IT Security News Weekly Summary – Week 28

• IT Security News Daily Summary 2022-07-17

• Lenovo UEFI Firmware Vulnerabilities Risk Numerous Laptop Models

• Hackers can spoof commit metadata to create false GitHub repositories

• Crooks stole $375k from Premint NFT, it is one of the biggest NFT hacks ever

• Acquiring Actionable Knowledge Through Collaboration

• Darkweb Monitoring

• Google is going to remove App Permissions List from the Play Store

• The History of Countering Violent Extremism Tends to Repeat. It Shouldn’t.

• Mantis Botnet Behind Largest HTTPS DDoS Attack Targeting Cloudflare Users

• Office Phishing Attack circumvents multi-factor authentication

• Data of 4,000 Patients at VCU Health Exposed

• North Korean Hackers Using H0lyGh0st Ransomware To Attack & Demand 1.2 to 5 Bitcoins

• StartupApproved\Run, pt II

• Week in review: Kali Linux gets on Linode, facial recognition defeated, Log4j exploitation

• Penetration testing

• JukinMedia – 314,290 breached accounts

• APT groups target journalists and media organizations since 2021

• Security Affairs newsletter Round 374 by Pierluigi Paganini

• Terry Neal joins ID.me as Chief Communications Officer

• Neustar Security Services launches DDoS mitigation and application security data center in Dubai

• Hitachi Vantara hires Amee Desjourdy as Chief Human Resources Officer

• IT Security News Daily Summary 2022-07-16

• Critical flaw in Netwrix Auditor application allows arbitrary code execution

• Homeland Security Warns Log4j’s ‘Endemic’ Threats for Years to Come

• 5 data privacy imperatives for enterprise leaders

• North Korean Hackers Employ H0lyGh0st Ransomware to Target Businesses

• ISG to Publish Report on Public Cloud Services, Solutions

• SOC Prime Delivers New Smoking Guns Sigma Rules List

• Ex CIA Programmer Convicted of Leaking ‘Vault 7’ Hacking Tools to WikiLeaks

• North Koreans spotted harassing SMBs with malware

• Defective WordPress Plugin Permits Full Invasion

• Predatory Sparrow’s Assault on Iran’s Steel Industry

• CISA urges to fix multiple critical flaws in Juniper Networks products

• Get online training for 15 different CompTIA exams for under $60

• Amazon Handed Ring Videos to Cops Without Warrants

• Threat actors exploit a flaw in Digium Phone Software to target VoIP servers

• Mantis – Behind The Most Powerful Botnet Attack Ever Recorded With 26 Million RPS

• Mantis – Behind The Most Powerful Botnet Attack Ever Recorded With 26 Million Request Per Second

• Famm – 535,240 breached accounts

• Eskimi – 1,197,620 breached accounts

• Build or Buy your own antivirus product

• Hackers Targeting VoIP Servers By Exploiting Digium Phone Software

• Google Removes “App Permissions” List from Play Store for New “Data Safety” Section

• Weekly Update 304

• New Netwrix Auditor Bug Could Let Attackers Compromise Active Directory Domain

• TD SYNNEX Announces Results of Senior Notes Exchange

• Crosslake Technologies Announces Acquisition of Cybersecurity Advisory Firm VantagePoint

• Four Steps to Using Metrics to Defend Your Security Budget

• Haystack Secure Delivery protects sensitive and proprietary internal communications

• Keysight Cyber Training Simulator enables students to develop their skills in a realistic environment

• Think twice before downloading pirated games – Week in security with Tony Anscombe

• What is Steganography, and how can we Avoid it?

• Tiny Mantis Botnet Can Launch More Powerful DDoS Attacks Than Mirai

• Matthew Chiodi joins Cerby as Chief Trust Officer

• Ring Reveals They Give Videos to Police Without User Consent or a Warrant

• Brave uses Goggle to show only cybersecurity websites

• Tainted password-cracking software for industrial systems used to spread P2P Sality bot

• At-Bay appoints Scott Carmilani and David Lockton to its Board of Directors

• IT Security News Daily Summary 2022-07-15

• DevSecOps: What enterprises need to know

• E-bike pilots deliver micromobility travel insights, CO2 savings

• Friday Squid Blogging: Squid Inks Fisherman

• Digital ID bill sees action in the House and Senate

• CISA pulls the fire alarm on Juniper Networks bugs

• Brave uses Goggle to show only cybersecurity websites.

• Why 8kun Went Offline During the January 6 Hearings

• Average American Accesses Suspicious Sites 6.5 Times a Day

• CIA Whistleblower Found Guilty of Leaking Vault 7 Documents to WikiLeaks

• Cryptocurrency mixer activity reaches new heights in 2022

• Today’s Headlines and Commentary

• Thousands of websites run buggy WordPress plugin that allows complete takeover

• Top 5 Infrastructure as Code Security Challenges

• Former CIA Software Engineer Convicted for Vault 7 Leaks to WikiLeaks

• Netwrix Auditor Bug Could Lead to Active Directory Domain Compromise

• How Attackers Could Dupe Developers into Downloading Malicious Code From GitHub

• What Are the Risks of Employees Going on a ‘Hybrid Holiday’?

• Continuous Biometric Authentication Tool Against Account Takeovers

• A Guide to Mitigating the Cyber Risks Posed by Refurbished Hardware

• The Rapid Development of Endpoint Detection And Response Technology

• How can I keep my credit card details from being stolen online? [Ask ZDNet]

• Former CIA Employee Joshua Schulte Convicted Over Massive Data Leak

• Risk & Repeat: Ransomware in 2022 so far

• FTC explains ‘reasonable’ cybersecurity

• Bipartisan group seeks to limit who federal agencies can contract with

• 7 cybersecurity tips for your summer vacation!

• Ex-CIA Programmer Found Guilty of Stealing Vault 7 Data, Giving It to Wikileaks

• Keysight Cyber Training Simulator Provides Universities a Realistic Turnkey Cyber Range

• Latest Cyberthreats and Advisories – July 15, 2022

• 5 Common blind spots that make you vulnerable to supply chain attacks

• No-code Development Platforms – Are They Secure?

• 6 ways governments drive innovation – and how they can help post-pandemic resilience

• What is an ethical hacker? Why one of the most intriguing jobs in cybersecurity could be a good bet

• Emerging H0lyGh0st Ransomware Tied to North Korea

• DHS Releases Report into Log4j Vulnerabilities and Response

• 5 Key Things We Learned from CISOs of Smaller Enterprises Survey

• Hackers targeting journalists across the World

• Supply Chain Attack Technique Spoofs GitHub Commit Metadata

• Regulator: Facebook Marketplace Is Full Of Banned And Recalled Products

• Belatedly Introducing #LiveFromUkraine

• Meta’s Ray-Ban Stories Can Now Make Calls Via WhatsApp

• North Korean Threat Actor Targeting SME Businesses with Ransomware

• Sandworm APT Trolls Researchers on Its Trail as It Targets Ukraine

• Meta’s Oversight Board Often Turns in Its Homework Late. Does it Matter?

