IT Security News Weekly Summary – Week 26

• IT Security News Daily Summary 2022-07-03

• Tens of Jenkins plugins are affected by zero-day vulnerabilities

• ZuoRAT Malware Targets SOHO Routers In North America, Europe – Expert Comment

• What Expert Says On Marqeta Expanding Credit Platform With 40 New APIs

• ATC Healthcare, Community of Hope & The People Concern Disclose Data Breaches

• Your Comments On Macmillan Ransomware Attack

• Almost Half Of UK Organisations Now Encrypt All Data, According To Annual Apricorn Survey

• Geographic Solutions Ransomware, Experts Weigh In

• Microsoft: Raspberry Robin worm already infected hundreds of networks

• 45% Of Financial Services Customers Are Very Comfortable Using Non-Password Login Methods, Are You?

• Skyhigh Security Partners With Gotara to Support and Mentor Women in Cybersecurity

• Security Affairs newsletter Round 372 by Pierluigi Paganini

• Why Are Cyber Insurance Premiums Going Up, And How Can You Get a Better Deal?

• Dutch University Receives Bitcoin Ransom Paid in 2019

• Users get Directly Infected by AstraLocker 2.0 via Word Files

• Google Blocks Malicious Domains Used by Hack-for-hire Groups

• Why Is It So Difficult to Get Off a Terrorist List?

• Half of actively exploited zero-day issues in H1 2022 are variants of previous flaws

• Lazarus Group Responsible For $100M Crypto-Heist

• What to do about inherent security flaws in critical infrastructure?

• Microsoft Detects Raspberry Robin Worm in Windows Networks

• Week in review: ZuoRAT targeting SOHO routers, trends affecting your security strategy

• Penetration testing

• Bourse des Vols – 1,460,130 breached accounts

• IronNet Added to Membership of Russell 2000Ⓡ and 3000Ⓡ Indexes

• Inspectiv raises $8.6 million to help companies protect against security threats

• Sourcepoint hires Chris Chapman as CTO and promotes Chloe Grutchfield to CPO

• IT Security News Daily Summary 2022-07-02

• Experts shared PoC exploit code for RCE in Zoho ManageEngine ADAudit Plus tool

• The role of Social Media in modern society – Social Media Day 22 interview

• Why you should care about privacy computing technologies

• Why more regulation of connected car technology is probably just up the road

• Susceptible APIs Costing Organizations Billions Every year

• Fortified Castles With Wooden Gates: Weak Keys and Outdated Machine Identity Management Undermine TLSv1.3 Adoption

• A New YTStealer Malware Targets YouTube Content Creator

• Experts: California Lacked Safeguards for Gun Owner Info

• California Gun Permit Website Exposes User Data

• Netwalker: Ex Canadian Government Employee Pleads Guilty to Cybercrimes

• Gun Database Breach Leaks Details on Thousands of Owners

• Why Zero Trust is Easier Said Than Done

• LiFi, the Technology That Brings You the Internet Through Light

• Dutch Uni Gets Cyber Ransom Money Back… With Interest

• Google location tracking to forget you were ever at that medical clinic

• Build or Buy your own antivirus product

• Weekly Update 302

• Phishing scam poses as Canadian tax agency before Canada Day

• Watch out for survey scams – Week in security with Tony Anscombe

• A ransomware attack forced publishing giant Macmillan to shuts down its systems

• TikTok Assures U.S. Lawmakers it’s Working to Safeguard User Data From Chinese Staff

• Resecurity’s cybersecurity solutions now available in the Microsoft Azure marketplace

• Cassidy Hutchinson’s Testimony Changed Our Minds About Indicting Donald Trump

• Google Blocked Dozens of Domains Used by Hack-for-hire Groups

• Distros and RegRipper, pt deux

• Ransomware review: June 2022

• IT Security News Daily Summary 2022-07-01

• ICYMI: A Microsoft Warning, Follina, Atlassian, and More

• Report Claims Coinbase Selling User Geolocation Data to ICE

• Most orgs struggle to manage alerts and vulnerabilities: Here’s how to fix it

• Cyberattack shuts down unemployment, labor websites across the US

• Facebook 2FA phish arrives just 28 minutes after scam domain created

• Facebook Asks Court To “Crack The Whip” To Silence Black Whistleblower

• SessionManager Backdoor employed in attacks on Microsoft IIS servers worldwide

• How to Monitor Athena Usage to Understand Your Operations, and Control Security and Costs

• Time Constraints Hamper Security Awareness Programs

• OpenSea NFT Marketplace Faces Insider Hack

• Cyber insurance sticker shock gives some state and local governments pause

• Google cracks down on sites with ties to hack-for-hire groups in UAE, Russia, India

• California concealed-carry permit data exposed

• Highly Sophisticated Malware Attacks Home and Small Office Routers

• AstraLocker 2.0 ransomware isn’t going to give you your files back

• Crypto sleuths pin $100 million Harmony theft on Lazarus Group

• The business of hackers-for-hire threat actors

• YTStealer targets YouTube content creators

• GSA puts Polaris contract back in motion

• Data breach of NFT marketplace OpenSea may expose customers to phishing attacks

• “Missing Cryptoqueen” hits the FBI’s Ten Most Wanted list

• Criminals Use Deepfake Videos to Interview for Remote Work

• Iranian Hackers: Israeli Tourism Sites Targeted

• NFT Marketplace OpenSea Suffers a Major Data Breach

• DIDs approved to W3C recommendation

• Vendors prep for new cyber rules of the road

• New ‘SessionManager’ Backdoor Targeting Microsoft Exchange Servers Worldwide

• Microsoft Spots Updated Cryptomining Malware Tool Targeting Linux Systems

• Cassidy Hutchinson’s Testimony Changed Our Minds about Indicting Donald Trump

• API Security Losses Total Billions, US Companies Hit Hard

• Safety group offers warnings on emerging transportation tech

• New ‘SessionManager’ Backdoor is Targeting Microsoft Exchange Servers Worldwide

• CISA Adds One Known Exploited Vulnerability to Catalog

• Google Improves Its Password Manager to Boost Security Across All Platforms

• Microsoft Warns About Evolving Capabilities of Toll Fraud Android Malware Apps

• “Know your enemy,” and other cybersecurity lessons from Sun Tzu’s Art of War

• Teenagers are being encouraged to spread ransomware

• Facial recognition in Oz

• Threat Actor Claims Responsibility For IBM and Stanford University Hack

• DragonForce Malaysia Releases LPE Exploit, Threatens Ransomware

• CISA Adds One Known Exploited Vulnerability to Catalog

• How vulnerability in Brocade Might Affect Major Companies

• Trust Key to Space Travel, Like Cybersecurity, Says Astronaut Tim Peake

• A long-running cryptomining campaign conducted by 8220 hackers now targets Linux servers

• Analyzing the Swiss E-Voting System

• How is Red Hat addressing the demand to develop offerings more securely?

