IT Security News Weekly Summary – Week 35

• IT Security News Daily Summary 2022-09-04

• GDPR: Four Years After Its Enactment, Where Do We Stand?

• Google Fix Another Chrome Zero-Day With An Emergency Update

• The Prynt Stealer Malware Includes a Secret Backdoor, Hackers Steal Data from Credentials

• Anonymous Attacks Russian Taxi Company, Causes Traffic Jam

• Feds, npm Issue Supply Chain Security Alert to Avoid Another SolarWinds

• 4 critical steps toward securing Web3

• KeyBank: Hackers of Third-Party Provider Stole Customer Data

• Magnet Forensics Announces International Expansion to Australia to Support Global Growth

• US Law Enforcement Agencies Employ Obscure Phone Tech to Track People Movements

• Damart Suffered a Hive Ransomware Attack

• Hackers are Actively Targeting Linux-Based Devices

• StrikeReady Wins Security Today Product of the Year Award

• Hoxhunt Primed to Spread Gamified Phishing Awareness in the Enterprise

• Violence-as-a-Service: Brickings, Firebombings & Shootings for Hire

• Anonymous hacked Yandex taxi causing a massive traffic jam in Moscow

• IRS mistakenly published confidential info for roughly 120K taxpayers

• Alleged Iranian threat actors leak the code of their CodeRAT malware

• Week in review: CISOs’ earnings per year, Atlassian Bitbucket Server and Data Center flaw

• Penetration testing

• Samsung Announces Second Customer Data Breach

• Peter Eckersley, co-creator of Let’s Encrypt, dies at just 43

• Weekly Update 311

• Barracuda names Chris Ross as CRO

• Titan Security Group acquires Prudential Security to expand its service footprint

• ‘Important Notification’ Phishing Scam Targeting American Express Customers

• IT Security News Daily Summary 2022-09-03

• Security Affairs newsletter Round 382

• Snake Keylogger is Back, Targets IT Corporates

• Anomaly Detection In Cybersecurity For Dummies

• The Future of Cybersecurity in SaaS

• Google Chrome Flaw Enables Sites to Copy text to Clipboard

• A New Ransomware Gang BianLian on a Sudden Rise

• The ‘Hottest’ IT Security Technologies in 2022

• NSA and CISA Share Tips to Secure the Software Supply Chain

• Apple Offers iOS Update to Fix Vulnerabilities

• Latest Cyberthreats and Advisories – September 2, 2022

• TD SYNNEX Celebrates First Anniversary by Planting 22,000+ Trees

• Google rolled out emergency fixes to address actively exploited Chrome zero-day

• JuiceLedger Attacker Linked to Phishing Attacks Targeting PyPI Users

• Police Across US Bypass Warrants With Mass Location-Tracking Tool

• In-Depth Look at Ragnar Locker Ransomware Targeting Vital Industries

• LNK Builders

• Analysis: Situational Awareness + Timelines

• Build or Buy your own antivirus product

• Google Release Urgent Chrome Update to Patch New Zero-Day Vulnerability

• Samsung Admits Data Breach that Exposed Details of Some U.S. Customers

• ‘Addressing Insider Risk in Today’s Evolving Workplace’ – Sept 7 Webinar

• Skyhigh Security appoints John N. Stewart as Executive Advisor

• Zilla Security raises $13.5M to accelerate growth and expand product development

• Cyber insurance costs soar amid ransomware attacks

• How to Stop DDoS Attacks: Prevention & Response

• Firewalla starts taking preorders for 2.5Gbps Gold Plus firewall

• Google, YouTube ban election trolls ahead of US midterms

• Samsung discloses a second data breach this year

• IT Security News Daily Summary 2022-09-02

• Why Your Success Depends on Your IAM Capability

• Getting the word out on election security

• Convicted felon busted for 3D printing gun parts

• National Cyber Director’s office elevates key personnel

• Hackers gained access to Samsung customer data

• Crook busted after 3D printing gun parts

• Crook busted for 3D printing gun parts

• Latest Cyberthreats and Advisories – September 2, 2022

• Anonymous hacked Russian Yandex taxi app causing a massive traffic jam

• The Biden administration moves to make unions more accessible to federal contractors

• NIST to launch new guidance on security risks of telehealth and smart home integration

• Will cyber‑insurance pay out? – Week in security with Tony Anscombe

• Dashlane password manager deal: Save 50% on Premium

• Securing Containers With Seccomp Filters

• The Prynt Stealer malware contains a secret backdoor. Crooks steal data from other cybercriminals

• Revealed: US telcos admit to storing, handing over location data

• CFPB warns firms on poor cyber hygiene

• Louisiana becomes first state to receive internet for all grants

• Prynt Stealer Contains a Backdoor to Steal Victims’ Data Stolen by Other Cybercriminals

• Linux Systems Are a More Common Target as the Attack Surface Expands

• IoT Connectivity – Understanding the role of SIM and eSIM in IoT

• Google Chrome Vulnerability Lets Sites Quietly Overwrite Clipboard Contents

• US Police Deployed Obscure Smartphone Tracking Tool With No Warrants

• Our integration with Attivo is going really, really well, says SentinelOne CEO

• French tax office uses AI to find swimming pools

• CISA, NSA, and ODNI Release Part One of Guidance on Securing the Software Supply Chain

• Mozilla Releases Security Update for Thunderbird

• TikTok Android Vulnerability Identified by Microsoft

• Infrastructure Used in Cisco Hack is the same used to Target Workforce Management Solution Firm

• BianLian Ransomware Rising Across Networks

• NSA to developers: We’ve got some software supply chain security tips for you

• Addressing the cybersecurity talent gap: New programs from (ISC)2

• CISA, NSA, and ODNI Release Part One of Guidance on Securing the Software Supply Chain

• Mozilla Releases Security Update for Thunderbird

• Ex-NSA Trio Who Spied On Americans For UAE Now Banned From Arms Exports

• PyPi Supply Chain Attack Actors Have Been Active Since Late 2021

• How Will Meta Treat Personal Data After High Court’s Abortion Ruling?

