IT Security News Weekly Summary – Week 35

• IT Security News Daily Summary 2021-09-05

• Pacific City Bank hit by AVOS Locker Ransomware

• Five Myths About NATO and Afghanistan

• The common vulnerabilities leaving industrial systems open to attack

• Researchers: Thousands Of Facebook Posts Around January 6 Riots Are Missing

• Cyber Security Incident Response Plan: How to Proactively Prepare for a Breach

• Microsoft Links SolarWinds Serv-U SSH 0-Day Attack to a Chinese Hacking Group

• Surge in Sextortion Attacks Cost Targeted Users $8 This Year

• WhatsApp fined €225M over GDPR issues

• Security Affairs newsletter Round 330

• Breach Exposed Dallas Student, Parent, Teacher Personal Data

• PRIVATELOG Relies on Common Log File System to Evade Detection

• Beaumont Health: The Latest Victim of Accellion Breach

• Cryptocurrency Exchange Bilaxy Under Attack, Hacker Stole ERC20 Wallet Tokens

• Babuk Ransomware Full Source Code Leaked On A Russia-Speaking Hacking Forum

• Week in review: The state of maritime cybersecurity, zero trust architecture challenges

• Major IPS in New Zealand hit by massive DDoS, Internet outages reported

• Penetration testing

• OWC Jellyfish Manager 2.0 offers deeper analytics and cloud backup integrations for server administration

• Realtek 2.5Gb Ethernet controllers and Wi-Fi 6 solutions enable high network bandwidth usage

• The median duration of DDoS attacks was 6.1 minutes in the first half of 2021

• Chandar Venkataraman joins Very Good Security as CPO

• Apple Client-Side Scanning Takes A Pause

• IT Security News Daily Summary 2021-09-04

• SEC warns of investment scams related to Hurricane Ida

• REvil gang hits UK ITSPs with series of extortion-based DDoS attacks

• Critical Flaws in NPM Package Patched by Node.js Developers

• Apple Watch Series 7: Rumors, Features, Possible Release Date and More

• Code Red: Hospitals Are Facing a Major Ransomware Threat

• How Digital ID can help citizens access government services from anywhere

• Apple will delay the rollout of new child pornography protection tools

• Conti ransomware affiliates hit Exchange Servers with ProxyShell exploits

• BrakTooth Flaws Affect Billions of Bluetooth Devices

• FIN7 group leverages Windows 11 Alpha-Themed docs to drop Javascript payloads

• Top Stories: Last-Minute iPhone 13 Rumors, Apple Announces App Store Changes, and More

• The best VPN for the UK 2021

• Source code for the Babuk is available on a hacking forum

• Vulnerabilities Found In Moxa Railway Devices, Can Cause Disruption

• QakBot (QBot) Campaign: A thorough Analysis

• WordPress Sites Affected by Bugs in Gutenberg Template Library and Redux Framework

• Apple Delays Plans to Scan Devices for Child Abuse Images After Privacy Backlash

• Autodesk Disclosed it was Targeted in SolarWinds Hack

• Apache Kafka in Cybersecurity for Threat Intelligence

• New Malware Family Using CLFS Log Files To Evade Detection

• Microsoft Says Chinese Hackers Were Behind SolarWinds Serv-U SSH 0-Day Attack

• Build or Buy your own antivirus product

• Weekly Update 259

• U.S. Cyber Command Warns of Ongoing Attacks Exploiting Atlassian Confluence Flaw

• Norwegian student tracks Bluetooth headset wearers by wardriving around Oslo on a bicycle

• UK Based Firms, Voip Unlimited, And Voipfone Under DDoS Attack

• Vulnerabilities in bank chatbots allow hackers to steal money

• (ISC)² Security Congress 2021 is Now Fully Virtual

• How Digital First will revolutionise the customer EMV card issuance journey

• Getting to Know Our Digital Identities With Kaliya Young [Podcast]

• Amazon FSx for NetApp ONTAP brings data access and management capabilities to AWS cloud

• AI Weekly: An outline for government regulation of AI

• A parent’s guide to smartphone security

• Week in security with Tony Anscombe

• 2021-09-03 – GuLoader for possible Recmos RAT

• Granulate gProfiler provides support to Graviton processors to improve code quality

• 6 cybersecurity training best practices for SMBs

• OpenVPN client hits version 3.3.1

• 2021-09-02 – Hancitor with Cobalt Strike

• Action1 RMM empowers Priority One to automate remote IT management across endpoints

• CORAS Federal receives FedRAMP High P-ATO status in the marketplace

• US Cybercom says mass exploitation of Atlassian Confluence vulnerability ‘ongoing and expected to accelerate’

• CISA urges IT teams to address critical vulnerability affecting Cisco Enterprise Network Function Virtualization Infrastructure Software

• Dallas school district admits SSNs and more of all employees and students since 2010 accessed during security incident

• USCYBERCOM and CISA warn organizations to fix CVE-2021-26084 Confluence flaw

• IT Security News Daily Summary 2021-09-03

• Over 100 arrests in crackdown against Albanian clan running industrial cannabis operation in Spain

• Everything New With Safari in iOS 15: Redesign, Tab Groups, Live Text, Privacy Updates and More

• Whaling Phishing Attacks Explained: Definition, How it works, Examples

• Facebook Hit With $270 Million Fine For Violating European Privacy Law

• Apple stalls CSAM auto-scan on devices after ‘feedback’ from everyone on Earth

• County tests blockchain for vital records

• FBI warns of ransomware attacks against Food and Agriculture sectors

• How Fraudsters Are Fooling Users With This Proof of Vaccination Phishing Scam

• FBI, CISA warn of potential cyberattacks over holiday weekends

• Salesforce Email Service Used for Phishing Campaign

• Arizona Vehicle Testing Site Rumored to Be Used by Apple Purchased for $125 Million

• Phishing Android Malware Targets Taxpayers in India

• Accellion Breach Impacts Beaumont Health

• DHS Makes Senior Cybersecurity Appointments

• MacRumors Giveaway: Win a Bluetti EB70 Portable Power Station and 200W Solar Panel

• Video Briefing Wednesday: EFF and Partners Will Deliver to Apple Petitions with 50,000 Signatures Demanding End to Phone Scanning Program

• Bias persists in face detection systems from Amazon, Microsoft, and Google

• USCYBERCOM Warns of Mass Exploitation of Atlassian Vulnerability Ahead of Holiday Weekend

• France Doesn’t Do Public Attribution of Cyberattacks. But It Gets Close.

• UI modernization to get boost from new Labor office

• How to install fail2ban on Rocky Linux and AlmaLinux

• Apple Backs Down on Its Controversial Photo-Scanning Plans

• Facebook Quietly Makes a Big Admission

• Afghanistan’s reported data breach has life-and-death consequences

• The ‘Unhackable’ Wii Mini Has Been Hacked

• RNA vaccines seem to produce very different antibody levels

• Coinbase erroneously reported 2FA changes to 125,000 customers

• Delays Aren’t Good Enough—Apple Must Abandon Its Surveillance Plans

• MWC Barcelona 2021 – Highlights from the biggest mobile trade show

• AWS researcher merges the power of two quantum computers to help make cryptography keys stronger

• Apple Backs Down on Its iPhone Photo-Scanning Plans

• Conti ransomware gang targets Microsoft Exchange servers with ProxyShell exploits

• FBI warns of ransomware threat to food and agriculture

• What are the key benefits of card personalisation for banks and customers?

• How can eSIM help overcome the challenges of IoT connectivity activation?

• What Biden’s Cybersecurity Executive Order Means for Supply Chain Attacks

• Dissecting Sodinokibi Ransomware Attacks: Bringing Incident Response and Intelligence Together in the Fight

• Fighting Cyber Threats With Open-Source Tools and Open Standards

• Critical infrastructure warrants mandatory safeguards and sufficient funding

• FIN7 Capitalizes on Windows 11 Release in Latest Gambit

• The State of Incident Response: Measuring Risk and Evaluating Your Preparedness

• Student Sues Syracuse University Over Data Breach

• BrakTooth Vulnerability Puts Bluetooth Users At Risk, Flaws Left Unpatched

• CISA Insights on Risk Considerations for Managed Service Provider Customers

• Apple Hires Two Former Mercedes Engineers to Join Special Projects Group as Apple Car Rumors Increase

• New Report Reveals Traditional Anti-Malware Solutions Miss 74% of Threats

• Internet in New Zealand disrupted due to a DDoS Cyber Attack

• FIN7 Hackers Using Weaponized Windows 11 Themed Word Document To Drop JavaScript Backdoor

• CISA Insights on Risk Considerations for Managed Service Provider Customers

• How Trustworthy is Your Cyber Defense?

