IT Security News Weekly Summary – Week 33

• IT Security News Daily Summary 2022-08-21

• Ring App Vulnerability Could Expose User’s Phone Data

• 3 Ways Asset Management Companies Can Reduce Cyber Risk

• A Modern Cybersecurity Fight Requires a Modern Approach to Regulatory Oversight

• Mimecast: Mitigating Risk Across a Complex Threat Landscape

• Spanish Banking Trojan Attacks Various Industry Verticals

• Container vs. VM Security: Which Is Better?

• Threat actors are stealing funds from General Bytes Bitcoin ATM

• Third-party app attacks: Lessons for the next cybersecurity frontier

• Sophos: Employing Stolen Session Cookies to Navigate MFA & Access Networks

• FBI Alerts About Credential Stuffing Attacks, Configurations and Proxies Used

• The Forensic Technology Behind Your Favourite T.V Detectives

• #ISC2Congress Theme: EMPOWER

• The Gender Pay Gap Is a National Security Threat

• Microsoft Facing a Growing Threat by Cryptojackers.

• Banyan Recommends Phased Approach When Introducing Zero Trust

• They both used Apple AirTags to track their possessions. Only one turned out well

• The Low Threshold for Face Recognition in New Delhi

• ZTNA: What Is It, and How Does It Encourage Thinking Like a Hacker?

• Grandoreiro banking malware targets Mexico and Spain

• Week in review: Apple fixes exploited zero-days, 1,900 Signal users exposed, Amazon Ring app vuln

• Penetration testing

• White hat hackers broadcasted talks and hacker movies through a decommissioned satellite

• Most Important Computer Forensics Tools for Hackers and Security Professionals

• Julian Waits and Patrick Duggan join PIXM Board of Directors

• Security Affairs newsletter Round 380

• Skyhigh Security expands leadership team with new appointments

• IT Security News Daily Summary 2022-08-20

• Cyemptive Technologies CEO Named “Cybersecurity CEO of the Year”

• DeepSurface Adds Risk-Based Approach to Vulnerability Management

• Infrastructure as code and your security team: 5 critical investment areas

• Gurucul Returns to Compete in 5th ‘ASTORS’ Homeland Security Awards

• Become a Cybersecurity Expert with 18 New Online Courses @ 98% OFF

• New Grandoreiro Banking Malware Campaign Targeting Spanish Manufacturers

• CISA added 7 new flaws to its Known Exploited Vulnerabilities Catalog

• TA558 Malware Attacks Travel and Hospitality Services

• Fixing cross-chain bridges with confidential computing

• Deploying a Modern Card Program – Mobile Banking App

• CISA Adds 7 New Actively Exploited Vulnerabilities to Catalog

• 5 Ways Big Data Is Impacting The Self-Storage Industry

• Lazarus Attacks Apple’s M1 Chip, Lures Victims Via Fake Job Offers

• Russian-Linked Hackers Target Estonia

• The HEAT Is On, Says Menlo Security

• Janet Jackson’s ‘Rhythm Nation’ Can Crash Old Hard Drives

• ‘RedAlpha’: This Chinese Cyberspy Group is Targeting Governments & Humanitarian Entities

• TA558 cybercrime group targets hospitality and travel orgs

• Build or Buy your own antivirus product

• Google and Apple both release patches against zero‑day vulnerabilities – Week in security with Tony Anscombe

• Hackers Using Bumblebee Loader Malware to Attack Active Directory Services

• Black Hat USA 2022 Closes on a Record Breaking Event in Las Vegas & Online

• PolySwarm Launches Token Rewards For Internet Browsing

• TD SYNNEX Earns 2022 Great Place to Work Certification™

• WolfPAC Essentials centralizes risk management program for lean organizations

• Netsurit Productivity Monitor improves remote work management and employee productivity

• WSO2 Private CIAM Cloud delivers CIAM support for both B2B and B2C demands

• Cybersecurity Solutions Must Evolve, Says Netography CEO

• Patch Now: 2 Apple Zero-Days Exploited in Wild

• Intel Adds New Circuit to Chips to Ward Off Motherboard Exploits

• PIXM: Stopping Targeted Phishing Attacks With ‘Computer Vision’

• Spying on the spies. See what JavaScript commands get injected by in-app browsers

• Explained: Steganography

• Tech support scammers target Microsoft users with fake Office 365 USB sticks

• 2022-08-18 – IcedID (Bokbot) infection

• 2022-08-19 – Files for an ISC diary (Astaroth/Guildma)

• Russia-linked Cozy Bear uses evasive techniques to target Microsoft 365 users

• Redpoint Cybersecurity names David Duncan as VP of Cyber Operations

• BlastWave expands leadership team with new appointments

• Claroty appoints Joshua Corman as VP of Cyber Safety Strategy

• MariaDB acquires CubeWerx to deliver geospatial capabilities for developers

• Critical Amazon Ring Vulnerability Could Expose Camera Recordings

• The 5 best VPN deals right now: August 2022

• Uncovering a ChromeOS remote memory corruption vulnerability

• IT Security News Daily Summary 2022-08-19

• Friday Squid Blogging: The Language of the Jumbo Flying Squid

• How to strengthen the human element of cybersecurity

• Google Fended Off Largest Ever Layer 7 DDoS Attack

• 8 secure file transfer services for the enterprise

• Zero Trust: Security Model for A Fluid Perimeter

• State-Sponsored APTs Dangle Job Opps to Lure In Spy Victims

• Nonprofit Websites Are Full of Trackers. That Should Change.

• Ex-HP finance manager jailed after going on $5m spending spree using company plastic

• FBI Warns of Proxies and Configurations Used in Credential Stuffing Attacks

• Encrypted Messaging Service Hack Exposes Phone Numbers

• BlackByte Ransomware Gang Returns With Twitter Presence, Tiered Pricing

• Virginia Employment Commission struggles with identity theft

• Offensive Security Online Community BBQ Event

• Beware! BlackByte Ransomware is Back With New Version

• How to unlock 1Password on a Mac

• DHS tests new tech that could bring emergency alerts to vehicle screens

• Apple users urged to install latest updates to combat hacking

• Alternatives to facial recognition authentication

• China-backed APT41 Group Hacked at Least 13 Victims in 2021

• A Duty to Disobey?

• Browser vulnerability troubles to Chrome and Safari users Worldwide

• Hackers Steal Session Cookies to Bypass Multi-factor Authentication

• CISA added SAP flaw to its Known Exploited Vulnerabilities Catalog

• iPhone Users Urged to Update to Patch 2 Zero-Days

• Microsoft: Cryptojackers Continue to Evolve to Be Stealthier and Spread Faster

• Report: Facebook Is Profiting On White Supremacist Groups Through Ads

• DoNot Team Hackers Updated its Malware Toolkit with Improved Capabilities

• About That Draft Law Banning Uncle Sam Buying Insecure Software

• Two Years On, Apple iOS VPNs Still Leak IP Addresses

• Apple Security Flaw Actively Exploited By Hackers To Fully Control Devices

• Sudden Crypto Drop Sends Bitcoin To Three Week Low

• More and More Companies Are Getting Hit with Ransomware [2021-2022]

• What is Cloud Access Security Brokerage (CASB)? Definition, Scope, Implementation, and Limitations

• Updates on 3 Bullpen stocks that broke through the meme and retail buzz this week

• Tourism and the metaverse: Towards a widespread use of virtual travel?