• Cops Wanted To Keep Mass Surveillance App Secret

• Credential Phishing Attack Targeted 16,000 Emails At Non-Profit Agency

• Imperva Boosts Connectivity with New PoP in Manila

• New method to systematically find optimal quantum operation sequences for quantum computers developed

• Buzzing in the Background: BumbleBee, a New Modular Backdoor Evolved From BookWorm

• What Benefits are 5G Networks Bringing to Companies?

• The 14 best Labor Day 2022 security camera deals

• Warning: PyPI Feature Executes Code Automatically After Python Package Download

• The Ultimate Security Blind Spot You Don’t Know You Have

• JuiceLedger Hackers Behind the Recent Phishing Attacks Against PyPI Users

• Indian court directs chat app Telegram to disclose details of copyright infringers

• Enrollment Is Open for Free One Million Certified in Cybersecurity

• FBI Cyber Experts to Examine Attacks on Montenegro Government Infrastructure

• Over 1800 Mobile Apps Found Exposing AWS Credentials

• JuiceLedger Hacker Linked to First Phishing Campaign Targeting PyPI Users

• When remains are found in a suitcase, forensics can learn a lot from the insects trapped within

• TikTok Users Were Vulnerable to a Single-Click Attack

• Another Ransomware For Linux Likely In Development

• Montenegro is the Victim of a Cyberattack

• Platforms Are Testing Self-Regulation in New Zealand. It Needs a Lot of Work.

• Climate Justice and Loss and Damage in the Pakistan Flood Crisis

• Sephora fined for violating CCPA — what it means for data protection

• NSA to developers: We’ve got some software supply chain security tips for you

• New Ransomware Group BianLian Activity Exploding

• Experts link Raspberry Robin Malware to Evil Corp cybercrime gang

• SpaceX Wins $1.4 Billion Contract For Five More NASA Launches

• Cloud Computing and Cybersecurity: Risk Factor and Prevailing Trends

• Report: SaaS app spending up, but security lags behind

• Amazon Loses Attempt To Overturn Staten Island Union Election

• A Windows 11 Automation Tool Can Easily Be Hijacked

• Sharkbot is back in Google Play

• GM’s Cruise Recalls Self-Driving Software After Crash

• Google Chrome issue allows overwriting the clipboard content

• TikTok Vulnerability Discovered on Android

• Back to school cyber security tips

• 3 multicloud lessons for cloud architects

• DESFA Suffer Another Cyberattack

• UK Government Releases New AI Security Guidance

• CISA, NSA and npm Release Software Supply Chain Guidance

• Government Releases New AI Security Guidance

• New Evidence Links Raspberry Robin Malware to Dridex and Russian Evil Corp Hackers

• Chile and Montenegro Floored by Ransomware

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Google Chrome Bug Lets Sites Write to Clipboard Without Asking

• Attack infrastructure used in Cisco hack linked to Evil Corp affiliate

• Google Chrome Bug Lets Sites Silently Overwrite System Clipboard Content

• Best practices for Kubernetes security in the enterprise market

• Malicious DNS traffic targets corporate and personal devices

• WatchGuard Firewall Exploit Threatens Appliance Takeover

• Twitter Edit button can allow hackers to manipulate Tweets

• These are the general myths about Ransomware

• HelpSystems Acquires Outflank, Further Empowering Customers to Thwart Cyberattacks with Advanced Adversary Simulation Services, Offensive Security Tooling, and Training Services

• ERI Senior Operations Director Justin LeDoux Named to i-SIGMA Certification Review Board

• Latest Cyberthreats and Advisories – August 26, 2022

• Deploying a Modern Card Program – Card Issuing Platform

• AT&T and Lookout expand partnership with launch of Lookout AlienApp

• Styra Repo Scan lets customers shift their security policy left

• CIOs find it most difficult to solve cybersecurity challenges

• Companies underestimate number of SaaS applications in their environment

• The Army wants smarter sensors to ease soldiers’ ‘cognitive burden’

• VerSprite adopts Stellar Cyber’s Open XDR platform to boost its managed security service offering

• Ex-NSA trio who spied on Americans for UAE now banned from arms exports

• A Mar-a-Lago Showdown in Federal Court

• Kim Anstett joins Trellix as CIO

• Unit4 appoints Jean de Villiers as Chief Customer Officer

• Controversial Kids’ Code aims to keep children safe online

• Data broker sued for allegedly selling individuals’ sensitive location data

• What is a keylogger?

• TikTok vulnerability could have allowed hijackers to take over accounts

• Apple releases security update for iPhones and iPads to address vulnerability

• Housing agency didn’t complete cyber orders from DHS, report says

• Smartphone Alternatives: Ease Your Way into Your Child’s First Phone

• NSA, CISA and ODNI release new software supply chain guidelines for developers

• Feds to update standards on race and ethnicity data collection

• Tired of being tracked online? DuckDuckGo’s Email Protection can help

• California Passes New Bill Protecting Children’s Privacy On Facebook

• Researchers analyzed a new JavaScript skimmer used by Magecart threat actors

• Why ‘erasure’ could be key to practical quantum computing

• IT Security News Daily Summary 2022-09-01

• State, local agencies to test geographic accuracy of emergency alerts

• Traffers threat: The invisible thieves

• Threat Actor Phishing PyPI Users Identified

• Neopets Hackers Had Network Access for 18 Months

• The Chatter Podcast: Leadership, Sports, and Intelligence Innovation with Sue Gordon, from the Chatter Archive

• Top Cybersecurity Startups to Watch in 2022

• Skyrocketing IoT Bug Disclosures Put Pressure on Security Teams

• Why diversification leads to a better financial return and better encryption

• New Guidelines Spell Out How to Test IoT Security Products

• Hollywood’s Insistence on New Draconian Copyright Rules Is Not About Protecting Artists

• Big Banks vs. Big Tech: Who Is Liable For Online Fraud?