• House infrastructure bill includes over $3 billion for federal tech

• Atlassian Releases Security Updates for Confluence Server and Data Center

• History of the HX-63 Rotor Machine

• FTC Orders SpyFone To Delete All Of Its Surveillance Data

• Banksy Was Warned About Website Flaw Before NFT Hack Scam

• Apple Hits Pause On Controversial CSAM Detection Feature

• Ransomware That Avoids Russian Speakers Gets 90% Of Payments

• What Is Whaling: Whaling Phishing Attacks

• Without Changes, Council of Europe’s Draft Police Surveillance Treaty is a Pernicious Influence on Latam Legal Privacy Frameworks

• Rapid7 says Computer Misuse Act should include ‘good faith’ infosec research exemption

• Apple Eases App Store Rules For Spotify, Netflix etc

• $120 charging cable O.MG remotely steals data from Apple devices

• Parliamentary Panel Advises Indian Government to Ban VPN Services

• Atlassian Releases Security Updates for Confluence Server and Data Center

• How to Smartly Scale AppSec Testing

• Cybercriminals Abuse Proxyware Services To Run Malicious Campaigns

• WhatsApp Image Filter Bug Let Hackers Steal Sensitive Data

• BRAKTOOTH – New Bluetooth Bugs Let Hackers Perform ACE & DoS Attack On Millions of Devices

• Apple Announces Delay of Child Protection Measures

• BMW i4 Showcases Fully Integrated Apple CarPlay in Instrument Cluster

• WhatsApp Will Appeal the $266 Million Fine It Received

• Hackers Actively Exploit Critical Vulnerability Found in Atlassian Confluence

• 3 Minutes to Preparedness: 6 Steps to Cyber Hygiene

• PST, Want a Shell? ProxyShell Exploiting Microsoft Exchange Servers

• PRIVATELOG, a new malware that leverages Common Log File System (CLFS) to avoid detection

• The Courts Restore the ‘Remain in Mexico’ Program: An End to Judicial Deference?

• US Agency Investigates Two Complaints From Apple Staff

• Apple Delays Rollout of Controversial Child Safety Features to Make Improvements

• Watch what you send on anonymous SMS websites

• New Zealand internet outage blamed on DDoS attack on nation’s third largest internet provider

• Setting up HTTPS for Home Assistant

• VIP72: 15-Year-Old Malware Proxy Network Goes ‘Dark’ Without Notice

• Quick, easy (and free) way to make Facebook more bearable

• The best night vision security camera

• FTC orders SpyFone to delete all of its surveillance data

• Fed up with constant cyberattacks, one country is about to make some big changes

• S3 Ep48: Cryptographic bugs, cryptocurrency nightmares, and lots of phishing [Podcast]

• What Is Data Execution Prevention (DEP)?

• Food and Agricultural Sector Appealing for the Ransomware Actors, FBI Warns

• Is the CISSP Right for Me?

• Critical flaw in Atlassian Confluence actively exploited

• Most Reliable Hosting Company Sites in August 2021

• What makes hackathons work

• Brute-Force Attacks Target Inboxes for Gift Card Data

• Eight US States to Begin Accepting Digital Driving Licenses

• Majority Of El Salvadorans Reject Bitcoin Law – Poll

• WhatsApp Image Filter Bug Let Hackers to Steal Sensitive Data

• Tech CEOs: Multi-Factor Authentication Can Prevent 90% of Attacks

• To Disseminate Malware, Hackers are Increasingly Relying on DaaS Platforms

• Recently Patched Confluence Vulnerability Abused in the Wild

• Software Company Autodesk Also Targeted by the Hackers Behind the SolarWinds Attack

• Why Ransomware Hackers Love a Holiday Weekend

• This New Malware Family Using CLFS Log Files to Avoid Detection

• Applied Yara training – Q&A

• FBI warns of ransomware attacks targeting the food and agriculture sector

• Second Season of Apple TV+ Show ‘Little America’ to Start Shooting Early 2022

• Confessions of a ransomware negotiator: Well, somebody’s got to talk to the criminals holding data hostage

• Quick Hits

• FCW Insider: September 3, 2021

• Applied YARA training Q&A

• The CSO guide to top security conferences, 2021

• Security and privacy laws, regulations, and compliance: The complete guide

• BEC Scam Swindles $2.3M out of New Hampshire Town | Avast

• BitConnect director pleads guilty to role in $2 billion cryptocurrency fraud

• FTC Bans Stalkerware App in Industry First

• YouTube Premium and Music Surpasses 50 Million Subscribers

• Patched: Critical bug with public PoC exploit in Cisco infrastructure virtualization software (CVE-2021-34746)

• Texan Accused of Cyber-Stalking and Murder Dies in Jail

• FIN7 Hackers Using Windows 11 Themed Documents to Drop Javascript Backdoor

• Apple Possibly Exploring Open-Source Alternative to Arm Architecture

• FBI Warns Food and Agriculture Firms of Ransomware Threat

• Twitter’s Privacy Feature Plans Include Option to Hide Your Old Tweets

• Tabcorp argues banks should be responsible for handling credit card gambling blocks

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• Attacks against SolarWinds Serv-U SW were possible due to the lack of ASLR mitigation

• Now a device to thwart USB drive loaded malware attacks

• NSA Issues FAQs on Quantum Computing and Post-Quantum Cryptography

• Cisco Issues Patch for Critical Enterprise NFVIS Flaw — PoC Exploit Available

• New infosec products of the week: September 3, 2021

• Out with the old, in with the new: From VPNs to ZTNA

• UK Ministry of Defense publishes an advertisement for a SAS Hacker

• Why should enterprises invest in machine identity management tools?

• Increasing number of investigations calls for advanced technology and dedicated teams

• SAIC Announces Second Quarter of Fiscal Year 2022 Results

• Thinking about CAP or CISSP? Here’s How They Compare.

• This Week in Security News – September 3, 2021

• Improved collaboration driving innovation and profitability for hybrid work

• Implementing a strategic planning process is key to drive future revenue growth

• Managed edge services revenues to reach $445.3 million in 2021

• 2021-09-01 – TA551 (Shathak) BazarLoader to Trickbot gtag zev4

• US Imprisons Dark Web Moderator

• UK Gun Owners’ Data Exposed

• FBI warns of ransomware attacks targeting food and agriculture sector as White House pushes for proactive measures

• Twitter introduces new feature to automatically block abusive behavior

• NICE Actimize enhances SURVEIL-X with improved surveillance and risk detection capabilities

• 53% find it difficult to prevent an insider attack during data aggregation

• This unsuspecting Lightning cable packs an implant that can log everything you type

• Apple Pay Promo Offers Up to $30 Off Instacart Deliveries for New Users

• Everything New With the iOS 15 Notes and Reminders Apps

• Introducing “apkeep,” EFF Threat Lab’s new APK Downloader

• Apple Sends 50 Boxes of ‘Ted Lasso’ Biscuits to Wrexham AFC Soccer Club Owned by Ryan Reynolds and Rob McElhenney

• Apple Inks Deal for ‘The Fight Before Christmas’ Documentary

• Pixalate raises $18.1M to accelerate global expansion and media ratings platform

• Acronis enhances cyber protection for MSPs through the CloudBlue PSA solution

• Caveonix and AWS Security Hub integration enriches data for improved risk and compliance posture

• Federal managers seek hard info on COVID-19 testing plans

• SEC fines eight investment firms for cybersecurity breaches that leaked client info

• Spring or autumn, your biggest cyber threat could be in the cloud

• Andy Ellis joins Orca Security as advisory CISO

• Security Alliance appoints Wiebe Ruttenberg as Director of Strategy

• MOXFIVE hires Jeff Palatt as VP of Technical Advisory Services

• 2021-08-30 – Pcap and malware for ISC diary (STRRAT)

• 2021-08-31 – Astaroth/Guildma infection from Brazil malspam

• Semperis extends its Active Directory protection to businesses in APAC market

• Step-ahead IoT security: Developers must be more proactive

• Biden names pick for final MSPB slot

• NFT Collector Tricked into Buying Fake Banksy

• IT Security News Daily Summary 2021-09-02

• Facebook Pays Out $40,000 for Account Takeover Exploit Chain

• What you see is what you get … to protect

• WhatsApp CVE-2020-1910 bug could have led to user data exposure

• The pitfalls of relying only on your ISP for DDoS protection

• FTC bans ‘brazen’ stalkerware maker SpyFone, orders data deletion, alerts to victims

• 6 Security Tips for Third Party Software

• Cybersecurity Must Evolve Beyond Compliance: Is Open XDR the Answer?

