IT Security News Weekly Summary – Week 27

• IT Security News Daily Summary 2021-07-11

• How can you protect your personal, sensitive data online?

• BSidesNoVA 2021 – Filipi Pires’ ‘Discovering C&C In Malicious PDF’

• XKCD ‘Nightmare Code’

• BSidesNoVA 2021 – Kyle Fiducia’s, Chris Gates’, Bob Weiss’, Nick Ippolito’s & Arash Parsa’s ‘Panel: Offensive Security’

• Biden discussed Russian ransomware gangs with Putin in a phone call

• Chinese Hackers Target Taiwanese Telecom Firms

• Durabook S14I Semi-Rugged Laptop with Patrol Officer In-Vehicle Dock

• AI everywhere: How AI is being applied in 4 different fields

• Challenges in Combating Terrorism and Extremism Online

• This company sells passports to Americans looking for a tax break on their bitcoin profits

• SEC charges dark web user of insider trading, money laundering

• Rethinking application security in the API-first era

• Upcoming 14-inch and 16-inch MacBook Pro Rumored to Feature Upgraded 1080p Webcam

• After a Ransomware Attack, CNA Reports a Data Breach

• How to Make Your Web Searches More Secure and Private

• Spanish Telecom Giant MasMovil Suffered Ransomware Attack

• Week in review: How to improve your AD security posture, Patch Tuesday forecast

• Weekly Update 251

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Penetration testing

• Magecart Hackers Hide Stolen Credit Card Data Into Images & Selling It in DarkWeb

• Security Affairs newsletter Round 322

• Hackers accessed Mint Mobile subscribers’ data and ported some numbers

• How to protect your site against lethal unauthorized code injections

• OISF 2021 Videos

• Accenture acquires Linkbynet to enhance Accenture Cloud First capabilities

• Come Work For Lawfare—As Our Executive/Managing Editor

• Scanning for Microsoft Secure Socket Tunneling Protocol, (Sat, Jul 10th)

• (ISC)² appoints Mat Young as VP of Global Advocacy

• Dasera hires three women to its leadership team

• Tech Mahindra announces Cloud Advisory Board to build cloud roadmap for enterprises

• IT Security News Daily Summary 2021-07-10

• BSidesNoVA 2021 – Andy Piazza’s And James Nixon’s ‘Vendor Hacking: How To Make Your Tools Suck Less’

• The Joy of Tech® ‘Career Quiz Results!’

• BSidesNoVA 2021 – Jayme Hancock’s ‘Hacker Mindset: Troubleshoot Your Way To Root’

• Iran’s railroad system was hit by a cyberattack, hackers posted fake delay messages

• Are Online Brands Prioritizing Speed Over Security? Here’s a Quick Look

• Thales’ Leading Position in Connectivity & Cybersecurity to Bring Trust to the Next Wave of Connected Cars

• Risk-based security now more important than ever for Energy and Utilities!

• How to Make Telehealth Safer for a More Convenient Life Online

• Insurer CNA Discloses Ransomware Attack

• Biden Tells Putin Russia Must Crack Down on Cybercriminals

• “Cyber Disruption” Stops Websites of Iranian Ministry

• Online Support Agents Being Targeted Through Live Chat Platforms

• Millions of Login Credentials Stolen By an ‘Unnamed Malware’

• How to make eHealth safer for a more convenient life online

• How cybersecurity is getting AI wrong

• Top Stories: iPhone 13 and 14, iPad Pro, and MacBook Pro Rumors

• Cyber Polygon 2021: Towards Secure Development of Digital Ecosystems

• The Latest Pro-Trump Twitter Clone Leaks User Data on Day 1

• A New System Is Helping Crack Down on Child Sex Abuse Images

• Cloud Cryptomining Scam in Google Play Rakes in Cash

• Email Fatigue Elevates Cyber Crime Rates

• Morgan Stanley Faces Data Breach

• The data lakehouse: A database wishlist and a rant

• These three simple tips will keep your iPhone safe from hackers

• Another iPhone WiFi Vulnerability Found – This One Can Permanently Disable WiFi

• XKCD ‘Free Speech’

• ‘Build’ or ‘Buy’ your own antivirus product

• Kaseya warns customers of ongoing malspam campaign posing as security updates

• McAfee XDR and Remote Browser Isolation Technology Secure Globees in the 16th Annual 2021 IT World Awards

• Stories from the SOC – Office 365 account compromise and credential abuse

• Hackers Uses New Technique to Disable Macro Security To Launch a Weaponized MS Office Documents

• Cyber Criminals Sending Phishing Mails Pretending to be from Russian Government Domain

• 5 factores para evaluar una herramienta de RMM para MSP modernos

• Week in security with Tony Anscombe

• Contrast Security partners with Secure Code Warrior to deliver security training for developers

• The Fourth Quadrant—the Unknown Knowns

• Pluralsight acquires A Cloud Guru to accelerate cloud skill development

• An Office Phone Flaw Can’t Be Fixed by Cisco Alone

• Safe Systems launches Information Security Program for financial institutions

• An Office Phone Flaw Can’t Be Fixed By Cisco Alone

• Domains Are a Critical Component of Your Enterprise Risk Management

• WhoisXML API Upgraded Its Web Categorization Engine

• Biden ousts Social Security Administration Leadership

• Apple’s New ‘In the Dark’ iPhone 12 Pro Ad Highlights Night Mode

• IT Security News Daily Summary 2021-07-09

• How Dangerous Is Malware? New Report Finds It’s Tough to Tell

• 3 steps government employees can take to become good cyber citizens

• Building a scalable RAVPN architecture in Oracle Cloud Infrastructure using Cisco Secure Firewall

• Cryptomining Scam Apps, ‘Stealer’ Trojans Culled from Google Play

• Everything New in the iOS 15 Messages App: Shared With You, Photo Collages, Memoji Updates and More

• Moving to AWS Lambda? Here’s what you need to know.

• How to Empower Employees to be Secure and Productive

• NYC opens cyber operations center

• TEST

• How Dangerous is Malware? New Report Finds It’s Tough to Tell

• Spike in “Chain Gang” Destructive Attacks on ATMs

• Cybersecurity News Round-Up: Week of July 9, 2021

• New Framework Aims to Describe & Address Complex Social Engineering Attacks

• CISA Analysis Reveals Successful Attack Techniques of FY 2020

• The Real Takeaway From the Enjoining of the Florida Social Media Law

• People of JumpCloud | Vivian Eden

• DMZ in networking

• Will the ransomware surge impact Biden’s cyber EO?

• Microsoft Office Users Warned on New Malware-Protection Bypass

• Apple Debuts ‘This Week on Apple Music’ With Weekly Highlights

• MacRumors Giveaway: Win an Apple-Themed Plush Pillow From Throwboy

• Cisco BPA, WSA Bugs Allow Remote Cyberattacks

• How to prevent ransomware attacks with a zero-trust security model

• BSidesNoVA 2021 – Opening Keynote Address

• USENIX Enigma 2021 – Scott Shapiro’s ‘Is Cyber War Legal: A Four Hundred Year Retrospective’

• Why Now: How CyberSaint is Making Automated Risk Assessments Possible with NLP

• XKCD ‘H-alpha’

• Apple’s Stock Reached New All-Time Highs This Week

• Biden presses Putin to disrupt cybercriminals in Russia as U.S. grapples with latest ransomware attacks

• Hackers disabling Macro security warnings in new malspam campaign

• More sharing, less shame: CompTIA ISAO wants to change the standard response to ransomware attacks

• Insurer CNA Starts Notifying Customers of Ransomware Attack

• Where do all those cybercrime payments go?

• Latest iOS 14.7 Beta Patches Bug That Disables iPhone’s Ability to Connect to Wi-Fi

• Review: Nanoleaf’s Wood-Style Hexagons Add Attractive Accent Lighting to Any Room

• Judge drops hammer, dishes 7 years slammer for BEC and romance scammer

• How to send an anonymous email

• FireEye to Announce Second Quarter 2021 Financial Results on August 5, 2021

• Empowering women in the field of ethics and compliance

• Having the right tool for the job

• President Biden Targets Tech Monolopies, Data Collection

• Why data readiness is key to successful DOD projects

• Colorado becomes latest state to pass data privacy law

• Consumers Loosing Trust In Financial and E-commerce Industries

• MageCart Group12 Employing New Technique to Target E-Commerce Websites

• Cobalt Strike Payloads: Hackers Capitalizing on Ongoing Kaseya Ransomware Attacks

• Apple in Talks With NFL for Sunday Ticket Streaming

• How one word can disable an iPhone’s WiFi functionality

• CISSPs from Around The Globe: An Interview with Theresa Grafenstine

• Cyber Threat in 3D Printing says Pentagon

• Time to Batten the Cyber-Hatches

• Processing Machine Data With Machine Learning | Avast

• These phishing emails want to deliver password-stealing malware to energy companies and their suppliers

• Warning: 1 in 3 employees are likely to fall for a phishing scam

• Security professionals wish cloud providers would deliver specific security improvements, survey reveals

• Four Security Flaws Found in Sage X3 Enterprise Management Software

• Experts Warn of a New Technique that Disables Macro Security Warnings in Malicious Office Files

• BrandPost: Anchoring Digital Trust with Real Identity

• BrandPost: MLB Combines Okta and OneTrust to Earn Audience Trust Through Consent Management

• BrandPost: The Role of Security Executives in Building Customer Trust

• ZLoader Adopts New Macro-Related Delivery Technique in Recent Attacks

• The Rift Between Turkey and Israel Continues to Deepen

• Researchers Disclose Coursera API Vulnerabilities

• BrandPost: Securely Accelerate Digital Transformation and Customer Experiences Through Modern Identity

• BrandPost: Disrupting the Cycle of Perpetual Vulnerability

• BrandPost: How to Achieve Zero Trust Data Protection in the Cloud

• BrandPost: Mobile Worker Security or User Experience – How About Both?

