IT Security News Weekly Summary – Week 34

• IT Security News Daily Summary 2021-08-29

• T-Mobile hacker used brute force attack to steal customers’ data

• Forrester: Why APIs need zero-trust security

• Thinking about CAP or CISSP? Here’s How They Compare.

• Kuo: iPhone 13 to Feature LEO Satellite Communications to Make Calls and Texts Without Cellular Coverage

• 1 GB of data belonging to Puma available on Marketo

• Kuo: iPhone 13 to Feature LEO Connectivity to Make Calls and Texts Without Cellular Coverage

• Scammers Use Fake DMCA Complaints, DDoS Threats to Deploy BazaLoader Malware

• 6 Things You Need to Do to Prevent Getting Hacked

• Apple Watch Series 7 Expected to Feature New Watch Faces to Take Advantage of Larger Displays

• Apple Makes Season One of TV+ Mystery Drama ‘Home Before Dark’ Free to Watch

• Universal Control Works in macOS Monterey Beta 5, But Terminal Commands Required to Enable It

• VPN Unlimited deal: Save 80% on a lifetime subscription for 5 devices

• Fraudsters Pose as Europol Chief in an Attempt to Steal Victims PayPal Account Details

• Boston Public Library Affected by Cyberattack

• The FBI has Issued a Warning About the Hive Ransomware Gang

• Security Affairs newsletter Round 329

• Week in review: ProxyShell and Realtek SDK vulnerabilities exploitation, automated pentesting

• Get Lifetime Access to 24 Professional Cybersecurity Certification Prep Courses

• DDoS attacks target the Philippine human rights alliance Karapatan

• Penetration testing

• Some Synology products impacted by recently disclosed OpenSSL flaws

• Navigating the Troubled Waters of Risk Management

• 3 SSL VPN vulnerabilities disclosed in 2019 are still routinely exploited

• EskyFun data leak, over 1 million Android gamers impacted

• Behavox appoints Fahreen Kurji as Chief Customer Intelligence Officer

• Chris Cochran and Ron Eddings join Axonius as Creative Directors

• IT Security News Daily Summary 2021-08-28

• Deepfakes in cyberattacks aren’t coming. They’re already here.

• I Spy With My Little… Phone? Yes, It Can Happen to You.

• Five iPhone 13 Rumors You May Have Missed

• Cybersecurity in Software Development: The Good Rules to Follow

• I Spy With My Little… Phone?

• Five Steps to Get a Cybersecurity Job

• Earth Baku APT Hackers Group Upgraded Its Hacking Toolset for New Cyberespionage

• T-Mobile’s Security Is ‘Awful,’ Says Purported Thief

• LockFile Ransomware Bypasses Protection Using Intermittent File Encryption

• Microsoft Warns of Widespread Phishing Attacks Using Open Redirects

• Boffins show PIN bypass attack Mastercard and Maestro contactless payments

• This open-source ML model will help you predict vulnerability exploits

• Multiple Vulnerabilities Spotted In elFinder File Manager WordPress Plugin

• Misconfigurations in Microsoft Power Apps Leaked Millions Of Records From Multiple Firms

• California Man Stole 620,000 iCloud Photos in Search of Nudes

• Microsoft Issues an Advisory on ProxyShell Vulnerabilities

• We underestimated IoT security. Let’s not make that mistake with robotics.

• T-Mobile hack: Everything you need to know

• Top Stories: iPhone 13 Nears Launch, Larger Apple Watch?, MacBook Pro and Mac Mini Rumors

• Cisco Published Two Critical and Six High-Severity Patches for Nexus Gear

• CISA Published MARs on Samples Targeting Pulse Secure Devices

• F5 Security Patched Severe Vulnerabilities in its BIG-IP Networking Device

• Phorpiex botnet shuts down and authors put source code for sale

• Build or Buy your own antivirus product

• Atlassian released security patches to fix a critical flaw in Confluence

• Top Free Cybersecurity Tools 2021

• Work from Home Increased Worldwide Phishing Attacks

• Top Cybersecurity Podcasts

• Apache Kafka as Real-Time Backbone for Cybersecurity

• Christopher Krebs: Truth and consequences

• Craig Abod: Taking the pain out of procurement

• DARPA’s Pandemic Protection Program

• Beyond the pandemic: Why are data breach costs at an all‑time high?

• Week in security with Tony Anscombe

• YugabyteDB 2.9 eliminates the need for external load balancers

• 3 Tests to Ensure Zero Trust Network Security

• Action1 RMM enables AllCode to improve the security and efficiency of its remote operations

• Help! I Think My Phone’s Been Hacked

• Cloudflare says it stopped the largest DDoS attack ever reported

• ISACA unveils two audit programs to improve backup and recovery strategies for organizations

• Microsoft Azure Cosmos DB Guidance

• An RCE in Annke video surveillance product allows hacking the device

• Accenture Federal Services hires Portia Crowe as Chief Data Strategy Director for Defense

• Explosion in Geofence Warrants Threatens Privacy Nationwide

• Microsoft Azure Cosmos DB Guidance

• Apple Launches ‘No Sound’ Repair Program for iPhone 12 and 12 Pro Models

• Cisco says it will not release software update for critical 0-day in EOL VPN routers

• Researchers discover critical flaw in Azure Cosmos DB

• What is the Islamic State in Khorasan?

• Lawfare Live: Steve Vladeck and Lindsay Wiley on Public Vaccination Mandates

• Microsoft warns of widespread open redirection phishing attack – which Defender can block, coincidentally

• IT Security News Daily Summary 2021-08-27

• Security alert: The threat is coming from inside your Docker container images

• NIST’s ransomware guidelines look a lot like cyber resilience

• Friday Squid Blogging: Tentacle Doorknob

• What’s New With the Health App in iOS 15: Data Sharing, Lab Result Improvements, COVID Vaccine Records and More

• 38 million records exposed online—including contact-tracing info

• Google Pay team reportedly in major upheaval after botched app revamp

• Intel Foundry Services gets a boost from $100M Pentagon award for US-made chips

• A New Chip Cluster Will Make Massive AI Models Possible

• Whitehat hackers accessed primary keys of Azure’s Cosmos DB customers

• Experts: WH Cybersecurity Summit Should Be Followed by Regulation, Enforcement

• Parallels Offers ‘Inconvenient’ Fix for High-Severity Bug

• T-Mobile offers details of data breach that affected 40M

• Biden orders 2.7% pay raise for civilian feds

• Winning the Cyber-Defense Race: Understand the Finish Line

• How malicious Android apps use social engineering tactics to access Facebook accounts

• T-Mobile CEO Apologizes for Data Breach, Shares Info on Future Security Plans

• Cuba’s central bank now recognizes cryptocurrencies such as bitcoin

• Update on the vulnerability in the Azure Cosmos DB Jupyter Notebook Feature

• Ransomware demands and payments skyrocket

• Google Channels Jony Ive in Ad Promoting Pixel 5a Headphone Jack

• Apple Expands Efforts to Vaccinate Employees, But Doesn’t Mandate Vaccines

• The 4-phase approach smart companies take to mitigate DDoS attacks

• Beginners Guide for Web Scraping Using Selenium

• Building tomorrow’s network today

• App store commission fees scrutinized by South Korea

• Microsoft, Google Among Tech Giants Pledging Big Money to Cybersecurity

• Cuba’s central bank now recognizes cryptocurrencies like bitcoin

• Young People Are the Key to Decreasing the Skills Gap

• VA readies cloud-based data platform

• Best Third-Party Risk Management (TPRM) Tools of 2021

• Apple’s Plan to Scan Photos in Messages Turns Young People Into Privacy Pawns

• MacRumors Giveaway: Win an iPhone, iPod, or Mac Pillow From Throwboy

• What to Expect From the Apple Watch Series 7

• Reorganizing for the Biden agenda at OPM

• 3D-printed barracks opens for Texas Military Department trainees

• T-Mobile CEO apologizes for massive hack, announces cybersecurity deal with Mandiant

• FIN8 Targets US Bank With New ‘Sardonic’ Backdoor

• Top 10 tech and health jobs with the best pay and growth potential

• Microsoft Cloud Databases Exposed

• Ms. Information Vaccine Campaign Launches

• Russians began to complain more often about hacking accounts on Public Services

• ChaosDB, a Critical Cosmos DB flaw affected thousands of Microsoft Azure Customers

• Facebook’s Secret War on Switching Costs

• Critical Azure Cosmos DB Bug Allows Full Cloud Account Takeover

• “Intruders” in the cloud: Microsoft warns “thousands” of Azure customers about potential exposure

• 2021 Q3 Updates from Our Chairperson and CEO: Membership Milestones and More

• Why Privileged Access Management Is So Hard in the Cloud

• Azure Cosmos DB alert: This critical vulnerability puts users at risk

•  ICSJWG 2021 Fall Virtual Meeting

• FBI Releases Indicators of Compromise Associated with Hive Ransomware

• The T-Mobile data breach: A timeline

• Microsoft Warns Cloud Customers Of Potential Breach

• Microsoft warns about phishing campaign using open redirects

• Building a Career in CyberSecurity

•  ICSJWG 2021 Fall Virtual Meeting

• FBI Releases Indicators of Compromise Associated with Hive Ransomware

• Secure. Compliant. Effective. Meeting the Needs of our Federal Customers.

