IT Security News Weekly Summary – Week 24

• IT Security News Daily Summary 2022-06-19

• USB Forensics – Reconstruction of Digital Evidence from USB Drive

• Overturning Roe: What Might This Mean for Military Culture?

• Meet “Universal ZTNA,” Powered by Genians #1 Proven NAC, at Infosecurity Europe 2022

• DevSecOps deploy and operate processes

• Police Linked To Hacking Campaign To Frame Indian Activists

• International Operation Takes Down Russian RSOCKS Botnet

• “NakedPages” Phishing Toolkit Advertised for Sale on Cybercrime and Telegram Platforms

• Azure Attack Paths: Common Findings and Fixes (Part 1)

• Revoking Access to JWTs With a Blacklist/Deny List

• China-Linked APT Flew Under Radar For A Decade

• Defend Your Castle with Zero Trust

• Transparency And Collaboration Between Vendors and Customers Are Key to Reducing Third-Party Security Incidents

• Linux Botnet Finds Novel Way Of Spreading To New Devices

• How to Password Protect Any File

• Rapid7 research reveals which data ransomware groups seek and use for leverage

• Week in review: Microsoft fixes Follina, cybersecurity pros quitting, (IN)SECURE Magazine RSAC 2022

• Penetration testing

• Experts warn of a new eCh0raix ransomware campaign targeting QNAP NAS

• Researchers Alert About Ransomware Attacks Targeting Microsoft Cloud ‘Versioning’ Feature

• Eclypsium Expands its Leadership Team and Advisory Board to Support Accelerated Growth

• How to create a continuous lifecycle for your IT Policy Management

• The Complete List of Types of Phishing Attacks, Their Brief Definitions, and How to Prevent Them

• Eclypsium expands its executive team with new appointments

• Vesta hires Hrishi Talwar as CPO

• 3 Essential Measures to Mitigate the Risk from Follina — A New Windows Zero-Day Actively Exploited in the Wild

• IT Security News Daily Summary 2022-06-18

• What You Need to Know About The Role of Patch Management For Cyber Security

• How to Discover Exploitable Intelligence with Attack Surface Management

• Microsoft Launches New Privacy Features for Windows 11

• US DoJ announced to have shut down the Russian RSOCKS Botnet

• How ML-powered video surveillance could improve security

• Chinese Attackers Abused Sophos Firewall Zero-Day Bug to Target South Asian Organizations

• The United States Department of Justice Will no Longer Prosecute Ethical Hackers

• CMMC 2.0: key changes

• Former Amazon employee convicted in Capital One hack

• ‘Hermit’ Spyware Deployed in Syria, Kazakhstan, and Italy

• Tinder Swindlers: How scammers steal your heart, then your money

• An Alleged Russian Spy Was Busted Trying to Intern at The Hague

• Build or Buy your own antivirus product

• MaliBot Android Banking Trojan targets Spain and Italy

• Authorities Shut Down Russian RSOCKS Botnet That Hacked Millions of Devices

• Over a Dozen Flaws Found in Siemens’ Industrial Network Management System

• China-linked APT Went Under Radar for Decade

• U.S. State and Federal Funding for Cybersecurity is on the Rise

• Journey Into Cybersecurity – Conversations with Cyber Newcomers, Part 2

• New in Cybersecurity – Insights, threat trends, & RSA learnings

• Atlassian Confluence Flaw Being Used to Deploy Ransomware and Crypto Miners

• 26 Million Request Per Second DDoS Attack Detected – Largest HTTPS DDoS Ever Recorded

• How to Build Security for Your SaaS User Communications

• DeadBolt ransomware takes another shot at QNAP storage

• ShiftLeft and Wipro join forces to bring new technological innovations to customers

• 2022-06-17 – Matanbuchus with Cobalt Strike

• Indoor Robotics raises $15 million to boost product development

• Weekly Update 300

• Chinese DriftingCloud APT exploited Sophos Firewall Zero-Day before it was fixed

• Daon names Ralph Rodriguez as President and CPO

• ThreatX hires Phil Lawrence as VP of Engineering

• Zero Trust: Hype vs. Reality

• Inverse Finance stung for $1.2 million via flash loan attack

• IT Security News Daily Summary 2022-06-17

• Jit aims to simplify product security for developers

• Friday Squid Blogging: Signature Steamed Giant Squid with Thai Lime Sauce

• Ransomware and Phishing Remain IT’s Biggest Concerns

• Abortion rights: US senators seek ban on sale of health location data

• Judiciary’s zero-trust foundation secures remote access

• Experts link Hermit spyware to Italian surveillance firm RCS Lab and a front company

• EFF Warns Another Court About the Dangers of Broad Site-Blocking Orders

• International operation takes down Russian RSOCKS botnet

• How to spot malicious spam – Week in security with Tony Anscombe

• WordPress Plug-in Ninja Forms Issues Update for Critical Bug

• UK Approves WikiLeaks Chief Julian Assange’s Extradition to the US

• New MaliBot Android Malware Found Stealing Personal, Banking Data

• Don’t let the next software supply chain attack threaten your mainframe

• Hertzbleed disclosure raises questions for Intel

• Atlassian Confluence Server Bug Under Active Attack to Distribute Ransomware

• DeadBolt Ransomware Actively Targets QNAP NAS Devices — Again

• Copyright “Small Claims” Quasi-Court Opens. Here’s Why Many Defendants Will Opt Out.

• ALPHV squeezes victim with dedicated leak site for employees and customers

• Biometric Authentication: Best Practices

• ALPHV squeezes victim with dedicated leak site for employee and customer data

• Paying ransoms can lead to repeated attacks

• General Dynamics’ $11B DOD ‘Fourth Estate’ IT protest denied

• Our Digital Lives Rest on a Robust, Flexible, and Stable Fair Use Regime

• How To Check for JSON Insecure Deserialization (JID) Attacks With Java

• Can a new data strategy can help the Department of Labor shape a more inclusive economy?

• Microsoft Addresses Wi-Fi Hotspots Issues in Latest Update

• Report: Facebook Fails To Detect Obvious Hate Speech In Ads

• Attackers Exploit Telerik Vulnerabilities to Deploy Cobalt Strike

• (ISC)² Concludes Online Proctored Exams Do Not Meet Exam Security Standards

• Rapidly evolving IoT malware EnemyBot now targeting Content Management System servers and Android devices

• DHS is making ‘significant reforms’ to the employee discipline process

• The Pentagon should keep better tabs on IT cybersecurity, supply chain risks, GAO says

• How to fix the four biggest problems with failed VPN connections

• US Man Sentenced to Nine Years in Prison for Hacking iCloud Accounts and Stealing Nudes

• Panchan Peer-to-Peer Botnet

• 24 Billion Usernames And Passwords Found On The Dark Web

• Interpol arrests 2000 criminals launching social engineering attacks

• Senate panel approves $45B boost to 2023 defense topline

• How math and language can combine to map the globe and create strong passwords, using the power of 3 random words

• Report: Hybrid workforce is making public sector IT management more difficult

• WordPress Updates More Than a Million Sites to Fix Critical Ninja Forms Vulnerability

• Launching Missiles Is Easy, Drug Control Is Hard

• Microsoft Defender goes cross-platform for the masses

• How to back up your Authy app

• Staffing Firm Robert Half Says Hackers Targeted Over 1,000 Customer Accounts

• Dangerous Microsoft Office 365 Functionality That Can Store Ransom Files On SharePoint And OneDrive

• How The Pension Errors Will Increase Risks Of Scams On Most Vulnerable People?

