IT Security News Weekly Summary – Week 37

• IT Security News Daily Summary 2021-09-19

• Epik – 15,003,961 breached accounts

• Here’s When You Can Download iOS 15 and iPadOS 15 in Time Zones Around the World

• Cyber EO and Meeting Cloud Modernization Effort

• iPhone 13 Orders Begin Shipping From Apple Ahead of Friday Launch

• DDoS Attack Service Admin Behind 200,000 Attacks Face 35 Years in Prison

• Numando, a new banking Trojan that abuses YouTube for remote configuration

• Apple Patched FORCEDENTRY Bug That NSO Exploited Against iPhone Users

• Distros and RegRipper

• Thinking Long Term About the Future of Afghanistan

• City of Yonkers Refuses to Pay Ransom After Attackers Demand $10 million

• Gurman: New AirPods Pro and Redesigned iPad Pro Coming in 2022

• Internet2-Driven Cybersecurity Solutions for Education

• Why Edward Snowden is urging users to stop using ExpressVPN?

• New Malware Variant Employs Windows Subsystem for Linux for Attacks

• Hackers Impersonate Bank Customers and Make $500k in Fraudulent Credit Card Payments

• German Election Authority Confirms Probable Cyber Attack

• On Writing DFIR Books, pt II

• How to Set Up a NAS to Securely Share Files

• Security Affairs newsletter Round 332

• Week in review: Kali Linux 2021.3, how to avoid cloud configuration breaches, hybrid digital dexterity

• Penetration testing

• TokenBased Security, OAuth, OIDC, IdentityServer – Part 5

• Hackers attack Russian organizations through a new Microsoft Office vulnerability

• Entersekt offers FIDO authentication to improve security for financial institutions

• How To Protect Yourself From Malicious Websites While Online

• Gunther Bright joins McAfee Board of Directors

• IT Security News Daily Summary 2021-09-18

• AT&T Free Msg: You know you shouldn’t click … so we did it for you!

• Capoae Malware Attacking Linux systems & Web Apps Using Multiple Vulnerabilities

• The Biden administration plans to target exchanges supporting ransomware operations with sanctions

• Edward Snowden urges users to stop using ExpressVPN

• Threat actor has been targeting the aviation industry since at least 2018

• Telegram emerges as new dark web for cyber criminals

• FCC Commissioner Calls For More Transparency, Accountability From Facebook

• Scammers Use ‘IT Support-Themed Email’ to Target Organizations

• Republican Governors Association Targeted in Microsoft Exchange Server Attacks

• Get two extra displays for your laptop plus a lifetime of powerful VPN protection

• Former US Intelligence Operatives Admit They Hacked for UAE

• Top Stories: iPhone 13, Apple Watch Series 7, New iPads, and More

• The FCC is trying to stop robocalls, but the scammers won’t disappear

• Expert discloses details and PoC code for Netgear Seventh Inferno bug

• South Africa’s Department of Justice hit by a Ransomware Attack

• A Look at the Triple Extortion Ransomware

• Epik Data Breach- Blue Hexagon Comments

• Build or Buy your own antivirus product

• Indicator Of Attack(IoA’s) And Activities – SOC/SIEM – A Detailed Explanation

• National Small Business Week: 10 Best Practices for Small Business Cybersecurity

• 2021-09-17 – Squirrelwaffle Loader with Cobalt Strike

• SnapLogic Flows enables non-technical business teams to build integrations and automations

• Mirantis Flow provides virtualization and containerization in the data center

• Numando: Count once, code twice

• Week in security with Tony Anscombe

• Apple and Google Go Further Than Ever to Appease Russia

• Weekly Update 261

• Kolide raises $17M to fuel the growth and expansion of its go-to market strategy

• Cytracom acquires OmniNet to deliver security and connectivity solutions for their customers

• TTEC hit with ransomware attack, hampering work for major clients

• CVE-2021-26333 AMD Chipset Driver flaw allows obtaining sensitive data

• Jason Chan joins Torq CISO Advisory Board

• Yes, of course there’s now malware for Windows Subsystem for Linux

• BLM to bring leadership back to D.C.

• IT Security News Daily Summary 2021-09-17

• 2021-09-14 – Pcap and malware for an ISC diary (Hancitor with Cobalt Strike)

• Friday Squid Blogging: Ram’s Horn Squid Shells

• $133 million lost in online romance scams in 2021: FBI

• Best VPN for iPhone and iPad 2021

• Attackers Exploit OMIGOD Flaw in Azure Despite Microsoft Fixes

• Apple fixes actively exploited FORCEDENTRY zero-day flaws

• HTML Smuggling: A Resurgent Cause for Concern

• New CIOs: 5 Key Steps in Your First 100 Days

• AI Weekly: UN proposes moratorium on ‘risky’ AI while ICLR solicits blog posts

• Minnesota launches digital vaccination record

• Experts warn that Mirai Botnet starts exploiting OMIGOD flaw

• How California’s Broadband Infrastructure Law Promotes Local Choice

• Humio Recognized as Top 3 Observability Award Winner by EMA

• Shining a Light on DarkOxide

• Gem State University Saves a Small Fortune on TCO With Humio

• Hurricane Ida knocked out key NARA system

• IRS’ plans for cracking cryptocurrency wallets

• Securing Home Employees with Enterprise-Class Solutions

• How to use VPN to access blocked websites?

• How to Protect Against Deepfake Attacks and Extortion

• Recently reported Microsoft zero-day gaining popularity with attackers, Kaspersky says

• Prison for AT&T Phone-Unlocking Fraudster

• More Tribes Given Enhanced Access to US Crime Data

• How not to get caught in law-enforcement geofence requests

• MacRumors Giveaway: Win an iPhone 13 Pro or Pro Max From iMazing

• Biden administration set to ban crypto for ransomware payments

• How To Start a Successful Phishing Simulation Program

• How Ethical Hacking Optimizes Your Cybersecurity

• This Week in Security News – September 17, 2021

• Porn Problem: Adult Ads Persist on US Gov’t, Military Sites

• Have you tried to guess your boss’s password? Lots of workers have, according to a report

• Hackers Alter Cobalt Strike Beacon to Target Linux Environments

• How Agencies Can Refine Threat Intelligence Through Automation

• Apple to Require COVID Testing for Employees Starting Next Month, Still No Vaccine Mandate

• Apple and Belkin Reducing Environmental Impact of Packaging With iPhone 13 Launch

• Google Fixed Two Chrome Zero-Day Bugs Under Attack

• Cybersecurity Risk Management During the Covid-19 Time

• Small businesses need to step up efforts to secure and retain hybrid workers

• Dell study finds most organizations don’t think they can recover from a ransomware attack

• Credit Union’s Legal Battle With Tech Giant Fiserv Rumbles On

• Renewable AppleCare+ Coverage for Mac Now Available in Australia, Canada, France, Germany, Italy, Japan, Spain, and the UK

• Something phishy: Tech recruiters jabbed by fake COVID-19 Passport scam

• Are You the Keymaster?

• Identity in Africa – an existential right for every citizen

• How Estonia Created Trust in Its Digital-Forward Government

• Free REvil Decryptor Launched

• Microsoft MSHTML Flaw Exploited By Ryuk Ransomware Gang

• Tesla To Work With Global Regulators On Data Security

• Telegram Emerges As New Dark Web For Cyber Criminals

• Cryptocurrency Launchpad Hit By $3 Million Supply Chain Attack

• Apple Shares Guided Video Tour of iPhone 13 and 13 Pro

• FireEye CEO discusses the state of cybersecurity

• At Least One iPhone 14 Model Will Reportedly Still Lack 120Hz ProMotion Display

• IronNet shares fall 17% in intraday trading

• US Mulls Sanctions Use In War Against Hacker Cryptocurrency Payments

• AMD Chipset Driver Vulnerability Can Allow Hackers to Obtain Sensitive Data

• Keeping Software Secure – Reflections in Honor of National Coding Week

• email spam

• CISA warns of APT actors exploiting newly identified vulnerability in ManageEngine ADSelfService Plus

• Severe Remote Code Execution Flaws Discovered in Motorola Halo+ Baby Monitors

• First Circuit Expands Due Process Rights of Noncitizens at Immigration Bond Hearings

• Facebook’s own research reveals the harm that Instagram can inflict

• German Election body hit by a cyber attack

• iPhone 13 vs. iPhone 13 Pro Buyer’s Guide

• Some Customers Have Experienced Issues Pre-Ordering the iPhone 13 With an Apple Card

• Deals: Walmart Takes Up to $50 Off Apple’s iPad mini 6 in First Sales

• FBI and CISA warn of APT groups exploiting ADSelfService Plus

• Operator of ‘DownThem’ DDoS Attack Service Convicted

• Deals: Apple’s MagSafe Duo Charger Hits New All-Time Low Price of $96.74 on Verizon ($32 Off)

• A New Malware Uses Windows Subsystem

• Ditch the Alert Cannon: Modernizing IDS is a Security Must-Do

• Pakistani Man Involved in AT&T Hacking Scheme Sentenced to Prison in U.S.

