IT Security News Weekly Summary – Week 29

• IT Security News Daily Summary 2022-07-24

• Most Important Security Tools For Security Researchers & Malware Analyst

• Hacker Offers 5.4 million Twitter Account Details for $30,000

• (ISC)² Pledges 1 Million Certified in Cybersecurity

• Microsoft Hit by Huge Service Outage

• T-Mobile Agrees to Pay $350M to Users in Data Breach Settlement

• Secure Your Web Apps With an API Gateway

• History Repeats Itself

• The United States Learned From Iraq and Afghanistan. Russia Didn’t.

• SonicWall: Patch Critical SQL Injection Flaw Immediately

• Is APT28 behind the STIFF#BIZON attacks attributed to North Korea-linked APT37?

• How to Safely Lend Someone Else Your Phone

• Security Affairs newsletter Round 375 by Pierluigi Paganini

• Week in review: The future of Metasploit, detecting lateral movement, new issue of (IN)SECURE Magazine

• A database containing data of 5.4 million Twitter accounts available for sale

• Penetration testing

• Cloud Computing Penetration Testing Checklist & Important Considerations

• Siemens Energy Takes Next Step to Protect Critical Infrastructure

• MPC: The Digital Commerce Event to Host Atlanta Conference Aug. 22 to 24

• CISSP Recognized as Top Cybersecurity Certification

• Securing Your Cloud with Zero Trust and Least Privilege

• CommScope partners with Microsoft to help transform industrial manufacturing

• Axonius announces integration with AWS to help customers strengthen their security posture

• IT Security News Daily Summary 2022-07-23

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• FBI seized $500,000 worth of bitcoin obtained from Maui ransomware attacks

• Are We Shifting Left Enough

• Threats Against Critical Infrastructure Are Looming, Agencies Must Safely Modernize OT Systems

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• ESXi , Linux, and Windows Systems at Risk From New Luna Ransomware

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Hacked Ukrainian Radio Stations Propagates Misinformation Regarding President Zelensky’s Health

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Acrisure Acquires Leading MSPs to Expand Cyber Services Offering

• Jenne Cloud Services Brokerage Partners with Playvox and Expands Market Reach

• #ISC2Congress: Politics, Cybersecurity & Global Issues – Ian Bremmer to Speak as (ISC)² Keynote

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Spyware Maker Candiru Associated to Chrome Zero-day Targeting Journalists

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Here are the top phone security threats in 2022 and how to avoid them

• Experts Raise Concerns About Facebook Gathering Data From Mental Health Care Apps

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• The January 6 Secret Service Text Scandal Turns Criminal

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Turning Open Reporting Into Detections

• Google Chrome 0-Day Vulnerability Exploited in The Wild To Deploy Spyware

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Digital Marketing Strategies To Improve Your Furniture Store Sales

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Build or Buy your own antivirus product

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• What Is Malvertising and How Do You Avoid It?

• What is ATM Skimming?

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• SonicWall fixed critical SQLi in Analytics and GMS products

• How Long Does it Take to Train Entry-Level Cybersecurity Team Members?

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Verimatrix and Harmonic Partner to Enable Streaming Content Protection at SaaS Speed

• Sourcepass Adds Two More Companies to Its Expanding Portfolio of Solutions

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Dynatrace enhances its analytics capabilities for modern multicloud environments

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Office macro security: on-again-off-again feature now BACK ON AGAIN!

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Siemens Energy joins AWS Partner Network to provide customers with industrial cybersecurity solutions

• T-Mobile collaborates with Apple to simplify IT management for small businesses

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• My Big Coin founder is – you guessed it – a $6m crypto-fraudster

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Understanding Proposed SEC Rules Through an ESG Lens

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Americans Deserve More Than The Current American Data Privacy Protection Act

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• ICYMI: Neopets & the Gaming Problem; SolarWinds Hackers Are Back; Google Ads Abused

• Microsoft closes off two avenues of attack: Office macros, RDP brute-forcing

• IT Security News Daily Summary 2022-07-22

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• TSA revises cyber rules for pipelines

• Surveillance is pervasive: Yes, you are being watched, even if no one is looking for you

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Don’t dive head first into that crypto pool, FBI warns

• SonicWall Warns of Critical GMS SQL Injection Vulnerability

• SonicWall Issues Patch for Critical Bug Affecting its Analytics and GMS Products

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• ‘Digital human’ teaches how to walk to protect your knees

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Critical Bugs Threaten to Crack Atlassian Confluence Workspaces Wide Open

• RememBear password manager is shutting down in July 2023

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• insider threat

• Strict China Tech Controls ‘To Continue’ After Record Didi Fine

• Neopets Suffers Second Data Breach as 69 Million Accounts are Stolen

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• How to gain an unfair advantage over cyberattackers: “Mission control” cybersecurity

• Scalahosting deal: Get an extra 10% off website and VPS hosting

• Account lockout policy in Windows 11 is enabled by default to block block brute force attacks

• Neopets Suffers Second Data Breach as 69 million Accounts are Stolen

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Top 10 enterprise data security best practices

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• macOS malware: myth vs. reality – Week in security with Tony Anscombe

• Malware-as-a-Service Creating New Cybercrime Ecosystem

• Google Chrome Zero-Day Weaponized to Spy on Journalists

• ICJ Asserts Jurisdiction in Myanmar Genocide Case

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• As companies calculate cyber risk, the right data makes a big difference

• Edge Management and Orchestration Firm Zededa Raises $26 Million

• New Default Account Lockout Policy in Windows 11 Blocks Brute Force Attacks

• Intezer Documents Powerful ‘Lightning Framework’ Linux Malware

• Chrome Flaw Exploited by Israeli Spyware Firm Also Impacts Edge, Safari

• Police Are Still Abusing Investigative Exemptions to Shield Surveillance Tech, While Others Move Towards Transparency

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• VA touts improvements but warns of challenges for digital GI Bill platform

• Snowballing Ransomware Variants Highlight Growing Threat to VMware ESXi Environments

• Microsoft Adds Default Account Lockout Policy in Windows 11 to Block RDP Brute-Force Attacks

• CyberArk Named a Leader in 2022 Gartner Magic Quadrant for Privileged Access Management

• Booz Allen Authorized by the Cyber AB as a Third-Party Assessment Organization

• Latest Cyberthreats and Advisories – July 21, 2022

• LinkedIn Remains Number One Brand to be Faked in Phishing Attempts

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• From in-crowds to power couples, network science uncovers the hidden structure of community dynamics

• Thales Expands Cybersecurity Portfolio With OneWelcome Acquisition

• Phishing Bonanza: Social Engineering Savvy Skyrockets as Malicious Actors Cash In

• US Spots Another 20 Malware Strains Targeting Ukraine

• Jan. 6 Committee Lays Out How Trump Let Capitol Riot Rage For Three Hours While He Watched Fox

• Elon Musk’s Tesla Sells Most Of Its Bitcoin Holdings

• Didi Slapped With $1.1B Fine For Breaching China Data Security Laws

• Check Out These New Details on the Costa Rica Government Attack by Conti Ransomware