• DOE’s Latest Cyber Strategies Report – Expert Commentary?

• The Complete Guide to XACML

• Common Security Advisory Framework (CSAF) beta files now available

• The Jan. 6th Committee on Why Oaths Matter

• Cyber Security and Cloud Computing in the New Era of Remote Working

• Using Cyber Risk Quantification to Optimize Your Security Budget

• Biggest Cyber Trend in 2022

• Control the Uncontrollable, The Path to Supply Chain Security

• ONLINE STREAMING- A Harmless Entertainment or a Cybersecurity Hazard

• Zimbra Memcached Injection Bug Patched

• How we describe the metaverse makes a difference – today’s words could shape tomorrow’s reality and who benefits from it

• Check Point vs Palo Alto: Compare EDR software

• 2022 Dark Web prices for cybercriminals services

• Now On Demand: SecurityWeek Cloud Security Summit, Presented by Palo Alto Networks

• X.509 certificate

• Reimagine Hybrid Work: Same CyberSec in Office and at Home

• Researchers Uncover ‘Hermit’ Android Spyware Used in Kazakhstan, Syria, and Italy

• 5 Water-Saving Tips Every Business Should Know

• 3 Tips for Understanding the Steps in the Procure to Pay Process?

• SpaceX Fires At Least Five Staff For Letter Criticising Elon Musk – Report

• Law Enforcement Dismantle Infrastructure of Russian ‘RSOCKS’ Botnet

• Hybrid Networks Require an Integrated On-prem and Cloud Security Strategy

• Can We Make a Global Agreement to Halt Attacks on Our Energy Infrastructure?

• What Is a Threat Intelligence Platform ?

• Wikileaks Julian Assange Extradition To US Approved By Home Secretary

• Meta Bridges 2D And 3D With Crayta | Avast

• China-linked APT Flew Under Radar for Decade

• Tackling 5 Challenges Facing Critical National Infrastructure Today

• Report: 24B usernames and passwords available for sale in cybercriminal marketplaces

• Details of Twice-Patched Windows RDP Vulnerability Disclosed

• Websites Hosting Fake Cracks Spread Updated CopperStealer Malware

• Exploited Vulnerability Patched in WordPress Plugin With Over 1 Million Installations

• Cookie consent crumbles under fresh UK data law proposals

• SECURE North America | Apple Stories: How Technology Has Mediated Technology Through History

• Cybersecurity M&A Deals Surge in First Half of June 2022

• eIDAS 2.0 Amendments | Avast

• Which stolen data are ransomware gangs most likely to disclose?

• New MaliBot Android Malware Mines Cryptocurrency

• What Did Elon Musk Tell Twitter Staff?

• The Cybersecurity Consolidation Conundrum: Why Less is Sometimes More

• How do I get OneDrive under control? [Ask ZDNet]

• Cops Will Be Able to Scan Your Fingerprints With a Phone

• Here’s Why You’re Still Stuck in Robocall Hell

• Chinese Hackers Exploited Critical Security Vulnerability in Sophos Firewall

• Microsoft: BlackCat Ransomware Group Targets Vulnerable Microsoft Exchange Servers

• Costa Rica Chaos a Warning That Ransomware Threat Remains

• New MaliBot Android Banking Malware Poses as Cryptocurrency Mining App

• Beware!! BlackCat Ransomware Gang Attack Unpatched Microsoft Exchange Servers

• Experts Discuss Next Steps in Trust, Privacy and Security

• Chinese Hackers Exploited Sophos Firewall Zero-Day Flaw to Target South Asian Entity

• A New Golang-based (P2P) Botnet “Panchan” Actively Attacking Linux Servers

• Over a Million WordPress Sites Forcibly Updated to Patch a Critical Plugin Vulnerability

• Several Data-Stealing Apps Remain on Google Play Store According to Cybersecurity Researchers

• Russian Disinformation Evolving Across the Globe | Avast

• Digital wellbeing: Do free countries have more of it?

• UK Proposes Post-Brexit Data Laws to Boost Innovation

• CyberArk Endpoint Privilege Manager protects Linux systems by enforcing least privilege policies

• Businesses deal with increasing bot attacks

• Datadog Observability Pipelines empowers organizations to manage telemetry data

• Password recovery from beyond the grave

• Immersive Labs Cyber Team Sim prepares teams for real-life cyber attacks

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Portnox unveils new cloud-native tool to help midmarket businesses simplify network security

• DragonForce Group Unleash Hacks Against India

• Elasticsearch Database Mess Up Exposed Login, Leaked Personal Data of 30K Students

• Microsoft issues serious alert about Follina Vulnerability

• Apps on Google Play Store with in-built Adware

• A Microsoft 365 feature can ransom files on SharePoint and OneDriveCould

• Criminal IP analysis report on zero-day vulnerability in Atlassian Confluence

• Microsoft Defender for Android, Apple iOS and macOS, and Windows now available

• New infosec products of the week: June 17, 2022

• How financial institutions are improving customer experience with fraud prevention measures

• Just Released: 2022 (ISC)² Security Congress Agenda!

• AT&T Cybersecurity’s Partner Program and SentinelOne enter managed XDR market with robust alliance

• Suspicious behavior: OTX Indicator of Compromise – Detection & response

• Cyber criminals continue to target and exploit people

• Fraud trends and scam tactics consumers should be aware of

• New Microsoft Defender app works on iOS, macOS, Android, Windows

• Here’s a hidden Android security feature you won’t find on any iPhone

• 2022-06-16 – Files for an ISC diary (Matanbuchus with Cobalt Strike)

• Interpol anti-fraud operation busts call centers behind business email scams

• Guide to Day Three of the Select Committee Hearings

• RSA Conference Recap for Developers

• Security 101: Cloud-native Virtual Patching

• How to configure cPanel and WHM Panel on your VPS

• How Data Landlords Put Their Tenants at Risk

• CISA Releases New Proposed Cloud Security Guidance

• 730K WordPress sites force-updated to patch critical plugin bug

• State of OT Security in 2022: Big Survey Key Insights

• How Emotet is changing tactics in response to Microsoft’s tightening of Office macro security

• Review: System Mechanic Ultimate Defense

• Multi-data center clustering: The evolution of web hosting

• Lawmaker questions community doorbell surveillance

• Mayors endorse emerging technologies at annual conference

• Internet Explorer Now Retired but Still an Attacker Target

• BlackCat Ransomware affiliates target unpatched Microsoft Exchange servers

• RSAC branded a ‘super spreader event’ as attendees share COVID-19 test results

• IT Security News Daily Summary 2022-06-16

• Report: 59% of SMEs say cybersecurity is the top IT challenge of the past year

• House Oversight Committee advances legislation encouraging telework at agencies