• Man-in-the Middle (MITM) Attack

• Slap on wrist for NCC Group over CREST exam-cheating scandal as infosec org agrees to rewrite NDAs and more

• Important information about Ragnarok Ransomware and Hive Ransomware

• FIN8 Resurfaces with New Sardonic Backdoor

• How to stay secure from ransomware attacks this Labor Day weekend

• New Cyber Warfare Wing Coming to Ohio

• The FBI issued a flash alert for Hive ransomware operations

• Twitter Begins Rolling Out Ticketed Spaces on iOS

• Apple Shares Trailer for Broadway Musical ‘Come From Away’

• Hive Ransomware: Technical Info Released by the FBI

• States pull back on COVID data even amid delta surge

• Ragnarok Ransomware Gang Bites the Dust, Releases Decryptor

• “Intruders” in the cloud: Microsoft warns “thousands” of customers about potential exposure

• Vulnerability Allows Remote Hacking of Annke Video Surveillance Product

• FBI Shares IOCs for ‘Hive’ Ransomware Attacks

• Details of the Recent T-Mobile Breach

• Apple Watch Series 7 Clones Emerge in China

• Notice to Developers: You Could Be Entitled to Between a $250 and $30,000 Payment From Apple

• Three Key Questions to Define ICT Supply Chain Security

• Top Strategies That Define the Success of a Modern Vulnerability Management Program

• Threat Actors Abuse Top 15 Flaws Millions of Times to Target Linux Systems

• Deals: Amazon Drops Price of 256GB M1 MacBook Air to New Low of $849.99 ($149 Off)

• Apple Agrees App Store Deal With Small Developers

• Electronic Code Book (ECB)

• Cybersecurity Is the ‘Core National Security Challenge’ according to Biden at this week’s CEO Summit

• Defining Zero Day Attacks, Exploits, Vulnerabilities

• ‘Pay Ransom’ Screen? Too Late, Humpty Dumpty – Podcast

• Kaseya Patches New 0-Day Vulnerabilities Affecting Unitrends Servers

• Enterprise Technology Management Provider Oomnitza Raises $20 Million

• Making it Safe: IBM and Cisco Partner to Secure Applications

• CCSP vs. Cloud+: How Do They Stack Up?

• In a Hybrid Workplace, Men Are More Likely to Engage in Risky Behavior Than Women: Study

• Amazon to Offer Free Cybersecurity Training Materials, MFA Devices

• OpenSSL Vulnerabilities Impact Various Synology Products

• Tim Cook Lands $750m Bonanza In Share Award

• Parents of teens who stole $1 million in Bitcoin sued by alleged victim

• Engineering PCs Are Concerning Initial Access Vector in OT Attacks

• US charges HeadSpin ex-CEO over fake $1bn valuation scheme

• Google: Here’s how our $10bn investment will boost US cybersecurity

• Microsoft, Google to Invest $30 Billion in Cybersecurity Over Next 5 Years

• Ragnarok Ransomware Victims Receive Decryptor Key After the Gang Decided to Shutdown

• FBI Warns Businesses of New Hive Ransomware

• Ransomware: It’s only a matter of time before a smart city falls victim, and we need to take action now

• Chinese Developer Exposes Data on Over One Million Gamers

• Critical IoT Camera Flaw Allows for Device Hijacking

• Leaked Emails Shows ULA Conspire against Elon Musk and SpaceX

• Kaseya Issues Patches for Two New 0-Day Flaws Affecting Unitrends Servers

• Security Recruiter Directory

• CSO’s guide to the worst and most notable ransomware

• Critical Vulnerability Exposed Azure Cosmos DBs for Months

• Victims of Ragnarok ransomware can decrypt their files for free

• Token-Based Security, OAuth 2.0, OIDC and IdentityServer4

• First Episode of ‘See’ Season Two Premieres on Apple TV+

• Google Could Pay Apple $15 Billion to Maintain Default iOS Search Engine Status in 2021, Suggests Analyst

• Home Affairs believes technological capability not there yet for cryptocurrency travel rule

• Critical Cosmos Database Flaw Affected Thousands of Microsoft Azure Customers

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• FIN8 APT Hackers Attacks Financial Institutions Using Sophisticated Backdoor

• Chinese Android Game Developer Exposes Data of Over 1 Million Gamers

• 73,500 Patients Data was Compromised in a Ransomware Attack on a Singapore Eye Clinic

• Tech CEOs Attend White House Meeting | Avast

• B. Braun Infusomat pumps could be hacked to alter medication doses

• New infosec products of the week: August 27, 2021

• Mobile Security companies are lining up for protection against Pegasus Malware

• UK new information security commissioner is John Edwards

• This Week in Security News – August 27, 2021

• Weekly Update 258

• Your data, your choice

• IndiaMART – 20,154,583 breached accounts

• Trends in the OT/ICS security space and what’s to come

• As China tightens data rules, Xpeng says it’s on the ‘right side’ of regulation

• Let the Games Begin! TikTok Partners with NICE to Attract Young Cybersecurity Professionals

• Asset Visibility – Breaking the Fourth Wall in Cybersecurity

• AWS Web Server Security

• Challenges organizations face when implementing zero trust architecture

• The 4 most common bad bot attack methods targeting financial services

• What is driving organizations to explore emerging technologies?

• GRC solutions revenues to reach nearly $15.2 billion in 2025

• Approov Alliance and Integration Program offers security solutions to protect APIs

• Man impersonates Apple support, steals 620,000 photos from iCloud accounts

• Granulate adds Kubernetes filtering feature to open-source gProfiler

• Bitwarden helps MSPs provide enterprise-ready security solutions to their customers

• Big bad decryption bug in OpenSSL – but no cause for alarm

• Azure’s now-fixed Cosmos DB flaw could have been exploited to read, write any database

• How to Spot Fake Login Pages

• Apple Pays $100 Million to Settle Developer Lawsuit and Agrees to Multiple App Store Changes

• Digital Rights Updates with EFFector 33.5

• Apple Making Multiple App Store Changes to Settle Class-Action Developer Lawsuit

• Fluree collaborates with government entities to ensure data integrity and secure data sharing

• FBI releases alert about Hive ransomware after attack on hospital system in Ohio and West Virginia

• Microsoft Issues ProxyShell Advisory After Attacks Begin

• Elastic acquires Cmd to bring comprehensive cloud runtime security to customers

• DDoS Attack: Definition, Classification, and Prevention

• Comcast Business acquires Masergy to accelerate growth among global enterprise clients

• Amazon Web Services will give free USB security keys to some employees of U.S.-based customers

• Federal Agencies Mostly Use Facial Recognition Tech for Digital Access

• CISA publishes malware analysis reports on samples targeting Pulse Secure devices

• (ISC)² changes its Security Congress event from hybrid to entirely virtual

• Trend Micro strengthens its market presence across AMEA with WeDiscover program

• OSX/Adload: Mac Malware Apple Missed for Many Months

• Private sectors pledge big for cyberdefense

• Experts have revealed the cost of hacking accounts in social networks

• A Bad Solar Storm Could Cause an ‘Internet Apocalypse’

• Mike Althouse joins Green Dot as CCO

• UK Cyber Security Council accepts membership applications from organizations

• When It Comes to Antitrust, It’s All Connected

• History and the Recognition of the Taliban

• IT Security News Daily Summary 2021-08-26

• Argonne unwraps testbed supercomputer to prep for exascale

• FedRAMP leans into OSCAL for streamlining authorizations

• Creating innovative, streamlined and accessible digital experiences

• Whitelisting vs. Blacklisting: Which Is Better?