• The D.C. Circuit Upholds Subpoena for Trump Financial Records

• Amazon admits to giving police ring footage without owners’ permission

• Simple cyber reporting will enable better governmentwide response, lawmaker argues

• New Cache Side Channel Attack Can De-Anonymize Targeted Online Users

• Experts warn of attacks on sites using flawed Kaswara Modern WPBakery Page Builder Addons

• Meet Mantis, The Tiny Shrimp That Launched 3,000 DDoS Attacks

• Journalists Emerge As Favored Attack Target For APTs

• Tenet Health Sued Over Health Data Theft Impacting 1.2M

• Windows Network File System Flaw Results In Arbitrary Code Execution As SYSTEM

• user behavior analytics (UBA)

• Powerful ‘Mantis’ DDoS Botnet Hits 1,000 Organizations in One Month

• Critical Infrastructure Operators Implementing Zero Trust in OT Environments

• The differences between pen tests vs. vulnerability scanning

• Falling Cryptocurrency Market Stalling Cybercrime Activity

• AiTM Phishing Campaign Targets +10,000 Orgs Since 2021 – Expert Comments

• U.S. FTC Vows To Crack Down On Illegal Use And Sharing Of Citizens’ Sensitive Data

• Major Cyber Bug In Log4j To Persist As ‘Endemic’ Risk For Years To Come

• Windows Network File System flaw results in arbitrary code execution as SYSTEM

• Latest Cyberthreats and Advisories – July 15, 2022

• What Cybersecurity Teams Can Learn From the US Cyber Command’s ‘Hunt Forward’

• How Hackers Create Fake Personas for Social Engineering

• Anvil Mobile Hit By New Exploit – DNS Hijacking.

• Most Popular Courses – June – Pluralsight

• Security Expert Re: DHS report On Defending Against Log4j

• Lockdown Mode: Apple is shutting down spyware

• Sophos Sees Surge Of Ransomware Attacks Against Education Sector

• Bot Battle: The Tech That Could Decide Twitter’s Musk Lawsuit

• Software Vendors Start Patching Retbleed CPU Vulnerabilities

• Microsoft: North Korean Hackers Target SMBs With H0lyGh0st Ransomware

• Holy Ghost ransomware operation is linked to North Korea

• This tiny botnet is launching the most powerful DDoS attacks yet

• Almost a third of untrained users will click a phishing link – KnowBe4 research

• Amazon Ring Gave Doorbell Footage To US Police Without Owners’ Consent

• Firms Not Planning for Supply Chain Threats

• The real reason why malware detection is hard—and underestimated

• San Francisco Police Want Real-Time Access to Private Surveillance Cameras

• Harvest Subdomains with DNSHarvester

• Top 5 Cybersecurity Software Apps for Android

• Financial Firms Failing to Fix Authentication Breaches

• How to address the ongoing risk of Log4j exploitation and prepare for the future

• Black Hat announces keynote lineup for Black Hat USA 2022

• The Premier Secure Infrastructure Event Comes to Europe in 2023

• North Korean Hackers Targeting Small and Midsize Businesses with H0lyGh0st Ransomware

• Transplant Donor and Recipient Data Exposed by Healthcare Provider

• Vulnerabilities in the ExpressLRS Protocol Enable the Takeover of Drones

• Microsoft: Provide Code for MacOS App Sandbox Flaw

• New PayPal Phishing Kit Hijacks WordPress Sites

• Best Modern Platforms For Internal Code Development

• NIST unveils four quantum-resistant encryption tools to protect sensitive electronic information

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Digital burglary at recruitment agency Morgan Hunt confirmed

• RedAlert, LILITH, and 0mega, 3 new ransomware in the wild

• Microsoft accuses North Korea of HolyGhost Ransomware Operation

• China accuses India of launching Cyber Attacks on Pakistan

• Active Directory Penetration Testing Checklist

• Meet Mantis – the tiny shrimp that launched 3,000 DDoS attacks

• Mantis Botnet Behind the Largest HTTPS DDoS Attack Targeting Cloudflare Customers

• New infosec products of the week: July 15, 2022

• Q-Day: The problem with legacy public key encryption

• Cyemptive Technologies CEO Rob Pike Named “Cybersecurity CEO of the Year” by CEO Monthly Magazine

• Chariton Valley Commits To Protecting All Customers From Growing Cybersecurity Threats With Calix ProtectIQ Home Network Security

• Black Hat Announces Chris Krebs & Kim Zetter As Keynote Speakers for Black Hat USA 2022

• Authenticating legacy apps with a reverse proxy

• Stories from the SOC – Detecting internal reconnaissance

• Army’s new plan to ‘transform’ soldier healthcare with tech

• The proliferation of money mules and how behavioral biometrics can combat this form of fraud

• Former CIA Engineer Convicted of Leaking ‘Vault 7’ Hacking Secrets to WikiLeaks

• Outsourcing security is the only solution for many smaller teams

• 4 Major Steps Of Web Application Penetration Testing

• Everbridge Service Intelligence accelerates IT incident response

• CertiK launches new web3 security features for addressing risk on crypto projects

• ChaosSearch enhances log analytics capabilities to eliminate architectural complexity challenges

• CyberArk Secrets Hub enables enterprises to accelerate transition to AWS

• Meet Mantis, the tiny shrimp that launched 3,000 DDoS attacks

• Autolycos Android Malware Attracted Huge Downloads Via Google Play Store

• API Security Weekly: Issue 168

• Ex-CIA Programmer Convicted of Vault 7 WikiLeak Breach (Videos)

• Log4j Software Flaw ‘Endemic,’ New Cyber Safety Panel Says

• Juniper Networks announces several new enhancements to its AI-driven enterprise portfolio

• TIBCO Cloud EBX allows users to manage corporate data from anywhere

• Digital Realty ServiceFabric helps customers accelerate their digital transformation

• Micro Focus releases Visual COBOL 8.0 and Enterprise Suite 8.0 to modernize core business systems

• Samsung introduces 24Gbps GDDR6 DRAM to advance next-generation graphics cards

• EFF and ACLU File Amicus Brief Objecting to Warrantless, Suspicionless Electronic Device Searches at the Border

• Cyble partners with VirusTotal to protect customers’ digital assets from targeted cyberattacks

• 443ID offers free OSINT Risk tool for Auth0 customers

• Homeland Security warns: Expect Log4j risks for ‘a decade or longer’

• Alexander Pagoulatos joins Praetorian as VP of Product

• Impact Litigation in Action: Building the Caselaw Behind a Win for Free Speech

• Routing gap in VA health software led to patient harm, watchdog says

• Bishop Fox Secures $75 Million in Growth Funding From Carrick Capital Partners

• The First Cyber Safety Review Board Report is Out

• Deque Systems appoints Glenda Sims as Chief Information Accessibility Officer

• IT Security News Daily Summary 2022-07-14

• 5 of the Most Commonly Overlooked Security Measures

• Security and Compliance Considerations for the Public Cloud

• Cryptocurrency crash triggers crisis for dark web exchanges

• Uniswap V3 LPs Lose Millions in Fake Token Phishing Attack

• EEOC: Women still lag far behind men in the government’s STEM workforce

• New Phishing Kit Hijacks WordPress Sites for PayPal Scam

• DHS Review Board Deems Log4j an ‘Endemic’ Cyber Threat

• How to Fix Instagram Checkpoint Required Error

• Startups without a CISO: You’re losing out on a big business opportunity

• Virtual reality, location services get workout at responder test lab

• US Cyber Safety Review Board warns that Log4j will remain ‘endemic’

• Outdated technologies a risk for modern public safety

• Scribe Security Releases Code Integrity Validator Alongside Github Security Open Source Project

• Best 100+ Tinder Bio Status For Guys (To Make Girls To Swipe Right)

• US Gov warns that Log4j will remain a problem for years: Here’s why

• Healthcare Provider Exposed Transplant Donor and Recipient Data

• Data of Nearly 2M Patients Exposed in Ransomware Attack on Healthcare Debt Collection Firm

• AEI HorizonX Ventures Joins Shift5 Series B Funding Round

• Top Challenges to Implementing Data Privacy: Nailing Down Discovery and Classification First is Key

• ChromeLoader – New Malware Using a browser Extension to Attack Organizations

• Mantis botnet powered the largest HTTPS DDoS attack in June

• Ransomware attack on US healthcare debt collector exposes 1.9m patient records

• Two Big OT Security Concerns Related to People: Human Error and Staff Shortages

• SecOps vs. CloudSecOps: What does a CloudSecOps team do?