• Cyber Attack on Ukraine Radio station spreads misinformation about Zelensky’s death

• Israeli Spyware Vendor Uses Chrome 0day to Target Journalists

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Atlassian Releases Security Advisory for Questions for Confluence App, CVE-2022-26138

• Cisco Releases Security Updates for Multiple Products

• Apple Releases Security Updates for Multiple Products

• Chinese Group Botnet Illegally Mine Crypto

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Confidential computing: A quarantine for the digital age

• State explores drone skyway

• Google Brings Back Android App Permissions Section to the Play Store

• Atlassian Releases Security Advisory for Questions for Confluence App, CVE-2022-26138

• Cisco Releases Security Updates for Multiple Products

• Apple Releases Security Updates for Multiple Products

• Flood the Zone With Cheap Drones

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• The M140i project post – Part 16

• The Complete Guide to Lead Generation For Design Agencies

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• The biggest cyber-crime threat is also the one that nobody wants to talk about

• I hate Windows 11. How can I make it work more like Windows 10? [Ask ZDNet]

• Symmetric vs. asymmetric encryption: What’s the difference?

• Hacked Ukrainian Radio Stations Broadcast Fake News About President Zelensky’s Health

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• What Firewalls Can — and Can’t — Accomplish

• Cybersecurity, the ECPA, Carpenter, and Government Transparency

• Check Out these New Details on the Costa Rica Government Attack by Conti Ransomware

• Latest Cyberthreats and Advisories – July 21, 2022

• Microsoft Closing Down Job Openings – Report

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• CISA chief calls for continuous global collaborations to combat cyberthreats

• UK Blocks China Licensing Sensor Tech From Manchester University

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Microsoft Resumes Blocking Office VBA Macros by Default After ‘Temporary Pause’

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Windows 11 is getting a new security setting to block ransomware attacks

• Google Chrome security update fixes ‘high risk’ flaws

• Microsoft Resumes Rollout of Macro Blocking Feature

• Code Execution and Other Vulnerabilities Patched in Drupal

• New Cross-Platform ‘Luna’ Ransomware Only Offered to Russian Affiliates

• A Unique Cybersecurity Career Path: From Journalism to Cisco

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Meta Revamps Facebook Content Feed

• Hackers Attack Windows, Linux & ESXi Systems Using Rust-Based Malware

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• The Unsolved Mystery Attack on Internet Cables in Paris

• Hackers breached Ukrainian radio station to spread fake news about Zelensky ‘s health

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• CyberResiliency and End-user Performance

• New Redeemer Ransomware Design Spotted on Hacker Forums

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Evaluating a Managed Detection and Response Provider

• CyberResiliencyand End-user Performance

• An Easier Way to Keep Old Python Code Healthy and Secure

• Google Bringing the Android App Permissions Section Back to the Play Store

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Global Firms Fear the Worst Over Risk Management Failures

• At the edge, nobody can hear your IoT devices scream …

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• PayPal Used to Send Malicious “Double Spear” Invoices

• Candiru Spyware Caught Exploiting Google Chrome Zero-Day to Target Journalists

• Ukrainian Radio Stations Hacked to Broadcast Fake News About Zelenskyy’s Health

• Lack of staff and resources drives smaller teams to outsource security

• USA’s plan to build its cyber workforce, improve skills-based pathways to cyber jobs

• How to Edit WooCommerce Shop Page With Elementor?

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Weekly Update 305

• Candiru surveillance spyware DevilsTongue exploited Chrome Zero-Day to target journalists

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Mixed Messages as Neopets Scrambles to Respond to Mega Breach

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• British intelligence recycles old argument for borking encryption: think of the children!

• China Fines Didi Global $1.19billion for Data Security Infringements

• Three Charged in First Crypto Insider-Trading Case

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• How to identify and combat online fraud

• How kitemarks are kicking off IoT regulation

• New infosec products of the week: July 22, 2022

• Apple iPhone has over 36 vulnerabilities

• Vulnerability in MiCODUS MV720 allows hackers to gain access to GPS Trackers in millions of vehicles

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• 9 Ways to Determine If Your Identity Has Been Stolen

• Kicking off my Second Career: Gayatri’s McAfee Journey

• Sextortion: What Your Kids Need to Know

• TA4563 group leverages EvilNum malware to target European financial and investment entities

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• GuidePoint Research and Intelligence Team (GRIT) Releases New Ransomware Trends Report

• Latest Cyberthreats and Advisories – July 15, 2022

• Security risks with using Free Step Tracking apps

• How startup culture is creating a dangerous security gap in new companies

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• A new bipartisan bill aims to reform the presidential transition process

• DataDome CAPTCHA offers protection against bots and online fraud

• WithSecure Detectree increases visibility on suspicious activities

• Kovrr Cyber-Sphere streamlines cyber risk quantification processes

• Visibility into runtime threats against mobile apps and APIs still lacking

• Detectree: Open-source tool simplifies data analysis for blue teams, reduces alert fatigue

• Russia, Iran discuss tech manufacturing, infosec and e-governance collaboration

• Cisco Nexus Dashboard Flaw Let Remote Attacker Execute Arbitrary Commands

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Russia, Iran, discuss tech manufacturing, infosec and e-governance collaboration

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Keysight Open Radio Access Network Architect addresses critical validation requirements

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• ZEDEDA raises $26 million to accelerate research and development

• Anvilogic raises $25 million to modernize security operations

• Acrisure acquires Catalyst Technology Group and ITS to expand its cyber services offering

• Senet collaborates with Iota Communications to deliver wireless networks for smart infrastructure sensors

• New Amendments to Intermediary Rules threaten Free Speech in India

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• NCC Group observes a drop in ransomware attacks — for now

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Ex-Coinbase manager charged in first-ever crypto insider trading case

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• A deep dive into Capital One’s cloud and data strategy wins

• IT Security News Daily Summary 2022-07-21

• Critical Vulnerability in Popular GPS Tracker Lets Hackers Remotely Control Vehicles

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• CrowdStrike’s Adversary Universe World Tour: Coming to a City Near You!

• Think It, Build It, Secure It — CrowdStrike at AWS re:Inforce 2022

• US Cyber Command spots another 20 malware strains targeting Ukraine

• Mysterious, Cloud-Enabled macOS Spyware Blows Onto the Scene

• Threat actors target software firm in Ukraine using GoMet backdoor

• A Hacker Is Trying To Sell Data On 69 Million Neopots Users

• Hackers For Hire: Adversaries Employ Cyber Mercenaries

• National Data Privacy Law Draws Mixed Reactions

• Authentication Weakness Responsible For 80% Of Financial Breaches

• Atlassian Reveals Critical Flaws In Almost Everything It Makes And Touches

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Apple Settles $50m Butterfly Keyboard Lawsuit

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• How to create an effective incident report

• CNMF Discloses Malware in Ukraine

• Drupal Releases Security Update 

• Google Releases Security Updates for Chrome

• 3 Ways Hackers Are Causing Disruption for Businesses in 2022

• Microsoft Office Most Exploited Software in Malware Attacks – Report

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Senators look to thwart future quantum hacks

• Romanian Operator of Bulletproof Hosting Service Extradited to the US

• Understanding the Evolution of Cybercrime to Predict its Future

• Equitable Digital Identity Verification Requires Moving Past Flawed Legacy Systems

• The Password Is Dying. It’s Time for A DNR.

