IT Security News Weekly Summary – Week 34

• IT Security News Daily Summary 2022-08-28

• How to protect your business from cyberattacks with XDR

• DoorDash Data Breach Linked with Twilio Hackers

• Ransomware Resiliency for Storage & Backup: Trends, Threats & Tips

• USMC Cyberspace Ops Redesignated to Information Maneuver OCCFLD

• Atlassian Bitbucket: Vulnerability Spotted Inside Data Center

• Iran Based MuddyWater Attacks Israel Companies

• Montenegro’s State Infrastructure Struck by Cyber Attack Officials

• Experts warn of the first known phishing attack against PyPI

• Cutting Off Financing for the Next Capitol Insurrection

• How to Prevent High Risk Authentication Coercion Vulnerabilities

• Security Affairs newsletter Round 381

• Week in review: RCE bug in GitLab patched, phishing PyPI users, Escanor malware in MS Office docs

• Penetration testing

• New Agenda Ransomware appears in the threat landscape

• How to reduce your exposure & secure your data in the cloud in 5 quick ways

• 5 Signs your WordPress Site is Hacked (And How to Fix It)

• All the Questions You Were Afraid to Ask About SBOM

• Elastic appoints Ken Exner as CPO

• IT Security News Daily Summary 2022-08-27

• Product Review: NISOS Executive Shield

• Collective Resilience in an Era of Data Traps, Digital Borders, and Techtonic Geopolitical Shifts

• DoorDash Data Breach -Third Party Vendor Blamed Over Phishing Attack

• Facebook Parent Settles Suit in Cambridge Analytica Scandal

• Why owning your cybersecurity strategy is key to a safer work environment

• A spyware Rival Intellexa Challenges NSO Group

• Over 130 Organizations Targeted in Okta Phishing Campaign

• Why your org should plan for deepfake fraud before it happens

• Twilio hackers also breached the food delivery firm DoorDash

• What Did We Learn from the Mar-a-Lago Search Warrant Affidavit?

• LastPass Developer Account Compromised, Data Stolen

• Binance Executive: Scammers Created a ‘Deep Fake Hologram’ of him to Fool Victims

• A US Propaganda Operation Hit Russia and China With Memes

• Montenegro Reports Massive Russian Cyberattack Against Govt

• When Windows Lies

• 10 Guidelines And Best Practices For Exceptional Logo Design

• Unprecedented cyber attack hit State Infrastructure of Montenegro

• 77% of security leaders fear we’re in perpetual cyberwar from now on

• Build or Buy your own antivirus product

• Threat actor abuses Genshin Impact Anti-Cheat driver to disable antivirus

• Iranian Hackers Exploiting Unpatched Log4j 2 Bugs to Target Israeli Organizations

• Most Important Cyber Threat Intelligence Tools For Hackers & Security Professionals 2022

• Latest Cyberthreats and Advisories – August 19, 2022

• Penetration Testing as a Service (PTaaS): the evolution of Penetration Testing at AT&T

• A pragmatic approach to risk management & resilience

• AT&T and Lookout expand partnership with launch of Lookout AlienApp

• Are cloud containers a sugar-coated threat?

• Weekly Update 310

• 4 Ways AI Capabilities Transform Security

• French hospital crippled by cyberattack – Week in security with Tony Anscombe

• Traffic overwhelms student loan sites following Biden’s debt relief announcement

• Adlumin promotes Jim Adams to CRO

• Daon collaborates with Neustar to reduce fraud and mitigate call spoofing

• Scammers Made Deepfake AI Hologram of Binance Executive

• Source code of password manager LastPass stolen by attacker

• Adware found on Google Play — PDF Reader servicing up full screen ads

• How IT leaders in Ukraine continue to innovate despite the war

• Critical flaw impacts Atlassian Bitbucket Server and Data Center

• Top Network Detection & Response (NDR) Solutions

• Michigan expands EV charging network with AI-powered partner

• One state maps out its drone-enabled future

• TechCrunch Launches Lookup Tool to Help Android Users Know if Their Device Was Compromised by a Family of Stalkerware Apps

• IT Security News Daily Summary 2022-08-26

• DHS looks to cyber self-assessments over CMMC model

• Autonomous receiver tracks fish to improve hydropower dam operations

• Cloud modernization requires ‘whole of government’ effort

• Could Your Company Survive a Ransomware Attack?

• Facebook Removes Pro-U.S. Disinformation Campaign

• Why the Twilio Breach Cuts So Deep

• Critical Vulnerability Discovered in Atlassian Bitbucket Server and Data Center

• APIs and zero trust named as top priorities for CISOs in 2023

• Atlassian Ships Urgent Patch for Critical Bitbucket Vulnerability

• Trans Youths Need Data Sanctuary

• PyPI warns of first-ever phishing campaign against its users

• In the US, a new approach to counting overdoses

• August 2022 Web Server Survey

• Much-hyped effort to help DHS land cyber talent is slow to make hires

• LastPass Suffers Data Breach, Source Code Stolen

• Now Oktapus gets access to some DoorDash customer info via phishing attack

• Microsoft Alert: APT29 is Back With its New Tool MagicWeb

• Firefox 104 is out – no critical bugs, but update anyway

• Iran-linked Mercury APT exploited Log4Shell in SysAid Apps for initial access

• The FTC Ups the Ante for Federal Privacy Legislation

• Call for Nominations: 2022 Mike Lewis Prize for National Security Law Scholarship

• Austria: Google Breached a EU Court Order

• How to use confidential mode in Gmail to protect sensitive information

• Ransomware Attacks are on the Rise

• DoorDash customer info caught up in Oktapus arms

• Plex Breach: Alerts Users Must Reset Their Passwords

• AttackIQ Academy Wins 2022 SC Awards in Excellence for Best IT Security-related Training Program

• Latest Cyberthreats and Advisories – August 26, 2022

• New to Cybersecurity? Use These Career Hacks to Get a Foot in the Door

• LATEST CYBERTHREATS AND ADVISORIES – AUGUST 12, 2022

• Apple flaws put company networks at risk

• LastPass discloses data breach

• ‘Sliver’ Emerges as Cobalt Strike Alternative for Malicious C2

• Lloyd’s excluding nation-state cyber attacks from Cyber Insurance

• Yugabyte’s Fourth Annual Distributed SQL Summit to Feature Sessions Led by Database Experts From Fortune 500 Enterprises

• Iran-Based MuddyWater Targets Log4j 2 Vulnerabilities in SysAid Apps in Israel

• DoorDash Data Compromised Following Twilio Hack

• Twitter, Meta Remove Accounts Linked to US Influence Operations: Report

• The Case for Multi-Vendor Security Integrations

• LastPass Security Breach – Hackers Steal Company’s Source Code

• Embrace change! Chris’s McAfee Journey

• Here’s How to Steer Clear of Bot Accounts on Social Media

• LastPass attackers steal source code, no evidence users’ passwords compromised

• 8 best enterprise accounting software suites

• Cosmetics giant Sephora first to be fined for violating California’s Consumer Privacy Act

• TeamTNT Targeted Cloud Instances and Containerized Environments For Two Years

• LastPass Confirms Security Breach, No User Data Exposed

• Chinese Surveillance Camera Access Is Being Sold

• Nato Investigates Hacker Sale Of Missile Firm Data

• LastPass Source Code, Blueprints Stolen By Intruder

• A Massive Hacking Campaign Stole 10,000 Login Credentials From 130 Different Organizations

• LastPass Developer Account Hacked to Steal the Company’s Source Code

• Infosec4TC Platinum Membership: Cyber Security Training Lifetime Access

• Iranian Government Hackers Exploit Log4Shell in SysAid Apps for Initial Access

• Crypto Firms Say US Sanctions Limit Use of Privacy Software

• Ransomware Operator Abuses Anti-Cheat Driver to Disable Antiviruses

• 0ktapus Phishing Campaign Targets Okta Identity Credentials

• How DevSecOps Empowers Citizen Developers

• ‘No-Party’ Data Architectures Promise More Control, Better Security

• Microsoft: Iranian attackers are using Log4Shell to target organizations in Israel

• Capital One Joins Open Source Security Foundation

• Endpoint Protection / Antivirus Products Tested for Malware Protection

• Massive “0ktapus” Phishing Attack Hits Over 130 Organizations

• LastPass Confirms Hack And Theft Of Source Code

• A Hybrid Approach to Continuous Application Authorization

• Threatening clouds: How can enterprises protect their public cloud data?

