IT Security News Weekly Summary – Week 38

• IT Security News Daily Summary 2022-09-25

• OSINT and Top 15 Open-source Intelligence Tools

• QUAD Nations to Assist Each Other in Taking Action Against Malicious Cyber Activities

• Attackers impersonate CircleCI platform to compromise GitHub accounts

• How to Overcome the Pitfalls of the Saudi-Iran Dialogue

• Gentoo: GLSA-202209-11: HarfBuzz: Multiple vulnerabilities

• Harley Trojan Affecting the Users by Impersonating the Applications

• Penetration testing is in the eye of the beholder

• SUSE: 2022:3379-1 important: the Linux Kernel (Live Patch 35 for SLE 12 SP5)

• Defenders Be Prepared: Cyberattacks Surge Against Linux Amid Cloud Migration

• The Best Open Source Tools to Secure Your Linux Server

• Malicious Actors Exploit Zero-Day RCE Bug in Sophos Firewall

• Teen Hacking Suspect Arrested by London Police for GTA 6 and Uber Breach

• BIND Updates Patch High-Severity Flaws

• Optus Data Breach: Australia’s Telco Giant Confirms Data of Millions of Users Compromised

• Gentoo: GLSA-202209-12: GRUB: Multiple Vulnerabilities

• Gentoo: GLSA-202209-13: libaacplus: Denial of Service

• Gentoo: GLSA-202209-14: Fetchmail: Multiple Vulnerabilities

• Gentoo: GLSA-202209-15: Oracle JDK/JRE: Multiple vulnerabilities

• The Challenges Facing the Passwordless Future

• New Lawsuit Accuses Facebook Of “Side-Stepping” Apple Privacy Protections To Collect User Data

• SUSE: 2022:3370-1 important: the Linux Kernel (Live Patch 0 for SLE 15 SP4)

• SUSE: 2022:3377-1 important: the Linux Kernel (Live Patch 22 for SLE 15 SP3)

• Bosses spying on you? Here’s the most disastrous truth about surveillance software

• OpIran: Anonymous declares war on Teheran amid Mahsa Amini’s death

• VPN Providers Flee India as a New Data Law Takes Hold

• SUSE: 2022:3373-1 important: the Linux Kernel (Live Patch 26 for SLE 12 SP4)

• SUSE: 2022:3372-1 important: the Linux Kernel (Live Patch 28 for SLE 12 SP4)

• Security Affairs newsletter Round 385

• Week in review: Revolut data breach, ManageEngine RCE flaw, free Linux security training courses

• Noberus ransomware gets info-stealing upgrades, targets Veeam backup software

• Debian LTS: DLA-3119-1: expat security update

• Penetration testing

• UK Police Arrests 17-Yr-Old Teen Hacker Believed to be Behind Uber & Rockstar Hacks

• APIs: Risks and security solutions

• SUSE: 2022:3369-1 important: the Linux Kernel (Live Patch 20 for SLE 15 SP3)

• Fedora 37: thunderbird 2022-b4583f536b

• Kyndryl and Elastic expand partnership to help users enhance data-driven digital transformation initiatives

• Covid antigen test results of 1.7m Indian and foreign nationals leaked online

• Fedora 37: python-nbxmpp 2022-bf1f350185

• Fedora 37: gajim 2022-bf1f350185

• Uber and Rockstar – has a LAPSUS$ linchpin just been busted (again)?

• Saryu Nayyar Named Finalist in 19th Annual Stevie® Awards for Women in Business

• DocuSign hires Allan Thygesen as CEO

• IBM acquires Dialexa to provide end-to-end digital transformation services for clients

• SUSE: 2022:3368-1 important: the Linux Kernel (Live Patch 14 for SLE 15 SP3)

• How to Automate OWASP ZAP

• ISC fixed high-severity flaws in the BIND DNS software

• IT Security News Daily Summary 2022-09-24

• Avoiding the Risks of Ransomware Strikes in Life Sciences

• Building A Layered Plan for Battling Cybercrime

• UK Teen Arrested Amid Uber and GTA 6 Hacking Saga

• The Web2 problem: How the power to create has gone astray

• The Apple security landscape: Moving into the world of enterprise risk

• Ukraine: SSU dismantled cyber gang that stole 30 million accounts

• Hackers Exploited Zero-Day RCE Vulnerability in Sophos Firewall — Patch Released

• Angry Developer Leaks LockBit Ransomware Builder

• Vulnerability in OCI Could Have Put the Data of Customers Exposed to the Attacker

• SecurityScorecard Appoints Former U.S. National Intelligence Deputy Director and Cybersecurity Expert Susan M. Gordon to Board of Directors

• Risk counts for Cyber and here is why

• Noberus Ransomware Has Updated Its Methods

• A Match Made in Heaven: systemd Comes to Windows Subsystem for Linux

• Shield your data from a quantum attack: The path to PQC migration

• Scammers Employing Stolen Credit Card Data to Design Fake Websites

• RCE Bug in ZOHO Products Let Hackers Execute Arbitrary Code Remotely

• London Police arrested a teen suspected to be behind Uber, Rockstar Games breaches

• Alert: 15-year-old Python tarfile Flaw Lurks in ‘Over 350,000’ Code Projects

• Child Predators Mine Twitch to Prey on Kids

• SUSE: 2022:3366-1 important: the Linux Kernel (Live Patch 32 for SLE 15 SP1)

• SUSE: 2022:3359-1 important: the Linux Kernel (Live Patch 30 for SLE 15 SP1)

• CircleCI, GitHub Users Targeted in Phishing Campaign

• Weekly Update 314

• London Police Arrested 17-Year-Old Hacker Suspected of Uber and GTA 6 Breaches

• Build or Buy your own antivirus product

• SUSE: 2022:3362-1 important: the Linux Kernel (Live Patch 32 for SLE 15)

• Morgan Stanley Fined $35 Million For Security Lapses

• Hackers Actively Exploiting New Sophos Firewall RCE Vulnerability

• Steer Clear of the “Pay Yourself Scam” That’s Targeting Online Bank Accounts

• How Often Should You Change Your Passwords?

• Hexnode’s 3rd Global User Conference HexCon22 Wraps Up With Great Success

• What to consider before disposing of personal data – Week in security with Tony Anscombe

• ManageEngine Study Finds Democratization of IT in North America Increased Dramatically Post-COVID

• GrammaTech CodeSentry 4.0 Enables Developers to Identify Security Vulnerabilities Hidden in Third Party Code

• What is Data-as-a-Service (DaaS)? Understanding the benefits, and common use cases

• Critical Magento Vulnerability Let Unauthenticated Attackers to Execute Code

• SUSE: 2022:3360-1 important: the Linux Kernel (Live Patch 28 for SLE 15)

• Check out this Android spyware, says Microsoft, the home of a gazillion Windows flaws

• 15-Year-Old Python Bug Let Hacker Execute Code in 350k Python Projects

• Fedora 35: dokuwiki 2022-8c76e587f7

• Fedora 36: dokuwiki 2022-d048c0dde2

• September 2022 Web Server Survey

• Cyber mandates too costly for water utilities, experts say

• Can smart streetlights kick-start smart city progress? Yes, they can.