• Analysing the true threat of Log4j

• The Wren Eleanor story: Why you should keep your kids’ images off social media

• Neopets Hacked, 69 Million Accounts Potentially Breached

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Google Becomes First Cloud Operator to Join Healthcare ISAC

• CNMF Discloses Malware in Ukraine

• Drupal Releases Security Update 

• Google Releases Security Updates for Chrome

• Lightning Framework, a previously undetected malware that targets Linux systems

• The winding road to compliance

• The Wren Eleanor story: Why you should keep your kids off social media

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Leveling the field for federal cyber talent

• Citizen scientists, Latino residents to track air quality in East Las Vegas

• S3 Ep92: Log4Shell4Ever, travel tips, and scamminess [Audio + Text]

• Minecraft DOWN: Server Status Update, As Fans Hit With Authentication Issues

• GPS Vulnerabilities Could Allow Attackers To Disrupt Vehicle Movements

• Amazon Begins Deliveries With Rivian Electric Vans

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• API Security Weekly: Issue 170

• Raytheon highlights its role in cybersecurity

• Massive Losses Define Epidemic of ‘Pig Butchering’

• Magecart Card Skimmers Hitting Restaurant-Ordering Systems – Expert Comments

• Thailand Admits To Using Phone Spyware, Cites National Security

• 8220 Cryptomining Gang Targets Linux and Cloud Apps to Expand Cloud Botnet

• CSI Increases Cash Dividend 7.4% to $0.29 Per Share

• Deploying a Modern Bank Card Program: Part Two

• VMware Furthers Commitment to Public Sector, Achieves Expanded FedRAMP High Authorization

• How Web3 and IAM are changing the way we use the Internet

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Inside dark web marketplaces: Amateur cybercriminals collaborate with professional syndicates

• The Biden administration wants to standardize how the U.S. conducts cyber operations

• Cities and towns embrace ‘summer Fridays’ for their workers

• The Market Is Teeming: Bargains on Dark Web Give Novice Cybercriminals a Quick Start

• China Fines Didi More Than $1 Billion For Breaking Data Security Laws

• Bots Hide Behind User Privacy – Should You Be Concerned?

• NetSecurity ThreatResponder Platform protects corporate assets against cyber attacks

• Microsoft adds default protection against RDP brute-force attacks

• The Winding Road to Compliance

• China Didi slapped with $1.2 billion penalty for fraudulent user data collection

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Time to update all of your Apple gadgets ASAP

• Didi slapped with $1.1B fine for breaching China data security laws

• Atlassian Patches Servlet Filter Vulnerabilities Impacting Multiple Products

• USCYBERCOM Releases IoCs for Malware Targeting Ukraine

• Anvilogic Scores $25 Million Series B to Tackle SOC Modernization

• China Fines Didi Global $1.19bn for “Heinous” Data Security Infringements

• Google Drive & Dropbox Targeted by Russian Hackers

• China’s Baidu Unveils Autonomous Taxi With No Steering Wheel

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Meet the Future of Work With Confidence

• Apple patches “0-day” browser bug fixed 2 weeks ago in Chrome, Edge

• Oracle Releases July 2022 Critical Patch Update

• New Linux Malware Framework Lets Attackers Install Rootkit on Targeted Systems

• Alibaba OSS Buckets Compromised to Distribute Malicious Shell Scripts via Steganography

• Samsung Seeks Tax Breaks On Future Chip Factories In Texas

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• 20 Years Ago in Cybersecurity: Massive DDoS Attack Hits the Roots of the Internet

• Sales of citizen data worries lawmakers and experts alike

• How to create a data security policy, with template

• US Government Launches Campaign to Boost Cybersecurity Apprenticeships

• The 2022 US Midterm Elections’ Top Security Issue: Death Threats

• Is It Possible to Reconcile Encryption and Child Safety?

• The Bipartisan House Privacy Bill Would Surpass State Protections

• The Chatter Podcast: Spies and Art Forgers with Daniel Silva

• Salt Security Platform Enhancements Make it Easier to Operationalise API Security

• Personal data of 69 million Neopets users exposed

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Election officials want to tell the public ‘where the good guys won’ in cyber efforts

• Time to update all your Apple gadgets ASAP

• The Kronos Ransomware Attack: What You Need to Know So Your Business Isn’t Next

• Oracle Releases July 2022 Critical Patch Update

• Atlassian patched a critical Confluence vulnerability

• Critical Vulnerabilities in GPS Trackers

• How to Choose a Perfect Student Laptop?

• Simplifying backup and recovery management

• US Investigates Huawei Equipment Near Missile Silos, Military Bases

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• The New Weak Link in SaaS Security: Devices

• Hackers Use Evilnum Malware to Target Cryptocurrency and Commodities Platforms

• Hackers Target Ukrainian Software Company Using GoMet Backdoor

• The rise and continuing popularity of LinkedIn-themed phishing

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Hackers for Hire: Adversaries Employ ‘Cyber Mercenaries’

• Cisco Patches Severe Vulnerabilities in Nexus Dashboard

• Hundreds of ICS Vulnerabilities Disclosed in First Half of 2022

• Exploitation of Recent Chrome Zero-Day Linked to Israeli Spyware Company

• Researchers Discover SATA Cables Could Leak Data From Air-Gapped Systems

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Forrester has a compelling vision for the future of endpoint management

• Tripwire Patch Priority Index for June 2022

• Congress Might Pass an Actually Good Privacy Bill

• Neopets Data Breach Exposes Personal Data Of 69 Million Members

• DataDome looks to CAPTCHA the moment with test of humanity that doesn’t hurt

• Beware!! Several Apps on Play Store Delivering Joker, Facestealer & Coper Malware

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Coalfire’s analysis on the 2022 software supply chain

• Tesla Sells 75 Percent Of Bitcoin Holdings

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Machine Identity Management Firm AppViewX Raises $20 Million

• Atlassian fixes critical flaws in Confluence, Jira, Bitbucket and other products, update quickly!