• BrandPost: The Anywhere Employee Workspace

• Malware hits Hive OS cryptomining users; steals funds from wallets

• Microsoft’s PrintNightmare patch is now causing problems for some printers

• Coursera API Flaws Revealed by Cybersecurity Experts

• Morgan Stanley Suffers Data Breach Following Accellion FTA’s Attack

• Dutch researchers shed new light on Kaseya vulnerabilities

• It’s in the Game (but It Shouldn’t Be)

• I Smell a RAT! New Cybersecurity Threats for the Crypto Industry

• Notes from Our CISO on the Kaseya Ransomware Attack

• Here’s How Much Microsoft Paid In Bug Bounties Last Year

• The FBI’s Fake Encrypted Honeypot Phones Are Showing Up Online

• Lazarus Targets Job-Seeking Engineers With Malicious Documents

• Kroger Reaches $5M Settlement With Breach Victims

• Morgan Stanley Discloses Data Breach That Resulted From Accellion FTA Hacks

• Apple Participating in Sales Tax Holiday for Select U.S. States

• Apple’s All-in-One Gift Card Now Available in Canada and Australia

• Apple TV+’s ‘Ted Lasso’ Leads HCA Streaming Award Nominations

• WildPressure Campaign Goes On With One More Hit: Mac Malware Version Targets Mac OS Systems

• Malware hits Hive OS cryptomining platform; steals funds from wallets

• Bandidos Malware Targeting Networks in South America

• Cybercriminals Attacked the Republican National Committee

• Did Microsoft Botch the PrintNightmare Patch?

• Cybersecurity M&A Roundup: 14 Deals Announced July 1-8, 2021

• Magecart Hackers Hide Stolen Credit Card Data Into Images for Evasive Exfiltration

• What is Session Hijacking and How Do You Prevent It?

• Hackers use a new technique in malspam attacks to disable Macro security warnings in weaponized docs

• Insurance firm CNA discloses data breach after March ransomware attack

• Rancher Uses Apple Watch to Find iPhone 12 in a Haystack in Apple’s Latest Ad

• Deals: Get the 40mm GPS Apple Watch Series 6 for $319 on B&H Photo ($80 Off)

• Scammers Are Now Pretending to be Online Support Agents via Live Chat Platforms

• July 2021 Security Updates for the Android OS Are Now Available

• The Pentagon Scrubs a Cloud Deal and Looks to Add More AI

• Covid Protections Kept Other Viruses at Bay. Now They’re Back

• No, open source Audacity audio editor is not “spyware”

• Republican National Committee denies Russian hackers accessed data

• Tencent’s creepy new facial recognition system detects kids gaming at night

• Potential cyber attack on financial system is greatest threat to markets, Guggenheim’s Minerd says

• Kaseya ransomware attack updates: Your questions answered

• Cartoon Caption Winner: Sight Unseen

• ‘Alto’s Odyssey: The Lost City’ Launches on Apple Arcade on July 16

• The Best Encrypted Email Services You Need to Use in 2021

• Numerous Scam Cryptomining Apps Discovered on Google Play Store

• The Future of Mobile in a Post-COVID World & How to Stay Secure

• Europe Makes the Case to Ban Biometric Surveillance

• NHS Covid App Could Be Changed, Minister Confirms

• Public cloud security ‘just barely adequate,’ experts say

• Microsoft Paid Out $13.6 Million in Bug Bounties in Past Year

• PrintNightmare Zero-Day Vulnerability: Patch Released by Microsoft Unsuccessful

• Researchers Learn from ITG18 Group’s OpSec Mistakes

• 15 Philips Vue Vulnerabilities Might Lead to Full Takeover of the Devices

• Cross-Site Request Forgery (CSRF) – An OWASP Vulnerability – Detailed Explanation

• New SaaS Security Report Dives into the Concerns and Plans of CISOs in 2021

• Kaseya And PrintNightmare Vulnerabilities | Avast

• Sage X3 Vulnerabilities Can Pose Serious Risk to Organizations

• Hackers use a new technique in phishing attacks to disable Macro security warnings in weaponized docs

• Apple Takes Possession of Mobeewave Domain Name, One Year After Acquiring Startup That Lets Smartphones Accept Payments Using NFC

• Oil & Gas Sector Targeted by Global Spear-Phishing Campaign

• 5 Reasons Every Small Business Needs An Employee App

• Three Simple Methods to Secure Your Enterprise IoT Devices

• What to expect at Transform 2021, the year’s top event on enterprise AI & data

• Bug bounties: Here’s how much Microsoft paid out to security researchers last year

• Lazarus Targets Job-Seeking Engineers with Malicious Documents

• Restart After Hacks Delayed Again by Software Firm

• Investment Bank Morgan Stanley Discloses Data Breach

• The Victims of REvil Ransomware Attack Are Refusing to Pay the Ransom

• Microsoft Gives Staff $1,500 Coronavirus Bonus

• Don’t be a ransomware victim

• Scam artists exploit Kaseya security woes to deploy malware

• Ransomware: Banning victims from paying ransoms might reduce attacks, but it won’t stop them

• Chinese Case Maker Shares iPhone 13 Chassis Models on Weibo

• Tips to Prevent Your Mac from Being Hacked

• Texas resident jailed for role in $2.2 million romance, business email scams

• Microsoft’s KB5004945 Security Update for PrintNigtmare Has Side Effects: Now Zebra Printers Crash

• The CSO guide to top security conferences, 2021

• Critical infrastructure Bill has a government ‘step in’ powers labelling problem

• Epic Wins Appeal to Continue Antitrust Case Against Apple in Australia

• Russia’s ‘Cozy Bear’ Breached the Systems of the Republican National Committee

• Ask Chloé: Career Advancement

• Digital Habits During Pandemic Have Lasting Impact

• Microsoft says that the emergency patch recently released correctly fix the PrintNightmare flaw

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• China using AI to develop robots that can hide in sea launch bombs and cyber attacks

• Biden cancels $10billion cloud-computing contract awarded to Microsoft.

• Critical Flaws Reported in Philips Vue PACS Medical Imaging Systems

• Reevaluating Your Breach Prevention Strategy

• Twitter Considers New Security Features | Avast

• What the Van Buren Case Means For Security Researchers

• Cisco fixes High Severity issue in BPA and WSA

• July 2021 Patch Tuesday forecast: Don’t wait for Patch Tuesday

• test page – issue

• Hackers Use New Trick to Disable Macro Security Warnings in Malicious Office Files

• Three security lessons from a year of crisis

• Kuo: Redesigned 14-Inch and 16-Inch MacBook Pro Still on Track for Mass Production in Third Quarter

• What you need to know about transatlantic data transfers

• The Chris Krebs case for including election systems as critical infrastructure

• Fraudulent content has a direct impact on consumer loyalty

• Intelligent Waves LLC Promotes John Hammes to Chief Strategy Officer (CSO)

• Silverfort Introduces Industry First Prevention Against Pass the Ticket Attacks

• North American Utilities Expand Digital Transformations to Address Vulnerabilities Exposed by COVID-19 Pandemic

• How have people proven their identity since the dawn of time?