• How to boost your browser’s privacy with DuckDuckGo Privacy Essentials

• How to create and add an SPF record for email authentication

• Credential stuffing cyber attacks targeting home IP addresses

• Code-Injection Bugs Bite Google, Apache Open Source GitHub Projects

• EVERYONE is Part of the Security Team and Solution

• Source Code Protection Market

• Google Aims to Expand Bug Bounties to its Open Source Projects

• Wildfire maps underscore risks — and costs — of climate change

• How one state bakes cyber into disaster response planning

• Tech Tool Offers Police ‘Mass Surveillance on a Budget’

• S3 Ep98: The LastPass saga – should we stop using password managers? [Audio + Text]

• CISA releases two Industrial Control Systems Advisories

• Apple Releases Security Updates for Multiple Products

• UK Watchdog Deepens Probe Into Microsoft’s $69bn Activision Purchase

• Raspberry Robin and Dridex: Two Birds of a Feather

• Researcher unveils smart lock hack for fingerprint theft

• Source Code of Over 1800 Android and iOS Apps Gives Access to AWS Credentials

• CISA releases two Industrial Control Systems Advisories

• Apple Releases Security Updates for Multiple Products

• Old iPhones And iPads Stuck On iOS 12 Get A Patch For A Serious Security Hole

• US Chip Makers Hit By New China Export Rule

• DoD Grants Fund Security Research For Maritime Industry

• Hacker Discovers How To Remotely Pwn A Game Boy Using Pokemon Crystal After 22 Years

• Hackers Target Politicians With Fake News Website

• Over A Third Of Parents Do Not Know What Online Accounts Their Children Use

• 4 Critical Factors In Software Due Diligence Audits For Mergers & Acquisitions (M&A)

• Finland To Offer Businesses Cybersec Vouchers In Wake Of Nato-related Attacks – 4 Experts Offer Perspective

• ECS Wins $53M Recompete Supporting US Transportation Command’s (USTRANSCOM) Global Air Transportation Execution System (GATES)

• Pros and cons of cybersecurity automation

• XDR: Why open is better than closed

• Cybersecurity certifications: Part of your cybersecurity journey

• A pragmatic approach to risk management & resilience

• Arm Sues Qualcomm And Nuvia Unit For Licence Infringement

• Snake Keylogger Returns with New Malspam Campaign Targeting IT Firms

• Amazon-Microsoft rivalry now turns to $1B NGA contract

• VMware looks to tap growing APAC need for multi-cloud management

• Ragnar Locker Ransomware Targets Energy Sector, Cybereason Suggests

• Malicious Chrome Extensions Siphoning Data from 1.4 million Users

• Chrome Bug Allows Webpages to Replace Clipboard Contents

• Hardcoded AWS Credentials in 1,800 Mobile Apps Highlight Supply Chain Issues

• Deep Dive Into Ragnar Locker Ransomware Targeting Critical Industries

• Cyber Safety for Summer Vacation

• Microsoft discloses ‘high-severity’ TikTok vulnerability

• Apple Quietly Releases Another Patch for Zero-Day RCE Bug

• Stop Worrying About Passwords Forever

• Ragnar Locker ransomware gang claims to have stolen data from TAP Air Portugal

• Are you getting the most out of your security platform investment?

• Vulnerability Fixed in Azure Synapse Spark

• Hacker’s Spread ModernLoader, XMRig Miner Malware

• Chinese Hackers Target Energy Firms Across The Globe

• Breaking Down e-commerce Fraud – The Five Pillars of Fraud

• How a LinkedIn Job Ad Led to the World’s Largest Cryptocurrency Heist

• Twitter Trials Edit Tweet Function

• What is a parental control app and what are your options

• FBI issues warning after crypto-crooks steal $1.3 billion in just three months

• Apple Releases Update for iOS 12 to Patch Exploited Vulnerability

• A Return to the Classification Status of Trump’s Mar-a-Lago Documents

• An in-Depth Guide to Lateral Movement in Cybersecurity

• Trump’s Truth Social Remains Barred On Google Play Store

• Chinese Hackers ScanBox Framework To Deploy Malware on Selected Targets

• (ISC)(2) Launches ‘Certified in Cybersecurity’ Entry-Level Certification to Address Global Workforce Gap

• What Should Customers Ask Managed Service Providers?

• Ransomware Gang Claims Customer Data Stolen in TAP Air Portugal Hack

• Real-World Cloud Attacks: The True Tasks of Cloud Ransomware Mitigation

• 1,859 Android and iOS apps were containing hard-coded Amazon AWS credentials

• Linux devices ‘increasingly’ under attack from hackers, warn security researchers

• Apple just delivered an important security patch for these older iPhones

• Microsoft: This bug in TikTok’s Android app could have allowed one-click account hijack

• Researchers Detail Emerging Cross-Platform BianLian Ransomware Attacks

• In Defense of the Global, Open Internet

• A New Cyberattack on TAP Air Portugal

• Sephora Fined $1.2 Million for Breaching CCPA and Selling User Data

• Clever Phishing Scam Uses Legitimate PayPal Messages

• Does Blockchain really offer Better Digital Security?

• Ransomware Attacks Target Government Agencies in Latin America

• IT and Employees Don’t Always See Eye to Eye on Cybersecurity

• The Cybersecurity Workforce Climate in Asia

• US Instructs AMD, Nvidia To Halt AI Shipments To China

• Cuba Ransomware Hackers Claim Montenegro Government Attack

• Two-Factor Authentication Evaluation Guide

• The US May Soon Learn What a ‘Kid-Friendly’ Internet Looks Like

• Infra Used in Cisco Hack Also Targeted Workforce Management Solution

• Over 1,800 Android and iOS Apps Found Leaking Hard-Coded AWS Credentials

• Why Cyber Security is Creating a Competitive Advantage

• iOS 12 Update for Older iPhones Patches Exploited Vulnerability

• Careless Errors in Hundreds of Apps Could Expose Troves of Data

• Security Serious Unsung Heroes Awards 2022 Seeking Nominations for Extraordinary People in Cybersecurity

• Intro to blockchain consensus mechanisms

• Here’s how 5 mobile banking apps put 300,000 users’ digital fingerprints at risk

• Standards Body Publishes Guidelines for IoT Security Testing

• FBI is helping Montenegro in investigating the ongoing cyberattack

• Detected Cyber-Threats Surge 52% in 1H 2022

• Over a Third of Parents Do Not Know What Online Accounts Their Children Use

• How Digital Receipts Will Drive Customer Engagement

• Metaverse Broadband Infrastructure Security

• Microsoft Finds Account Takeover Bug in TikTok

• Development of secure software now an imperative for global DevOps teams

• Which Is Better: Apple’s Hide My Email or DuckDuckGo Email Protection?