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Turn Security into Innovation with Check Point at AWS re:Inforce

• Cynomi Automated Virtual CISO (vCISO) Platform for Service Providers

• FBI Seizes $500,000 Ransomware Payments and Crypto from North Korean Hackers

• Atlassian Rolls Out Security Patch for Critical Confluence Vulnerability

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Russian Adversaries Target Google Drive and DropBox in Latest Campaign

• What does software supply chain pain really feel like? Find out right here

• Outlook email users alerted to suspicious activity from Microsoft-owned IP address

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Ransomware attacks drop 34% in Q2 but experts warn of potential ‘uptick’

• Anvilogic’s Threat Detection, Investigation and Response platform raises $25M

• SynSaber: Only 41% of ICS vulnerabilities require attention

• Ransomware Compromises Slump 34% in Q2

• Hacker Selling Data of Over 69 Million Neopets Members

• 1-15 July 2022 Cyber Attacks Timeline

• Vulnerabilities in GPS tracker could have “life-threatening” implications

• Researchers Discover Malware Actively Targeting Digium VoIP Phones

• This Malicious Campaign Targets ICS Systems With Password-Cracking Tools To Create Botnets

• Blitz.js Framework Vulnerability Could Allow Remote Code Execution

• Threat-landscape of Financial attacks

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Banks have opportunity to plug digital identity gap in metaverse

• Apple fixes multiple flaws in iOS, iPadOS, macOS, tvOS, and watchOS devices

• FBI Seizes $500,000 in Ransomware Payments from North Korean Hackers

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Magecart Supply Chain Attacks Hit Hundreds of Restaurants

• APAC Security Leaders Come Together at SECURE Singapore

• Apple’s New M2 MacBook Air – Intego Mac Podcast Episode 249

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• UK Regulator Issues Record Fines as Financial Crime Surges

• Apple Releases Security Patches for all Devices Fixing Dozens of New Vulnerabilities

• 8220 Gang Cloud Botnet infected 30,000 host globally

• CloudMensis backdoor spies on users of compromised Macs

• Companies around the globe still not implementing MFA

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Patching: Why it’s important for businesses

• Do you know what your supply chain is and if it is secure?

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Silicon UK In Focus Podcast: The Connected Customer

• Lightning Framework: New Undetected “Swiss Army Knife” Linux Malware ⚡

• Cisco Releases Patches for Critical Flaws Impacting Nexus Dashboard for Data Centers

• The importance of secure passwords can’t be emphasized enough

• How organizations can implement a complete data strategy

• Black Basta Ransomware targets Knauf Germany

• Data Breach exposes information related to 69 million members of Neopets

• Impact Podcast with John Shegerian Features Pradeep Shenoy from Texas Instruments

• Atlanta-based Aware Force reports on the most dangerous phishing e-mails and texts sent in Q2

• How can SOC analysts use the cyber kill chain?

• The House has cleared the way for Biden’s 4.6% pay raise plan

• Druva’s cyber attack readiness capabilities accelerate incident response

• Calamu Protect 1.2 offers protection against data theft and extortion

• Perception Point Advanced Browser Security detects web browser threats

• 60% of IT leaders are not confident about their secure cloud access

• Introducing the book: Managing the Dynamic Nature of Cyber Security

• Cybersecurity Policy – time to think outside the box?

• EnGenius security gateway helps IT teams protect business networks

• SecureKloud DataEdge enables enterprises to speed up their data-driven digital transformation

• Atlassian reveals critical flaws in almost everything it makes and touches

• Letter to the United Nations on Inclusive Civil Society Participation

• Google: Kremlin-backed goons spread Android malware disguised as pro-Ukraine app

• Päivi Rekonen joins Wipro Board of Directors

• DirectDefense names Richard Tillery as MSSP Director

• Dragos and Emerson expand partnership to enhance threat detection for process industries

• BlackBerry collaborates with LeapXpert to provide customers with secure communication

• Arkose Labs and Ping Identity join forces to prevent advanced account-based fraud attacks

• Suspected Gozi malware gang ‘CIO’ extradited to US on fraud, hacking charges

• DDoS App Meant to Hit Russia Infected Android Phones of Ukrainian Activists

• OMB unpauses plan to rethink the federal property footprint

• VA delays go-live of new health record software at Boise medical center

• Curb management data monetizes parking, boosts safety

• ShotSpotter tech takes a hit

• Algorithm predicts racial segregation in cities

• ESET Research Podcast: Hot security topics at RSA or mostly hype?

• Cybersecurity Professionals Push Their Organizations Toward Vendor Consolidation and Product Integration

• App Meant to Hit Russia with DDoS Attack Infected Android Phones of Ukraine Activists

• IT Security News Daily Summary 2022-07-20

• Forrester’s best practices for zero-trust microsegmentation

• Keep your data safe forever with these two apps for only $30

• In Defense of the Justice Department

• Is the Justice Department Meeting the Moment?

• Apple Ships Urgent Security Patches for macOS, iOS

• Google: Kremlin-backed goons spread Andriod malware disguised as pro-Ukraine app

• The DHS Bought a ‘Shocking Amount’ of Phone-Tracking Data

• New Luna ransomware targets Windows, Linux and ESXi systems

• Google ads lead to major malvertising campaign

• Boffins release tool to decrypt Intel microcode. Have at it, x86 giant says

• ‘AIG’ Threat Group Launches with Unique Business Model

• Lax Security Fuels Massive 8220 Gang Botnet Army Surge

• The Next-Generation Secure Web Gateway (SWG) – What You Need To Know?

• data compliance

• Google To Test Augmented Reality Glasses In Public

• The Next-Generation Secure Web Gateway (SWG) is Here – What You Need To Know?

• OMB’s mixed messages on mobility are putting federal agencies at risk

• ‘Pulling back the curtain’ to reveal a molecular key to The Wizard of Oz

• EFF Poker Tournament at DEF CON 30

• Alert WordPress Admins! Uninstall the Modern WPBakery Plugin Immediately

• The Next-Generation SWG is Here – What You Need To Know

• Netwrix Auditor Vulnerability Can Facilitate Attacks on Enterprises

• Best Zero Trust Security Solutions for 2022

• Mutare Voice Network Threat Survey Shows Nearly Half of Organizations Experienced Vishing or Social Engineering Attacks in Past Year

• Data-Centric Security Market Worth $12.3B by 2027 – Exclusive Report by MarketsandMarkets™

• Feds Recoup $500K From Maui Ransomware Gang

• Unpatched Flaws in Popular GPS Devices Allow Adversaries to Disrupt and Track Vehicles

• What InfoSec Pros Can Teach the Organization About ESG

• More malware-infested apps found in the Google Play store

• Nigerian Twitter Ban Declared Unlawful by Court: Victory by EFF and Partners

• Hackers Can Now Steal Data from Air-Gapped PCs via SATA Cables

• Russia Released A Ukrainian App For Hacking Russia That Was Really Malware

• US Seizes Stolen Funds From Suspected North Korean Hackers

• Critical Flaws In GPS Tracker Enable Life Threatening Hacks

• Singapore Distances Itself From Local Crypto Companies

• Belgium Says Chinese APT Gangs Attacked Its Government And Military

• Hiring Managers Lead on Entry-Level Cybersecurity Job Descriptions

• How I Prepared for the CISSP Exam

• A guide to teaching cybersecurity skills to special needs students

• Everything to know about SaaS data security

• AT&T Cybersecurity Insights Report: A Focus on SLED

• Kudelski secures IoT hardware lifecycle

• Acronis Cyber Protect Home Office: The full image backup tool to meet today’s demanding needs

• Can Encryption Key Intercepts Solve The Ransomware Epidemic?