• 1.9 Million Healthcare Records Breached in Ransomware Attack

• Software developers have a supply chain security problem

• Juniper Networks Releases Security Updates for Multiple Products

• S3 Ep91: CodeRed, OpenSSL, Java bugs and Office macros [Podcast + Transcript]

• Juniper Networks Releases Security Updates for Multiple Products

• Upcoming Speaking Engagements

• Uber Sued By 500 Women Over Sexual Assault Allegations

• The new Retbleed speculative execution attack impacts both Intel and AMD chips

• HavanaCrypt Ransomware Deployed Via Fake Google Updates

• Cerby Appoints Former Palo Alto Networks CSO Matthew Chiodi as Chief Trust Officer

• D-Wave Systems Inc. and DPCM Capital, Inc. Announce Effectiveness of Registration Statement

• Deploying a Modern Bank Card Program: Part One

• How startup culture is creating a dangerous security gap in new companies

• Ransomware attack news trending on Google

• Google ChromeOS Flex comes out of beta to help stop ransomware threats

• BlackCat Ransomware Group Deploys Brute Ratel Pen Testing Kit

• Predatory Sparrow massively disrupts steel factories while keeping workers safe

• Elden Ring maker Bandai Namco hit by ransomware and data leaks

• Lenovo issues firmware updates after UEFI vulnerabilities disclosed

• Tesla Autopilot Head Resigns After Five Years

• Microsoft pauses macro security plan, unclear on why

• Google ChromeOS Flex comes of beta to help stop ransomware threats

• Cyber Safety Review Board closes the book on SolarWinds while reporting on Log4j

• Election laws in red and blue states are changing. Here’s how

• The industrial internet of things is still a big mess when it comes to security

• Gateway Load Balancer now generally available in all regions

• North Korean threat actor targets small and midsize businesses with H0lyGh0st ransomware

• Cloud security needs assistants

• SAP Security Patch for July: Six High Priority Notes

• Customer service at the National Security Agency

• Journalists Emerge as Favored Attack Target for APTs

• Japanese Video Game Publisher Bandai Namco Confirms Cyberattack

• Organizations Warned of New Lilith, RedAlert, 0mega Ransomware

• Is Cryptocurrency’s Crash Causing Headaches for Ransomware Gangs?

• Former CIA Engineer Convicted of Leaking ‘Vault 7’ Hacking Secrets to Wikileaks

• New variant of Android SpyJoker malware removed from Play Store after 3 million+ installs

• The industrial internet of things is still big mess when it comes to security

• Cyberinsurers looking for new risk assessment models

• New Browser De-anonymization Technique

• The Chatter Podcast: Mass Shootings in America with Josh Campbell

• Senators Ask FTC to Investigate TikTok for Deceptive Conduct Regarding Chinese Access to U.S. User Data

• Endpoint security for Mac: 3 best practices

• China’s Tonto Team increases espionage activities against Russia

• Twitter Not Planning Large Numbers Of Layoffs

• 10,000 organisations targeted by phishing attack that bypasses multi-factor authentication

• How to remove your saved passwords in Chrome

• Fewer Fall Victim to Data Breaches as Attackers Switch to Business in 2022

• Amazon Handed Doorbell Cam Ring Data To US Police 11 Times So Far In 2022

• SCOTUS Judges Doxxed After Overturning Roe Versus Wade

• Hacking Of US Hospitals Highlights Deadly Risk Of Ransomware

• Ex-CIA Employee Convicted Of Leaking Vault 7 Secrets To Wikileaks

• Play Elden Ring? It’s Just Been Hit With Ransomware

• Rise In Smishing Scams, Why And How To Protect?

• Twitter Not Planning Large Numbers Of Layoffs

• 6 Ways SASE Helps Protect Your Data

• 10,000 organisations targeted by phishing attack that bypasses multi-factor authentication

• How to remove your saved passwords in Chrome

• Fewer Fall Victim to Data Breaches as Attackers Switch to Business in 2022

• Data Breaches Linked to Ransomware Declined in Q2 2022

• The Next Generation of Threat Detection Will Require Both Human and Machine Expertise

• Virtual CISOs Are the Best Defense Against Accelerating Cyber-Risks

• How To Protect From VCU Like Data Breaches?

• How To Protect Against Phishing Attacks Bypassing 2FA

• Why Do Organizations Need an Email Security Policy?

• 4 Ways To Optimize B2B Data Analytics

• Amazon handed doorbell cam Ring data to US police 11 times so far in 2022

• API security moves mainstream

• Investment in IIoT/OT Security Leads to Reduced Incident Impact: Study

• Cyber Operations and Maschmeyer’s “Subversion Trilemma”

• A Guide to DAC: An Overview of Discretionary Access Control

• Q2 2022 Cyber Attacks Statistics

• Celsius Network Files For Bankruptcy Protection

• Why cybersecurity must pair humans with self-learning AI (VB On-Demand)

• DAST vendor Bishop Fox looks to help orgs manage the attack surface

• Scribe Integrity helps developers authenticate open-source and proprietary source code

• Microsoft: 10,000 Organizations Targeted in Large-Scale Phishing Campaign

• A Simple Formula for Getting Your IT Security Budget Approved

• State-Backed Hackers Targeting Journalists in Widespread Espionage Campaigns

• VMware vCenter Server Flaw Let Attacker Exploit to Perform Elevate Privileges Attack

• Microsoft tells Mac users to install patches to protect against macOS App Sandbox flaw

• What these two companies learned from their cyberattack experiences

• Singapore talks up OT security, looks to add medical devices to labelling scheme

• State-Sponsored Hackers Targeting Journalists

• What Exactly Are Crypto ETFs?

• Bishop Fox Lands $75 Million Series B Funding

• Styra Run allows end users to control their own account and access permissions

• Low-income consumers preyed on by fake ISP during pandemic, FCC says

• Microsoft July Patch Tuesday Arrives With 84 Bug Fixes

• Iterative Software Development 101: an Entrepreneur’s Guide

• Maintaining Your Cyber Hygiene With RAV Antivirus

• Researchers Found “Rolling PWN” Vulnerability Affecting Honda Cars

• Google Cloud Adopts ARM-based Chips

• Is your SWG smarter than an SNI Jedi Master?

• A New Attack Can Unmask Anonymous Users on Any Major Browser

• Microsoft Details App Sandbox Escape Bug Impacting Apple iOS, iPadOS, macOS Devices

• PayPal-themed phishing kit allows complete identity theft

• State-sponsored cyberespionage campaigns continue targeting journalists and media

• ICO Calls for Review of Government “Private” Messaging

• Former CIA employee Joshua Schulte was convicted of Vault 7 massive leak

• $8million Worth of Ethereum Stolen in Large Scale Uniswap Phishing Campaign

• Netflix Partners Microsoft For Cheaper Subscription Plan…With Adverts

• Google: Here’s how we got to rolling desktop Linux releases after Ubuntu to Debian switch

• Surge in Ransomware Activity Reported in Q2

• Lilith, A New Ransomware, Has Claimed Its First Victim

• Do top websites collect typed data even if never submitted?