• States to offer digital driver’s license via Apple Wallet app

• SpyFone & CEO Banned From Stalkerware Biz

• How DMARC Can Protect Against Ransomware

• Apple Watch Series 7 to Feature Several New Faces to Take Advantage of 16% Larger Display

• WhatsApp hit with €225 million fine for GDPR violations

• Feds are increasing use of facial recognition systems – despite calls for a moratorium

• Apple Can’t Get Out of Siri Privacy Lawsuit, Says Judge

• Official website of Banksy hacked for fake NFT scam

• How the Deepfake Task Force can improve the emergency alert system

• Hacked SolarWinds Software Lacked Basic Anti-Exploit Mitigation: Microsoft

• New Texas Abortion Law Likely to Unleash a Torrent of Lawsuits Against Online Education, Advocacy and Other Speech

• Fake NFT scam cost art collector $336,000

• Accellion-related breach disclosures continue to unfold

• The largest Internet companies of the Russian Federation signed the charter for the safety of children on the Internet

• iPad Mini 6: All of the Rumors So Far

• WhatsApp Slapped With $267m GDPR Fine For Sharing Data

• Programmatic bid analysis reveals how ecommerce marketers can adapt to rising mobile ad costs

• Earnings transcripts mention ‘cybersecurity’ 33% more in H1: Report

• Bluetooth Bugs Open Billions of Devices to DoS, Code Execution

• Pwned! The home security system that can be hacked with your email address

• New BrakTooth flaws potentially impact millions of Bluetooth-enabled devices

• ‘The Politics of Truth’: The U.K. Overseas Operations Act and Legislation on Northern Ireland Legacy

• House panel passes 2022 NDAA with eye on cyber workforce

• SOAR Company D3 Security Raises $10 Million

• Vulnerable WordPress plugin leaves online shoppers vulnerable

• Autodesk was one of the 18,000 firms breached in SolarWinds attack, firm admits

• Gift Card Gang Extracts Cash From 100k Inboxes Daily

• WhatsApp Fined €225m for GDPR Violations

• US Government Comes Up With A Plan to Restrict Cyberattacks

• Cisco Releases Security Updates for Cisco Enterprise NFVIS

• Apple’s Upcoming AR/VR Headset to Require Connection to iPhone

• OSInt, Doxing And Cyberstalking Page Updated

• Cisco Releases Security Updates for Cisco Enterprise NFVIS

• BrakTooth Bluetooth vulnerabilities, crash all the devices!

• Five Steps to Get a Cybersecurity Job

• How can predictive analysis unlock the potential of 5G?

• Twitter Targets Trolls And Abuse With ‘Safety Mode’

• Hackers Abuse Internet-sharing Services to Monetize their Own Malware Campaigns

• Executive Spotlight: Q&A with EMEA Senior Vice President, Adam Philpott

• House panel overrides Biden’s topline military budget

• Report showss earnings transcripts mention ‘cybersecurity’ 33% more in H1

• Google Play Sign-Ins Allow Covert Location-Tracking

• Execs don’t sound very confident about long-term network security in the WFH era

• What is AS-REP Roasting attack, really?

• The Upcoming U.S. Labor Day Weekend is a Reminder to Avoid Repeating History

• How can predictive analysis unlock the potential of 5G?

• Google Play Sign-Ins Allow Covert Location-Tracking

• Execs don’t sound very confident about long-term network security in the WFH era

• Atlassian Confluence flaw under active attack

• What is AS-REP Roasting attack, really?

• Some Developers Say Apple Letting Apps Like Netflix and Spotify Share a Link to Web for Account Sign-Up Isn’t Enough

• Apple TV+ Show ‘Dickinson’ to End After Season 3, Which Debuts November 5

• A deep-dive into the SolarWinds Serv-U SSH vulnerability

• The Upcoming U.S. Labor Day Weekend is a Reminder to Avoid Repeating History

• EU data watchdog slaps $267m fine on Facebook owned WhatsApp

• Twitter Targets Trolls And Abuse With ‘Safety Mode’

• Hackers Abuse Internet-sharing Services to Monetize their Own Malware Campaigns

• Executive Spotlight: Q&A with EMEA Senior Vice President, Adam Philpott

• House panel overrides Biden’s topline military budget

• Report showss earnings transcripts mention ‘cybersecurity’ 33% more in H1

• FBI and CISA warn that cybercriminals don’t take holidays

• Cisco Patches Critical Authentication Bug With Public Exploit

• Corelight Banks $75M for Network Monitoring Expansion Plans

• Hackers are Selling Tool to Hide Malware in GPUs

• White House Directs Federal Agencies to Improve Logging Capabilities

• Full AirPods 3 Feature Breakdown: Everything Rumors Say We Can Expect

• Prankster acquires Taliban Government domain amidst gov.af limbo

• WhatsApp Fined a Record €225m for GDPR Violations

• This Lightning Cable Will Leak Everything You Type

• WhatsApp Issued Second Largest GDPR Fine Of 225 Million Euro

• Comcast RF Attack Leveraged Remotes For Surveillance

• WhatsApp Patches Vulnerability Related To Image Filter Functionality

• NPM Package With 3 Million Weekly Downloads Had A Severe Vuln

• Vulnerabilities allow attackers to remotely deactivate home security system (CVE-2021-39276, CVE-2021-39277)

• TeleGeography’s Updated Subsea Cable Map Shows Tech Influence

• White House names Mina Hsiang to lead USDS

• FBI and CISA warn of potential cyberattacks this holiday weekend, citing past trends

• Flaws in Moxa Railway Devices Could Allow Hackers to Cause Disruptions

• FTC Bans Spyfone From Surveillance Business

• Israeli Foreign Minister Promises Closer Look at NSO

• Security Researcher Develops Lightning Cable With Hidden Chip to Steal Passwords

• The Evolution of Connected Cars as Defined by Threat Modeling UN R155-Listed Attack Vectors

• Home Addresses Of Gun Owners Leaked By Activist

• The cybersecurity industry is burning — but VCs don’t care

• Air Force chief software officer to resign

• BrakTooth: New Bluetooth Vulnerabilities Could Affect Millions of Devices

• Apple Watch Series 7 Production Will Reportedly Ramp Up at End of September, New MacBook Pros Expected Later in Fall

• What Is a Smurf Attack, How Does It Work and How to Prevent It

• LockBit Leaked Data Belonging to Bangkok Airways

• In space, no one can hear cyber security professionals scream

• Numerous Bugs Found In WooCommerce Dynamic Pricing and Discounts Plugin

• 7 Ways to Defend Mobile Apps, APIs from Cyberattacks

• Recruiting Firm Apparently Pays Ransom After Being Targeted by Hackers

• Attackers are attempting to exploit recently patched Atlassian Confluence CVE-2021-26084 RCE

• Readdle Launches ‘Documents X’ for iPhone and iPad With Smart Actions, Improved Design, and More

• Gutenberg Template Library & Redux Framework Vulnerabilities Affect Over 1 Million WordPress Websites

• 700k French Individuals Had Their Covid Test Results Leaked Online

• Marketing compliance firm Pixalate raises $18.1M

• Earnings transcripts mention ‘cybersecurity’ 33% more in H1: report

• WhatsApp Photo Filter Bug Allows Sensitive Info to Be Lifted

• New BrakTooth Flaws Leave Millions of Bluetooth-enabled Devices Vulnerable

• CCSP Certification vs. CCAK Certificate: What Are the Distinctions?

• Climate Change: Is There a Tech Solution?

• Apple Faces Antitrust Complaint In India Over In-App Payments

• Integrate with SAP: A guide to unified data and a cohesive UX across all business apps

• Security risks to your mobile app and how to avoid them

• Comcast RF Attack Leveraged Remotes for Surveillance

• Digital State IDs Start Rollouts Despite Privacy Concerns

• FTC Bans SpyFone From Surveillance Business for Selling Stalkerware

• Cyber Defense Magazine – September 2021 has arrived. Enjoy it!

• Apple Reportedly in Talks With Toyota About Apple Car Production Starting 2024

• Twitter Super Follows Use a Bizarre System That Gives Each User Their Own In-App Purchase

• Ransomware gangs target organizations during holidays and weekends

• One cybersecurity stock could rally 45% before meeting resistance, trader says

• How Do I Know if I am at Risk for a Ransomware Attack?