• Hey WeLiveSecurity, how does biometric authentication work?

• Malicious npm Package Poses as Tailwind Tool

• Feds Sound Alarm on Rising OT/ICS Threats From APT Groups

• Time to Quell the Alarm Bells Around Post-Quantum Crypto-Cracking

• 2022-09-23 – IcedID (Bokbot) with Cobalt Strike

• BigID provides Snowflake customers with accelerated security controls

• Fedora 37: libofx 2022-cfb44eb79a

• Fedora 37: webkitgtk 2022-0c00617967

• Maak van elke plek een slimme ruimte

• Smart Spaces Experience Guide – Transform Any Place into a Smart Space

• Transformez n’importe quel endroit en un espace intelligent

• Slack’s and Teams’ Lax App Security Raises Alarms

• Welcome to high tech hacking in 2022: Annoying users until they say “yes”

• A first look at the builder for LockBit 3.0 Black

• Malwarebytes recognized as endpoint security leader by G2

• Control System Defense: Know the Opponent

• CISA Releases Three Industrial Control Systems Advisories

• ISC Releases Security Advisories for Multiple Versions of BIND 9

• CISA and NSA Publish Joint Cybersecurity Advisory on Control System Defense

• CISA Has Added One Known Exploited Vulnerability to Catalog 

• Moshe Bar joins AlmaLinux Board of Directors

• SecurityScorecard appoints Susan M. Gordon to Board of Directors

• SUSE: 2022:3353-1 moderate: permissions

• Chainguard releases Wolfi, a Linux ‘undistribution’

• Training the next generation of cybersecurity experts to close the crisis gap

• How Organizational Structure, Personalities and Politics Can Get in the Way of Security

• 15-year-old Python vulnerability poses supply chain threat

• Malicious NPM package discovered in supply chain attack

• Allurity Acquires Spanish Multinational Aiuken Cybersecurity

• The Ungodly Surveillance of Anti-Porn ‘Shameware’ Apps

• CISA Has Added One Known Exploited Vulnerability to Catalog 

• Sophos warns of a new actively exploited flaw in Firewall product

• Malwarebytes Glitch Causes Block To Google & YouTube For Users

• Optus Data Breach Announced, Experts Weigh In

• Uber Is Hiring For Over 80 Cybersecurity Jobs After Being Hacked Last Week

• Netflix-style Ransomware Makes Your Organisation’s Data The Prize In A Dark Subscription Economy

• San Francisco’s Board of Supervisors Grants Police More Surveillance Powers

• IT Security News Daily Summary 2022-09-23

• Chinese Media Allege NSA Tapped Into Telecom Network

• SUSE: 2022:3355-1 important: puppet

• SUSE: 2022:3356-1 important: dpdk

• The software supply chain: New threats call for new security measures

• Report: 90% of orgs believe cybersecurity risk isn’t being addressed

• One city’s proposed e-scooter ultimatum: No sidewalks or no scooting

• Cloud security market forecast to surpass $123 billion by 2032

• Colonial Pipeline ransomware group using new tactics to become more dangerous

• Microsoft focuses on remote security with Windows 11 update

• S3 Ep101: Uber and LastPass breaches – is 2FA all it’s cracked up to be? [Audio + Text]

• Morgan Stanley Fined $35m By SEC For Data Security Lapse

• Optus Hit By Cyber-Attack, Breach Affects Nearly 10 Million Customers

• Where VCs Are Investing in Cybersecurity

• Malicious Apps With Millions of Downloads Found in Apple App Store, Google Play

• Malicious NPM Package Caught Mimicking Material Tailwind CSS Package

• Researchers Uncover Years-Long Mobile Spyware Campaign Targeting Uyghurs

• Fake Sites Fool Zoom Users Into Downloading Deadly Code

• San Francisco Cops Can Now Use Private Cameras To Monitor Events

• Hack On Optus Exposes Personal Data

• The Chatter Podcast: Josephine Baker, Singer and Spy, with Damien Lewis

• Twitter Failed To Log Users Out Of All Their Devices After They Reset Password

• Intermittent Encryption Analysis

• Malicious OAuth applications abuse cloud email services to spread spam

• Cambodian authorities crack down on cyber slavery amid international pressure

• New vulnerabilities in Dataprobe are Invading The Devices Remotely

• Amazon, Microsoft, Google Face UK Cloud Services Probe

• Tesla Recalls 1.1 Million Vehicles Over Window Closing Issue

• How to Spot Your Biggest Security Threat? Just Look out for the Humans

• The clock is ticking on zero trust

• Bipartisan Senate bill aims to safeguard open source software

• Detroit sues the U.S. Census Bureau over alleged undercounts

• Colorado now accepts crypto for state tax payments

• Learn the cybersecurity skills you need for employment

• Google dork query

• App Developers Increasingly Targeted via Slack, DevOps Tools

• Pro-Ukraine Hacktivists Claim To Have Hacked Notorious Russian Mercenary Group

• AV Used By Millions Blocked All Google Sites By Mistake, Sowing Chaos

• Revealed: US Military Bought Mass Monitoring Tool That Includes Internet Browsing, Email Data

• Organisations Need To Adopt Predictive And Proactive Threat Detection Software To Counter Cyber-attacks

• Quantum Readiness- Key Concern For Top Dogs In Cybersecurity

• BlackCat’s Ransomware Tool Gets an Upgrade

• 2K Games’ Support System Hacked via Notorious Malware

• FDA Issues Cybersecurity Alert on Medtronic Insulin Pumps

• Extended DDoS Attack With 25.3B+ Requests Thwarted

• WhatsApp Message Fraud Dupes Automobile Firm of Rs.1 Crore

• Companies Without Zero Trust Could Lose $1M More During a Data Breach

• How IBM Secured the 2022 US Open

• Does Follina Mean It’s Time to Abandon Microsoft Office?

• Metaverse will move the goal posts for ID verification

• Malicious OAuth applications used to compromise email servers and spread spam

• Corrupting files is easy than spreading Ransomware

• HUMAN Discovers and Disrupts Ad Fraud Scheme Impacting 89 Apps with More Than 13 Million Downloads from Google Play and Apple App Stores

• How To Effectively Scale Your Web Scraping Efforts?