• Pakistani Hackers Targeting Indian Students in Latest Malware Campaign

• Microsoft published exploit code for a macOS App sandbox escape flaw

• FTC to Crack Down on Illegal Sharing of Citizen’s data

• Microsoft Patches Zero-Day Bug That Allowed Remote Execution on Windows Machines

• Why less can be more in backup and recovery management

• Lockdown Mode – Intego Mac Podcast Episode 248

• Smart factories need to prioritize their cybersecurity

• VMware fixed a flaw in vCenter Server discovered eight months ago

• Do you know what your supply chain is and if it is secure?

• Space runs on open source software. The U.S. Air Force is fine with that

• Twitter now concerned about 53TB of User Data lying with Elon Musk

• These five apps can wipe off all your Mobile Security worries

• Federal employee morale is falling, and one group thinks the Slow appointments process is to blame

• The future of SOCs: Automation where it matters

• Microsoft: Large-Scale AiTM Phishing Attacks Against 10K+Organizations

• How attackers abuse Quickbooks to send phone scam emails

• ERI Achieves Top ‘Quality of Work’ Ranking in Compliance Standards’ 2022 ITAD Vendor Reputation Ratings Survey

• CSC’s Research Uncovers Suspicious Domain Registration Surge Amid Baby Formula Supply Chain Crisis

• Booz Allen Launches $100M Venture Capital Fund

• C-Suite Leaders Taking Entirely New Approach to Costs, According to Accenture

• Businesses are adding more endpoints, but can’t manage them all

• What Is GitOps and How Will it Impact Digital Forensics?

• Conventional cybersecurity approaches are falling short

• Cybercriminals Impersonate as Cybersecurity Firms in Callback Phishing Campaigns

• Defense in Depth to minimize the impact of ransomware attacks

• Catalogic DPX 4.8.1 strengthens ransomware protection for customers

• PKI Spotlight updates help enterprises manage their PKI and HSM environments

• Data Expertise Is the Foundation of Good Threat Detection

• Kudelski IoT Secure IP increases hardware security for semiconductor manufacturers

• Codenotary Trustcenter offers an always up-to-date background scanning

• Bitdefender MDR Foundations provides threat monitoring for organizations with limited resources

• La Poste Mobile – 533,886 breached accounts

• The Department of Defense Should Disclose When it Purchases User Data

• The Importance of Cybersecurity Solutions for Your Business

• Juniper Networks infuses AI to pump up automation capabilities

• NIST promotes testbed to address threats targeting ML systems

• CIA Coder Convicted of Massive Leak of US Hacking Tools

• Seclore partners with TD SYNNEX to help organizations solve their data protection challenges

• Ben Goodman joins Contrast Security as SVP of Corporate Development and Strategic Alliances

• DataDome appoints Aurelie Guerrieri as CMO

• Sygnia hires Rafael Maman as VP of Operational Technology Security

• GoSecure appoints Jeff Schmidt as CTO

• Researchers Devise New Speculative Execution Attacks Against Some Intel, AMD CPUs

• CompTIA Linux+ certification exam validates the skills of technology professionals

• Kroll expands in Central Europe to address raising cyber risks in the region

• WithSecure creates a new unit to improve cyber resilience for enterprises

• Virtana names Amit Rathi as VP of Engineering

• PhishFirewall appoints Gregory Sims as COO

• GAO dings State Department’s IT workforce efforts

• EWarrant platform simplifies uploading data into background check systems

• State launches center of excellence for human services analytics

• IT Security News Daily Summary 2022-07-13

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• DDR: Comprehensive enterprise data security made easy

• Video games can change your brain for the better

• Report: Financial Institutions Overly Complacent About Current Authentication Methods

• CyberRatings.org Issues AAA Rating on Forcepoint’s Cloud Network Firewall

• Ransomware rolled through business defenses in Q2 2022

• 1.9m patient records exposed in healthcare debt collector ransomware attack

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Worldwide 2021 Email Phishing Statistics & Examples

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Understanding the current social engineering threat landscape

• Lenovo Patches UEFI Code Execution Vulnerability Affecting Many Laptops

• Advocates Say Facebook Is Failing To Protect LGBTQ Users

• Nearly Half of Enterprise Endpoints Present Significant Security Risks

• Mozilla: EU’s eIDAS Proposal Attracts Growing Criticism

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• The 3 Critical Elements You Need for Vulnerability Management Today

• MacOS Bug Could Let Malicious Code Break Out of Application Sandbox

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Retbleed: New Speculative Execution Attack Targets Intel, AMD Processors

• Ransomware attacks can and will shut you down

• This big phish can swim around MFA, says Microsoft Security

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Cybersecurity skills surpass cloud skills as this year’s training priority, if professionals can find the time

• 3 Golden Rules of Modern Third-Party Risk Management

• Internet Searches Reveal Surprisingly Prevalent Ransomware

• Hacker’s Corner: Complete Guide to Anti-Debugging in Linux – Part 2

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Qakbot operations continue to evolve to avoid detection

• Reshape Security and Embrace Cyber Resilience with Hillstone Networks

• Moving Beyond Budget Battles: The Real Secret to Improving National Cyber Defenses

• SCOTUS judges ‘doxxed’ after overturning Roe v Wade

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• DLL Hijacking Flaw Fixed in Microsoft Azure Site Recovery

• Microsoft Patches Windows Zero-Day as Attackers Exploit it in the Wild

• How To Avoid Getting Scammed Around Amazon Prime Day

• Why Pac-man Video Game Publisher Bandai Namco Suffers Ransomware Attack?

• The Importance of Up to Date Cybersecurity Solutions for Your Business

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• A Comprehensive Guide to Cloud Application Security Audits

• Microsoft Releases Open Source Toolkit for Generating SBOMs

• Researcher develops Hive ransomware decryption tool

• New Spectre-Type Retbleed Vulnerability Drops. Will Attackers Use It?

• Microsoft recognized as a Leader in UEM Software 2022 IDC MarketScape reports

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Mergers and acquisitions put zero trust to the ultimate test

• Facebook 2FA scammers return – this time in just 21 minutes

• Honda Key Fob Flaw Allows Hackers to Start Car Remotely

• Center for Cyber Safety and Education Begins Program Updates to Increase Impact

• How Web3 and IAM are changing the way we use the Internet

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Critical Industries Failing at IIoT/OT Security

• New ‘Retbleed’ Attack Can Swipe Key Data From Intel and AMD CPUs

• Text-based fraud: from 419 scams to vishing

• We don’t see any pullback in cybersecurity spend, says Guggenheim’s Bartlett

• Watch CNBC’s full interview with Guggenheim’s Robert Bartlett

• Uncovering a macOS App Sandbox escape vulnerability: A deep dive into CVE-2022-26706

• Cobalt Strikes again: UAC-0056 continues to target Ukraine in its latest campaign

• X.org servers update closes 2 security holes, adds neat component tweaks

• United States offers $5 million rewards for Information on Cyber Attacks launched by North Korea

• How Shady Code Commits Compromise the Security of the Open-Source Ecosystem

• Private 5G Network Security Expectations Part 3

• Nearly All UK Businesses Experience Security Incident – Barracuda

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• How Israel plans to tackle cyberattacks with a ‘Cyber-Dome’

• Still on Windows 7? Time is running out for your Microsoft 365 security updates

• Collaboration and knowledge sharing key to progress in cybersecurity

• Ransomware Activity Resurges in Q2

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Survey: Small Cybersecurity Teams Face Greater Risk from Attacks than Larger Enterprises

• Giving API Security the spotlight

• All Hands-on Deck: A Whole-of-Society Approach for Cybersecurity

• WhatsApp warns users: Fake versions of WhatsApp are trying to steal your personal info

• Luna Moth: Hackers After the Subscription Scam

• BT To Grow Digital Workforce In UK, India

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• 20 VPN subscriptions and bundles on sale now

• US Government and QuSecure Orchestrate First-Ever Post-Quantum Encryption Communication over a Government Network

• Microsoft: 10,000 Orgs Targeted in Phishing Attack That Bypasses Multifactor Authentication

• Three UEFI Firmware flaws found in tens of Lenovo Notebook models

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Can My Phone Be Tracked If Location Services Are Off?