• Patch vs Hotfix vs Coldfix vs Bugfix – What’s the Difference, What Do They Fix, and When to Apply Them

• Macmillan Attacked with Ransomware

• NFT Giant OpenSea Reports Major Email Data Breach

• UnRAR Vulnerability Lets Attackers Hack Zimbra Webmail Servers

• Cybersecurity Leaders Are Anticipating Mass Resignations Within The Year – Here’s Why

• SPACE Dynamic Orchestration in the SASE Cloud with Cato Networks

• A Research of Threat Actor Activity & Myths Busted by Cato Networks

• A Vulnerability Management Program is Nothing Without Identity Risk Protection

• Web Hosting And Its Types

• 14 Reasons to Consider Custom Software Development for Your Business

• When It Comes to SBOMs, Do You Know the Ingredients in Your Ingredients?

• FBI adds ‘Cryptoqueen’ Ruja Ignatova To Top Ten Most Wanted

• External Exposures caused 82% Of All Q1 Cyber Attacks – Expert Comments

• Kaseya Ransomware – Cyber Leader’s Thoughts & Learnings One Year Later

• New Ipandetec’s Report Features ISPs’ Privacy Best Practices and Flaws in Panamá

• GRR Rapid Response Github Tool

• US Approves SpaceX Starlink For Planes, Trains And … Ships

• Oak9 adds security for infrastructure-as-code and the cloud

• QuSecure Scores Post-Quantum Cybersecurity Contract Worth More Than $100M Annually

• The Complete Guide to Acceptable Use Policies (AUP)

• Top 10 cybersecurity colleges in the U.S. in 2022

• Cybersecurity degrees: types, comparisons and best practices for selection

• Over a Decade in Software Security: What Have We learned?

• Why Buying Cardano in 2022 Might Not Be Too Late

• Microsoft: This Android malware will switch off your Wi-Fi, empty your wallet

• Get one year of this leading VPN for just $30

• Google: Half of 2022’s Zero-Days Are Variants of Previous Vulnerabilities

• A Talk About Unified Identity Security & Deploying Resilience

• Bitcoin Falls Below $19,000, But Recovers Slightly Friday

• Google Blocks Domains of Hack-for-Hire Groups in Russia, India, UAE

• Is Your New Car a Threat to National Security?

• Meta Slashes Hiring As It Braces For Downturn – Report

• Cyberattack Disrupts Unemployment Benefits in Some States

• C-Suite Ignoring Smart Factory Cyber-Threats

• New ‘SessionManager’ Backdoor Targeting Microsoft IIS Servers in the Wild

• Macmillan Publishers Shut Down Systems After Security Incident

• FBI and CISA warn: This ransomware is using RDP flaws to break into networks

• Man Arrested in LA For Alleged Involvement in Multi-Million Dollar Fraud Scheme

• Santander Warns of 87% Surge in Celeb Crypto Scams

• Researchers Warn of Teen Hacking Group on Discord

• Ex-Canadian Government Employee Pleads Guilty to Involvement With NetWalker Ransomware Group

• Silicon In Focus Podcast: Connected Business

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Amazon Quietly Patches ‘High Severity’ Vulnerability in Android Photos App

• Pro-Russian hackers launched a massive DDoS attack against Norway

• Microsoft gives its partners power to change AD privileges on customer systems – without permission

• Amazon Photos exhibit high severity vulnerability

• Ransomware attack suspected on Macmillan Publications

• Microsoft Warns of Cryptomining Malware Campaign Targeting Linux Servers

• New infosec products of the week: July 1, 2022

• API security: 12 essential best practices to keep your data & APIs safe

• The challenges and advantages of building behavior-based threat detection

• Product showcase: Group-IB Unified Risk Platform

• Infosec products of the month: June 2022

• Cadence Design Systems Xcelium Apps improves verification performances for design teams

• Apiiro platform enhancements allow developers to proactively remediate critical risks

• NXM Autonomous Security platform protects space infrastructure and IoT devices from cyberattacks

• Managed Cloud Hosting vs. Unmanaged Cloud Hosting: What’s the Difference?

• New YTStealer Malware is Hijacking YouTube Channels

• Ocient collaborates with Carahsoft to accelerate digital transformation for U.S. government agencies

• Siemens and NVIDIA join forces to enable industrial metaverse

• Skyhigh Security collaborates with Gotara to increase diversity in the cybersecurity sector

• Argyle partners with Ping Identity to help customers protect against fraud

• Thrive acquires Edge Technology Group to strenghten its international presence for all customers

• Agita Labs TrustForge now available in the Microsoft Azure cloud

• Korean cybersecurity agency released a free decryptor for Hive ransomware

• John Kindervag joins Cloud Security Alliance as Security Advisor

• Precisely hires Anna Langhorne as CPO

• Increasing severity of natural disasters underscores need for technology and preparation

• Should You Really Delete Your Period Tracking App?

• IT Security News Monthly Summary – July

• IT Security News Daily Summary 2022-06-30

• Officers’ smart cards foster transparency, community trust

• EFF to File Amicus Brief in First U.S. Case Challenging Dragnet Keyword Warrant

• OpenSea phishing threat after rogue insider leaks customer email addresses

• NFT Marketplace OpenSea Suffers Data Breach- Users’ Email IDs Leaked

• Google: Hack-for-Hire Groups Present a Potent Threat

• ZuoRAT Malware Is Targeting Routers

• Jenkins warns of security holes in these 25 plugins

• Research shows data security tools fail against ransomware 60% of the time

• Pentagon’s classification system lacks consistency, IG finds

• Facebook Wrestles With Decision To Share User Data With Law Enforcement Following Roe V. Wade Decision

• 18 Zero-Days Exploited So Far in 2022

• State and local leaders call for overhaul of nation’s 911 system

• How cities and states track pandemic relief spending

• How traditional security tools fail to protect companies against ransomware

• Hacking Linux is Easy with PwnKit

• API Security Losses Total Billions, But It’s Complicated

• California state’s gun control websites expose 10 years of personal data

• 6 Reasons Cybersecurity Awareness Training is Important

• Verizon to improve internet connectivity at 80 Native American schools

• Oak9 Lands $8 Million in New Venture Investment

• Exchange Servers Backdoored Globally by SessionManager

• How to Find Extra Cybersecurity Budget

• Cyberattack Struck Norway, Pro-Russian Hacker Group Fingered

• Dark data: Managing the data you can’t see

• #StopRansomware: MedusaLocker

• #StopRansomware: MedusaLocker

• How to Spend Less Time on Web and API Security

• DOJ sues to block spy tech deal

• North Korea Lazarus Hackers Blamed for $100 Million Horizon Bridge Heist

• SANS Institute: Human error remains the top security issue

• #StopRansomware: MedusaLocker

• #StopRansomware: MedusaLocker

• Experts blame North Korea-linked Lazarus APT for the Harmony hack

• Can global recruitment solve the cybersecurity hiring problem?