• Silicon In Focus Podcast: TECIS Europe Event Preview

• Tape Archiving Still Needed, Says PoINT Software

• StorPool Touts Software-defined Block Storage For Distributed Data

• Fake Banking Rewards Apps Install Info-stealing RAT on Android Phones

• Hackers Launched Record DDoS Attack with 25.3 Billion Requests in 4 Hours

• SUSE: 2022:3350-1 important: the Linux Kernel (Live Patch 25 for SLE 12 SP5)

• SUSE: 2022:3352-1 important: webkit2gtk3

• SUSE: 2022:3351-1 important: webkit2gtk3

• LLVM 15.0.1 Released With Nearly Three Dozen Fixes

• Business VPNs: Now More Important Than Ever

• Labor Department’s approach to modular UI tech for states evolves

• How one state is clearing hurdles to centralized services delivery

• Versa Networks Scores Big in the 2022 Gartner® SD-WAN Report

• Behavioral Analytics a Top Priority for SOC, New Gurucul Survey Finds

• Programming languages: It’s time to stop using C and C++ for new projects, says Microsoft Azure CTO

• This Windows 11 security feature makes your PC ‘very unattractive’ to password hackers

• Software supply chain security gets its first Linux distro, Wolfi

• 350,000 open source projects at risk from Python vulnerability

• How to create a Bitwarden Vault entry that can be used for AutoFill

• 15-Year-Old Python Vulnerability Present in 350,000 Projects Resurrected

• Oracle Cloud Infrastructure Vulnerability Exposed Sensitive Data

• CISA, FBI Detail Iranian Cyberattacks Targeting Albanian Government

• Malwarebytes Raises $100 Million From Vector Capital

• Twitter Logs Out Some Users Due to Security Issue Related to Password Resets

• Authorized Push Payments Surge to 75% of Banking Fraud

• Russia-Based Hackers FIN11 Impersonate Zoom to Conduct Phishing Campaigns

• Facebook Experimenting With Letting Users Help Write Content Moderation Policies

• Palo Alto Networks 5G-Native Security Now Available on Microsoft Azure Private Multi-Access Edge Compute

• StackHawk Launches Deeper API Security Test Coverage to Improve the Security of APIs

• Twitter’s Whistleblower Allegations Are a Cautionary Tale for All Businesses

• Control System Defense: Know the Opponent

• CISA Releases Three Industrial Control Systems Advisories

• ISC Releases Security Advisories for Multiple Versions of BIND 9

• CISA and NSA Publish Joint Cybersecurity Advisory on Control System Defense

• 15-Year-Old Unpatched Python Vulnerability Potentially Affects Over 350,000 Projects

• Researchers Disclose Critical Vulnerability in Oracle Cloud Infrastructure

• IT Security Takeaways from the Wiseasy Hack

• Atlassian Confluence bug CVE-2022-26134 exploited in cryptocurrency mining campaign

• A 15-Year-Old Unpatched Python bug potentially impacts over 350,000 projects

• Role-based access control for Red Hat Hybrid Cloud Console

• Connecting to the RHEL web console, part 1: SSH access methods

• Content Moderation Tools to Stop Extremism

• Two Americas: Cross-Border Data Requests Post-Dobbs

• Six Ways to Have Your eCommerce Site Ready for High-Traffic eShopping Days

• Synopsys Finds Significant Increase in Practices to Bolster Software Supply Chain Security

• What Is DNSSEC?

• LockBit Ransomware Builder Leaks Online

• Phishing Campaign Abuses LinkedIn Smart Link

• A New Linux Tool Aims to Guard Against Supply Chain Attacks

• Lawsuit: SMUD and Sacramento Police Violate State Law and Utility Customers’ Privacy by Sharing Data Without a Warrant

• Fake sites fool Zoom users into downloading deadly code

• Iran blocks Whatsapp, Instagram as citizens protest death of Mahsa Amini

• Open up, it’s the IRS. We’re here about the crypto tax you dodged

• YOUR CYBERSECURITY EXPERIENCE IS NEEDED FOR CREATING NEW U.S. FTC REGULATIONS

• New Spam Attack Abusing OAuth Apps to Target Microsoft Exchange Servers

• How Does WebAuthn Work?

• CPR analyzes A 7-year mobile surveillance campaign targeting largest minority in China

• Over $45 billion in unemployment paid to fraudsters during pandemic, watchdog says

• Is Amazon about to ruin Alexa answers with ads?

• Jit and ZAP: Improving programming security

• SentinelOne Announces $100 Million Venture Fund

• 10 security-by-design principles to include in the SDLC

• Risk & Repeat: Uber and Rockstar Games hacked

• Accused Russian RSOCKS Botmaster Arrested, Requests Extradition to U.S.

• Air Force Upgrades Digital Modernization Strategy to “As a Service” Model

• CISA: Zoho ManageEngine RCE Bug Is Under Active Exploit

• Iran’s Internet Shutdown Hides a Deadly Crackdown

• Slack and Teams’ Lax App Security Raises Alarms

• In the Hunt for the Auto Login Setup Process

• Study of Electronic Monitoring Smartphone Apps Confirms Advocates’ Concerns of Privacy Harms

• Chinese state media claims U.S. NSA infiltrated country’s telecommunications networks

• 7-year Android Malware Campaign Targeted Uyghurs: Report

• Why does preparing for AI attacks need to be your next big agenda?

• Data of millions of users exposed in Australia’s 2nd-largest telecom firm breach

• Significant customer data exposed in attack on Australian telco

• Void Balaur Targets Russian Entities

• Scammers Impersonating European Anti-Fraud Office to Launch Phishing Campaigns

• A 15-Year-Old Bug Affected Over 350,000 Open-Source Projects

• DeFiChain: DeFi Boosts with Decentralized Assets

• Unpatched 15-year Old Python Flaw Allows Code Execution in 350k Projects

• Apple’s New iPhone 14 and Apple Watch Series 8 – Intego Mac Podcast Episode 258

• National Network to End Domestic Violence (NNEDV) Expert to Provide Keynote Address on Intimate Partner Violence in the Digital Age and Strategies to Prevent Abuse at M3AAWG 56th Meeting

• Options Celebrate 10 Microsoft Gold Partner Status Competencies

• How to Prevent Ransomware as a Service (RaaS) Attacks

• Simplify with Network Security as a Service (NSaaS)

• Synthetic DNA: Solution For Mass Data Storage Problem?

• Nodeum Touts Hybrid Data Warehousing Approach

• SUSE: 2022:3347-1 moderate: rubygem-rack

• SUSE: 2022:3346-1 important: the Linux Kernel (Live Patch 29 for SLE 12 SP4)

• SUSE: 2022:3342-1 important: the Linux Kernel (Live Patch 23 for SLE 12 SP4)

• Ubuntu 5635-1: Linux kernel (GKE) vulnerabilities

• Federal cyber mandates for water infrastructure are too costly to implement, experts tell Hill panel

• DISA plans further updates to DEOS support notice

• Cybersecurity is Front and Center in Coast Guard Reauthorization Bill

• Optus security breach compromises customers’ passport details

• 5 tips to help children navigate the internet safely

• New ‘Wolfi’ Linux Distro Focuses on Software Supply Chain Security

• Microsoft Issues Out-of-Band Patch for Flaw Allowing Lateral Movement, Ransomware Attacks

• Morgan Stanley fined millions for selling off devices full of customer PII

• Iranian Hackers Hid in Albanian Networks for Over a Year

• Twitter Password Reset Bug Exposed User Accounts

• Cyber Mercenary Group Void Balaur Continues Hack-For-Hire Campaigns

• Hackers Deploy Malicious OAuth Apps to Compromise Email Servers, Spread Spam

• How Europe Is Using Regulations to Harden Medical Devices Against Attack

• Cyberattackers Compromise Microsoft Exchange Servers via Malicious OAuth Apps

• Hackers Targeting Unpatched Atlassian Confluence Servers to Deploy Crypto Miners

• Unscrambling Cybersecurity Acronyms: The ABCs of EDR and MEDR Security

• A disgruntled developer is the alleged source of the leak of the Lockbit 3.0 builder

• CISA adds Zoho ManageEngine flaw to its Known Exploited Vulnerabilities Catalog