• Ring Camera Recordings Exposed Due to Vulnerability in Android App

• 7 key cybersecurity metrics for the board and how to present them

• Hackers Using Bumblebee Loader To Compromise Active Directory Services

• PLCs Exploited by “Evil PLC Attack” to Breach Networks

• Networks Breached via Bumblebee Loader

• Apple Security Flaw Actively Exploited By Hackers

• New PyPi Malware Pkgs Steal Discord And Roblox Credential & Payment Info, Expert Weighs In

• 3 Questions to Ask to Audit Your API

• How EDR Security Supports Defenders in a Data Breach

• Ransomware Group Threatens to Leak Data Stolen From Security Firm Entrust

• China’s Winnti Group Hacked at Least 13 Organizations in 2021: Security Firm

• Top 10 cybersecurity interview questions and answers

• Apple Warns of Critical Security Risk in Safari For iPhones, iPads and Macs

• Cyber Resiliency Isn’t Just About Technology, It’s About People

• Cybercrime Group TA558 Targeting Hospitality, Hotel, and Travel Organizations

• Cloud security: Increased concern about risks from partners, suppliers

• iOS Can Stop VPNs From Working as Expected—and Expose Your Data

• Tech Industry Leaders React To A Level Results

• Google: Here’s how we blocked the largest web DDoS attack ever

• OFAC Around and Find Out

• Google Staff Demand Protections, Amid State Abortion Bans

• Cybersecurity M&A Roundup for August 1-15, 2022

• Google Blocks Record-Setting DDoS Attack That Peaked at 46 Million RPS

• Google Cloud Blocks Record DDoS attack of 46 Million Requests Per Second

• LATEST CYBERTHREATS AND ADVISORIES – AUGUST 19, 2022

• Apple Security Flaw Being Actively Exploited

• 10 top cybersecurity online courses and certifications in 2022

• A flaw in Amazon Ring could expose user’s camera recordings

• Businesses Found to Neglect Cybersecurity Until it is Too Late

• Ring App Vulnerability Urgently Patched by Amazon

• U.S. Cyber Command deploys defensive operators to Croatia to hunt for malicious cyber activity

• Entrust Allegedly Hit with LockBit Ransomware

• UK Water Provider Targeted by Clop Group Ransomware

• Yale University Names Firms Still Operating In Russia

• SAP Vulnerability Exploited in Attacks After Details Disclosed at Hacker Conferences

• Chinese Cyberspy Group ‘RedAlpha’ Targeting Governments, Humanitarian Entities

• 8 Ways Technology Has Improved The Mortgage Industry

• Estonia Repels Biggest Cyber-Attack Since 2007

• New Amazon Ring Vulnerability Could Have Exposed All Your Camera Recordings

• Back to school shopping cybersecurity 101

• UK Carrier Claims to Block One Million Vishing Calls Per Day

• 35 Malware Android Apps With over 2 million Installation Found on the Google Play Store

• Safeguard your iPhones, iPads and Macs: Apply these security updates now

• Cyber Tops Staff Retention as Biggest Business Risk

• Cisco fixes High-Severity bug in Secure Web Appliance

• Bumblebee attacks, from initial access to the compromise of Active Directory Services

• Two years on, Apple iOS VPNs still leak IP addresses

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Fitbit’s having a bad summer

• Estonia blocked cyberattacks claimed by Pro-Russia Killnet group

• Exploiting stolen session cookies to bypass multi-factor authentication (MFA)

• UK 5G Network company EE blocks 200 million phishing texts

• Lockbit takes claim for Entrust Ransomware Attack

• Amazon Patches Ring Android App Flaw Exposing Camera Recordings

• CISA’s cyber info sharing program didn’t always deliver, watchdog says

• How merchants can defend themselves against Magecart attacks

• New infosec products of the week: August 19, 2022

• Deploying a Modern Card Program – Card Issuing Platform

• The dos and don’ts of startup security: How to develop a security plan

• Credential harvesting: Is it too big of an attack or can you fight back?

• A civil servant’s effort to humanize government, one fed at a time

• Cobalt Iron Ranks High Among Leaders in GigaOm 2022 Radar Report for Enterprise Hybrid Cloud Data Protection

• Latest Cyberthreats and Advisories – August 5, 2022

• #ISC2CONGRESS – Why you won’t want to miss it!

• Cybercriminals are using bots to deploy DDoS attacks on gambling sites

• OpenFHE: Open-Source Fully Homomorphic Encryption

• Weekly Update 309

• How do cybercriminals steal credit card information?

• Cloudera CDP One accelerates data science programs with built-in enterprise security and ML

• Tenacity platform enhancements provide visibility into entire AWS and Azure cloud infrastructure

• Absolute boosts Secure Endpoint portfolio with resilience and intelligence capabilities

• The truth about that draft law banning Uncle Sam buying insecure software

• 3M COMPLY Magnetic Attach for Monitors protects sensitive and confidential data on monitor displays

• CircleCI Visual Configuration Editor allows teams to visualize and streamline complex workflows

• Apricorn Aegis Secure Key 3 addresses constantly evolving security threats

• Bitwarden releases SCIM support to expand directory and identity provider integration options

• Opsera unveils SaaS DevOps capabilities to improve agility and security posture for enterprises

• SynSaber raises $13 million to improve industrial asset and network monitoring solution

• TXOne Networks raises $70 million to defend industry verticals against cybersecurity threats

• ManageEngine and Sectigo join forces to automate certificate lifecycle management

• Fortanix External Key Manager pairs with Google Cloud Platform to help users tackle privacy challenges

• Banorte – 2,107,000 breached accounts

• Urgent update for macOS and iOS! Two actively exploited zero-days fixed

• Bad rhythm: Janet Jackson song resonates poorly with some old hard drives

• How IT teams can prevent phishing attacks with Malwarebytes DNS filtering

• Attackers waited until holidays to hit US government

• Business Services industry targeted across the country for backdoor access

• Safari 15.6.1 addresses a zero-day flaw actively exploited in the wild

• NetSPI Partner Program delivers offensive security services for organizations

• Box appoints Amit Walia to its Board of Directors

• Apple Releases Security Updates for Multiple Products

• CISA Adds Seven Known Exploited Vulnerabilities to Catalog

• Cisco Releases Security Update for Cisco Secure Web Appliance

• CISA releases 5 Industrial Control Systems Advisories

• DHS preparedness grants prioritize security for state, local governments

• Easing the Cyber-Skills Crisis With Staff Augmentation

• Spyware Hunters Are Expanding Their Toolset

• Apple Releases Security Updates for Multiple Products

• CISA Adds Seven Known Exploited Vulnerabilities to Catalog

• Cisco Releases Security Update for Cisco Secure Web Appliance

• CISA releases 5 Industrial Control Systems Advisories

• IT Security News Daily Summary 2022-08-18

• What Web3 and the blockchain revolution mean for law enforcement

• D-Fend and Syzygy to Optimize C-UAS Communications & Data Management

• The Advantages of Breach and Attack Simulation for Data Security

• Business Email Compromise Attack Tactics

• 20% of developers and IT pros say API security breaches happen monthly

• The Biden administration ends COVID-19 testing aimed at unvaccinated workers

• Need a password manager? NordPass is 34% off right now

• New Bill Would Bring Back Terrible Software and Genetic Patents

• From Ramnit To Bumblebee (via NeverQuest): Similarities and Code Overlap Shed Light On Relationships Between Malware Developers