• CISA: Action required now to prepare for quantum computing cyber threats

• Latest Cyberthreats and Advisories – August 26, 2022

• Twitter Ordered To Hand Over Data To Elon Musk

• CISA Urges Critical Infrastructure to Prepare for Post-Quantum Cryptography

• New ‘Agenda’ Ransomware Customized for Each Victim

• Security and Cheap Complexity

• LastPass breach: Source code, proprietary tech info stolen

• CISA: Vulnerability in ​​Delta Electronics ICS Software Exploited in Attacks

• Their Photos Were Posted Online. Then They Were Bombed

• SpaceX, T-Mobile To Connect Mobile Phones To Satellites

• What Is WBAdmin and How Does It Work?

• In conversation with Jamie Akhtar, CEO and co-founder of CyberSmart

• Cosmetics Giant Sephora to Pay $1m+ Privacy Settlement

• LastPass Reveal Security Incident

• Hackers Breach LastPass Developer System to Steal Source Code

• OpenText acquires Micro Focus for $6 billion in an all cash transaction

• Block Faces Class Action Suit After 2021 Breach

• Silicon In Focus Podcast: Open Source, Open Security?

• LastPass Hackers Stole Source Code

• GoldDragon campaign: North-Korea linked Kimsuky APT adopts victim verification technique

• Gambling sites are losing significant amounts of revenue due to raising DDoS attacks

• Victory! South Carolina Will Not Advance Bill That Banned Speaking About Abortions Online

• The Impact of Technology on Citizenship Governance

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Cybercrime Groups Increasingly Adopting Sliver Command-and-Control Framework

• 0ktapus phishing campaign: Twilio hackers targeted other 136 organizations

• Hackers using AI Hologram to conduct identity theft

• Russian war on Ukraine has made organizations change cybersecurity tactics

• How fast is the financial industry fixing its software security flaws?

• How complicated access management protocols have impacted cloud security

• New infosec products of the week: August 26, 2022

• Randi Zuckerberg says she’s a ‘big proponent of the real world’ when it comes to parenting

• LastPass discloses August 2022 security breach

• Federal Judge: Invasive Online Proctoring “Room Scans” Are Unconstitutional

• THEOplayer Is Latest Video Player to Integrate with Verimatrix Streamkeeper Multi-DRM

• How cloud computing turned security on its head

• Everything you need to know about the new features in VSS & MVP

• Cybersecurity certifications: Part of your cybersecurity journey

• Semperis Adds Community Tool for Cyber Defenders to Its Arsenal, Focused on Defining a Privileged Perimeter Around Tier 0 Assets

• CISA warns critical infrastructure to prepare for mass post-quantum systems migration

• Alteryx Server-FIPS enables users to scale analytics initiatives across public sector agencies

• Hillstone Networks unveils new firewalls to help enterprises defend against advanced threats

• NAVEX enhances RiskRate to simplify third-party self-registration and onboarding processes

• IT leaders struggling to address identity sprawl

• Tenn Emergency Communications Nominated in 2022 ‘ASTORS’ Awards

• What is doxing and how to protect yourself

• A major European logistics company selects IronNet to improve its operational security

• MSP360 adds Object Lock immutability from Backblaze to help users meet their cloud storage needs

• Federal Judge: Invasive Online Proctoring “Room Scans” Are Also Unconstitutional

• Twitter security under scrutiny after former executive turns whistleblower

• Binance chief says a “sophisticated hacking team” turned him into a deepfake hologram

• Update now! GitLab issues critical security release for RCE vulnerability

• Introducing Patch Management for OneView

• Exploits and TrickBot disrupt manufacturing operations

• How to check the Privacy Report for website tracking in Safari

• Lloyd’s refuses to cover nation-state attacks: What it means to enterprises

• Twitter Ordered to Give Musk Additional Bot Account Data

• LastPass data breach: threat actors stole a portion of source code

• Cisco names Sarah Rae Murphy to its board of directors

• Skyflow and Visa strenghten collaboration to make network tokenization the secure payments standard

• Twilio, Cloudflare just two of 135 orgs targeted by Oktapus phishing campaign

• It Is the Player, but Mostly the Game

• Lloyds refuses to cover nation-state attacks: What it means to the enterprise

• Privacy and security issues associated with facial recognition software

• IT Security News Daily Summary 2022-08-25

• Should You Use DNS Data to Drive Better Security Decisions?

• Lloyds refuses to cover nation-state attacks: What it means to enterprise

• Baltimore police to upgrade cell phone tracking tech

• LastPass source code, blueprints stolen by intruder

• Ransomware defies seasonal trends with increase

• Narrowing the CX gap to deliver the support that today’s public expects

• LastPass Says Source Code Stolen in Data Breach

• Apple expands self-service repair program to M1 MacBooks

• The Family That Mined the Pentagon’s Data for Profit

• Over 80,000 exploitable Hikvision cameras exposed online

• Hackers are using this sneaky exploit to bypass Microsoft’s multi-factor authentication

• Indonesia investigating alleged data breaches at state-owned firms

• How a business email compromise attack exploited Microsoft’s multi-factor authentication

• Mitiga: Attackers evade Microsoft MFA to lurk inside M365

• Bypassing Intel CET with Counterfeit Objects

• Cyber EO One Year Later: Feds Weigh in On Progress, Areas For Improvement

• Cyber Risk Management: The Right Approach Is a Business-Oriented Approach

• Researchers Discover Kimusky Infra Targeting South Korean Politicians and Diplomats

• Tech news you may have missed: August 18 – 25

• Twilio Hackers Scarf 10K Okta Credentials in Sprawling Supply Chain Attack

• StateRAMP exec sees ‘momentum’ for cloud security standardization

• Cybercriminals Are Selling Access to Chinese Surveillance Cameras

• Executive order will guide $52 billion in CHIPS Act funding

• The contractor responsible for the TSP’s troubled recordkeeping transition pledges to improve

• Government electric vehicle efforts requires new charging infrastructure

• Twitter whistleblower report holds security lessons

• SolarWinds Hackers Using New Post-Exploitation Backdoor ‘MagicWeb’

• Technique improves autonomous car navigation in tricky traffic

• Crooks target top execs on Office 365 with MFA-bypass scheme

• How the VA’s adoption of Login.gov is going

• Strange Facebook Bug Spams Users With Celebrity Posts

• Nobelium APT uses new Post-Compromise malware MagicWeb

• Google To Rollout Anti Disinformation Campaign In Eastern Europe

• GitLab Patches Critical RCE in Community and Enterprise Editions

• Upcoming Crimeware is Driven by Cobalt Strike

• ETHERLED – A New Attack Method to Exfiltrate Data from Air-Gapped Devices using LED Indicators

• S3 Ep97: Did your iPhone get pwned? How would you know? [Audio + Text]

• ReasonLabs Launches Free Online Security Tool to Power Secure Web Experience for Millions of Global Users

• Okta Hackers Behind Twilio and Cloudflare Breach Hit Over 130 Organizations

• Third-party Attacks: Hacker’s Exploit Software Networks

• Cisco Talos extends cybersecurity support to Ukraine

• Moderates of the world, unite!