• Why Using DNS for Protection Should Be Your First Line of Defense

• Apple released patches for recently disclosed WebKit zero-day in older iPhones and iPads

• Microsoft Discover Severe ‘One-Click’ Exploit for TikTok Android App

• START Confirms Data Breach

• That ‘Clean’ Google Translate App is Actually Windows Crypto-mining Malware

• Do you know what your supply chain is and if it is secure?

• Oh no, that James Webb Space Telescope snap might actually contain malware

• Dealing with cyber threats in the energy sector: Are we on the right path?

• Inside Fog Data Science, the Secretive Company Selling Mass Surveillance to Local Police

• How Law Enforcement Around the Country Buys Cell Phone Location Data Wholesale

• What is Fog Data Science? Why is the Surveillance Company so Dangerous?

• Fog Revealed: A Guided Tour of How Cops Can Browse Your Location Data

• How Ad Tech Became Cop Spy Tech

• Apple to provide secure satellite internet to iPhone 14 users

• UK amends cybersecurity rules for Telecom Service Providers

• How Just-in-Time privilege elevation prevents data breaches and lateral movement

• 7 metrics to measure the effectiveness of your security operations

• Defense and Development: Key points from The Complete Guide to Application Security for PCI-DSS

• Apple Releases iOS Update for Older iPhones to Fix Actively Exploited Vulnerability

• Infosec products of the month: August 2022

• Does your cybercrime prevention program work?

• LabMD gets another shot at defamation claim against ‘extortionate’ infosec biz

• It’s official: Biden formalizes average 4.6% pay raise plan for feds in 2023

• iMobie AnyUnlock 2.0 enables users to solve iOS password issues

• Palo Alto Networks unveils innovations in Prisma SASE to improve security posture for customers

• FBI: Look out, crooks stole $1.3b in cryptocurrency in just three months this year

• A Justice Department Show of Force in the Mar-a-Lago Case

• European Spyware Vendor Offering Android and iOS Device Exploits

• Final Fantasy 14 players targeted by QR code phishing

• How to set up an iPhone for your kids

• James Webb telescope images used to hide malware

• Malwarebytes receives highest rankings in recent third-party tests

• Secureworks partners with Netskope and SCADAfence to protect users against threats

• European Spyware Vendor Offering Android, iOS Device Exploits

• OMB looks to update federal race and ethnicity data standards

• URGENT! Apple slips out zero-day update for older iPhones and iPads

• Closing the Security Gap Opened by the Rise of No-Code Tools

• Apple Releases iOS 12.5.6 for Old iPhone, iPad, iPod touch Models to Fix Actively Exploited Vulnerability

• The United States and China: Is Big Tech Caught in the Collision?

• Menlo Security appoints John Wrobel as CRO and Todd Wilson as VP of Global Channels

• VerSprite adopts Stellar Cyber’s Open XDR platform to help clients identify specific threats

• European Spyware Vendor Intellexa Offering Android, iOS Device Exploits

• Aussies Fear Snakes, Spiders and Getting Hacked

• A flaw in TikTok Android app could have allowed the hijacking of users’ accounts

• The SECURE Notarization Act Will Create a Race to the Bottom for Privacy

• Remote work cybersecurity: 12 risks and how to prevent them

• IT Security News Monthly Summary – September

• IT Security News Daily Summary 2022-08-31

• Twitter and TikTok’s data privacy controversies show the dangers of third-party apps

• NASCIO selects 31 finalists for state IT recognition awards

• Google Fixes 24 Vulnerabilities With New Chrome Update

• Malicious Google Chrome extensions affect 1.4 million users

• CVSS Vulnerability Scores Can Be Misleading: Security Researchers

• Crypto-Crooks Spread Trojanized Google Translate App in Watering-Hole Attack

• Google Fixes 24 Vulnerabilities with New Chrome Update

• Governments have ‘headroom’ to improve CX

• URGENT! Apple quietly slips out zero-day update for older iPhones

• Judge Rules That It’s OK For FBI To Grab User Data From Facebook

• Threat actors breached the network of the Italian oil company ENI

• A Lawfare Hacking and Cybersecurity Course

• CACI-led team wins $5.7B Air Force enterprise IT pact

• International Overdose Awareness Day: The role of data and analytics in educating the public and improving community health

• Cyemptive Returns to Compete in 2022 ‘ASTORS’ Awards Program

• DHS watchdog digs into uneven cyber awareness training, outdated policies

• $4M in city’s federal housing funds stolen through email scam

• Local election offices often are missing on social media – and the information they do post often gets ignored

• (ISC)² Closing the Cybersecurity Workforce Gap

• FTC lawsuit spotlights a major privacy risk: From call records to sensors, your phone reveals more about you than you think

• James Webb Telescope Images Loaded With Malware Are Evading EDR

• Is Blockchain Useful To The Gaming Industry?

• Data privacy truly matters to your customers. It’s time to make it a core business value

• Malicious Google Chrome extensions affect 1.4 millions users

• FBI’s Team to Investigate Massive Cyberattack in Montenegro

• OpenText Goes All-in on Cybersecurity Size and Scale With Micro Focus Purchase

• Rivals Slam Microsoft Over Licence Change

• Hackers spreading malware through images taken by James Webb Space Telescope

• How identity verification infrastructure as a service thwarts identity theft

• Lack of equitable data is harming underserved communities, US chief data scientist says

• (ISC)² Opens Global Enrollment for ‘1 Million Certified in Cybersecurity’ Initiative

• GO#WEBBFUSCATOR campaign hides malware in NASA’s James Webb Space Telescope image

• Ransomware Gang Access Water Supplier’s Control System

• FBI: Crooks Are Using These DeFi Flaws To Steal Your Money

• China-Linked APT40 Gang Targets Wind Farms, Australian Government

• Kiwi Farms Offline Due to Targeted DDoS Attacks

• Harnessing the Power of eSIM: How consumer eSIM technology can unlock massive IoT

• Record Expansion in Existing Customer Base and New Strategic Partnerships Drive SecZetta Q2 Revenue Growth

• How does robust cybersecurity add value to a business?