• Apple Starts Offering 0% Financing on iPhones for 24 Months in Canada

• Online Romance Scams Led to $113 Million Financial Loss in 2021, the FBI Reports

• 6 Benefits of Using Privileged Access Management

• AT&T Phone-Unlocking Malware Ring Costs Carrier $200M

• Is it OK to use stolen data? What if it’s scientific research in the public interest?

• Mirai Botnet Starts Exploiting OMIGOD Flaw as Microsoft Issues More Guidance

• Deals: A Look at the iPhone 13 Sales Offered by AT&T, Verizon, T-Mobile, Best Buy, and More

• Google, Apple Pull Alexei Navalny App After Russian Demand

• The M140i project post – Part 15

• Microsoft MSHTML Flaw Exploited by Ryuk Ransomware Gang

• German Election Authority Confirms Likely Cyber Attack

• Anonymous Hacktivists Leak 180 GB of Data from Web Host Epik

• Lenovo: No Fix for High-Severity Flaw in Legacy IBM System X Servers

• iPhone 13 Pro’s New 1TB Storage Option Already Facing Delivery Times Into October

• Ransomware Groups Reinvest Capital to Improve Attack Methods

• Biometrics and the problem of privacy

• Download Kali Linux 2021.3 with Kali NetHunter on smartwatch, new tools

• U.S. Agencies Warn of APTs Exploiting Recent ADSelfService Plus Zero-Day

• Anonymous Leaked a Bunch of Data From a Right-Wing Web Host

• iPhone 13, iPhone 13 Mini, iPhone 13 Pro, and iPhone 13 Pro Max Now Available for Pre-Order

• Security Expert Re: New OWASP Top 10 List for Application Security Risks

• Microsoft Lets Users Go Passwordless, Experts Weigh In

• Former US Intel Operatives Fined $1.6M For Hacking For A Foreign Govt

• Understanding & Surviving Ransomware

• Sir Clive Sinclair, Computing Pioneer, Dies At 81

• Zero-Click iMessage Exploit

• iPadOS 15 Allows Apps to Use Up to 12GB of RAM on High-End iPad Pro, Up From Just 5GB

• FBI and CISA Warn Regarding a Critical Zoho Bug

• A New App Helps Iranians Hide Messages in Plain Sight

• New Malware Targets Windows Subsystem for Linux to Evade Detection

• Apple Seemingly Adds Russia to List of Countries Where iCloud Private Relay Won’t Be Available

• The Bug Report | September 2021: CVE-2021-40444

• This banking Trojan abuses YouTube to manage remote settings

• Cybersecurity M&A Roundup for September 1-15, 2021

• New Go malware Capoae uses multiple flaws to target WordPress installs, Linux systems

• Exploitation of the CVE-2021-40444 vulnerability in MSHTML

• MikroTik Shared a Mitigation to Secure Routers From Massive Mēris DDoS Botnet Attack

• Romance Scammers Make $133m in First Half of 2021

• iPhone 13 Batteries Positively Excel at Video Streaming Compared to iPhone 12

• Top cybersecurity M&A deals for 2021

• Cyberattacks against the aviation industry linked to Nigerian threat actor

• Experts Concerned Over New Digital Secretary’s Lack of Cyber Knowledge

• Section 889: the US Regulation that extends far beyond the US

• Government Use Of Biometric Data | Avast

• CISA: Patch Zoho Bug Being Exploited by APT Groups

• Now You Can log in to your Microsoft Account Without a Password

• Facebook Releases Video Capture Glasses | Avast

• What is the Dark Web? The Dark Web explained

• Years-Long Attack by Chinese-Linked APT Groups Discovered by McAfee

• Malware Attack on Aviation Sector Uncovered After Going Unnoticed for 2 Years

• A new Win malware uses Windows Subsystem for Linux (WSL) to evade detection

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• China formally applies to join CPTPP trade pact

• No more Password based logins for Microsoft users

• Telegram becomes a hub for hackers buying stolen data

• Securing AWS Infrastructure with Trend Micro Workshop

• Integrate Serverless Security for Runtime Apps

• New infosec products of the week: September 17, 2021

• Open source cyberattacks increasing by 650%, popular projects more vulnerable

• The digital identity imperative

• Apple Online Store Down Ahead of iPhone 13 and 13 Pro Pre-Orders

• Highest paying IT certifications in 2021

• WTF? Microsoft makes fixing deadly OMIGOD flaws on Azure your job

• NAVEX Global Named a Leader in Gartner® 2021 Magic Quadrant™ for IT Risk Management

• Cloud Security Alliance Releases New Guidance for Healthcare Delivery Organizations That Provides Measurable Approach to Detecting and Defending Against Ransomware Attacks

• Poll: Cyber Pros Say White House Cybersecurity Summit Is a Step in the Right Direction

• ‘Numberless’ bank cards could be the future: here’s why

• How surveillance capitalism will totally transform the domain name system

• Australia, UK, and US Announce Security Partnership

• US Imprisons World’s Largest Facilitator of CSAM

• Modern security strategies key to support remote workforce demands

• Data and AI professionals prioritize learning new skills amid labor shortage

• How to Help Seniors Spot Online Job Scams

• NSW to trial geolocation and facial recognition app for home-based quarantine

• 5G trends accelerating, all major regions pursuing 5G Core testing and deployments

• Safe Systems CloudInsight M365 Security Basics provides visibility into Microsoft security settings

• Trial Ends in Guilty Verdict for DDoS-for-Hire Boss

• Sentry’s capabilities enable enterprise teams to reduce risk and management overhead

• Push Technology Diffusion 6.7 secures personalized data delivery to individual clients

• Additional Guidance Regarding OMI Vulnerabilities within Azure VM Management Extensions

• FTC: Health Apps Must Notify Consumers of Data Breaches

• DDN and Tintri announces IntelliFlash N6000 series to enhance latency and throughput for file services

• Versa Networks offers 5G WAN Edge products to deliver SASE services to the network edge

• Google and Microsoft had the most vulnerabilities in the first half of 2021

• OWASP Names a New Top Vulnerability for First Time in Years

• No, Tech Monopolies Don’t Serve National Security

• New Ops for Managing Risk Driven by Internal & External Security Threats

• Internet Society introduces MANRS initiative to improve the resilience and security of the routing infrastructure

• Beazley names Raf Sanchez as Global Head of Cyber Services

• FBI, CISA, and CGCYBER warn of nation-state actors exploiting CVE-2021-40539 Zoho bug

• Wells Fargo launches digital infrastructure strategy for its customers and employees

• What’s Up with WhatsApp Encrypted Backups

• AFGE looks to block Cyber Command reserve program in NDAA

• White House nominates John Sherman for DOD CIO

• IT Security News Daily Summary 2021-09-16

• CISA, FBI: State-Backed APTs May Be Exploiting Critical Zoho Bug

• Apple Releases Safari Technology Preview 132 With Bug Fixes and Performance Improvements

• 14 Types of Hackers to Watch Out For

• Popular slot machine chain Dotty’s reveals data breach exposing SSNs, financial account numbers, biometric data, medical records and more

• Aviation-themed phishing campaign pushed off-the-shelf RATs into inboxes for 5 years

• 3 questions state and local governments must answer about identity security

• States’ smartphone exposure notification apps get mixed reviews

• Google Helps OSTIF Boost Security of Open Source Projects

• Endpoint Security Platform Kolide Banks $17 Million Investment

• McAfee Finds Years-Long Attack by Chinese-Linked APT Groups

• shadow password file

• House reconciliation bill includes nearly $800 million for CISA

• Bitdefender releases universal decryptor for REvil/Sodinokibi victims hit before July 13

• Bitdefender releases REvil universal ransomware decryptor

• No Drone At Gatwick, Claims Former Drone Executive

• How DevSecOps Can Secure Your CI/CD Pipeline

• Kaspersky Received 105 Government, Law Enforcement Requests in H1 2021

• ACSC Releases Annual Cyber Threat Report

• Airline Credential-Theft Takes Off in Widening Campaign

• ACSC Releases Annual Cyber Threat Report

• When You Can Pre-Order the iPhone 13 mini, iPhone 13, iPhone 13 Pro, and iPhone 13 Pro Max in Every Time Zone

• Hack yourself before someone else does it for you

• Apple Watch SE Now Comes With a USB-C Charging Cable

• Universal decryptor key for Sodinokibi, REvil ransomware released

• It’s time enterprise businesses place their complete trust in open source

• ExpressVPN stands behind CIO named in UAE hacking scandal

• FBI-CISA-CGCYBER Advisory on APT Exploitation of ManageEngine ADSelfService Plus Vulnerability

• APT Actors Exploiting Newly Identified Vulnerability in ManageEngine ADSelfService Plus

• Microsoft warns of attacks exploiting recently patched Windows MSHTML CVE-2021-40444 bug

• Review: Classicbot’s Latest iBoy Accessory is a Wearable iPhone Pouch

• 7 tips for building a strong security culture

• FBI-CISA-CGCYBER Advisory on APT Exploitation of ManageEngine ADSelfService Plus Vulnerability

• APT Actors Exploiting Newly Identified Vulnerability in ManageEngine ADSelfService Plus

• Microsoft Patch Tuesday Expert Commentary

• Mastering Identity and Access Management in the Cloud

• What is 5G shared responsibility and how would it work?