• 5G’s first applications likely intelligent transportation, public safety

• China’s APT41 Embraces Baffling Approach for Dropping Cobalt Strike Payload

• The Classification Status of Trump’s Mar-a-Lago Documents

• The Five Principles of a Zero Trust Cybersecurity Model

• Where’s EFF? Why EFF Is Sometimes Quiet About Important Cases and Issues

• What’s appropriate on social media? DOD spells it out in new guidance

• Universal ZTNA is Fundamental to Your Zero Trust Strategy

• TXOne Networks Scores $70M Series B Investment

• 5 Russia-Linked Groups Target Ukraine in Cyberwar

• Mac Attack: North Korea’s Lazarus APT Targets Apple’s M1 Chip

• Google blocked the largest Layer 7 DDoS reported to date

• Signal / Twilio Incident – How Secure Are SMS Verifications? Experts Weigh In

• 2022 OT Attack Vectors – Phishing, Scanning & Brute Force

• Expert On Report Showing 297% Increase In US Breaches Tied To Supply Chain And Third-party Suppliers

• How to Automate Security Scanning for Greater Efficiency

• Cybersecurity | How to Become a Cybersecurity Expert

• How phishing attacks are exploiting Amazon Web Services

• Estonia Blocks Cyberattacks Claimed by Russian Hackers

• What is identity sprawl and how can it be managed?

• Researchers Detail Evasive DarkTortilla Crypter Used to Deliver Malware

• Our Responsible Approach to Governing Artificial Intelligence

• Dive deep into NAT gateway’s SNAT port behavior

• Hardware-based threat defense against increasingly complex cryptojackers

• Police Arrest Four Over BT Cable Theft In North Yorkshire

• Keeping the keys to the kingdom secure

• Browser extension threat targets millions of users

• Google Blocks Third Record Breaking DDoS Attack In As Many Months

• Ring Patched An Android Bug That Could Have Exposed Video Footage

• Hacker Tournament Brings Together World’s Best In Las Vegas

• Update Chrome Now To Patch Actively Exploited Zero Day

• APT Lazarus Targets Engineers With macOS Malware

• Apple Patches Two Actively Exploited Vulns in Monterey 12.5.1, iOS and iPadOS 15.6.1

• Submit Your Comments to NIST Regarding HIPAA Security

• Estonia faces Russian Cyber Attack for removing Soviet World War 3 Monument

• Iteris Selected by Virginia Department of Transportation for Connected and Automated Vehicle Initiative

• Why Digital ID Should be On the Vacation Checklist

• How to reduce your exposure & secure your data in the cloud in 5 quick ways

• UK Staff Resisting ‘Big Return’ To The Office, Says infinitSpace

• Researchers Bypassed Android 13’s New ‘Restricted Setting’ Security Feature

• Google blocks third record-breaking DDoS attack in as many months

• PayPal Phishing Scam Uses Invoices Sent Via PayPal

• Hackers Deploy Bumblebee Loader to Breach Target Networks

• Connect with Microsoft Security experts at the 2022 Gartner Identity & Access Management Summit

• Apple Axes 100 Recruiters, Amid Hiring Slowdown – Report

• Back to school: Are your kids’ devices ready for school?

• Cisco Squashes High-Severity Bug in Web Protection Solution

• Russian Use of Cyberweapons in Ukraine and the Growing Threat to the West

• S3 Ep96: Zoom 0-day, AEPIC leak, Conti reward, heathcare security [Audio + Text]

• China-backed APT41 Hackers Targeted 13 Organisations Worldwide Last Year

• BlackByte ransomware v2 is out with new extortion novelties

• Research And Expert Comments On TA558 Targeting Hospitality.

• Open Source U.K. Government Websites Are Vulnerable

• Criminals Are Posting Counterfeit Microsoft Products To Get Access To Victims’ Computers, Expert Weighs In

• FTC Investigates Amazon Prime, But Firm Hits Out At FTC Staff Conduct

• NIST to release new playbook for AI best practices

• ATMZOW JS Sniffer Campaign Linked to Hancitor Malware

• Summertime Blues: TA558 Ramps Up Attacks on Hospitality, Travel Sectors

• Which Security Bugs Will Be Exploited? Researchers Create an ML Model to Find Out

• Don’t let Janet Jackson’s ‘Rhythm Nation’ crash your old laptop

• Google Play malware: If you’ve downloaded these malicious apps, delete them immediately

• Google Patches Chrome’s Fifth Zero-Day of the Year

• Don’t leave open source open to vulnerabilities

• Microsoft: Janet Jackson’s ‘Rhythm Nation’ assigned CVE-2022-38392 for crashing laptops

• North Korean Hackers Use Fake Job Offers to Deliver New macOS Malware

• Quarter of All Gambling Sites Hit by DDoS Attacks in June

• OpenSSF Announces 13 New Members Committed to Strengthening the Security of the Open Source Software Supply Chain

• How to Upskill Tech Staff to Meet Cybersecurity Needs

• The Chatter Podcast: Gone with the Wind, Hitler, and America First with Sarah Churchwell

• Can Trump just declare nuclear secrets unclassified?

• Donald Trump and the Espionage Act

• Top 3 OWASP Vulnerabilities and How to Deal With Them

• A step‑by‑step guide to enjoy LinkedIn safely

• How to Use Signal Encrypted Messaging

• North Korean Threat Group Lazarus Up To Old Tricks With New Malware Attack Targeting Mac OS Systems

• Heimdal® Is a Finalist at the Computing Security Awards 2022 in Eight Categories

• Ring Android app flaw allowed access to camera recordings

• The first ever issue with my Pi-hole, and I don’t know what happened…

• Evasive ‘DarkTortilla’ Crypter Delivers RATs, Targeted Malware

• Russian cyber attacks on Ukraine driven by government groups

• Vulnerability in Amazon Ring app allowed access to private camera recordings

• 4 Ways Technology Is Influencing Social Media

• SynSaber Raises $13 Million for OT Asset and Network Monitoring Solution

• USB “Rubber Ducky” Attack Tool

• Threat Group Ramps-Up Attacks on Travel Sector in 2022

• Here Comes BlackByte Ransomware 2.0

• Streaming Impact On Broadcast TV Revealed In Latest Ofcom Study

• Share Your Check Point Certification Badges Using Blockchain Technology

• Penetration Testing or Vulnerability Scanning? What’s the Difference?