• API attack types and mitigations

• Stories from the SOC – Detecting internal reconnaissance

• Malicious Facebook Messenger Chatbots Steal Facebook Pages User’s Credentials

• ZuoRAT Can Take Over Widely Used SOHO Routers

• Former Canadian Government IT Worker Pleads Guilty Over NetWalker Ransomware Attacks

• Digital Rights Updates with EFFector 34.4

• BT Disappointed As CWU Votes To Strike, Despite 5 To 8 Percent Pay Rise

• NXM Announces Platform That Protects Space Infrastructure and IoT Devices From Cyberattacks

• A Fintech Horror Story: How One Company Prioritizes Cybersecurity

• Study Reveals Traditional Data Security Tools Have a 60% Failure Rate Against Ransomware and Extortion

• Gateway Load Balancer now generally available in all regions

• Top 1 Million Analysis – June 2022

• It’s Social Media Day! Here’s How to Protect Yourself From Social Engineering Online

• CISA Urges Exchange Online Authentication Update

• Top of Mind Security Insights from In-Person Interactions

• Walmart targeted by Yanluowang Ransomware attack is false

• What is Pharming? Definition and Prevention

• Google announces big update to Password Manager

• CISA’s CIO talks about the cyber agency’s growth and expanding mission

• Google battles bots, puts Workspace admins on alert

• Have you ever found phishing emails confusing? You aren’t alone

• North Korea’s Lazarus Group Suspected of $100m Harmony Hack

• Google Blocks Dozens of Malicious Domains Operated by Hack-for-Hire Groups

• Microsoft Warns Malware That Targets Linux Just Got A Big Update

• The Supreme Court Just Fucked The Planet

• Leaky Access Tokens Exposed Amazon Photos Of Users

• China Lured Graduate Jobseekers Into Digital Espionage

• ZuoRAT is a sophisticated malware that mainly targets SOHO routers

• CISA Issues Warning Regarding Active Exploitation of ‘PwnKit’ Linux Security Bug

• Google Faces Fresh Privacy Complaints From EU Consumer Groups

• LockBit ransomware gang promises bounty payment for personal data

• Token Raises $13 Million for Its Biometric Authentication Ring

• DragonForce Malaysia Group Releases Windows LPE Exploit and Turns to Ransomware Tactics

• Critical ManageEngine ADAudit Plus Vulnerability Allows Network Takeover, Mass Data Exfiltration

• The Chatter Podcast: Secret Service Dilemmas and Training with Jon Wackrow

• It’s Time to Designate Wagner Group as a Foreign Terrorist Organization

• Keeping Your Smart Home Secure & Private

• Amazon Photos vulnerability could have given attackers access to user files and data

• ESG’s Report on the Role of XDR in SOC Modernization

• Criminals are applying for remote work using deepfake and stolen identities, says FBI

• Facebook Users Phished by a Chatbot Campaign

• June 2022 Web Server Survey

• Ex-Canadian government employee admits to being a member of the Russian cybercrime gang NetWalker

• Immigration organisations targeted by APT group Evilnum

• Is 2022 the Year of Secure Access Service Edge?

• Update now! Mozilla fixes security vulnerabilities and introduces a new privacy feature for Firefox

• Black Basta ransomware – what you need to know

• SOHO routers used as initial point of compromise in stealth attack campaign

• Google Workspace Now Warns Admins of Sensitive Changes

• Zero-Days Aren’t Going Away Anytime Soon & What Leaders Need to Know

• Using process creation properties to catch evasion techniques

• Toll fraud malware: How an Android application can drain your wallet

• Google To Shut Down Hangouts Later This Year

• Raccoon Stealer returns with a new bag of tricks

• Report: Only 8 ransomware groups have attacked over 500 organizations

• Get 15 hours of basic cybersecurity education online for just $29

• S3 Ep89: Sextortion, blockchain blunder, and an OpenSSL bugfix [Podcast + Transcript]

• The ever-evolving role of the CISO: Cybersecurity leadership skills needed in the future of work

• Weaponizing and Abusing Hidden Functionalities Contained in Office Document Properties

• Water Wars: ‘We’ve Seen This Movie Before’: U.S. Suspicious of Beijing’s Motives in Solomon Islands

• YouTube Creators Have Their Accounts Stolen by the New YTStealer Malware

• Xerox CEO John Visentin Dies, Aged 59

• Burp Suite 2022.5.1 Released – What’s New !!

• SOHO Routers in North America and Europe Targeted With ‘ZuoRAT’ Malware

• A New, Remarkably Sophisticated Malware Is Attacking Routers

• U.S. FCC Commissioner Asks Apple and Google to Remove TikTok from App Stores

• RansomHouse claims to have stolen at least 450GB of AMD’s data

• Evaluating the use of encryption across the world’s top one million sites

• How can you find and retain new cybersecurity talent?

• Cyber threat analyst: Key job skills and expected salary

• A Guide to Surviving a Ransomware Attack

• Brocade Vulnerabilities Could Impact Storage Solutions of Several Major Companies

• Feature: Securing the Metaverse and Web3

• What is Shadow IT and why is it so risky?

• Microsoft warning: This malware that targets Linux just got a big update

• Costco 40th anniversary scam targets WhatsApp users

• Protect your browsing for life with this innovative hardware

• Vulnerability in Amazon Photos Android App Exposed User Information

• You Need to Update Windows and Chrome Right Now

• ZuoRAT Exploits Weaknesses in SOHO Routers to Target Remote Employees

• Samsung Starts 3-nanometre Chip Production

• RSAC22 and Infosecurity Europe, Three Weeks, Two Events

• North Korea-Backed Hacking Collective Lazarus Group Suspected to be Behind Recent Harmony Bridge Attack

• This Phishing Campaign Used Malicious Chatbots To Steal Facebook Logins

• Black Basta Ransomware Operators Expand Their Attack Arsenal With QakBot Trojan and PrintNightmare Exploit

• Cyberattack Hits Norway, Pro-Russian Hacker Group Fingered

• Canadian NetWalker Ransomware Affiliate Pleads Guilty in US

• Walmart Denies Being Hit by Yanlouwang Ransomware Attack

• A conversation with Andrew Clarke, Global Head of Channel and Strategic Alliances at One Identity

• Most Brits Concerned About Their Search History Data, ExpressVPN Finds

• CISA: Switch to Microsoft Exchange Online ‘Modern Auth’ before October

• Ex-Canadian Government Employee Pleads Guilty Over NetWalker Ransomware Attacks

• YTStealer Malware Found to Steal Accounts From Creators

• North Korea is likely culprit behind $100 million crypto heist, researchers say

• Info-Stealing Campaign Targeted Home Workers for Two Years

• Cybersecurity leaders are anticipating mass resignations within the year

• How to Run Windows 11 for Free on an M1 or M2 Mac

• Ukrainian Cops Bust Multimillion-Dollar Phishing Gang

• Nevadan Arrested for Alleged $45m Metaverse Investment Fraud

• The SessionManager IIS backdoor

• The iPhone at 15 – Intego Mac Podcast Episode 246

• AI ethics should be hardcoded like security by design

• The SessionManager IIS backdoor: a possibly overlooked GELSEMIUM artefact

• Cyber Week 2022 video walkthrough

• 10 Must-Have Streaming Services and Apps in 2022

• Do you know what your supply chain is and if it is secure?