• Rampant ID theft targets pandemic benefits, watchdogs say

• Voxlens makes interactive data more accessible for screen readers

• Microsoft 365 Function Leaves SharePoint, OneDrive Files Open to Ransomware Attacks

• BlastWave Announces Enhancements to Its Zero-Trust Security Software Solution, BlastShield

• What We Mean When We Talk About Cyber Insurance

• Livestream: Jan. 6 Select Committee Hearing Day Three

• The Chatter Podcast: Freemasonry and Conspiracism with John Dickie

• Hertzbleed – New AMD & Intel CPUs Bug Let Hackers Extract Crypto-Keys From Remote Servers

• House panel passes funding bill with $100M for TMF

• What’s next for EV charging

• Play Store Apps Caught Spreading Android Malware to Millions

• Android Spyware ‘Hermit’ Discovered in Targeted Attacks

• SpaceX Staff Denounce Elon Musk’s Behaviour – Report

• Transgender women found and created community in the 1980s internet

• Cybersecurity Researchers Find Several Google Play Store Apps Stealing Users Data

• Unlocking the Cybersecurity Benefits of Digital Twins

• ‘MaliBot’ Android Malware Steals Financial, Personal Information

• Volexity Blames ‘DriftingCloud’ APT For Sophos Firewall Zero-Day

• How to set up automated log collection with PowerShell

• EU & US Unite to Fight Ransomware

• Offensive Security Hails Passage of Several Cybersecurity Bills in Congress

• Intel and AMD CPU Trageted by the New ‘Hertzbleed’ Remote Side-Channel Attack

• Research finds most orgs have a ‘false sense of security’ about APIs

• House committee advances LGBTQI+ Data Inclusion Act

• S3 Ep87: Follina, AirTags, ID theft and the Law of Big Numbers [Podcast]

• Office 365 Functionality Could Allow Ransomware to Hold Files Stored on SharePoint and OneDrive

• NakedPages Phishing Toolkit is Now Available on Cybercrime Forums

• RSAC Startup Competition Focuses on Post-Cloud IT Infrastructure

• Cloudflare Prevents One Of The Largest DDoS Attack Recorded

• Microsoft Acquires Cyber Threat Analysis Company To Respond To Cyber Warfare

• 7 Facts About Insider Threats That Should Make you Rethink Data Security

• Cloudflare Mitigates a Record-Breaking DDoS Assault Peaking at 26 Million RPS

• GRIMM CEO Jennifer Tisdale Recognized as One of 25 Leaders Transforming Manufacturing

• API security: 12 essential best practices to keep your data & APIs safe

• New Research: Low IAM Program Maturity is Leaving Companies Vulnerable to Rising Identity-Related Security Incidents

• Security frameworks / attestations and certifications: Which one is the right fit for your organization?

• Intel Firmware updates for Memory Mapped I/O security vulnerabilities

• EU’s ‘Revised’ Disinformation Code Of Practice Backed By Tech Giants

• Hertzbleed exposes computers’ secret whispers

• Customer sues 365 Data Centers for Ransomware Attack

• 5 Skills SecOps Will Need to Effectively Protect Their Organization Going Forward

• ‘Potentially dangerous’ Office 365 flaw discovered

• What is a Cyberattack? Types and Defenses

• Policing and the Siege of the United States Capitol

• Jan. 6 Select Committee Hearing Day Three

• What Do You Think Of Recent Interpol Operation Of Global Fraud Crackdown?

• UK Security Practitioners Lack The Confidence To Stop Attacks

• API Calls Expose 770M Logs With GitHub, AWS, Docker Tokens In Travis CI Logs

• $100 million of TMF funding tagged for customer experience projects

• Microsoft launches Defender for Individuals for Microsoft 365 Personal and Family subscribers

• How hackers use AI and machine learning to target enterprises

• ALPHV/BlackCat ransomware gang starts publishing victims’ data on the clear web

• Interpol arrests thousands of scammers in operation “First Light 2022”

• Microsoft Dismisses False Reports About End of Patch Tuesday

• Apple Retail Workers In Maryland Begin Union Vote

• OAuth vs JWT (JSON Web Tokens): An In-Depth Comparison

• CISA Requests Public Comment on CISA’s TIC 3.0 Cloud Use Case

• Hardening Virtio for emerging security usecases

• Making the world a safer place with Microsoft Defender for individuals

• ENTRY-LEVEL CYBERSECURITY JOBS KEY TO SOLVING WORKFORCE GAP

• Hacker’s Corner: Complete Guide to Keylogging in Linux – Part 3

• Looking for Cyber Insurance? Know Your Eligibility

• CISOs Gain False Confidence in the Calm After the Storm of the Pandemic

• CISA Requests Public Comment on CISA’s TIC 3.0 Cloud Use Case

• Google Fined $260,000 By Russia Over No Local Data Storage

• Don’t Take the Bait: How to Avoid Phishing Attacks

• API Security Tools: What To Look For

• Cisco Patches Critical Vulnerability in Email Security Appliance

• Are You Hiring Enough Entry-Level Security Pros?

• BlackCat Ransomware Gang Targeting Unpatched Microsoft Exchange Servers

• Interpol’s First Light operation smashes crime on a global scale

• Hackers’s Corner: Complete Guide to Keylogging in Linux – Part 3

• Report: 84% of IT leader say passwords are ‘deceptively weak’ for data security

• Why most enterprises are failing to implement IAM

• ISC2 highlights how hiring practices can fix the cyberskills gap

• This Linux botnet has found a novel way of spreading to new devices

• 2,000 arrests in crackdown on social engineering and business email scams

• 2,000 People Arrested Worldwide for Social Engineering Schemes

• Microsoft Patch Tuesday June Arrives With 55 Security Updates

• Most Cybersecurity Managers Hire Entry- and Junior-level Candidates

• State-Sponsored Phishing Attack Targeted Israeli Military Officials

• Sophisticated Android Spyware ‘Hermit’ Used by Governments

• People: A cornerstone for fostering security resilience

• Ransomware Risk in Healthcare Endangers Patients

• Difference Between Agent-Based and Network-Based Internal Vulnerability Scanning

• A Microsoft Office 365 Feature Could Help Ransomware Hackers Hold Cloud Files Hostage

• Cybercriminals Target Companies with Outdated Cybersecurity Procedures

• This new Android malware bypasses multi-factor authentication to steal your passwords

• Facebook Messenger Scam Duped Millions

• Researchers Discover Way to Attack SharePoint and OneDrive Files With Ransomware

• Police Linked to Hacking Campaign to Frame Indian Activists

• Attacking the Performance of Machine Learning Systems

• Apple Faces £750m Claim Over Battery Slowdown

• Okta’s Matt Raible: How I became a Java hipster

• Hiring entry-level and junior candidates can alleviate the cybersecurity skills shortage

• Using the Defense Readiness Index to Improve Security Team Skills

• Researchers disclosed a remote code execution flaw in Fastjson Library

• Hackers Exploit Old Telerik Flaws to Deploy Cobalt Strike

• How to Increase Sales With Sales Automation Software?