• Announcing: Code-free API log collection and parser creation

• TikTok for Android Bug Allows Single-Click Account Hijack

• Tackling the Growing and Evolving Digital Attack Surface: 2022 Midyear Cybersecurity Report

• Golang-based Malware Campaign Relies on James Webb Telescope’s Image

• Two New Trends Make Early Breach Detection and Prevention a Security Imperative

• Vulnerability in TikTok Android app could lead to one-click account hijacking

• Nelnet Servicing breach over 2.5 Million Student Loan Data

• 1.4 Million Times Installed Chrome Extensions Steal Browsing Data

• BlackHat USA 2022: Devils Are in the File Descriptors

• XDR vs. MDR: How to pick the right one for your security needs

• Final Thoughts on Ubiquiti

• Evil Corp and Conti Linked to Cisco Data Breach, eSentire Suggests

• Snap To Axe 20 Percent Of Staff – Report

• If the Ethereum Merge Fails, L2s Will Be More Vital Than Ever

• Why MDR Has Become Integral to Modern Cybersecurity Strategies is a new ESG Showcase Report Available Now

• UK Imposes Tough New Cybersecurity Rules for Telecom Providers

• Experts spotted five malicious Google Chrome extensions used by 1.4M users

• High-School Graduation Prank Hack

• Become an (ISC)² Candidate – No Exam, Experience or Fees Required

• Meta To Shutter Facebook Gaming App

• The Inevitability of Cloud Breaches: Tales of Real-World Cloud Attacks

• The Justice Department Indicted Russian National Alexander Ionov. Why Now?

• The Costs of Social Inequality for Military Effectiveness

• Nelnet Data Breach Exposes Millions Of Student Loan Accounts

• UK Government Lays Out Plans To Protect Telecoms Networks Against Cyber Attacks

• 1.4 Million Users Install Chrome Extensions That Inject Code Into eCommerce Sites

• How to take control over your digital legacy

• Intel Selects Check Point Quantum IoT Protect for RISC-V Platform

• SecureAuth Announces General Availability of Arculix, Its Next-Gen Passwordless, Continuous-Authentication Platform

• China-linked APT40 used ScanBox Framework in a long-running espionage campaign

• Scammers Targeting Thousands Of Children As Young As Six, Figures Show

• Agenda, a New Golang Ransomware, Is on the Loose

• Cyber Attacks Are Now the #1 Cause of Data Loss

• Stop Ransomware with Microsoft Security digital event presents threat intelligence in action

• Delayed NASA Artemis 1 Moon Mission Set For Saturday Launch

• Cybercriminals Released Mini Stealer’s Builder & Panel for Free on a Cybercrime Forum

• Student Loan Breach Exposes 2.5M Records

• You’re Not Stringer Bell, but You May Still Need a Burner Phone

• Know Thyself: 10 Ways to Discover Your Work Environment Needs and What It’s Really Like to Work at Cisco

• Google invites bug hunters to scrutinize its open source projects

• How You Can Benefit from a Smart Thermostat?

• Microsoft: Take these three steps to protect your systems from ransomware

• SecurityWeek to Host CISO Forum Virtually September 13-14, 2022: Registration is Open

• WordPress 6.0.2 Patches Vulnerability That Could Impact Millions of Legacy Sites

• Chrome patches 24 security holes, enables “Sanitizer” safety system

• Expert Advise Inlight Of Gloucester Council Cyberattack

• Are virtual collaboration tools a necessary evil for enterprises? How to mitigate the risk

• Government Lays Out Plans To Protect Telecoms Networks Against Cyber Attacks

• The 4 Most Common OWASP API Security Threats

• Cybercriminals Apparently Involved in Russia-Linked Attack on Montenegro Government

• Experts Find Malicious Cookie Stuffing Chrome Extensions Used by 1.4 Million Users

• 79% of the Companies only Invest in Cybersecurity after Hacking Incidents

• Why Is Web Design Essential To Your Brand’s Online Presence?

• Decisions on health data sharing should not be taken by politicians, citizen juries find

• NHS Ransomware Attacks leading to accumulation of medical records

• Apple Privacy Head Steps Down – Report

• Cost of a Data Breach: Retail Costs, Risks and Prevention Strategies

• VMware must assure APAC customers Broadcom acquisition won’t repeat history

• Apple Fixed a Serious iOS Security Flaw—Have You Updated Yet?

• China was spying on Australian defense servers for months

• Chrome 105 Patches Critical, High-Severity Vulnerabilities

• Companies struggle to govern their new cloud environments

• Elon Musk Seeks Court Delay After Twitter Whistleblower Claims

• Google’s new bug bounty program targets open-source vulnerabilities

• Initiative Aims to Encourage Diverse Talent into Cyber

• Google Launches New Open Source Bug Bounty to Tackle Supply Chain Attacks

• Hackers Hide Malware in Stunning Images Taken by James Webb Space Telescope

• Ukrainian Police Bust Crypto Fraud Call Centers

• ICO Pursues Traffic Accident Data Thieves

• Russian streaming platform Start discloses a data breach impacting 7.5M users

• FBI Alerts of Rise in Attacks Targeting DeFi Platforms

• Cyber Security Management System (CSMS) for the Automotive Industry

• 5 open-source vulnerability assessment tools to try out

• Should ransomware payments be banned? A few considerations

• Organizations security: Highlighting the importance of compliant data

• China-linked APT40 gang targets wind farms, Australian government

• Establishing a mobile device vulnerability management program

• 1 in 3 organizations don’t know if their public cloud data was exfiltrated

• Chinese Hackers Used ScanBox Framework in Recent Cyber Espionage Attacks

• VMware unveils new innovations to improve networking and security for multi-cloud

• Lumen SASE Solutions centralize network and security policy management

• Ransomware gangs’ favorite targets

• Greater App Security with Face Verification

• Chromium browsers can write to the system clipboard without your permission

• British Airways customers targeted in lost luggage Twitter scam

• VMware and IBM strengthen partnership to help clients modernize mission-critical workloads

• Phosphorus collaborates with CyberKnight to expand its presence in the MEA region

• Ardalyst and Mandiant join forces to protect organizations against cyber threats

• Privacy, please! Why a VPN on your smartphone may be a smart move for you.