• Hackers Using Bumblebee Loader to Compromise Active Directory Services

• Malicious PyPI Packages Surface, Attack Discord and Roblox

• Hacker stole the records of 5.4 million Twitter users

• Russia-linked cyber groups used commercial security tools to target Ukraine, report states

• Russian Man Extradited to US for Laundering Ryuk Ransomware Money

• Google Cloud Adds Curated Detection to Chronicle

• SentinelOne Partners with Armis for Unparalleled Asset Intelligence

• APT41 group: 4 malicious campaigns, 13 victims, new tools and techniques

• Apple fixes exploited zero-days: Update your devices! (CVE-2022-32894, CVE-2022-32893)

• Car Hacks, Facebook Tracks, and Windows on Macs – Intego Mac Podcast Episode 253

• South Staffordshire Water Confirms Hacker Attack

• Researchers Find 35 Adware Apps on Google Play

• The Family That Mined the Pentagon’s Data for Profit

• Warning!! New Chrome 0-Day Bug Being Exploited In The Wide

• Suspected Russian Money Launderer Extradited to US

• Two Critical Vulnerabilities Patched by Apple

• DigitalOcean Discloses Impact From Recent Mailchimp Cyberattack

• Apple fixed two new zero-day flaws exploited by threat actors

• Organizations are losing cyber insurance as an important risk management tool

• Do you know what your supply chain is and if it is secure?

• Google Address Another Zero-Day Vulnerability In Chrome Browser

• Online scams: The majority of Americans have been targeted

• PoC exploit code for critical Realtek RCE flaw released online

• Ransomware attack on UK water company clouded by confusion

• Deluge of of entries to Spamhaus blocklists includes ‘various household names’

• IoT: The huge cybersecurity blind spot that’s costing millions

• Janet Jackson music video declared a cybersecurity vulnerability

• New Google Chrome Zero-Day Flaw Being Exploited in the Wild

• North Korea hackers impersonating Coinbase to lure employees and customers

• Security automation can save millions otherwise incurred through data breaches

• Janet Jackson music video declared a cybersecurity vulnerability and assigned a CVE

• Web3 is in chaos and metaverses are in their own walled gardens, says Randi Zuckerberg

• How government CISOs tackle digital transformation initiatives

• Why smart factories need to prioritize cybersecurity

• Apple Releases Security Updates to Patch Two New Zero-Day Vulnerabilities

• A pragmatic approach to risk management & resilience

• Are cloud containers a sugar-coated threat?

• The evolution of Zero Trust with AT&T: the ZTNA 2.0 advantage

• Malicious Browser Extensions Targeted Over 7 Million Users

• Raytheon launches secure watch and data service for government and military employees

• Transmit Security expands CIAM capabilities to improve fraud detection and identity verification for users

• Identity crimes reach all-time high

• The factors driving today’s accelerated zero trust adoption

• The State of Security: SIEM in 2022

• Datadog expands support for Microsoft SQL Server and Azure database services

• Safe Security releases two assessment tools to enable discussions about risk and coverage requirements

• Apple patches double zero-day in browser and kernel – update now!

• Stratodesk and Davenport Group collaborate to provide end-to-end IT solutions for enterprises

• Tanium joins Microsoft Intelligent Security Association to strengthen IT security for customers

• IronNet partners with CISA to improve nation’s cyber defense

• How to secure a Windows PC for your kids

• Ransomwater confusion, does the criminal know who the victim is?

• Update Chrome now! Google issues patch for zero day spotted in the wild

• Nearly 2,000 Signal users affected by Twilio phishing attack

• $6 million heist targets video game skin trading site

• 35 malicious apps found on Google Play Store, installed by 2m users

• Veracode launches Velocity Partner Program to help customers with security and development challenges

• Deep Instinct Stratosphere MSSP Program enables organizations to defend against cyber threats

• Steve Won joins 1Password as CPO

• ThreatX raises $30 million to support attack protection across APIs and web apps

• Airiam acquires Vantage Point Solutions to assist SMEs with cybersecurity and MSP support

• China-linked RedAlpha behind multi-year credential theft campaign

• Google, Apple squash exploitable browser bugs

• New Microsoft Defender Products: Threat Intelligence and External Attack Surface Management

• IT Security News Daily Summary 2022-08-17

• How to Stop Local Governments From Being Attractive Cyber Attack Targets

• Understanding ransomware trends to combat threats

• Are deleted files really gone?

• New threat intelligence solution launched by Google Cloud

• Build a culture of action to improve diversity, equity, inclusion and belonging

• Researchers to quantify political polarization

• Make AI accountable by adding redress tools, researchers say

• Report: Facebook Is Failing To Detect Blatant Misinformation Ahead Of 2022 International Elections

• New Linux Exploit ‘Dirty Cred’ Revealed at Black Hat

• Software developer cracks Hyundai car security with Google search

• Software developer cracks Hyundai car encryption with Google search

• eSecurity Planet’s 2022 Cybersecurity Product Awards

• Securing Your Organization During Global Turmoil

• The Emergence of Dynamic Threat Hunting

• Hunting Follina

• Google Chrome Zero-Day Found Exploited in the Wild

• Arrest of a Stalkerware-maker in Australia Underscores Link Between Stalkerware and Domestic Abuse

• GSA adds $25 billion to ceiling value of Alliant 2, sketches out timeline for Alliant 3

• Apple Patches New macOS, iOS Zero-Days

• ‘DarkTortilla’ Malware Wraps in Sophistication for High-Volume RAT Infections

• After 7 years, long-term threat DarkTortilla crypter is still evolving

• What does the federal government buy from data brokers?

• A Parent’s Guide To The Metaverse – Part One

• New Jersey joins multistate effort to clean up voter registration data

• How to create a threat profile, with template

• CISA: Threat actors exploiting multiple Zimbra flaws

• Bugdrop dropper includes features to circumvent Google’s security Controls

• Bad Data “For Good”: How Data Brokers Try to Hide Behind Academic Research

• Is My VPN Working? How To Test for VPN Leaks

• Healthcare Breaches Costliest for 12 Years Running, Hit New $10.1M Record High

• Scientists are turning data into sound to listen to the whispers of the universe (and more)

• Seaborgium targets sensitive industries in several countries

• China-Backed RedAlpha APT Builds Sprawling Cyber-Espionage Infrastructure

• When Countries Are Attacked: Making the Case for More Private-Public Cooperation

• Google fixed a new Chrome Zero-Day actively exploited in the wild

• How to stop the evil lurking in the shadows

• 52 Alarming Cyberbullying Statistics and Facts for 2022

• Analyzing the Hidden Danger of Environment Variables for Keeping Secrets

• GSA’s Dave Zvenyach to exit government

• CISA Warns of Hackers Exploiting Multiple Vulnerabilities in the Zimbra Collaboration Suite

• The Android 13 Privacy Settings You Should Update Now

• The Unlawful U.S. Killing of Ayman al-Zawahri

• Prosecuting Trump: A Reply to Josh Marshall

• Russia launched DDoS attack on Ukraine Nuclear Plant

• Amazon Warehouse Staff In Upstate NY Seek Union Election

• How to Use IP Addresses for Data Protection and Privacy

• Report: Government implementing zero trust architecture faster than corporations

• TikTok wants your trust around US midterm elections data

• Thoma Bravo Closes $6.9B Acquisition of Identity-Security Vendor SailPoint

• SEC Says Brokerage Accounts Hijacked For $1.3m Scam

• Mozilla Finds 18 Of 25 Popular Reproductive Health Apps Leak Data

• Vulnerability Wholesaler Cuts Disclosure Times Over Poor Quality Patches

• Russian Military Uses Chinese Drones And Bots In Combat

• Iranian Hackers Allegedly Exploiting Israeli Entities

• Secure Boot Vulnerabilities Impact Bootloaders, Systems Compromised

• Open-Source VPN Protocols Compared: Why WireGuard is on the Rise!