• Ireland Fines WhatsApp 225M Euros for Breaching EU Privacy Laws

• Cisco fixes a critical flaw in Enterprise NFVIS for which PoC exploit exists

• Parliamentary Panel: VPN Apps Shield Cybercriminals

• WhatsApp patches vulnerability related to image filter functionality

• Recently Patched Confluence Vulnerability Exploited in the Wild

• UK Researchers Invent Device to Thwart USB Malware

• UK VoIP telco receives ‘colossal ransom demand’, reveals REvil cybercrooks suspected of ‘organised’ DDoS attacks on UK VoIP companies

• Age Appropriate Design Code Arrives To Protect Kids

• How to secure REST with Spring Security

• Tripwire Patch Priority Index for August 2021

• Security for a Hybrid Workforce

• WhatsApp Photo Filter Bug Could Have Exposed Your Data to Remote Attackers

• Google paid over $130K in bounty rewards for the issues addressed with the release of Chrome 93

• Eve Adds Thread Support to HomeKit-Enabled Thermo Smart Radiator Valve

• 16-31 July Cyber Attacks Timeline

• CISA urges enterprises to fix Microsoft Azure Cosmos DB flaw

• ChaosDB, a Critical Cosmos DB flaw affected thousands of Microsoft Azure Customers

• Looking Back at Executive Order on Cybersecurity and What it Means for Your Business

• Zero Click, Russian Fines, and Apple Wallet – Intego Mac Podcast Episode 203

• Cisco Patches Critical Enterprise NFVIS Vulnerability for Which PoC Exploit Is Available

• Bad Bots Focus Attacks on E-Commerce Targets

• QakBot technical analysis

• Apple Shuffles Suppliers for Periscope Telephoto Lens in 2023 iPhones

• NY Credit Union Employee Deletes 21GB of Data in Retaliation for Being Fired

• Chinese Authorities Arrest Hackers Behind Mozi IoT Botnet Attacks

• Is Traffic Mirroring for NDR Worth the Trouble? We Argue It Isn’t

• 9 notable government cybersecurity initiatives of 2021

• CDPSE certification: Requirements, exam, and cost

• China theft of US agriculture sector trade secrets prompts government guidance

• Sacked Employee Deletes 21GB of Credit Union Files

• Ahead of the Labor Day Holiday, the FBI and CISA Warn of Ransomware Risk Over Weekends and Holidays

• Spotify Partners With Delta to Provide Free In-Flight Music and Podcasts Service

• Apple Could Face Investigation in India Over App Store In-App Purchase System

• ‘Mismatch’ in cloud security spend, says CrowdStrike CEO, who sees much room for growth

• Attackers Remotely Exploit Bugs in Linphone Session Initiation Protocol (SIP) Stack

• Do you know what your supply chain is and if it is secure?

• Introduction to Runtime Application Self-Protection (RASP)

• Eastern Europe is a Hotspot for Illegal Cryptocurrency Trading

• Citrix Vulnerability leads to Cyber Attack on US Census Database

• Cyber Attack leads to data breach of Britain’s Gun Enthusiasts

• FTC Bans Stalkerware App SpyFone; Orders Company to Erase Secretly Stolen Data

• Critical infrastructure today: Complex challenges and rising threats

• Kaspersky Lab has reported about Android viruses designed to steal money automatically

• How do I select a hardware security module for my business?

• Previous employees with access to corporate data remain a threat to businesses

• 2021 Q3 Updates from Our Chairperson and CEO: Membership Milestones and More

• ‘Numberless’ bank cards could be the future: here’s why

• Your top five questions on biometric bank cards answered

• theHarvester – Advanced Information Gathering Tool for Pentesters & Ethical Hackers

• The cybersecurity of industrial companies remains low, potential damage can be severe

• Dissected: A dropper-as-a-service miscreants pay to push their malware onto potentially 1,000s of victims

• Network traffic analysis market size to reach $5.69 billion by 2028

• Chinese regulators summon 11 ride-hailing firms, including Didi, over ‘illegal behavior’

• FCW Insider: September 2, 2021

• Australians could soon attach a PDF or hyperlink to a payment

• CIS Control 2: Inventory and Control of Software Assets

• Factors You Should Consider for an Optimal Hybrid Cloud Strategy

• Asset management investment to focus on technology and data infrastructure

• Cyware CTIX Spoke allows ISAC/ISAO members to take necessary actions on ingested threat intelligence

• Prisma Cloud adds Drift Detection to Bridgecrew to improve cloud security posture

• Red Sentry’s pentesting platform automates penetration tests and runs them continuously

• ReaQta Cyber Assistant autonomously handles alert and reduces false positives

• Anomali XDR features extend visibility over a wider range of threat information sources

• Riverbed NetProfiler enhances network cloud visibility to improve business productivity

• Aptum unveils three enhanced tiers for its Managed Azure Cloud services

• FTC bans SpyFone and its CEO from continuing to sell stalkerware

• Apple Letting ‘Reader’ Apps Offer Links for Account Sign Ups Outside of the App Store to Close Japan Investigation

• Victory! Federal Trade Commission Bans Stalkerware Company from Conducting Business

• Logitech’s new Bolt USB dongle boosts the security, reliability and stability of wireless peripherals

• Two Apple Self-Driving Cars Involved in Rear-End Collisions While in Manual Mode, Marking First Minor Incidents in Two Years

• Juniper Networks partners with Intel to drive Open RAN ecosystem innovation

• NICE integrates its cloud compliance suite with Cloud9’s voice trading platform

• Security Compass collaborates with ISA to improve industrial cybersecurity standards

• Arctic Wolf selects AWS as its cloud provider to help customers protect against evolving cyber threats

• Fired credit union employee admits: I wiped 21GB of files from company’s shared drive in retaliation

• OwnBackup acquires RevCult to provide SaaS data protection for organizations

• LogPoint acquires SecBI to expand its SOAR and XDR capabilities

• ZeroFox partners with Mandiant to offer disruption and malicious content takedown capabilities

• NS1 integrates with Datadog to bring real-time data and reporting at the distributed edge

• FTC Bans Stalkerware Company SpyFone | Avast

• Bill would require big social platforms to support data mobility

• Frank Calvelli joins Booz Allen Hamilton as Senior Vice President

• Businesses rapidly adopting OpenVPN’s next-gen VPN solutions

• DigiCert Trust Solutions Partner Program enables partners to deliver PKI solutions to their customers

• Two Apple Self-Driving Cars Rear-Ended While in Manual Mode, Marking First Minor Collisions in Two Years

• Armor names Christine Gassman as Director of Global Channel Engagement

• IT Security News Daily Summary 2021-09-01

• Defense panel bucks Biden on topline military budget

• Data analytics key to USPS transformation, IG says

• Mozi infections will slightly decrease but it will stay alive for some time to come

• House panel mulls mandatory disclosure bill

• Australian Couple Admits “Serious Cyber Hacking Offenses”

• Facebook Apologizes To Mother Of Fallen Soldier For Removing Her Account

• 15-Year-Old Malware Proxy Network VIP72 Goes Dark

• Data privacy laws in the US protect profit but prevent sharing data for public good — people want the opposite

• Twitter creates ‘Safety Mode’ to temporarily block accounts caught insulting users

• Cybersecurity Risks of 5G – And How to Control Them

• Apple Self-Driving Cars Involved in Minor Collisions for the First Time in 2 Years

• Cheap and nasty: How for $100 low-skilled ransom DDoS extortionists can cripple your business

• Amazon To Hire 55,000 People For Corporate, Tech Roles

• The OWASP Top 10 Threats Haven’t Changed in 2021 — But Defenses Have

• Cybercriminals go back to school too

• Local government as a data-driven community platform

• FTC bars alleged ‘stalkerware’ company and its CEO from the surveillance business

• 5.8 Million Malware Attack Detected in 2020 That Disguised as Popular PC Games

• certificate authority (CA)

• 3 strategies to move left of breach

• SAP HANA SECURITY Solution Acquired by XYPRO

• QNAP will patche OpenSSL flaws in its NAS devices

• Court Ruling Against Locast Gets the Law Wrong; Lets Giant Broadcast Networks Control Where and How People Watch Free TV

• NSA: We ‘don’t know when or even if’ a quantum computer will ever be able to break today’s public-key encryption

• Indonesian Govt’s COVID-19 test, trace app leak impacting 1.3m users

• Twitter Launches Paid Super Follows, Creators Can Charge Up to $9.99/Month

• August was a good month for cyber stocks

• FTC bars alleged ‘stalkerware’ executive from the surveillance business

• Relax, says NSA: There’s no such thing as a quantum computer that’ll crack current encryption algos

• Gutenberg Template Library & Redux Framework Bugs Plague WordPress Sites

• Singapore’s GovTech Announces New Vulnerability Rewards Programme

• CISA, FBI Warn of Increase in Ransomware Attacks on Holidays

• SEC Sanctions Eight Firms Over Deficient Cybersecurity Procedures

• Apple Releases Safari Technology Preview 131 With Bug Fixes and Performance Improvements

• Apple Asks All U.S. Employees to Share Vaccination Status, Still No Mandate

• Get Ready for Board Elections – Beginning Soon!