• Tech knowledge: Parents believe their children have overtaken them

• TikShock: Don’t get caught out by these 5 TikTok scams

• Find a security hole in Google’s open source and you could bag a $31,337 reward

• Bright Data expands leadership team to advance its strategic goals

• New ODGen Tool Unearths 180 Zero-Days in Node.js Libraries

• How Odessa delivers broadband to homes and businesses at no cost to the city

• IT Security News Daily Summary 2022-08-30

• Audit finds trouble in SSA’s agile software development

• Lawmakers Press Facebook For More Information On Communication With The FBI

• Text to Give v/s Mobile Giving Apps: Which One is Better?

• New Security for a World Where Everyone and Everything Are Connecting

• Commerce watchdog to probe $340M cloud program

• How Odessa delivers broadband to every home and business at no cost to the city

• Don’t Let ‘Perfect’ Be the Enemy of a Good AppSec Program

• Electric school buses are taking students back to school – bringing cleaner air and lower maintenance costs to school districts across the country

• Malicious Chrome Extensions Plague 1.4M Users

• Nitrokod Crypto Miner Hiding in Fake Microsoft and Google Translate Apps

• How new CISOs should take on today’s growing threatscape

• 25 Gbps internet service now available in Chattanooga

• The 9 best Labor Day 2022 security camera deals

• Google’s new bug bounty program targets open source vulnerabilities

• Cyber Insurance: a fast-changing landscape

• 2022-08-30 – Follow-up traffic from Bumblebee infection

• FTC sues location data collector, alleging lax security

• Lax data privacy rules may expose consumer location information

• Akasa Air Confirmed a Data Breach to CERT-In

• White House seeks input on federal evidence agenda for LGBTQI+ equity

• In war on disinformation, a dubious crusader joins the fight — the government

• CrowdStrike is a growth company that’s a dangerous investment, says Joule Financial’s Quint Tatro

• The 3 best free VPNs (and why you get what you pay for)

• JavaScript bugs aplenty in Node.js ecosystem – found automatically

• Chinese Hackers Target Energy Sector in Australia, South China Sea

• Hackers Sell Classified Data of Missile Firm MBDA, NATO Launches Investigation

• New NASA IT contract may consolidate 10 programs

• EFF Calls for Limiting Mandatory Cooperation, Safeguarding Human Rights in International Cybercrime Investigations as Talks Resume for Proposed UN Cybercrime Treaty

• Google Introduces Bug Bounty Program for Open-Source Software

• ModernLoader Delivers Stealers, Cryptominers and RATs Via Fake Amazon Gift Cards

• Security Culture: An OT Survival Story

• A new Google bug bounty program now covers Open Source projects

• Recent grads often don’t consider federal employment, survey says

• CISA Releases 12 Industrial Control Systems Advisories

• 2.5M People Had Their Student Loan Accounts Data Stolen

• CISA Updates its Database With 10 New Actively Exploited Vulnerabilities

• Powering Up the Energy Sector’s Security Posture

• Watering Hole Attacks Push ScanBox Keylogger

• Academics Devise Open Source Tool For Hunting Node.js Security Flaws

• Baker & Taylor’s Systems Remain Offline a Week After Ransomware Attack

• CISA Releases 12 Industrial Control Systems Advisories

• HHS Alerts Healthcare Workers on Karakurt Ransomware Group

• FBI: Crooks are using these DeFi flaws to steal your money

• Cohesity Research Reveals that Reliance on Legacy Technology Is Undermining How Organizations Respond to Ransomware

• Cyber Signals: 3 strategies for protection against ransomware

• Nitrokod Crypto Miner Infected 111K+ Users with Replica of Popular Software

• How Technology Can Think Globally and Act Locally to Inform Global Cyber Policies

• How 1-Time Passcodes Became a Corporate Liability

• Phishing Campaign Targets PyPI Users to Distribute Malicious Code

• Three campaigns delivering multiple malware, including ModernLoader and XMRig miner

• Atlassian Bitbucket Flaw Allows Any Miscreant To Hijack Servers

• Data Company Sued By US Government Amid Fears Of Sensitive Location Tracking

• Have 3rd Party Hacking Groups Lost Interest In The Russia Ukraine Conflict

• Google Play To Ban Android VPN Apps From Interfering With Ads

• ieGeek Vulnerabilities Still Prevalent In 2022

• How to Support Agile Development Through Cybersecurity Best Practices

• Azure private MEC—A thriving partner ecosystem

• Why Do You Need a Bot Protection Solution for Your Business?

• 10 must-have cybersecurity skills for career success in 2022

• 20 free cybersecurity tools you should know about

• Cryptominer Disguised as Google Translate Targeted 11 Countries

• ‘Cyclops Blink’ Shows Why the SEC’s Proposed Cybersecurity Disclosure Rule Could Undermine the Nation’s Cybersecurity

• This sneaky malware hides on your PC for a month before going to work

• Building a Strong SOC Starts With People

• Hands-on Review: Stellar Cyber Security Operations Platform for MSSPs

• Hackers Use ModernLoader to Infect Systems with Stealers and Cryptominers

• On Emails, PowerPoints, Sovereign Immunity, and Testimony From Governor Kemp

• New Malware Campaign Disguised as Google Translate Distribute Cryptocurrency Miner

• Google Launches Bug Bounty Program for Open Source Projects

• Chinese Hackers Target Energy Firms in South China Sea

• Cerberus Sentinel Announces Acquisition of CUATROi

• A study on malicious plugins in WordPress Marketplaces

• 3 Cybersecurity Trends for 2022

• US-based CISOs get nearly $1 million per year

• Is It Worth It to Use an IT Recruitment Agency?