• Microsoft’s Internet Explorer browser is finally gone. But not everyone is a happy about it

• Cyber-Criminals Smuggle Ukrainian Men Across Border

• Microsoft Patch Fixes Follina Bug

• CISA Urges Users To Update Google Chrome Browser To Receive Bug Fixes

• Vodafone Switches On Self-Powered Mobile Phone Mast

• Photos of kids taken from spyware-ridden phones found exposed on the internet

• New Zimbra Bug Allows Data Stealing With No User Interaction

• Global Police Arrest Thousands in Fraud Crackdown

• Cisco fixed a critical Bypass Authentication flaw in Cisco ESA and Secure Email and Web Manager

• Apple’s Planned Obsolescence – Intego Mac Podcast Episode 244

• High-Severity RCE Vulnerability Reported in Popular Fastjson Library

• 66% of organizations store 21%-60% of their sensitive data in the cloud

• Elasticsearch server with no password or encryption leaks a million records

• Apple’s Planned Obsolescence: iOS 16, macOS Ventura Drop Support for Many Models

• Do you know what your supply chain is and if it is secure?

• Panel discussion at Consensus 2022: Is Web 3.0 more hype or reality?

• How Should I Think About Security When Considering Digital Transformation Projects?

• Helping Educational Institutions Align to NCAE-C

• Malicious apps continue to spread through the Google Play Store

• Facebook Says Apple is Too Powerful. They’re Right.

• How social engineering attacks are evolving beyond email

• Ireland is now a part of the Microsoft Government Security Program (GSP)

• UK ICO to retain millions in fines to meet legal expenses

• Zero trust adoption: Industry-specific challenges and implementation strategies

• Impact Podcast with John Shegerian Features NVIDIA’s Tonie Hansen

• 5 ways to prevent Ransomware attacks

• 72% of middle market companies expect to experience a cyberattack

• MaliBot: A New Android Banking Trojan Spotted in the Wild

• The challenges of managing increased complexity as hybrid IT accelerates

• Critical Flaw in Cisco Secure Email and Web Manager Lets Attackers Bypass Authentication

• The future is passwordless. What’s slowing it down?

• Grooming lies and their function in financial frauds

• Neustar Security Services UltraDNS2 improves resilience of infrastructure and services

• Feroot DomainGuard reduces risk associated with client-side attacks

• Incognia Location-based Liveness Spoofing Detection identifies fraudulent attempts to fake liveness

• Optiv MXDR enhances detection and response with expanded cloud integration

• Nebulon ImmutableBoot allows operations teams to protect their application infrastructure

• Cisco AppDynamics Cloud accelerates detection and resolution of performance issues

• Okera on Snowflake enables organizations to manage and utilize sensitive data

• Infoblox NIOS 8.6.2 provides enhanced multi-cloud integrations for customers

• SnapLogic platform enhancements simplify data preparation tasks for IT and business teams

• SecureKloud CloudEdge accelerates cloud deployment for enterprises

• Stop This California Bill that Bans Affordable Broadband Rules

• Evaluating the Jan. 6 Committee’s Evidence

• PIXM partners with Identity Automation to protect educators and learners from targeted phishing attacks

• Cloudflare Thwarted Largest Ever HTTPS DDoS Attack

• Hertzbleed Side-Channel Attack allows to remotely steal encryption keys from AMD and Intel chips

• Stellar Cyber expands its management team with two appointments

• Elasticsearch Database Mess Up Exposed Login, PII Data of 30,000 Students

• Inconsistent data reporting thwarts crime analysis

• Cisco’s Ash Devata on the Future of Secure Access

• Intelligent Waves promotes Amy Wood to CFO

• IT Security News Daily Summary 2022-06-15

• Identity and Access: The Game is the Same – It Just Got Fiercer

• Defense topline funding could see a bump, panel chairman says

• ‘Hertzbleed’ Side-Channel Attack Threatens Cryptographic Keys for Servers

• 7 Ways to Bring AI to Cybersecurity

• What is WAAP? – A Quick Walk Through

• Pandemic response watchdogs urge agencies to focus on ID theft

• At Second Trial, Ex-CIA Employee Defends Himself in Big Leak

• Heineken says there’s no free beer, warns of phishing scam

• Elon Musk Appeals Court Refusal To End Tweet Oversight

• Small biz leaders urge Congress to address category management woes

• Microsoft takes months to fix critical Azure Synapse bug

• A critical flaw in Citrix Application Delivery Management allows resetting admin passwords

• Hands on with Pfizer Booster 4.0: My review of anti-malware for carbon-based systems

• Meta Fails To Overturn UK Order To Sell Giphy

• How to reframe the cybersecurity conversation for elected officials

• Legislation sets penalties for drone misuse

• New Bluetooth upgrade could provide a big audio assist for government

• Satellites zoom in on cities’ hottest neighborhoods to help combat the urban heat island effect

• NordPass password manager deal: Get two years for $29

• GreyNoise Attracts Major Investor Interest

• Cloud Native Application Protection Platform: A Utility Knife for Cloud Security Services

• This tiny, encrypted drive can fit on your keyring

• European Union Preparing To Crack Down On Facebook Deepfake Videos

• As Internet-Connected Medical Devices Multiply, So Do Challenges

• Simplify and centralize network security management with Azure Firewall Manager

• New Linux Malware Syslogk has a Clever Approach of Staying Undetected

• Kaiser Permanente Reveals Data Leak of Nearly 70,000 Medical Records

• Update on (ISC)² Entry-Level Cybersecurity Certification Pilot

• Can global recruitment solve the cybersecurity hiring problem?

• BeanVPN leaks 25 million user records

• Why strong security solutions are critical to privacy protection

• Process to remove personal data from the Google Search Engine

• SAP Patches Critical NetWeaver and ABAP Platform Vulnerabilities

• Imperva Introduces New Features to Help Prevent Online Fraud

• Stealthy Symbiote Linux malware is after financial institutions

• Qualcomm Victory After EU Court Annuls 997m Euros Antitrust Fine

• New Linux Rootkit Malware ‘Syslogk’ Triggers Backdoors With Magic Packets

• Complete Guide to Keylogging in Linux: Part 3

• Microsoft continues cyber security spending spree with Miburo buy

• Now LIVE: SecurityWeek Cloud Security Summit, Presented by Palo Alto Networks

• Jit Banks Massive $38.5 Seed Round Funding

• European Security Officials Double Down on Automated Moderation and Client-Side Scanning

• Record breaking HTTPS DDoS attack

• Earn Money with Bug Bounties

• Former DOD cyber official loses bid for Congress despite Trump’s backing

• Lessons for Better Fraud Decision-Making

• US Researchers Spot New Hertzbleed Flaw Affecting AMD and Intel CPUs

• Panchan Golang P2P botnet targeting Linux servers in cryptomining campaign

• Post-quantum cryptography, an introduction

• Threat Intelligence: Cyber and Electromagnetic Activities (CEMA) with Software-Defined Radio (SDR)

• IBM Ordered To Turn Over Ginny Rometty Emails In Age Discrimination Lawsuit

• Lottery scams: Don’t be fooled

• So Long, Internet Explorer. The Browser Retires Today

• Critical Code Execution Vulnerability Patched in Splunk Enterprise

• Critical Atlassian Confluence flaw remains under attack

• directory traversal

• Obrela sponsors open-source Commix project

• Firefox stops advertisers tracking you as you browse, calls itself the most “private and secure major browser”

• In Cybersecurity, What You Can’t See Can Hurt You

• Travel-related Cybercrime Takes Off as Industry Rebounds

• DragonForce Gang Unleash Hacks Against Govt. of India

• Small Botnet Launches Record-Breaking 26 Million RPS DDoS Attack

• Patch Tuesday And Experts Insight

• New Study: Australian Capital Territory Files No. 1 Most Complaints Amid Record $324 Million Online Scam Surge In Australia

• Does Zero Trust Mean Defence In Depth Is Dead?