• A mid-year update for Cybersecurity – 4 trends to watch

• Kuo: 2022 11-Inch iPad Pro to Feature Mini-LED Display, Not Just 12.9-Inch Model

• 85% of organizations are yet to hit the cloud native technologies adoption milestone

• Kaseya delays SaaS restore to Sunday, CEO says ‘this sucks’ but decision was his alone

• Morgan Stanley Hit by Accellion Hack Through Third-Party Vendor

• File security violations within organizations have spiked 134% as the world reopened for business

• Presidential Press Secretary Said Moscow Not Involved in The Cyber Attacks on the Republican National Committee of US

• ISC Stormcast For Friday, July 9th, 2021 https://isc.sans.edu/podcastdetail.html?id=7578, (Fri, Jul 9th)

• 62% of consumers believe hyperscale computing will have a positive impact over the next five years

• Israel Says It’s Targeting Hamas’ Cryptocurrency Accounts

• Infovista Ipanema SD-WAN platform allows critical applications to adapt to real-time conditions

• Hancitor tries XLL as initial malware file, (Fri, Jul 9th)

• Thales offers cybersecurity solutions and services to secure connected cars

• Ransomware: To pay or not to pay? Legal or illegal? These are the questions …

• Microsoft issues patch to fix PrintNightmare zero‑day bug

• WildPressure APT Hackers Uses New Malware to Attack Both Windows & macOS Operating Systems

• Top Industry-Specific Fraud Attack Trends from Q1 2021

• Backblaze Computer Backup 8.0 brings improved performance and optimizations

• Clarified Guidance for CVE-2021-34527 Windows Print Spooler Vulnerability

• ADVA FSP 3000 ConnectGuard protects data against cyberattacks from quantum computers

• Faraday delivers 5G NR mmWave ASIC projects for small cell baseband/IF and RRU

• Roper named CEO of drone company Volansi

• ZeroFox and Vigilante join forces to protect organizations from dark web activity

• Immuta provides automated data access control in Snowflake’s Partner Connect portal

• House bill would add demographics to the Plum Book

• IDnow joins IDunion network to build an open ecosystem for decentralised identity management

• Iron Mountain to acquire a data center in Frankfurt to expand EMEA data center footprint

• Need To Know About The Kaseya Ransomware Attack

• Multiple Sage X3 vulnerabilities expose systems to hack

• SoftServe gets Security Specialization in Google Cloud Partner Advantage Program

• 1Strategy achieves AWS Security Competency status and validates expertise in delivering secure solutions

• Hancitor Making Use of Cookies to Prevent URL Scraping

• Microsoft Keeps Failing to Patch a Critical Windows Bug

• Securing Active Directory

• Microsoft Urges Customers to Update Windows as Soon as Possible

• Zloader With a New Infection Technique

• Could increasing telework make government employment more accessible?

• Data-driven cities deliver better outcomes for residents

• Trump Sues Facebook, Google and Twitter

• The Unfixed Flaw at the Heart of REvil’s Ransomware Spree

• IT Security News Daily Summary 2021-07-08

• Email claiming Kaseya patch drops Cobalt Strike malware

• How to drive value with security data

• Can IoT sensors spot wildfires sooner?

• CSO Group to help NSW Department of Communities and Justice in AU$7m cyber deal

• Multi-Cloud Environments More Risky

• Marvel Movie Malware Detected

• Morgan Stanley Discloses Data Breach

• Morgan Stanley announces breach of customer SSNs through Accellion FTA vulnerability

• Brazilians fear for the security of their data

• Kaseya post-attack VSA deployment delayed until Sunday

• Don’t Be Rude, Stay: Avoiding Fork&Run .NET Execution With InlineExecute-Assembly

• NIST opens challenge for drone search and rescue research

• 3D printing opens DOD to unnecessary cyber risk, IG finds

• Labor needs more unemployment fraud data, IG says

• Oil & Gas Targeted in Year-Long Cyber-Espionage Campaign

• CTO Perspective: Examination of the REvil Ransomware Attack

• Apple Seeds Fifth Beta of tvOS 14.7 to Developers

• Apple Seeds Fifth Beta of watchOS 7.6 to Developers

• Apple Seeds Fifth Beta of macOS Big Sur 11.5 to Developers

• Apple Seeds Fifth Betas of iOS and iPadOS 14.7 to Developers and Public Beta Testers

• 5 steps to implement threat modeling for incident response

• New WildPressure Malware Capable of Targeting Windows and MacOS

• 6 Sessions That Wowed SecOps Pros at SOCstock 2021

• Human Resources, Part 2

• US offers Julian Assange time in Australian prison instead of American supermax if he loses London extradition fight

• UK Introduces Right To Repair, Others To Follow

• Podcast: CrowdStrike CTO Michael Sentonas Shares His Thoughts on Humio and how CrowdStrike is Addressing the Complexity of the Threat Landscape

• How to define DNS in Docker containers

• Moving to AWS Lambda? Here’s what you need to know

• Morgan Stanley discloses data breach after the hack of a third-party vendor

• U.K.’s Online Safety Bill: Not That Safe, After All?

• 4 ways ransomware can cost your business (in addition to extortion)

• The New Cyber Protection Space = Data Protection + Cybersecurity

• Coursera Flunks API Security Test in Researchers’ Exam

• Microsoft patches remaining versions of Windows against PrintNightmare flaw

• Chinese Hackers Target Indian SBI Users Via Phishing

• Beats Studio Buds vs. AirPods Pro

• Microsoft named a Visionary in the 2021 Gartner Magic Quadrant for SIEM for Azure Sentinel

• Best VPN 2021: Top VPN services compared and reviewed

• Cisco Patches High Severity Vulnerabilities in BPA, WSA

• Trump’s Social Media Website GETTR Hacked

• Why the Password Isn’t Dead Quite Yet

• Deals: AirPods Max in Space Gray Drop to $477.77 on Amazon ($71 Off, New Low)

• iOS 15: How to Use Visual Lookup in Photos to Identify Landmarks, Plants, and Pets

• BT Reaches Union Agreement Over Modernisation

• CISA Releases Analysis of FY20 Risk and Vulnerability Assessments

• It was a LONG weekend — Here’s the vital info on REvil and Kaseya VSA

• Chinese State-Sponsored Activity Group TAG-22 Targets Nepal, the Philippines, and Taiwan Using Winnti and Other Tooling

• The Internet Loses a Champion with the Passing of Sherwin Siy

• Malspam banks on Kaseya ransomware attack

• S3 Ep40: Kaseya breach, PrintNightmare 0-day, and hacking versus the law [Podcast]

• REvil gang exploited a zero-day in the Kaseya supply chain attack

• REvil ransomware gang demands $70M for universal decryptor for Kaseya victims

• Privileged Identity Management with Azure Lighthouse enables Zero Trust

• Your top five questions on biometric bank cards answered

• Asset management in the age of digital transformation

• Malvertising: What It Is and How to Protect Yourself

• BrandPost: The Evolution of Cybercrime as a Service

• Hackers leak scraped data of 87,000 GETTR users

• How Fake Accounts and Sneaker-Bots Took Over the Internet

• “Black Widow” digital premier a cover for malware and scams, says Kaspersky

• China ‘Eugenics’ Claim as BGI Hoards Prenatal Test DNA Data

• Kaseya Postpones Bringing ITSM Platforms Back Up

• Digital Rights Updates with EFFector 33.4

• Trickbot malware induces new Diavol Ransomware Strain

• Google Faces Court Action By US States Over Play Store Fees

• Facebook Challenged Abroad Again Over Its Privacy Practices

• SonicWall Patches Critical CVE-2021-20026 Vulnerability in NSM Product

• MVP 11

• Microsoft Bug Bounty Programs Year in Review: $13.6M in Rewards

• Remote Desktop Vulnerabilities: What You Need to Know

• Adding Security to Smartsheet with McAfee CASB Connect

• OpenAI warns AI behind GitHub’s Copilot may be susceptible to bias

• Kaseya Left Customer Portal Vulnerable to 2015 Flaw in its Own Software

• Details of the REvil Ransomware Attack

• Singapore Sees Spikes In Ransomware, Botnet Attacks

• Coursera API Vulns Disclosed By Researchers

• Microsoft’s Emergency PrintNightmare Patch Fails

• GFI Patch Central: Third-Party Patch Roundup for June

• GrammaTech Unveils New Software Supply Chain Security Platform

• Ransomware as a service: Negotiators are now in high demand

• Lazarus gang targets engineers with job offers using poisoned emails

• 77% of executives plan to hire in the months ahead, according to a new poll

• Kaseya Hacked via Authentication Bypass

• Cisco Releases Security Updates for Multiple Products

• Apple TV+ Shares Trailer for Comedy Series ‘Mr. Corman’ Starring Joseph Gordon-Levitt

• The Importance of Understanding Attacker Target Selection

• Ransomware: Top 5 more things to know

• Top 5 more things to know about ransomware

• Use of Common Malware in Operation Targeting Energy Sector Makes Attribution Difficult

• The NSA’s ‘New’ Mission: Get More Public With the Private Sector

• White House Advises Mayors to Review Local Govts’ Cybersecurity Approach

• Bandidos Malware Targets Corporate Networks in Latin America

• Kaseya update delayed for security reasons

• ICO survey on data flouters: 50% say they receive more unwanted calls than before pandemic

• Ransomware talks: How Biden could push Putin to the table

• PM Orders Review Of Chinese Acquisition Of Newport Wafer Fab

• Global Phishing Campaign Targets Energy Sector and its Suppliers

• Kaseya ransomware attack: Your questions answered

• Coursera API vulnerabilities disclosed by researchers

• Latest Ransomware Developed to Avoid Russian Systems

• British Airways Pays Compensations to Victims of a Massive Data Breach

• South Korea’s Nuclear Research Agency Hacker Identified

• What Colonial Pipeline Means for Commercial Building Cybersecurity

• Apple TV+ Announces New 9/11 Documentary ‘Inside the President’s War Room’ Premiering This September

• Indian Government Officials Targeted by SideCopy Actors with New RATs

• Researcher demonstrates bypassing Microsoft’s latest patch for PrintNightmare exploit

• Passwords by Kaspersky Password Manager exposed to brute-force attack

• WildPressure APT Cybercriminal Gang Targeting macOS

• Mac Malware Used in Attacks Targeting Industrial Organizations in Middle East

• IoT/OT Device Security Firm NanoLock Raises $11 Million

• Deals: Apple’s 512GB M1 MacBook Air Hits New Low Price at $1,099 ($150 Off)

• UK Residents Lose Over £1 Billion in Fraud So Far This Year

• What are the signs of an untrustworthy website?