• Interesting as Cyber Attack victim sues hackers parents

• Check Point software to acquire Email Security company Avanan

• Ransomware attacks on schools fetched $6 Billion loss

• Cyber Threat to Labor Day Weekend

• Bilaxy Crypto Exchange Went Offline After Cyber Attack

• Complex Design Causes Apple Watch 7 Production Delay – Report

• Beware of proxyware: Connection-sharing services pose risks

• Experts Find Vulnerabilities in AMD Zen Processor

• Google Reportedly Developing Own Arm-Based Processors for Chromebooks After Being Inspired by Apple Silicon

• Twitter Debuts New ‘Safety Mode’ for Automatically Blocking Unwanted Replies

• Google Play sign-ins can be abused to track another person’s movements

• GuidePoint Security Expands its Service Offerings to Help Customers Ensure They are Better Prepared for the Threat of Ransomware

• CCSP vs. Cloud+: How Do They Stack Up?

• What is 5G shared responsibility and how would it work?

• What Has Changed Since the 2017 WannaCry Ransomware Attack?

• Mozilla Publishes Results of VPN Security Audit

• 25,000 EFF Supporters Have Told Apple Not To Scan Their Phones

• Get free DMARC visibility with Valimail Authenticate and Microsoft Office 365

• HPE Wins NSA Cloud Contract Worth $2bn

• LockBit Jumps Its Own Countdown, Publishes Bangkok Air Files

• UK Cyber Security Council Appoints New Chief Executive

• Too Log; Didn’t Read — Unknown Actor Using CLFS Log Files for Stealth

• Linphone SIP Stack Bug Could Let Attackers Remotely Crash Client Devices

• Cybercriminals Abusing Internet-Sharing Services to Monetize Malware Campaigns

• BrakTooth vulnerabilities put Bluetooth users at risk – and some devices are going unpatched

• The Biggest Phishing Scams of All Time

• Google Releases Security Updates for Chrome

• Feds Warn Of Ransomware Attacks Ahead Of Labor Day

• Cream Finance Platform Pilfered For Over $34 Million In Cryptocurrency

• Fake Banksy NFT Sold Through Artist’s Website For £244k

• This Is Why The Mozi Botnet Will Linger On

• CloudLinux provides extended lifecycle support for CentOS 8 until late 2025

• Quantum networks in our future

• Apple adds driver’s licenses, state IDs to Apple Wallet

• BEC Scammers Seek Native English Speakers on Underground

• Google Releases Security Updates for Chrome

• SEC announces sanctions against entities over email account hacking

• Macs turn on apps signed by Symantec, treat them as malware

• Do Not Use Single-Factor Authentication on Internet-Exposed Systems, CISA Warns

• Five Myths About the Taliban’s New Arsenal

• U.K.’s Post-Brexit Strategy on Cross-Border Data Flows

• Google Appeals $591m Copyright Fine From French Watchdog

• Google Awards Over $130,000 for Flaws Patched With Release of Chrome 93

• 91% of Industrial Organizations Can Be Penetrated by Hackers

• Apple Reportedly Planning Multiple New Apple Watch Health Features, Including Temperature and Blood-Pressure Monitoring

• Fortress Home Security System Flaws Could Allow Remote Disablement

• What is a Cloud Workload Protection Platform (CWPP)? And Why Do You Need It?

• This is why the Mozi botnet will linger on

• Half of businesses can’t spot these signs of insider cybersecurity threats

• Watch out, ransomware attack risk increases on holidays and weekends, FBI and CISA

• Apple Announces First U.S. States That Will Let You Add Your Driver’s License to Your iPhone

• Apple Planning Multiple New Apple Watch Health Features, Including Temperature and Blood-Pressure Monitoring

• The Leaked Data File Containing Details About the Guntrader Customers Has Been Shared

• Expanding Duo’s International Footprint: New Data Centers Opening in Australia, Singapore and Japan

• SEC Sanctions Several Companies Over Email Account Hacking

• [LIVE WEBINAR] How Lean Security Teams Can Improve Their Time to Response

• Microsoft Warns Cloud Customers Of Exposed Databases

• Double-Extortion Ransomware: Double The Threat, Double The Challenges For Businesses

• Patients at DuPage Medical Group May Have Had Their Data Compromised Following a Cyberattack

• Feds Warn of Ransomware Attacks Ahead of Labor Day

• Apple Expands ‘Today at Apple Creative Studios’ Initiative to Washington and Chicago

• Android game developer EskyFun exposed 1 million gamers to hackers

• Check Point Harmony: A secure solution for remote users

• Cybersecurity M&A Roundup: 42 Deals Announced in August 2021

• Latest Telegram Update Uncaps Number of Live Video Stream Viewers

• A fake Banksy NFT sold for more than $300,000. Then the buyer got his money back

• Vauxhall Boss Says Chip Shortage To Last Months

• Top Five Pitfalls When Considering Client Side Security

• Vulnerability Allows Remote DoS Attacks Against Apps Using Linphone SIP Stack

• Credential Phishing and Brute Force Attacks Continue to Surge

• LockBit ransomware operators leak 200GB of data belonging to Bangkok Airways

• Zero-Click iPhone Exploits

• Apple Returns to In-Person ‘Today at Apple’ Sessions in Europe

• Apple TV+ Documentary ‘9/11: Inside the President’s War Room’ Now Available

• Ransomware Attacks Happening More on Holidays and Weekends

• Why Wedbush’s Ives says these cybersecurity stocks are winners

• Google Delays Office Return Until 10 January 2022

• CISA: Plan Now to Avoid Labor Day Breach

• Ransomware Attacks Soar 288% in First Half of 2021

• Token-Based Security, OAuth, OIDC and IdentityServer4 – Part 3

• Tackling the Threat Intelligence Problem with Multiple Sources and Robust RFI Services

• Gurman: ‘No Chance’ Apple Watch Series 7 Will Include Blood Pressure Sensor

• How to Recover Your Gmail, Yahoo, Microsoft, Facebook, Twitter or Instagram Account

• Coinbase Customers Scared After 2FA Change Notifications Were Sent By Mistake

• Proxyware Platforms Increasingly Targeted by Cybercriminals

• Banksy NFT Scammer Returns £240,000 to Victim

• How to find the right testing tool for Okta, Auth0, and other SSO solutions

• Unpatched Exchange Servers an overlooked risk

• Logitech Bolt: New wireless protocol provides added security for mice and keyboards

• Scam artists are recruiting English speakers for business email campaigns

• Cream Finance platform pilfered for over $34 million in cryptocurrency

• Over 100 arrests in crackdown against Albanian clan running industrial cannabis operation in Spain

• Driver’s License Exploitation Scams Surge

• Google Pixel 6 Rumored to Support 23W Wireless Charging, Beating iPhone 12’s MagSafe

• Philips Hue Lights Getting Deep Spotify Integration

• Build your own Android security product

• QNAP Working on Patches for OpenSSL Flaws Affecting its NAS Devices

• Philips Hue Line Gains New Gradient-Enabled Lights, Updated Filament Bulbs and More

• HPE: Sudo Flaw Grants Attackers Root Privileges to Aruba Platform

• Using zero trust to mitigate 5G security challenges

• Data From Fujitsu is Being Sold on the Dark Web

• Finding and using the right cybersecurity incident response tools

• The cybersecurity metrics required to make Biden’s Executive Order impactful

• Indonesian authorities probe million-record leak from national COVID app

• Getting ahead of a major blind spot for CISOs: Third-party risk

• The FBI issued a flash alert for Hive ransomware operations

• Asset Visibility – Breaking the Fourth Wall in Cybersecurity

• Phishing Attack Prevention: Best 10 Ways To Prevent Email Phishing Attacks

• New standard enhances the cybersecurity of pipeline control systems

• Singapore adds a third bug bounty program – this time to fortify government digital services

• Hybrid work is here to stay, but security concerns are high

• Apache Kafka in Cybersecurity for Situational Awareness in Real-Time

• Overcome the Security and Compliance Challenges in DevSecOps

• CPaaS market to exceed $5 billion in 2021

• Fivetran Business Critical delivers enterprise-grade security to address sensitive data requirements

• FileCloud Compliance Center automates data protection across federal agency standards

• Facebook Quietly Makes a Big Admission

• Afghanistan’s reported data breach has life-and-death consequences

• The ‘Unhackable’ Wii Mini Has Been Hacked

• RNA vaccines seem to produce very different antibody levels

• Coinbase erroneously reported 2FA changes to 125,000 customers

• Vaccine passports: Is your personal data in safe hands?