• XIoT Vendors Show Progress on Discovering, Fixing Firmware Vulnerabilities

• Leaked Docs Show Spyware Firm Offering iOS, Android Hacking Services for $8 Million

• Risk & Repeat: Whistleblower spells trouble for Twitter

• More Bang for the Buck: Cross-Platform Ransomware Is the Next Problem

• Cisco Releases Security Updates for Multiple Products

• 0ktapus: Twilio, Cloudflare phishers targeted 130+ organizations

• MERCURY leveraging Log4j 2 vulnerabilities in unpatched systems to target Israeli organizations

• Hyperscraper: A New Tool that Iranian Hackers Use for Stealing E-mails

• Huawei Founder Warns Of Painful Decade

• Microsoft Attributes New Post-Compromise Capability to Nobelium

• Wyden Renews Call to Encrypt Twitter DMs, Secure Americans’ Data From Unfriendly Foreign Governments

• Cisco Releases Security Updates for Multiple Products

• Hackers Steal Data For More Than 15 Million Users From Plex

• Hackers Are Breaking Into And Emptying Cash App Accounts

• Websites Can Identify If You’re Using iPhone’s New Lockdown Mode

• Hackers Leaked Data Anyways After Company Pays Ransom

• The Chatter Podcast: The Moon, Mars, and National Security with Fraser Cain

• Article: What Does Zero Trust Mean for Kubernetes?

• VMware Flaw Let Attackers Escalate Privilege in VMware Tools Suite

• 8 Signs It May Be Time for Parental Controls

• 7 Signs Your Phone Has a Virus and What You Can Do

• How to Remove Personal Information From Data Broker Sites

• Twitter, Meta kill hundreds of pro-Western troll accounts

• Talos Renews Cybersecurity Support For Ukraine on Independence Day

• Cyberstarts Closes $60M in Seed Fund III

• Ransomware Attack Forces French Hospital to Transfer Patients to Other Facilities

• How YouTube’s Partnership with London’s Police Force is Censoring UK Drill Music

• Apple To Unveil iPhone 14 At ‘Far Out’ Event On 7 September

• VMware Flaw Let Attackers Escalate Privilege in VMware Tools Suite of Utilities

• Twilio, Cloudflare Attacked in Campaign That Hit Over 130 Organizations

• Cosmetics Giant Sephora Settles Customer Data Privacy Suit

• Google Open Sources ‘Paranoid’ Crypto Testing Library

• BalkanID Adds $2.3M to Seed Funding Round

• Cisco Patches High-Severity Vulnerabilities in Business Switches

• The (Nation) State of Cyber: 64% of Businesses Suspect They’ve Been Targeted or Impacted by Nation-State Attacks

• U.S. Government Spending Billions on Cybersecurity

• Microsoft Uncovers New Post-Compromise Malware Used by Nobelium Hackers

• Ever present danger

• Black Hat SEO: Is Someone Phishing With Your Site Domain?

• Penetration Testing Market Worth $2.7B By 2027: MarketsandMarkets(TM) Report

• What You Need to Know About the Psychology Behind Cyber Resilience

• Jet2 Warns Customers About Covid Test Scam

• Cato Networks SASE Cloud: “leader” and “OutPerformer” in GigaOm SSA Radar

• Caught up in another password breach? Follow these 3 rules to protect yourself online

• How a business email compromise scam spoofed the CFO of a major corporation

• Optiv’s Annual $40K Scholarship for Black, African-American-Identifying STEM Students Now Open for Applicants

• Scans of Students’ Homes During Tests Are Deemed Unconstitutional

• Stay Calm and Proceed With Caution: The Merari Report on Israeli Police’s Pegasus Scandal

• Should Uncle Sam Worry About ‘Foreign’ Open-Source Software? Geographic Known Unknowns and Open-Source Software Security

• Sephora Agrees to $1.2 Million Settlement Of Data Privacy Charges

• Expert Commentary On The Plex Data Breach

• How YouTube’s Partnership with London’s Police Force is Censoring UK’s Drill Music

• Judge Likely To Dismiss Tesla Bid To Dismiss California Race Lawsuit

• Thousands of Organizations Remain at Risk From Critical Zero-Click IP Camera Bug

• New Exterro FTK Update Accelerates Mobile Digital Forensics

• Dominican Republic Quantum Ransomware, Expert Weighs In

• Twitter Whistleblower To Testify Before Senate Panel

• Plex Breach – Streaming Giant Issues Mass Password Reset to Millions

• Another free CA to use via ACME!

• Microsoft: SolarWinds hackers gain powerful ‘MagicWeb’ authentication bypass

• Hackers are attempting to steal millions of dollars from businesses by bypassing multi-factor authentication

• There’s a problem with online ads, and it’s not what you think

• How Economic Changes and Crypto’s Rise Are Fueling the use of “Cyber Mules”

• Mozilla Patches High-Severity Vulnerabilities in Firefox, Thunderbird

• Twilio, Cloudflare Attacked as Part of Campaign That Hit Over 130 Organizations

• Quantum Ransomware Attack Disrupts Government Agency in Dominican Republic

• Man-in-the-Middle Phishing Attack

• Phishing PyPI users: Attackers compromise legitimate projects to push malware

• Researchers Uncover Kimusky Infra Targeting South Korean Politicians and Diplomats

• Microsoft Details New Post-Compromise Malware Used by Russian Cyberspies

• Musk Lawyers Seize on Twitter Whistleblower Revelations

• EU Report Outlines Cyber Response to Ukraine Invasion

• Plex Breach Exposes Account Data, Including Passwords

• Comparing Face ID, Touch ID, and Passcode Security – Intego Mac Podcast Episode 254

• US Firm Pays $16m to Settle Healthcare Fraud Claims

• Which Is More Secure: Face ID, Touch ID, or a Passcode? – Intego Mac Podcast Episode 254

• Webflow Can Make Your Website More Secure – Here’s How

• Network Penetration Testing (Ethical Hacking) From Scratch – Review

• Workplace Stress Worse than Cyber-Attack Fears for Security Pros

• A lack of endpoint security strategy is leaving enterprises open to attack

• Shout-out to whoever went to Black Hat with North Korean malware on their PC

• Plex warns users to change their passwords after a data breach

• Privacy Activists Target Google Over French ‘Spam’ Emails

• Scammers Create ‘AI Hologram’ of C-Suite Crypto Exec

• Which Is More Secure: Face ID, Touch ID, or a Passcode?

• GAIROSCOPE attack allows to exfiltrate data from Air-Gapped systems via ultrasonic tones

• Do you know what your supply chain is and if it is secure?

• Virginia Consumer Data Protection Act: What You Need to Know?