• Google, EU Warn of Malicious Russian Cyber Activity

• Google Introduces DNS-over-HTTP/3 in Android

• DOJ report warns of escalating cybercrime, ‘blended’ threats

• Russia using Dropbox and Google to deliver malware to government firms

• Persona releases a new risk verification engine to combat identity fraud

• Russia Creates Malware False-Flag App

• How Microsoft Purview and Priva support the partner ecosystem

• Another ransomware payment recovered by the Justice Department

• DoJ, FBI recover $500,000 in ransomware payments to Maui gang

• Google Removes Several Apps From Play Store Distributing Malware

• Openreach Full Fibre Now Reaches 8 Million UK Premises

• Complete Guide to Vulnerability Basics

• I found a fraudulent Amazon charge on my account after Prime Day. Here’s how to protect yourself

• Last member of Gozi malware troika arrives in US for criminal trial

• Chaotic LAPSUS$ Group Goes Quiet, but Threat Likely Persists

• Google Adds Support for DNS-over-HTTP/3 in Android to Keep DNS Queries Private

• Global Chip Shortage Not Over, Warns IDC

• Roaming Mantis Hackers Group Attack Android & iOS Users to Deploy Malware

• 5 ways AI is detecting and preventing identity fraud

• Watchdog says that racial and ethnic gaps remain in CDC’s COVID-19 data

• network packet

• VMDR: Inside vulnerability management, detection and response

• Romanian Man Accused of Distributing Gozi Virus Extradited to US

• Million of vehicles can be attacked via MiCODUS MV720 GPS Trackers

• Facebook gets round tracking privacy measure by encrypting links

• Google Data Centre In London Outage Blamed On Cooling Failure

• Oracle Releases 349 New Security Patches With July 2022 CPU

• Chrome 103 Update Patches High-Severity Vulnerabilities

• A Data-Centric Cybersecurity Framework for Digital Transformation

• Cato Networks Announces New Data Loss Prevention Engine & SSE 360

• Protecting data at rest, in transit, and under query, Sotero nabs $8M

• Russian Adversaries Target DropBox and Google Drive in New Campaign

• How to Mitigate the Risk of Karakurt Data Extortion Group’s Tactics, Techniques, and Procedures

• FBI warns of phony cryptocurrency apps aiming to steal money from investors

• Dissecting the Justice Department’s Prosecutorial Decisions on Navarro, Meadows, and Scavino

• The current state of zero-trust cloud security

• Conti’s Reign of Chaos: Costa Rica in the Crosshairs

• Tackling the Cybersecurity Workforce Challenge With Apprentices

• Copycat DoS App Created by Russian Hackers to Target Ukraine

• Flaws in a popular GPS tracker could allow hackers to track or stop vehicles, say security researchers

• Magecart Serves Up Card Skimmers on Restaurant-Ordering Systems

• This Cloud Botnet Has Hijacked 30,000 Systems to Mine Cryptocurrencies

• New Rust-based Ransomware Family Targets Windows, Linux, and ESXi Systems

• Nigerian Money Transfer Company Linked to Romance Scam Money Laundering

• Ring shares data with police without consent (but it’s in good faith), says Amazon

• #ISC2Congress: Piloting Teams While Under Pressure – Carey Lohrenz Will Speak as an (ISC)² Keynote

• Report: 47% of orgs experienced a voice phishing attack last year

• German Consumer Group Sues Tesla Over Privacy, Climate

• Amazon Is Suing 10,000 Facebook Group Administrators For Fake Review Scheme

• Singapore distances itself from local crypto companies

• Twitter Wins Battle To Fast Track Elon Musk Lawsuit

• Sophos launches cross-operational task force X-Ops

• The Most Popular Period-Tracking Apps, Ranked by Data Privacy

• Analyzing Penetration-Testing Tools That Threat Actors Use to Breach Systems and Steal Data

• Avast SecureLine VPN keeps Indian users safe, preserves privacy

• Dealing With Alert Overload? There’s a Guide For That

• Unpatched GPS Tracker Bugs Could Let Attackers Disrupt Vehicles Remotely

• Netflix Loses 1 Million Subscribers, But Predicts Q3 Growth

• Russian Hackers Target Ukrainians Via Copycat DoS App

• Russia Fines Google $358 Million for Failing to Restrict Access Information Recognized As Prohibited

• Belgium Says Chinese APTs Targeted Interior, Defense Ministries

• FBI Director Announces an Expected Onslaught of Digital Assaults Targeting Midterm Elections

• Up to 90% of governmental websites serve cookies or third-party trackers

• Vulnerabilities in popular GPS tracker could allow hackers to remotely stop cars

• Data Breach Reported by Cleartrip: User Data Traded

• Legal Experts Concerned Over New UK Digital Reform Bill

• Russian Hackers Tricked Ukrainians with Fake “DoS Android Apps to Target Russia”

• Belgium says Chinese hackers attacked its Ministry of Defense

• Self-Proclaimed Free Speech Platforms Are Censoring Nude Content. Here’s Why You Should Care

• DOJ Recovers $500K Paid to North Korean Ransomware Actors

• Malicious PDF attachments: Exploring the threats

• Luna and Black Basta — new ransomware for Windows, Linux and ESXi

• Cyber Security Management System (CSMS) for the Automotive Industry

• Amazon sues 10,000 Facebook Group admins for offering fake reviews

• Russian Hackers Using DropBox and Google Drive to Drop Malicious Payloads

• Belgium claims China-linked APT groups hit its ministries

• EU warns of risks of spillover effects associated with the ongoing war in Ukraine

• Artificial Intelligence to detect Covid virus from Cough

• FBI seizes $500000 payment from Maui Ransomware spreaders

• Popular business web apps fail to implement critical password requirements

• Product showcase: Passwork – the best solution for work with corporate passwords

• Why SBOMs aren’t the silver bullet they’re portrayed as

• The past, present and future of Metasploit

• TD SYNNEX to Distribute AWS Storage Gateway Hardware Appliance

• Darrin Reynolds Joins Edgio as Chief Information Security Officer

• How can you find and retain new cybersecurity talent?

• Morse Code: How did it change communication?

• DevSecOps monitor and decommission

• RememBear password manager is shutting down in July 2023

• Deloitte adds four new modules and enhanced intelligence to its MXDR platform

• AB Handshake AI Shield detects voice fraud attacks in real-time

• Orca Security helps enterprises detect cloud attacks with Cloud Detection and Response capabilities

• Cato DLP secures and optimizes access to all applications

• What threats and challenges are CISOs and CROs most focused on?

• Belgium says Chinese cyber gangs attacked its government and military

• Mindtree collaborates with Rubrik to launch a unified cyber-recovery platform

• Conceal and Carahsoft join forces to protect government customers from ransomware

• Veza partners with Google Cloud to secure cloud environments and data from cybercrime and threats

• Biden administration looks to jumpstart cyber training

• Push Security raises $4 million to introduce user-centric approach to securing SaaS

• AppViewX raises $20 million to help organizations reduce their digital risk

• Security flaws in GPS trackers can be abused to cut off fuel to vehicles, CISA warns

• Researchers Warn of New Variants of ChromeLoader Browser in the Wild

• Boost SAP Security With Zero Trust

• The late-mover advantage: Faster, more successful tech adoption

• FCC chair pushes for gigabit speed broadband

• Virginia to modernize traffic, traveler and road information services

• Tech companies pledge free cybersecurity training during White House summit Tuesday

• Nominations Open for 2022 EFF Awards!