• Survey Finds IT Leaders Eager to Eliminate Passwords

• Ubuntu Core 22: The secure, application-centric IoT OS is now available

• How One “Crypto Drainer” Template Facilitates Tens Of Millions Of Dollars In Theft

• Panchan: A New Golang-based Peer-To-Peer Botnet Targeting Linux Servers

• Best New Apps in 2022 Useful for Students

• Update now!  Microsoft patches Follina, and many other security updates

• Report: 14.9 billion users have had personal data breached since 2004

• Don’t use these passwords: These are the most popular log-in details found for sale online

• Got hit by a cyber attack? Hackers will probably come after you again – within a year

• Security resilience: 4 ways to achieve company-wide buy-in

• How can mentorship help the cybersecurity workforce gap?

• Facebook Account Bruteforcer

• Microsoft’s Internet Explorer Retires Today, After 27 Years

• Ubuntu Core 22 brings real-time Linux options to IoT

• New ‘Hertzbleed’ Remote Side-Channel Attack Affects Intel, AMD Processors

• Let’s give a look at the Dark Web Price Index 2022

• Over 2 Million People Have Downloaded Android Malware from the Google Play Store

• Firefox: Our new cookie protection will stop companies tracking you across sites

• M1 Chip Vulnerability

• Ransomware Group Launches Search Site for Stolen Data

• It’s official, today you can say goodbye to Internet Explorer. Or can you?

• How cybersecurity readiness prevents small and medium businesses (SMBs) from fuelling supply chain attacks

• Attackers Can Exploit Critical Citrix ADM Vulnerability to Reset Admin Passwords

• Russia Is Taking Over Ukraine’s Internet

• New Iranian Spear-Phishing Campaign Hijacks Email Conversations

• PrivacyTests reveals how your web browser does privacy-wise

• Kubernetes users struggle with security, Red Hat survey says

• SAP Patches High-Severity NetWeaver Vulnerabilities

• FDNY Building Digital Firewall to Protect Emergency Workers From Cyber Attacks

• Ransomware gang publishes stolen victim data on the public Internet

• Email compromise leads to healthcare data breach at Kaiser Permanente

• Researcher Demonstrated How Tesla Key Card Feature Can be Exploited to Steal Cars

• NSO Group In Talks To Offload Pegasus Spyware – Report

• Tripwire Products: Quick Reference Guide

• BNPL Fraud Alert as Account Takeovers Surge

• Comprehensive, Easy Cybersecurity for Lean IT Security Teams Starts with XDR

• New Hertzbleed Side-Channel Attack Affects All Modern AMD and Intel CPUs

• How much does access to corporate infrastructure cost?

• Ransomware Gang Develops New Website That Allows Victims To Search For Their Data

• Avera Health Data Breach Affects 700 Patients

• The State of 3D Printing: TCT 3Sixty 2022

• A tiny botnet launched the largest DDoS attack on record

• Microsoft to Acquire Cyber Threat Analysis Company Miburo

• Privacy Watchdog Boosts Legal Funds by Keeping Millions in Fines

• New cybersecurity bill to require mandatory reporting of ransomware, other attacks

• ChromeLoader a simple vessel for more sinister threats

• Microsoft’s Final Patch Tuesday Fixes Follina Bug

• VERT Threat Alert: June 2022 Patch Tuesday Analysis

• 45% of infosec pros admit that they have considered quitting the industry

• Cyber Security Management System (CSMS) for the Automotive Industry

• Let’s give a look at the Dark Web Price Index 2021

• Cloudflare Saw Record-Breaking DDoS Attack Peaking at 26 Million Request Per Second

• Microsoft acquires cyber threat detecting firm Miburo

• Most of the cyber attacks in Canada are ransomware genre

• McAfee’s Digital Wellness Delivers Online Protection As An Employee Benefit

• Microsoft Patch Tuesday, June 2022 Edition

• Mind the gap: How to ensure your vulnerability detection methods are up to scratch

• A closer look at the SEC Cybersecurity Disclosure rule

• Malaysia-linked DragonForce hacktivists attack Indian targets

• PriSec Boot Camp Helps Privacy and Security Officers Prevent Information Losses and Cyberattacks

• Intelligent Waves Promotes Amy Wood to Chief Financial Officer

• Hexnode recognized as a Leader in the IDC MarketScape: Worldwide Unified Endpoint Management Software for Apple Devices 2022 Vendor Assessment

• Snowflake Launches New Unistore Workload to Drive Next Phase of Innovation With Transactional and Analytical Data Together in the Data Cloud

• Journey Into Cybersecurity – Conversations with Cyber Newcomers, Part 1

• GALLIUM APT Hackers Using New Hacking Tool “PingPull” To Attack on Telecom & Government Sectors

• Cloud computing top concerns: The focus is shifting

• Patch Tuesday: Microsoft Issues Fix for Actively Exploited ‘Follina’ Vulnerability

• How confident are IT pros in the security of their organization’s supply chain?

• Unpatched Exchange server, stolen RDP logins… How miscreants get BlackCat ransomware on your network

• Phishing reaches all-time high in early 2022

• Microsoft fixes under-attack Windows zero-day Follina

• How 3D Printing Has Become a Global Trend With Time

• Black Kite FocusTags allows users to track high-profile cyber events

• Koverse Data Platform 4.0 empowers organizations to enforce zero trust for data management

• Splunk announces platform updates to address the complexities of multi-cloud and hybrid environments

• Trend Micro VicOne strengthens connected vehicle cybersecurity

• Adobe Releases Security Updates for Multiple Products

• Follina gets fixed – but it’s not listed in the Patch Tuesday patches!