• Threat actors are using the Tox P2P messenger as C2 server

• China could overtake U.S. in space without ‘urgent action,’ warns new Pentagon report

• Dominican Republic’s Institute Agrario Dominicano suffers Quantum Ransomware Attack

• Cyber Attack on American Streaming Media Plex

• PyPI Repository Warns Python Project Maintainers About Ongoing Phishing Attacks

• Ransomware dominates the threat landscape

• How CISOs can safeguard security in CI/CD environments

• How to navigate payment regulations without compromising customer experience

• We need to think about ransomware differently

• Biden named the next Secret Service director ‘at a critical moment’

• Stories from the SOC – Credential compromise and the importance of MFA

• Top tips for securing board-level buy-in for cybersecurity awareness campaigns

• Why Does Medical Imaging Equipment Need Better Cybersecurity?

• ISACA Conference Oceania Spotlights Digital Trust, Emerging Tech and Regional Trends

• 11:11 Systems to Acquire Cloud Management Services Business from Sungard Availability Services

• Splunk Announces Fiscal Second Quarter 2023 Financial Results

• New U.S. Legislation Introduced to Help Small Business Provide Cybersecurity Training

• #ISC2Congress: Empower Your Weekend with Training

• Most Important Web Server Penetration Testing Checklist

• Cyware adopts Traffic Light Protocol 2.0 to enhance threat intelligence sharing capabilities

• Privitar Modern Data Provisioning Platform provides self-service access to data in real time

• DataMotion No-Code Experience delivers secure content exchange to the customers

• Avast Ransomware Shield for businesses prevents unauthorised access

• Organizations changing cyber strategy in response to nation-state attacks

• House Oversight Dems seek data from social media companies about threats to law enforcement

• Is your personal data all over the internet? 7 steps to cleaning up your online presence

• Google Uncovered Tool used by Iranian APT Hackers to Steal Email Data

• Lessons from the Holy Ghost Ransomware Attacks

• Malwarebytes partners with Revelstoke to automate endpoint detection and response

• Unlocking Serverless with AWS Lambda and IAM

• ZTNA vs VPN: Secure Remote Work & Access – SASE Part 2

• Kimsuky’s GoldDragon cluster and its C2 operations

• LockBit ransomware gang blames victim for DDoS attack on its website

• Kudos and Recognition

• The Presidential Records Act and the Mar-a-Lago Documents

• 6 reasons MSPs need a patch management platform

• How to secure a Mac for your kids

• Reset your password now! Plex suffers data breach

• ChromeOS vulnerability found by Microsoft

• Plex discloses data breach and urges password reset

• Cloud Range RightTrak Cyber Aptitude Assessment improves cybersecurity hiring process

• Contrast Security appoints Tom Kellermann as SVP of Cyber Strategy

• 443ID expands leadership team to meet the needs of a growing customer base

• Quivr raises $3.55 million to help people create a secure digital identity

• Block sued after ex-staffer siphons customer data

• 5 top ailments affecting the healthcare data security infrastructure

• The present and future of FedRAMP

• Adversary Quest 2022 Walkthrough, Part 3: Four PROTECTIVE PENGUIN Challenges

• GitOps and Shift Left Security: The Changing Landscape of DevSecOps

• The Anatomy of Wiper Malware, Part 2: Third-Party Drivers

• Possible cyber regs face fragmented, underfunded water sector

• 3 states get $1M to boost small biz cybersecurity

• Texas launches searchable database of economic development agreements

• IT Security News Daily Summary 2022-08-24

• How to stop social engineering tactics

• homomorphic encryption

• California corrections department hit by cyberattack

• CISA: Just-Disclosed Palo Alto Networks Firewall Bug Under Active Exploit

• 80,000 internet-connected cameras still vulnerable after critical patch offered

• PCI DSS v4.0 is coming, here’s how to prepare to comply

• Calculate Splunk Ingestion Costs Savings when Pre-Processing Data Repository Logs with Imperva DSF

• Efficient ‘MagicWeb’ Malware Subverts AD FS Authentication, Microsoft Warns

• Crypto Miners Using Tox P2P Messenger as Command and Control Server

• Researchers: AiTM Attack are Targeting Google G-Suite Enterprise Users

• Ransomware Gang Demands $10M in Attack on French Hospital

• Preparing Critical Infrastructure for Post-Quantum Cryptography

• Major Database Mess Up Leaves Indian Federal Police and Banking Records Exposed

• Elastic automates security with SOAR, practices open security

• Preparing Critical Infrastructure for Post-Quantum Cryptography

• AiTM phishing campaign also targets G Suite users

• How to Bring the Power of Security Guardrails to Your Application Security Program

• How the NIST is moving ‘trustworthy AI’ forward with its AI risk management framework

• Plex Suffers Data Breach, Warns Users to Reset Passwords

• VMware LPE Bug Allows Cyberattackers to Feast on Virtual Machine Data

• Announcing the Open Sourcing of Paranoid’s Library

• MagicWeb: NOBELIUM’s post-compromise trick to authenticate as anyone

• Proxies and Configurations Used for Credential Stuffing Attacks

• How Russia-Ukraine cyberwar is impacting orgs: Two-thirds say they have been targeted

• New Air Gap-Jumping Attack Uses Ultrasonic Tones and Smartphone Gyroscope

• Breaching airgap security: using your phone’s compass as a microphone!

• War in Ukraine Has Pushed Two-Thirds of Businesses to Change Cyber Strategy

• Cisco Talos — Our not-so-secret threat intel advantage

• #LiveFromUkraine: Oleksandra Povoroznik Talks Language Politics and Wartime Culture

• ‘DarkTortilla’ Crypter Produces Targeted Malware

• What citizens want from a Digital ID Wallet

• Announcing: Code-free API log collection and parser creation

• Ransomware news headlines trending on Google

• Interactive overdose map visualizes evolving public health crisis

• How ransomware attacks target specific industries

• Air-Gapped Devices Can Send Covert Morse Signals via Network Card LEDs

• Looking for the ‘Sliver’ lining: Hunting for emerging command-and-control frameworks

• Data governance: 5 tips for holistic data protection

• Data of 1.3M Patients of Novant Health was Leaked on Meta

• The (Nation) State of Cyber: 64% of Businesses Suspect They’ve Been Targeted or Impacted by Nation-state Attacks

• Cyber Leaders from Israel, Germany, Canada, UK, Ukraine, and US Discuss Collaboration at 13th Billington CyberSecurity Summit

• Cyware Adopts Traffic Light Protocol (TLP) v2.0 to Advance Threat Advisories and Intelligence Sharing

• Developer Visibility Focus Advances at SmartBear with Senior AI and Observability Hires

• Hillstone Networks Targets Cyberattacks at Network Edge with High-End Next Generation Firewall Offerings

• Former Apple Engineer Pleads Guilty To Stealing Driverless Car Data

• VMware confirms Carbon Black causing BSODs, boot loops on Windows

• Iranian cyberespionage group uses new Hyperscrape tool to extract emails from victims’ mailboxes

• VMware Fixes Privilege Escalation Vulnerabilities in VMware Tools

• Unusual Microsoft 365 Phishing Campaign Spoofs eFax Via Compromised Dynamics Voice Account

• External Attack Surface Management Explained

• Playing This Janet Jackson Song May Crash Your Laptop

• How RavenDB Has Earned the Trust of Hundreds of Companies

• McAfee launches Impact Report: How we’re doing and the opportunities ahead

• A new US data privacy bill aims to give you more control over information collected about you – and make businesses change how they handle data

• Plex Confirms Database Breach, Data Theft

• The Dangers of Expansive Public Health Surveillance

• Preemption of State Cybersecurity Laws: It’s Complicated

• How attackers use and abuse Microsoft MFA

• Glitch Sees Facebook Feeds Flooded With Celebrity Spam

• How Can WAF Prevent OWASP Top 10?