• Don’t use single‑factor authentication, warns CISA

• Flaw in the Quebec vaccine passport: analysis

• Token-Based Security, OAuth 2.0, OIDC and IdentityServer4: Part 2

• Federal 100’s cloud champions

• Integrating cloud-native security and DevSecOps workflows

• NETGEAR Nighthawk M5 5G WiFi 6 Mobile Router provides WiFi connection for use anywhere

• DNP Reflect Array expands 5G coverage area for mobile communications systems

• Kaspersky stopped 5.8 million malware attacks ‘disguised as popular PC games’ in 2020

• Auto Apply IPS Rules for Solid Cloud Workload Security

• Attivo Networks and Swimlane empower organizations to get ahead of would-be cyber attacks

• Rambus PCIe 5.0 digital controller operates at 32 GT/s on leading FPGA platforms

• Prosegur Security and Everseen enhance physical security in retail with human-centric AI solutions

• Entersekt partners with BankID to support digital identity requirements on a single platform

• D3 Security raises $10M to accelerate advancement of its next-generation SOAR platform

• How to use Metasploit commands and exploits for pen tests

• LockFile Ransomware uses a new intermittent encryption technique

• HGC offers fast connectivity for Google Cloud Partner Interconnect customers

• FBI, CISA warn of potential cyberattacks over Labor Day weekend

• What It’ll Take to Get Power Back in New Orleans After Ida

• Where does the TMF Board go from here?

• IT Security News Monthly Summary – September

• Best Linux Backup Solutions to Prevent Data Loss in A Ransomware Attack>

• August 2021 Security Intelligence Roundup: Pipeline Changes, Social Engineering and Software Supply Chain Attacks

• Governments continue to eye data privacy, forcing CIOs to adapt

• Useful Mac Apps Worth Checking Out – August 2021

• Crowdstrike beats Q2 estimates with strong subscription growth

• Cream Finance DeFi Platform Rooked For $29M

• Fortress Home Security Open to Remote Disarmament

• SEC sanctions financial firms for cybersecurity failures

• Proxyware Services Open Orgs to Abuse – Report

• Don’t forget to evaluate soft skills when hiring for cybersecurity positions

• College students targeted by money mule phishing techniques

• Twitter for iOS Beta Lays Groundwork for Bitcoin Tips

• Apple Releases New macOS 12 Monterey Public Beta

• CrowdStrike reports Q2 earnings

• Bangkok Airways hit by Lockbit ransomware; leaks 103GB of data

• Identity is replacing the password: What software developers and IT pros need to know

• Ping Identity CEO explains how identity and access management is replacing the password

• Victim of Cyber-Theft Sues Parents of Alleged Culprits

• Threat actors can remotely disable Fortress S03 Wi-Fi Home Security System

• New Labor Dept. office will focus on UI modernization

• US officials, experts fear China ransacked Exchange servers for data to train AI systems

• DIY redistricting allows public to draw maps in more states

• A passwordless future isn’t close: It’s here

• Roadblocks to autonomous cars: Top 5

• Top 5 autonomous car roadblocks

• Bangkok Airways Hit By LockBit Ransomware Attack

• Indonesians Told to Delete Unsecured Tracing App

• LockFile Ransomware Uses Unique Methods to Avoid Detection

• FBI-CISA Advisory on Ransomware Awareness for Holidays and Weekends

• Apple Releases Revised Version of Latest AirTags Firmware Update

• Water Wars: A Time for Choosing? Not for Southeast Asia, Say VP and SECDEF

• Don’t want to get hacked? Then avoid these three ‘exceptionally dangerous’ cybersecurity mistakes

• Cybersecurity experts called the signs of smartphone hack

• ‘Crossy Road’ Coming Soon to Apple Arcade for iPhone and iPad

• Reduce the Harm of a Data Breach With Data Security Analytics

• federated identity management (FIM)

• IG reports delays in COVID notification in GSA facilities

• Data compliance: “The world is still waking up to the challenges ahead,” expert says

• Data privacy, governance and insights are all important obligations for businesses

• Skimming the CREAM – recursive withdrawals loot $13M in cryptocash

• Illinois Physicians Notify 600K Patients of Data Breach

• Report: Facebook Will Begin Deprioritizing Political Content In Users’ News Feeds

• Ransomware Awareness for Holidays and Weekends

• Apple Seeds Eighth Beta of tvOS 15 to Developers

• Apple Seeds Eighth Beta of watchOS 8 to Developers

• Apple Seeds Eighth Betas of iOS and iPadOS 15 to Developers

• Ransomware Awareness for Holidays and Weekends

• FBI-CISA Advisory on Ransomware Awareness for Holidays and Weekends

• What Can You Learn from a Reverse IP Lookup?

• Don’t want to get hacked? Then avoid these three “exceptionally dangerous” cybersecurity mistakes

• WooCommerce Pricing Plugin Allows Malicious Code-Injection

• T-Mobile CEO Apologizes for Hack of More Than 54 Million Users Data

• Apple Acquires Classic Music Service Primephonic

• UK Government Considers New Regulations for Video Streaming Platforms

• Apple Watch Series 7 Production Reportedly Delayed Due to Quality Issues

• Nomad Debuts MagSafe-Compatible Base Station Mini

• Vaccine Passport Missteps We Should Not Repeat

• Microsoft a Leader in 2021 Gartner® Magic Quadrant™ for Unified Endpoint Management Tools

• Cosmos DB users advised to regenerate their keys following serious vulnerability

• Microsoft warns of credential phishing attack abusing open redirect links

• Top 3 API Vulnerabilities: Why Apps are Pwned by Cyberattackers

• QNAP Is Latest to Get Dinged by OpenSSL Bugs Fallout

• Hackers Can Now Bypass PIN Codes on Mastercard and Maestro Contactless Cards

• New Edition of Pipeline Cybersecurity Standard Covers All Control Systems

• H1 2021: Malware and Vulnerability Trends Report

• ‘Being James Bond’ Retrospective Will Be Free to Watch Through Apple TV App

• Startup success: manoeuvring a competitive industry

• Instagram To Require Date Of Birth From All Users

• Microsoft Warns of Widespread Open Redirects Phishing Attacks

• Google, Microsoft To Invest $30B in Cybersecurity

• HPE wars customers of Sudo flaw in Aruba AirWave Management Platform

• Network Controls in the DevSecOps life cycle

• LockFile Ransomware Uses Never Before Seen Encryption To Avoid Detection

• Singapore Government Expands Bug Hunt With Hacker Rewards

• Coinbase Erroneously Reported 2FA Changes To 125,000 Customers

• LockBit Gang To Publish 103GB Of Bangkok Air Customer Data

• HPE Warns Sudo Bug Gives Attackers Root Privileges To Aruba Platform

• Full iPhone 13 Feature Breakdown: Everything Rumors Say We Can Expect

• CISA Advises Users to Not Use Single-factor Authentication on Internet-exposed Systems

• Code Red: Hospitals Are Facing a Major Ransomware Threat

• SASE, Cloud Threats and MITRE

• Verizon and Microsoft team up to offer 5G edge cloud computing for businesses

• Top 3 API Vulnerabilities: Why Apps are Owned by Cyberattackers

• Delta variant: Is your IT department ready to go fully remote again due to COVID-19?

• Kaspersky: Kanye’s Upcoming Album is a Scam Magnet

• Chinese Developers Reveal Android Gamers’ Data

• Critical Cosmos Database Flaw Affecting Microsoft Azure Customers

• Legal Consequences Possible by Cybersecurity Standards Non-Compliance

• CISA Expands ‘Bad Practices’ List With Single-Factor Authentication

• Study Reveals Challenges & Opportunities for Secure Hybrid Workforce

• Introducing SASE Converge 2021: The Summit for What’s Next in SASE

• Analyst Discusses Apple Car’s Key to Success, Says Steve Jobs Would Be Proud of Tim Cook’s Legacy

• Joby Debuts New GorillaPod-Compatible MagSafe Mounts

• How Congress and NIST Can Help Organizations Better Manage Cyber Risk

• Ransom DDoS: What you need to know now

• Technical Flaw Led to Canada Accepting Thousands of Immigration Applications

• ProxyToken: Another nail-biter from Microsoft Exchange

• Leaked Guntrader firearms data file shared. Worst case scenario? Criminals plot UK gun owners’ home addresses in Google Earth