• Kaseya Ransomware Attack Update: REvil Demands $70 Million; Kaseya Highlights Zero-Day Exploit

• Game laptop: What are the best gaming laptops of 2021?

• Biden Pressured to Act on ‘Russian’ Ransomware, Hacking

• Tor Browser 10.5 is out, it includes a new anti-censorship feature

• One of the UK’s Most-Watched TV Moments Marred by Technical Issues on Apple TV

• Tor Browser 10.5 improves circumvention for Tor users in censored places

• The Doctor, the Hospital & the Ransomware

• Experts explained how and where confidential company data leaks

• Using Sudo with Python For More Security Controls, (Thu, Jul 8th)

• Multiple NuGet Package Manager Flaws Let Attackers Target .NET Framework

• Brave browser: The bad and the ugly

• Android Updates for July 2021 Patch Tens of High-Severity Vulnerabilities

• Apple’s Eddy Cue Joins Duke University Board of Trustees

• Court Order Bars Threat Actors From Revealing Stolen Data

• Cybersecurity Readiness: What Is It and How Do You Evaluate Yours?

• What Is Your Digital Footprint? | Avast

• Emails Offering Kaseya Patches Deliver Malware

• Critical Flaws Reported in Sage X3 Enterprise Management Software

• PC Matic CEO on how businesses can work toward preventing cyberattacks

• Criminals prefer to WFH too: Singapore infosec agency says 43% of all crimes in the city-state happened online in 2020

• Japanese Officials Resist Ban On Fax Machines

• Survey Reveals 4 Ways Remote Work has Impacted IT Security And Here’s What You Can Do About It

• A Fake Kaseya Security Update Is ‘Backdooring’ Networks Using Cobalt Strike

• 172 Android Cryptocurrency Mining Apps Turn Out to Be Just Scams

• Get updating: Microsoft delivers PrintNightmare patch for more Windows versions

• 170 Android cryptocurrency mining scam apps have stolen $350,000 from users

• Non-Malicious Android Crypto Mining Apps Scam Users at Scale

• Cybercrime Costs Organizations Nearly $1.79 Million Per Minute

• Twenty-five victims of sexual exploitation identified in Romania and Spain

• Utilizing Exposed NuGet Packages Attackers Target .NET Platform

• Data Breach at Third-Party Provider Exposed Medical Information of US Healthcare Patients

• The Danger of Internet-Connected Devices – Intego Mac Podcast Episode 195

• Twitter Hiring To Comply With New Indian Rules

• CTOs Keeping Quiet on Breaches to Avoid Cyber Blame Game

• 1,500 Businesses Globally were Affected by Kaseya Cyberattack

• SideCopy Hackers Target Indian Government Officials With New Malware

• How to Mitigate Microsoft Print Spooler Vulnerability – PrintNightmare

• Security Awareness Training is Broken. Human Risk Management (HRM) is the Fix

• Experts Uncover Malware Attacks Targeting Corporate Networks in Latin America

• Hacker deposited $1M in a popular cybercrime marketplace to buy zero-day exploits

• 12 cybersecurity startups to watch

• Securing infrastructure as code: Perils and best practices

• Quick Hits: July 8, 2021

• FCW Insider: July 8, 2021

• Regulator Probes Former Health Secretary’s Use of Private Email

• PrintNightmare Still in the Game: Patches That Do Not Fix the Issue and Other Updates

• Singapore sees spikes in ransomware, botnet attacks

• 98% of Infosec Pros Say Multi-Cloud Environments Create Additional Security Challenges, Reveals Survey

• Israeli Security Researches Reveals a Global Hacking Operation

• New PrintNightmare Patch Can Be Bypassed, Say Researchers

• In conversation with Gene Hoffman, co-creator of the internet’s first ad blocker

• Real-Time Threat Assessment With In-Memory Computing

• Experts bypassed Microsoft’s emergency patch for the PrintNightmare

• Apple to Open Apple Developer Academy in Saudi Arabia, First in the MENA Region

• India under attack by rapidly-evolving advanced persistent threat actor SideCopy, says Cisco Talos

• Want to add antivirus to your existing portfolio?

• Logistics and utilities providers agree to help from ASD in the event of a cyber incident

• NSW Department of Education struck by cyber attack

• Automated Network Segmentation is a Security Service Away

• Nanoleaf Adds Thread Border Router Support to Shapes and Elements Light Panels

• Apple TV+ Posts New ‘Ted Lasso’ Video Ahead of July 23 Premiere

• Extending the Promise of SASE with MDR

• White hats reported key Kaseya VSA flaw months ago. Ransomware outran the patch

• 3 tips for balancing data security and usability

• It’s not Chinese government’s intention to suppress big tech companies: Analyst

• Critical Microsoft Windows Vulnerability found

• Data flow vs. data security dilemma for China Didi

• USB Forensics – Reconstruction of Digital Evidence from USB Drive

• How health tech can secure patient data post-CURES Act

• Microsoft’s Emergency Patch Fails to Fully Fix PrintNightmare RCE Vulnerability

• Quick look at CVE-2021-1675 & CVE-2021-34527 (aka PrintNightmare)

• Most disaster recovery solutions are not tested on a regular basis

• (ISC)² Offers Free Access to Ransomware Education | #RANSOMWAREWEEK

• Cybersecurity and government

• What are the traits of individuals more likely to demonstrate trolling behaviors?

• Consumers trust organizations less after receiving scam messages claiming to represent them

• 5G coverage now extends to 1662 cities across 65 countries

• Tech giants say government cyber assistance would simply cause more problems

• AdaptiveMobile Security’s 5G security platforms protect mobile networks against cyber threats

• ISC Stormcast For Thursday, July 8th, 2021 https://isc.sans.edu/podcastdetail.html?id=7576, (Thu, Jul 8th)

• Thales’s voice biometric solution helps mobile operator call centres fight identity fraud

• Bandidos at large: A spying campaign in Latin America

• NICE CXone SmartReach delivers proactive conversational AI for digital experiences

• Transition Networks 24VDC Passive PoE Module adds flexibility to its all-in-one switch

• The Evolution of PINCHY SPIDER from GandCrab to REvil

• How CrowdStrike Falcon Stops REvil Ransomware Used in the Kaseya Attack

• Transform 2021: Technology’s key themes

• Edgecore Networks releases aggregation router to address 5G deployment challenges

• two-factor authentication (2FA)

• Transform 2021: Security’s key themes

• Everbridge partners with Tech Data to help enterprises build resilience against critical events

• You’ve patched that critical Sage X3 ERP security hole, yeah? Not exposing the suite to the internet, either, yeah?

• API Security Weekly: Issue #141

• Multiple U.S. States Sue Google for Violating Antitrust Laws With Play Store Fees

• Lawfare Live: Gabe Rottman on Trump-Era Demands for Press Records

• Bitglass achieves ISO 27001 certification for its information security management system

• Zimperium acquires whiteCryption to enable app protection for mobile and IoT

• Improving Enforcement in State Consumer Privacy Laws

• Bogus Kaseya VSA patches circulate, booby-trapped with remote-access tool

• Adaptiva hires Sonia Martinez as CMO and Vern LeBlanc as Senior Director of Information Security

• GlobalPlatform achieves ISO/IEC 17065 accreditation to support cybersecurity initiatives

• DOD’s 3D printers are vulnerable to hackers, IG finds

• White House urges mayors to meet with state cybersecurity officials on ransomware

• Not like TV: Unisys on convincing the masses biometrics isn’t about surveillance

• iOS 15: How to Set Leaving and Arrival Times for Driving Directions in Apple Maps

• NanoLock Security appoints David Stroud as GM of Europe and APAC

• 170 fraudulent Android apps scamming cryptocurrency enthusiasts

• Microsoft posts emergency ‘PrintNightmare’ patch

• Wiregrass Electric Cooperative hit by a ransomware attack

• IT Security News Daily Summary 2021-07-07

• Armorblox and Intermedia team up to protect email from cyberattacks with AI

• Scammers exploiting Kaseya ransomware attack to deploy malware

• Oracle Auditing Part 2: Mandatory and Fine-Grained Auditing

• Five Common Myths about Ransom DoS Attacks

• Oracle Auditing Part 1: Standard Auditing

• Oracle Auditing Part 3: Unified Auditing

• LinkedIn co-founder Reid Hoffman on lasting tech changes from Covid-19

• Reid Hoffman: ‘However terrified you are about cybersecurity, you’re probably not terrified enough’

• What are port scan attacks and how can they be prevented?