• APT Lazarus Targets Engineers with macOS Malware

• ThreatX Raises $30 Million in Series B Funding to Accelerate Growth in Global API Protection Market

• Lawmakers Accuse DHS Watchdog Of Obstruction In Probe Of Secret Service Texts

• Users Of Zoom On Macs Told To Update App As Company Issues Security Fix

• “Don’t touch that server. Ralf set that up, and we don’t know what it does.”

• Apple To Start Manufacturing Macbook, Apple Watch In Vietnam

• An experiment showed that the military must change Its cybersecurity approach

• 81% of Malware Seen on USB Drives in Industrial Facilities Can Disrupt ICS: Honeywell

• Vulnerability Broker Applies Pressure on Software Vendors Shipping Faulty, Incomplete Patches

• RubyGems Mandates MFA for Top-100 Package Maintainers

• Streamlining IT security operations with Red Hat Insights and Red Hat Satellite

• How Unmoderated Platforms Became the Frontline for Russian Propaganda

• More People Charged After 2017 Equifax Hack

• Report: 94% of CDOs believe data privacy technology increases revenues

• Ransomware is still on the rise. Here’s what you need to do to stay safe from hackers

• Spy group abuses Microsoft OneDrive to steal credentials in hack-and-leak campaigns

• The 14 best Labor Day 2022 security camera deals

• Cybercriminals Developing BugDrop Malware to Bypass Android Security Features

• Tesla Allowed To Continue Autonomous Driving Advertising In Germany

• Microsoft Disrupted Russia-Linked APT SEABORGIUM Targeting NATO Countries

• How to deploy the Bitwarden self-hosted server with Docker

• SEC Charges 18 Over Scheme Involving Hacked Brokerage Accounts

• Chrome browser gets 11 security fixes with 1 zero-day – update now!

• Organizations Struggle to Fend Off Cloud and Web Attacks

• 7 Smart Ways to Secure Your E-Commerce Site

• Russia-Ukraine cyberwar creates new malware threats

• CHEQ helps ecommerce businesses fake out the ‘fake web’

• Black Hat USA 2022 and DEF CON 30

• Securing OT That Can’t Be Patched

• SOC Analyst Training – Cyber Attack Intrusion Analysis With SIEM Tools|From Scratch To Advanced

• Security Analysis Leads to Discovery of Vulnerabilities in 18 Electron Applications

• The Future of Endpoint Management

• Quarterly Security Patches Released for Splunk Enterprise

• Iranian Group Targeting Israeli Shipping and Other Key Sectors

• New Google Chrome Zero-Day Vulnerability Being Exploited in the Wild

• Expert Commentary: Thousands Of Exposed VNC Instances Exposed

• UK Water Suppliers Hacked But Hackers Extort Wrong Victim

• Creating A Culture Of Cybersecurity

• Microsoft makes tamper protection for macOS endpoints widely available

• Black Hat USA 2022: Are Cybersecurity Tool Standards on the Way?

• Identity Scams Soar to Make 2021 a Record Year

• Squish The Phish: Teaching Your Staff About Cyber Security To Slash Phishing Attacks, Experts Weigh In

• Irdeto And Clavister To Bring Enhanced Security To The Connected Transport Industry

• Google Patches Fifth Exploited Chrome Zero-Day of 2022

• Fugitive Arrested After 3 Years on Charges Related to BEC Scheme

• Lean Security 101: 3 Tips for Building Your Framework

• Researchers Link Multi-Year Mass Credential Theft Campaign to Chinese Hackers

• Zoom Exploit on MacOS

• Google Defamation Ruling Overturned By Australian High Court

• GCP, therefore IAM

• Everything You Should Know About Trading

• Kubescape boosts Kubernetes scanning capabilities

• Windows, Linux and macOS Users Hit by Chinese Iron Tiger

• Microsoft: Phishing Alert Over Russian-Related Threats

• Apple Orders Staff Back To Office, Three Days A Week

• Security Firms Find Over 20 Malicious PyPI Packages Designed for Data Theft

• USBs Still a Major OT Infection Vector

• Job Seekers Targeted in Lazarus Group Hack

• 6 Ways Mobile Devices Have Changed the Gaming Industry

• Malicious Browser Extensions Targeted Over a Million Users So Far This Year

• SitePoint – 1,021,790 breached accounts

• Silicon UK In Focus Podcast: Configuring Security

• Bug Bounty Giant Slams Quality of Vendor Patching

• Portable Speakers Vs. Bookshelf Speakers For Online Classes?

• North Korea-linked APT targets Job Seekers with macOS malware

• Improve Your Middle Schooler’s Digital Literacy | Avast

• What is Configuration Drift?

• Mozilla finds 18 of 25 popular reproductive health apps leak data

• Cyber Security Management System (CSMS) for the Automotive Industry

• North Korea Hackers Spotted Targeting Job Seekers with macOS Malware

• ÆPIC Leak is the first CPU flaw able to architecturally disclose sensitive data

• Zoom fixed two flaws in macOS App that were disclosed at DEF CON

• RubyGems Makes Multi-Factor Authentication Mandatory for Top Package Maintainers

• Kentucky University Facebook account hacked to post inappropriate photos of Woman

• Johnson and Johnson to use Artificial Intelligence to develop drugs

• Russian military uses Chinese drones and bots in combat, over manufacturers’ protests

• Incident response in the cloud can be simple if you are prepared

• Whistic Ranks No. 891 on the 2022 Inc. 5000 With Three-Year Sales Growth of 715%

• For the 2nd Time, Adlumin Appears on the Inc. 5000 List, Three-Year Revenue Growth of 1,113 Percent

• Integral Group and Ross & Baruzzini Come Together Under New Brand, Introba, to Meet Increasing Global Demand for Sustainable, Resilient Engineering

• #ISC2Congress: Empower Your Weekend with Training

• Are SASE and Zero Trust the key for manufacturers grappling with IoT cyber risks?

• What is challenging successful DevSecOps adoption?

• How attackers are exploiting corporate IoT

• D-Wave Reports Second Quarter and First Half 2022 Results and Provides Business Update

• Everbridge Travel Protector informs traveling employees of emerging threats

• RackWare SWIFT 1.2 manages the migration of containerized workloads on Microsoft Azure

• Response-based attacks make up 41% of all email-based scams

• Where Does Cybersecurity Go from Here?