• Bangkok Airways Disclosed Data Breach Following A Possible Ransomware Attack

• Malware Analysis Online: Why You Need It Now For Your Cloud Environment

• South Korea Passes Bill To Curb In-App Purchase Charges

• Top 3 APIs Vulnerabilities: Why Apps are Owned by Cyberattackers

• Vulnerabilities Can Allow Hackers to Disarm Fortress Home Security Systems

• Twelve South Launches StayGo Mini USB-C Hub for Macs and iPads

• Apple Commits Extra $30 Million to Racial Equity and Justice Initiative

• Cream Finance Deprived of over $29 million in Cryptocurrency Assets

• Cyberattacks Use Office 365 to Target Supply Chain

• Texas, California, New York, Louisiana, Missouri lead list of states with most ransomware attacks on schools: report

• Cyberattackers are now quietly selling off their victim’s internet bandwidth

• Initial Access Broker use, stolen account sales spike in cloud service cyberattacks

• Cybercriminals buy up admin credentials to sharpen attacks on cloud deployments

• Researchers Propose Machine Learning-based Bluetooth Authentication Scheme

• Attackers Can Remotely Disable Fortress Wi-Fi Home Security Alarms

• User Group-Level Policy: The Sharpest Knife in the Drawer

• Starve the Beast: Monopoly Power and Political Corruption

• Cybercriminals are holding schools ransom for billions and some are paying up

• Ransomware May Have Cost US Schools Over $6bn in 2020

• What you see is what you get … to protect

• Interest in Switching to iPhone Drops Among Android Users Ahead of iPhone 13 Launch, Survey Shows

• Threat actors stole $19 million worth of crypto assets from Cream Finance

• More Military Cryptanalytics, Part III

• Microsoft warns of phishing campaign abusing ‘open redirects’

• CISA Bad Practices list updated to include single-factor authentication (SFA)

• New Konni RAT Campaign Ongoing

• China Limits Kids To Three Hours Of Video Games A Week

• Companies Release Security Advisories in Response to New OpenSSL Vulnerabilities

• ‘ProxyToken’ Exchange Server Vulnerability Leads to Email Compromise

• Lockbit Ransomware Suspected Behind the Attacks on Envision Credit Union

• Microsoft Exchange ProxyToken flaw can allow attackers to read your emails

• A Microsoft Exchange ProxyToken Bug May Allow Hackers to Steal User Emails

• Cream Finance Crypto Exchange Hacked – Lost $29 Million To Attackers

• Chip Shortage Forces Stellantis To Extend Car Factory Shutdowns

• Check Point CloudGuard Network Security is a Launch Partner for Amazon VPC Enhanced Routing

• This phishing attack is using a sneaky trick to steal your passwords, warns Microsoft

• LockFile Ransomware Uses Never-Before Seen Encryption to Avoid Detection

• A Case for Recruiting and Retaining “Franchise Players” in Security Software Development

• South Korea Passes Bill Banning Apple From Requiring Developers to Use App Store In-App Purchase System

• Kanye West’s ‘Donda’ Sets 2021 Apple Music Record With 60 Million First-Day Streams

• Report Warns of COP26 Cyber-Threat to Glasgow

• Fines Issued by the ICO Surge by 1580% in 2020/21

• LockFile Ransomware Circumvents Protection Using Intermittent File Encryption

• Samsung Galaxy Watch Gets Walkie-Talkie App Similar to Apple Watch Feature

• QNAP Will Soon Release Security Patches for OpenSSL Vulnerabilities Affecting Its NAS Devices

• Security engineer job requirements, certifications, and salary

• How ransomware runs the underground economy

• Quick Hits

• FCW Insider: August 31, 2021

• Bangkok Airways Admits Attackers Stole Passenger Data

• No, That Notchless iPhone Spotted in ‘Ted Lasso’ Isn’t the iPhone 13

• Code Generated by GitHub Copilot Can Introduce Vulnerabilities: Researchers

• White Hat Hacking And CDU | Avast

• Looking for adding new detection technologies in your security products?

• Apple TV+ Shares ‘The Velvet Underground’ Trailer Ahead of October 15 Premiere

• Check Point acquires Avanan to deliver email and collaboration suite security for organizations

• Phorpiex Malware has Shut Down their Botnet and Put its Source Code for Sale

• Drowning in cybersecurity info? Make a dash to Security SOS Week 2021

• LockFile Ransomware Exploit ProxyShell Vulnerabilities in Microsoft Exchange Servers

• CISA Adds Single-Factor Authentication to the List of Bad Practices

• The consumerization of the Cybercrime-as-a-Service market

• Cyber Threat to Glasgow COP26

• How secure is Apple iPhone 13 Satellite Connectivity

• Why companies should never hack back

• Bangkok Airways hit by LockBit ransomware attack, loses lotsa data after refusing to pay

• Singapore government expands bug hunt with hacker rewards scheme

• Increase in credential phishing and brute force attacks causing financial and reputational damage

• Online tests could help organizations plug the skills gap

• Building for transactional workloads is the primary concern around deploying Kubernetes

• New Microsoft Exchange ‘ProxyToken’ Flaw Lets Attackers Reconfigure Mailboxes

• Cybersecurity awareness is one of the skills needed for a post-pandemic economy

• Getting Started with a Tripwire Configuration Manager Free Trial

• eBook: Aligning cyber skills to the MITRE ATT&CK framework

• How To Prepare for SOC 2 Compliance: SOC 2 Types and Requirements

• 2021-08-30 – Quick post: TA551 (Shathak) BazarLoader

• Absolute DataExplorer enables IT and security teams to capture critical endpoint data

• Chinese state media says online gaming for minors now limited to three hours per week

• Strider launches risk intelligence tool to protect intellectual property

• Kids and Teens in China Banned From Playing Online Video Games for More Than 3 Hours Per Week

• New detection category for eXpurgate customers

• Fujitsu says stolen data being sold on dark web ‘related to customers’

• The Federal Circuit Has Another Chance to Get it Right on Software Copyright

• Spending debate brews ahead of NDAA markup

• Passport info and healthcare data leaked from Indonesia’s COVID-19 test-and-trace app for travelers

• Bloomberg: Apple Working on Emergency Satellite Features for iPhones, 2021 Launch Unlikely

• Victory! Lawsuit Proceeds Against Clearview’s Face Surveillance

• VA’s Cussatt heads to State

• HPE Warns Sudo Bug Gives Attackers Root Privileges to Aruba Platform

• Boffins find if you torture AMD Zen+, Zen 2 CPUs enough, they are vulnerable to Meltdown-like attack

• IT Security News Daily Summary 2021-08-30

• Hanwha Techwin Wisenet 7 Competes in 2021 ‘ASTORS’ Awards

• EFF to Council of Europe: Flawed Cross Border Police Surveillance Treaty Needs Fixing—Here Are Our Recommendations to Strengthen Privacy and Data Protections Across the World

• New ‘ProxyToken’ Exchange Server vulnerability disclosed

• Report: Facebook Is Struggling With Ivermectin Misinformation

• API Releases New Standard for Pipeline Control Systems

• Army Testing Facial Recognition in Child-Care Centers

• Top static malware analysis techniques for beginners

• Malware analysis for beginners: Getting started

• Apple Seeds Sixth Beta of macOS Monterey to Developers

• 4 ways the pandemic forced local governments to rethink budgeting and technology

• Zero trust is not enough: The case for continuous control validation

• The Underground Economy: Recon, Weaponization & Delivery for Account Takeovers

• Check Point Buys Cloud Email Security Provider Avanan

• iPhone 13 Satellite Support Rumor Disputed, Likely for Additional 5G Spectrum

• Coinbase mistakenly notified users that security settings had been changed

• Containers in the Cloud: Key Benefits and Challenges

• Three Preventative Strategies to Help Mitigate Asset Risk in Your Agency

• BrandPost: Building Network Efficiency at Hundreds of Locations Worldwide with Fortinet Secure SD-WAN

• LockFile ransomware uses intermittent encryption to evade detection

• Paying ransom should be your last resort, cybersecurity expert says

• Expert: Governments and businesses must come together to combat ransomware threat

• Rights Group Advises Afghans to Delete Data

• ‘Raymond and Ray’ Starring Ewan McGregor and Ethan Hawke Coming to Apple TV+

• Karkinos – Beginner Friendly Penetration Testing Tool

• iCloud phishing scam – Man stole private photos of 620,000 women

• Expired driver’s licenses open lane for cybercriminals

• Microsoft Exchange ‘ProxyToken’ Bug Allows Email Snooping

• Normalizing Surveillance

• GSA launches new Digital Corps to attract early-career techies

• Cyber-thieves Hit DeFi Platform Again

• Instagram to Require Users to Provide Their Date of Birth

• Intego Earns 100% Detection in AV-Comparatives 2021 Independent Testing

• logic bomb

• Microsoft 365’s new security model: How to use phishing simulations and security mailboxes

• Apple Acquires Classical Music Service Primephonic, Will Launch Dedicated Classical Music App

• US DOJ Announces Cyber Fellowships

• 10 Reasons to Trust Your Enterprise APIs

• Cyber Citizenship Education is Essential

• LEGO Star Wars Battles Coming Soon to Apple Arcade

• How to prepare for CMMC compliance as a defense industrial base supplier using the Microsoft cloud

• Details about Microsoft Azure Cosmos DB vulnerability

• Quantum Security and AI: Building a Future Together

• Where are you on your DevSecOps journey?