• US Could Appeal Assange Extradition Refusal

• Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours

• Review: 2021 Cadillac Escalade Puts Wireless CarPlay on an Expansive OLED Display System

• Nomad Launches Leather Cover for Apple’s MagSafe Charger

• Crowdstrike CEO on how companies can deal with rising ransomware attacks

• Marines’ 3D printing faces a ‘data problem’

• Data gaps weaken effectiveness of economic policies

• $13.7 million: Atlas VPN adds up the impact of the top 10 most successful blockchain scams

• Fake Android Apps Promise Cryptomining Services to Steal Funds

• Department of Defense’s chief information officer on decision to end JEDI program

• Watch CNBC’s full interview with Crowdstrike CEO George Kurtz

• Labor watchdog calls out gaps in unemployment fraud reporting

• Holding the world to ransom: The top 5 most dangerous criminal organizations online right now

• Should Kaseya pay REvil ransom? Experts are torn

• Biden Administration Cancels $10bn JEDI Contract

• Coalition CEO Joshua Motta on the growing need for cybersecurity insurance

• Critical Sage X3 RCE Bug Allows Full System Takeovers

• Most Insider Data Breaches Aren’t Malicious

• Sophos Acquires Capsule8 for Linux Server & Container Security

• Demand for cybersecurity insurance has skyrocketed — Here’s why

• Republican National Committee Denies Russian Hackers Stole Data

• What to do when 2FA won’t allow you into your Linux servers

• Former President Trump Sues Facebook For Censorship

• WildPressure APT expands operations targeting the macOS platform

• Apple’s First OLED iPad Coming in 2023, According to Display Experts

• How to build a privacy program the right way

• Microsoft struggles to wake from its PrintNightmare: Latest print spooler patch can be bypassed, researchers say

• MacOS Targeted in WildPressure APT Malware Campaign

• Cybersecurity review is a way for Beijing to punish Didi legally: Pro

• 3 things the Kaseya attack can teach us about ransomware recovery

• Hackers Asking $70 Million in Ransom, Kaseya Confirmed

• HomePod Users Complain of Sudden Failures, Could Be Linked to 14.6 and 15 Updates

• EFF Gets $300,000 Boost from Craig Newmark Philanthropies to Protect Journalists and Fight Consumer Spyware

• Advancing resiliency threat modeling for large distributed systems

• Kaseya attack shows how third-party software is the perfect delivery method for ransomware

• Bitwarden has a new Send feature: Here’s how to use it

• Trump’s Gettr Social Platform Hacked Twice

• Healthcare Vendor Practicefirst Reveals It Suffered Cyberattack In 2020, No Data Lost

• Microsoft Releases Emergency Patch for ‘PrintNightmare’ Flaw

• Are Security Attestations a Necessity for SaaS Businesses?

• The freedom to choose with Cisco Secure Choice

• How can Digital First banking benefit financial institutions?

• AT&T Threat Detection and Response for Government

• Ways to prevent ransomware attacks: how to avoid becoming a victim

• How data poisoning is used to trick fraud detection algorithms on ecommerce sites

• What’s Next for SIEM? A View From the 2021 Gartner SIEM Magic Quadrant

• Suspected ‘Dr HeX’ Hacker Busted for 9 Years of Phishing

• Law Firm Gets Court Order Asking Hackers Not to Publish Stolen Data

• Accessibility and usability for all in Azure Sentinel

• Russia hacks US Political Party, and Biden elevates ransomware as National Security Priority

• Key Recommendation to Avoid Pitfalls in Cybersecurity Wargaming Design

• REvil Ransomware Gang Launches Major Supply Chain Attack Through Kaseya, Downstream Impact May Affect Over 1,500 Customers

• Rebekah Koffler: Russia’s Cyberattacks on the U.S. Reveal Biden’s Failings

• RNC Says No Data Accessed in Synnex Breach

• CISA Says Philips Vue Healthcare Products Affected by 15 Vulnerabilities

• Pandemic-driven digitization has given rise to ransomware attacks: Rubrik CEO

• Trump Sues Twitter, Facebook, Google, And Their CEOs – Update

• Opaque raises $9.5M for encrypted data analytics

• Kaseya ransomware attacks: What we know so far

• Microsoft Releases Emergency Patch For PrintNightmare Bugs

• Hackers Scrape 90,000 GETTR User Emails, Surprising No One

• Russia Hacking Claims Pose Challenge For Biden

• This Serious WiFi Bug Can Break Your iPhone

• Water Wars: No One in the Mood for Compromise in the South China Sea

• Assessing the Threat of Weaponized Corruption

• New WD Zero-Day Affects Western Digital Products That Support My Cloud OS 3

• Game over: Apex Legends players locked out by protest message

• Got a WD My Book Live device? Your data is at risk—here’s what to do

• UK’s Most Powerful Supercomputer, Cambridge-1, Targets Healthcare

• This serious Wi-Fi bug can break your iPhone, but here’s how to protect yourself

• Fake Kaseya VSA Security Update Drops Cobalt Strike

• Report shines light on REvil’s depressingly simple tactics: Phishing, credential-stuffing RDP servers… the usual

• Kaspersky Password Manager Generated Passwords That Could Quickly Be Brute-Forced

• Sophos Acquires Capsule8 to Beef up Linux Protection

• Microsoft Issues Emergency Patch for Windows Flaw

• Security 101: The ‘PrintNightmare’ Flaw

• Apple Calls Facebook-Commissioned Study on Preinstalled App Usage ‘Seriously Flawed’

• Threat Actors Hasten Ransomware Cyberattacks on Industrial Control Systems ICS

• Patch now! Emergency fix for PrintNightmare released by Microsoft

• Are There More Properties Connected to the Pareto Botnet?

• Pentagon moves on from JEDI

• Why I Love (Breaking Into) Your Security Appliances

• Autonomous Security Is Essential if the Edge Is to Scale Properly

• Moroccan Hacker Arrested by the Interpol in “Operation Lyrebird”

• What to Do if You Have Western Digital My Book Live or My Book Live Duo Devices

• DIU green lights 3 secure cloud solutions

• Severe flaw Identified in OWASP ModSecurity Core Rule Set

• Microsoft Issues Emergency Patch For PrintNightmare Flaw

• Covering the Infection Chain: Analyze Documents and Scripts with Intezer Analyze

• The Ultimate Guide to Safe Sharing Online

• The Kaseya ransomware attack: Everything we know so far

• Microsoft rolls out emergency patch for critical PrintNightmare flaw

• Continuous Updates: Everything You Need to Know About the Kaseya Ransomware Attack

• WildPressure APT Emerges With New Malware Targeting Windows and macOS

• PrintNightmare vulnerability explained: Exploits, patches, and workarounds

• Attacks on Operational Technology From IBM X-Force and Dragos Data

• Kaseya delays patch fixing zero-day attack as issues hit SaaS rollout

• Rural Alabama Electric Cooperative Hit by Ransomware Attack

• PrintNightmare official patch is out – update now!

• [Whitepaper] XDR vs. NDR/NTA – What do Organizations Truly Need to Stay Safe?