• IT Security News Daily Summary 2022-07-19

• Ransomware preparation and response: Develop a cyber kill chain

• Want to block third-party trackers on your Android device? Try DuckDuckGo’s new feature

• Ongoing Magecart Campaign Targets Online Ordering at Local Restaurants

• Tech companies pledge free cybersecurity training at White House summit Tuesday

• CloudMensis spyware went undetected for many years

• Cyber looms large in House NDAA

• Google pulls malware-infected apps in its Store, over 3 million users at risk

• Post-Breakup, Conti Ransomware Members Remain Dangerous

• Instagram Slow to Tackle Bots Targeting Iranian Women’s Groups

• HiddenLayer Emerges From Stealth With $6 Million to Protect AI Learning Models

• Huntress Acquires Security Awareness Training Startup Curricula for $22M

• Push Security Banks $4 Million Seed Funding

• Startup Aims to Secure AI, Machine Learning Development

• Experts Discover New CloudMensis Spyware Targeting Apple macOS Users

• How to opt out of T-Mobile’s creepy ad tracking campaign

• Lilith: The Latest Threat in Ransomware

• How to Measure the Success of Your Phishing and Security Awareness Training (PSAT) Program

• Replacing Weak Authentication Methods with Decentralized Security Infrastructure: The Move Towards a Passwordless Future

• Cleartrip Hacked – Attackers Selling Stolen Data on The Dark Web

• OpenDocument text files (.odt) malware campaign discovered

• Okta Exposes Passwords in Clear Text for Possible Theft

• CISA released Security Advisory on MiCODUS MV720 Global Positioning System (GPS) Tracker

• DNS-over-HTTP/3 in Android

• Microsoft Exchange Online And Outlook Email Service Hit By Outage

• Microsoft President Opens Up About Growing Shortage Of Workers

• Public tests of election equipment aim to thwart conspiracy theories

• Cyber-war game case study: Preparing for a ransomware attack

• Huntress Acquires Curricula for $22M to Disrupt Security Training Market, Elevate Cyber Readiness for SMB Employees

• Will Your Cyber-Insurance Premiums Protect You in Times of War?

• CISA released Security Advisory on MiCODUS MV720 Global Positioning System (GPS) Tracker

• Prototype Bug in Blitz.js. Allows RCE on Node.js Servers

• Digital PINS – The Next Step in Digital First Banking

• Why Digital ID Should be On the Vacation Checklist

• What roles do humans play in cyber breaches

• Top 10 master’s in cybersecurity programs in 2022

• I see what you did there: A look at the CloudMensis macOS spyware

• Cyber Safety Review Board classifies Log4j as ‘endemic vulnerability’

• US Disrupts North Korean Hackers That Targeted Hospitals

• Unpatched Micodus GPS Tracker Vulnerabilities Allow Hackers to Remotely Disable Cars

• Now Live: Cyber Solutions Summit and Expo

• New ‘CloudMensis’ macOS Spyware Used in Targeted Attacks

• Microsoft Resolves Padding Oracle Vulnerability in Azure Storage SDK

• Congratulations to the Top MSRC 2022 Q2 Security Researchers!

• (ISC)² Pledges 1 Million Certified in Cybersecurity

• CMA To Reconsider Order For Meta To Sell Giphy

• Watchdog says that racial and ethnic gaps remain in the CDC’s COVID-19 data

• Authentication Risks Discovered in Okta Platform

• Unpatched GPS Tracker Security Bugs Threaten 1.5M Vehicles with Disruption

• More than 70% of organisations feel they wasted majority of their cybersecurity budget

• Albania’s Government Networks Were Disabled Amid Cyberattack

• ThriveDX launches Cyber Talent Hub to help close the cyber skills gap

• Microsoft adds ‘Cloud for Sovereignty’ to its line-up

• FBI Warns Fake Crypto Apps are Bilking Investors of Millions

• Multiple Imperva Products Earn 2022 Fortress Cyber Security Awards

• How Microsoft Security partners are helping customers do more with less

• New Attack Technique Makes It Easy to Identify Web Users

• Hospital Ransomware Attack: Here’s What a Cybersecurity Success Story Sounds Like

• Albanian Government Hit by “Massive Cyber-Attack”

• Enso Security Leads Industry Mission to Bring Control to Chaos With Community-Driven AppSec Map

• GhangorCloud Announces CAPE, a Next Generation Unified Compliance and Data Privacy Enforcement Solution

• NSO Group’s Pegasus Spyware Used against Thailand Pro-Democracy Activists and Leaders

• White House To Hold Summit On Addressing The Thousands Of Unfilled Cybersecurity Jobs

• Servers Running Digium Phones VoIP Software Are Getting Backdoored

• Walmart-Controllled Flight Booking Service Suffers Data Leak

• Industrial Control System Password Cracker May Be Bad, Actually

• Inside Ukraine’s Decentralized Cyber Army

• FBI says fake crypto apps defrauded investors of more than $42 million

• Lawsuit Alleges Antitrust Issues Over Apple Pay

• 5 tips for securing SSH on your Linux servers

• FBI Warns of Fraudulent Crypto Investment Applications

• Ongoing ‘Roaming Mantis’ Smishing Campaign Hits Over 70,000 Users in France

• More and More Companies Are Getting Hit with Ransomware [2021-2022]

• How Heimdal’s Cybersecurity Strategy Stays Ahead of the Curve in the Cyberthreat Landscape

• OSI Layers Explained – The “What”, “Where”, and “Why” of the OSI Model.

• Brazil surpasses US in breached users in Q2 2022

• Get personal network protection with Deeper Connect Mini — no subscriptions necessary

• Former Conti Actors Remain Active in Cybercrime Underworld

• Protecting Against Kubernetes-Borne Ransomware

• New Air-Gap Attack Uses SATA Cable as an Antenna to Transfer Radio Signals

• Security Experts Warn of Two Primary Client-Side Risks Associated with Data Exfiltration and Loss

• Experts Uncover New CloudMensis Spyware Targeting Apple macOS Users

• Russia-linked APT29 relies on Google Drive, Dropbox to evade detection

• Which Vulnerability Prioritization Technology Is the Most Accurate?

• How to leverage the power of cyber fusion centers for organizational security

• LinkedIn and Microsoft are the most impersonated brands in phishing attacks

• Soldiers, Not Soldiers of Fortune

• Modularity for International Internet Governance

• British Jeweller Graff Paid £6 Million Ransom To Attackers Then Sued Insurers

• PayPal phishing campaign goes after more than just your login credentials

• Fraudulent cryptocurrency investment apps are duping investors

• Cybereason warns against ransomware attacks from Black Basta Gang

• Cyberattack Blocks Albania’s Public Online Services

• Mental Health App Feelyou Exposed 70,000 Emails

• 7 Ways Managed Detection And Response (MDR) Solves Security Operations Challenges

• UK Tech Talent Shortage Threatens To Stifle Growth In The Industry

• Breach of healthcare debt collection firm exposes 1.9M patients – cyber experts weigh in

• Poisoned AI: Should Security Teams Start Worrying that the Tools They Rely on Can Be Used Against Them?