• Adobe Releases Security Updates for Multiple Products

• Former US state agency CIO, IT exec plead guilty to bribery and extortion scheme

• SAP Releases June 2022 Security Updates

• Some Cybersecurity Startups Still Attract Funding Despite Headwinds

• SAP Releases June 2022 Security Updates

• QuSecure partners with DataBridge Sites to help organizations protect against quantum attacks

• Alert Logic and TD SYNNEX join forces to improve security posture for their customers

• Cloudflare says it thwarted record-breaking HTTPS DDoS flood

• A flaw in Zimbra email suite allows stealing login credentials of the users

• C3 AI collaborates with Google Cloud to optimize supply chains for improved resiliency

• Hackers Using Web3 Backdoor Wallets to Steal Seed Phrases from iOS/Android Users

• Brazil’s data protection authority to gain independence from presidential office

• Codefresh names Christian Hernandez to lead Developer Experience program

• Senator Declares Amazon Ring’s Audio Surveillance Capabilities “Threaten the Public”

• Victory! New York’s Vaccine Privacy Bill Heads to Governor’s Desk

• CISA Adds One Known Exploited Vulnerability to Catalog 

• Matthew Moynahan joins OneSpan Board of Directors

• 2022-06-13 – TA578 thread-hijacked email –> Bumblebee –> Cobalt Strike

• Cloud adopters are the ‘weak link’ in security

• County to build fiber ring and data center for local governments

• DDoS Subscription Service Operator Gets 2 Years in Prison

• Microsoft Patches ‘Follina’ Zero-Day Flaw in Monthly Security Update

• Veterans Explain How Military Service Prepared Them for Cybersecurity Careers

• CISA Adds One Known Exploited Vulnerability to Catalog 

• IT Security News Daily Summary 2022-06-14

• Citrix Releases Security Updates for Application Delivery Management

• WiFiDuck BadUSB Tester

• Infrastructure investments should focus on ‘cyber smart’ projects

• 3 ways governments can regain citizens’ trust

• Citrix Releases Security Updates for Application Delivery Management

• Ransomware Group Debuts Searchable Victim Data

• New botnet and cryptominer Panchan attacking Linux servers

• Man gets two years in prison for selling 200,000 DDoS hits

• How Russian sanctions may be helping US cybersecurity

• Microsoft Releases June 2022 Security Updates

• IRS launched tax credit website without authority to operate, watchdog reports

• Windows Updates Patch Actively Exploited ‘Follina’ Vulnerability

• Microsoft Releases June 2022 Security Updates

• JFK’s Argument Against Imperialism

• Is Russia Exploiting a Gap in the Montreux Convention?

• Microsoft fixes Follina and 55 other CVEs

• Admin of DDoS-For-Hire Service “DownThem” Gets 2 Years Prison Sentence

• Microsoft to acquire foreign cyberthreat analysis vendor Miburo

• Microsoft June 2022 Patch Tuesday: 55 fixes, remote code execution in abundance

• Koverse Launches Zero Trust Data Platform

• Google: SBOMs Effective Only If They Map to Known Vulns

• Incognia Introduces Location-Based Liveness Spoofing Detection Solution

• Admin of DDoS-For-Hire Service “Downthem” Gets 2 Years Prison Sentence

• Chinese Threat Actor Employs Fake Removable Devices as Lures in Cyber Espionage Campaign

• More reality checks could help keep DOD programs on time and on budget, GAO says

• Murder suspect admits she tracked cheating partner with hidden AirTag

• Upcoming Speaking Engagements

• EFF Urges Congress to Strengthen the American Data Privacy and Protection Act

• ICS Patch Tuesday: Siemens, Schneider Electric Address Over 80 Vulnerabilities

• Adobe Plugs 46 Security Flaws on Patch Tuesday

• Creating a patch management policy: Step-by-step guide

• New Syslogk Linux Kernel Rootkit Uses “Magic Packets” to Trigger Remote Backdoor Access

• How Can Security Partnerships Help to Mitigate the Increasing Cyber Threat?

• Gone Ape? How to Protect NFTs from Theft

• Info Stealer Identified in a PyPI Package

• GALLIUM APT Deployed a New PingPull RAT

• New Dashlane Report: The Future of Secure Work

• Journey Into Cybersecurity – Conversations with Cyber Newcomers, Part 2

• The United States Department of Justice Will no Longer Prosecute Ethical Hackers

• (ISC)² Entry-Level Cybersecurity Certification Pilot Exam Reaches 1,000 Exam Milestone

• API Security Tools: What to look For

• New bill sets federal penalties for drone misuse

• Report: L3 Emerges as Suitor for Embattled NSO Group

• ClubCiso Report Shows Material Security Incidents Reduced by 54% Compared to Last Year

• Beware the ‘Secret Agent’ Cloud Middleware

• Optiv MXDR Enhances Detection Coverage With Expanded Cloud Integration

• Researchers: Wi-Fi Probe Requests Leak User Data

• Kaiser Permanente employees targeted by cyber attack and info of 70k staff breached

• Karakurt extortion group: Threat profile

• Bitwarden vs 1Password: Password manager comparison

• Avast: New Linux Rootkit and Backdoor Align Perfectly

• SBOM in Action: finding vulnerabilities with a Software Bill of Materials

• Instagram scam steals your selfies to trick your friends

• The Three Best Tools You Need to Scan Your Linux System for Malware

• Cloud computing means big opportunities – and big threats

• The unrelenting threat of ransomware is pushing cybersecurity workers to quit

• Microsoft: Ransomware gangs are using unpatched Exchange servers to gain access, so get updating

• New Zimbra Email Vulnerability Could Let Attackers Steal Your Login Credentials

• Chinese Hackers Install Backdoors in iOS/Android Web3 Wallets

• HelloXD Ransomware Variants Found Installing Backdoor on Windows and Linux Machines

• What is the Essential Eight (And Why Non-Aussies Should Care)

• Save time and money with Red Hat Insights Compliance reporting

• MLOps Blog Series Part 1: The art of testing machine learning systems using MLOps

• Is Cybersecurity a Top Priority for Politicians? World Politics and Cybersecurity

• Patch Tuesday June 2022 – Microsoft Releases Several Chromium Security Updates

• German Regulator Probes Apple Ad-Tracking Rules

• How to Become World Class at Cyber Hygiene

• Understanding and Mitigating Single Sign-on Risk

• What Expert Thinks Of UK Digital Strategy?

• IRS “Dirty Dozen” Warns Tax Pros And Businesses Of Spear Phishing

• Azure issues not adequately fixed for months, complain bug hunters

• Half of IT leaders say passwords too weak for security purposes

• Operator of ‘DownThem’ DDoS Service Sentenced to 24 Months in Prison

• SecurityWeek to Host Cloud Security Summit, Presented by Palo Alto Networks, on June 15th

• Technical Details Released for ‘SynLapse’ RCE Vulnerability Reported in Microsoft Azure

• Why Log4j Is Still The Problem When The Patch Is Released 6 Months Ago?

• Report Reveals $1.7 Billion Hacked From Top 10 Centralised Crypto Exchanges Over The Last Decade

• Searchlight Security appoints Cylance and Blackberry’s Eric Milam to lead its dark web intelligence product strategy

• Amazon To Begin Drone Deliveries In Californian Town

• Introducing Malwarebytes Vulnerability Assessment for OneView: How to check for Common Vulnerabilities and Exposures (CVEs)

• “Multiple adversaries” exploiting Confluence vulnerability, warns Microsoft

• Cloud computing rush means big opportunities and big threats ahead

• Chinese Cyberespionage Group Starts Using New ‘PingPull’ Malware

• U.S. State and Federal Funding for Cybersecurity is on the Rise

• cSploit – A Network Analyzer on Android

• (IN)SECURE Magazine: RSAC 2022 special issue released

• Instagram Brings Parental Controls To UK

• Kaiser Permanente Exposes Nearly 70K Medical Records in Data Breach

• Malware’s Destruction Trajectory and How to Defeat It

• Schneider Electric, Claroty Launch Cybersecurity Solution for Buildings

• Atos Shares Plunge Amidst Reorganisation, CEO Exit

• Can I transfer my Windows upgrade license from an old PC to a new one? [Ask ZDNet]

• This new Linux malware has a sneaky way of staying hidden

• Linux Malware Deemed ‘Nearly Impossible’ to Detect

• Poll Shows That More Than 40 Million UK Consumers Have Been Targeted by Digital Fraudsters So Far This Year

• Apple’s Planned Obsolescence

• Detect cloud native security threats with Tracee

• Kaiser Permanente Discloses Data Breach at WA Health Plan, 69K Impacted

• Is your organization ready for Internet Explorer retirement?