• Dozens of Vulnerable NuGet Packages Allow Attackers to Target .NET Platform

• WildPressure targets the macOS platform

• British Airways Settles 2018 Data Breach Lawsuit

• Biden: Ransomware attack appears to have caused minimal damage

• Pro-Trump Social Media Platform GETTR Hacked Shortly After Launch

• Remote Work Brings User Complaints and High IT Costs

• Researchers uncovered the network infrastructure of REVil – The notorious ransomware group that hit Kaseya

• A New Threat Advertises Malicious Privacy Tools as Security Enhancers

• The New Cyberthreats: Malware Dropper Wrecks Havoc in the Cybersecurity World

• UK’s data watchdog probes use of private email to discuss government business at the Department of Health

• CISSPs from Around The Globe: An Interview with Theresa Grafenstine

• Having the right tool for the job

• Microsoft issues emergency patch to fix PrintNightmare vulnerability

• Quick Hits: July 7

• FCW Insider: July 7, 2021

• Ransomware: US warns Russia to take action after latest attacks

• SideCopy cybercriminals use new custom Trojans in attacks against India’s military

• Cloud Cryptomining Swindle in Google Play Rakes in Cash

• Practice Management Software Vendor Practicefirst Affected by Healthcare Ransomware Attack

• Microsoft, AWS React To JEDI Cancellation

• Researchers Reproduce Exploit Used in Kaseya Hack

• Official Formula 1 App Hacked

• Hacker’s Mom Puts End to 10-Month Cyber-bullying Campaign

• US: We May Take Unilateral Action Against Russian Cyber-Criminals

• Kremlin Hackers Reportedly Breached Republican National Committee

• Over 170 Scam Cryptomining Apps Charge for Non-Existent Services

• Cyber Threats: Is Your Current Industrial Security Strategy Enough

• Vulnerability Scanning vs. Penetration Testing

• Microsoft Releases Emergency Patch for PrintNightmare Bugs

• GitLab Fixes Several Vulnerabilities Reported by Bug Bounty

• Guidance for Customers Returning to their Kaseya VSA SaaS Instance

• Install immediately: Microsoft delivers emergency patch for PrintNightmare security bug

• UK Information Commissioner launches probe into private email use at Department of Health

• Suspected hacker Dr HeX arrested over cybercrime, bank fraud impacting thousands

• Interpol Arrests Moroccan Hacker Engaged in Phishing Attacks

• Hackers Managed to Scrape 90,000 GETTR User Emails

• Pentagon Cancels JEDI Cloud Contract

• IndigoZebra APT Group Uses Dropbox Service to Target Government Entities

• Wildpressure targets the macOS platform

• Microsoft Releases Security Updates to Fight Against PrintNightmare Zero-Day

• Officials Confirm No Data Have Been Compromised in the Wiregrass Electric Cooperative Attack

• The biggest ransomware attack ever paralyzed thousands of businesses

• What is personally identifiable information (PII)? How to protect it under GDPR

• How to check for Active Directory Certificate Services misconfigurations

• Apple TV+ Series ‘Defending Jacob’ Now Available on DVD and Blu-ray

• Following the Kaseya Attack, US Says It Will Take Action Against Ransomware Hackers If Russia Won’t

• What is Asset Discovery? A Look Beneath the Surface

• Interpol: Moroccan Citizen Arrested for Website Defacements, Other Cybercrimes

• €14.2 million seized from cross-border VAT fraudsters in Hungary

• Microsoft Teams’ Together Mode to Gain Support for Smaller Groups

• Didi removed from China’s WeChat and Alipay apps for new users in another big blow

• Silicon UK Podcast: The State of Global Digital Skills

• How to Protect Medical Devices from Ransomware

• Microsoft rolled out emergency update for Windows PrintNightmare zero-day

• Looking for adding new detection technologies in your security products?

• Kaspersky Password Manager caught out making easily bruteforced passwords

• 4 Ways to Improve Governance in Product Security

• Hacker leaks info of pro-Trump GETTR members online

• Mega-distie SYNNEX attacked and Microsoft cloud accounts it tends tampered

• Remote Workforce Monitoring Brings Up Privacy Concerns

• Mobile Security Company Zimperium acquires WhiteCryption

• British Airways pays a penalty for data leak of 420,000 customers in 2018

• Identity management and zero trust: Where to get started

• Finding the right SD-WAN in a crowded market

• Microsoft patches PrintNightmare — even on Windows 7 — but the terror isn’t over

• Critical infrastructure cyberattacks signaling the importance of prioritizing security

• Tencent’s creepy new facial recognition system detects kids gaming at night

• Black Hat Announces Matt Tait as One of Its Keynote Speakers for Black Hat USA 2021 Hybrid Event

• ERI Announces Job Fairs in Six States as Employee Roster Continues to Grow

• Covid-19 health passes can open the door to a digital ID revolution

• AI everywhere: How AI is being applied in 4 different fields

• New Ryuk Ransomware Sample Targets Webservers

• China reportedly warns local tech companies of increased cybersecurity oversight

• Online brands prioritizing speed over security

• The Pentagon Scrubs a Cloud Deal and Looks to Add More AI

• Covid Protections Kept Other Viruses at Bay. Now They’re Back

• No, open source Audacity audio editor is not “spyware”

• Republican National Committee denies Russian hackers accessed data

• What are the most common cybersecurity challenges SMEs face today?

• Pro-Trump ‘Gettr’ Social Platform Hacked On Day One

• Microsoft Issues Emergency Patch for Critical Windows PrintNightmare Vulnerability

• Middle East ICT market expected to reach $95.05 billion by 2025

• Kaseya’s VSA SaaS restart fails, service restoration delayed by at least ten hours

• ISC Stormcast For Wednesday, July 7th, 2021 https://isc.sans.edu/podcastdetail.html?id=7574, (Wed, Jul 7th)

• eBook: Active Directory Security Tips From the Experts

• Kaseya’s SaaS restart fails, service restoration delayed by at least ten hours

• Kaseya Says Hackers Directly Hit Its Customers by Exploiting VSA 0-Day

• Microsoft Releases Patches for CVE-2021-34527, (Wed, Jul 7th)

• QCT Orqestra enables hyperscale monitoring with intuitive GUI

• Cloud after COVID

• Bosch unveils Flexidome IP starlight 8000i X series cameras with improved image quality

• Microsoft Releases Out-of-Band Security Updates for PrintNightmare

• iPadOS 14 Apple Pencil Features Expand to French, German, Italian, Portuguese, and Spanish Languages

• CyberLink collaborates with ASUS to create smart IoT/AIoT applications

• Out-of-Band (OOB) Security Update available for CVE-2021-34527

• Apple Considering Purchasing Reese Witherspoon’s ‘Hello Sunshine’ Media Company

• ServiceNow names Jacqui Canney as Chief People Officer

• Swedbank partners with ACI Worldwide to enhance its fraud platform with ACI Fraud Management

• Bitpanda names Irina Nicoleta Scarlat as Chief Growth Officer

• Bryan Hauptman joins Armor as CRO

• Accelerating CMMC compliance with a SASE Framework

• archTIS appoints Pete Smith as VP and GM of EMEA

• A new wave of ransomware attack hits up to 1,500  businesses worldwide

• DC pivots for Rescue Plan’s health benefits changes

• Microsoft Ships Emergency Patch for Critical Windows ‘PrintNightmare’ Vulnerability

• Researchers Learn From Nation-State Attackers’ OpSec Mistakes

• Kaseya CEO: “The impact of this incredibly sophisticated attack is very minimal”

• IT Security News Daily Summary 2021-07-06

• How to Easily Set Up Mutual TLS SSL

• iOS 15: How to Copy and Paste Text From Photos

• Kaspersky Password Manager’s random password generator was about as random as your wall clock

• DOD moves on from JEDI

• Kaseya Starts Recovery After REvil Attack

• Pentagon cancels JEDI contract

• Android Apps in Google Play Harvest Facebook Credentials

• Tech Giants Could Withdraw Services Over Hong Kong Doxxing Bill

• Blue Screen of Death will be Black Screen of Death in Windows 11

• The mobile and desktop versions of Firefox Total Cookie Protection are now available

• Workers Careless in Sharing & Reusing Corporate Secrets

• Trump and the Pardon Attorney

• What Are Red Team Exercises and Why Are They Important?

• Cowen analyst Shaul Eyal on the cyber stocks to own as ransomware attacks rise

• Microsoft Defender wants to help your business stomp out internal security threats

• Kaseya ransomware attack: Everything you need to know

• 1 in 4 employees say they still have access to accounts from past jobs, survey finds

• Pentagon Cancels Disputed JEDI Cloud Contract With Microsoft

• U.S. President Joe Biden to Direct FTC to Draft Right to Repair Rules

• Former hacker Kevin Mitnick on the latest global ransomware attack

• Ransomware-hit law firm gets court order asking crooks not to publish the data they stole

• What is steganography?