• Microsoft Rolls Out Tamper Protection for Macs

• IRONSCALES partners with Distology to protect organizations from phishing attacks

• Quick Heal collaborates with RevBits to strengthen its cybersecurity portfolio

• 1Kosmos and Simeio join forces to provide customers with passwordless MFA and verified identity

• Kubernetes security incidents are on the rise – what can you do about it?

• Introducing Malwarebytes Cloud Storage Scanning: How to scan for malware in cloud file storage repositories

• CISA and FBI issue alert about Zeppelin ransomware

• What is Private DNS Mode on Android and how do you enable it?

• RubyGems now requires multi-factor auth for top package maintainers

• From Frost & Sullivan: Recognizing Leadership in Secure Web Gateway Solutions

• Catherine Harrell joins BitSight as CMO

• Leveraging smart grid upgrades for broadband buildout

• Massachusetts moves to modernize court IT systems

• Mailchimp suffers second breach in 4 months

• Bad Data “For Good”: How Data Brokers Try to Hide in Academic Research

• IT Security News Daily Summary 2022-08-16

• SEC says brokerage accounts hijacked for $1.3m pump-and-dump scam

• ONCD seeks a lead for U.S. defensive cyber planning and operations

• New missile defense tech comes with acquisition risks

• DomainKeys Identified Mail (DKIM)

• For cyber insurance, some technology leads to higher premiums

• DEF CON: A Woman’s First Experience

• Microsoft Disrupts Russian Group’s Multiyear Cyber-Espionage Campaign

• Are ethical hackers the digital security answer?

• Alert! Over 1,900 Signal User Data Exposed

• Clop Ransomware Gang Breaches Water Utility, Just Not the Right One

• The power of no-code to modernize government

• Key agencies are shedding the exact employees they need to spend new infrastructure dollars

• Zero Day Initiative seeing an increase in failed patches

• Name That Toon: Vicious Circle

• Clop gang targeted UK drinking water supplier South Staffordshire Water

• How to protect your industrial facilities from USB-based malware

• Threat Actors Exploiting Multiple Vulnerabilities Against Zimbra Collaboration Suite

• Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite

• Synthetic fraud is on the rise. Here’s how governments can combat it

• Fort Worth expands broadband to 40,000 more residents

• How a spoofed email passed the SPF check and landed in my inbox

• DEF CON – “don’t worry, the elections are safe” edition

• BazarCall attack increasingly used by ransomware threat actors

• When Efforts to Contain a Data Breach Backfire

• Threat Actors Exploiting Multiple Vulnerabilities Against Zimbra Collaboration Suite

• Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite

• 5 tips for building a cybersecurity culture at your company

• US offers reward “up to $10 million” for information about the Conti gang

• Twilio Hack -Over 1,900 Signal Users’ Phone Numbers were Exposed in the Data Breach

• CISA director looking for ‘unlikely’ partnerships in cyber fight

• USDOT awards funding for tech infusion to transit, highway systems

• Former Twitter Employee Guilty of Spying on Behalf of Saudi Arabia

• Critical Vulnerability in Google’s Titan M Chip Earns Researchers $75,000

• The Future of CyberSecurity is Prevention

• Two Additional Malicious Python Libraries Found on PyPI Repository

• With Plunge in Value, Cryptocurrency Crimes Decline in 2022

• Fake Droids: Your New Android Device is Actually an Old Android 6

• Email Threat Report for 2022 via Abnormal Security

• Onapsis Featured on 2022 Inc. 5000 List of Fastest Growing Companies for the Second Consecutive Year

• AuditBoard Launches Third-Party Risk Management Solution, Empowering Enterprises to Tackle IT Vendor Risk at Scale

• Penetration Testing as a Service (PTaaS): the evolution of Penetration Testing at AT&T

• Does it Matter What (if Anything) Trump Declassified?

• Contending With IRGC Plots

• Prince William could steal Loudoun’s title of Data Center Alley. But land use battles are raging.

• Healthcare Provider Issues Warning After Tracking Pixels Leak Patient Data

• Windows Vulnerability Could Crack DC Server Credentials Open

• ÆPIC and SQUIP Vulnerabilities Found in Intel and AMD Processors

• U.K. Water Supplier Hit With Clop Ransomware Attack

• South Staffordshire Water Confirms Cyberattack

• Ransomware & RDDoS, Why They Are Similar but Different

• The most hated people on the internet: Where are they now?

• Scammers are using this sneaky tactic to trick you into handing over bank details and passwords

• How to use Sendinc to encrypt your emails

• Do you know what’s happening on your users’ devices?

• U.K. Water Supplier Hit with Clop Ransomware Attack

• Ransomware Group Claims Access to SCADA in Confusing UK Water Company Hack

• New Attack Weaponizes PLCs to Hack Enterprise and OT Networks

• Acuant collaborates with Ping Identity to provide customers with fraud-fighting technology

• AuditBoard Third-Party Risk Management solution empowers teams to manage their overall IT risk

• How to Remediate a Cross-Site WebSocket Vulnerability

• X-Force 2022 Insights: An Expanding OT Threat Landscape

• Microsoft’s macOS Tamper Protection hits general availability

• #DEFCON: Electrovolt Exploits Against Electron Desktop Apps Exposed

• Facebook Scammers Steal Thousands Posing As Restaurant Supplier Brand

• SEPT. 7-9: Ukraine, Election, AI, Cybercrime, 5G Among Topics Explored by 125+ Speakers at 13th Billington Cybersecurity Summit

• Lessons From the Cybersecurity Trenches

• Vulnerability wholesaler cuts disclosure times over poor-quality patches

• CISOs are taking on more responsibilities—and burning out

• DevSecOps adoption is low but packing a punch in user organizations

• #DEFCON: How US Teen RickRolled His High School District

• Over 8,000 Exposed VNC Ports – Major Threat To Critical Infrastructure

• July 2022 Cyber Attack Statistics

• New U.S. Legislation Introduced to Help Small Business Provide Cybersecurity Training

• Argentina’s Judiciary Of Córdoba Hit By PLAY Ransomware Attack

• Callback Phishing Attacks See Massive 625% Growth Since Q1 2021

• The “Cyber Insurance Gap” Is Threatening Most Companies

• In the Fight Against DDoS Attacks, not all PoPs are Created Equal

• 1,900 Signal users exposed: Twilio attacker ‘explicitly’ looked for certain numbers

• Confused cyber criminals have hacked a water company in a bizarre case of mistaken identity

• Xiaomi Phone Bug Allowed Payment Forgery

• Zoom Patches Serious macOS App Vulnerabilities Disclosed at DEF CON

• Signal Discloses Impact From Twilio Hack

• Remotely Controlling Touchscreens

• South Staffordshire Water Latest Target Of Criminal Cyber Attack

• Google releases Android 13 with improved privacy and security features

• Many Ears from Now: 5 Authentication Modalities that Will Blow Your Mind

• Researchers Hacked SpaceX Operated Starlink Satellite Using $25 Modchip

• Report: Hacking is the top cause of data breaches

• Unified Threat Management: The All-in-One Cybersecurity Solution

• New Evil PLC Attack Weaponizes PLCs to Breach OT and Enterprise Networks

• Poor sending practices trigger a tidal wave of informational listings

• Two more malicious Python packages in the PyPI

• Cyber Firm Darktrace Shares Surge on Possible Takeover

• DigitalOcean customers affected by Mailchimp “security incident”