• #ISC2Congress: Empower Your Career

• FBI Issues Warning About Increase in Attacks Against DeFi Platforms

• Enabling Global-Scale Digital Trust | Avast

• How and Why Do Teens Become Cyber Criminals?

• Nearly 90% Of Americans Are Afraid Of Falling Victim To Cybercrime

• A Peek Into CISA’s Post-Quantum Cryptography Roadmap

• LinkedIn New Hacking Scam

• NATO Investigates Security Breach

• Dell, Nvidia and VMware partner to boost data center speed

• VMware aims to improve security visibility with new services

• FTC Sues Data Broker

• Announcing Google’s Open Source Software Vulnerability Rewards Program

• What Are the 8 Workflow Stages?

• Google launches vulnerability reward program to secure open-source software

• Pwn2Own Offers $100,000 for Home Office Hacking Scenario

• FBI Warns of Surge in Attacks Targeting DeFi Platforms

• New Go-based Ransomware ‘Agenda’ Delivers Customized Attacks

• Google Launches Major Open Source Bug Bounty Program

• China’s SMIC ‘Has Achieved’ 7nm Chip Breakthrough

• Amazon Shuts Down Amazon Care In ‘Strategic’ Healthcare Move

• Automation is the ultimate cloud security tip

• That ‘clean’ Google Translate app is actually Windows crypto-mining malware

• Cyber Security Managed Services 101

• Everything You Need to Know About CI/CD and Security

• World’s largest distributors of books Baker & Taylor hit by ransomware

• Nearly Half of Breaches During First Half of 2022 Involved Stolen Credentials

• Akasa Air Suffers Data Leak on First Day of Operation

• NASA Cancels Artemis I Moon Rocket Test Launch

• Instagram Says It Never Shares Precise User Location

• Twitter, Musk Subpoena Whistleblower Over Bot, Security Issues

• European Commission ‘Will Not Appeal’ Qualcomm Fine Dismissal

• FBI: Hackers Are Exploiting DeFi Bugs to Steal Funds

• India’s Newest Airline Akasa Air Found Leaking Passengers’ Personal Information

• Privacy Center: How to Take Control of Consumer’s Data?

• DDoS activity launched by patriotic hacktivists is on the rise

• Cryptocurrency Mining Campaign Goes Undetected Since 2019

• UK Spies Fund New Course for Female Coders

• Citizenship By Investment Programs – Why are they becoming increasingly popular?

• Looking for adding new detection technologies in your security products?

• Twitter, Meta Take Down ‘US-Based’ Propaganda Campaign

• How BEC attacks on human capital management systems are increasing

• Can your passwords withstand threat actors’ dirty tricks?

• FBI Warns Investors to Take Precautions with Decentralized Financial Platforms

• Nine cyber-attack news headlines trending on Google

• AI robots are a threat to the HR Department

• Crooks are increasingly targeting DeFi platforms to steal cryptocurrency

• FTC Sues Data Broker Over Selling Location Data for Hundreds of Millions of Phones

• Iranian state-sponsored Actors Exploiting Log4j 2 Flaws in Unpatched Systems

• Outdated infrastructure not up to today’s ransomware challenges

• How automation can solve application development challenges

• Product showcase: The Stellar Cyber Open XDR platform

• START – 7,455,386 breached accounts

• Americans Support Law Enforcement and Oppose Defunding the Police

• FTC Accuses Data Broker of Selling Sensitive Location Data

• Elon Musk Subpoenas Twitter Whistleblower Ahead of Trial

• Cloudentity introduces webhook feature to enhance security for users and businesses

• Google Play to ban Android VPN apps from interfering with ads

• A week in security (August 22 – August 28)

• Twilio data breach turns out to be more elaborate than suspected

• Playing Doom on a John Deere tractor with Sick Codes: Lock and Code S03E18

• Lookout hires Deborah Wolf as CMO

• Pindrop appoints Marc Diouane as President and COO

• NetApp and VMware expand partnership to help customers solve their multi-cloud challenges

• Researchers discover way to impersonate Okta user in popular cloud environments

• Block YouTube On School Devices | Avast

• Millennials and Online Scams | Avast

• Singapore clocks higher ransomware attacks, warns of IoT risks

• Sliver offensive security framework increasingly used by threat actors

• Malicious Cookie Stuffing Chrome Extensions with 1.4 Million Users

• IT Security News Daily Summary 2022-08-29

• Control insider threats with data loss prevention and user activity monitoring

• Collaboration, training key to local gov cyber defense, officials say

• corporate governance

• US FTC sued US data broker Kochava for selling sensitive and geolocation data

• Defense Department Finally Prioritizes Civilians in Conflict

• What Can We Learn From The OpenSea Data Breach?

• Password Manager With 25 Million Users Confirms Breach, Expert Weighs In

• Microsoft 365 Business Users Targeted With New DocuSign Phishing Scam

• 64% Of Businesses Suspect They’re Targets Of Nation-State Attacks- Expert Comments

• Facebook Agrees To Settle Cambridge Analytica Data Privacy Lawsuit At The Last Minute

• Content Anarchy: The Lurking Security Risk in A Digital-First World

• Crisis Point

• What Are the Top 10 Android Educational Apps That Collect Most User Data?

• OMB prioritizes CX in budget planning

• Receipt for €8M iOS Zero-Day Sale Pops Up on Dark Web

• +Malicious Cookie Stuffing Chrome Extensions with 1.4 Million Users

• HHS dinged on security from all sides

• Digital hygiene, cyber workforce needed to combat ransomware

• Former NY state employee admits to identity theft, abusing IT access

• Security investment, toolchain consolidation emerge as top priorities

• New Golang-based ‘Agenda Ransomware’ Can Be Customized For Each Victim

• Securing identities in the cloud: 2 new studies give us the state of play

• The LastPass breach could have been worse — what CISOs can learn

• What’s going on at NITAAC

• Critical hole in Atlassian Bitbucket allows any miscreant to hijack servers

• Okta Impersonation Technique Could be Utilized by Attackers

• Over-the-Horizon Drones Line Up But Privacy Is Not In Sight

• NHS 111 Cyberattack may Harm Patients Privacy

• Whistleblower Charged Twitter for Cybersecurity Misconduct

• LastPass source code breach – do we still recommend password managers?