• Wikipedia Bans Seven Chinese Users Citing ‘Infiltration’

• How To Write a Good Cybersecurity Resume

• What are computer cookies?

• OMIGOD, an exploitable hole in Microsoft open source code!

• A security architect’s POV on a mature data-centric security program, Part 1

• ForgeRock CEO on IPO debut

• British schools to get free cybersecurity accessing tool

• To Detect or Not to Detect, Is that the Question?

• Bitdefender offers free decryptor for REvil ransomware victims

• Microsoft Releases Security Update for Azure Linux Open Management Infrastructure

• Google Is Backing Security Reviews Of These Key Open Source Projects

• Why Government Sites Are Hosting Porn And Viagra Ads

• New iPad Mini Has Downclocked A15 Chip Compared to iPhone 13

• Apple deals with iPhone security flaw

• Microsoft Looks Beyond Password Protection For Accounts

• Bootstrap Security in Kubernetes Deployments

• Aruba partners with MLS franchise for digitized stadium in Cincinnati

• Attackers Use Cryptomining Malware to Target Organizations

• Microsoft Releases Security Update for Azure Linux Open Management Infrastructure

• Building a Custom SecureX Orchestration Workflow for Umbrella

• Applying DevSecOps practices to Kubernetes: security analysis and remediation

• Why African Governments are Accepting Afghan Refugees

• Ransomware-hit law firm secures High Court judgment against unknown criminals

• Bitdefender released free REvil ransomware decryptor that works for past victims

• Exclusive Deal: Take 30% Off Satechi’s Aluminum Bluetooth Keyboard for Mac

• Security Serious: Organizers aim to set new Guinness World Records® title for Viewership of an Online Security Lesson

• CVE-2021-40444 exploitation: Researchers find connections to previous attacks

• Google Releases more Updated Features for Workspace to Facilitate Hybrid Work

• Apple Security Fix: Urging Immediate iOS Update for iPhones & iPads

• Partnerships – The Key to Navigating the Industrial Security Landscape

• UN Urges Moratorium on AI Tech That Threatens Rights

• Drupal Releases Multiple Security Updates

• How to Protect and Support a Remote Workforce

• Partnerships –The Key to Navigating the Industrial Security Landscape

• Researchers Create Toolkit for Hardware Security Tests on Apple’s Mobile Processors

• Russian hacker confirmed the resurrection of the most famous Russian hacker group REvil

• Drupal Releases Multiple Security Updates

• Travis CI Flaw Exposes Secrets of Thousands of Open Source Projects

• Deals: Walmart Discounts Apple’s New 64GB Wi-Fi iPad to Low Price of $299.00 ($30 Off)

• What Went Wrong: Apple Watch Series 7 Rumors Edition

• Deloitte Poll: C-suite Expects Ransomware Uptick But Orgs. Aren’t Trained – 5 Cyber Experts Respond

• Microsoft Fixes Critical Vulnerabilities in Linux App

• El Salvador Protests Erupt Amid Bitcoin Crash

• Top 10 COVID-19 Scams: How to Stay Protected

• browser hijacker (browser hijacking)

• Get 3 Years of powerful, super-fast VPN Protection from HotSpot Shield for just $89

• New Go malware Capoae targets WordPress installs, Linux systems

• Financial Cybercrime: Following Cryptocurrency via Public Ledgers

• How Threat Response is Evolving

• Kolide, a ‘transparency-first’ endpoint security platform, raises $17M

• DDoS Attacks: A Flourishing Business for Cybercrooks – Podcast

• REvil/Sodinokibi Ransomware Universal Decryptor Key Is Out

• PSA: Apple’s iPhone 13 Pre-Order Setup Process Is Sending ‘Expired Pre-Order’ Messages to Some Users, But It’s Likely Just a Glitch [Update: Fixed]

• Mēris Botnet Mitigation Measures Shared by MikroTik

• What’s the Buzz on Passwordless?

• 3 security lessons from an MSP that survived the Kaseya VSA attack

• AUKUS Security Alliance Will Include Cybersecurity, AI, Quantum

• Implement Passwordless Verification Using Mobile Number and SIM

• Health apps ‘playing fast and loose’ with user data, warns FTC chief

• Ransomware attackers targeted app developers with malicious Office docs, says Microsoft

• Several Access Bypass, CSRF Vulnerabilities Patched in Drupal

• Report: Facebook Is Aware Of How Harmful It Can Be For Young Users

• 16.17 GB of User Data Stored in Fitness Bands, Exposed

• Why Cyber Risk Aggregation is Important to Your Organization’s Security

• Computer and data scientists should be as highly regarded as ‘warriors’ says top UK cybergeneral

• Is There Really a Shortage in Cloud Security Skills?

• Fake TeamViewer download ads distributing new ZLoader variant

• Azure Zero-Day Flaws Highlight Lurking Supply-Chain Risk

• HP Omen Hub Exposes Millions of Gamers to Cyberattack

• Mass Personal Data Theft From Paris Covid Tests: Hospitals

• Armenia and Europol sign agreement to combat cross-border serious organised crime

• Summer 2021: Friday Night Funkin’, Måneskin and pop it

• Neosec Emerges From Stealth With $20.7 Million in Funding

• Former U.S. Intelligence Operatives Will Have to Pay $1.6M

• Midyear 2021 Cybersecurity Landscape Review: Attacks From All Angles Abound

• First All-Civilian Crew Launch To Orbit On SpaceX Rocket

• APT Attacks: What are Fancy Bear, Charming Kitten, and Double Dragon?

• Links Found Between MSHTML Zero-Day Attacks and Ransomware Operations

• PSA: Apple’s iPhone 13 Pre-Order Setup Process Is Sending ‘Expired Pre-Order’ Messages to Some Users, But It’s Likely Just a Glitch

• South Africa Ransomware Attacks Go On with One More Hit: the Whole Network of the Department of Justice Affected

• Ransomware scammers target artists with fake Krita revenue deals

• HP OMEN users, update your driver now!

• Google sponsors OSTIF security reviews of critical open source software

• Massachusetts is Investigating the Massive T-Mobile Data Breach

• Microsoft announces passwordless authentication option for consumers

• Third Critical Bug Affects Netgear Smart Switches — Details and PoC Released

• Social engineering explained: How criminals exploit human behavior

• HP CISO Joanna Burkey: Securing remote workers requires a collaborative approach

• How CISOs and CIOs should share cybersecurity ownership

• How APTs become long-term lurkers: Tools and techniques of a targeted attack

• FCW Insider: September 16, 2021

• Misconfigured APIs Account for Two-Thirds of Cloud Breaches

• Household Names Hit with £500K Fine for Spamming Consumers

• WooCommerce Multi Currency Bug Allows Customers to Modify the Cost of Items on Online Stores

• Apple’s Consistent Iteration – Intego Mac Podcast Episode 205

• Banks Slammed for Low Fraud Reimbursement Rates

• Cellular iPad Mini Doesn’t Feature mmWave 5G Support, Unlike iPad Pro

• De-identify, re-identify: Anonymised data’s dirty little secret

• Do you know what your supply chain is and if it is secure?

• Windows MSHTML 0-Day Exploited to Deploy Cobalt Strike Beacon in Targeted Attacks

• Ragnar Locker Ransomware targets TTEC Company

• UK ICO slaps £200,000 penalty for sending spam mails and messages

• Protecting Digital Freedom For Everyone | Avast

• You Can Now Sign-in to Your Microsoft Accounts Without a Password

• Apple Quietly Removes 256GB iPhone SE Model From Online Store

• Introducing Avast One | Avast

• 2021 Digital Citizenship Report | Avast

• Authentic Brands Build On Fundamental Truths | Avast

• It’s time to delete that hunter2 password from your Microsoft account, says IT giant

• Keys to the cloud: Unlocking digital transformation to enhance national security

• It’s time to delete your hunter2 password from your Microsoft account, says IT giant

• Bot attack volumes growing 41% year over year, human-initiated attacks down 29%

• What is the impact of software supply chain security challenges?