• Understanding Have I Been Pwned’s Use of SHA-1 and k-Anonymity

• If you were a queer girl in the 2000s, you were on LiveJournal

• North Korean Hackers Suspected to be Behind $100M Horizon Bridge Hack

• YTStealer info-stealing malware targets YouTube content creators

• Palo Alto Networks Products Added to the DoD ESI Portfolio

• Uncovering FabricScape

• New Hertzbleed vulnerability affects modern AMD and Intel Processors

• UK to save Lithuania and Georgia from Russian Cyber Attacks

• Evolving online habits have paved the way for fraud. What can we do about it?

• DevSecOps deploy and operate processes

• How businesses are prioritizing data privacy

• Key takeaways from RSA Conference 2022

• EMEA continues to be a hotspot for malware threats

• Raccoon Stealer is Back with a New Version

• What you need to know about PCI 4.0: Requirements 10, 11 and 12

• Rafay Systems Paralus helps users achieve secure access to Kubernetes clusters

• G-Core Labs’ stand-alone solution offers protection against SYN Flood DDoS attacks

• Israel plans ‘Cyber-Dome’ to defeat digital attacks from Iran and others

• TBH Meaning + Online Slang Parents Should Know

• Impinj releases E910 RAIN RFID reader chip for next-generation enterprise IoT

• Immue discovers new vulnerability in Apple’s private relay

• Immuta and Databricks address the management challenges associated with data policies

• Cisco collaborates with GDIT to deliver private 5G solutions for the government sector

• PCI Pal partners with Teleperformance to protect expanding payment methods for customers

• Commvault expands its partnership with Oracle to accelerate enterprise hybrid cloud adoption

• FiveBy and Microsoft join forces to defend organizations against fraud related attacks

• Normalyze emerges from stealth and raises $22.2 million to help organizations manage sensitive data

• Cloud Security Alliance and Cyber Risk Institute develop CCM addendum for the financial sector

• Start using Modern Auth now for Exchange Online

• Agam Upadhyay joins Data Dynamics Board of Directors

• Trinsic raises $8.5 million to build user-controlled identity products

• Red River appoints Dan Kent as CTO

• The Journalism Competition and Preservation Act Will Produce Neither Competition Nor Preservation

• Biosurveillance network crucial to public health preparedness, GAO says

• IT Security News Daily Summary 2022-06-29

• Facebook Phishing Scam: Crooks Using Messenger Chatbots to Steal Login Data

• Dashboard tracks city’s mental health crisis response

• How to Present Cloud Risk to the Board

• Updated digital forensics database speeds criminal investigations

• Buy now, pay later: How nextgen financing platforms can survive the new frontier of fraud

• VA enables Login.gov for three major veteran portals

• Roe v. Wade fallout: How tech giants and big banks are changing employee policies to adapt

• Leaky Access Tokens Exposed Amazon Photos of Users

• Patch Now: Linux Container-Escape Flaw in Azure Service Fabric

• Sysdig Secure update adds ability to stop container attacks at runtime

• Patchable And Preventable Security Issues Lead Causes Of Q1 Attacks

• Canadian Admits To Hacking Spree With Russian Cyber-Gang

• FBI Warns Crooks Are Using Deep Fake Videos In Interviews For Remote Gigs

• Bumblebee Fast Becoming Favorite For Ransomware Gangs

• ‘Prolific’ NetWalker extortionist pleads guilty to ransomware charges

• ZuoRAT Hijacks SOHO Routers from Cisco, Netgear

• Adapting industrial control system (ICS) security to the new normal

• Can iPhones Get Viruses?

• 450GB of Suspected AMD Data Stolen by RansomHouse Gang

• Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

• Offensive Security Welcomes Cybersecurity Bills Signed into Law

• ATO Attacks Targeting Financial Services Increased 58 Percent in May. Who Else Needs to Worry?

• Broken Authentication Vuln Threatens Amazon Photos Android App

• Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

• A Cyber Persistence Way to Norms

• Flubot: the evolution of a notorious Android Banking Malware

• 4 Ways AI Capabilities Transform Security

• Marine Corps shares new information warfare doctrine

• Lawmakers debate ROI on cyber insurance

• Early warning system pinpoints flooded roads in some states

• Police are looking to algorithms to predict domestic violence

• Do back offices mean backdoors?

• Firefox 102 fixes address bar spoofing security hole (and helps with Follina!)

• Cybersecurity Researchers Launch New Malware Hunting Tool YARAify

• Nearly a Million Kubernetes Instances Exposed on Internet

• How to Master the Kill Chain Before Your Attackers Do

• Russian Hacker Group Says Cyber Attacks Continue On Lithuania

• How Dangerous Is BlackBasta Ransomware?

• A guide to teaching cybersecurity skills to special needs students

• All you need to know about data security and its benefits for small businesses

• New in Cybersecurity – Insights, threat trends, & RSA learnings

• SolarWinds hack explained: Everything you need to know

• New UnRAR Vulnerability Could Lead to Zimbra Webmail Hack

• Expert Insight On RansomHouse Attacking AMD

• 82% Cyber Breaches In Verizon’s Report Preventable, Says MyCena

• Kubernetes API: Over 900,000 Exposures Found Across The Internet

• Minors Use Discord Servers To Earn Extra Pocket Money Through Spreading Malware

• Cybercriminals Use Azure Front Door in Phishing Attacks

• More Than A “You’ve Been Breached Mentality” – Zero Trust, Quantum Computers, And the Future of Cyber

• It’s time for Internet Providers to Become Primary Security Providers

• Microsoft at RSA 2022: Envisioning the future of security

• Cisco Talos discovers techniques to uncover ransomware groups

• Deepfake video call: New effort discovered

• Period tracking apps are no longer safe. Delete them

• Amazon Fixes High Severity Vulnerability in Amazon Photos Android App

• What do customers really want (and need) from security?