• How to conduct a secure code review

• Acronis’ Midyear Cyberthreats Report Finds Ransomware Is the No. 1 Threat to Organizations, Projects Damages to Exceed $30 Billion by 2023

• Nearly 3 Years Later, SolarWinds CISO Shares 3 Lessons From the Infamous Attack

• Agencies are still wrangling over death data

• Twitter Whistleblower Complaint: The TL;DR Version

• IoT Vulnerability Disclosures Up 57% in Six Months, Claroty Reveals

• Guide: How Service Providers can Deliver vCISO Services at Scale

• Cybersecurity Experts On Facebook Glitch

• Fighting Cyber Attackers Earlier to Reduce Risk

• 4 Ways Technology Will Keep You Safe While Gambling Online

• What Kind Of Computer Do You Need To Trade Stocks?

• Ransomware Actor Abuses Genshin Impact Anti-Cheat Driver to Kill Antivirus

• Apple Expands Self Service Repair To MacBooks

• Vishing 101: What’s vishing and how can I protect myself?

• Oversight chair Maloney loses primary

• Attacker snags account details from streaming service Plex

• Class Action Lawsuit Filed Against Oracle Over Data Collection Practices

• Facebook Bug Causes Users’ Feeds to Be Spammed

• CyberRatings.org Announces New Web Browser Test Results for 2022

• Why Empathy Is the Key to Better Threat Modeling

• A-Level Results 2022 – Tech Industry Experts React

• Experts Reaction To Poor Security At Twitter

• Transatlantic Cyber Security Business Network (TCBN) partners with International Cyber Expo 2022

• Plex breached: Change your passwords now

• Peiter ‘Mudge’ Zatko: CSO-turned-whistleblower says Twitter security was in a shambles

• Cybersecurity Breaches, a Wake-up Call for Businesses

• Meta Settles Facebook Location Tracking Lawsuit

• Over 80,000 Unpatched Hikvision Cameras Exposed to Takeover

• Security Pros Believe Cybersecurity Now Aligned With Cyberwar

• Lloyd’s To Exclude Certain Nation State Attacks From Cyber Insurance Policies

• Old, Inconspicuous Vulnerabilities Commonly Targeted in OT Scanning Activity

• French Hospital Diverts Patients Following Cyberattack

• IBM Patches Severe Vulnerabilities in MQ Messaging Middleware

• Hackers Using Fake DDoS Protection Pages to Distribute Malware

• Poll: Cybersecurity Professionals Want Remote Work Options

• This company paid a ransom demand. Hackers leaked its data anyway

• Mudge Files Whistleblower Complaint against Twitter

• The Privacy Flaw Threatening US Democracy

• Critical RCE bug in GitLab patched, update ASAP! (CVE-2022-2884)

• Is TikTok putting an end to Facebook’s dominance?

• Twitter Whistleblower Warns Platform Vulnerable To Foreign Influence

• The Ransomware Playbook Mistakes That Can Cost You Millions

• Researchers Warn of AiTM Attack Targeting Google G-Suite Enterprise Users

• Free Audi MMI Maps and Speedcams Update 2022/2023

• French Billionaire Allowed To Retain BT Stake After Security Review

• ‘Stay vigilant:’ Agencies issue warnings, take new steps to combat wave of threats against feds

• Ransomware Surges to 1.2 Million Attacks Per Month

• Ransomware updates & 1-day exploits

• Researchers Demonstrate New Browser-Powered Desync Attack

• EU Outlines Critical Cyber Response to Ukraine War

• US Healthcare Sector Breaches 342m+ Records Since 2009

• Indicator Of Attack(IoA’s) And Activities – SOC/SIEM – A Detailed Explanation

• Here’s How Attackers Are Circumventing Microsoft’s Multi-factor Authentication, Expert Weighs In

• Rise Of Fraud In Popular Culture Changes UK Consumers’ Outlook On Crime

• Hackers Steal Session Cookies To Bypass Multi-Factor Authentication. Expert Weighs In

• GitLab Issues Patch for Critical Flaw in its Community and Enterprise Software

• VMware fixed a privilege escalation issue in VMware Tools

• BREAKING EXPERT COMMENT: Whistleblower Hands Musk The Key To Twitter

• COMMENT: FBI Warns Cybercriminals Hijacking Home IP Addresses For Credential Stuffing

• DevSpace 6: Client-only developer tool for cloud-native development with Kubernetes

• Cyber Security Management System (CSMS) for the Automotive Industry

• French Hospital Hit By $10M Ransomware Attack, Sends Patients Elsewhere

• Raas Kits Are Hiding Who The Attackers Really Are – Expert Comments

• Over 80,000 Hikvision Cameras Exposed Online

• Businesses get a new layer of protection with Avast Ransomware Shield

• NCSC Shares Guidance to Help Secure Large Construction Projects

• France hospital Center Hospitalier Sud Francilien suffered ransomware attack

• Lloyd’s to exclude certain nation-state attacks from cyber insurance policies

• Microsoft collaborates with Kaspersky for Cyber Threat Intelligence

• Whistleblower claims faults with Twitter Cybersecurity Defense policies

• Lloyd’s to exclude certain nation-state attacks from cyberinsurance policies

• CISOs see little need for a point solution to cover ransomware risk

• New social engineering tactics discovered in the wild

• Is security becoming a priority for DevOps teams?

• Thoma Bravo: Securing digital identities has become a major priority

• University of Technology Sydney Gets Better Support and Security for Oracle Database by Switching to Rimini Street

• OneSpan Wins 2022 SC Award for Best Mobile Security Solution

• LATEST CYBERTHREATS AND ADVISORIES – AUGUST 19, 2022

• Establishing a mobile device vulnerability management program

• How to reduce your exposure & secure your data in the cloud in 5 quick ways

• Grandoreiro Banking Trojan Targeting Automotive, Chemicals Manufacturing Industries

• 5 Things We Learned from The Definitive Guide to Data Loss Prevention (DLP)

• Privacy in Q2 2022: US, Canada, and the UK

• Giant Oak GOST updates empower users to identify money laundering and other illicit activities

• Data Dynamics StorageX9.0 helps customers manage sprawls of unstructured data

• Juniper Networks introduces NaaS capabilities to facilitate adoption of AI-driven networking services

• Lean security 101: 3 tips for building your framework

• 5 Keys To Successful Least Privilege Policy Implementation

• The Most Damning Allegation in the Twitter Whistleblower’s Report

• ImmuniWeb joins Cybersecurity Tech Accord to improve cyber resilience for customers

• Synthesized collaborates with BigID to eliminate the risks of data leakage

• SAS and SingleStore join forces to accelerate data-driven decisions

• SecureAuth prolongs FIDO Alliance membership and commits to FIDO2 certifications standards

• Rippleshot collaborates with Flashpoint to combat card fraud for financial institutions

• Google flags man as sex abuser after he sends photos of child to doctor

• Thousands of Hikvision video cameras remain unpatched and vulnerable to takeover

• National Archives recovered more than 100 classified documents from Trump in January

• Best Open-Source Distributions for Pentesting and Forensics

• The Most Damning Allegation in the Twitter Whistleblower’s Report

• Microsoft publicly discloses details on critical ChromeOS flaw

• HiddenLayer forms a Synaptic Adversarial Intelligence team to explore and uncover ML/AI threats