• An In-Depth Look at Software-Defined Perimeters

• UK health privacy watchdog still in talks over who is accessing country’s COVID data store

• Iranian Spear Phishing Operation Targets Former Israeli Foreign Minister, Former US Ambassador to Israel, Former Israeli Army General and Three other High-Profile Executives

• Iran Spear-Phishers Hijack Email Conversations in New Campaign

• Don’t panic! “Unpatchable” Mac vulnerability discovered

• Elon Musk To Meet With Twitter Staff

• Over Three-Quarters of UK Adults Hit by Online Scams

• Unpatched Travis CI API Bug Exposes Thousands of Secret User Access Tokens

• Two Convicted in Major Drugs Bust Discovered by Police on EncroChat

• Google Engineer Claims AI Has ‘Feelings’

• New Syslogk Linux Rootkit Lets Attackers Remotely Command It Using “Magic Packets”

• Google Engineer Suspended After Claiming AI Became Sentient

• Once is never enough: The need for continuous penetration testing

• Attack on Kaiser Permanente Exposes Data on 70,000 Customers

• Researchers Detail PureCrypter Loader Cyber Criminals Using to Distribute Malware

• Stronger detection and automation pave the way for real-time response

• UK Digital Strategy Takes Aim At Cyber-Security, Skills Gap

• What you need to know about PCI 4.0: Requirements 1, 2, 3 and 4.

• Looking for adding new detection technologies in your security products?

• Inside the RSAC expo: Buzzword bingo and the bear in the room

• SeaFlower campaign distributes backdoored versions of Web3 wallets to steal seed phrases

• API Security Best Practices

• Chinese-sponsored gang Gallium upgrades to sneaky PingPull RAT

• BlackCat Ransomware is being induced into Microsoft Exchange Servers

• Cybersecurity for the FIFA World Cup in Qatar bolstered

• Using compliance to create value for your organization

• Saas security: How to avoid “death by 1000 apps”

• Only 10% of vulnerabilities are remediated each month

• Why do organizations need to prioritize ransomware preparedness?

• Strong passwords still a priority strategy for enterprises

• 2022-06-13 – TA578 thread-hijacked emails push Bumblebee or IcedID

• Experts spotted Syslogk, a Linux rootkit under development

• DivX SubTitles – 783,058 breached accounts

• HelloXD Ransomware Targeting Multiple Windows and Linux Systems

• “Downthem” DDoS-for-Hire Boss Gets 2 Years in Prison

• Zyxel WiFi 6E APs enable organizations to reduce network interference

• Say goodbye to browser ads and malware with this $30 tool

• Getting Started With the Metasploit Framework: A Pentesting Tutorial

• Network Perception joins OT Cyber Coalition to strengthen national security

• How the Federal Government Buys Our Cell Phone Location Data

• Addressing Cyber Risk with a Unified Platform

• API Security Weekly: Issue 164

• Corel Acquires Awingu

• OneSpan appoints Lara Mataac as General Counsel and CCO

• Fidelma Russo and Jeetu Patel join Equinix Board of Directors

• How the federal government buys our cell phone location data

• CISA Recommends Organizations Update to the Latest Version of Google Chrome

• Maureen Kaplan joins SilverSky as CRO

• EFF’s Flagship Jewel v. NSA Dragnet Spying Case Rejected by the Supreme Court

• Lack of Space National Guard could hurt training, recruiting

• Data tools help root out social services fraud

• Cybersecurity is Job 1 for city, county IT leaders

• NYFD calls for help with doxing

• IT Security News Daily Summary 2022-06-13

• The intelligent way to detect fraud

• Industroyer: A cyber‑weapon that brought down a power grid

• Inglis says infrastructure outlays should focus on ‘cyber smart’ investments

• Kaiser Permanente Breach Exposes Data on 70K Patients

• Everything you need to know about zero-trust architecture

• A Getting-Started Guide to Improving Security with Open-Source Static & Dynamic Security Scanners

• malware

• Tenable slams Microsoft over Azure vulnerabilities

• Report: Facebook Gives Gun Sellers 10 Strikes Before Kicking Them Off The Platform

• Exposed Travis CI API Leaves All Free-Tier Users Open to Attack

• Girl Scouts and OpenText empower future leaders of tomorrow with cyber resilience

• 11 open source automated penetration testing tools

• How AI and bots strengthen endpoint security

• In Security, Less Is More

• Scoop: Uganda Security Exchange Caught Leaking 32GB of Sensitive Data

• Drupal Patches ‘High-Risk’ Third-Party Library Flaws

• Russia-linked APT targets Ukraine by exploiting the Follina RCE vulnerability

• Tony Jarvis on Shifting Security Gears as We Move to the Cloud

• Taking down the IP2Scam tech support campaign

• HelloXD ransomware bulked up with better encryption, nastier payload

• (ISC)² Concludes Online Proctored Exams Do Not Meet Exam Security Standards

• Corel adds zero trust tech to its strength with Awingu acquisition

• TMF methods can drive larger modernization impact, report states

• Drupal Releases Security Updates

• Secure your data like James Bond with the Kingston IronKey Vault Privacy 80

• HYCU Raises $53 Million for Data Backup Technology

• Drupal Releases Security Updates

• Network Perception Joins Operational Technology Cybersecurity Coalition to Aid with Strengthening National Security

• Vincent Cirel Joins Gannett as Chief Technology Officer

• First Open XDR Summit Is a Resounding Success

• Dispersive Holdings Named Winner of Global InfoSec Award for Best Cloud Obfuscation during RSA Conference 2022

• DevSecOps deploy and operate processes

• Water sector wants greater cybersecurity for its infrastructure

• You’re invited! Join us for a live walkthrough of the “Follina” story…

• Apple CEO Tim Cook Pushes Senate For Privacy Legislation

• API Security: Best Tools and Resources

• Backdoor Installed by HelloXD Ransomware , Directed Windows and Linux Devices

• New Data-Stealing Malware Impersonates Cracked CCleaner App In Recent Campaigns

• Two Online Gun Stores Admit Data Breaches Following Web Skimming Attacks

• Stealthy Symbiote Malware Wreaks Havoc On Linux Systems

• Emotet Malware Evolves To Steal Data From Chrome Browser

• Fujitsu Cloud Storage Vulnerabilities Could Expose Backups To Attackers

• FDNY Calls for Digital Firewall to Protect Rescue Workers From Cyber-Attacks

• How to Reduce the Risk of Buy Now, Pay Later Fraud

• The many lives of BlackCat ransomware

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Open Source Security: Key Benefits & Drawbacks You Should Know