• Why digital issuance is the perfect recipe for modern financial services

• Critical Flaws Discovered in Azure App That Microsoft Secretly Installs on Linux VMs

• CPaaS market value to exceed $10 billion in 2022

• The long-term impacts of the pandemic on internal audit teams

• MSPs that cannot modernize will find themselves and their clients falling behind

• CIS Control 4: Secure Configuration of Enterprise Assets and Software

• This is AUKUS for China – US, UK, Australia reveal defence tech-sharing pact

• Firms embracing hybrid working, but must ensure teams have the modern skills to stay productive

• This is AUKUS for China – USA, UK, Australia reveal defence tech-sharing pact

• Quick Hits

• Additional Benchmarks Reveal A15 Bionic Performance Improvements in iPhone 13 and iPhone 13 Pro

• When data privacy and protection are rights, don’t get it wrong

• The 5 Ws for building a strong cybersecurity plan

• Code42 Instructor gives security teams the ability to correct risky behaviors

• Microsoft Patch Tuesday fixes actively exploited zero‑day and 85 other flaws

• Only one-in-ten Russian organizations are aware of the danger of vulnerabilities in web applications

• Cardknox supports 3DS2 technology to decrease online fraud and reduce chargebacks

• Embroker launches two standalone digital insurance products for privately held SMBs

• Snowflake helps financial services organizations leverage data to drive business growth

• Beyond Identity’s solution secures the software supply chain against insider threats and malicious attacks

• Hillstone virtual Web Application Firewall detects and defends against treats in web applications

• DataStax Astra DB offers replication across multiple regions and clouds

• Juniper Networks enables customers to scale and simplify the rollout of their campus networks

• The Catalog of Carceral Surveillance: Patents Aren’t Products (Yet)

• How Intel is securing patient data through its pandemic response initiative

• Australia, UK, and US form trilateral pact focused on security in Indo-Pacific

• Microsoft Expands Passwordless Sign-on to All Accounts

• Samsung Begins Mass Production of 14-Inch and 16-Inch OLED Displays That Apple Might Use for 2022 MacBook Pro

• Industrial Defender partners with Diverse Solutions Engineering to elevate OT cybersecurity

• Accenture partners with IonQ to accelerate quantum computing business experimentation

• Analyzing attacks that exploit the CVE-2021-40444 MSHTML vulnerability

• Dynatrace acquires SpectX to advance its observability and application security analytics capabilities

• Synopsys protects corporate assets with Citrix workspace solutions

• The Federal Government Just Can’t Get Enough of Your Face

• Anonymous hacked the controversial, far-right web host Epik

• Martin Roesch joins Netography as CEO

• Vouched appoints Steve McQuade as CTO

• Strike Graph raises $8M to expand its offerings of cybersecurity compliances

• Customer Care Giant TTEC Hit By Ransomware

• Supreme Court to Hear State Secrets Case on FBI Surveillance

• Axonius Federal Systems helps federal agencies achieve cybersecurity initiatives

• Zubaid Kazmi joins MorganFranklin Consulting as Managing Director

• HPE names Fidelma Russo as CTO

• Customer Care Giant TTEC Hit By Ransomware?

• What’s Still Coming in 2021 at Apple’s Second Fall Event

• IT Security News Daily Summary 2021-09-15

• Kerberos

• Bringing big data down to size

• OWASP updates top 10 vulnerability ranking for first time since 2017

• Apple Accused of False Marketing and Fraud Over M1 MacBook Display Issues

• iPhone 13 Pro Offers Significantly Improved GPU Performance Compared to iPhone 12 Pro

• Cyber Defense Media Group Launches our 10th Anniversary Contest

• Inglis: First rule of cyber education is budget accountability

• Tape Won’t Work for Ransomware Protection. Here’s Why.

• What will the new Digital Corps look like?

• ‘OMIGOD’ vulnerabilities put Azure customers at risk

• How Many Words is a Picture Actually Worth? What Images Mean in Intelligence Analysis

• How data, analytics and AI power public health

• Cybercriminals use pandemic to attack schools and colleges

• Rapid digitalization may leave smart cities open to cyberattacks

• No Patch for High-Severity Bug in Legacy IBM System X Servers

• Critical Flaws Discovered in Azure App That Microsoft Secretly Installed on Linux VMs

• OMIGOD vulnerabilities expose thousands of Azure users to hack

• Introducing a New Podcast: Lawfare No Bull

• Google Supports Open Source Technology Improvement Fund

• Lessons From History: Afghanistan and the Dangerous Afterlives of Identifying Data

• Texas’ Social Media Law is Not the Solution to Censorship

• EU Plans European Chips Act To Increase Production

• Android malware distributed in Mexico uses Covid-19 to steal financial credentials

• The danger of open redirects!

• Phishers impersonate US DOT to target contractors after Senate passed $1 trillion infrastructure bill

• Brand abuse attacks dominate list of fraud trends: report

• What are SSL certificates?

• Say No to Hotfixes: How To Implement Security in the Development Process

• Microsoft announces passwordless authentication for consumer accounts

• Incident response analyst report 2020

• Apple CEO Tim Cook Makes TIME’s List of 100 Most Influential People of 2021

• Five ways to make customer banking more sustainable

• Microsoft September Patch Tuesday Fixes 86 Security Bugs

• BrandPost: The 5 Ws for Building a Strong Cybersecurity Plan

• Mission Probable: Access Granted

• Zero trust: The trusted model for secure data-driven business

• You can now eliminate the password for your Microsoft account

• Arizona Medical Practice Permanently Loses EHR Data

• Serious Flaw Found in HP OMEN Driver

• Apple Makes Latest AirTags Firmware Available to All Users

• Microsoft September Patch Tuesday roundup: 66 vulnerabilities, 2 zero-days

• Surveillance Self-Defense Guides Now Available in Burmese

• CISSP – Tales of the Unexpected

• US Employees found hacking for foreign government

• CISSPs from Around the Globe: An Interview with James Wright

• Former AWS exec Charlie Bell to head new Microsoft Security, Compliance, Identity, and Management org

• Unsecured Fitness App Database Leaks 61M Records

• House Committee Tees Up New FTC Data Security Bureau

• Redesigned iPad Mini Has Increased 4GB of RAM, iPad 9 Remains at 3GB

• Offense Activities Sharing in Criminal Justice Case

• New SOVA Android Banking trojan is rapidly growing

• Revil ransomware operators are targeting new victims

• Introducing VT Alerts

• South Korea Slaps Google With $177m Fine

• Anonymous steals ‘decade’s worth of data’ from far-right web host Epik

• Executive Spotlight: Q&A with SVP of Global Channels, Kathleen Curry

• How to protect your on-premises databases from security vulnerabilities

• CompTIA SYO-601 exam pivots to secure bigger attack surface

• S3 Ep50: Two 0-days plus another 0-day plus a fast food bug [Podcast]

• Americans Fined After Hacking for Foreign Government

• ELFant in the Room – capa v3

• Identifying Computer-Generated Faces

• Anonyous Claims To Have Stolen Huge Trove Of Data From Epik

• Deals: New Sales Hit AirPods Pro ($179.99) and AirPods Max ($489.99) on Amazon

• iPhone 13 Models Have the Same Amount of RAM as iPhone 12 Models

• Nomad Announces New iPhone 13 Cases With NFC-Shareable ‘Digital Business Cards’

• Apple Watch Series 7 Tidbits: S7 Chip, Storage Remains 32GB, USB-C Fast Charging Cable in the Box, and More

• What Expert Says On The Latest OMI Vulnerability In Azure

• Major Azure vulnerability discovered by security researchers at Wiz

• What Can Ransomware Do? How You Can Protect Your Organization

• 5 Ways Small Businesses Can Save Money With Cybersecurity

• 5 Reasons Why Your Employees Are Your Weakest Link for Your Company’s Cybersecurity

• 3 former US intel officers turned cyber mercenaries plead guilty: An insider threat case study

• Apple iPhone 13 Launch: iPhone 13 Pro, iPhone 13 Pro Max

• Regular Users Can Now Remove Password From Their Microsoft Account

• Cybersecurity Investment: Supporting SME decision making

• Patch Tuesday September 2021 – Microsoft to Release 60 Security Updates and Patches, Including Two Zero-Day Fixes

• Next-Generation AirPods Reportedly Already in Production Despite Not Being Announced at Apple Event

• Lawfare Live: Ransomware Lessons for a Nation Held Hostage

• China Is Making Smart Money

• Cybersecurity Training: How to Build a Company Culture of Cyber Awareness

• Software Supply Chain Attacks Surge 650% in a Year

• Nearly 50% of On-Premises Databases Have Unpatched Vulnerabilities

• Expert Reacted On High Severity Vulnerability Found In HP’s Popular Gaming System

• Patch now! PrintNightmare over, MSHTML fixed, a new horror appears … OMIGOD

• Attackers Impersonate DoT in Two-Day Phishing Scam

• Severe Vulnerabilities Could Expose Thousands of Azure Users to Attacks

• Deals: Get a MagSafe Charger for Your New iPhone 13 at an All-Time Low Price of $27.14 ($11 Off)