• From bits to p-bits: One step closer to probabilistic computing

• Over-the-horizon drones line up but privacy is not in sight

• Karl Mathias settles in at HHS

• 3 Ways No-Code Developers Can Shoot Themselves in the Foot

• Wireless tech monitors soil moisture in real time

• 77% Of Security Leaders Fear We’re In Perpetual Cyberwar Now

• Governments Embrace Internet Shutdowns As A Form Of Control

• You Can Now Play Doom In The Tamagotchi-Like Hacking Device

• Elon Musk Subpoenas Twitter Whistleblower, Seeking Info On Spam, Security

• Politics and Prosecutorial Discretion in the Trump Case

• Evaluating the Jan. 6 Committee’s Evidence

• Over-the-horizon drones lineup but privacy is not in sight

• Crypto miners’ latest techniques

• Cyber-Insurance Firms Limit Payouts, Risk Obsolescence

• Hackers Make Fake Cthulhu Website to Distribute Malware

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Blackhat USA 2022: Return to Sender – Detecting Kernel Exploits with eBPF

• ‘Tape or Chewing Gum:’ Twitter’s Lapses Echo Worldwide

• Okta Says Customer Data Compromised in Twilio Hack

• Galois Open Sources Tools for Finding Vulnerabilities in C, C++ Code

• NATO Investigates Dark Web Leak of Data Stolen from Missile Vendor

• Twilio breach let attackers access Authy two-factor accounts of 93 users

• Kiwi Farms Goes Offline amid DDoS Attack and Hosting Issues

• A Beginner’s Guide to Understanding Encryption Vs Decryption

• Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms

• How to protect your privacy on Reddit

• Levels of Assurance for DoD Microelectronics

• Cybersecurity Solution Highlights From Black Hat 2022

• How Cybersecurity Policy Has Changed Since the SolarWinds Attack

• Global Ransomware Damages to Exceed $30bn by 2023

• The 3 Questions CISOs Must Ask to Protect Their Sensitive Data

• US Cyber Command and NSA Partner On Defence Efforts For Midterms Elections

• Nitrokod crypto miner infected systems across 11 countries since 2019

• (ISC)² Certified in Cybersecurity Entry-Level Certification Officially Launches!

• Dell, Ericsson To End All Business In Russia

• What Is Encryption and How Does It Work?

• A CISO’s Ultimate Security Validation Checklist

• Nitrokod Crypto Miner Infected Over 111,000 Users with Copies of Popular Software

• LockBit Malware Group Threatens with Triple Extortion

• Tech Investors Mull Newport Wafer Fab Rescue Bid – Report

• Patch critical flaw in Atlassian Bitbucket Server and Data Center! (CVE-2022-36804)

• Details Disclosed for OPC UA Vulnerabilities Exploited at ICS Hacking Competition

• Malicious Plugins Found on 25,000 WordPress Websites: Study

• The Telegram-Powered News Outlet Waging Guerrilla War on Russia

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of August 22, 2022

• Printers: The underestimated danger inside your company

• COVID-19 data put for sale on the Dark Web

• Meta Settles Cambridge Analytica Lawsuit

• Fired Amazon Union Organiser Alleges Retaliation

• Samsung Germany Tells User To Smash SSD With Hammer

• Threat Actors Moving to Sliver Command-and-Control (C2) to Evade Detection

• Black Hat USA 2022 Continued: Innovation in the NOC

• Black Hat USA 2022: Creating Hacker Summer Camp

• CISA adds 10 new flaws to its Known Exploited Vulnerabilities Catalog

• NetworkManager 1.40 released, features 600 patches

• Jack Dorsey – Biggest Twitter Regret Was Forming Company

• Twilio Breach Also Compromised Authy Two-Factor Accounts of Some Users

• Scammers used a deepfake AI hologram of Binance executive to scam crypto projects

• Resecurity partners with ECOMIL SAS to improve cybersecurity for Colombian organizations

• Software developers, how secure is your software ?

• COVID-19 data put for sale on Dark Web

• CISA Adds 10 New Known Actively Exploited Vulnerabilities to its Catalog

• The complexity of modern aircraft cybersecurity

• Data security hinges on clear policies and automated enforcement

• North Korea Kimsuky accurately targets victims with malware

• Cyber Attack news headlines trending on Google

• PyPI Alerts of First-ever Phishing Campaign Against its Users

• Attackers changing targets from large hospitals to specialty clinics

• Creating cyber career opportunities during the talent shortage

• Microsoft 365 Empowers Business Users to Shoot Themselves in the Foot

• Rise in IoT vulnerability disclosures, up 57%

• NATO Probes Hackers Selling Data from Top Missile Firm MBDA

• Key Points from the IBM Cost of a Data Breach Report 2022

• Surveillance firm’s leaked docs show the purchase of an $8M iOS RCE zero-day exploit

• IT Security News Weekly Summary – Week 34

• IT Security News Daily Summary 2022-08-28

• How to protect your business from cyberattacks with XDR

• DoorDash Data Breach Linked with Twilio Hackers

• Ransomware Resiliency for Storage & Backup: Trends, Threats & Tips

• USMC Cyberspace Ops Redesignated to Information Maneuver OCCFLD

• Atlassian Bitbucket: Vulnerability Spotted Inside Data Center

• Iran Based MuddyWater Attacks Israel Companies

• Montenegro’s State Infrastructure Struck by Cyber Attack Officials

• Experts warn of the first known phishing attack against PyPI

• Cutting Off Financing for the Next Capitol Insurrection

• How to Prevent High Risk Authentication Coercion Vulnerabilities

• Security Affairs newsletter Round 381

• Week in review: RCE bug in GitLab patched, phishing PyPI users, Escanor malware in MS Office docs

• Penetration testing

• New Agenda Ransomware appears in the threat landscape

• How to reduce your exposure & secure your data in the cloud in 5 quick ways

• 5 Signs your WordPress Site is Hacked (And How to Fix It)

Generated on 2022-09-04 23:59:17.669959