• Man Sues Parents of Teens Who Hijacked Nearly $1M in Bitcoin

• Hands-On With Samsung’s New $1,800 Galaxy Z Fold 3

• Microelectronics supply chain challenges and zero trust

• Arizona Cops Arrest Fugitive in Police Data Bribery Case

• Report: Facebook Considering Creation Of Election Commission This Fall

• Chicago Inspector General: Using ShotSpotter Does Not Justify Crime Fighting Utility

• Detect Container Drift in Your Kubernetes Deployments

• New variant of PRISM Backdoor ‘WaterDrop’ targets Linux systems

• Elder Scammers Indicted | Avast

• Data Is Quicksand: Does Your Current Data Security Solution Pull You Out or Sink You Deeper?

• Clear and present danger: Why business leaders must prioritize cybersecurity

• GOP lawmakers seek answers on SSA’s acting leadership

• 21-year-old tells WSJ he was behind massive T-Mobile hack

• T-Mobile’s Security is ‘Awful’ Says Hacker Who Stole Data From 50 Million Customers

• F5 BIG-IP Flaw Let Hackers Execute Arbitrary System Commands

• How to create locally signed SSL certificates with mkcert

• Angry Birds Developer Accused of Illegal Data Collection

• Tips for DFIR Analysts

• SpaceX Ships 100,000 Starlink Terminals

• Blue Origin Successfully Completes First Test Flight, After Jeff Bezos Mission

• Naval Criminal Investigative Service Nominated in 2021 ‘ASTORS’ Awards

• FIN8 Hackers Add ‘Sardonic’ Backdoor to Malware Arsenal

• New Version of Classic Mac Game ‘Myst’ Available With M1 Mac Optimization

• Apple Releases New Firmware for AirTags

• How FDX standards are paving the way for open banking in North America (VB Live)

• Chinese developers expose data belonging to Android gamers

• F5 Bug Could Lead to Complete System Takeover

• Cisco fixed a critical flaw in Cisco APIC for Nexus 9000 series switches

• Netflix Now Testing Integrated Mobile Games in Poland

• Afghanistan, Policy Choices, and Claims of Intelligence Failure

• Updates on our continued collaboration with NIST to secure the Software Supply Chain

• Kaseya fixed two of the three Kaseya Unitrends zero-days found in July

• More Than 100 Million People Worldwide Use an Apple Watch

• Widespread credential phishing campaign abuses open redirector links

• Latest iPhone exploit, FORCEDENTRY, used to launch Pegasus attack against Bahraini activists

• Data Poisoning: The Next Big Threat

• Google and mobile operating systems top list of privacy concerns, says Kaspersky

• Microsoft finally issues ProxyShell security advisory

• Latest iPhone exploit, FORCEDENRTY, used to launch Pegasus attack against Bahraini activists

• Engineering Workstations Are Concerning Initial Access Vector in OT Attacks

• Bugs aplenty as VMware, Cisco and F5 drop security updates

• Top Code Debugging and Code Security Tools

• Refurbished M1 Mac Mini With 10Gb Ethernet Now Available

• US government and private sector agree to invest time, money in cybersecurity

• Cybersecurity tips for School and College students in 2021

• Realtek Flaw Exposes Dozens Of Brands To Supply Chain Attacks

• Google, Amazon, Microsoft Unveil Massive Cybersecurity Initiatives After White House Meeting

• How Data Brokers Sell Access To The Backbone Of The Internet

• Publishers Who Adopt Apple News Now Qualify for Reduced Commission on In-App Subscriptions

• Cold wallet, hot wallet, or empty wallet? What is the safest way to store cryptocurrency?

• Cisco Patches Serious Vulnerabilities in Data Center Products

• Cisco Releases Security Updates for Multiple Products

• Tim Cook to Receive $750 Million Worth of Apple’s Stock This Week

• Waymo Opens Self-Driving Taxi Testing In San Francisco

• Tech companies pledge to help toughen US cybersecurity in White House meeting

• UK Cyber Security Council Opens Membership Application Process

• Cisco Releases Security Updates for Multiple Products

• Three New Ways Recorded Future and Splunk Help SecOps Teams Focus on What Matters Most

• Deals: Get Up to $100 Off Apple’s 2021 iPad Pro Lineup on Amazon and B&H Photo

• US Bank Impacted By FIN8 Threat Actor with New Sardonic Backdoor

• Medical Data of 12,000 Patients Exposed Following Revere Health Phishing Attack

• Apple Employees Increasingly Content to Criticize the Company Amid Switch Remote Working and Use of Slack

• Toshiba Consults With Private Equity Firms Over ‘Strategic Ideas’

• S3 Ep47: Daylight robbery, spaghetti trouble, and mousetastic superpowers [Podcast]

• Commentary: Proxyshell Flaws Warning Could Spell Trouble For Unprepared Organisations

• Red & Blue: United We Stand

• Microsoft Breaks Silence on Barrage of ProxyShell Attacks

• Podcast: Ransomware Up x10: Disrupting Cybercrime Suppy Chains an Opportunity

• Top IT Firms CEOs to Attend White House Cybersecurity Meeting

• Personal Information of Entire Swiss Town Leaked Following Cyberattack

• Top Linux Vulnerabilities Exploited by Hackers

• Atlassian Patches Critical Code Execution Vulnerability in Confluence

• Scammers Steal Victims Cryptowallets And NFTs, Posing as OpenSea Agents

• SteelSeries Software Flaw Gives Windows 10 Admin Rights

• Lessons from a Former K-12 Teacher: How Duo Brings Cybersecurity to the Head of the Class

• F5 Releases Critical Security Patches for BIG-IP and BIG-IQ Devices

• The Increased Liability of Local In-home Propagation

• CSTA Turns 400 – Proof That Technology Integrations Is Exactly What You Are Looking For

• First ’45mm’ Apple Watch Bands Spotted Ahead of Series 7 Unveiling [Updated]

• (ISC)² Security Congress 2021 is Now Fully Virtual

• Tech giants pledge at least $30 billion to improve cybersecurity following White House meeting

• UK To Overhaul Data Protection Rules, Targets Cookie Pop-ups

• Enabling Anypoint Identity Management With OKTA SAML 2.0 [Video]

• Cloud storage deal: Get 2TB of storage with end-to-end encryption for only $10

• FBI warns of OnePercent ransomware gang – what you need to know

• New SideWalk Backdoor Targeting U.S. Computer Retailers

• First ’45mm’ Apple Watch Band Spotted Ahead of Series 7 Unveiling

• Cybersecurity for Credit Unions: 4 Ways to Reduce the Risk of the Next Attack

• Beware!! New “WhatsApp mod” Hack Your Mobile To Spy Your Activities & Steal SMS Data

• FluBot Malware Strikes Again

• Microsoft Issues Guidance on ProxyShell Vulnerabilities

• How Threat Detection is Evolving

• Hackers put up for sale the passports of more than 1.3 million Russians

• Interesting Privilege Escalation Vulnerability

• 200,000 More Workers Needed to Manufacture iPhone 13 Ahead of Launch

• Big Tech to invest billions in cybersecurity infrastructure

• XSS: Attack, Defense – and C# Programming

• Preventing Multi-Stage Attacks – Case in Point

• Quantum computers could read all your encrypted data. This ‘quantum-safe’ VPN aims to stop that

• Cybersecurity warning: Realtek flaw exposes dozens of brands to supply chain attacks

• Data protection: UK to diverge from GDPR in post-Brexit overhaul of privacy rules

• CIS Control 1: Inventory and Control of Enterprise Assets

• Vulnerabilities Allow Hackers to Tamper With Doses Delivered by Medical Infusion Pumps

• ‘iPhone 13’ Name Emerges on Alleged Packaging Stickers

• Customers in Sensitive Fields Affected by Critical F5 BIG-IP Vulnerability

• Government Names Candidate for New Information Commissioner

• “Sophisticated” Cyber-Attack Compromises Patient Data at Private Health Clinic

• Java deserialization vulnerabilities explained and how to defend against them

• Tech Giants Make Cybersecurity Pledges After White House Meeting

• Unpatched Microsoft Exchange servers hit with ProxyShell attack

• Quick Hits

• FCW Insider: August 26, 2021

• CISA Details Additional Malware Targeting Pulse Secure Appliances

• New Passwordless Verification API Uses SIM Security for Zero Trust Remote Access

• How We’ve Changed Our Approach to Security and Privacy – Intego Mac Podcast Episode 202

• New US CISO appointments, August 2021

• Record Summer for UK’s Cyber Skills Courses

• Surveillance tech company sues Police Digital Service over ‘flawed’ scoring of bids on £18m contract

• New Zero-Click iMessage Exploit Used to Deploy Pegasus Spyware

• Personal Data and docs of Swiss town Rolle available on the dark web

• VMware Issues Patches to Fix New Flaws Affecting Multiple Products

• Big tech proud as punch about cameos in Joe Biden’s security theatre

• Do you know what your supply chain is and if it is secure?