• Zloader Attacks Able to Disable Windows Defender

• The passwordless future is here for your Microsoft account

• Apple Introduces the iPhone 13, Apple Watch Series 7, and New iPads

• Apple iPhone 13 Launch: iPhone 13, iPhone 13 Mini

• Teaching Capa New Tricks: Analyzing Capabilities in PE and ELF Files

• Relyance emerges from stealth to spot risky code

• Passwordless logins expand to all Microsoft accounts

• You Can Now Ditch the Password on Your Microsoft Account

• Apple Issues Urgent iPhone Software Update To Address Critical Spyware Vulnerability

• Stop Blaming Consumers For Falling For Scams, Expert Weighs In

• New SOVA Android Trojan Promises the Moon, Experts Insight

• Analyzing The ForcedEntry Zero-Click iPhone Exploit Used By Pegasus

• X-Force Report: No Shortage of Resources Aimed at Hacking Cloud Environments

• Infrastructure access platform StrongDM raises $55M

• Cybercriminals recreate Cobalt Strike in Linux

• DOJ fines NSA hackers who assisted UAE in attacks on dissidents

• ICS Patch Tuesday: Siemens, Schneider Electric Address Over 40 Vulnerabilities

• SAP Patches Critical Vulnerabilities With September 2021 Security Updates

• Nearly a Third of Brits Say They Feel Unsafe Online

• AppleCare+ With Theft and Loss Coverage Expands to the United Kingdom and Australia

• Ransomware crims saying ‘We’ll burn your data if you get a negotiator’ can’t be legally paid off anyway

• CISSP – Tales of the Unexpected

• Apple iPhone 13 Launch: Apple Watch Series 7

• Zoom Introduces End-to-End Encrypted Phone Calls

• Linux Implementation of Cobalt Strike Beacon Employed by Hackers in Attacks Worldwide

• Millions of HP OMEN Gaming PCs Impacted by Driver Vulnerability

• Download the Essential Guide to Response Automation

• 3 Former U.S. Intelligence Officers Admit to Hacking for UAE Company

• The Ongoing Reciprocal Relationship Between APTs and Cybercriminals

• Three formers NSA employees fined for providing hacker-for-hire services to UAE firm

• Apple iPhone 13 Launch: Apple iPad (9th Gen), iPad Mini (2021)

• Meris botnet assaults KrebsOnSecurity

• Two-thirds of cloud attacks could be stopped by checking configurations, research finds

• iPad Air Now the Only iPad in Apple’s Lineup That Lacks 12MP Ultra Wide Front Camera With Center Stage

• Tim Cook Talks iPhone 13, iPad Mini, Fitness+ Integration With Apple Watch, and More in New Interview

• All PrintNightmare Vulnerabilities Were Fixed

• Steganography explained and how to protect against it

• How to find a security-savvy MSP

• IBM finds cloud credentials sell for mere dollars in ‘booming’ dark web market

• FCW Insider: September 15, 2021

• Cobalt Strike Beacon Reimplementation ‘Vermilion Strike’ Targets Windows, Linux

• Microsoft Patches OMIGOD, MSHTML and PrintNightmare Bugs

• Quarter of Fortune 500’s External IT Assets Are a Cyber Risk

• Hackers Can Use the SSID Stripping Flaw to Mimic Real Wireless APs

• iPhone 13 Still Doesn’t Display Battery Percentage in the Status Bar, Despite Smaller Notch

• Qualys Patch Management keeps endpoints up to date to reduce risk from exploits

• Alation Data Governance App accelerates data governance using ML and AI

• Build your own Android security product

• Are “corrupt my file” sites safe? Here’s why to avoid corrupt-a-file services

• Ex-US intel, military trio were cyber-mercenaries for UAE, say prosecutors

• Cyber Attack news headlines trending on Google

• Serious probe on T-Mobile Cyber Attack 2021

• Kali Linux 2021.3 Release With New Hacking Tools – Download Now!!

• Rare bright cyber spot: ACSC reports total incidents down 28%

• US CISA appointed Kiersten Todt as new chief of staff

• 9 tips to avoid cloud configuration conundrums

• Microsoft September Patch Tuesday roundup: 61 vulnerabilities, 2 zero-days

• 2021-09-14 – Pcap and malware for an ISC diary (Hancitor with Cobalt Strike)

• Microsoft Patch Tuesday fixes CVE-2021-40444 MSHTML zero-day

• Most Fortune 500 companies’ external IT infrastructure considered at risk

• Microsoft Releases Patch for Actively Exploited Windows Zero-Day Vulnerability

• Ransomware preparedness is low despite executives’ concerns

• READY for (ISC)² Events of the Future

• Massachusetts AG Launches Probe into T-Mobile Data Breach

• Execs concerned about software supply chain security, but not taking action

• McAfee Defender’s Blog: Operation Harvest

• Operation ‘Harvest’: A Deep Dive into a Long-term Campaign

• 46% of all on-prem databases are vulnerable to attack, breaches expected to grow

• Enterprise WLAN market growth remains strong in 2Q21

• Infosec researchers say Apple’s bug-bounty program needs work

• An Epic Crack in Apple’s Walled Garden

• TrickBot gang member arrested after getting stuck in South Korea due to COVID-19 pandemic

• Russia’s Yandex says it repelled biggest DDoS attack in history

• Fujitsu confirms stolen data not connected to cyberattack on its systems

• How not to get caught in law-enforcement geofence requests

• OMIGOD: Azure users running Linux VMs need to update now

• Understanding the Benefits of Managed Cyber Services

• Shooting 4K ProRes Video Requires iPhone 13 Pro With at Least 256GB Storage

• IDrive 360 enables entire machine backups for businesses

• Titania’s module automates the audit process for mission critical CMMC security practices

• ThreatConnect 6.3 helps organizations identify and remediate threats faster

• Code42 Incydr detects data exposure movements from trusted corporate systems to unmonitored devices

• What is a cyberattack surface and how can you reduce it?

• WhatsApp announces end‑to‑end encrypted backups

• Cadence Tensilica AI Platform accelerates intelligent SoC development

• Datto Continuity for Microsoft Azure protects MSPs and their clients’ data in the public cloud

• Fuze expands Microsoft Teams integration to improve enterprise communications

• Google Cloud Supply Chain Twin optimizes planning by orchestrating supply chain data

• Materialize Cloud allows businesses to understand streaming data without needing specialized skills

• Datalec’s managed service capabilities provide end-to-end monitoring for data centre operations

• Viasat launches data-at-rest encryption storage device for government and defence agencies

• Apple Patches Vulnerabilities in iOS Exploited by Spyware

• KIOXIA FL6 Series NVMe SCM SSDs bridges the gap between DRAM and TLC-based drives

• Microsoft’s end-of-summer software security cleanse crushes more than 80 bugs

• project44 partners with Google Cloud to provide real-time visibility into customers’ supply chains

• Everything Announced at Today’s Apple Event

• Neosec raises $20.7M to protect APIs from business abuse and data theft

• CIS Secure partners with Red Balloon Security to add a layer of security within TSG-approved products

• Natural Disaster & Emergency Mgmt (NDEM) Expo Joins ISC East in NYC

• All of the New iPhone 13 Camera Features: Macro, Cinematic Mode, Photographic Styles, Sensor Improvements and More

• UKCloudX supports UK government digital ambitions with Defence Cloud offering

• Cloudflare expands its overall network to more than 250 cities in over 100 countries

• T-Mobile was breached: Here’s how to protect your account

• SolarWinds CEO: Breach transparency ‘painful’ but necessary

• Apple Watch Series 7 to Come in 41mm and 45mm Case Sizes, Will Be Compatible With Older Bands

• IT Security News Daily Summary 2021-09-14

• How the Pentagon copes with funding hiccups

• Conklin checks in as CIO at the world’s largest library

• How the pandemic taught agencies to accept and adapt

• Microsoft Patch Tuesday, September 2021 Edition

• iPhone 13 Models Support Dual eSIMs

• AppleCare+ Now Covers Cracked Back Glass on iPhone 12 and iPhone 13 Models for Reduced $29 Fee

• Starting Your AI Security Journey With Deep Learning

• Adobe Snuffs Critical Bugs in Acrobat, Experience Manager

• Dark Web sees spike in fake COVID vaccine card sales

• Report: Facebook Lets 5.8 Million Elite Users Break Its Rules

• iPhone 13 Models Feature 20% Smaller Notch That’s Just a Tiny Bit Taller

• Samsung Takes Jab at Apple After Finally Including ProMotion Displays in iPhone 13 Pro

• Expercom Arrives With First Discounts on New 10.2-Inch iPad and 8.3-Inch iPad Mini

• iPhone 13 Models Are Heavier and Thicker Than iPhone 12 Models

• EFF and Allies Urge Council of Europe to Add Strong Human Rights Safeguards Before Final Adoption of Flawed Cross Border Surveillance Treaty

• Amid vaccine mandates, fake vaccine certificates become a full blown industry

• 2021’s Most Dangerous Software Weaknesses

• Microsoft Patches Actively Exploited Windows Zero-Day Bug

• SIEM vs. SOAR vs. XDR: Evaluate the differences

• Adobe Releases Security Updates for Multiple Products

• Mēris Bot infects MikroTik routers compromised in 2018

• Cellular Carriers Begin Sharing Deals and Offers Coming to iPhone 13 and iPhone 13 Pro

• Refurbished Apple TV 4K With Redesigned Siri Remote Now Available, Pricing Starts at $149

• Parts of the Dark Web “awash” with school children’s personal data

• Are You the Keymaster?