• Criminals Are Using Deepfakes To Apply To Remote Jobs, Expert Response

• Chinese Hackers Deploy Shadowpad Backdoor to Target Industrial Control Systems in Asia

• Norway Hit By DDoS Cyber Attacks From Pro Russian Group

• Revive – An Android Malware Intercepting All SMS To Steal 2FA/OTP

• Google Analytics Continues to Lose SEO Visibility as Bans Continue

• Facebook Business Pages Targeted via Chatbot in Data-Harvesting Campaign

• Kaspersky Reveals Phishing Emails That Employees Find Most Confusing

• 5 Surprising Cyberattacks AI Stopped This Year

• Shifting the Cybersecurity Paradigm From Severity-Focused to Risk-Centric

• LockBit 3.0: Launch of Ransomware Bug Bounty Program

• 10 best antivirus software solutions for your business

• Path Traversal flaw in UnRAR utility can allow hacking Zimbra Mail servers

• ICE Enacts New Policy Protecting Media From Legal Demands

• This Banking Trojan is Targeting Users of Spanish Financial Services

• Google Tells Staff They Can Relocate After Roe v Wade Ending

• Vulnerability management: All you need to know

• This new malware is at the heart of the ransomware ecosystem

• Cybersecurity leaders are anticipating mass resignations within the year – here’s why

• Introduction to JWT (Also JWS, JWE, JWA, JWK)

• 8 enterprise password managers and the companies that will love them

• How to de-anonymize fraudulent Tor web servers

• Securing the Metaverse and Web3

• Azure Service Fabric Vulnerability Can Lead to Cluster Takeover

• ICE enacts new policy protecting media from legal demands

• Heimdal™ Security Featured in G2 Summer Reports Niche Quadrant 2022

• Threat Hunting Journal – June 2022 Edition

• Hundreds of Websites and Piracy Apps Seized in US-Brazil’s Operation 404.4

• How to Protect Your Social Media Accounts

• Patchable and Preventable Security Issues Lead Causes of Q1 Attacks

• Firefox 102 Patches 19 Vulnerabilities, Improves Privacy

• European Cybersecurity Blogger Awards 2022 Winners Announced

• Heimdal™ Security Featured in G2 Summer Reports Niche Quadrant 2022

• Taiwan Developing Own Digital Currency – Report

• 3 Ways an Employee Scheduling App Can Streamline Your Business

• This sophisticated malware is targeting routers to break into networks

• These are the 25 most dangerous software bugs of 2022

• This new malware is now at the heart of the ransomware ecosystem

• New YTStealer Malware Aims to Hijack Accounts of YouTube Content Creators

• Heimdal™ Security Featured in G2 Summer Reports Niche Quadrant 2022

• YTStealer Malware: “YouTube Cookies! Om Nom Nom Nom”

• Top 20 cybersecurity interview questions to know in 2022

• The Top Mobile Security Threats of 2022

• Zero-trust network access provider, Cyolo, strengthens authentication offerings

• CISA Calls for Expedited Adoption of Modern Authentication Ahead of Deadline

• Cloud Security Resources and Guidance

• Four Steps to Using Metrics to Defend Your Security Budget

• Tesla Cuts 200 Autopilot Jobs, Closes San Mateo Office – Report

• FBI warning: Crooks are using deepfakes to apply for remote tech jobs

• MITRE Publishes 2022 List of 25 Most Dangerous Vulnerabilities

• Evilnum Hackers Return

• Best Sites to Watch Football Highlights if You Missed the Game

• Are you eligible to get a cut out of the $90 million class action lawsuit against Facebook?

• Mitre shared 2022 CWE Top 25 most dangerous software weaknesses

• Evilnum Hackers Return With New Activity Targeting International Migration Campaigns

• Forced Chrome extensions get removed, keep reappearing

• 7-Zip Now Includes Mark-of-the-Web Security Feature Support

• CafePress Slapped With $500K Fine For The Data Breach Affecting 23M Customers

• Blockchain Firm Harmony Lost $100 Million In Cyber Theft

• Keona Clipper Malware Replaces Crypto Wallet Addresses In Clipboard

• LockBit 3.0 Ransomware Launches ‘Bug Bounty Program’

• US FCC Commissioner Urges Apple, Google To Remove TikTok

• CISA-Funded Project Enables Students With Disabilities to Learn Cybersecurity

• Enveil ZeroReveal ML Encrypted Training enables secure usage of cross-silo data sources

• Internet Safety Month: Everything you need to know about Omegle

• Airbnb Permanently Bans Parties, With Few Exceptions

• Hermit spyware is deployed with the help of a victim’s ISP

• TSP officials promise service will improve after a difficult transition to the new recordkeeping system

• Chinese Influence Op Tries to Undermine Western Rare Earth Firms

• New UnRAR Vulnerability Could Let Attackers Hack Zimbra Webmail Servers

• RansomHouse gang claims to have stolen 450GB of data from chip maker giant AMD

• Pro-PRC Influence Operation Dragonbridge Targets Rare Earth Mining Companies

• Codenotary SBOM Operator for Kubernetes provides continuously updated info on software supply chain

• FBI: Beware Deepfakes Used to Apply for Remote Jobs

• The Human Side of Cybersecurity – KnowBe4

• Penetration Testing in 2022: Key Trends and Challenges

• Ransomware Suspected in Wiltshire Farm Foods Attack

• New ‘FabricScape’ Bug in Microsoft Azure Service Fabric Impacts Linux Workloads

• Photos: Cyber Week 2022

• Top 5 Adobe Acrobat Alternatives 2022

• Nearly One Million Misconfigured Kubernetes Instances Exposed That Could Cause Data Breaches

• Cyber Security Management System (CSMS) for the Automotive Industry

• How to Perform a Penetration Test on Your Website

• Microsoft postpones shift to New Commerce Experience subscriptions

• FBI warning: crooks are using deepfake videos in interviews for remote gigs

• ShadowPad malware on Industrial Control Systems of Asia

• Kubernetes misconfiguration may lead to data hacks

• How parents can talk about online safety and personal info protection with their kids

• Open Systems Recognized as the Winner of 2022 Microsoft Swiss Partner of the Year

• Red River Names Dan Kent as Chief Technology Officer

• Industry Leader, Cyber Defense Magazine, Awards Calix ProtectIQ for Best in Anti-Phishing, Network Security, and Management for Helping Broadband Providers Protect Subscribers From Millions of Digital Threats

• ENTRY-LEVEL CYBERSECURITY JOBS KEY TO SOLVING WORKFORCE GAP

• The three core strengths of USM Anywhere

• Destructive firmware attacks pose a significant threat to businesses

• Guide to Web Application Penetration Testing

• CISA Warns of Active Exploitation of ‘PwnKit’ Linux Vulnerability in the Wild

• Why digital trust needs to be a strategic imperative for your company

• Trio accused of selling $88m of pirated Avaya licenses

• Teams that shift security left and focus on attackability ship more secure code

• The Role of IAM in Maintaining Cloud Security

• Fusion Risk Management announces new capabilities to improve incident response for organizations

• RangeForce platform updates enable users to conduct offensive and defensive attack scenarios

• 2022-06-27 – TA578 IcedID (Bokbot) with DarkVNC and Cobalt Strike

• Colt SASE Gateway protects hybrid workforce from malware and threats

• Airiam releases AirProducts to defend small and mid-sized enterprises against cyberattacks

• Cisco Routed Optical Networking enhancements help customers meet their sustainability goals