• Skyhigh Security CEO, VP talk life after McAfee

• Livestream: Jan. 6 Select Committee Hearing Day Two

• 5 ways to connect with Microsoft Security at Identiverse 2022

• Iranian Attackers are Employing a New DNS Hijacking Malware to Target Organizations

• AWS IAM Security Best Practices

• Corel adds zero trust tech  to its strength with Awingu acquisition

• State-sponsored Chinese threat actors compromise telecom and network service providers

• GALLIUM APT used a new PingPull RAT in recent campaigns

• The Impotence of the Fourth Amendment in a Post-Roe World

• Poor Identity Management Amplifies Ransomware

• Prevent Browser-In-The-Browser Phishing Attacks by Removing Human Input Error

• Seven tech security trends heading your way now

• Researchers: Wi-Fi Probe Requests Expose User Data

• #RSAC: The Cybersecurity Maturity Model Certification Program is Coming

• #RSAC: World Economic Forum Cybercrime Atlas Effort Advances

• Update Chrome now: Four high risk vulnerabilities found

• Cryptocurrencies Plunge After Celsius Pauses Withdrawals

• Smaller Firms Support US Tech Competition Bill As Giants Resist

• How to Make Business Practices That Support Cybersecurity Response

• State-sponsored Chinese threat actors compromise telecommunications and network services providers

• 3 Big Takeaways From the Verizon DBIR 2022

• Chinese Hackers Distribute Backdoored Web3 Wallets for iOS and Android Users

• Vulnerabilities in Industrial Control Systems Lets Attackers Remotely Unlock Doors

• Facilitating Convergence of Physical Security and Cyber Security With Open Source Intelligence

• Chinese Hackers Adding Backdoor to iOS, Android Web3 Wallets in ‘SeaFlower’ Campaign

• Chinese ‘Gallium’ Hackers Using New PingPull Malware in Cyberespionage Attacks

• HelloXD Ransomware operators install MicroBackdoor on target systems

• 1-15 May 2022 Cyber Attacks Timeline

• How to Combat Ransomware Attacks with Zero Trust

• Building HIPAA Compliant APIs

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of June 06, 2022

• Bluetooth Signals Can Be Used to Track Smartphones, Say Researchers

• Google Chrome Built-in Phishing Detection, Expert Reaction

• New Emotet Variant Stealing Users’ Credit Card Information From Google Chrome

• What Are Top Threats To The Cloud Computing?

• Security Leaders Discuss Industry Drivers at Dark Reading’s News Desk at RSAC 2022

• A compelling story

• The Road To Valhalla – The Urgency For Cyber Change

• How Microsoft Forgot To Renew The Certificate For Its Windows Insider Subdomain

• Metasploit 6.2.0 comes with 138 new modules, 148 enhancements and features

• Serious vulnerabilities found in ITarian software, patches available for SaaS products

• Time to update: Google patches seven Chrome browser bugs, four rated ‘high’ risk

• Academics Devise New Speculative Execution Attack Against Apple M1 Chips

• Travel tips and how to stay safe while on the go this summer

• SpaceX Starship Orbital Launch Faces NASA Challenge

• Cybercriminals, State-Sponsored Threat Actors Exploiting Confluence Server Vulnerability

• Shanghai’s Censors Can’t Hide Stories of the Dead

• Russia Reportedly Warns of “Direct Military Clash” if Cyber-Attacks on its Infrastructure Continue

• Ferrari ‘Plans Plant Expansion’ Amidst Electric Push

• Stronger Together: 4 things to do at Infosecurity Europe 2022

• Researcher Shows How Tesla Key Card Feature Can Be Abused to Steal Cars

• Quick and Simple: BPFDoor Explained

• Researchers Disclose Rooting Backdoor in Mitel IP Phones for Businesses

• Large Numbers of Extortion Emails Blocked Daily

• ActZero MDR for Mobile solution protects businesses against advanced threats

• Government Pushes NHS Data Sharing Amidst Controversy

• Second Version of Hello XD Ransomware Drops Backdoor While Encrypting

• Microsoft helps prevent lateral movement from compromised unmanaged devices

• A week in security (June 6 – June 12)

• Aoquin Dragon from China hacking Australian Government Servers

• Government Pushes Ahead With NHS Data Sharing

• Googler Suspended After Claiming AI Became Sentient

• Organisations in Australia and Southeast Asia Targeted by Aoqin Dragon For Over 10 Years

• Eight Zero Days Could Open Doors for Hackers

• Two Convicted in Major Drugs Bust After Cops Read Encrypted Chats

• Sky Backs £100m Fund For Climate Tech

• Hello XD Ransomware Installing Backdoor on Targeted Windows and Linux Systems

• How To Protect Your Personal Data From Breaches

• Vulnerability Management: How Can the Infosec Team Reach an Agreement With the IT Department?

• Ransomware Viruses Are Not Going Away

• UK Tech Start-Ups See Record Quarterly Investment

• 83% of IT pros are using either hybrid or multi-cloud

• Using WiFi connection probe requests to track users

• Software developers, how secure is your software ?

• Cyber attacks on Indian Government websites due to comments on Prophet Muhammad

• AI Demon scares Google Employee

• How organizations can protect themselves in the emerging risk landscape

• API security warrants its own specific solution

• Businesses are leaving bot attacks unchallenged for almost four months

• Iranian Hackers Spotted Using a new DNS Hijacking Malware in Recent Attacks

• Increased cloud complexity needs stronger cybersecurity

• The State of Security: Ransomware

• 45% of cybersecurity pros are considering quitting the industry due to stress

• The United Nations’ List of ‘Not Listed’ Terrorist Entities

• Security Affairs newsletter Round 369 by Pierluigi Paganini

• IT Security News Weekly Summary – Week 23

• IT Security News Daily Summary 2022-06-12

• The attacker’s toolkit: Ransomware-as-a-service

• The United Nations’ List of “Not Listed” Terrorist Entities

• Security Bug Detected in Apple M1 Processor Chipsets

• Companies Continue to Pay Multiple Ransom Demands

• Convergint Expands STEP Up Program, Prioritizes School Safety as Part of Annual, Global Convergint Social Responsibility Day

• Delivering Apps Securely Across Any Network and Cloud

• Fraudsters Resorting to ‘Synthetic Identity Fraud to Commit Financial Crimes

• How SeaFlower 藏海花 installs backdoors in iOS/Android web3 wallets to steal your seed phrase

• A Complete Malware Analysis Tutorials, Cheatsheet & Tools list for Security Professionals

• Ransomware gangs are exploiting CVE-2022-26134 RCE in Atlassian Confluence servers

• Conti’s Attack Against Costa Rica Sparks a New Ransomware Era

• HID Mercury Access Controller flaws could allow to unlock Doors

• Weekly Update 299

• Week in review: Follina exploit delivers Qbot malware, Patch Tuesday forecast, RSAC 2022

• Penetration testing

• Your browser stores passwords and sensitive data in clear text in memory

• ERI Becomes First Recycler of Electronics to Achieve SOC 2 Type I Compliance and NAID AAA Certification

• ZITADEL raises $2.5 million to enhance its open-source identity management platform

• Pavilion Data Systems partners with EngineRoom to create new data storage capabilities

Generated on 2022-06-19 23:59:20.710326