• BrandPost: Improve Your Organization’s Cyber Hygiene With CIS CSAT Pro

• General Promises US ‘Surge’ Against Foreign Cyberattacks

• It’s a Good Day to Update All Your Devices. Trust Us

• Citrix Releases Security Update for ShareFile Storage Zones Controller

• Adobe Releases Security Updates for Multiple Products

• Here Are All the New Bands and Cases Apple Just Released for Apple Watch Series 7, iPhone 13, and iPad

• All iPhone 13 Models Feature Significantly Improved Battery Life, Up to 2.5 Hours Longer for iPhone 13 Pro Max

• Apple’s ‘California Streaming’ Event Now Available on YouTube and Events Website

• Microsoft September 2021 Patch Tuesday: Remote code execution flaws in MSHTML, OMI fixed

• VERT Threat Alert: September 2021 Patch Tuesday Analysis

• Kape Technologies to Acquire ExpressVPN

• SAP Releases September 2021 Security Updates 

• Citrix Releases Security Update for ShareFile Storage Zones Controller

• Apple Watch Series 7 Larger Display Allows for Full On-Screen Keyboard

• Apple Now Accepting Pre-Orders for New iPad Mini 6 and iPad 9

• Apple Releases New MagSafe Wallet With Find My Support

• Apple Now Selling USB-C Magnetic Charger for Fast Charging Apple Watch Series 7 Models

• Apple Watch Series 7 Features Exclusive Watch Faces Including Modular Max, World Timer, Continuum, and More

• The Recent iOS 0-Click, CVE-2021-30860, Sounds Familiar. An Unreleased Write-up: One Year Later

• Krita art app users targeted by ransomware posing as paid ‘collaboration’ opportunities

• National Small Business Week: 10 Best Practices for Small Business Cybersecurity

• Israeli firm Kape Technologies buys ExpressVPN raising privacy concerns

• Apache Kafka in Cybersecurity for Digital Forensics

• DOD wants industry to continue with CMMC prep amid program review

• Apple Security Flaw: How do ‘Zero-Click’ Attacks Work?

• Patch Tuesday: Microsoft Plugs Exploited MSHTML Zero-Day Hole

• Microsoft Releases September 2021 Security Updates

• SAP Releases September 2021 Security Updates 

• iPhone XR and iPhone 12 Pro Discontinued, iPhone 12, iPhone 12 Mini, iPhone 11, and iPhone SE Still Available

• Apple Seeds tvOS 15 Release Candidate to Developers

• Apple Seeds Release Candidate Version of watchOS 8 to Developers

• Apple Seeds iOS and iPadOS 15 Release Candidates to Developers

• Microsoft patches actively exploited MSHTML zero-day RCE (CVE-2021-40444)

• Apple patches zero-day, zero-click NSO Group exploit

• NY County IT Supervisor Charged with Crypto-Mining

• Microsoft Releases September 2021 Security Updates

• Apple Unveils iPhone 13 Pro and iPhone 13 Pro Max With ProMotion Displays and Up to 1TB Storage

• Goodbye 64GB: iPhone 13 Lineup Starts at $699 With 128GB of Storage

• All iPhone 13 Models Available to Pre-Order This Friday With September 24 Release Date

• iOS 15, iPadOS 15, watchOS 8, and tvOS 15 Will Be Released On September 20

• Protestors Nationwide Rally to Tell Apple: “Don’t Break Your Promise!”

• What are Open Source Software License Risks?

• 1H’2021 Security Review Shows Active Cloud Attacks

• UK Government Holds Stakes In 158 Start-ups

• Cloud automation provider SkyKick lands $130M

• Apple Unveils Apple Watch Series 7 Featuring Larger Screen Sizes From $399

• Apple Announces iPhone 13 and iPhone 13 Mini With Smaller Notch, Repositioned Rear Cameras, and More

• Apple Announces New Fitness+ Features Including Pilates, Group Workouts, 4K Video, and More

• Apple Fitness+ Launching in 15 New Countries Later This Year

• Apple Unveils iPhone 13 Pro and iPhone 13 Pro Max With ProMotion and A15 Bionic Chip

• BrandPost: Work from Anywhere Doesn’t Work Without Endpoint Security

• ZLoader’s Back, Abusing Google AdWords, Disabling Windows Defender

• Why you should avoid those fun social media “tell us about yourself” questions

• Why companies should use AI for fraud management, detection

• Upcoming Speaking Engagements

• Apple Announces New 9th-Gen iPad With A13 Chip, True-Tone Display, and More

• Apple Introduces Redesigned Sixth-Generation iPad Mini With Touch ID, USB-C Port, 5G, and More

• Apple Unveils Redesigned Apple Watch Series 7 Featuring Larger Screen Sizes From $399

• 10 Open-Source Intelligence Tools (That Actually Work With Your Existing Security Software)

• ‘NBA 2K22 Arcade Edition’ and ‘Tiny Wings’ Coming to Apple Arcade

• Next Emojis Will Include Melting Face, Biting Lip, Heart Hands, Troll, and More

• Update now! Google Chrome fixes two in-the-wild zero-days

• Security bods boost Apple iPhone hardware attack research with iTimed toolkit

• Apple patches two in-the-wild vulnerabilities for macOS, iOS, iPadOS, watchOS

• Russia To Tax Foreign ‘Digital Services’

• SSID Stripping flaw lets hackers mimic real wireless access points

• Millions of HP OMEN gaming PCs impacted by CVE-2021-3437 driver flaw

• How to Detect Cobalt Strike: An Inside Look at the Popular Commercial Post-Exploitation Tool

• Kali Linux 2021.3 released: Kali NetHunter on a smartwatch, wider OpenSSL compatibility, new tools, and more!

• Data of 61 million Fitbit and Apple users exposed on web

• House Dems seek $1B for IRS to improve access to child tax credit

• The Implications of China’s New Personal Information Protection Law

• Now LIVE: SecurityWeek’s 2021 CISO Forum, Presented by Cisco (Virtual Event)

• Hackers port Cobalt Strike attack tool to Linux

• Apple Event Live Updates: iPhone 13, Apple Watch Series 7, and More Expected

• Oracle Java 17 delivers thousands of performance and security updates

• Hawaii unwraps voluntary digital vaccination record

• Mind the development talent gap: A low-to-high approach

• Pair of Google Chrome Zero-Day Bugs Actively Exploited

• CISA Appoints Kiersten Todt as New Chief of Staff

• Google Releases Security Updates for Chrome

• HP Patches Severe OMEN Driver Privilege Escalation

• Apple Patches Zero-Click iMessage Hack Used By NSO

• Wiz Discovers Another Major Azure Vulnerability

• Pair Of Google Chrome Zero Day Bugs Actively Exploited

• Apple Event Live Coverage: iPhone 13, Apple Watch Series 7, and More Expected

• Brits open doors for tech-enabled fraudsters because they ‘don’t want to seem rude’

• Google Releases Security Updates for Chrome

• Advanced automation and management of Network Bound Disk Encryption with RHEL System Roles

• TrendForce Shares Last-Minute iPhone 13 Expectations Ahead of Today’s Apple Event

• Google Hands Over Data To Hong Kong Authorities – Report

• Apple releases emergency patch to protect all devices against Pegasus spyware

• Swiss Post Offers up to €230,000 for Critical Vulnerabilities in e-Voting System

• Kumsong 121 North Korean Hacker Group Conducts Cyber Attacks via Social Media

• This Aspiring Hacker was Caught in a Quite Embarrassing Manner

• New Android Banking Malware Targeting Mexican Users to Steal Financial Credentials