• Anonymous claims to have hacked the website of the Russian Ministry of Defense

• How to integrate Red Hat Advanced Cluster Security for Kubernetes with ServiceNow

• Mobile Ransomware: The Next Step for Cybercriminals

• Best 10 SIEM Tools to Fuel Up Your Threat-Hunting Grind

• Vulnerable children’s identities used in tax fraud scheme

• WEBGAP Launches Remote Browser Isolation Platform for Universities

• LATEST CYBERTHREATS AND ADVISORIES – SEPTEMBER 23, 2022

• Report: 90% of orgs have software security checkpoints in their software development lifecycle (SDLC)

• NSA and CISA: Here’s how hackers are going after critical systems, and what you need to do about it

• LogicGate Risk Cloud: Product review

• CISA Warns of Zoho ManageEngine RCE Vulnerability Exploitation

• “Left and Right of Boom” – Having a Winning Strategy

• BIND Updates Patch High-Severity Vulnerabilities

• August 2022 Cyber Attacks Statistics

• How to Create the Best Resume to Apply for Job Interviews in 2022?

• How DeFiChain gives DeFi a major boost with innovative decentralized assets

• High Severity IDOR Bugs inCNCF ‘Harbor’ Project by VMware

• SUSE: 2022:3341-1 important: dpdk

• Linus Torvalds: Rust will go into Linux 6.1

• Decreasing ad revenue, iOS 14.5 make case for programmatic SEO

• DOT, SBA and others team up to attract new entrants to the federal market

• Investigators tap data, tech, tipsters to root out fraudsters

• Experts: Today’s public health crises are just the beginning

• SecTor 2022: The IoT Hack Lab is Back!

• SEC fines Morgan Stanley Smith Barney $35 million over failure to secure customer data

• European Spyware Investigators Criticize Israel and Poland

• NATO’s Team in Albania to Help on Iran-Alleged Cyberattack

• Data Breach at Australian Telecoms Firm Optus Could Impact Up to 10 Million Customers

• Cybercriminals launching more MFA bypass attacks

• Unpatched Python Library Affects More Than 300,000 Open Source Projects

• Quantify Risk, Calculate ROI

• Wintermute DeFi Platform Offers Hacker a Cut in $160M Crypto-Heist

• Microsoft Releases Out-of-Band Security Update for Microsoft Endpoint Configuration Manager

• Hackers Using Fake CircleCI Notifications to Hack GitHub Accounts

• The U.S. and its allies are joining forces on chips. That could stop China reaching the next level

• Tax refund phish logs keystrokes to swipe personal details

• Scammers send fake ‘Energy Bills Support Scheme’ texts

• 5 things to teach your kids about social media

• San Francisco cops can use private cameras to live-monitor ‘significant events’

• Alert: 15-year-old Python tarfile flaw lurks in ‘over 350,000’ code projects

• HoneyPoC is Dead – Long Live Disinformation

• Details of Over 300,000 Russian Reservists Leaked, Anonymous Claims

• Neglecting Open Source Developers Puts the Internet at Risk

• Researchers Uncover New Metador APT Targeting Telcos, ISPs, and Universities

• Surge in Magento 2 template attacks exploiting the CVE-2022-24086 flaw

• Hackathon Finds Dozens Of Ukrainian Refugees Trafficked Online

• Insider Threats Play A Larger Role In Security Incidents

• Apparently Europol Is Hoarding Personal Data

• Sony Reintroduced A PS4 Bug On PS5 Which Could Have Led To A Jailbreak

• Previously Undisclosed OLC Opinions Illuminate the Growth of Executive Power

• Microsoft Exchange Hack

• SaaS Eliminates Barriers to Applying Security Controls to Your Entire AWS and Azure Data Repository

• Multi-Million Dollar Global Credit Card Scam Exposed

• Ericsson Still Provides Support Services To Russia

• Florida Seeks Supreme Court Ruling On Social Media Law

• Optus Warns Cyberattack Compromised Data Of 10 Million Customers

• Report: 84% of U.S. citizens have experienced social engineering attacks

• New Firmware Vulnerabilities Affecting Millions of Devices Allow Persistent Access

• Mitigating Risk and Communicating Value in Multicloud Environments

• Microsoft Looks to Enable Practical Zero-Trust Security With Windows 11

• Python Vulnerability, Quotes From Tenable

• LATEST CYBERTHREATS AND ADVISORIES – SEPTEMBER 23, 2022

• AttachMe – Oracle Patches “Severe” Vulnerability in its Cloud Infrastructure

• Is This The Crypto Winter or a Huge Discount?

• How To Optimize and Modernize Threat Exposure Management

• Google Debugs, JFrog Jumps Code, Confidential Kubernetes, Meta-PyTorch

• Netiquette: Is it OK to share pictures of someone else’s kids online?

• Senators float plan to authorize local-level federal executive boards

• Dashboard showcases local-level census data

• Pay-per-install services provide access to thousands of compromised computers

• Security Data Lakes Emerge to Address SIEM Limitations

• Sophisticated Hermit Mobile Spyware Heralds Wave of Government Surveillance

• Threat Actor Abuses LinkedIn’s Smart Links Feature to Harvest Credit Cards

• Trump Special Master Review: Enter Dearie

• 2022-09-21 – IcedID (Bokbot) with Cobalt Strike

• Software Supply Chain Security Guidance for Developers

• Australian Telecoms company Optus discloses security breach

• Diving Deeper to Understand the Windows Event logs for Cyber Security Operation Center (SOC)

• How to Secure Your APIs

• Thinking Like a Hacker: Abusing Stolen Private Keys

• GTA 6: Massive footage leak

• Focus on digital equity in broadband push, official urges

• NSA, CISA Explain How Threat Actors Plan and Execute Attacks on ICS/OT

• The Future of Endpoint Management

• Seven-Year Mobile Surveillance Campaign Targets Uyghurs

• Cyber Insurers Clamp Down on Clients’ Self-Attestation of Security Controls

• Hackers Paralyze 911 Operations in Suffolk County, NY

• Iranian State Actors Conduct Cyber Operations Against the Government of Albania

• Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

• Firing Your Entire Cybersecurity Team? Are You Sure?