• 2022-06-27 – obama194 Qakbot with DarkVNC and Cobalt Strike

• Walmart accused of turning blind eye to transfer fraud totaling millions of dollars

• Phison and Cigent join forces to combat sophisticated threats and safeguard storage products

• Service Fabric Privilege Escalation from Containerized Workloads on Linux

• Digital Realty partners with HPE to accelerate digital transformation for enterprises

• SecureAuth appoints Dennis Dowd as VP of Worldwide Sales and promotes Karan Dua to CFO

• Pentagon finds concerning vulnerabilities on blockchain

• Crossword Cybersecurity Supply Chain Cyber practice improves supply chain resilience for organizations

• John Ferraro joins Keyavi Data as VP of Sales

• Pro-Russia Killnet Group Hit Top Lithuanian websites with Massive DDoS Attacks

• Improving digital employee experiences must start with cybersecurity

• How one city integrated mental health response into 911 dispatch systems

• EFF to European Court: Keep Encryption Alive

• IT Security News Daily Summary 2022-06-28

• Mayor launches IT modernization to boost services delivery

• NON-STATE ACTORS IN THE CYBERSPACE: AN ATTEMPT TO A TAXONOMIC CLASSIFICATION, ROLE, IMPACT AND RELATIONS WITH A STATE’S SOCIOECONOMIC STRUCTURE

• Five Key Trends on SOC Modernization

• Google bets big on government business with new division

• Air Force looks to HBCUs to lead its first university applied research center

• Local government on the edge: The future of IT infrastructure

• Normalyze Announces $22 Million for DSPM Technology

• ‘Raccoon Stealer’ Scurries Back on the Scene After Hiatus

• CISA Releases Guidance on Switching to Modern Auth in Exchange Online before October 1

• encryption

• Cisco Talos techniques uncover ransomware sites on dark web

• CISA Releases Guidance on Switching to Modern Auth in Exchange Online before October 1

• Trade groups seek changes to SEC’s breach disclosure plan

• The Link Between AWM Proxy & the Glupteba Botnet

• China-Backed APT Pwns Building-Automation Systems with ProxyLogon

• How venture capital teams can optimize success in cybersecurity

• CISA warns that Log4Shell remains a threat

• How to transfer data from LastPass to 1Password

• Report: Facebook Bans Users Who Say They Will Mail Abortion Pills

• Can Zero-Knowledge Crypto Solve Our Password Problems?

• Atlassian Confluence Exploits Peak at 100K Daily

• How SAST Will Improve Your Overall Security: Intro

• VMware report finds org modernization cannot succeed without observability

• Citizen science volunteers are almost entirely white

• Google Introduces New Capabilities for Cloud Armor Web Security Service

• Why the next-gen telecom ecosystem needs better regulations

• Toward Digital Solidarity

• Phony Copyright Emails Employed to Install LockBit Ransomware

• Best ways to incorporate security into the software development life cycle

• Cyolo Banks $60M Series B for ZTNA Technology

• CISA Says ‘PwnKit’ Linux Vulnerability Exploited in Attacks

• Wiz launches open database to track cloud vulnerabilities

• Nearly One Million Misconfigured Kubernetes Exposed That Could Cause Data Breaches

• A WAF Is Not a Free Lunch: Teaching the Shift-Left Security Mindset

• When Security Locks You Out of Everything

• Why a “Lift-and-shift” Cloud Migration Strategy Doesn’t Support Data Security

• SECURE North America | Users Aren’t the Weakest Link, They’re Your Allies

• How can your organization find and develop the next generation of cybersecurity?

• How can mentorship help the cybersecurity workforce gap?

• Authenticating legacy apps with a reverse proxy

• Hackers Deploy Shadowpad Backdoor and Target Industrial Control Systems in Asia

• ‘Supercookies’ Have Privacy Experts Sounding the Alarm

• 2022 CWE Top 25 Most Dangerous Software Weaknesses

• Apetito hit by a ransomware attack and so announces a delay in deliveries

• Ransomware Volume Nearly Doubles 2021 Totals in a Single Quarter

• 2022 CWE Top 25 Most Dangerous Software Weaknesses

• ZuoRAT Malware Hijacking Home-Office Routers to Spy on Targeted Networks

• Cisco Talos Supports Ukraine Through Empathy

• Defending Liberalism From the Right and Left

• 5 Cyber Security Tips for Smart Buildings

• How security leaders can help their teams avoid burnout

• Dragonbridge influencers targets rare earth miners, encourages protests to disrupt production

• Mitel VoIP Bug Exploited In Ransomware Attacks

• G7 To Tackle Cyber Threats And Disinformation From Russia

• Expert insights – USB Stick Containing An Entire City’s Personal Details Has Been Lost

• Experts Views On Ransomware-as-a-service (RaaS) Like “Black Basta”

• Multicloud management tools aim to tighten security and lower cost

• Cisco partnering with GDIT to provide private 5G to government agencies

• Android Spyware ‘Revive’ Upgraded to Banking Trojan

• LockBit 3.0 introduces important novelties, including a bug bounty program

• The Abortion Clues That Can Hide On Your Phone

• How To Watch Today’s Surprise Hearing From The Jan. 6 Committee

• RansomHouse Hits AMD And Claims To Have Stolen 450 Gigs Of Data

• Researchers uncover ZuoRAT malware targeting home-office routers

• Uber Agrees To Support Minimum Wage In Australia

• Black Basta Ransomware Emerging From Underground to Attack Corporate Networks

• Machine Learning in Cybersecurity

• Ransomware is the biggest global cyber threat. And the attacks are still evolving

• Codenotary introduces Software Bill of Materials service for Kubernetes

• Chinese Threat Actor Targets Rare Earth Mining Companies in North America, Australia

• Negotiating a golden parachute clause in a CISO contract

• Scanning container image vulnerabilities with Clair

• Phone Hackers: 9 Ways To Tell If You Have Fallen Victim

• AMD targeted by RansomHouse, cybercrims claim to have ‘450Gb’ in stolen data

• Customized malware coded to target OT systems

• Virtual Reality Sales Predicted To Take Off In Spite Of Economic Gloom

• Digital Shadows Weaken Your Attack Surface

• Clear Rules Needed to Prevent Conflict and Struggle in Cyber Space, Says NCSC Chief

• How to Find New Attack Primitives in Microsoft Azure

• How Can We Protect Against NotPetya Like Malware?

• 10 Arrested for Involvement in Online Sexual Exploitation in Europe

• Top Six Security Bad Habits, and How to Break Them

• New Database Catalogs Cloud Vulnerabilities, Security Issues

• Cybersecurity is complex – but it doesn’t need to be costly or complicated

• Have you modelled the attack paths into your organization? Because an attacker already has

• Log4Shell Vulnerability in VMware Leads to Data Exfiltration and Ransomware

• Ransomware attacks are the biggest global cyber threat and still evolving, warns cybersecurity chief

• Mitel VoIP Bug Exploited in Ransomware Attacks

• NIST Finalizes macOS Security Guidance

• New Vulnerability Database Catalogs Cloud Security Issues

• Home Insurance Buyer’s Guide: Has Technology Made Things Easier?