• US CISA Opens First Ever Overseas Office In London

• Hackers turn to cloud storage services in attempt to hide their attacks

• CISO Conversations: Netenrich, Malwarebytes CISOs Discuss Security Vendor CISOs

• US Cybersecurity Agency CISA to Open London Office

• Fully Exploiting Data Sources

• Security Resilience in APJC

• Warning for WordPress admins: uninstall the Modern WPBakery plugin immediately!

• Hackers leaked two billion usernames and passwords in 2021

• Android and iOS Users Targeted in Malware, Phishing Attacks Conducted by Roaming Mantis Threat Actor

• HIPAA Compliance & The Security Rule

• Roblox breached: Internal documents posted online by unknown attackers

• Walmart-controlled flight booking service suffers substantial data leak

• Tor Browser 11.5 Arrives With Multiple Feature Upgrades

• The 5 Best Practices For IT Security on Your Jewelry Website

• New Retbleed Speculative Execution Attack Threatens CPU Security

• Apple To Slow Hiring And Spending In 2023 – Report

• Getting the most from Microsoft Inspire 2022

• LinkedIn Still Number One Brand to be Faked in Phishing Attempts while Microsoft Surges up the Rankings to Number Two Spot in Q2 Report

• FBI: These fake apps are trying to steal your crypto. Here’s what to watch out for

• More Malicious Malware Found in Google Play Store Apps

• US Senators Plan Bill To Restore Net Neutrality

• How we’ll solve software supply chain security

• Crooks create rogue cryptocurrency-themed apps to steal crypto assets from users

• Top Ways in Which Artificial Intelligence Can Help You Make Money

• The Culture of Recruitment

• New MacOS Backdoor Communicates Via Public Cloud

• FBI Warn of Costly Fake Cryptocurrency Schemes

• CISA Set to Open London Office

• Google Fined $358 Million For Not Removing Banned Content In Russia

• FBI: Fake Crypto Apps Have Cost Investors $43m

• Several apps on the Play Store used to spread Joker, Facestealer and Coper malware

• Several New Play Store Apps Spotted Distributing Joker, Facestealer and Coper Malware

• CoSoSys Endpoint Protector v5.6 enables users to protect sensitive information

• Resecurity Digital Identity Protection defends individuals and businesses from identity theft

• Cybercriminals targeting law enforcement agencies worldwide

• Darktrace PREVENT proactively protects enterprises against sophisticated cyber threats

• Looking for adding new detection technologies in your security products?

• Tor Browser 11.5 Released – Tor Now Automatically Bypasses Internet Censorship

• Dear agency senior executive: You can make or break your next big tech initiative

• iPhone iOS 16 update might trigger mobile security concerns

• TikTok turns invasive and triggers privacy concerns

• Darktrace launches new family of security AI tools

• Are your visuals making businesses more vulnerable to cybercrime?

• Removing the blind spots that allow lateral movement

• What NATO’s virtual rapid response cyber capability means for the fight against cyber warfare

• How adversaries are leveraging pentesting tools to launch attacks

• Adlumin Spotlighted on the CRN® 2022 Emerging Vendors List

• CISSP Recognized as Top Cybersecurity Certification

• FBI Warns of Fake Cryptocurrency Apps Stealing Millions from Investors

• NIST selects 12 companies for implementing post-quantum cryptography

• 82% of global insurers expect the rise in cyber insurance premiums to continue

• Jailed crooks told to cough up $600k for COVID fraud

• Leveraging Your Worth in Cybersecurity

• MicroAge acquires cStor to expand its digital transformation service offerings

• IronNet partners with Brookdale Community College to help defend against cyber threats

• Ran Dubin joins BUFFERZONE as CTO

• PPCGeeks – 492,518 breached accounts

• Retbleed Fixed in Linux Kernel, Patch Delayed

• Trojanized Password Crackers Targeting Industrial Systems

• iPhones of Activists in Thailand Hacked by Israeli Pegasus Spyware

• A Common Mission: Improve the Cybersecurity Posture of the Nation

• The future of identity is reusable and distributed

• Bogus cryptocurrency apps steal millions in mere months

• IT Security News Daily Summary 2022-07-18

• Moussouris: U.S. Should Resist Urge to Match China Vuln Reporting Mandate

• Best practices for legal hold storage

• NACo adds risk ratings tool to its community portal

• FBI: Beware of Scam Cryptocurrency Investment Apps

• MAR-10382580-r2.v1 – RAT

• API Security Weekly: Issue 169

• CISA’s first international office set to open later this month in London

• What’s your ransomware risk?

• Facebook Makes It Harder For Users To Protect Their Privacy And Stop URL Tracking

• CISA Updates Advisory on Cyber Actors Continued Exploitation of Log4Shell in VMware Horizon Systems

• MAR-10382580-r2.v1 – RAT

• MLNK Builder 4.2 released in Dark Web – malicious shortcut-based attacks are on the rise

• How To Automate Vendor Risk Management

• APT Groups Trapping Targets with Clever Twitter Scheme

• DCMS Sets Out Proposal For New AI Rulebook

• Top Endpoint Detection & Response (EDR) Solutions in 2022

• Botnet malware disguises itself as password cracker for industrial controllers

• CISA Updates Advisory on Cyber Actors Continued Exploitation of Log4Shell in VMware Horizon Systems

• MAR-10382580.r2.v1 – RAT

• Get Comprehensive Insights into Your Network with Secure Analytics and MITRE Mappings

• TikTok Engaging in Excessive Data Collection

• WordPress Page Builder Plug-in Under Attack, Can’t Be Patched

• 8 months on, US says Log4Shell will be around for “a decade or longer”

• Name That Toon: Modern-Day Fable

• Tor Browser 11.5 Adds Censorship Detection & Circumvention

• Congress wrangles with DHS over biometric system delays and oversight

• Ransomware Attempts Flag as Payments Also Decline

• New Study Finds Most Enterprise Vendors Failing to Mitigate Speculative Execution Attacks

• EFF and Partners Urge the Indian Government to Keep End-to-End Encryption Alive

• #ISC2Congress: Politics, Cybersecurity & Global Issues – Ian Bremmer to Speak as (ISC)² Keynote

• Trellix finds business services top target of ransomware attacks

• Why North Korean cybercriminals are targeting businesses with ransomware

• Key factors to achieve data security in cloud computing

• A Deep Dive Into the Residential Proxy Service ‘911’