• VMware addressed 4 High-Severity flaws in vRealize Operations

• Apple Reportedly Increasing iPhone 13 Prices to Compensate for Increased Chip Production Cost

• Countries need to come together and have a global response against cybersecurity threats: ESET

• Vulnerability management is facing three core problems: Here’s how to solve them

• Q&A With Andrew Gardner | Avast

• Atlassian warns of critical Confluence flaw

• Critical Flaw Discovered in Cisco APIC for Switches — Patch Released

• Checking for misconfigurations isn’t enough

• Imavex – 878,209 breached accounts

• Australia passes new data privacy bill for criminals

• Cyber Attack on Crypto Exchange brings $97 million loss to customers

• Medical Data for 12,000 Patients Leaked Following Revere Health Attack

• How to make email safe for business

• US gives Huawei licence approval to buy automotive chips: Report

• PJCIS recommends passage of Bill that will allow incidental collection of Australian data

• Cybersecurity market soaring as threats target commercial and govt organizations

• Containers in the Cloud: Key Benefits and Challenges

• How Avanan helps you reduce phishing and ransomware

• Israeli firm Bright Data named as enabler of Philippines government DDOS attacks on opposition groups

• Private network deployments are slow, the window of opportunity for enterprise 5G is closing

• The Next Disruptive ICS Attacker: Only Time Will Tell

• Employees participating in unethical behaviors to help an organization actually harm themselves

• 38 Million Records Exposed from Microsoft Power Apps

• NS1 NetBox Cloud makes open solution technology available as a SaaS

• Ermetic Platform combines CIEM and CSPM capabilities in one integrated solution

• NICE Enlighten AI for Complaint Management identifies and categorizes consumer complaints

• RingCentral’s capabilities enable employees to communicate and collaborate from anywhere

• Syxsense’s workflows detect and resolve critical IT infrastructure disruptions

• Arcserve enhances StorageCraft Cloud Services Basic for MSPs

• Tecore Network 5G iCore Network in a Box provides macro coverage for deployable networks

• Hack Exposes Personal Data of Entire Swiss Town: Report

• Tech Companies Pledge Billions in Cybersecurity Investments

• Arista Networks expands its routing solutions to the network edge

• White House COVID group extends leave for feds to get vaccinated

• Biden gets Google, Apple, others to join “whole-of-nation” cybersecurity effort

• Advantech collaborates with Lynx to offer Mission Critical Edge Starter Kit for IT/OT convergence

• Vulnerability allowed hackers to tamper medication in infusion pump

• LexisNexis Risk Solutions acquires TruNarrative to help prevent financial crime and fraud

• Tessian partners with Optiv Security to help enterprises secure the human layer

• F5 addressed a flaw in BIG-IP devices rated as critical severity under specific conditions

• CloudBees names two leaders to C-level posts to accelerate growth and operational maturity

• Abnormal Security joins MISA to help customers combat global cybersecurity threats

• Vouched raises $4.5M to deliver online verification service to businesses and governments

• Here’s what CEOs are promising to do to help with U.S. cybersecurity

• Cisco Issues Critical Fixes for High-End Nexus Gear

• Zero Trust Can’t Protect Everything. Here’s What You Need to Watch.

• Apple Plans to Develop Program to Improve Supply Chain Security

• Jesse Kinser joins Pathwire as CISO

• Armory appoints Jim Douglas as CEO

• Sam King joins ZeroFox Board of Directors

• Want to become a white-hat hacker? Here’s what you need to know

• Man Robbed of 16 Bitcoin Sues Young Thieves’ Parents

• White House holds major cyber confab

• Austin mandates COVID vaccine for military

• Google, Microsoft plan to spend billions on cybersecurity after meeting with Biden

• IT Security News Daily Summary 2021-08-25

• Pittsburgh stands up citywide fiber network

• Facial recognition tech: Not just for IDing criminals

• IG council scouting for data analytics tools

• IRS beefs up compute power for fraud detection

• Elastic Q1 revenue tops expectations, offers surprise profit, raises year view

• Australia Passes Identify and Disrupt Bill

• The Stealthy iPhone Hacks That Apple Still Can’t Stop

• What’s New With HomeKit in iOS 15

• Watch as hackers disrupt Iran’s prison computers; leak live footage

• Facing foreign election foes, states hire ‘cyber navigators’

• Report: Facebook Won’t Share Data With Researchers, Academics, Or The White House

• Glitch Exposed Data of Alleged Treaty Violator to FBI

• ProxyLogon flaw, evil emails, SQL injections used to open backdoors on Windows boxes

• What the Norton-Avast Merger Means for Cybersecurity

• Kanye’s upcoming album is a scam magnet, Kaspersky finds

• Revere Health Data Breach Impacts Cardiology Patients

• President Biden meets with business leaders on cybersecurity

• Why supply chain security is a concern for the White House Cyber Summit

• DHS stands up new excepted service for cyber talent

• Win10 Admin Rights Tossed Off by Yet Another Plug-In

• FIN8 group used a previously undetected Sardonic backdoor in a recent attack

• Apple TV+ Shows ‘For All Mankind’ and ‘Calls’ Win Emmy Awards

• Apple to Release iOS 15 iCloud Private Relay as a Public Beta

• SolarWinds and the Holiday Bear Campaign: A Case Study for the Classroom

• Disrupting Cryptocurrencies 2: Lessons From the Poly ‘Hack’

• Lawfare Live: Scott Anderson and David Priess on Afghanistan and What Comes Next

• Intern with Lawfare!

• Cybersecurity is the issue of the decade: IBM chair & CEO Arvind Krishna

• New Campaign Sees LokiBot Delivered Via Multiple Methods

• Poly Network Hacker Returns All Stolen Tokens, Offered Job

• Apple Seeds Seventh Beta of tvOS 15 to Developers

• Apple Seeds Seventh Beta of watchOS 8 to Developers

• Apple Seeds Seventh Betas of iOS and iPadOS 15 to Developers

• The best browsers for privacy and security

• How to Quantify the Actual Cost of a Data Breach for Your Own Organization

• Best security system 2021: Protect your home & office

• Best security camera 2021: Secure your home or office

• Mirai-style IoT botnet is now scanning for router-pwning critical vuln in Realtek kit

• Neural Fuzzing: A Faster Way to Test Software Security

• Watchdog Investigation Finds ‘Major Weaknesses’ in Apple’s App Store Child Safety Measures

• How Has CAP Certification Evolved to Lead in Risk Management?

• This feed has moved and will be deleted soon. Please update your subscription now.

• Names of new ransomware groups that are on rise

• AWS Unveils Cloud Security Competency Program for MSSPs

• Apple Celebrates National Parks With Apple Pay Donations, Apple Watch Challenge, and Park-Related Content

• Drama Series ‘The Changeling’ Coming to Apple TV+

• Cybersecurity’s next fight: How to protect employees from online harassment

• OnlyFans Suspends Decision To Ban Porn Content

• OpenSSL Releases Security Update 

• VMware Releases Security Updates for Multiple Products 

• iPhone 13 May Feature Upgraded Face ID That Works With Masks and Foggy Glasses

• A New iPhone Zero-Click iMessage Zero-Day Used to Deploy Pegasus Spyware

• Best security system 2021: Secure your home or office

• US Media, Retailers Targeted by New SparklingGoblin APT

• HackerOne launches AWS certification paths, pen testing service

• 70% of Cyber Pros Believe Cyber Insurance is Exacerbating Ransomware

• FBI Releases Indicators of Compromise Associated with OnePercent Group Ransomware

• OpenSSL Releases Security Update 

• VMware Releases Security Updates for Multiple Products 

• Surveillance of the Internet Backbone

• Tech and finance leaders head to White House cybersecurity summit

• US Approves Licence For Huawei To Purchase Car Chips – Report

• How safe is a quantum-safe virtual private network?