• Why more orgs are embracing the alternative cloud

• Struggling with endpoint security? How to get it right

• How state and local leaders can use data to ensure broadband access for all

• Secure remote help can be powerful but may not be cheap

• New Research Reveals 93% of Organizations Surveyed Have Had Failed IIoT/OT Security Projects

• New ‘Retbleed’ Speculative Execution Attack Affects AMD and Intel CPUs

• Patch Tuesday July 2022 – Microsoft Releases Fixes for 80+ Known Issues, Including a Zero-Day Vulnerability

• Alphabet CEO Sundar Pichai Confirms Hiring Slowdown

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Nearly half of enterprise endpoint devices present significant security risks

• Blockchain Security Startup BlockSec Raises $8 Million

• Exostar Empowers SMBs with Enhanced, Low-Cost, Easy-to-Use Microsoft 365 and CMMC 2.0 Solutions

• Keep Humans in the Loop in SOC Operations

• Carpenter Should Replace Katz in Fourth Amendment Law

• Four Reasons why you Should Consider Contingency DDoS Protection

• Outpost24 acquired by Vitruvian Partners

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Still on Windows 7? Time is running out for your Microsoft 365 app security updates

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• SAP Patches High-Severity Vulnerabilities in Business One Product

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Update now—July Patch Tuesday patches include fix for exploited zero-day

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Microsoft warning: This phishing attack can skip your defenses and has hit 10,000 firms already

• Android security: How this new malware has become a top smartphone threat

• Large-Scale Phishing Campaign Bypasses MFA

• HavanaCrypt Ransomware Masquerades as a Fake Google Update

• QuickBooks Vishing Scam Targets Small Businesses

• New UEFI Firmware Vulnerabilities Impact Several Lenovo Notebook Models

• U.S. FTC Vows to Crack Down on illegal Use and Sharing of Citizens’ Sensitive Data

• How I Prepared for the CISSP Exam

• How CIOs Can Prepare for Increasing Cybersecurity Threats in 2022

• Apple Cuts Last Ties To Sir Jony Ive

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Honda Admits Hackers Could Unlock Car Doors, Start Engines

• Ukraine’s Cyber Agency Reports Q2 Cyber-Attack Surge

• Post-Roe Privacy

• Luna Moth Is a New Tool Used by Hackers to Break Into Organizations

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Why Threat Analysis Will Continue to Play a Vital Role in Security

• A Hit is made: Suspected India-based Sidewinder APT successfully cyber attacks Pakistan military focused targets

• DomainTools, Data, and Internet Safety

• New Callback Phishing Attacks Sees Hackers Impersonate Cybersecurity Firms

• Phishers steal Office 365 users’ session cookies to bypass MFA, commit payment fraud

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Microsoft Patch Tuesday: 86 flaws, four critical, one being used in attacks

• Microsoft Details How Phishing Campaign Bypassed MFA

• 5 Questions You Need to Ask About Your Firewall Security

• Microsoft Warns of Large-Scale AiTM Phishing Attacks Against Over 10,000 Organizations

• TikTok Postpones European Privacy Policy Update After Italy Warns of GDPR Breach

• Twitter Begins Legal Action Against Elon Musk

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• What Is Phishing?

• How to Set Up a VPN on an iPhone in 2022

• Don’t Stop Learning! Jeremy’s McAfee Journey

• Supreme Court justices doxxed on dark web

• Cyber Insurance Companies Are Looking for New Ways to Assess Risk, Report Finds

• June 2022 Cyber Attack Statistics

• Celsius ‘Deeply Insolvent’, US State Regulator Believes

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Researchers Uncover New Variants of the ChromeLoader Browser Hijacking Malware

• 9 Top Smart Pool Gadgets – Make The Pool Even More Fun

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Rise in ransomware drives IT leaders to implement data encryption

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Cyber Security Management System (CSMS) for the Automotive Industry

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• AWS Cloud WAN connects cloud and on-premises environments

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• BazarCall Ransomware warning to all insurance firms

• Hackers targeting victims with Amazon Prime Day scams

• Critical Fortinet Flaws Patched – Following Products Affected

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Researchers Uncover New Attempts by Qakbot Malware to Evade Detection

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Large-scale AiTM phishing campaign targeted +10,000 orgs since 2021

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Patches for new Retbleed AMD and Intel microprocessor vulnerability may have significant overhead

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Digital break-up kit: Raising tech abuse awareness

• Who are the best fraud fighters?

• Epoch Concepts Announces Epoch Axis, a New Zero-Trust-Based Remote Access Solution for Energy Companies

• Seclore Announces Partnership with Global IT Solutions Aggregator TD SYNNEX

• How to Create Successful CISSP and CCSP Study Groups

• How can SOC analysts use the cyber kill chain?

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Microsoft Releases Fix for Zero-Day Flaw in July 2022 Security Patch Rollout

• The weaponizing of smartphone location data on the battlefield

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• The enemy of vulnerability management? Unrealistic expectations

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Best practices for cyber resilience

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• The Great Cybersecurity Resignation

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Deloitte Zero Trust Access protects sensitive enterprise data

• Security Compass SD Elements 2022.2 delivers developer-centric approach to software threat modeling

• Flashpoint Automate accelerates repeatable security-related processes

• NETSCOUT launches AI solution to help customers block DDoS attacks

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• N-able N-sight RMM enables MSPs to manage and secure their small to medium enterprise customers

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Microsoft Patch Tuesday, July 2022 Edition

• IBM expands its Power10 server line to help clients modernize business apps and IT operations

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• VERT Threat Alert: July 2022 Patch Tuesday Analysis

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Gigamon collaborates with Sumo Logic to improve security and operational efficiency for enterprises

• D2iQ and Aqua Security join forces to secure smart cloud-native applications

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Thales acquires OneWelcome to strengthen its authentication and data privacy portfolio

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• PyPI Mandates 2FA, Plans Google Titan Key Giveaway

• Adobe Releases Security Updates for Multiple Products

• Privitar acquires Kormoon to extend its data privacy and provisioning capabilities

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Bad data and old tech hamper CDC’s ability track COVID exposures on flights

• State gathers data to map internet coverage, performance

• Solid collaboration tools essential to remote, hybrid work

• Fraud protection efforts target fake corporate identities online and offline

• Adobe Releases Security Updates for Multiple Products

• The President of European Central Bank Christine Lagarde targeted by hackers

• Michael Aiello joins Secureworks as CTO

• Microsoft’s July Patch Tuesday fixes actively exploited bug

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• 8 Million Dollars Stolen in a Uniswap Phishing Attack

• Privitar Announces Kormoon Acquisition, Extending Data Privacy and Provisioning Capabilities

• Microsoft Issues Fixes for 84 Vulnerabilities: Here’s What to Patch Now

• Core Security by HelpSystems Introduces New Ransomware Simulator

• Citrix Releases Security Updates for Hypervisor

• SAP Releases July 2022 Security Updates

• Microsoft Releases July 2022 Security Updates

• IT Security News Daily Summary 2022-07-12

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• CISA Adds One Known Exploited Vulnerability to Catalog 

• Citrix Releases Security Updates for Hypervisor

• SAP Releases July 2022 Security Updates

• Microsoft Releases July 2022 Security Updates

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Deadlines approach for billions in broadband funding

• Dispatch system streamlines delivery of addiction treatment meds

• CISA Adds One Known Exploited Vulnerability to Catalog 

• Congress Probes How Location Data Brokers Threaten Reproductive Privacy

• Rivian To Brief Staff About Restructuring, Potential Layoffs

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Understanding the Omdia Threat Detection Data Life Cycle

• Who Are The Hackers Who Started A Fire In Iran?