• UK Adults Are Sourcing Their News From TikTok

• US Judge Approves Apple Settlement In Retail Class Action Lawsuit

• New US Export Controls Target China Semiconductor Firms

• Hackers are finding ways around multi-factor authentication. Here’s what to watch for

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of August 8, 2022

• Hybrid Vishing Attacks Soar 625% in Q2

• Microsoft Warns About Phishing Attacks by Russia-linked Hackers

• Over 8000 VNC instances left exposed, researchers find

• Reckon Russian spies are lurking in your inbox? Check for these IOCs, Microsoft says

• What Exposed OPA Servers Can Tell You About Your Applications

• Three Nigerian BEC Fraudsters Extradited From UK to US

• Signal Confirms Roughly 1900 Users Affected by Twilio Breach

• Faraday Future Raises Fresh Backing For Electric SUV Debut

• Ola Plans Premium Electric Car For Indian Market

• Microsoft Disrupts Russian Cyber-Espionage Group Seaborgium

• Sharing personal information online: Do young people overdo it?

• Water Company Says Supply Safe After Ransom Group Claims

• Are Cloud Environments Secure Enough for Today’s Threats?

• Snapchat Hits 1 Million Paid Users Amidst Weak Ad Market

• India’s Mahindra Launches Electric SUVs Based On VW Platform

• Russian State Hackers Continue to Attack Ukrainian Entities with Infostealer Malware

• Russia-linked Gamaredon APT continues to target Ukraine

• 1,900 Signal users exposed following Twilio breach

• Threat in your browser: what dangers innocent-looking extensions hold for users

• Looking for adding new detection technologies in your security products?

• BT Looks To Minimise Disruption Ahead Of Fresh Strikes

• General Monitoring is not the Answer to the Problem of Online Harms

• Phone numbers of 1,900 Signal users exposed as a result of Twilio security breach

• Nearly 1,900 Signal Messenger Accounts Potentially Compromised in Twilio Hack

• WikiLeaks Founder Julian Assange sues CIA for data theft

• Play Ransomware attack news and Extortion Attempt on Water utility

• Sealing Technologies wins $168M Marine Corps cyber contract

• Digital Ocean dumps Mailchimp after attack leaked customer email addresses

• ‘Highly classified’ documents recovered from Mar-a-Lago prompt lawmaker calls for assessment

• CACI Showcases Secure Enterprise Technology at AFCEA TechNet Augusta 2022

• Global Healthcare Technology Leader Renews Multiple Contract Extensions Worth Over $300,000

• Hippo Reports Second Quarter 2022 Financial Results

• MPC22 to Explore The Currency of Change with Digital Commerce Leaders

• Stories from the SOC – Credential compromise and the importance of MFA

• Interpreting the Key Points of The 2022 IBM i Marketplace Survey Results

• How aware are organizations of the importance of endpoint management security?

• Matter protocol: Secure, reliable interoperability for smart home devices

• Why organizations should control Active Directory permissions

• Overcoming the roadblocks to passwordless authentication

• A 5 Step Checklist for Complying with PCI DSS 4.0

• It’s 2022 and there are still thousands of public systems using password-less VNC

• Oh Deere: Farm hardware jailbroken to run Doom

• White Hat Hacker at DefCon Jaikbreaks Tractor to Play Doom

• Donut breach: Lessons from pen-tester Mike Miller: Lock and Code S03E17

• A week in security (August 8 – August 14)

• Court Denies Sen. Lindsey Graham’s Motion to Quash Subpoena

• Lindsey Graham Can’t Ignore a Fulton County Subpoena

• Lawmakers push IRS on backlog and customer service problems

• CISA task force leader calls for increased global cooperation on supply chain risks

• The prevalence of contract workers leaves agencies vulnerable to cyberattacks

• New chief cyber officers take a ‘whole of state approach’ to cybersecurity

• Microsoft disrupts SEABORGIUM ’s ongoing phishing operations

• Three Keys to Turning Data-centric Security Theory into Practice

• IT Security News Daily Summary 2022-08-15

• DEF CON 30: Hackers Come Home to Vibrant Community

• Best SIEM Tools & Software for 2022

• CI/CD Pipeline is Major Software Supply Chain Risk: Black Hat Researchers

• Thoughts on the Mar-a-Lago Search and the President’s Classification and Declassification Authority

• EFF & ACLU Brief: SFPD Violated Surveillance Law by Spying on Protests for Black Lives

• Smart cities grow up

• It’s Time to Rethink Endpoint Security

• Safeguarding Industrial Control Systems Environments

• CIA accused of illegally spying on Americans visiting Assange in embassy

• Black Hat – Windows isn’t the only mass casualty platform anymore

• Black Hat USA 2022: Burnout, a significant issue

• In security, there is no average behavior

• Microsoft Announces Disruption of Russian Espionage APT

• Most Q2 Attacks Targeted Old Microsoft Vulnerabilities

• Transitioning From VPNs to Zero-Trust Access Requires Shoring Up Third-Party Risk Management

• ‘Evil PLC’ Could Turn PLCs Into Attack Vectors

• IoT + Cloud Growth = Greatest Cybersecurity Risk

• Survey: performance, pressure have increased among remote government employees during COVID

• House cyber director: ‘Defense is the new offense’ for cyber

• How to use Dropbox Transfer to securely share files with other people

• Researcher Hacked Space-X Starlink Via A $25 Tool

• Windows, Linux and macOS Users Targeted by Chinese Iron Tiger APT Group

• Improving CX through consistency

• Misinformation ‘harms nearly every element of election administration,’ committee report finds

• Assange Lawyers Sue CIA for Spying on Them

• Credential Theft Is (Still) A Top Attack Method

• VNC instances exposed to Internet pose critical infrastructures at risk

• Announcing Microsoft Dev Box Preview

• Dutch authorities arrest 29-year-old dev with suspected ties to Tornado Cash

• Black Hat 2022 reveals enterprise security trends

• Zoom for Mac patches get-root bug – update now!