• Vade Secure Ordered to Pay $14 Million to Proofpoint in IP Theft Lawsuit

• Innovative Recruitment Practices Can Close the Cyber Skills Gap

• F5 Releases August 2021 Security Advisory

• FBI Releases Indicators of Compromise Associated with OnePercent Group Ransomware

• These Four Rising Gangs Could Be Your Next Major Security Threat

• Proofpoint Wins $14 Million In IP Theft Court Battle

• iCloud+’s New Custom Email Domain Feature Now Available in Beta

• White House cybersecurity advisor on meeting with CEOs after wave of high-profile hacks

• F5 Releases August 2021 Security Advisory

• Watch now: 2021 Red Hat Security Symposium on-demand

• Red Hat's open approach to vulnerability management

• The Business of Fraud: SIM Swapping

• Facebook Messenger Celebrates Its 10th Birthday With Poll Games, Birthday Cash Gifting, and More

• Deals: Best Buy Takes $300 Off iPhone 12 Mini and $100 Off iPad Mini

• iPhone Serves as Gateway to iPad and Apple Watch Sales, but Mac, Apple TV, and HomePod Lag Behind

• Want to be a white hat hacker? Train with this $10 bundle deal

• IBM launches new SASE service to bolster zero-trust enterprise security

• VMware Patches High-Severity Vulnerabilities in vRealize Operations

• Apple Preparing to Open First Retail Store in Hunan Chinese Province

• Zoom Updated With ‘Raise Hand’ and ‘Thumbs Up’ Gesture Recognition on iPad

• Win 10 Admin Escalation With Razor Bug – Expert Insight

• Phishing by the numbers – July 2021

• Mice “taking over the world!”, one Windows machine at a time

• Blue Origin Loses Key Staff, Amid NASA Contract Battle – Report

• Three Key Benefits of Adopting SASE With a Services Partner

• Survey: 1 in 4 Facility Managers Experienced OT System Breaches

• Preventing your Cloud ‘Secrets’ from Public Exposure: An IDE plugin solution

• ‘Today at Apple’ Session Explores Taking Expressive Pet Portraits

• Hackers Impersonate OpenSea Employees in an Attempt to Steal Cryptocurrency Assets and NFTs

• COVID19 Vaccine Fraudsters Targeted Health Authorities in 40 Countries

• Researchers Uncover FIN8’s New Backdoor Targeting Financial Institutions

• Lessons from a Former K-12 Teacher: How Duo Brings Cybersecurity to Head of the Class

• Virgin Hyperloop Touts Individual Pod Concept

• Leaked Footage Shows Grim Conditions in Iran’s Evin Prison

• Thinking about CAP or CISSP? Here’s How They Compare.

• Cybersecurity startup investments more than doubled in H1 2021

• California Man Hacked iCloud Accounts to Steal Nude Photos

• Incident Response Firm BreachQuest Launches With $4.4 Million in Seed Funding

• Most Important Network Penetration Testing Tools for Hackers & Security Professionals

• The VC View: Digital Transformation

• Top 10 Best Motherboards for i9 9900K 2021 – Top Picks

• Did you give away your password in the comments section?

• South Korea Moves To Curb In-App Purchase Charges

• Biden, Tech Leaders Eye ‘Concrete Steps’ to Boost Cybersecurity

• Joker Virus is Back, Targeting Android Devices

• YouTube Premium Subscribers Can Now Use iOS Picture-in-Picture: Here’s How

• Medical Records of 12,000 Revere Health Patients Exposed in Phishing Attack

• Security blind spots persist as companies cross-breed security with devops

• Proofpoint awarded $13.5 million in IP theft lawsuit against Vade Secure

• Ransomware: These four rising gangs could be your next major cybersecurity threat

• Misconfigured Microsoft Power Apps Portals Exposed Millions of Records

• Drug Dealers Get 27 Years After Police Crack EncroChat Comms

• B.Braun Infusomat Pumps Could Let Attackers Remotely Alter Medication Dosages

• Popular WhatsApp Mod Spreads Malware on Android Devices

• How Windows admins can get started with computer forensics

• Accelerate Your Journey to AWS with IBM Security

• Cybercrime Losses Triple to £1.3bn in 1H 2021

• Nigerian Threat Actor Offers $1 million to Insiders for Planting Ransomware

• iPhone 13 to Launch on September 17, AirPods 3 on September 30, Claims Report

• Apple Supplier Luxshare Reports Record Growth After Securing iPhone 13 Orders

• Biden to host tech, finance and energy CEOs for security summit at White House

• Tech CEOs to Discuss Cybersecurity with Biden Today

• August 2021 Web Server Survey

• ShinyHunters group claims to have data of 70M AT&T customers

• Radiflow’s risk management platform for OT facilities allows CISOs to view all their sites on one dashboard

• Singapore further eases access to contact tracing devices

• New SideWalk Backdoor Targets U.S.-based Computer Retail Business

• Modified version of Android WhatsApp installs Triada Trojan

• Build your own Android security product

• New SideWalk Backdoor Targets U.S-based Computer Retail Business

• Why you need to make Microsoft 365 a 24/7 security priority

• The Third Generation of XDR Has Arrived!

• We’ve Got Next: Building the “Next” in CyberSecurity

• Palo Alto Networks Named a Leader in the 2021 Forrester ZTNA New Wave

• Samsung could use a TV Block feature to disable any of its TVs worldwide

• SubaGames – 6,137,666 breached accounts

• The Poly Network hack turned into career prospects

• Microsoft offers tips to secure Windows 365 Cloud PCs

• Ransomware news headlines trending on Google

• M1 taps 5G to enrich waterfront lifestyle, operations

• Hybrid work: How do you secure every identity on your network?

• How the pandemic delivered the future of corporate cybersecurity faster

• Coinminers, web shells and ransomware made up 56% of malware targeting Linux systems in H1 2021

• Navigating the Troubled Waters of Risk Management

• 40% of SaaS assets are unmanaged, putting companies at risk for data leaks

• 22% of cybersecurity incidents in H1 2021 were ransomware attacks

• Eatigo – 2,789,609 breached accounts

• Advanced persistent threat protection market to grow steadily by 2026

• 6 ways cybersecurity teams can save time and money

• Australia’s ‘hacking’ Bill passes the Senate after House made 60 amendments

• Votiro unveils solution that empowers enterprises to prevent threats from weaponized files

• The SideWalk may be as dangerous as the CROSSWALK

• Microsoft Power Apps misconfiguration exposes millions of records

• TestFlight for Mac Beta Now Available to Developers

• Agencies’ online forms lack required interactive features

• NSO Group facing renewed backlash after helping repressive Bahraini Government hack iPhones of politicians, activists

• 10 Netflix Hacks Enhance Your Binge-Watching Experience

• A Samsung Galaxy A21 Smartphone Caught Fire on a Plane

• Samsung delivers PIM technology to a wider range of applications

• 38 million records exposed online—including contact-tracing info

• Google Pay team reportedly in major upheaval after botched app revamp

• Intel Foundry Services gets a boost from $100M Pentagon award for US-made chips

• A New Chip Cluster Will Make Massive AI Models Possible

• Schools prepare for cyberattacks against educational institutions

• Privacera partners with StreamSets to strengthen data security for ETL processing in the cloud

• Qumulo partners with HPE to bring high file density node for hyperactive data workloads

• Cloud Security Alliance announces inaugural members of the CSA CxO Trust Advisory Council

• Endace collaborates with Kemp to help security teams reduce incident response times

• Dragos and DNG-ISAC announce initiative to increase security in the natural gas industry

• Chicago Inspector General: Police Use ShotSpotter to Justify Illegal Stop-and-Frisks

• Shravan Goli joins NETGEAR board of directors

• Splunk appoints Pamela Fusco as CISO

• Camilla Törnblom joins Clavister as Marketing Director

• Chris Dimitriadis becomes ISACA’s first Chief Global Strategy Officer

• LS-ISAO establishes Cyber Incident Response Committee to expand threat awareness for law firms

• Fake Apple rep amasses 620,000+ stolen iCloud pics, vids in hunt for images of nude women to trade