• See The First Full Color Images From The Webb Space Telescope

• Amazon Squashes Years-Old Authentication Bugs In AWS Kubernetes Service

• Victory! Another Court Protects the Right to Record Police

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Play it safe: 5 reasons not to download pirated games

• Apple Previews Lockdown Mode, A New Extreme Security Feature

• How to do Feature Selection Using Feature Contribution Data

• Microsoft fixes exploited zero-day in Windows CSRSS (CVE-2022-22047)

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Critical infrastructure IIoT/OT security projects suffer high rates of failure

• Cyber Insurers Looking for New Risk Assessment Models

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• State Department releases draft of $10 billion plan to upgrade diplomatic tech

• Amazon squashes years-old authentication bugs in AWS Kubernetes service

• WhatsApp Reactions Expanded To Allow Full Use Of Every Emoji

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Achieving incident response maturity is critical for effective threat management

• Microsoft Patch Tuesday: 84 Windows Vulns, Including Already-Exploited Zero-Day

• Aerojet Rocketdyne Pays $9m Settlement Over Whistleblower Allegations

• Don’t Have a COW: Containers on Windows and Other Container-Escape Research

• Microsoft Mitigates Azure Site Recovery Vulnerabilities

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• 5 Essential Steps for Every Ransomware Response Plan

• Why more orgs are moving away from the big 3 public cloud vendors

• 6 best Acronis integrations

• What is a VPN? A Beginner’s Guide to Virtual Private Networks

• SpaceX Starship Booster Rocket Bursts In Flames

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Federal contractor to pay $9M to resolve cyber-related false claims case

• European Central Bank Head Targeted in Hacking Attempt

• Ransomware Attacks on Education on the Rise

• How One Company Survived a Ransomware Attack Without Paying the Ransom

• One-Third of Users Without Security Awareness Training Click on Phishing URLs

• A Privacy Panic Flares Up in India After Police Pull Payment Data

• TAG Bulletin: Q2 2022

• Microsoft Cuts Staff But Insists Hiring Continues

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• 5 Traits That Differentiate CISOs From CIROs

• DevSecOps monitor and decommission

• Spirent Vantage Signals a New Era of 5G Network-Aware Service Assurance

• A guide to teaching cybersecurity skills to special needs students

• AT&T Cybersecurity Insights Report: A Focus on SLED

• All you need to know about data security and its benefits for small businesses

• Apple, Zoom Fined By Russia For Data Storage Violations – Report

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Check Point Software Technologies announces the integration of CloudGuard Network Security with AWS Cloud WAN Service

• Adobe Patch Tuesday: Critical Flaws in Acrobat, Reader, Photoshop

• Start Studying Security with SQLi

• Older AMD, Intel chips vulnerable to data-leaking ‘Retbleed’ Spectre variant

• Private Details of 1 Billion Chinese Citizens up for Sale on Dark Web

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Everything You Need to Know About SaaS Security Certification

• Acronis vs Backblaze: Backup service provider comparison

• From cookie theft to BEC: Attackers use AiTM phishing sites as entry point to further financial fraud

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• How security vulnerabilities pose risks for healthcare organizations

• ICS Patch Tuesday: Siemens, Schneider Electric Address 59 Vulnerabilities

• Flaws in the ExpressLRS Protocol allow the takeover of drones

• Infiltrate, Exploit, Manipulate: Why the Subversive Nature of Cyber Conflict Explains Both Its Strategic Promise and Its Limitations

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• AWS gets serious about API security, adds Salt Security to ISV Program

• The Complete Guide to Mandatory Access Control (MAC)

• MLOps Blog Series Part 4: Testing security of secure machine learning systems using MLOps

• Fake streamed cricket matches knocks victims for six

• Common API Security Risks and How to Mitigate Them

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Ransomware is hitting one sector particularly hard, and the impact is felt by everyone

• Reskilling heroes: Understanding the new opportunities for vets in America’s fast-growing cyber sector

• Can ‘Lockdown Mode’ Solve Apple’s Mercenary Spyware Problem?

• Deloitte Launches Zero Trust Access, a New Managed Security Service

• Social Engineering vs Mistakes: Two sources of pain, one process

• The International Law Sovereignty Debate and Development of International Norms on Peacetime Cyber Operations

• Concentric Eclipse helps individuals and teams mitigate digital risks

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• API Security Weekly: Issue 167

• Unified Endpoint Management and Security: Thriving in a Work-From-Anywhere World

• Last Call: CFP for ICS Cybersecurity Conference Closes July 15th

• ALPHV Ransomware Gang Creates Searchable Database With Victim Data

• How Confidential Computing Locks Down Data, Regardless of Its State

• Cyber-Attack On Iranian Steel Maker Causes Serious Fire

• What to Know Before Investing in a Startup: Things You Need to Consider

• PyPI starts rolling out required 2FA for important projects

• Severe Remote Code Execution Vulnerability Riddled OpenSSL

• Researcher Reveals How Hackers Can Remotely Unlock/Start Honda Cars

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Aerojet Rocketdyne to Pay $9M Over Allegations of Cybersecurity Violations

• Paying ransomware crooks won’t reduce your legal risk, warns regulator

• Lithuanian Energy Firm Disrupted by DDOS Attack

• Accessible Cybersecurity Awareness Training Reduces Your Risk of Cyberattack

• TikTok Postpones Privacy Policy Update in Europe After Italy Warns of GDPR Breach

• Crypto Scams Soar Despite Crash

• Out of Date Risk Assessment Intel is Damaging Company Security says Armis

• Insecure password leads to Mangatoon data breach

• Microsoft IIS Servers Targeted by SessionManager Backdoor

• Twitter Hits Back At Musk, Insisting No Breaches Occurred

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• How War Impacts Cyber Insurance

• Cybersecurity, data protection and inadequate IT budgets are top of mind for IT professionals

• Spike in Amazon Prime Scams Expected

• Ransomware Scourge Drives Price Hikes in Cyber Insurance

• Security Vulnerabilities in Honda’s Keyless Entry System

• The National Cyber Awards® Returns to London This September

• Microsoft 365 patches for Windows 7 to end in 2023

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• ‘Callback’ Phishing Campaign Impersonates Security Firms

• Majority Want Limitations on Social Media Content

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Microsoft Makes Windows Autopatch Generally Available

• How a VC Chooses Which Cybersecurity Startups to Fund in Challenging Times

• Avoiding Death by a Thousand Scripts: Using Automated Content Security Policies

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• June 2022’s Most Wanted Malware: New Banking, MaliBot, Poses Danger for Users of Mobile Banking

• UK Warns Lawyers Not to Advise Ransomware Payments

• French Telecoms Firm Hit by Ransomware Attack

• Hackers Are Able to Unlock Honda Vehicles Remotely

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Software developers have a supply chain security problem

• Life of a Hacker: What It Is Like to Be a Cybercriminal

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Rolling-PWN Attacks Allow Hackers to Unlock Honda Cars Remotely

• Hackers Steal $540 Million From Axie Infinity Using a Fake Job Offer on LinkedIn

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Microsoft announced the general availability of Windows Autopatch feature

• CEO of Multiple Fake Companies Charged in $1bn Counterfeit Scheme to Traffic Fake Cisco Devices

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Will Maintaining A Sustainable Strengthened Cyber Security Posture?