• Twitter Password Reset Bug Uncovered User Accounts

• Morgan Stanley Sanctioned for Exposing Information of 15 Million Customers

• Crypto Market Maker Wintermute Hacked, $160 Million Stolen

• SUSE: 2022:2340-1 suse/sles/15.4/virt-handler Security Update

• SUSE: 2022:2342-1 suse/sles/15.4/libguestfs-tools Security Update

• Why MFA matters: These attackers cracked admin accounts then used Exchange to send spam

• NSA Reveals “Hackers’ Playbook” for OT Attacks

• Ransomware Groups Turn to Intermittent Encryption to Speed Attack Times

• Data Scientists Dial Back Use of Open Source Code Due to Security Worries

• Fake Indian Banking Rewards Apps Targeting Android Users with Info-stealing Malware

• Void Balaur Hackers-for-Hire Targeting Russian Businesses and Politics Entities

• CISA Warns of Hackers Exploiting Recent Zoho ManageEngine Vulnerability

• Android Banking Users Targeted With Fake Rewards Phishing Scam

• Critical ManageEngine RCE flaw is being exploited (CVE-2022-35405)

• Optus Falls Victim to Security Breach

• Keeping secrets safe off prem

• Google offers Artificial Intelligence-based Interview Warmup for new job seekers

• Guide to Performing Internal Social Engineering Testing

• openSUSE: 2022:10129-1 important: virtualbox

• SUSE: 2022:2341-1 suse/sles/15.4/virt-launcher Security Update

• SUSE: 2022:2343-1 suse/sles/15.4/virt-operator Security Update

• Android System WebView

• Hackers Using Malicious OAuth Apps to Take Over Email Servers

• Mass email campaign with a pinch of targeted spam

• Finding Out What Russians Think—Without Asking Them

• Microsoft induces several security features into Windows 11

• How “Long-Sightedness” Can Improve Security and Fraud Programs

• Microsoft Upgrades Windows 11 With New Security Features

• Europol “Hackathon” Identifies Scores of Human Trafficking Victims

• TAP Air Portugal – 5,067,990 breached accounts

• Azure Payment HSM achieves PCI PIN certification offering customers secure digital payments solutions in the cloud

• Rewards plus: Fake mobile banking rewards apps lure users to install info-stealing RAT on Android devices

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• California legalizes human composting

• Morgan Stanley to Pay $35M Fine for Exposing Information of Millions of Customers

• Multiple Vulnerabilities Discovered in Dataprobe’s iBoot-PDUs

• Don’t Wait for a Mobile WannaCry

• Iranian State Actors Conduct Cyber Operations Against the Government of Albania

• Risk management focus shifts from external to internal exposure

• Tackling the weaknesses of smart buildings’ technology

• The art and science behind Microsoft threat hunting: Part 2

• Russia- Linked Sandworm Enacted Ukrainian Telecoms for Injecting Malicious Code

• Elasticsearch TLS Activation: X-Pack Security

• Math could help crack forensic genetic cases 10x faster

• Privacy watchdog steps up fight against Europol’s hoarding of personal data

• 15-Year-Old Python Flaw Slithers into Software Worldwide

• Email Phishing Attack Revealed by American Airlines

• ChromeLoader: Microsoft, VMware Warns of the New Malware Campaigns

• Your guide to pay and benefits during a shutdown

• SIM Swapper Abducted, Beaten, Held for $200k Ransom

• New infosec products of the week: September 23, 2022

• How to keep public cloud data secure

• 8 blockchain security issues you are likely to encounter

• 6 Necessary Features of SIEM Alternatives

• Elon Musk, Tesla Set To Reveal ‘Optimus’ Robot Prototype

• NCSC: British Retailers Need to Move Beyond Passwords

• 350K Open-Source Projects At Risk of Supply Chain Vulnerability

• Over 39K unauthenticated Redis services on the internet targeted in cryptocurrency campaign

• How does identity crime affect victims?

• Mitigating the cybersecurity crisis for the school year ahead

• SIEM vs Log Management – Definitions, Features, Capabilities, and Deployment

• Malwarebytes blocks Google, YouTube as malware

• HackNotice Releases New Whitepaper Series “The Password is Not Dead (and Will Never Die)”

• Phosphorus Announces New Partnership with Dewpoint to Expand Its xIoT Security Solutions and Platform in US Market

• Orange and Netskope Partner on Carrier-class Connectivity and SSE Services for a Secure, Cloud-smart Platform

• Cyberattack Steals Passenger Data From Portuguese Airline

• Atlassian Confluence Vulnerability CVE-2022-26134 Abused For Cryptocurrency Mining, Other Malware

• Linux Log Analysis

• Overheard at the SANS Security Awareness Summit 2022

• Thousands of Users Impacted in Revolut Data Breach

• Hundreds of eCommerce Domains Infected With Google Tag Manager-Based Skimmers

• Cobalt Strike gets emergency patch

• Interested in cybersecurity? Join us for Security SOS Week 2022!

• Over 39,000 Unauthenticated Redis Instances Found Exposed on the Internet

• Hackers stole $160 Million from Crypto market maker Wintermute

• Finally, a Better U.S. War Crimes Bill. Now What?

• Rockstar Confirm Data Leak, GTA Footage Stolen

• Platform9 Arlon allows developers to deploy and configure a large number of clusters

• Secure Code Warrior Coding Labs helps developers advance their secure coding skills

• ServiceNow unveils new features in Now Platform Tokyo to increase business resilience for organizations

• Phishing Scams Are Targeting Netflix Users

• Vulnerabilities in the iBoot Power Distribution Unit Let Hackers Remotely Shut Down Devices

• Fedora 36: qemu 2022-f0a2695054

• Fedora 36: thunderbird 2022-feb7bdf6b2

• ServiceNow evolves from ITSM, aims to simplify business processes

• Hackers Steal $160 Million From Crypto Market Maker Wintermute

• Ransomware: The Latest Chapter

• U.S. gov adds more Chinese Telecom firms to the Covered List

• Crypto Biz Wintermute Loses $160 Million In Cyber Heist

• US Considers Two More Chinese Carriers Security Threats

• $35 Million Fine For Morgan Stanley After Unencrypted, Unwiped Harddrives Are Auctioned

• ‘I Don’t Care About Cookies’ extension sold to Avast

• Orange and Netskope partner to protect enterprise customers from data loss

• Phosphorus and Dewpoint collaborate to deliver a new generation of xIoT security solutions

• Regula 4306 empowers forensic experts to detect fake and counterfeit documents

• Tesla Megapack Catches Fire In California

• Third-party risk: What it is and how CISOs can address it

• Why Zero Trust Should be the Foundation of Your Cybersecurity Ecosystem

• Crypto Trading Firm Wintermute Loses $160 Million in Hacking Incident

• Cyber Firms Explain Their Ongoing Hacker Group Name Game

• Fake Zoom Sites Deploying Vidar Malware

• iPhone 14 and 14 Pro review: A picture is worth a thousand dollars

• Hackathon finds dozens of Ukrainian refugees trafficked online

• Facebook users sue Meta for bypassing beefy Apple security to spy on millions

• AI model from OpenAI automatically recognizes speech and translates it to English

• Malwarebytes Gets $100M Weeks After Laying Off 14% of Staff

• VA official has ‘deep concerns’ about agency’s electronic health record project

• Researchers Uncover Mysterious ‘Metador’ Cyber-Espionage Group

• 2K games helpdesk abused to spread RedLine malware

• Morgan Stanley’s years-long “extensive failure” to protect customer data ends in huge fine

• Update Firefox and Thunderbird now! Mozilla patches several high risk vulnerabilities

• Medtronic’s MiniMed 600 series insulin pumps potentially at risk of compromise, says FDA

• Enterprise Encryption for Linux

• iBoot Power Distribution Unit Flaws Allow Hackers to Remotely Shut Down Devices

• Russian Cyberspies Targeting Ukraine Pose as Telecoms Providers

• New SEC Cybersecurity Rules Could Affect Private Companies Too

• The Eleventh Circuit Cleans Up the Mess

• #ISC2CONGRESS – EMPOWERING NEW CONNECTIONS

• Cloudflare’s DLS in the Asia Pacific region helps customers comply with their data localization obligations