• Concentric AI names Daniel Emanuele as SVP of Sales

• Billy Evans joins Kivu Consulting as SVP

• Okta appoints Emilie Choi to Board of Directors

• Barmak Meftah joins Stellar Cyber as Board Advisor

• Broadband gains still leave some behind, report says

• The 11 best Labor Day 2022 security camera deals

• Extending broadband from anchor institutions can reduce the homework gap

• Twitter savaged by former security boss Mudge in whistleblower complaint

• DevSecOps Gains Traction — but Security Still Lags

• IT Security News Daily Summary 2022-08-23

• County assessor’s code repository powers transparent government

• 7 guidelines to secure network storage

• DevSecOps Gains Traction — But Security Still Lags

• Mobile app aims to reduce work zone-related crashes

• Thoma Bravo Buying Spree Highlights Hot Investor Interest in IAM Market

• Indonesia’s New Draft Criminal Code Restrains Political Dissent

• Big Technology’s Kantrowitz and Platformer’s Newton on whistleblower claims and the Twitter-Musk deal

• Bill Foster talks digital identity

• DHS commits to better intel sharing with law enforcement, points to mobile app

• VMware Releases Security Update

• ETHERLED and GAIROSCOPE Attacks Allow Data Exfiltration from Air-gapped PC

• 5 Ways to Reset Your Family’s Digital Habits this Summer

• Two tribes receive $50M to boost internet access

• Facebook Reaches $37.5 Million Settlement In Location Tracking Lawsuit

• VMware Releases Security Update

• Apes Gone Phishing

• As The Pandemic Persists, Hospitals Face New Cyber Vulnerabilities

• Escape From D.C.: Analyzing Jan. 6 Venue Transfer Motions

• Researchers Discovered Counterfeit Phones with Backdoor to Hack WhatsApp Accounts

• Privilege Escalation Flaw Haunts VMware Tools

• Guidehouse to acquire Grant Thornton’s public sector arm

• Mudge Blows Whistle on Alleged Twitter Security Nightmare

• The Twitter whistleblower complaint is going to be a key point upcoming litigation, says security expert

• Smartphone gyroscopes threaten air-gapped systems, researcher finds

• Ethernet LEDs Can Be Used to Exfiltrate Data From Air-Gapped Systems

• Ex-Security Chief Accuses Twitter of Cybersecurity Negligence

• GitLab fixed a critical Remote Code Execution (RCE) bug in CE and EE releases

• How to get started with Selenium automation testing

• GitLab Patches Critical Remote Code Execution Vulnerability

• Proofpoint Introduces a Smarter Way to Stay Compliant with New Intelligent Compliance Platform

• Esca RAT Spyware Actively Employed Cybercriminals

• Bogus DDoS Protection Alerts Distribute RATs

• Researcher Uses $25 Custom ModChip to Hack Starlink

• Tesla Loses Challenge Against Race Discrimination Lawsuit By Californian Agency

• Over 80,000 Hikvision cameras can be easily hacked

• CISA Adds Palo Alto Networks’ PAN-OS Vulnerability to Catalog

• Coalfire Federal Among First Authorized to Conduct CMMC Assessments

• One-Third of Popular PyPI Packages Mistakenly Flagged as Malicious

• What Is Mobile Email Management (MEM)?

• Former Twitter security chief files whistleblower complaint, alleges execs misled on spam, security

• Jim Cramer weighs in on new security, spam allegations against Twitter

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• A multidimensional approach to journalism security

• Ragnar Locker Ransomware targets Greece Gas Company

• Report: Financial Institutions Are Overwhelmed When Facing Growing Firmware Security and Supply Chain Threats

• Crystal Group announces 2022 Innovation Scholarship recipients

• Cohesity Highlights Data Management and Data Security Innovations at VMware Explore

• Financial Services Software Has Fewer Security Flaws Than Most Industries

• 4 Cybersecurity Budget Management Tips

• Bitcoin ATMs leeched by attackers who created fake admin accounts

• Air-Gap Attack Exploits Gyroscope Ultrasonic Covert Channel to Leak Data

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Poor healthcare cybersecurity is a threat to public health

• Ex-Security Chief Accuses Twitter of Hiding Major Flaws

• Backdoors Found on Counterfeit Android Phones

• Ransomware Gang Leaks Data Allegedly Stolen From Greek Gas Supplier

• XCSSET Malware Updates with Python 3 to Target macOS Monterey Users

• Google Uncovers Tool Used by Iranian Hackers to Steal Data from Email Accounts

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Beyond Shadow IT: Expert Advice on How to Secure the Next Great Threat Surface

• SE2 Automates Cloud Security with Check Point CloudGuard Security Posture Management

• Immigration Enforcement Priorities and Presidential Duty

• Escape from D.C.: Analyzing Jan. 6 Venue Transfer Motions

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Apple Staff Petition Against Return To Office Order

• Malware in Counterfeit Android Device Attack on WhatsApp and WhatsApp Business

• Counterfeit Android Devices Revealed to Contain Backdoor Designed to Hack WhatsApp

• Charming Kitten APT Wields New Scraper to Steal Email Inboxes

• Novant Health Notifies Patients of Potential Data Privacy Incident

• Meta Takes Offensive Posture With Privacy Red Team

• Apathy is Your Company’s Biggest Cybersecurity Vulnerability — Here’s How to Combat It

• Facing the New Security Challenges That Come With Cloud

• Imperva Data Security Fabric Wins 2022 SC Media Trust Award for Data Security

• SOVA Android Banking Trojan Becomes Even More Powerful

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• The ‘Hottest’ IT Security Technologies in 2022

• Backdoored Counterfeited Android Phones Hacking WhatsApp Accounts

• CISA hosts election security exercise ahead of 2022 midterm elections

• Announcing SOC 2 Compliance for Cisco Secure Endpoint, Cisco Secure Malware Analytics, and Cisco SecureX

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Firewall Bug Under Active Attack Triggers CISA Warning

• Cookie theft threat: When multi-factor authentication is not enough

• ‘DirtyCred’ Vulnerability Haunting Linux Kernel for 8 Years

• Data on California Prisons’ Visitors, Staff, Inmates Exposed

• LockBit Ransomware Site Hit by DDoS Attack as Hackers Start Leaking Entrust Data

• The Rise of Data Exfiltration and Why It Is a Greater Risk Than Ransomware

• Mudge Blows The Whistle On Twitter’s Security

• Priti Patel Urges Meta To Give Up On End-To-End Encryption Plans

• If You Haven’t Patched Zimbra Holes By Now, Assume You’re Toast

• Microsoft Finds Critical Hole In OS That For Once Isn’t Windows

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Ransomware: Most attacks exploit these common cybersecurity mistakes – so fix them now, warns Microsoft

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Security Firm Discloses CrowdStrike Issue After ‘Ridiculous Disclosure Process’

• How to Plant the Right Cybersecurity Seeds to Create Opportunities in IoT

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Managing Risk: Cloud Security Today

• Security Firm Discloses CrowdStrike Issue After ‘Ridiculous Disclosure Process’

• Suspected Iranian Hackers Targeted Several Israeli Organizations for Espionage

• Signal Phone Numbers Exposed in Twilio Hack

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Researcher Launches InAppBrowser Tool to Detect Online Tracking Activity

• Counterfeit Phones Found to Contain Backdoor to Hack WhatsApp

• Media Companies Found Most Susceptible to Compromise

• DESFA Suffers Cyberattack, Ragnar Locker Ransomware Claims Responsibility

• ‘Better than the rest:’ Wall Street cheers Palo Alto Networks earnings beat, forward guidance

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Elon Musk Subpoenas Former Twitter CEO Jack Dorsey

• Ex-Apple engineer pleads guilty to stealing Apple’s car secrets

• Is your personal data all over the internet? 7 steps to cleaning up your online presence

• Configuration Errors to Blame for 80% of Ransomware

• Media Firms Twice as Vulnerable as Cross-Sector Average

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Vodafone To Sell Hungarian Operation For $1.8bn

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Lloyd’s of London To End Insurance For Nation State Cyberattacks

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Hackers Exploited a Zero-day Flaw in Bitcoin ATM Servers to Steal Cryptocurrency

• FBI: Beware Residential IPs Hiding Credential Stuffing

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Take part in this 2022 Ransomware Survey & Win a 4K Samsung Monitor!