• ReliaQuest opens corporate headquarters at Thousand & One in Florida

• Secure Code Warrior’s growth fueled by global demand for security-skilled developers

• Federal 100: Eric Adolphe

• Federal 100: Ron Bewtra

• Endpoint protection: Securing the pieces that make up the whole

• VA readies cloud-based data platform

• Cloud-native incident management streamlines emergency response

• Fake Apple rep stole 620,000+ pics, vids from iCloud accounts in hunt for images of nude women to trade

• CVE-2021-3711 in OpenSSL can allow to change an application’s behavior

• The Limits of Leverage in Taliban-Led Afghanistan

• Fake Apple rep amassed 620,000+ stolen iCloud pics, vids in hunt for images of nude women to trade

• IT Security News Daily Summary 2021-08-24

• Orgs have had the same digital security vulnerabilities for the last 4 years

• OnlyFans Content Creators Are the Latest Victims of Financial Censorship

• Looking Back at Executive Order on Cybersecurity and What it Means for Your Business

• Silver Optis: Innovative and Socially Conscious Technologies at Black Hat

• Five Steps to Get a Cybersecurity Job

• B. Braun updates faulty IV pump after McAfee discovers vulnerability allowing attackers to change doses

• Scammer Infiltrated Thousands of iCloud Accounts to Find Nude Photos

• OnePercent ransomware group hits companies via IceID banking Trojan

• Cyber-thieves Scam New Hampshire Town Out of $2.3m

• 38 million records exposed in Microsoft Power apps misconfiguration

• Poly Network Recoups $610M Stolen from DeFi Platform

• Facebook Backtracks, Releases Shelved Transparency Report That Made The Company Look Bad

• Cybersecurity for Executives: How to Talk About Risk Management

• New CISA Blacklist: What It Means For You

• You can remove or update a single entry from the SSH known_hosts file

• Don’t get rugged: DeFi scams go from zero to $129 million in a year to become top financial hack

• FBI Issues Ransomware Group Flash Alert

• Nokia-Owned SAC Wireless Discloses Data Breach

• Hulu Now Supports HDR on Apple TV for Original Content

• Apple, Amazon, Microsoft CEOs To Discuss Cybersecurity At White House

• US Signs Cybersecurity Agreements with Singapore

• ‘Asphalt 8: Airborne’ and Zelda-Inspired ‘Baldo’ Coming to Apple Arcade on Friday

• Deals: Get 25% Off Mophie Charging Accessories and More During ZAGG’s Sitewide Flash Sale

• Can a VPN Protect You from Hackers? How It Keeps You Secure – And How It Doesn’t

• Pegasus Spyware Uses iPhone Zero-Click iMessage Zero-Day

• South Korea Could Ban Apple From Requiring Developers to Use In-App Purchase System

• Tencent Security Keen Lab: Experimental Security Assessment of Mercedes-Benz Cars

• TMF, cyber EO drive modernization at Labor, CIO says

• Why VA must keep Vista healthy

• WhatsApp New Modified Version Installs Triada Trojan

• Mr. White Returns All $610 Crypto Assets Stolen in Cyberattack

• How a gaming mouse can get you Windows superpowers!

• New zero-click exploit used to target Bahraini activists’ iPhones with NSO spyware

• T-Mobile Wins Title of Fastest U.S. Carrier in 2021 5G Test

• CISA Releases Five Pulse Secure-Related MARs

• CrowdStrike trading higher today ahead of its addition to Nasdaq-100

• Proofpoint wins $14m from ex-VP and French email security rival in IP theft court battle

• Tencent Keen Security Lab joins GENIVI Alliance

• Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars

• CISSPs From Around the Globe: An Interview with Adesoji Ogunjobi

• How to Protect Yourself From a Server-Side Template Injection Attack

• HYCU initiative offers free evaluation for ransomware recovery prospects

• Custom WhatsApp Build Delivers Triada Malware

• Survey: Boards want to invest more in technology, data analytics

• Risk officers and board members don’t agree on use of tech and data in business

• Researchers Warn of 4 Emerging Ransomware Groups

• MAR-10333243-3.v1: Pulse Secure Connect

• CISA Releases Five Pulse Secure-Related MARs

• 38 million personal identifiable information exposed in Microsoft Power Apps data leak

• Joe Biden to meet US Tech companies CEOs to protect National Infrastructure against Cyber Attacks

• Intellectual property protection: 10 tips to keep IP safe

• Tesla’s Elon Musk Says Latest Self-Driving Beta Is ‘Not Great’

• New iOS Zero-Click Exploit Defeats Apple ‘BlastDoor’ Sandbox

• OpenSSL Vulnerability Can Be Exploited to Change Application Data

• MAR-10336935-2.v1: Pulse Secure Connect

• MAR-10333243-3.v1: Pulse Secure Connect

• MAR-10338401-2.v1: Pulse Secure Connect

• MAR-10334057-3.v1: Pulse Secure Connect

• Action is Critical in US Cyber Policy

• Third-Party Risk Management — Don’t Collaborate Without It!

• Google Health Disbanded; Staff Sent To Other Divisions

• FluBot Android malware now targets UK banks

• Singapore and the U.S. Will Work More Closely on Cybersecurity

• APT41 Resurfaces as Earth Baku With New Cyberespionage Campaign

• Kickstart Robust Cloud Security with the Industry’s Best Website Security Checklist

• Microsoft Power Apps misconfiguration exposes data from 38 million records

• Tech CEOs To Meet With Biden Over Infrastructure Security

• Microsoft Spills 38 Million Sensitive Data Records

• Video Shows Moment Iranian Prison Realizes It Was Hacked

• Windows 10 Admin Rights Gobbled By Razer Devices

• Rumor: Apple Watch Series 7 to Come in Larger 41mm and 45mm Sizes

• Hundreds of Thousands of Devices Using Realtek SDK Targeted by Mirai Botnet

• Criminals exploited weak checks and old tech to pull off vast COVID benefit fraud

• OnlyFans Bans ‘Sexually Explicit Content’, Blames Payment Giants

• 13 Million Security Incidents Were Attempted to Hack Linux Systems in 2021

• Overmedicated: Breaking the Security Barrier of a Globally Deployed Infusion Pump

• McAfee Enterprise ATR Uncovers Vulnerabilities in Globally Used B. Braun Infusion Pump

• Hackers Claim to Have Data of 70 Million AT&T Customers

• US Military Personnel Lost Over $822m to Cyber Frauds

• Building a DevSecOps culture and shifting security left

• Spotify Competes With Apple by Expanding Podcast Subscriptions Program

• Cybercriminal Gives Back the Stolen Cryptocurrency and Receives a 500K Reward

• Amazon, Apple and Microsoft CEOs reportedly to attend White House cybersecurity meeting

• Threat Modeling: The Key to Dealing With 5G Security Challenges

• FBI Shares Details on “OnePercent Group” Ransomware Operators

• Triada Trojan in WhatsApp mod

• The Apple Client-Side Scanning System

• Amazon, Apple and Microsoft CEOs to reportedly attend White House cybersecurity meeting

• Realtek-based routers, smart devices are being gobbled up by a voracious botnet

• Microsoft Power Apps Data Leak Impacts 38 Million People

• XDR Firm Hunters Raises $30 Million in Series B Funding

• Deals: All-Time Low Prices Arrive for Apple’s 12.9-inch iPad Pro Magic Keyboard and Smart Keyboard Folio

• Today Marks 10 Years Since Tim Cook Became Apple’s CEO

• More and More Companies Are Getting Hit with Ransomware

• Intezer Analyze Transforms for Maltego

• Hunters advances adoption of its XDR security platform with $30M

• IT Leaders Fear Being Targets of Rising Nation-State Attacks

• Effective Threat-Hunting Queries in a Redacted World

• Details Disclosed for Zoom Exploit That Earned Researchers $200,000

• Hackers Could Up Medication Doses Through Infusion Pump Flaws

• Bahraini Activists Targeted Using a New iPhone Zero-Day Exploit From NSO Group

• Modified Version of WhatsApp for Android Spotted Installing Triada Trojan

• Leaker: Upcoming MacBook Pro to See Price Hike Over Current Model, Equal Performance Across 14 and 16-Inch Sizes

• Iranian Threat Actor Siamesekitten Spies on Israeli Organizations

• Poly Network Thanks ‘Mr. WhiteHat’ For Returning Stolen Crypto Totalling $610 million