• Trellix launches Advanced Research Center to improve global threat intelligence

• Tod Ewasko joins NetWitness as CPO

• BioCatch hires Jonathan W. Daly as CMO

• American Airlines Warns Customers Of Data Breach

• Apple App Store Prices To Rise In Europe

• Chromeloader Malware Drops Malicious Browser Extensions to Track User’s Online Activity

• Report: 25% of S&P 500 have SSO credentials exposed on dark web

• Two-Fifths of US Consumers Suffer Personal Data Theft

• Shadowy Russian Cell Phone Companies Are Cropping Up in Ukraine

• U.S. Adds 2 More Chinese Telecom Firms to National Security Threat List

• Account takeover attacks on the rise, impacting almost 25% of people in the US

• New competition launched to improve personal data security

• EU Top Court Rules German Data Law Illegal

• Uber Begins Infosec Hiring Spree After Lapsus$ Hack

• OpIran – Anonymous Hits Iranian State Sites, Hacks Over 300 CCTV Cameras

• SUSE: 2022:3339-1 moderate: ardana-ansible, ardana-cobbler, ardana-tempest, grafana, opens

• SUSE: 2022:3338-1 moderate: ardana-ansible, ardana-cobbler, grafana, openstack-heat-templa

• Labor Department evolves efforts to assist states in UI delivery

• San Francisco police to tap private surveillance cameras

• Audit reveals why city’s efforts to curb homelessness fall short

• Tripwire Patch Priority Index for August 2022

• VMware Warns of ‘ChromeLoader’ Delivering Ransomware, Destructive Malware

• Video Game Publisher Admits Helpdesk Was Hijacked

• SASE Bucks Economic Uncertainty With Over 30% Growth in 2Q 2022, According to Dell’Oro Group

• ThreatQuotient Enhances Data-Driven Automation Capabilities With New ThreatQ TDR Orchestrator Features

• New Kaspersky EDR Optimum Further Simplifies Protection Against Evasive Threats

• How to Dodge New Ransomware Tactics

• Developer Leaks LockBit 3.0 Ransomware-Builder Code

• Product Review: Stellar Cyber Open XDR Platform

• Identifying file manipulation in system files

• Imperva blocked a record DDoS attack with 25.3 billion requests

• AttachMe: a critical flaw affects Oracle Cloud Infrastructure (OCI)

• Massive Data Breach at Uber

• Experts Weigh in on Rockstar GTA Leak

• The CVE Program Recognizes Dragos as a Numbering Authority for Common Vulnerabilities and Exposures

• 2K Games’ Help Deck Platform Hacked

• The Virtualization of Services in Industries Like Gaming is Making a Positive Effect in Modern Society for Americans

• How To Choose a Creative Management Software For Your Needs?

• Top Web Design Trends for 2022

• 5G Technology – Ensuring Cybersecurity for Businesses

• Are Cyber Scams More Common and How Do We Avoid Them?

• USA adds two more Chinese carriers to ‘probably a national security threat’ list

• WAAP it out for application security

• CISA’s vulnerabilities in KEV: Federal Agencies Have to Fix Them

• Saryu Nayyar Named Finalist in 19th Annual Stevie® Awards for Women in Business

• How to Wipe a Hard Drive in 4 Steps

• Be Aware! 6 Steps to Protect Against Ransomware

• Kiwi Farms Website Hacked! Admin Warns of Data Leak

• The Types of Phishing Attacks and How to Dodge All of Them

• The Open-Source Methodology

• Ubuntu 5634-1: Linux kernel (OEM) vulnerability

• Ubuntu 5629-1: Python vulnerability

• Debian: DSA-5236-1: expat security update

• The Apple security landscape: Moving into the world of enterprise risk

• VA owns up to acquisition woes at House hearing

• U.S. soldiers offer a virtual help desk for Ukraine fighters

• Lawmakers are setting a tight schedule to avoid a government shutdown

• NTIA updates broadband funding site

• Telemedicine increases health equity for inmates

• What Are Privacy-Enhancing Technologies (PETs)? A Comprehensive Guide

• EU Court Rules Against German Data Collection Law

• Operant Networks Emerges From Stealth With SASE Solution for Energy OT

• American Airlines Says Personal Data Exposed After Email Phishing Attack

• Quantifying ROI in Cybersecurity Spend

• The VC View: The AppSec Evolution

• Facebook Under Pressure From Lawmakers To Explain Collection Of Private Healthcare Data

• Threat Group TeamTNT Returns with New Cloud Attacks

• Spell-Checking in Google Chrome, Microsoft Edge Browsers Leaks Passwords

• Beware of Phish: American Airlines, Revolut Data Breaches Expose Customer Info

• 2-Step Email Attack Uses Powtoon Video to Execute Payload

• Microsoft Brings Zero Trust to Hardware in Windows 11

• CircleCI, GitHub Users Targeted in Phishing Campaign

• CISA Has Added One Known Exploited Vulnerability to Catalog 

• Critical Remote Hack Flaws Found in Dataprobe’s Power Distribution Units

• Record DDoS Attack with 25.3 Billion Requests Abused HTTP/2 Multiplexing

• Morgan Stanley Fined $35 Million For Security Lapses

• Net Consulting’s UK sovereign SOC achieves Palo Alto Networks XMDR certification

• Rockstar Games Confirms GTA VI Footage Leak

• How to Create a Successful Cybersecurity Strategy

• HIVE Ransomware Claims Responsibility for NYRA Attack

• 9 Things to Have in Mind When on a Business Trip

• UI Design for a FinTech App – 5 Best Practices

• New Windows 11 security features are designed for hybrid work

• Grand Theft Auto 6 suffers grand theft

• American Airlines suffers data breach after phishing incident

• Kiwi Farms breached, user data potentially exposed

• Meta, Twitter, Apple, Google urged to up encryption game in post-Roe America

• Look who’s fallen foul of Europe’s data retention rules. France and Germany

• ChromeLoader, what took you so long? Malvertising irritant now slings ransomware

• Check out this Android spyware, says Microsoft, the home of a gazillion Windows flaws

• Uber Blames Extortion, Hacking Group Lapsus$ For Recent Data Breach

• 15-Year-Old Python Bug Let Hacker Execute Code in 350k Python Projects

• September 2022 Web Server Survey

• Watch Out for These 3 Online Job Scams

• The Apple security landscape: moving into the world of enterprise risk

• Cyber mandates too costly for water utilities, experts say

• Can smart streetlights kick-start smart city progress? Yes, they can.

• Hey WeLiveSecurity, how does biometric authentication work?

• Feds Sound Alarm on Rising OT/ICS Threats From APT Groups

• Time to Quell the Alarm Bells Around Post-Quantum Crypto-Cracking

• ResponderCon Followup

• CISA Has Added One Known Exploited Vulnerability to Catalog 

• Optus Australia suffers serious data breach after Cyber Attack

• 5 Best Server Hosting For A Safe Multiplayer

• Apple Redesign ‘Makes iPhone 14 Far Easier To Repair’

• Ubuntu 5633-1: Linux kernel vulnerabilities

• Ubuntu 5631-1: libjpeg-turbo vulnerabilities

• Debian LTS: DLA-3118-1: unzip security update

• September’s Threats: MuddyWater, Majusaka, and SocGholish

• Report: U.S. businesses experience 42 cyberattacks per year

• Nvidia and Booz Allen develop Morpheus platform to supercharge security AI

• What enterprises can learn about collaboration app weaknesses from the GTA VI breach

• Is it time to add IT workforce ratings to the FITARA scorecard?