• CERT NZ Releases Ransomware Protection Guide for Businesses

• The Long and the Short of the History of the Laws of War

• Fostering a diverse cybersecurity workforce

• Chris Inglis outlines blueprint for federal cyber priorities

• Unpatched Bugs Plague Databases; Your Data Is Probably Not Secure – Podcast

• Nearly Half of On-Premises Databases Vulnerable to Attacks: Study

• New Stealthier ZLoader Variant Spreading Via Fake TeamViewer Download Ads

• iPad Mini 6 May Feature 8.38-Inch Display and Launch in October

• Apple IOS Zero-day Vulnerabilities Running Rampant in 2021

• Amazon Antitrust Lawsuit Widened By Washington DC AG

• Privileged Access Management: The Future of Cyber Resilience

• Romance, BEC Scams Lands Soldier in Jail for 46 Months

• BitSight Raises $250 Million at $2.4 Billion Valuation

• Cisco Wins 2021 Frost and Sullivan Market Leadership Award

• September 2021 Apple Event Spoiler-Free Video Stream

• Fortinet Leak Demonstrates Need For Remote Access System Patching

• Shared clinical workstation security and access

• Neosec, an API security startup, emerges from stealth with $20.7M

• Data operations platform Satori nabs $20M

• Bot attacks grow 41% in first half of 2021: LexisNexis

• The state of ransomware: national emergencies and million-dollar blackmail

• Quantum cryptography: This air-filled fiber optic cable can transport un-hackable keys, say researchers

• The 2021 State of the Auth Report: 2FA Climbs, While Password Managers and Biometrics Trend

• Palo Alto Networks Introduces Wi-Fi Router That Detects Malware

• Financial Services Firms Spend Over $2m on Ransomware Recovery

• Hackers switched to combined cyber attacks on the Russian financial sector

• Cisco Secure Earns the Frost & Sullivan Global Market Leadership Award in the Network Firewall Market

• Apple VR Headset May Feature High Resolution Micro OLED Display With 3,000ppi

• Data security is broken: What’s next?

• Fortinet Leak Demonstrates TLS/SSL Vulnerability Risk

• Poll: Cyber Pros Say White House Cybersecurity Summit Is a Step in the Right Direction

• Apple Issues Urgent Security Update For iPhones, iPads and Macs

• Dangers of DNS poisoning and how to prevent it

• Apple releases emergency update: Patch, but don’t panic

• Close to half of on-prem databases contain vulnerabilities, with many critical flaws

• HP patches severe OMEN driver privilege escalation vulnerability

• BlackMatter Ransomware Hits Japanese Tech Giant Olympus

• JumpCloud Raises $159 Million at $2.56 Billion Valuation

• Belarus, Ukraine Saw Largest Increase in ICS Attacks During H1 2021: Kaspersky

• Expert Reaction On Report: Politeness Leaving People At The Mercy Of Fraudsters

• Olympus Tech Giant Hit By BlackMatter Ransom Attack

• Apple deals with iPhone security flaw

• Thousands of internet-connected databases contain high or critical CVEs, says report by cloud security biz

• Global Databases Riddled with an Average of 26 Vulnerabilities

• HP OMEN Gaming Hub Flaw Affects Millions of Windows Computers

• Apple Online Store Goes Down Ahead of ‘California Streaming’ Apple Event Later Today

• Microsoft Says ARM Windows Virtualization on Apple Silicon Macs ‘Not a Supported Scenario’

• A Version of Linux Cobalt Strike Beacon Is Being Used in Ongoing Attacks

• Apple Releases Urgent Patch Following Discovery of Pegasus Spyware

• MikroTik Confirms Mēris Botnet Targets Routers Compromised Years Ago

• Texas GOP Website Down After Anonymous Hack

• Zero Trust Requires Cloud Data Security with Integrated Continuous Endpoint Risk Assessment

• How to Build a Better Workplace

• What Expert Says on Vaccine Passport Security

• New “Plague” DDoS Attack Hits Internet Giant Yandex

• 8 top cloud security certifications

• Russia is fully capable of shutting down cybercrime

• Facebook Allows Some High-Profile Users To Break Rules

• Avast Hacker Archives Episode 10 – Keren Elazari | Avast

• Whitepaper: Cobalt Strike – a toolkit for pentesters

• Apple Fixes iMessage Zero-Click Bug That Used to Deploy NSO Pegasus Spyware

• Apple fixes “zero-click” iMessage zero-day exploited to deliver spyware (CVE-2021-30860)

• ExpressVPN bought for $1bn by Brit biz with an intriguing history in adware

• 1GB of Puma Data is Now Accessible on Marketo

• Rumor Suggests Low-Cost Ninth-Generation iPad to Debut at Apple Event Later Today

• ExpressVPN bought for $1bn by Brit biz with an intriguing history in ad-tech

• Twitter Gains Unique ‘Like’ Animation for Today’s Apple Event

• ExpressVPN bought for $1bn by Brit biz with an… interesting history in ad-tech

• Looking for adding new detection technologies in your security products?

• Singapore, India to link national payment systems for cross-border transfers

• 10,000+ cybersecurity pros have earned (ISC)² CCSP cloud security certification

• Apple Inc issues fix to Pegasus Spyware vulnerability in iPhones

• Cloud Security startup Accurics acquired by Tenable for $160m

• Google addresses a new Chrome zero-day flaw actively exploited in the wild

• Three ways to keep your organization safe from cyberattacks

• Vermilion Strike, a Linux implementation of Cobalt Strike Beacon used in attacks

• OSI Layer 1: The soft underbelly of cybersecurity

• ExpressVPN sells to Kape Technologies for $936 million

• Healthcare cybersecurity: How to prevent the compromise of patient records?

• Apple Issues Urgent Updates to Fix New Zero-Day Linked to Pegasus Spyware

• How to evaluate the security risk of your databases

• Update Google Chrome to Patch 2 New Zero-Day Flaws Under Attack

• Popular NPM package Pac-Resolver affected by a critical flaw

• IT teams forced into compromising security for business continuity during pandemic

• Server market revenue declining 2.5% YOY in 2Q21

• Where Should We Draw the Cyber Blue Line?

• Clearing Up Elements of Cloud Security

• Networking issues enterprises must address to improve business and operational efficiency

• 2021-09-10 – Traffic analysis exercise – Angry Poutine

• Google patches two Chrome zero-days

• Attackers exploit CVE-2021-26084 for XMRig crypto mining on affected Confluence servers

• Beware of these 5 common scams you can encounter on Instagram

• Apple products vulnerable to FORCEDENTRY zero-day attack – patch now!

• Palo Alto Networks Okyo Garde protects work-from-home employees and small businesses

• Stellar Cyber collaborates with Pentio to offer its Open XDR platform to Japanese enterprise customers

• Moody’s partners with BitSight to create integrated cybersecurity risk platform

• Top Threat Intelligence Platforms for 2021

• Booz Allen Hamilton acquires Tracepoint to elevate its incident response capabilities

• TransUnion acquires Neustar to enhance fraud detection and prevention offerings

• Tenable to acquire Accurics to expand its IaC and cloud security capabilities

• JumpCloud raises $159M to accelerate expansion of its cloud directory platform

• Apple emergency patches fix zero-click iMessage bug used to inject NSO spyware

• Epic Games Pays Apple $6 Million as Ordered by Court

• Caitlin Woodward joins Trulioo as General Counsel

• Apple releases update fixing NSO spyware vulnerability affecting Macs, iPhones, iPads and Watches

• Apple Issues Emergency Fix for NSO Zero-Click Zero Day

• Tenable acquires cloud security startup Accurics for $160M

• Apple Releases Security Updates to Address CVE-2021-30858 and CVE-2021-30860

• Apple’s Back to School Promotion Might Hint at Date of October Apple Event

• BrandPost: Completing the Journey from BYOD to a Hybrid WFA Workforce

• Biden’s COVID vaccination mandate for feds has a deadline

• Google Warns of Exploited Zero-Days in Chrome Browser

• Apple Releases Security Updates to Address CVE-2021-30858 and CVE-2021-30860

• IT Security News Daily Summary 2021-09-13

• Security certifications, prior experience stymie cyber hiring

• Apple Releases Security Updates, iOS 14.8 and iPadOS 14.8

• Virginia National Guard suffers cyberattack as Marketo leaks data

• REvil’s Back; Coder Fat-Fingered Away Its Decryptor Key?

• Apple Releases Security Updates, iOS 14.8 and iPadOS 14.8

• Cryptominers Snuck Logic Bomb Into Python Packages

• Mustang Panda Compromises Indonesian Intelligence Agency

• Apple fixes actively exploited FORCEDENTRY zero-day flaws

• T-Mobile’s Smartphones Coming to 2,300 Walmart Locations Across the U.S.

• How a glitch in the Matrix led to apps potentially exposing encrypted chats

• Spring Security With LDAP Authentication

• Review: 2022 Acura MDX Adds Wireless CarPlay to a Touchpad-Driven Infotainment System

• Apple’s iOS 14.8 Update Fixes Zero-Click Exploit Used to Distribute Pegasus Spyware

• Brazil debates creation of national strategy to tackle cybercrime

• Report: Facebook Provided Inaccurate Information To Misinformation Researchers

• CCSP Certification vs. CCAK Certificate: What Are the Distinctions?

