Phishing Scam

• New Snake Keylogger Campaign Drops Malware Via Malicious PDF Files

• The Future of MFA

• Yik Yak Anonymous Message Platform Had An Information Disclosure Bug

• Week in review: Account pre-hijacking, Sigstore, ransomware still winning

• Calling All College Women: Exabeam Announces Third-annual Cybersecurity Scholarship Program

• Stories from the SOC – Persistent malware

• MGM Resorts (2022 Update) – 24,842,001 breached accounts

• Weekly Update 297

Generated on 2022-06-05 23:59:16.375411