• CEO Of Pegasus Maker NSO Group To Step Down

• CISA adds Palo Alto Networks PAN-OS to its Known Exploited Vulnerabilities Catalog

• Credential phishing attacks rise and represent a huge threat to businesses

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Looking for adding new detection technologies in your security products?

• Train to become an ethical hacker for less than $45

• Counterfeit versions of popular mobile devices target WhatsApp and WhatsApp Business

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Scamdemic: We’re in the midst of one — here’s what to do about it

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• USB Pen Drives posing as a great cyber threat to IT Infrastructure

• Ransomware spreading Criminals demanding $10m from Paris Hospital

• 7 open-source malware analysis tools you should try out

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• New Air-Gap Attack Uses MEMS Gyroscope Ultrasonic Covert Channel to Leak Data

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• A closer look at identity crimes committed against individuals

• What businesses can do to anticipate and mitigate ransomware threats

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• The evolution of Zero Trust with AT&T: the ZTNA 2.0 advantage

• Hackers Attack Hotel & Travel Organizations to Steal Sensitive Data

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Lattice to Host Virtual Seminar on 5G Network and ORAN Telecom Security Solutions with FPGAs

• API security incidents occur at least once a month

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Black Hat USA 2022: Key Highlights

• CISA Warns of Active Exploitation of Palo Alto Networks’ PAN-OS Vulnerability

• Remediant PAM+ strategy protects against credential compromise and lateral movement attacks

• Ntrinsec’s key security automation platform removes security risks around encryption key reuse

• DDoS attacks jump 203%, patriotic hacktivism surges

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• PlainID Authorization Platform solves enterprise challenges associated with access control

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Indonesia investigating alleged data breaches at state-owned firms

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Microsoft finds critical hole in operating system that for once isn’t Windows

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• If you haven’t patched Zimbra holes by now, assume you’re toast

• Lockbit leak sites hit by mysterious DDoS attack after Entrust hack

• ForgeRock partners with Secret Double Octopus to extend passwordless and MFA capabilities

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• A week in security (August 15 – August 21)

• Cryptojackers growing in numbers and sophistication

• CISA wants you to patch these actively exploited vulnerabilities before September 8

• Reddit users crowdsourcing explicit images and identities

• Criminals socially engineer their way to bank details with fake arrest warrants

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Victory: Government Finally Releases Secretive Court Rulings Sought By EFF

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Enable Security Teams to Leverage Machine Learning Technologies

• New Proposal Brings Us a Step Closer to Net Neutrality

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Are cloud containers a sugar-coated threat?

• Fake DDoS Protection Alerts Distribute Dangerous RAT

• “She’s Sitting There With Rudy Giuliani”: Fulton County Comes to Colorado

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• SAIC lands $319M Kessel Run program to improve Air Force C2 systems

• Novant Health admits leak of 1.3m patients’ info to Facebook

• How Has Sri Lanka’s Crisis Impacted Indian Ocean Security?

• “She’s sitting there with Rudy Giuliani”: Fulton County Comes to Colorado

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• IT Security News Daily Summary 2022-08-22

• Why getting endpoint security right is crucial

• Palo Alto shares jump, after revenue and earnings beat estimates

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Why Apple products are more vulnerable than ever to security threats

• More than half of OT cyber threats used USB drives, report finds

• Interstate cyber command center expands

• Colorado county recovering from cyberattack

• Hiding a phishing attack behind the AWS cloud

• For Penetration Security Testing, Alternative Cloud Offers Something Others Don’t

• Metasploit Creator Renames His Startup and IT Discovery Tool Rumble to ‘runZero’

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Vulnerability In FreeIPA System Could Expose User Credentials

• Apple Fixed Two Zero-Day Vulnerabilities Affecting Both iOS And macOS

• New report warns of growing ‘data divide’

• Metasploit Creator Renames His Startup and IT Discovery Tool Rumble ‘runZero’

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Warning over Java libraries and deserialization security weaknesses

• TikTok’s In-App Browser Can Monitor Your Activity on External Websites

• More Apps for Younger Users Emerging. Here’s What Parents Need to Know.

• Why automation is crucial for security and compliance

• Java libraries are riddled with deserialization security holes

• Cookie theft threat: When Multi-Factor authentication is not enough

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Security Training: Moving on from Nick Burns Through Better Communication

• Sophos Identifies Potential Tag-Team Ransomware Activity

• Google’s Scans of Private Photos Led to False Accusations of Child Abuse

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Cyber is a team sport–here’s how the public and private sectors can play together

• Vulnerability Summary for the Week of August 15, 2022

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• RTLS Systems Found Vulnerable to MiTM Attacks & Location Manipulation

• CEO of spyware vendor NSO Group steps down

• InQuest: Adding File Detection and Response to the Security Arsenal

• CISA Updates Advisory on Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite

• Vulnerability Summary for the Week of August 15, 2022

• European Cybersecurity in Context: A Policy-Oriented Comparative Analysis

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Attackers using fake Cloudflare DDoS protection popups to distribute malware

• Novant Health Says Malformed Tracking Pixel Exposed Health Data to Meta

• CISA Updates Advisory on Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite

• 8-year-old Linux Kernel flaw DirtyCred is nasty as Dirty Pipe

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• PayPal Invoices Used for Data Theft

• 13 common types of cyber attacks and how to prevent them

• UK Official Says Facebook Risks “Grotesque Betrayal” Of Children If It Doesn’t Create Safeguards Against Abuse

• Secureworks: How To Distinguish Hype From Reality With AI in SecOps

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Laptop denial-of-service via music: the 1980s R&B song with a CVE!

• Group-IB CEO will remain in jail – complaint denied

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• New semiconductor law aims to create ‘Silicon Valleys’ across US

• CEO of Blacklisted Israeli Spyware Maker NSO Steps Down

• Tanium: Taking A Deeper Cut At Converged Endpoint Management

• CISA Adds One Known Exploited Vulnerabilities to Catalog

• 3 Benefits of Using Consolidated Platforms in Cybersecurity

• Hotel and Travel Businesses Attacked by Cybercriminals Using Bogus Reservations

• Microsoft recognized as a Leader in the 2022 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• LockBit gang hit by DDoS attack after threatening to leak Entrust ransomware data

• Onapsis Report: Flaws to be Fixed Immediately

• AT&T and Lookout expand partnership with launch of Lookout AlienApp

• How to protect your organization from ransomware-as-a-service attacks

• CISA Adds One Known Exploited Vulnerabilities to Catalog

• Fake Reservation Links Prey On Weary Travelers

• Why The Pentagon Remains Both The Best And Worst Customer For Tech Innovators

• Israeli Spyware Company NSO Group CEO Steps Down

• Zoom Patches Make-Me-Root Security Flaw, Patches Patch

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Black Hat USA 2022 & DEF CON 30: Highlights, Key Findings & Notable Trends