• Department of Transportation investing $160M for tech-centric projects

• Federal cyber grants could foster greater cooperation between state, local governments

• StateRAMP expands roster of participating states

• Indonesia finally passes personal data protection law

• Windows 11 22H2: These are the big new security features

• Uber exposes Lapsus$ extortion group for security breach

• Over 50,000 Revolut Customers Affected by Data Breach

• CrowdStrike to Buy Reposify, Invests in Salt Security

• Vulnerability Management Fatigue Fueled by Non-Exploitable Bugs

• Cast AI Introduces Cloud Security Insights for Kubernetes

• ChromeLoader Malware Evolves into Prevalent, More Dangerous Cyber Threat

• Malicious npm Package Poses as Tailwind Tool

• Telegram Has a Serious Doxing Problem

• Russian Sandworm APT impersonates Ukrainian telcos to deliver malware

• Grand Theft Auto 6 Maker Confirms Source Code, Vids Stolen In Cyber-Heist

• Not a Panacea: Trump Disqualification and Plea Bargains

• The Fifth Circuit’s Social Media Decision: A Dangerous Example of First Amendment Absolutism

• Malwarebytes Glitch Causes Block To Google & YouTube For Users

• Optus Data Breach Announced, Experts Weigh In

• Biggest Online Casino Software Brands Overview

• Crypto biz Wintermute loses $160m in cyber-heist, tells us not to stress out

• TeamTNT is Back & Targets Servers to Run Bitcoin Encryption Solvers

• Hacker Leaks Confidential Data of Rockstar Games Including GTA 6 Footage

• A New Decryptor by Bitdefender for Victims of LockerGoga Ransomware

• 15-year-old Python vulnerability poses supply chain threat

• Netflix-style Ransomware Makes Your Organisation’s Data The Prize In A Dark Subscription Economy

• “Oops, I insecurely coded again!”

• San Francisco’s Board of Supervisors Grants Police More Surveillance Powers

• 3 Cybersecurity Solutions Likely to Gain Traction In 2022 And Beyond

• SentinelOne LABScon Security Research Conference Unifies Private and Public Sector Through Groundbreaking Cybersecurity Discoveries

• Ubuntu 5630-1: Linux kernel (Raspberry Pi) vulnerabilities

• State of the Tech Job Market Amid Labor Shortages, Hiring Challenges

• China-US rift will intensify decoupling in tech, financial systems

• Defense in Depth: 4 Essential Layers of ICS Security

• US Government Contractors Targeted in Evolving Phishing Campaign

• Survey Shows CISOs Losing Confidence in Ability to Stop Ransomware Attacks

• Uber Blames LAPSUS$ Hacking Group for Recent Security Breach

• Analyzing IP Addresses to Prevent Fraud for Enterprises

• Shareholders File Suit Against Twitter Following Former CISO’s Warnings

• ChromeLoader Can Overload Systems With Malware

• Uber Is Hiring For Over 80 Cybersecurity Jobs After Being Hacked Last Week

• American Airlines Announce Data Breach Exposing Customer and Staff Information

• CrowdStrike ups the ante with investment in API security leader, Salt Security

• Indonesia Passes Personal Data Protection Law

• Intermittent Encryption Analysis

• 16-31 August 2022 Cyber Attacks Timeline

• Bjorka Hunt: Indonesian Parliament Passes Personal Data Protection Bill

• Microsoft Alert a Major Click Fraud Scheme Targeting Gamers

• New vulnerabilities in Dataprobe are Invading The Devices Remotely

• One city’s proposed e-scooter ultimatum: No sidewalks or no scooting

• Cyber mandates for water infrastructure are too costly to implement, experts say

• Chainguard releases Wolfi, a Linux ‘undistribution’

• How Organizational Structure, Personalities and Politics Can Get in the Way of Security

• S3 Ep101: Uber and LastPass breaches – is 2FA all it’s cracked up to be? [Audio + Text]

• Optus Hit By Cyber-Attack, Breach Affects Nearly 10 Million Customers

• Allurity Acquires Spanish Multinational Aiuken Cybersecurity

• The Ungodly Surveillance of Anti-Porn ‘Shameware’ Apps

• Malicious NPM Package Caught Mimicking Material Tailwind CSS Package

• Researchers Uncover Years-Long Mobile Spyware Campaign Targeting Uyghurs

• The Chatter Podcast: Josephine Baker, Singer and Spy, with Damien Lewis

• Credential Stuffing Accounts For One-third Of Global Login Attempts, Okta Finds

• Organisations Need To Adopt Predictive And Proactive Threat Detection Software To Counter Cyber-attacks

• Twitter Failed To Log Users Out Of All Their Devices After They Reset Password

• Quantum Readiness- Key Concern For Top Dogs In Cybersecurity

• Bipartisan Senate bill aims to safeguard open source software

• FDA Issues Cybersecurity Alert on Medtronic Insulin Pumps

• Extended DDoS Attack With 25.3B+ Requests Thwarted

• WhatsApp Message Fraud Dupes Automobile Firm of Rs.1 Crore

• ManageEngine Study Finds Democratization of IT in North America Increased Dramatically Post-COVID

• GrammaTech CodeSentry 4.0 Enables Developers to Identify Security Vulnerabilities Hidden in Third Party Code

• Google ‘Pressured In India’ Over Illegal Lending Apps

• Uber Says Lapsus$ Extortion Gang Behind Hack

• Viral Social Media App BeReal Considers Revenue Plans

• Chinese Media Allege NSA Tapped Into Telecom Network

• American Airlines Hacked – Email Accounts Compromised to Gain Personal Data Access

• SUSE: 2022:3334-1 important: cdi-apiserver-container, cdi-cloner-container, cdi-controller

• The clock is ticking on zero trust

• New York Emergency Services Provider Says Patient Data Stolen in Ransomware Attack

• How DKIM records reduce email spoofing, phishing and spam

• CrowdStrike Investment Spotlights API Security

• Russian Sandworm Hackers Impersonate Ukrainian Telecoms to Distribute Malware

• The 4 Lenses of Resilience and What They Mean for Security

• Uber believes that the LAPSUS$ gang is behind the recent attack

• Uber Says It Was Likely Hacked By Teenage Hacker Gang LAPSUS$

• Fake Sites Fool Zoom Users Into Downloading Deadly Code

• Is Uber’s ‘Security Incident’ Just A Smoke Screen? Experts Weigh In

• Revolut Hack Exposes Data Of 50,000 Users, Fuels New Phishing Wave

• Lapsus$ Hacking Group Allegedly Behind the Uber Security Breach

• Heimdal® Named Expert Insights Fall 2022 “Best-Of” Winner in Four Categories

• Buying Property in Washington State? Market Outlook

• Malicious OAuth applications used to compromise email servers and spread spam

• SecurityScorecard Appoints Former U.S. National Intelligence Deputy Director and Cybersecurity Expert Susan M. Gordon to Board of Directors

• (ISC)² and Venafi Explore The Strange New World of Machine Identity Management

• Netskope Chooses YugabyteDB to Help Scale SASE Capabilities to Millions of Users

• Credential theft food chain—What is Ransomware-as-a-Service

• How Uber was hacked — again

• Does Follina Mean It’s Time to Abandon Microsoft Office?