• promiscuous mode

• WhatsApp’s End-to-End Encryption Isn’t Actually Broken

• REvil’s Back; Coder Fat-Fingered Away Its Decryptor Key

• How to utilize openssl in Linux to check SSL certificate details

• US Locks Up Key Player in Nigerian Romance Scam

• WooCommerce Multi Currency Bug Allows Shoppers to Change eCommerce Pricing

• Honing Cybersecurity Strategy When Everyone’s a Target for Ransomware

• Apple Ships Urgent Patch for FORCEDENTRY Zero-Days

• Technology Giants and the Deregulatory First Amendment

• Private equity firm Siris Capital in talks to acquire cybersecurity firm Radware, sources say

• The unemployment insurance system is set to get a tech makeover — but it needs much more, the Biden administration says

• Looking for election threats in all the wrong places

• Surprise! iOS 14.8 for iPhone is out

• SSID Stripping: New Method for Tricking Users Into Connecting to Rogue APs

• CISA Announces New Chief of Staff

• Prevention is Better Than Cure: The Ransomware Evolution

• The many tentacles of Magecart Group 8

• Time is running out for CentOS 8>

• The IT talent gap is still growing

• Serious Security: How to make sure you don’t miss bug reports!

• Complex Networks and the Cyber Social Terrain

• Apple Releases macOS Big Sur 11.6 With Security Fixes

• AI Gym ‘Tempo’ Announces Integration With Apple Watch

• OPM looks to modernize IT, set up revolving fund

• 5 ways to improve cyber resilience against ransomware, supply chain attacks

• IoT device attacks double in the first half of 2021, and remote work may shoulder some of the blame

• Tens of Thousands of Unpatched Fortinet VPNs Hacked via Old Security Flaw

• Facebook announces WhatsApp end-to-end encrypted (E2EE) backups

• Deals: Nomad Expands Outlet Sale With Steeper Discounts and 30% Off iPhone 11 Cases

• Apple Releases iOS 14.8 and iPadOS 14.8 With Security Updates

• The Catalog of Carceral Surveillance: Overt and Covert Surveillance of Prisoners Via Telephones and Tablets

• A Journey in Organizational Cyber Resilience Part 1: The Human Factor

• Zoom unveils new security features including end-to-end encryption for Zoom Phone, verified identities and more

• Over 60 million wearable, fitness tracking records exposed via unsecured database

• Tenable to Acquire Accurics in $160M Deal

• Why Your Hospital Network Needs an IoT Security Policy

• Afternoon Cyber Tea: Learn how to stop misinformation threats from nation-state bad actors

• Banks and other Govt organizations badly hit in New Zealand by Cyber Attack

• APT-C-36 Updates Its Spam Campaign Against South American Entities With Commodity RATs

• Anonymous hacks Texas Republican Party website against abortion law

• CISOs Faced With Friction, Resistance From Remote Workers Over Security Controls

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Open-Source Tool of the Month: Uptycs Addresses Modern Cloud-Native & Containerization Security Challenges with its Uptycs Security Analytics Platform>

• Major Viruses That Would Have Been Stopped By A Firewall | Avast

• Tenable acquires infrastructure-monitoring startup Accurics

• How to use mkcert to create locally signed SSL certificates

• All about cloud-native application protection platforms

• GitHub Identifies Multiple Security Vulnerabilities in Node.js Packages

• CISA’s Annual National Cybersecurity Summit

• New Spook.Js attack allows to bypass Google Chrome Site Isolation protections

• Open redirect on UK council website was being used for Royal Mail-themed parcel payments scam

• CISA’s Annual National Cybersecurity Summit

• Apple’s Shazam Control Center Music Recognition Feature Hits 1 Billion Songs Identified

• Here’s How Apple Strategically Places Its Products In Apple TV+ Shows

• United Nations’ Computers Breached by Hackers

• Backups are not a simple ransomware defense, with Matt Crape: Lock and Code S02E17

• McDonald’s Erroneously Leaked Credentials to Monopoly VIP Database Customers

• WhatsApp Rolls Out End-to-End Encrypted Cloud Backups

• Vermilion Strike: Linux and Windows Re-implementation of Cobalt Strike

• How COVID has changed citizen services

• Best travel VPN 2021

• This is how a cybersecurity researcher accidentally broke Apple Shortcuts

• Linux Implementation of Cobalt Strike Beacon Targeting Organizations Worldwide

• Apple Surveying Canada’s Largest Cities With Specialized Backpacks to Improve Maps

• Lookout Delivers First Zero Trust Solution For Any App That Dynamically Adapts Based On Data Sensitivity And Continuous Risk Assessment Of Endpoints And Users

• The Complete Guide to Business Email Compromise (BEC) and How to Prevent It

• Smartphone Security: Five Steps Beating and Blocking Robocalls

• Phony COVID-19 vaccine card prices double following Biden mandate announcement

• 5 ways to better prepare your organization for a ransomware attack

• Protect your endpoints with top EDR software

• Facebook Announces Encrypted WhatsApp Backups

• Critical Bug Reported in NPM Package With Millions of Downloads Weekly

• Deals: Amazon Takes $149 Off 2020 MacBook Air Models, Starting at $849.99 for 256GB

• Here’s What Not to Expect at Tomorrow’s Apple Event

• The Complete Guide to Business Email Compromise (BEC) and How to Prevent it

• What’s Behind the Leaks of Customer Data From Retailer Databases?

• APT-C-36 Updates Its Long-term Spam Campaign Against South American Entities With Commodity RATs

• Singapore moots ‘foreign interference’ law with powers to issue online platforms take-down order

• Citrix Patches Hypervisor Vulnerabilities Allowing Host Compromise

• WordPress 5.8.1 Patches Several Vulnerabilities

• Images Allegedly Show New iPhone 13 Case Colors Ahead of Apple Event

• Alleged iPad Mini 6 Case Images Show Redesign With Relocated Volume Buttons For Full-Size Apple Pencil

• A week in security (Sept 6 – Sept 12)

• Android malware distributed in Mexico uses Covid-19 to steal financial credentials

• What is the impact of software supply chain security challenges?

• The danger of open redirects!

• Designing Contact-Tracing Apps

• Windows Exploit Tutorials Shared on Hacking Forums

• OpenSSL 3.0 Released After 3 Years of Development

• Incident response analyst report 2020

• BIMI: your reliable deliverability improvement tool

• How Purple Teaming Prepares Organizations for Ransomware Attacks

• REvil Ransomware Is Back Online After A Brief Hiatus

• Microsoft Alerted Azure Customers of Bug That Could Have Allowed Hackers to Access Data

• TESLA FSD Beta Software Leaked Days Before the Release of Version 10

• Expert Comment on Amending Human Review of AI Decisions

• US Financial Regulator ‘Carrying Out Massive SolarWinds Probe’

• WhatsApp to Roll Out Encrypted Backups

• The BitSight and Moody’s Partnership: A New Era For Cybersecurity

• 8 pitfalls that undermine security program success

• Federal agencies face new zero-trust cybersecurity requirements

• PayPal Raises Business Fees Between UK And Europe

• Judge Orders Apple To Change App Store Payment Rules

• Data Protection Regulator Queries Facebook On Smart Glasses

• Microsoft Warns of Azure Bug That Let Attackers take Control of Azure Container Instances (ACI)

• Quick Hits

• FCW Insider: September 13, 2021

• UK Man Gets Five Years for Online Abuse Campaign

• A Third of Industrial Control Systems Attacked in H1 2021

• New SpookJS Attack Bypasses Google Chrome’s Site Isolation Protection

• BlackMatter ransomware gang hit Technology giant Olympus

• Epic Games Not Satisfied With Ruling in Case Against Apple, Files Appeal

• REvil Ransomware Has Returned

• Data Integrity: What It Means and How to Maintain It

• You can ‘go your own way’ over GDPR, says UK’s new Information Commissioner

• Gurman: Apple’s Second Fall Event to Focus on Both New Macs and New iPads

• Texas Law Bans Social Media ‘De-Platforming’

• Amazon Offers Free College Education To Frontline Staff

• Startup Culture Was Boy Culture | Avast

• Scammers in Russia Offer Free Bitcoin on a Hacked Government Website

• New SpookJs Attack Bypasses Google Chrome’s Site Isolation Protection

• Trying to register your antivirus in Windows Security Center?

• Twitter Introduces Labels For ‘Good’ Bots

• How to achieve digital dexterity with a predominantly hybrid workforce

• The new maxtrilha trojan is being disseminated and targeting several banks

• Mobile app creation: Why data privacy and compliance should be at the forefront

• North Korea Kumsong 121 launching Mobile Smishing Cyber Attacks

• Black Matter Ransomware targets Olympus Japan

• WhatsApp details plans to offer encrypted backups

• Department of Justice and Constitutional Development of South Africa hit by a ransomware attack

Generated on 2021-09-19 23:59:48.523261

Liked it? Take a second to support IT Security News on Patreon!