• Researchers Warn of 4 Emerging Ransomware Groups That Can Cause Havoc

• Cybersecurity for Executives: How to Talk to Leaders About the Importance of Risk Management

• T-Mobile Sued Over Data Breach Affecting Millions of Customers

• US Organizations Targeted by OnePercent Ransomware Group, FBI Says

• 8 Best Motherboards for Ryzen 5 3600X 2021 – Review and Buying Guide

• 4 most dangerous emerging ransomware threat groups to watch

• Apple Urged To Drop CSAM Scanning Plans By Campaigners

• Fitbit Charge 5 Tracker Design and Features Leaked in New Video

• U.S. State Department Reportedly Hit By Cyber Attack

• UPS Phishing Campaign: Malware Is Distributed By Making Use of an XSS Flaw

• What CISOs need to know about Wi-Fi 6E

• CISA’s Joint Cyber Defense Collaborative: Why it just might work

• Micro Frontend Guide: Technical Integrations

• Nvidia’s ARM Purchase Raises ‘Significant Competition Concerns’ – CMA

• Diversity and Inclusion in Tech

• Microsoft, Google partner on eBPF

• Sumo Logic delivers on SOAR promise it made by acquiring DFLabs

• Apple, Microsoft and Amazon chiefs to meet Biden over critical infrastructure cyber attacks

• Researchers Show How Censorship Systems Can Be Abused for DDoS Amplification

• Mass Exploitation of Exchange Server ProxShell Bugs

• Microsoft Power Apps Tool Exposed 38 Million Records by Default

• Time to Fix High Severity Apps Increases by Ten Days

• Razer Device Plug-In grants Admin Rights on Windows 10 OS

• 38 Million Records Exposed from Microsoft Power Apps of Dozens of Organisations

• Triada Trojan in WhatsApp MOD

• Realtek SDK vulnerability exploitation attempts detected (CVE-2021-35395)

• Nokia Branch SAC Wireless Had Suffered a Data Breach Following a Conti Ransomware Incident

• 8 Free and Open Source Patch Management Tools for Your Company

• The Top 10 Highest Paying Jobs in Information Security – Part 2

• FBI flash alert warns on OnePercent Group Ransomware attacks

• Chinese auto-maker accused of altering data after fatal autonomous car accident

• Looking for adding new detection technologies in your security products?

• 38 Million Records Exposed Due to Microsoft Misconfiguration

• Hacker Behind $600 Million Crypto Heist Returned Stolen Funds

• Realtek SDK flaws exploited to deliver Mirai bot variant

• Three reasons why ransomware recovery requires packet data

• Ransomware tips by CISA

• Google bans the following cryptocurrency apps for data security

• What is the HIPAA Security Rule? Three safeguards to have in place

• Kubescape helps admins manage Kubernetes securely

• How do I select an automated red teaming solution for my business?

• Top Cybersecurity Podcasts

• Security and compliance still a challenge for container architectures

• DLL side-loading Attack Takes Advantage of Windows Search Order to Inject Malicious DLL

• Adverse security implications of enterprises network overprovisioning

• How Tripwire Can Help to Defend Against Ransomware

• IoT market to reach $1.5 trillion by 2027, security top priority

• Zylpha launches Adobe Sign integration for iManage10 to eliminate the risk of documents being lost

• Guardicore Centra enables security teams to stop ransomware and lateral movement

• Palo Alto Networks Cortex XDR 3.0 automates threat detection and investigation across cloud environments

• Konni RAT variant targeting Russia in ongoing attack campaign

• SophosLabs: Research shows BlackMatter ransomware is closely acquainted with DarkSide

• AdvoLogix and iManage provide a cloud-scale solution for the legal industry

• Hackers wipe out Coinbase customer accounts

• Security Camera Hacking: It Can Happen to You. Here’s How to Stop It

• Naval Criminal Investigative Service Nominated in 2021 ‘ASTORS’ Awards

• NICE adds five partners to Evidencentral Marketplace to increase incident response

• Glory partners with Paysafe to improve access to the digital economy for consumers

• Microsoft Spills 38 Million Sensitive Data Records Via Careless Power App Configs

• Facebook Bringing Voice and Video Calling Back to Main App After Moving Them to Messenger

• Apple CEO Tim Cook to Meet With U.S. President Joe Biden to Discuss Cybersecurity

• F5 announces new projects to scale modern application architectures

• Elastic acquires build.security to enforce security actions for cloud native environments

• What You Need to Know About Linux Rootkits>

• Trent Anderson joins Bluebird Network as CRO

• ACI Worldwide reveals that its Fraud Management solution protects more than one billion consumers

• Poly Network says it’s got pretty much all of that $610m in stolen crypto-coins back

• Google issues another security threat warning – fourth time in two months

• Key Takeaways from the Linux Threat Report

• Protecting citizen-facing staff from phishing starts with a people-first approach

• Illinois takes a big hit on COVID-related unemployment fraud

• Price tag on NY’s vaccination app keeps rising

• CISA updates ransomware tips

• Get paid to improve Linux and open-source security

• AT&T Denies Data Breach

• Pentagon pushes ahead with COVID vaccine mandate

• Why zero-trust models should replace legacy VPNs

• Razer to fix Windows installer that grants admin powers if you plug in a mouse

• IT Security News Daily Summary 2021-08-23

• Palo Alto beats Q4 estimates with strength in large customer transactions

• Trend Micro’s Linux Threat Report identifies the most vulnerable distributions and biggest security headaches

• How to create a hidden, nearly undeletable folder in Windows 10

• TippingPoint Threat Protection System Certified by NetSecOPEN

• CISA recommends immediately patch Exchange ProxyShell flaws

• 38 million records exposed by misconfigured Microsoft Power Apps. Redmond’s advice? RTFM

• Olivia Rodrigo Partners With Apple For Custom AR Face Masks Used in New ‘Brutal’ Music Video

• Apple Expands Native Maps Rating and Review Feature to the U.S.

• SSDF: The Key to Defending Against Supply Chain Cyberattacks

• Want to lead in IT? Find a subject to master.

• Microsoft Power Apps misconfiguration exposes 38 million data records

• Poly Network Hacker Returns Remaining Funds

• ACLU Advocate Reining in Government Use of Face Surveillance, Champion of Privacy Rights Research, and Data Security Trainer Protecting Black Communities Named Recipients of EFF’s Pioneer Award

• Pay Now or Pay Later: Don’t Procrastinate When It Comes to Preventing Ransomware

• Biden names slate of FSIP appointees

• ProxyShell Attacks Pummel Unpatched Exchange Servers

• Ransomware Groups Look for Inside Help

• 3 Ways an IP Geolocation API Can Help with Cybersecurity

• CISA: ProxyShell flaws being actively exploited, patch now

• Apple’s ‘The Tragedy of Macbeth’ to Premiere at the London Film Festival

• Do you know what your supply chain is and if it is secure?

• Razer software bug lets anyone gain admin rights on Windows PC

• What’s *THAT* on my 3D printer? Cloud bug lets anyone print to everyone

• Patch now! Microsoft Exchange is being attacked via ProxyShell

• Worried ransomware merchants know more about file storage than you do? You should be…

• Hackers Leak Footage of Iranian Prison

• The Challenges of Understanding Taliban Finance

• Photos: Windows 365 Business in action

• Elastic to Acquire build.security for Cloud Security Expansion

• Vulnerability Summary for the Week of August 16, 2021

• How Vodafone Global Security Director creates an inclusive and secure workplace

• Lockfile Ransomware hackers again targeting Microsoft Exchange Server Vulnerability

• BrandPost: Better Cyber Hygiene is Critical to Preventing a Damaging Cyberattack

• Executive Spotlight: Q&A with Chief Information Officer, Scott Howitt

• Windows 10 Admin Rights Gobbled by Razer Devices

• Vulnerability Summary for the Week of August 16, 2021

• Are you using a Sophos UTM appliance? Be sure it is up to date!

• 2021 Q3 Updates from Our Chairperson and CEO: Membership Milestones and More

• Realtek SDK Vulnerabilities Exploited in Attacks Days After Disclosure

• Apple Shares ‘The Morning Show’ Season 2 Trailer

• What is Ransomware?