• What Do You Think Of NIST Implementing Zero Trust?

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• The Lazarus Heist Through Sky Glass Moment

• Marriott Hotels Repeat Hack Proves Businesses Still Way Behind On Cybersecurity

• Ransomware Hits Flood Monitoring System In Goa, India – Perspective From Industry Leaders

• Microsoft Rolling Back Default Security Initiative, Expert Weighs In

• Employees frustrated by the lack of suitable tech in a hybrid work environment

• Researchers defeat facial recognition systems with universal face mask

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Looking for adding new detection technologies in your security products?

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Cloud-Based Cryptocurrency mining attacks abuse GitHub Actions and Azure VM

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• UK Info Commissioner slams use of WhatsApp by health officials during pandemic

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Take the day off: Windows Autopatch is live and can even fix cloudy PCs

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Vulnerability Summary for the Week of July 4, 2022

• Microsoft Windows Autopatch is Now Generally Available for Enterprise Systems

• Microsoft stops Windows 10 and 11 updates in Russia

• Ransomware news trending on Google

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Vulnerability Summary for the Week of July 4, 2022

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Are your site’s tracking technologies breaking the law?

• Infosecurity Europe: A show so secure a train strike couldn’t break it!

• The three core strengths of USM Anywhere

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• How to develop successful incident response plans

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• A look at the bring your own browser (BYOB) approach

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Product showcase: ImmuniWeb Neuron, DAST with a zero false positives SLA

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Securing Kubernetes Secrets With HashiCorp Vault

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Smip’s AI-based platform protects social media accounts from hacking attempts

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• BlackCat Ransomware That Breached More Than 60 Organizations

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Best User and Entity Behavior Analytics (UEBA) Tools for 2022

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Morgan Stanley names its top stocks in a ‘safe haven’ tech sector — giving one upside of 60%

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Paladin Cloud Launches New Cloud Security and Governance Platform

• McAfee collaborates with Telstra to deliver identity and security solutions to customers across Australia

• Absolute and Ivanti join forces to help customers improve productivity

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Anomaly Detection at Scale Using SQL and Facebook’s Prophet Forecasting Algorithm

• BlockSec raises $8 million to expand its research and production team

• Ericsson partners with Thales and Qualcomm to deploy 5G networks into space

• San Francisco cops want real-time access to private security cameras for surveillance

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Fake Google Software Updates Spread New Ransomware

• ✨ Happy Birthday to EFF!

• State by State, We’re Making Progress Against Anti-Speech Lawsuits

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• ‘Luna Moth’ Group Ransoms Data Without the Ransomware

• ✨ Happy Birthday to EFF!

• IT Security News Daily Summary 2022-07-11

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Labor Department seeks leader for digital transformation

• CISA flags election system threats ahead of midterms

• Revamped UI interface streamlines processes for businesses, unemployed

• FBI, LA County target rogue drones upending firefighting efforts

• ✨ Happy Birthday to EFF!

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• White House updates acquisition, business of government priorities

• Meta Boosts User Privacy By Ending Facebook Login Requirement For Metaverse

• ✨ Happy Birthday to EFF!

• ZTNA – An Enterprise Game Changer For Securing Remote Access to IoT & BYOD

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Airport facial recognition is improving, DHS watchdog says

• Popular NFT Marketplace Phished for $540M

• Rethinking Vulnerability Management in a Heightened Threat Landscape

• Donald Trump’s Impeachment Lies to Congress

• ✨ Happy Birthday to EFF!

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• ✨ Happy Birthday to EFF!

• Post-quantum Cryptography Achieves Standardization Milestone

• Inside Windows Defender System Guard Runtime Monitor

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• ✨ Happy Birthday to EFF!

• How to Find Out If Someone’s Tracking Your Phone’s Location

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Why extended detection and response (XDR) is seeing enterprise growth

• New Highly-Evasive Linux Malware Infects All Running Processes

• ✨ Happy Birthday to EFF!

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• The January 6 Insurrection Hearings Are Just Heating Up

• ✨ Happy Birthday to EFF!

• The Top Five Reasons You Should Take Operational Technology Cybersecurity Seriously

• Not Slowing Down

• Advantage- Disadvantage Analysis for Implementing Cloud Services

• Defense contractor pays $9m to settle whistleblower’s cybersecurity allegations

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• Microsoft Confirms Temporary Rollback of Macro Blocking Feature

• Free Decryptors Released for AstraLocker Ransomware

• Online Payment Fraud Expected to Cost $343B Over Next 5 Years

• ✨ Happy Birthday to EFF!

• Beware!! LNK Worm – A Raspberry Robin Malware Attacking Windows Devices

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• How to use SSH tunnels to cross network boundaries

• Cloud-based Cryptocurrency Miners Targeting GitHub Actions and Azure VMs

• ✨ Happy Birthday to EFF!

• 🚀 Launching Autonomous SecOps (Your Virtual, Algorithm-Driven Tier 1 SOC Team)

• CEO of Dozens of Companies Charged in Scheme to Traffic An Estimated $1bn in Fake Cisco Devices

• ✨ Happy Birthday to EFF!

• Maastricht University Retrieves Ransom Amount Paid in 2019

• 5 Common blind spots that make you vulnerable to supply chain attacks

• ✨ Happy Birthday to EFF!

• France Virtual Mobile Operator La Poste Mobile targeted by ransomware attack

• Deloitte launches a new zero-trust access managed service

• Python programming: PyPl is rolling out 2FA for critical projects, giving away 4,000 security keys

• HavanaCrypt ransomware sails in as a fake Google update

• BlackCat Ransomware Increases Demands Up to $2.5m

• ✨ Happy Birthday to EFF!

• Introducing security for unmanaged devices in the Enterprise network with Microsoft Defender for IoT

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Hacker’s Corner: Complete Guide to Anti-Debugging in Linux – Part 1

• PyPI Repository Enforces 2FA for Critical Python Projects

• Omdia: Sustainability Ranks Top on Data Center Operators’ Agendas Despite Cost and Reliability Barriers

• Supreme Court Embraces Broad Congressional War Powers in Torres

• Getting Transparency Right

• Security Culture: fear of cyber warfare driving initiatives

• ✨ Happy Birthday to EFF!

• Install macOS Betas on Your Mac in a New APFS Volume

• Diabetes patients flood FDA with comments on cybersecurity for medical devices

• A fake job offer via LinkedIn allowed to steal $540M from Axie Infinity

• ✨ Happy Birthday to EFF!