• Why You Should Look into An Automated Cloud DLP Solution: Intro

• ‘Killnet’ Adversary Pummels Lithuania with DDoS Attacks Over Blockade

• Chinese Hackers Target Building Management Systems

• Cyber-Physical Security: Benchmarking to Advance Your Journey

• VMware vSphere+ and vSAN+ provide centralized cloud-based infrastructure management

• City worker loses USB stick containing data on every resident after day of drinking

• Iran Steel Plants ‘Hit By Cyber-Attack’

• Malware-as-a-service is spreading among teens

• Kids are forming hacking groups online. Here’s what to do about it.

• Log4Shell Vulnerability Targeted in VMware Servers to Exfiltrate Data

• Wiltshire Farm Foods Cyberattack

• Russian Hackers Claim Responsibility For Cyberattack On Lithuania, Expert Reaction

• CafePress Was Fined $500,000 Following Major Data Breach

• How to Create Successful CISSP and CCSP Study Groups

• US Says Private Investment Boosts EV Charger Manufacturing

• How can I improve my Windows laptop’s battery life? [Ask ZDNet]

• LockBit 3.0 Ransomware Emerges With Bug Bounty Program

• APT Hackers Targeting Industrial Control Systems with ShadowPad Backdoor

• Latest OpenSSL version is affected by a remote memory corruption flaw

• How Pulsar Security Established their Continuous Cyber Workforce Development

• LGBTQ+ community targeted by extortionists who threaten to publish nudes

• Malicious Hackers go to Work as We Head for the Sun: Travelers Need to be on Their Guard Over the Summer Holidays and Weekend Breaks

• 97% Of UK Business Leaders Expect Quantum Computing to Disrupt Their Sectors

• Cyber Insurance: The Good, the Bad, and the Ugly

• Why Outsourcing IT Helps Your Business Grow

• Android App Automation Testing Made Easy – Tutorial

• Cloud security risks remain very human

• New Bumblebee malware loader increasingly adopted by cyber threat groups

• Stress and Burnout Could Lead to Exodus of CNI Cybersecurity Leaders

• Nasuni acquires Storage Made Easy to strengthen its file data services

• Connected Commerce: Next Generation Omnichannel

• Tencent Forms XR Unit In Metaverse Drive

• ANAF Spearphishing Campaign Zeroes in on Romanian Businesses

• Australian Retailer Pauses Facial Recognition Trial

• Enforcement of Biden’s federal employee COVID-19 vaccine mandate is delayed—again

• OpenSSL to Release Security Patch for Remote Memory Corruption Vulnerability

• Global Police Operation Cracks Down on Widespread Criminal Activity

• Cybersecurity Experts Warn of Emerging Threat of “Black Basta” Ransomware

• $100m Stolen from California Based Cryptocurrency Firm by Unidentified Hackers

• Center for Cyber Safety and Education Begins Program Updates to Increase Impact

• OpenSSH to Release Security Patch for Remote Memory Corruption Vulnerability

• Toshiba Adds Activist Board Members In Shift Toward Privatisation

• What are the solutions to cybersecurity hiring challenges?

• New Android Banking Trojan ‘Revive’ Targeting Users of Spanish Financial Services

• Peer Software partners with Pulsar Security to help enterprise customers combat ransomware attacks

• Looking for adding new detection technologies in your security products?

• Two critical flaws affect CODESYS ICS Automation Software

• Detection, isolation, and negotiation: Improving your ransomware preparedness and response

• An AI algorithm developed to see through walls

• Ransomware Attack news trending on Google

• Exploring the insecurity of readily available Wi-Fi networks

• Tencent admits to poisoned QR code attack on QQ chat platform

• Security frameworks / attestations and certifications: Which one is the right fit for your organization?

• Trends to watch when creating security strategy for the next two years

• Carnival Cruises torpedoed by US states, agrees to pay $6m after waves of cyberattacks

• Threat actors increasingly use third parties to run their scams

• Japanese City Worker Loses USB Containing Resident’s Personal Data

• Owner of CafePress Penalized $500,000 for Hiding a Data Breach

• Properly securing APIs is becoming increasingly urgent

• Are Protection Payments the Future of Ransomware? How Businesses Can Protect Themselves

• India extends deadline for compliance with infosec logging rules by 90 days

• Carnival Cruises torpedoed by US states, agrees to pay $6m after waves of cyber attacks

• Iran’s Largest Steel Producer Hit By Crippling Cyberattack

• OpenSSL 3.0.5 awaits release to fix potential worse-than-Heartbleed flaw

• MITRE promotes Beth Meinert to SVP and General Manager of MITRE Public Sector

• Lockbit ransomware gang creates first malicious bug bounty program

• Taking the payment friction out of regional transit

• Hochul names first chief cyber officer

• Federal, State Agencies’ Aid Programs Face Synthetic Identity Fraud

• Hexagon appoints Paolo Guglielmini as CEO

• The changing face of ransomware

• LockBit 3.0 Debuts with Ransomware Bug Bounty Program

• LGBTQ+ folks warned of dating app extortion scams

• IT Security News Daily Summary 2022-06-27

• Five Ways the Gaming & Gambling Industry is Targeted by Bad Bots

• Report: Facebook Is Showing Cancer Patients Ads With Medical Misinformation

• Federal Judge Orders Biden Administration to Continue Title 42

• The government of Lithuania confirmed it had been hit by an intense cyberattack

• You only have nine months to ditch Exchange Server 2013

• Zero-trust market shows signs of maturity at RSA 2022

• Brave Search wants to replace Google’s biased search results with yours

• Harmony blockchain loses nearly $100M due to hacked private keys

• Shadow IT Spurs 1 in 3 Cyberattacks

• How to Protect All Five Stages of the IoT Security Lifecycle

• Alert Fatigue Puts Your Organization at Risk; Here’s What to Do About It

• When 911 calls require a mental health response

• New USAF space buyer eyes fixed-price contracts

• Lithuania Says Hit by Cyberattack, Russia ‘Probably’ to Blame

• Ransomware Group Leveraged Mitel Zero-Day Bug To Target VOIP Appliances

• Cybersecurity Visibility and why it is critical for defense

• DHS looks to expand its Procurement Innovation Lab

• Allied cybersecurity agencies advise against disabling popular tool for cyberattackers

• Unknown Hacker Steals $100m From California-Based Cryptocurrency Firm Harmony

• CISA Adds Eight Known Exploited Vulnerabilities to Catalog  

• Infosecurity Europe: A show so secure a train strike couldn’t break it!