• IronNet co-CEO on the completion of its SPAC merger

• A week in security (August 23 – August 29)

• Multilingual Cybersecurity Awareness Training adapted for your needs

• LockBit Gang to Publish 103GB of Bangkok Air Customer Data

• Access Granted: How the DoD Can Stay Cyber-Resilient

• Covid-19 And Working Moms | Avast

• Ragnarok Ransomware Gang Releases Free Master Decryptor After Shutdown

• CISA Adds Single-Factor Authentication to list of Bad Practices

• US DoJ announces the creation of Cyber Fellowship Program

• Apple to Donate to Hurricane Ida Relief and Recovery Efforts

• Hyper Launches New Color Matched USB-C Hubs for M1 iMacs

• Mastercard and Maestro PIN Bypass: a Test Made by Swiss Researchers

• Boston Public Library Hit by Cyberattack

• BazaLoader Malware Hides in False DMCA and DDoS Complaints

• How to Maintain PCI-DSS Compliance for E-commerce Applications

• CISA Adds Single-Factor Authentication to list of Bad Practices

• South Korea Delays Bill That Would Ban Apple From Requiring Developers to Use In-App Purchase System

• Tweetbot Updated With New ‘Behaviors’ Menu on iPhone and iPad

• What Is Known About ISIS-K Funding in Afghanistan?

• 5 high-profile DDoS attacks that should chill you to the bone

• How to use phishing simulations and security mailboxes with Microsoft 365’s new security model

• ISRAELI FIRM ‘BRIGHT DATA’ (LUMINATI NETWORKS) ENABLED THE ATTACKS AGAINST KARAPATAN

• Australia Continues to Scrutinize Apple Pay Amid Push for Regulation

• LokiBot Banking Trojan Uses Old Tricks to Lure Victims

• T-Mobile Breach Update: CEO Confirmed Brute Force Attack On Network

• Boston Public Library Suffers Outages Following A Cyber Attack

• FBI Alerts About Hive Ransomware Amidst Rising Attacks On Healthcare Systems

• Singapore Eye Clinic Suffered Ransomware Attack, Lost 73,000 Patients Data

• CISA urges enterprises to fix Microsoft Azure Cosmos DB flaw

• Microsoft Azure Customers Warned of Critical Bug Found in Cosmos DB

• 8 Best Motherboards for Ryzen 9 3900X 2021 – Buying Guide

• Bangkok Airways apologizes for passport info breach as LockBit ransomware group threatens data leak

• Hybrid work here to stay: What does that mean for security?

• U.S. Justice Department Introduces Cyber Fellowship Program

• Exploitation of Flaws in Delta Energy Management System Could Have ‘Dire Consequences’

• How Does MTA-STS Improve Your Email Security?

• Apple Shares Trailer for ‘The Problem With Jon Stewart,’ Show to Be Accompanied by Podcast

• Rob Bolton and Jed Butcher Are Joining Heimdal™ Security’s Executive Team as Chief Revenue Officer and Chief Financial Officer

• DirtyMoe Botnet Is Back and It Has Surprises

• Understanding Cobalt Strike Profiles

• 7 Security Tools to Safeguard Enterprise Data

• China’s PIPL privacy law imposes new data handling requirements

• Spotify, Epic Unsatisfied With Apple’s App Store Changes

• Western Digital ‘In Talks’ To Buy Kioxia In $20bn NAND Deal

• Amazon-Backed Electric Car Maker Rivian Files For IPO

• Lessons learned on building cyber resilience

• T-Mobile Hack Involved Exposed Router, Specialized Tools and Brute Force Attacks

• Scarlett Johansson and Chris Evans to Star in Apple TV+ Movie ‘Ghosted’

• SideWalk Modular Backdoor Discovered in Newly Launched APT Campaigns

• Afghanistan’s Internet: who has control of what?

• Singapore touts need for security, use cases as 5G rollouts gather steam

• Waymo Stops Selling Lidar To Outside Companies

• Clubhouse Rolls Out Spatial Audio to iOS Users

• Microsoft Notifies About an Ongoing Open Redirects Phishing Campaign

• CISA, Microsoft Issue Guidance on Recent Azure Cosmos DB Vulnerability

• Cofense Report Analysis on Phishing Campaign Utilizing Vzwpix

• FCW Insider: August 30, 2021

• Researchers Discovered a Vulnerability in Microsoft Azure’s Cosmos DB

• Vulnerabilities Detected in Open Source elFinder File Manager

• The 7 best password managers for business

• An Overview of Magecart Attacks | Avast

• EU Set To Launch Formal Probe Of Nvidia’s ARM Takeover

• US Says Policy Against Huawei Has ‘Not Eased’

• Honduras Sets Up First Bitcoin ATM

• Boston Public Library discloses cyberattack

• Trying to register your antivirus in Windows Security Center?

• Back-to-school Tips For A Surprise Quarantine | Avast

• Customers of Russian banks will be recognized by the veins with the help of a new technology

• Hackers, tractors, and a few delayed actors. How hacker Sick Codes learned too much about John Deere: Lock and Code S02E16

• New variant of Konni RAT used in a campaign that targeted Russia

• Boston Public Library hit by Cyber Attack

• Drilling Rigs in deepwater are vulnerable to Cyber Attacks

• Operationalize AWS security responsibilities in the cloud

• Cyber threats, passenger vessels and superyachts: The current state of play

• Chinese A.I. firm SenseTime files for Hong Kong IPO despite tech crackdown and U.S. blacklist

• Microsoft warns of a Widespread Phishing Campaign to Steal Login Credentials

• Debunking myths about consumer expectations around mobile apps security

• File upload security best practices rarely implemented to protect web applications

• China’s regulatory crackdown has wiped billions off tech stocks — here are the risks ahead

• How enterprises use security operations to modernize their business

• Consumers value privacy more than potential savings when purchasing insurance

• Failing to Meet Cybersecurity Standards Can Have Legal Consequences for Companies

• ‘Ted Lasso’ Tops Hollywood Critics Association TV Awards

• Webinar: Practical steps to build a risk-based application security program

• Serverless security market size to reach $5.1 billion by 2026

• Query.AI’s enhancements drive efficiencies in cybersecurity investigations

• Why torrenting on Elon Musk’s Starlink is not a good idea?

• Boston Public Library Hit With Cyberattack

• Experts Warn of Dangers From Breach of Voter System Software

• IT Security News Weekly Summary – Week 34

• IT Security News Daily Summary 2021-08-29

• T-Mobile hacker used brute force attack to steal customers’ data

• Forrester: Why APIs need zero-trust security

• Thinking about CAP or CISSP? Here’s How They Compare.

• Kuo: iPhone 13 to Feature LEO Satellite Communications to Make Calls and Texts Without Cellular Coverage

• 1 GB of data belonging to Puma available on Marketo

• Kuo: iPhone 13 to Feature LEO Connectivity to Make Calls and Texts Without Cellular Coverage

• Scammers Use Fake DMCA Complaints, DDoS Threats to Deploy BazaLoader Malware

• 6 Things You Need to Do to Prevent Getting Hacked

• Apple Watch Series 7 Expected to Feature New Watch Faces to Take Advantage of Larger Displays

• Apple Makes Season One of TV+ Mystery Drama ‘Home Before Dark’ Free to Watch

• Universal Control Works in macOS Monterey Beta 5, But Terminal Commands Required to Enable It

• VPN Unlimited deal: Save 80% on a lifetime subscription for 5 devices

• Fraudsters Pose as Europol Chief in an Attempt to Steal Victims PayPal Account Details

• Boston Public Library Affected by Cyberattack

• The FBI has Issued a Warning About the Hive Ransomware Gang

• Security Affairs newsletter Round 329

• Week in review: ProxyShell and Realtek SDK vulnerabilities exploitation, automated pentesting

• Get Lifetime Access to 24 Professional Cybersecurity Certification Prep Courses

• DDoS attacks target the Philippine human rights alliance Karapatan

• Penetration testing

• Some Synology products impacted by recently disclosed OpenSSL flaws

• Navigating the Troubled Waters of Risk Management

• 3 SSL VPN vulnerabilities disclosed in 2019 are still routinely exploited

Generated on 2021-09-05 23:59:40.915572