• PC Shipments Worldwide Drop 15.3 Percent In Q2, IDC Warns

• McAfee and Telstra Partner to Bring Privacy, Identity and Security to Australian Customers

• Ransomware is still cybersecurity’s biggest challenge

• How to opt out of T-Mobile’s creepy ad tracking campaign

• Proposed SEC Rules Require More Transparency About Cyber-Risk

• Microsoft Pauses Once Touted Macro Security Change

• Hackers Say They Can Unlock And Start Honda Cars Remotely

• ✨ Happy Birthday to EFF!

• One Year After the Colonial Pipeline Attack, Regulation Is Still a Problem

• Apple to tackle the cybersurveillance industry with new Lockdown mode

• That didn’t last! Microsoft turns off the Office security it just turned on

• New Phishing Attacks Shame, Scare Victims into Surrendering Twitter, Discord Credentials

• Diversity in Cybersecurity: Fostering Gender-Inclusive Teams That Perform Better

• ✨ Happy Birthday to EFF!

• Businesses Hit By The Ransomware 0mega

• SwifDoo PDF: How to Compress PDF Files on Windows

• STMicro, GlobalFoundries Plan New French Chip Factory

• File Integrity Monitoring (FIM): Your Friendly Network Detective Control

• Associated Eye Care Discloses Impact From 2020 Netgain Ransomware Attack

• EDF Under Scrutiny Over Cybersecurity Record

• How Honeypots Help IT Teams Defend against Cyber Attacks

• ✨ Happy Birthday to EFF!

• 5 Differences between Human Intelligence and Artificial Intelligence

• Twitter Board Vows To Pursue Musk, Who Mocks Legal Threat

• Brazen crooks are now posing as cybersecurity companies to trick you into installing malware

• US military contractor moves to buy Israeli spy-tech company NSO Group

• The History and Evolution of Zero Trust

• How end-to-end encryption supports secure team collaboration

• Online Payment Fraud to Top $343bn Over Next Five Years

• Companies Are Targeted in Double-Extortion Attacks Launched by 0mega Ransomware

• ✨ Happy Birthday to EFF!

• Google Cloud: When it comes to cyber risks, we’re all in it together

• ‘Raspberry Robin’ Windows Worm Abuses QNAP Devices

• Ransomware attacks can and will shut you down

• ✨ Happy Birthday to EFF!

• CEO Accused of Making Millions via Sale of Fake Cisco Devices

• What It Takes to Tackle Your SaaS Security

• Nigerian Prison Break

• UK Law Society Members Urged to Stop Advising Clients to Pay Ransomware Demands

• ✨ Happy Birthday to EFF!

• CISSP Recognized as Top Cybersecurity Certification

• Vulnerability in Honda Cars Let Hackers Unlock & Start Remotely

• Hackers Used Fake Job Offer on LinkedIn to Target Axie Infinity

• ✨ Happy Birthday to EFF!

• Disney’s Instagram and Facebook accounts were hacked

• Russian ‘Hacktivists’ Are Causing Trouble Far Beyond Ukraine

• Anubis Networks is back with new C2 server

• Disneyland Social Media Hacked

• Mangatoon Sufferes Major Data Breach

• ✨ Happy Birthday to EFF!

• A week in security (July 4 – July 10)

• Cyber Attack news headlines trending on Google

• China Mind-Reading AI Tech can detect political deflectors early

• ✨ Happy Birthday to EFF!

• Ransomware Attack Hits French Telecoms Firm

• BlackCat (aka ALPHV) ransomware is increasing stakes up to $2.5 million in demands

• Linode + Kali Linux: Added security for cloud instances

• 16-30 June 2022 Cyber Attacks Timeline

• ✨ Happy Birthday to EFF!

• Europe threatens to ban Facebook over data transfers to the US

• Man Charged With Selling Fake Cisco Equipment

• Google Offers To Spin-Off Ad-Tech Unit – Report

• Avast Pride 2022

• BlackCat (aka ALPHV) Ransomware is Increasing Stakes up to $2,5M in Demands

• ✨ Happy Birthday to EFF!

• Microsoft appears to be rolling back Office Macro blocking

• Riskonnect acquires Castellan to deliver more risk and compliance offerings to customers

• ✨ Happy Birthday to EFF!

• Tech support scammers caught by their own cameras

• 11:11 Systems acquires Static1 to strengthen its existing managed services

• ✨ Happy Birthday to EFF!

• Experts warn of the new 0mega ransomware operation

• Text-based fraud: from 419 scams to vishing

• ✨ Happy Birthday to EFF!

• Software developers, how secure is your software ?

• Elon Musk Tells Twitter He Is ‘Terminating’ $44Bn Acquisition

• ✨ Happy Birthday to EFF!

• Hackers Used Fake Job Offer to Hack and Steal $540 Million from Axie Infinity

• ✨ Happy Birthday to EFF!

• Private 5G Network Security Expectations Part 3

• Experian, You Have Some Explaining to Do

• ✨ Happy Birthday to EFF!

• ✨ Happy Birthday to EFF!

• PyPI Repository Makes 2FA Security Mandatory for Critical Python Projects

• ✨ Happy Birthday to EFF!

• UK response to China’s tech ambitions labelled ‘incoherent and muted’

• The impact of DNS attacks on global organizations

• Dealing with threats and preventing sensitive data loss

• ✨ Happy Birthday to EFF!

• 7 steps to switch your organization to a zero trust architecture

• ✨ Happy Birthday to EFF!

• Defending Aircraft Networks Against Cybersecurity Breaches

• PCI DSS 4.0 changes help organizations protect payment card data

• Nearly all governmental websites serve cookies or third-party trackers

• ✨ Happy Birthday to EFF!

• Using DevSecOps for Efficient IT Security

• ✨ Happy Birthday to EFF!

• ✨ Happy Birthday to EFF!

• ✨ Happy Birthday to EFF!

• How Technology Can Help Your Business Succeed

• ✨ Happy Birthday to EFF!

• ✨ Happy Birthday to EFF!

• ✨ Happy Birthday to EFF!

• ✨ Happy Birthday to EFF!

• ✨ Happy Birthday to EFF!

• ✨ Happy Birthday to EFF!

• 4 ways businesses can save money on cyber insurance

• ✨ Happy Birthday to EFF!

• ✨ Happy Birthday to EFF!

• North Korean APT targets US healthcare sector with Maui ransomware

• IT Security News Weekly Summary – Week 27

• IT Security News Daily Summary 2022-07-10

• ✨ Happy Birthday to EFF!

• How the FBI quietly added itself to criminals’ instant message conversations

• ✨ Happy Birthday to EFF!

• ✨ Happy Birthday to EFF!

• Microsoft Defender for Endpoint Launches Mobile Network Protection

• Google Patched One More Chrome Zero-Day Bug Under Attack

• ✨ Happy Birthday to EFF!

• ✨ Happy Birthday to EFF!

• ✨ Happy Birthday to EFF!

• Hackers Used Fake LinkedIn Job Offer to Steal $625M

• Understanding JWT

• Experts demonstrate how to unlock several Honda models via Rolling-PWN attack

• ✨ Happy Birthday to EFF!

• ✨ Happy Birthday to EFF!

• Disneyland’s Official Handles Hacked to Take Revenge

• ✨ Happy Birthday to EFF!

• ✨ Happy Birthday to EFF!

• How data on a billion people may have leaked from a Chinese police dashboard

• Madera County Teams with ERI and Redrock Environmental Group to Offer Free E-Waste Recycling Event

• French telephone operator La Poste Mobile suffered a ransomware attack

• Callback Malware Campaign Imitates CrowdStrike and Other Big Cybersecurity Organizations

Generated on 2022-07-17 23:59:44.734539