• US State Department Reportedly Suffered Cyber Attack

• spear phishing

• MD5

• Managing Privileged Access to Secure the Post-COVID Perimeter

• Windows 365 Business: How this new tool can help your organization

• State Department Allegedly Hit by Cyberattack

• US State Department Hit By Cyber-Attack

• Attackers Actively Exploiting Realtek SDK Flaws

• The US Military May Soon Declassify A Secret Space Weapon

• Crypto Platform Poly Network Says Hacked Funds Returned

• The State Department Has Reportedly Been Hacked

• Ryan Reynolds and Rob McElhenney Demand Ted Lasso Biscuits in Satirical Letter Addressed to Apple TV+

• LockFile Ransomware Exploits PetiPotam To Attack Windows Domains

• Indra Group and Iran Railway Attacks May Be Related

• Report: Cyberattacks on Education Increased by 29% Worldwide

• T-Mobile Customers Sueing the Company Over Data Breach

• Cyber Warfare May be Losing Its Advantage of Deniability

• Cloudflare Mitigated Record-Setting 17.2 Million RPS DDoS Attack

• Private Details of 70M AT&T Users Offered For Sale on Underground Hacking Forum

• Researchers Detail Modus Operandi of ShinyHunters Cyber Crime Group

• Navigating Vendor Risk Management as IT Professionals

• PowerShell Obfuscation

• Deals: Anker’s New Sale Includes Discounts on Soundcore Earbuds, MagSafe-Compatible Car Mount, and More

• LockFile Ransomware Compromises Microsoft Exchange via ProxyShell

• DDoS Attack. How Distributed Denial of Service Works and How to Prevent It

• One material with two functions could lead to faster memory

• Patch now! Microsoft Exchange attacks target ProxyShell vulnerabilities

• 8 Online Gaming Security Risks – Are You Protected?

• Can Your Wearable Health Monitors Be Compromised?

• Details Disclosed for Critical Vulnerability in Sophos Appliances

• 38M Records Exposed Online—Including Contact-Tracing Info

• Top 15 Vulnerabilities Attackers Exploited Millions of Times to Hack Linux Systems

• T-Mobile Offering Free Year of Apple TV+ to Select Customers Starting Wednesday

• Hacker behind $600 million crypto heist returns final slice of stolen funds

• Autonomous car insurance drives new opportunities

• Apple Store Purchases Made With Apple Pay in U.S. Will Support the National Park Foundation This Week

• Data Brokers Are Advertising Data on U.S. Military Personnel

• PetitPotam Vulnerability Exploited in Ransomware Attacks

• CISA Warns Organizations of ProxyShell Attacks on Exchange Servers

• Internet Browser Vulnerabilities Exploited by North Korean Hackers to Implant Malware

• Google Docs Scam Still Pose a Risk

• New Evidence Shows Strong Connection Between Diavol Ransomware and TrickBot Gang

• ShadowPad Malware – A Popular Choice Among Chinese Espionage Groups

• T-Mobile Acknowledges Breach of Customer Data, Launches Probe

• Pakistan’s FBR Suffered Cyber Attack – Network Access Sold On Dark Web

• A Complete Guide to Perform External Penetration Testing on Your Client Network | Step-by-Step Methods

• ProxyShell vulnerabilities actively exploited to deliver web shells and ransomware

• Razer Synapse Vulnerability: with a Simple Mouse Plugging in, Windows System Privileges Are Achieved

• A week in security (August 16 – August 22)

• I turned on CSP and all I got was this crappy lawsuit!

• Cloud Security Posture Management: Getting It Right

• Singapore, US pledge deeper collaboration in cybersecurity

• JPMorgan Chase Bank Notifies Customers of Data Exposure

• How to Use Apple’s Hide My Email

• US military personnel defrauded into losing $822m through scams

• UK Regulator Raises Serious Concerns Over Nvidia-Arm Deal

• Infosecurity Europe Moves to ExCeL London in 2022

• Touch ID Not Returning With iPhone 13, Despite Apple Testing Under-Screen Sensor

• FCW Insider: August 23, 2021

• Quick Hits

• T-Mobile Breach Now Affects 54.6 Million Individuals

• Gaming-related cyberthreats in 2020 and 2021

• IBM Telum Processor improves the ability to intercept fraud in real-time

• New LockFile Ransomware Variant Exploits “PetitPotam” Bug

• Microsoft Increasing Price of Commercial ‘Microsoft 365’ Plans Next Year

• Kubernetes hardening: Drilling down on the NSA/CISA guidance

• The T-Mobile data breach: A timeline

• How attackers could exploit breached T-Mobile user data

• Number of T-Mobile Customers Confirmed to Be Affected by Hack Reaches 54 Million

• How To Identify Phone Scams | Avast

• LPE zero-day flaw in Razer Synapse allows attackers to take over Windows PCs

• How to Use Hide My Email

• Trying to register your antivirus in Windows Security Center?

• Cyber Mindfulness Quiz | Avast

• The US State Department was Recently Hit by a Cyber Attack

• Memorial Health System forced to cancel surgeries after ransomware attack

• Why automated pentesting won’t fix the cybersecurity skills gap

• Cloudflare Recorded 17.2 Million Request-Per-Second (rps) – Largest HTTP DDoS Attack Ever Detected

• Things that are easy to miss in the race towards hybrid working and the cloud

• Cyber Attacks on Global Education Sector witness a jump

• Details of US State Department Cyber Attack

• 58% of IT leaders worried their business could become a target of rising nation state attacks

• ICS vulnerabilities disclosed in H1 2021 rose by 41%

• Report: Agencies aren’t fielding interactive digital forms

• 446 Australian breach notifications with 30% of system faults found after a year

• Key email threats and the high cost of BEC

• The impact of eCommerce fraud on retailers and shoppers

• Identity management org SailPoint unveils no-code tool

• Using Threat Modeling to Boost Your Incident Response Strategy

• Facebook sat on report that reveals most-shared post for months was questionable COVID story

• Colocation services market to grow steadily over the next 5 to 7 years

• The average price of access to a hacked company in the darknet reached $5,400

• eBook: The Psychology of Cyber

• NextDC joins Fujitsu and Equinix as latest certified to store Canberra’s sensitive data

• UK competition authority raises alarm over Nvidia and Arm merger

• IBM finds ASX outage the result of trade platform not being ready for go-live

• Is My VPN Working?

• Apple is bringing client-side scanning mainstream and the genie is out of the bottle

• IT Security News Weekly Summary – Week 33

• IT Security News Daily Summary 2021-08-22

• Evaluating Security Practices in Response to Colonial Pipeline And South Korean KAERI Attacks

• Defending Against Increasing DDOS Attacks in The Light Of COVID-19 And 5G

• Four Ways Smart Cities Can Stay Safe in An Interconnected World

• Chinese Government Will Begin to Stockpile Zero-Days in September

• Cloudflare: Mirai Botnet Launched Record-Breaking DDoS Attack

• Post Office is new prime target in UK parcel delivery phishing attacks

• Ransomware on a Charge: Another Wake-Up Call for U.S. Shipping Industry

• The Five Best Widgets To Have On Your Website

• Possible Problems in Dead Hard Drive Recovery

• How Fintech apps have brought a revolutionary change in the banking system

• The Failure of Counterterrorism After the Civil War

• Can DOD make buying software easier?

• Google discloses unpatched Microsoft WFP Default Rules AppContainer Bypass EoP

• WARNING: Microsoft Exchange Under Attack With ProxyShell Flaws

• Multilingual Cybersecurity Awareness Training adapted for your needs

• High-End ‘M1X’ Mac Mini With New Design and Additional Ports Expected to Launch in the ‘Next Several Months’

• Flubot Malware Targets Australians, Spreads Via SMS

• SEOPress WordPress Plugin Vulnerability Potentially Risked Over 100K Sites

• Pegasus iPhone Hacks Used as Bait in Extortion Scam

• Microsoft Exchange Under Attack With ProxyShell Flaws; Over 1900 Servers Hacked!

• Kerberos Authentication Spoofing: A Quick Look

• Security Affairs newsletter Round 328

• Week in review: Realtek chips vulnerabilities, NAS devices under attack, security teams burnout

• T-Mobile data breach could be worse than initially thought, 54 million customers impacted

• Penetration testing

• Mosaic Insurance and DXC Technology Launch Innovative Technology Platform for Specialty Insurance

• Most Important Web Server Penetration Testing Checklist

• U.S. State Department was recently hit by a cyber attack

Generated on 2021-08-29 23:59:26.621978