• “Kaseya Attack”: Over 1000 organizations globally attacked on Fourth of July weekend, biggest supply chain attack since Sunburst

• Kaseya ransomware attack: What you need to know

• Alleged Cybercriminal Arrested in Morocco Following Interpol Probe

• It’s High Time for a Security Scoring System for Applications and Open Source Libraries

• CISA Releases Security Advisory for Philips Vue PAC Products

• SonicWall addresses critical CVE-2021-20026 flaw in NSM devices

• Super Stickman Golf 3+ and Super Leap Day Coming to Apple Arcade

• Cybersecurity CEO: Hackers won’t get the $70 million they’re demanding in global ransomware attack

• CrowdStrike CTO Michael Sentonas Shares Insights on Humio

• “Kaseya Attack”: Over 1000 organizations globally attacked on Fourth of July weekend, biggest supply chain attack since sunburst

• Western Digital Users Face Another RCE

• DDoS Attack on Filipino Media Outlets Linked to Philippine Government and Army

• This iPhone Bug Exists Even After Network Settings Reset

• Six existential threats posed by the future of 5G (Part Two)

• Lazarus campaign TTPs and evolution

• How to protect your site against lethal unauthorized code injections

• UK’s Largest Chip Fab, Newport Wafer Fab, Acquired By Chinese Firm

• Interpol arrests Moroccon hacker over global phishing, malware scam

• Hands-On With Kensington’s New ‘StudioCaddy’ Multi-Device Charging Dock

• Aclpwn.Py – Exploit ACL Based Privilege Escalation Paths in Active Directory

• Preparing for your migration from on-premises SIEM to Azure Sentinel

• Report: Cloud Infrastructure Drives Security and Management Challenges

• Manual work is better than automated operations, suggests Kaseya Ransomware Attack

• US CISA Introduced Ransomware Readiness Assessment (RRA) In Its CSET Security Software

• Brentagg Shared Insights About Data Stolen During The Ransomware Attack

• Kaseya Patches Imminent After Zero-Day Exploits, 1,500 Impacted

• The Audacity! How to wreck an open-source project and anger a community

• Hewlett Packard Enterprise Buys Zerto for $374 Million

• British Airways Settles Class Action Over 2018 Data Breach

• IoT/ICS Armageddon: Hacking Devices Like There’s No Tomorrow Part 1

• 5 Best Security Measures for WordPress Security 2021

• The Industry Applauds MVISION XDR – Turning Raves into Benefits

• Swedish Supermarket Closed by Kaseya Cyberattack

• REvil Makes Monkeys out of Kaseya Customers

• Everything We Know About the Trump-Era Records Demands From the Press

• Greetings from the Internet! Connect with EFF this Summer

• Kaseya supply chain attack impacts more than 1,000 companies

• Kaseya: 1,500 organizations affected by REvil attacks

• Water Agency WSSC Hit by Ransomware Attack

• Cyberattack on Kaseya Nets More Than 1,000 Victims, $70M Ransom Demand

• Vulnerability in the Kaspersky Password Manager

• Pro-Trump Social Media Site Gettr Hacked

• British Airways Data Breach Compensation Claim Settled

• Kaseya Ransomware Attack Affects 1,500 Companies

• Website Of Mongolian Certificate Authority Served Backdoored Client Installer

• Racing against a real-life ransomware attack, with Ski Kacoroski: Lock and Code S02E12

• Twitter Loses Protection Liability Over User Content In India

• The best browser to replace Google Chrome on Windows, Mac, iPhone, and Android

• Best enterprise identity access management software

• HTTPS Security 101: What You Need to Know

• Jim Cramer’s full comments on China expanding cybersecurity investigation, OPEC+ impasse

• Travel Smart: Protecting Your Family’s Smartphones While on Vacation

• Critical flaws in Windows Print spooler service could allow for remote attacks

• REvil Ransomware to Blame for the Largest Cyberattack Ever Seen

• Researcher Describes Potential Impact of Recently Patched SonicWall NSM Flaw

• Experts Said How Cybercriminals Make Money on Russian Gamers

• 8 Ways to Preserve Legal Privilege After a Cybersecurity Incident

• Apple CEO Tim Cook Reportedly Attending Sun Valley Conference Known as ‘Summer Camp for Billionaires’

• All iPhone 14 Models May Feature 120Hz ProMotion Displays

• The best browser to replace Google Chrome on Windows, Mac, iPhone and Android

• Moroccan Hacker Dr Hex Caught by Interpol

• Formula 1 Mobile Push Notification Service Targeted by Hackers

• CISA and FBI Share Guidance for the Victims of Kaseya Ransomware Attack

• Huntress CEO Kyle Hanslovan on latest REvil ransomware attack

• Shortcuts Are Coming to macOS – What Does This Mean, and How Secure Are They?

• Kaseya Hackers Demand $70 Million Ransom

• New Botnet Dubbed Mirai Compromised Over 300,000 IoT Devices

• Approximatively 1,500 businesses impacted by the ransomware attack that hit Kaseya

• M2 Chip Rumored to Arrive in 2022 With Redesigned MacBook Air

• Top 8 Database Security Best Practices

• Securing Government Agencies: Essential Eight and Other Efforts

• British Airways data breach lawsuit settled: Airline coughs up around £30m to make sueball bounce away

• In Crosshairs of Ransomware Crooks, Cyber Insurers Struggle

• Combating China’s Insider Threat: Can New Laws Curb IP Theft by Foreign Spies?

• Python DLL Injection Check, (Tue, Jul 6th)

• Didi App Removed from App Stores in China Following a Suspension Order

• Multiple Vulnerabilities Discovered In Xerox Digital Assets

• Numerous Trojanized Android Apps Caught Stealing Users’ Facebook Credentials

• 16,000 Washington Workers Data Exposed Following a Ransomware Attack

• EA Faces Criticism After Ignoring Warnings from Cybersecurity Researchers

• Microsoft Alerts of Critical PowerShell 7 Code Execution Vulnerability

• Bitcoin Price Rise Makes Way for New Cyberattacks: BEC Attacks and Phishing Impersonations on the Carpet

• Hackers Demand $70 Million as Kaseya Ransomware Victim Toll Nears 1,500 Firms

• Why the Password Isn’t Dead Quite Yet

• Notes Created in iOS 15 and macOS 12 Betas May Not Show Up on Earlier Versions

• Here Are the Free Ransomware Decryption Tools You Need to Use [2021 Updated]

• Trump Supporting Social Media App Hacked

• Is Diavol Ransomware Connected to Wizard Spider?

• China extends cybersecurity reviews beyond Didi

• Russian APT Hackers Launched A Mass Global Brute Force Attack to Hack Enterprise & Cloud Networks

• Kaseya ransomware attack: 1,500 companies affected, company confirms

• Website of Mongolian certificate authority served backdoored client installer

• iPhone 13 Mini to Be Assembled By Pegatron and Foxconn [Updated]

• Case Allegedly Designed for Upcoming iPhone 13 Pro Shows Significantly Larger Camera Module

• Sensitive Data Might Have Been Subject to Public Exposure Following Ransomware Attack

• QNAP Fixes Improper Access Control Vulnerability in NAS Backup

• Rainbow tables explained: How they work and why they’re (mostly) obsolete

• Proposed bill would create a new federal agency to protect consumer data

• British Airways Settles Data Breach Claims Case

• FCW Insider: July 6, 2021

• Quick Hits

• Operation Lyrebird: Group-IB assists INTERPOL in identifying suspect behind numerous cybercrimes worldwide

• Windows 11 upgrades: Why security is going to be the key driver

• The Rundown on Google’s Cloud Security Foundations Guide

• QNAP addressed a critical flaw that allows compromising NAS devices

• Dealing With Data Brokers | Avast

• Protecting Your Online Privacy: Three Levels of Security

• Bringing Governance, Risk, and Compliance to Life

• Quantum Key Distribution: Is it as secure as claimed and what can it offer the enterprise?

• Interpol Arrests Moroccan Hacker Engaged in Nefarious Cyber Activities

• Case Allegedly Designed for Upcoming iPhone 13 Pro Max Shows Significantly Larger Camera Module

• MVP 11

• Application security testing is not just buzzwords

• Kaseya Rules Out Supply-Chain Attack; Says VSA 0-Day Hit Its Customers Directly

• Zero-Trust at the Data Layer

• ENISA publishes Cybersecurity guide for SMEs

• Biggest supply chain attack since Sunburst strikes over US Independence Day weekend, affecting over 1000 organizations globally

• GFI Patch Central: Third-Party Patch Roundup for June

• DARPA nails cash to project ‘FENCE’ — a smart camera that only sends pics when pixels change

• Reaction to Social Engineering Indicative of Cybersecurity Culture

• How do I select a mobile threat defense solution for my business?

• Kaseya Ransomware attack strikes UK Companies

• US is forcing companies to install backdoors says China

• Mapping Secure Endpoint (and Malware Analytics) to NIST CSF Categories and Sub-Categories

• iPhone 13 Mini to Be Assembled By Apple Supplier Pegatron

• How to improve your organization’s Active Directory security posture

• DARPA flings cash at FENCE — a smart camera that only sends pics when pixels change

• How can a business ensure the security of their supply chain?