• Escanor RAT Malware Deployed Via Microsoft Office and PDF Documents

• Pentera Helps Enterprises Reduce Their Security Exposure

• Researchers Find Counterfeit Phones with Backdoor to Hack WhatsApp Accounts

• Your organization needs regional disaster recovery: Here’s how to build it on Kubernetes

• Fake DDoS Protection Prompts on Hacked WordPress Sites Deliver RATs

• Getting started with Red Hat Insights malware detection

• Cisco: All Intelligence is Not Created Equal

• “As Nasty as Dirty Pipe” — 8 Year Old Linux Kernel Vulnerability Uncovered

• Airstrikes, Civilian Casualties, and the Role of JAGs in the Targeting Process

• Hackers Exploit Zero-Day Bug, Steal Crypto from Bitcoin ATMs

• CISA or CVSS: How Today’s Vulnerability Databases Work Together

• How cybersecurity vendors are misrepresenting zero trust

• Fake Reservation Links Prey on Weary Travelers

• Many Media Industry Vendors Slow to Patch Critical Vulnerabilities: Study

• Textile Company Sferra Discloses Data Breach

• Threat Actor Deploys Raven Storm Tool to Perform DDoS Attacks

• Identity Security Pain Points and What Can Be Done

• Encrypted Traffic Analysis: Mitigating Against The Risk Of Encryption

• How Qualys Reduces Risk and Enables Tool Consolidation

• US Government Bans Insecure Software

• Biggest Sovereign Wealth Fund In The World: “Cybersecurity Is #1 Concern”

• Google Play Store Serving Up Chameleon-like Apps

• Expert Commentary: LockBit Ransomware Gang Attacks Entrust

• Lloyds Of London Ends Insurance Coverage For State Cyber Attacks, Expert Weighs In

• Cyber Signals: Defend against the new ransomware landscape

• Barmak Meftah Joins Stellar Cyber, Innovator of Open XDR, as Board Advisor

• Hackers are using this sneaky exploit to bypass Microsoft’s multi-factor authentication

• Microsoft: How we unearthed a critical flaw in ChromeOS, and how Google fixed it

• New Open Source Tool Shows Code Injected Into Websites by In-App Browsers

• Lloyd’s of London Introduces New War Exclusion Insurance Clauses

• Meet Borat RAT, a New Unique Triple Threat

• Fake DDoS protection pages are delivering malware!

• Russian APT Group Attack Microsoft 365 users Abusing Azure Services

• Why are Millennials are more likely to engage in trolling?

• New to Cybersecurity? Use These Career Hacks to Get a Foot in the Door

• A Security Team’s Most Critical Skill? No-Code Automation

• Role of AI and ML in DevOps Transformation

• CEO of Israeli Pegasus Spyware Firm to Step Down

• Microsoft Shares Details on Critical ChromeOS Vulnerability

• Expiring Root Certificates Threaten IoT in the Enterprise

• Hyundai Uses Example Keys for Encryption System

• No, facial recognition AI can’t read your mood

• Cryptojackers Continue to Spread Across Computers Globally

• General Bytes Suffer Cyberattack

• Zero-day Vulnerability Abused by Cybercriminals to Steal Crypto from Bitcoin ATMs

• Inside the World’s Biggest Hacker Rickroll

• Russia Warns Foreign Tech Firms Over Content Law Breaches

• Taiwan Semiconductor Veteran Wary Of ‘Anti-China’ Chip Pact

• Security is hard and won’t get much easier

• RTLS Systems Found Vulnerable to MiTM Attacks and Location Tampering

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of August 15, 2022

• DDoS Protection Weaponized to Deliver RATs

• Escanor malware delivered in weaponized Microsoft Office documents

• Expert Questions Musk Twitter Bot Figures Amidst Legal Battle

• Samsung Breaks Ground On $15bn Semiconductor Complex

• Bitcoin, Cryptocurrencies Wracked By Fresh Volatility

• Xiaomi Posts 20 Percent Sales Drop Amidst Covid Restrictions

• Stablecoin Tether Touts $66.4bn In Reserves After $16bn Sell-Off

• Hackers Target ATM Maker for Bitcoins

• Car Dealership Hit by Major Ransomware Attack

• Businesses expect the government to increase its financial assistance for all ransomware incidents

• Researchers Discover Multiple Vulnerabilities Affecting Ultra-wideband RTLS

• Software developers, how secure is your software ?

• Escanor Malware delivered in Weaponized Microsoft Office Documents

• Hackers Stole Crypto from Bitcoin ATMs by Exploiting Zero-Day Vulnerability

• Donot Team cyberespionage group updates its Windows malware framework

• Zoom patches make-me-root security flaw, patches patch

• Janet Jackson Music video crash hard drives in laptops

• Google blocks worlds largest DDoS Cyber Attacks

• Largest Layer 7 DDOS Attack Recorded By Google with 46 Million Requests Per Second

• New semiconductor law aims to create ‘Silicon Valleys’ across U.S.

• DDoS tales from the SOC

• NSO Group CEO steps down, 100 employees let go too

• A union is urging support for TSA workforce reform in the defense policy bill

• How vulnerable supply chains threaten cloud security

• Disk wiping malware knows no borders

• What type of fraud enables attackers to make a living?

• NSW Telco Authority Extends its Investment in Emergency Management and Community Safety

• LATEST CYBERTHREATS AND ADVISORIES – AUGUST 12, 2022

• Biometrics: The Future of Airport Technology

• Email and cybersecurity: Fraudsters are knocking

• Drata Risk Management provides organizations with a central view of all potential risks

• Fake DDoS protection pages on compromised WordPress sites lead to malware infections

• Critical infrastructure is under attack from hackers. Securing it needs to be a priority – before it’s too late

• IT Security News Weekly Summary – Week 33

• IT Security News Daily Summary 2022-08-21

• Ring App Vulnerability Could Expose User’s Phone Data

• 3 Ways Asset Management Companies Can Reduce Cyber Risk

• A Modern Cybersecurity Fight Requires a Modern Approach to Regulatory Oversight

• Mimecast: Mitigating Risk Across a Complex Threat Landscape

• Spanish Banking Trojan Attacks Various Industry Verticals

• Container vs. VM Security: Which Is Better?

• Threat actors are stealing funds from General Bytes Bitcoin ATM

• Third-party app attacks: Lessons for the next cybersecurity frontier

• Sophos: Employing Stolen Session Cookies to Navigate MFA & Access Networks

• FBI Alerts About Credential Stuffing Attacks, Configurations and Proxies Used

• The Forensic Technology Behind Your Favourite T.V Detectives

• #ISC2Congress Theme: EMPOWER

• The Gender Pay Gap Is a National Security Threat

• Microsoft Facing a Growing Threat by Cryptojackers.

• Banyan Recommends Phased Approach When Introducing Zero Trust

• They both used Apple AirTags to track their possessions. Only one turned out well

• The Low Threshold for Face Recognition in New Delhi

• ZTNA: What Is It, and How Does It Encourage Thinking Like a Hacker?

• Grandoreiro banking malware targets Mexico and Spain

• Week in review: Apple fixes exploited zero-days, 1,900 Signal users exposed, Amazon Ring app vuln

• Penetration testing

• White hat hackers broadcasted talks and hacker movies through a decommissioned satellite

• Most Important Computer Forensics Tools for Hackers and Security Professionals

• Julian Waits and Patrick Duggan join PIXM Board of Directors

Generated on 2022-08-28 23:59:22.976633

Liked it? Take a second to support IT Security News on Patreon!