• Pegasus Spyware Used Against Thailand’s Pro-Democracy Movement

• Building Guardrails for Autonomic Security

• Nephew Of Jailed Hotel Rwanda Dissident Hacked By NSO Spyware

• Microsoft’s Latest Security Patch Troubles Windows 11 Users

• Albanian Government Websites Go Dark After Cyberattack

• Google Boots Multiple Malware-Laced Android Apps From Store

• Large-Scale Malware Campaign Targets Elastix VoIP Systems

• Data Breach on Servers of Cleartrip of Flipkart

• Elon Musk Seeks To Block Twitter’s Request For Speedy Trial

• New Deanonymization Attack Works on Major Browsers, Websites

• Juniper Networks Patches Over 200 Third-Party Component Vulnerabilities

• Pegasus Spyware Used to Hack Devices of Pro-Democracy Activists in Thailand

• The FTC will go after companies misusing location, health, and other sensitive data

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Ofcom Mulls Further Sanctions On Russia’s RT Over Ukraine Coverage

• Hacker’s Corner: Complete Guide to Anti-Debugging in Linux – Part 3

• Experts Notice Sudden Surge in Exploitation of WordPress Page Builder Plugin Vulnerability

• A collaborative approach to threat modeling

• The President’s (and USTR’s) Trade Agreement Authority: From Fisheries to IPEF

• Roe v. Wade: How the cops can use your data: Lock and Code S03E15

• Proofpoint Analysis : APT Groups Target Journalists

• Security Obscurity Versus Ethical Hackers: Who’s Right?

• Building a business case for zero-trust, multicloud security

• Albanian government websites go dark after cyberattack

• Tor Browser 11.5 is optimized to automatically bypass censorship

• Facebook Is Now Encrypting Links to Prevent URL Stripping

• Quarterly Community Updates: Student Discounts, OffSec Live, Partner Program, & Much More!

• Authentication Bypass Bug Found In AWS IAM Authenticator for Kubernetes

• An XSS Vulnerability Riddled Microsoft Teams

• San Francisco Mayor Admits City Has To Adjust To Remote Working Reality

• The deepfake arms race is heating up

• Mayors’ initiative to harness data to improve government functions, constituent services

• These moonlighting hackers are using ransomware against ‘random’ targets

• Best antivirus software 2022

• 8 best enterprise password managers for 2022

• Best VPN services for SMBs

• PLC and HMI Password Cracking Tools Deliver Malware

• Researchers Say Thai Pro-Democracy Activists Hit by Spyware

• Digium Phones Targeted in Cybercrime Campaign Aimed at VoIP Systems

• Watch Out for User Impersonation in Low-Code/No-Code Apps

• How to ‘Win’ a Red Team Exercise

• Features of 14-inch Gaming Laptops

• Mitigation for Azure Storage SDK Client-Side Encryption Padding Oracle Vulnerability

• Microsoft’s latest security patch troubles Windows 11 users

• Tesla Ordered To Refund Customer Over Autopilot Problems

• Tor Browser Adds Automatic Censorship Circumvention

• Mind the Gap – How to Ensure Your Vulnerability Detection Methods are up to Scratch

• SecurityScorecard partners with NACo to improve cybersecurity posture for U.S. county governments

• Broker Fined £2m for Financial Crime Control Failings

• Want to Reduce the Deficit? Cut the Pentagon’s Wish Lists.

• Extortionists target restaurants, demand money to take down bad reviews

• CISA Urges Patch of Exploited Windows 11 Bug by Aug. 2

• Google Boots Multiple Malware-laced Android Apps from Marketplace

• On the Anatomy of a DNS Attack – Types, Technical Capabilities, and Mitigation

• How Long Does it Take to Train Entry-Level Cybersecurity Team Members?

• Unpatched WPBakery WordPress Plugin Vulnerability Increasingly Targeted in Attacks

• SecurityWeek Analysis: Over 230 Cybersecurity M&A Deals Announced in First Half of 2022

• A massive cyberattack hit Albania

• Taiwan Alleges Chinese Apple Supplier Stole Secrets

• Vulnerability Management Program Best Practices

• Sudden Increase In Attacks On Modern WPBakery Page Builder Addons Vulnerability – Expert Comments

• Can Driving Simulators Help Prepare Young Drivers?

• British businesses are under constant cyberattack

• Hackers Distributing Password Cracking Tool for PLCs and HMIs to Target Industrial Systems

• Watch out for the CVE-2022-30136 Windows NFS Remote Code Execution flaw

• The Matrix Messaging System Gains 25 Million New Users in the Last Year

• BT Seeks To Keep Network Running, After CWU Sets Strike Dates

• Securing data at rest and data in motion

• Public Cloud Customers Admit Security Challenges

• Cybercrime Activity Stalling Due to Falling Cryptocurrency Market

• Survey Finds That the Average American Accesses Suspicious Sites 6.5 Times a Day

• Beware of password-cracking software for PLCs and HMIs!

• A week in security (July 11 – July 17)

• (IN)SECURE Magazine issue 72 released: Free download

• M2 MacBook Air Review – New Form Factor for Apple’s Most Popular Mac

• Could Russia’s war on Ukraine escalate into a global cyberwar?

• If You’re Not Paying for the Product, You Are… Possibly Just Consuming Goodwill for Free

• Humans are becoming the primary security risk for organizations around the world

• Software developers, how secure is your software ?

• Graff paid a $7.5M ransom and sued its insurance firm for refusing to cover this payment

• New Android Malware on the Google Play Store with Over 3 Million Downloads

• Juniper Releases Patches for Critical Flaws in Junos OS and Contrail Networking

• Cyber Attack forces government agencies to shut down in Albania Europe

• Is Google Search Engine leaking private data of users

• Bill for US telcos to bin Chinese kit blows out by $3 billion

• The first formal verification of a prototype of Arm CCA firmware

• How to prepare your organization for a Slack or Office 365 breach

• The State of Security: Malware in 2022

• TikTok’s chief security officer steps aside, thanks to Oracle move

• Online payment fraud losses to exceed $343 billion

• Industrial cybersecurity leaders are making considerable headway

• Open source security needs automation as usage climbs amongst organisations

• Alibaba execs hauled in to discuss Shanghai Police data leak

• IT Security News Weekly Summary – Week 28

• IT Security News Daily Summary 2022-07-17

• Lenovo UEFI Firmware Vulnerabilities Risk Numerous Laptop Models

• Hackers can spoof commit metadata to create false GitHub repositories

• Crooks stole $375k from Premint NFT, it is one of the biggest NFT hacks ever

• Acquiring Actionable Knowledge Through Collaboration

• Darkweb Monitoring

• Google is going to remove App Permissions List from the Play Store

• The History of Countering Violent Extremism Tends to Repeat. It Shouldn’t.

• Mantis Botnet Behind Largest HTTPS DDoS Attack Targeting Cloudflare Users

• Office Phishing Attack circumvents multi-factor authentication

• Data of 4,000 Patients at VCU Health Exposed

• North Korean Hackers Using H0lyGh0st Ransomware To Attack & Demand 1.2 to 5 Bitcoins

• StartupApproved\Run, pt II

• Week in review: Kali Linux gets on Linode, facial recognition defeated, Log4j exploitation

• Penetration testing

• JukinMedia – 314,290 breached accounts

• APT groups target journalists and media organizations since 2021

• Security Affairs newsletter Round 374 by Pierluigi Paganini

Generated on 2022-07-24 23:59:38.872499