• Analysis of Industrial Control System Security

• Safe Security Publishes Results of New Predictive Model, Highlighting the Cyber Exposure of Specific Industries Over the Next 12 Months

• Sagewind Capital Leads Series B Financing for Code-X

• BigBear.ai Addresses the Future of AI, Smart Factories, and Cyber Applications at Upcoming Healthcare, Manufacturing, Cybersecurity, and Space Industry Events

• Stories from the SOC – Detecting internal reconnaissance

• API security: 12 essential best practices to keep your data & APIs safe

• An enterprise bug bounty program vs. VDP: Which is better?

• How to determine out-of-scope bug bounty assets

• Pro-Russian Hacker Group Killnet Hits Critical Government Websites in Lithuania

• CISA Adds Eight Known Exploited Vulnerabilities to Catalog  

• The Strategic Relevance of Cybersecurity Skills

• 4 breakthrough ideas for compliance and data security

• LockBit Ransomware Gang offers a bug bounty program

• How to install and use the Bitwarden Chrome plugin

• Chinese Researchers Find Critical Security Flaws in CoDeSys Automation Software

• The experience of bringing OpenSSL 3.0 into RHEL and Fedora

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Best cybersecurity schools and programs

• NIST Releases New macOS Security Guidance for Organizations

• FTC warns of LGBTQ+ extortion scams – be aware before you share!

• UK Security Services Must Seek Approval To Access Telecoms Data, Judge Rules

• Beijing Probes Security At Academic Journal Database

• Contractor Loses Entire Japanese City’s Personal Data In USB Fail

• Russia’s Killnet Hacker Group Says It Attacked Lithuania

• How to use Bitwarden on Android

• New Matanbuchus Campaign drops Cobalt Strike beacons

• Tencent Shares Fall As Biggest Investor Says It Will Sell

• House Passes ICS Cybersecurity Training Bill

• Thrive Acquires DSM

• 5 Ways to Retain More Cybersecurity Professionals at Your Organization

• Hacking gets dangerously real: 8 cybersecurity predictions to watch out for

• Spyware vendor targets iOS and Android in Italy and Kazakhstan, collaborates with ISP

• How to transfer LastPass to Bitwarden

• It’s a Race to Secure the Software Supply Chain — Have You Already Stumbled?

• Cybersecurity Experts Warn of Emerging Threat of “Black Basta” Ransomware

• Cerby Emerges From Stealth With Security Platform for Unmanageable Apps

• Apple ‘Prepared To Negotiate’ With Unionised Staff

• Cyberattack halted the production at the Iranian state-owned Khuzestan Steel company

• Conti vs. LockBit: A Comparative Analysis of Ransomware Groups

• Hackers Delivered a Lockbit Ransomware Through Fake Copyright Claim E-mail

• FTC Takes Action Against CafePress Over Massive Data Breach, Cover-Up

• 2022 Workshop on Economics and Information Security (WEIS)

• China Gaming Company Chief ‘To Move Abroad’

• 5 ways cybercriminals steal credit card details

• Netsec Goggle Customizes Brave Search Results to Show Only Cybersecurity Websites

• How to Use Microsoft Defender on All Your Devices

• New Windows Phishing Method gives attackers access to cookies and more

• Consumer Group Says Major Australian Retailers Using Facial Recognition

• 7 devops practices to improve application performance

• Security survives the budget axe

• Cyberattack Forces Iran Steel Company to Halt Production

• Final Call for Views on Government App Security Proposals

• Italy Data Protection Authority Warns Websites Against Use of Google Analytics

• What Are Shadow IDs, and How Are They Crucial in 2022?

• Critical Security Flaws Identified in CODESYS ICS Automation Software

• Ukrainian telecommunications operators hit by DarkCrystal RAT malware

• XM Cyber acquires Cyber Observer to help organizations improve their security posture

• Contractor loses entire Japanese city’s personal data in USB fail

• Google Jobs Service Hit By Fresh Antitrust Complaint In Denmark

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of June 20, 2022

• Researchers Warn of ‘Matanbuchus’ Malware Campaign Dropping Cobalt Strike Beacons

• Fake Copyright Emails Used to Deploy LockBit Ransomware

• Instagram introduces new ways for users to verify their age

• CISA Log4Shell warning: Patch VMware Horizon installations immediately

• Toshiba Board Set For Vote That Would Back Buyout Strategy

• Global Police Crack Down on Online Sexual Exploitation

• A week in security (June 20 – June 26)

• Deep fakes – a threat to truth online?

• CafePress Fined $500,000 After Massive Data Breach

• How to Detect and Respond to Unauthorized Access

• How to Opt For the Most High-Quality VPN Ever: Features and Criteria to Consider

• Nio ‘Investigating’ Deaths Of Two After EV Plunges From Building

• Snoopers’ Charter Ruled Partially Unlawful

• Threat actors stole $100M in crypto assets from Harmony

• Hackers Used Mitel Zero-Day Flaw To Target VOIP Appliances

• Python packages with malicious code expose secret AWS credentials

• Software developers, how secure is your software ?

• Scammer Who Used Info of Riot Games’ Co-Founder to Mine Crypto is Jailed

• Beijing probes security at academic journal database

• American Bank Data Breach caused from Cyber Attack

• StillVulnerable Campaign for cyber attack victims to Speak Up

• Don’t Risk Losing Control Over Your Microsoft 365 to Ransomware!

• OT security: Helping under-resourced critical infrastructure organizations

• Russia’s ‘Demonstration Army’ Is a Red Flag for U.S. Security Force Assistance

• How phishing attacks are becoming more sophisticated

• Clearview fine: The unacceptable face of modern surveillance

• Cybercriminals use Azure Front Door in phishing attacks

• 48% of security practitioners seeing 3x increase in alerts per day

• How to Get GDPR and Customer Communications Right

• Singapore promises ‘brutal and unrelentingly hard’ action on dodgy crypto players

• How to Protect Your Remote Workforce from a Cyberattack

• Study for certified cybersecurity expert exams with this $49 training

• IT Security News Weekly Summary – Week 25

• IT Security News Daily Summary 2022-06-26

• This Malware is Spreading Via Fake Cracks

• Setting the standard for digital asset security

• Cybersecurity and the metaverse: Identifying the weak spots

• Threat actors sell access to tens of vulnerable networks compromised by exploiting Atlassian 0day

• Python Libraries Hacked AWS Data and Keys

• Hacker Steals $100 million Worth of Crypto from Harmony Horizon Bridge

• Russia’s “Demonstration Army” Is a Red Flag for U.S. Security Force Assistance

• Data Security – What Is the Most Secure OS?

• Security Affairs newsletter Round 371 by Pierluigi Paganini

• Launch a cybersecurity career with this $39 boot camp on risk management

• China-linked APT Bronze Starlight deploys ransomware as a smokescreen

• Russia-linked actors may be behind an explosion at a liquefied natural gas plant in Texas

• Week in review: Log4Shell exploitation, DevSecOps myths, 56 vulnerabilities impacting OT devices

• Penetration testing

• What to Do If Your Identity Has Been Stolen

• API attack types and mitigations

Generated on 2022-07-03 23:59:25.790302