• Everything you need to know about the new features in VSS & MVP

• Software Patches Flaw on macOS Could Let Hackers Bypass All Security Levels

• Watch CNBC’s full interview with Guggenheim’s John DiFucci

• Disrupting SEABORGIUM’s ongoing phishing operations

• What is not included in a Cyber Insurance Policy

• XDR Momentum Grows as Industry Calls for Solution to Common Security Challenges

• Open Source OSINT Tools and Techniques

• Authentication and Authorizing for Webservice/ Rest API Calls

• Black Hat 2022: Why machine identities are the most vulnerable

• Luckymouse Uses Compromised MiMi Chat App to Target Windows and Linux Systems

• SOVA Android malware now also encrypts victims’ files

• Black Hat And DEF CON Roundup

• Indian Military Puts Quantum Key Distribution On The Line

• This String Of Emojis Is Actually Malware

• Hacker Conference DEF CON Bans Pro Trump Outlet OAN

• Cisco Confirms Hack: Yanluowang Ransom Gang Claims 2.8GB Of Data

• Six Ways Of Safeguarding Employee Workstations

• Thinking like a cyber-attacker to protect user data

• Guggenheim’s DiFucci reveals what separates good and bad security software companies

• Multilingual Cybersecurity Awareness Training adapted for your needs

• How to become a video game tester

• Black Hat 2022 reveals why machine identities are the most vulnerable

• Thousands of VNC Instances Exposed to Internet as Attacks Increase

• Secure Boot Bypass Flaws Affect Bootloaders of Many Devices Made in Past Decade

• Dutch Authorities Arrest Tornado Cash Developer Following US Sanctions on Crypto Mixer Firm

• $23 Million YouTube Royalties Scam

• America’s Allies and the War in Afghanistan

• Common Smartphone Problems and How to Fix Them Fast

• Prepare for Quantum Encryption Today

• Black Hat and DEF CON Roundup

• How and Why to Apply OSINT to Protect the Enterprise

• Feedzai with Lloyds Banking Group wins Aite-Novarica Fraud Impact Award

• This Android banking malware now also infects your smartphone with ransomware

• Cyble: Over 9,000 VNC Sessions Without a Password Found

• What Is Network-Attached Storage(NAS), and How Does It Work?

• #DEFCON: How Sanctions Impact Internet Operators

• Chinese tech giants share details of their prized algorithms with regulator in unprecedented move

• Cybersecurity Has Never Been More Unstable Than It Is Now

• Google Boosts Bug Bounty Rewards for Linux Kernel Vulnerabilities

• SOVA Android Banking Trojan Returns With New Capabilities and Targets

• IT threat evolution in Q2 2022. Non-mobile statistics

• IT threat evolution in Q2 2022. Mobile statistics

• Software Development: Top Services Affecting Your Business

• Effective Security Using Zero Trust Architecture

• Researchers Noticed a Peak in VNC Attacks – Over 8,000 Servers Exposed Online without a Password

• Space Force takes robot patrol dogs for a walk

• IT threat evolution Q2 2022

• Chinese Cyberspies Use Supply Chain Attack to Deliver Windows, macOS Malware

• Weaponized PLCs Can Hack Engineering Workstations in Attacks on Industrial Orgs

• The State of Quantum Security

• #DEFCON: CISA Director Praises Congress and International Cybersecurity Cooperation

• Disney Brings Ads To Streaming Platform As It Surpasses Netflix

• ESA In Talks With SpaceX Over Launches To Replace Soyuz

• Mercedes-Benz And CATL To Build Massive EV Battery Plant In Hungary

• US Carmakers Warn Over Upcoming Electric Vehicle Incentives

• Russia’s Shuckworm cyber group launching ongoing attacks on Ukraine

• Three Extradited from UK to US on $5m BEC Charges

• Bringing Light to the Dark Web

• Xiaomi Phones’ TEE Vulnerability May Allow Forge Mobile Payments

• Vulnerabilities Found in Xiaomi’s Mobile Payment Software

• Google Fined A$60million in Penalties For Misleading Users on Location Data

• New Study Reveals Serious Cyber Insurance Shortfalls

• Critical Infrastructure at Risk as Thousands of VNC Instances Exposed

• NHS Software Supplier Confirms Ransomware Attack

• Hackers Steal Documents From Defence Companies

• Meta Gathers AI Data As Chatbot Calls Zuckerberg ‘Creepy’

• A new PyPI Package was found delivering fileless Linux Malware

• How Manufacturers Are Adapting to a Post-Covid World?

• What Do QuickTake, iSight, and iBook Have in Common? How Apple Reuses Trademarks

• Software developers, how secure is your software ?

• Comparing Twilio and Slack breach responses

• Newly Uncovered PyPI Package Drops Fileless Cryptominer to Linux Systems

• Iron Tiger APT is behind a supply chain attack that employed messaging app MiMi

• Indian military ready to put long-range quantum key distribution on the line

• Russia to end cyber-attacks on Ukraine after talks with the West

• Ransomware news headlines trending on Google

• How to manage the intersection of Java, security and DevOps at a low complexity cost

• Why it’s past time we operationalized cybersecurity

• Oil and Gas Cybersecurity: Recommendations Part 3

• Black Hat and DEF CON visitors differ on physical risk management

• Ransomware is back, healthcare sector most targeted

• Credential phishing attacks skyrocketing, 265 brands impersonated in H1 2022

• Tackling the dangers of internal communications: What can companies do?

• NetWitness Appoints Industry Veteran Ken Naumann as New CEO

• The 5 best identity theft protection and credit monitoring services of 2022

• 5 tips for spotting and avoiding Pig butchering scams

• Zoom’s latest update on Mac includes a fix for a dangerous security flaw

• Employee’s compromised Google credentials led to Cisco breach

• Epson’s bricked printers highlight the industry’s reparability problem

• Samsung heir pardoned due to South Korean economic needs

• Elon Musk wrote article for China’s internet regulator, hinted at aged care robots

• IT Security News Weekly Summary – Week 32

• IT Security News Daily Summary 2022-08-14

• The problem with our cybersecurity problem

• Cisco Confirms Network Breach After Employee’s Google Account was Hacked

• A flaw in Xiaomi phones using MediaTek Chips could allow to forge transactions

• Responsible use of machine learning to verify identities at scale

• Upcoming Speaking Engagements

• Network Perception CEO Robin Berthier to Speak at SCADA Tech Summit

• Rethinking How the United States Trains Foreign Militaries

• U.S. Bans Crypto Mixing Service Tornado Cash

• Thoughts on the Mar-a-Lago Search

• Microsoft Patch Tuesday August Fixes 120+ Vulnerabilities

• Palo Alto Warns About PAN-OS Vulnerability Under Attack

• Researchers Discover Zimbra Authentication Bypass Flaw Under Attack

• Research Finds Facebook Tracks In-App Browser Activities On iOS Devices

• How to Create a Secure Folder on Your Phone

• How Technology Continues to Improve Card Games

• Copyright and Cyber Security Rules for SoundCloud Creators: How to Promote Your Account Safely?

• Week in review: Cisco hacked, Kali Linux 2022.3 released, Black Hat USA 2022

• Penetration testing

• Tornado Cash Developer Arrested After U.S. Sanctions the Cryptocurrency Mixer

• CISA, FBI shared a joint advisory to warn of Zeppelin ransomware attacks

• Bitter APT and Transparent Tribe Campaigns on Social Media

• Appgate Announces Second Quarter 2022 Financial Results

• Peraton gets second chance at $800M in Social Security IT work

• Playing for All the Jelly Beans at the EFF Benefit Poker Tournament at DEF CON

• A New Tractor Jailbreak Rides the Right-to-Repair Wave

• Killnet Claim They’ve Stolen Employee Data from Lockheed Martin

• ColorTokens partners with Aligned Automation to provide end-to-end solutions for enterprise customers

Generated on 2022-08-21 23:59:23.770714