• Japan to bolster national cybersecurity defence with 800 new hires: Report

• Cybersecurity posture confidence high, yet incidents are increasing too

• Cyber insurance failing to live up to expectations

• GrammaTech Unveils New Software Supply Chain Security Platform

• ISC Stormcast For Tuesday, July 6th, 2021 https://isc.sans.edu/podcastdetail.html?id=7572, (Tue, Jul 6th)

• The Kaseya Ransomware Attack is a Really Big Deal

• Digital signature market to grow steadily by 2030

• Kaseya’s REvil Ransomware Attack Hits 40 Customers worldwide & Hackers Ask’s $70 Million

• Buyer’s guide: Questions to ask when evaluating third-party security management platforms

• Kaseya says it’s seen no sign of supply chain attack, sets SaaS restoration target of Tuesday afternoon, on-prem fix to follow

• Kaseya sets SaaS restoration target of Tuesday afternoon, on-prem fix to follow

• Microsoft stakes out claim with Windows 11 on future of hybrid work

• Security for Amazon Redshift

• The Kesaya Ransomware Attack is a Really Big Deal

• The Importance of Understanding Attacker Target Selection

• The cost of cyber insurance increased 32% last year and shows no signs of easing

• IT Security News Daily Summary 2021-07-05

• Some quick notes on SDR

• CISA, FBI share guidance for MSPs and their customers impacted in Kaseya attack

• Kaseya Attack Fallout: CISA, FBI Offer Guidance

• Pokémon GO Celebrating Fifth Anniversary of Launch With Special In-App Events

• The wheels come off Formula 1’s notification service as fans plied with attacker’s messages

• Industrial Facilities are at Risk of Data Theft and Ransomware Attacks

• How Developers Can Protect Linux From Vulnerabilities>

• Know what audio files does Google Servers store from your Android Smartphones

• ARM CEO Insists Nvidia Purchase Better Than IPO

• Researchers Detail the New Two-Step Cryptography Technique

• Newly discovered Mirai Botnet is Exploiting DVR in DDoS Attack

• PrintNightmare Threat Continues, Microsoft Confirms Exploit Present in All Variants

• Vulnerability Summary for the Week of June 28, 2021

• Gang Behind Huge Cyber Attack Demands $70M In Bitcoin

• Didi Barred From China App Stores Amidst Government Security Review

• Ransomware Attacks Driving Cyber Reinsurance Rates Up 40%

• Biden Announces Investigation Into International Ransomware Attack

• Genetic Analysis and Lessons Learned from REvil Attack

• Apple Tested Ceramic Apple Watch Edition Two Years Before It Launched

• WSSC Water Hit with Ransomware Attack

• What’s this about a lawyer looking for an heir? City of London Police seek IT crew to help crack down on fraud

• Most Reliable Hosting Company Sites in June 2021

• Vulnerabilities Found in the WAGO Devices May Expose Companies to Remote Attacks

• TrickBot Trojan Strikes Again: It Updated Its Banking Trojan Module and Is Back in the Game

• President Biden Orders Investigation Into Kaseya Ransomware Attack

• Revil ransomware increases ransom to $70M in Kaseya attack

• CISO implementation guide: 10 ways to ensure a cybersecurity partnership will work

• Kaseya ransomware attackers say: “Pay $70 million and we’ll set everyone free”

• Malicious Google Play Apps Steal Facebook Users’ Logins and Passwords

• Leaked Infrastructure Secrets Costs Companies an Average of $1.2 Million in Revenue Annually

• Watch for Cybersecurity Games at the Tokyo Olympics

• Amazon Echo Dots Store a Wealth of Data—Even After a Reset

• Revil ransomware gang hit Spanish telecom giant MasMovil

• Phishing Prevention 101: How to Recognize an Attack and Other Useful Tips

• Coop Supermarket Had to Close 500 Stores Following the Kaseya Ransomware Attack

• REvil Attack, Genetic Analysis and Lessons Learned

• Russian speaking group strikes on US Independence weekend, hitting several organizations with ransomware demands, in the biggest supply chain attack since Sunburst

• AI legislation must address bias in algorithmic decision-making systems

• Swedish Supermarket Chain Hit by Massive Cyberattack

• Phishing Campaign for Stealing USPS Customers’ Credit Cards Details

• New Ransomware Highlights Widespread Adoption of Golang Language By Cyberattackers

• Identity Protection Service: The Best Solution to a Growing Problem

• Kaseya ransomware supply chain attack: What you need to know

• Didi, China’s Largest Ride-hailing Service, Banned from App Stores

• 9 arrested in Moldova and France for €2 million immigration fraud

• Getting Started with Security Testing: A Practical Guide for Startups

• REvil ransomware attack against MSPs and its clients around the world

• The Complete Guide to Taking Screenshots and Screen Recordings on Mac, iPhone, iPad, and Apple Watch

• Hundreds of U.S. Companies Hit by Massive Ransomware Attacks

• Cybercriminals Compromise Mongolian Certificate Authority MonPass to Distribute Malware

• The PrintNightmare Threat Issue: Microsoft Shares Its Input

• A week in security (June 28 – June 4)

• Update PowerShell 7.0 & 7.1 To Protect Your Azure Resources From Hackers Against .NET Core RCE Bug

• The OSI Model and You Part 7: Stopping Threats at the Application Layer

• Ransomware Defense: Top 5 Things to Do Right Now

• Malware Grabbed 5.8M Facebook Passwords

• Apple’s App Tracking Transparency Framework Causing Advertisers to Spend More Money Targeting Android Users

• Apple Looks Beyond Silicon Valley to Improve Recruitment and Retention

• Security Auditing for MongoDB on Atlas

• Revil Ransomware Attacked When Kaseya Was Fixing the Zero-Day Vulnerability

• Supply-chain attack on Kaseya remote management software targets MSPs

• Kaseya ransomware attack: US launches investigation as gang demands giant $70 million payment

• Scale, Details of Massive Kaseya Ransomware Attack Emerge

• REvil ransomware gang demanded $70M for universal decryptor for Kaseya victims

• Stealing Xbox Codes

• UNC1151 Threat Actors Breach Polish MPs’ Email Accounts

• Jeff Bezos Steps Down As Amazon CEO

• China Tells Apple to Remove Ride-Hailing App Didi Chuxing From App Store for Data Violations

• Is this the end of robocalls?

• NSA and FBI Blame Russia for Massive ‘Brute Force’ Attacks on Microsoft 365

• AJG Data Breach Led to Private Information Exposure: the U.S. Insurance Company Affected by a Cyberattack

• Chemical Distributor Brenntag Says What Data Was Stolen During the Ransomware Attack

• TrickBot Botnet Found Deploying A New Ransomware Called Diavol

• How to control ransomware? International cooperation, disrupting payments are key, experts say

• HSBC CISO champions neurodiversity awareness in cybersecurity

• 2021 iPhone Rumored to Be Named ‘iPhone 13’ With Same ‘Mini,’ ‘Pro,’ and ‘Pro Max’ Variants As Last Year

• Audacity ‘Spyware’ Claims Follow Privacy Policy Changes By New Owner

• The Aviation Industry Needs to Move Towards Cyber Resilience

• Trying to register your antivirus in Windows Security Center?

• Beware!! 5.8 Million Times Downloaded Android App Steals Facebook Passwords

• Diavol Ransomware is Linked to Wizard Spider Cybercrime Group

• Welcoming the Dutch Government to Have I Been Pwned

• Attempts to Circumvent Apple’s App Tracking Transparency Rules in China Reportedly Fail to Gain Traction

• Are Apple’s Privacy Features Enough? | Avast

• Didi barred from China appstores amidst government cybersecurity review

• Microsoft Urges Azure Users to Update PowerShell to Patch RCE Flaw

• US water company WSSC Water hit by a ransomware attack

• China’s tech crackdown has a new battleground — data

• Cyber Threat to Telecom, Energy and Transport infrastructure in Ireland

• Biden serious as REvil Ransomware attack targets 1200 US Companies

• REvil Used 0-Day in Kaseya Ransomware Attack, Demands $70 Million Ransom

• Platform or roaming FIDO2 authenticators: Which one is right for your workforce?

• DiDi, China’s Uber analog, booted from local app stores for data naughtiness

• Bitcoin cyber attacks surge following rising demand and increasing price of bitcoin

• Organizations increasingly reluctant to pay ransomware demands

• IT for service providers biz Kaseya defers decision about SaaS restoration following supply chain attack

• Why are companies in the SAP S/4HANA transformation holding back?

• Worldwide wireless 5G connections reach 298 million in Q1 2021

• After crackdown on Didi, China opens cybersecurity probes into 3 more tech firms

• China opens cybersecurity probe into 3 tech firms

• Anomali’s quarterly update empowers users to optimize and speed incident response

• Russian hackers are trying to brute-force hundreds of networks

• OpenZFS 2.1 is out—let’s talk about its brand-new dRAID vdevs

• It’s 2021, you should be using a password manager

• Researchers Share Another Zero-Day in Some Western Digital NAS Products

• Swedish Coop supermarkets shut due to US ransomware cyber-attack

Generated on 2021-07-11 23:59:42.875398