• 3 wins and 3 losses for cloud computing

• The software supply chain: New threats call for new security measures

• Detroit sues the U.S. Census Bureau over alleged undercounts

• Learn the cybersecurity skills you need for employment

• Cloud security market forecast to surpass $123 billion by 2032

• Morgan Stanley Fined $35m By SEC For Data Security Lapse

• Control System Defense: Know the Opponent

• CISA Releases Three Industrial Control Systems Advisories

• ISC Releases Security Advisories for Multiple Versions of BIND 9

• CISA and NSA Publish Joint Cybersecurity Advisory on Control System Defense

• Pro-Ukraine Hacktivists Claim To Have Hacked Notorious Russian Mercenary Group

• San Francisco Cops Can Now Use Private Cameras To Monitor Events

• AV Used By Millions Blocked All Google Sites By Mistake, Sowing Chaos

• Hack On Optus Exposes Personal Data

• Revealed: US Military Bought Mass Monitoring Tool That Includes Internet Browsing, Email Data

• Cambodian authorities crack down on cyber slavery amid international pressure

• 2K Games’ Support System Hacked via Notorious Malware

• Hackers Deleted Hotel Chain Data ‘For Fun’

• ByteDance Plans Share Buy-Back As IPO Stalls

• China’s Xpeng Rolls Out Urban Self-Driving Software

• Amazon, Microsoft, Google Face UK Cloud Services Probe

• Tesla Recalls 1.1 Million Vehicles Over Window Closing Issue

• How to Spot Your Biggest Security Threat? Just Look out for the Humans

• Ubuntu 5627-1: PCRE vulnerabilities

• SUSE: 2022:3252-2 moderate: freetype2

• Alert: 15-year-old Python tarfile Flaw Lurks in ‘Over 350,000’ Code Projects

• LLVM 15.0.1 Released With Nearly Three Dozen Fixes

• Business VPNs: Now More Important Than Ever

• Steer Clear of the “Pay Yourself Scam” That’s Targeting Online Bank Accounts

• Is Free Wi-Fi Really Safe? | Avast

• GSA opens Polaris to next set of small-business bidders

• How to create a Bitwarden Vault entry that can be used for AutoFill

• Australian Telecoms Firm Optus Discloses Breach Impacting Customer Data

• Malwarebytes Raises $100 Million From Vector Capital

• Twitter Logs Out Some Users Due to Security Issue Related to Password Resets

• StackHawk Launches Deeper API Security Test Coverage to Improve the Security of APIs

• Twitter’s Whistleblower Allegations Are a Cautionary Tale for All Businesses

• A New Linux Tool Aims to Guard Against Supply Chain Attacks

• Control System Defense: Know the Opponent

• CISA Releases Three Industrial Control Systems Advisories

• ISC Releases Security Advisories for Multiple Versions of BIND 9

• CISA and NSA Publish Joint Cybersecurity Advisory on Control System Defense

• Role-based access control for Red Hat Hybrid Cloud Console

• BlackCat’s Ransomware Tool Gets an Upgrade

• Behavioral Analytics a Top Priority for SOC, New Gurucul Survey Finds

• 350,000 open source projects at risk from Python vulnerability

• CISA, FBI Detail Iranian Cyberattacks Targeting Albanian Government

• Russia-Based Hackers FIN11 Impersonate Zoom to Conduct Phishing Campaigns

• Lawsuit: SMUD and Sacramento Police Violate State Law and Utility Customers’ Privacy by Sharing Data Without a Warrant

• The new DOJ Law Enforcement Crypto Reports (TL;DR)

• Cybersecurity Awareness Month 2022: 3 Actionable Tips

• StorPool Touts Software-defined Block Storage For Distributed Data

• How Does WebAuthn Work?

• Lawmakers seek action on pressing spectrum issues

• Versa Networks Receives Scores Big in 2022 Gartner® SD-WAN Report

• Palo Alto Networks 5G-Native Security Now Available on Microsoft Azure Private Multi-Access Edge Compute

• Connecting to the RHEL web console, part 1: SSH access methods

• Two Americas: Cross-Border Data Requests Post-Dobbs

• Wolfi: A Linux undistro with security measures for the software supply chain

• Fake sites fool Zoom users into downloading deadly code

• Fake Banking Rewards Apps Install Info-stealing RAT on Android Phones

• Netgear Router Models With FunJSQ Let Attackers Execute Arbitrary Code

• RedHat: RHSA-2022-6681:01 Important: OpenShift Virtualization 4.9.6 Images

• Software supply chain security gets its first Linux distro, Wolfi

• Oracle Cloud Infrastructure Vulnerability Exposed Sensitive Data

• Facebook Experimenting With Letting Users Help Write Content Moderation Policies

• IT Security Takeaways from the Wiseasy Hack

• A 15-Year-Old Unpatched Python bug potentially impacts over 350,000 projects

• Six Ways to Have Your eCommerce Site Ready for High-Traffic eShopping Days

• Chinese state media claims U.S. NSA infiltrated country’s telecommunications networks

• SUSE: 2022:3333-1 important: kubevirt, virt-api-container, virt-controller-container, virt

• Feds prep $500M program for transportation tech

• YOUR CYBERSECURITY EXPERIENCE IS NEEDED FOR CREATING NEW U.S. FTC REGULATIONS

• This Windows 11 security feature makes your PC ‘very unattractive’ to password hackers

• How To Effectively Scale Your Web Scraping Efforts?

• Hackers Launched Record DDoS Attack with 25.3 Billion Requests in 4 Hours

• CPR analyzes A 7-year mobile surveillance campaign targeting largest minority in China

• Programming languages: It’s time to stop using C and C++ for new projects, says Microsoft Azure CTO

• Atlassian Confluence bug CVE-2022-26134 exploited in cryptocurrency mining campaign

• Content Moderation Tools to Stop Extremism

• Synopsys Finds Significant Increase in Practices to Bolster Software Supply Chain Security

• 15-Year-Old Python Vulnerability Present in 350,000 Projects Resurrected

• Researchers Disclose Critical Vulnerability in Oracle Cloud Infrastructure

• Phishing Campaign Abuses LinkedIn Smart Link

• The Risk of Ransomware Supply Chain Attacks

• Tape Archiving Still Needed, Says PoINT Software

• SUSE: 2022:2322-1 bci/dotnet-sdk Security Update

• SUSE: 2022:2328-1 bci/golang Security Update

• SUSE: 2022:2329-1 bci/rust Security Update

• Silicon In Focus Podcast: TECIS Europe Event Preview

• Synthetic DNA: Solution For Mass Data Storage Problem?

• Nodeum Touts Hybrid Data Warehousing Approach

• Twitter Password Reset Bug Exposed User Accounts

• 15-Year-Old Unpatched Python Vulnerability Potentially Affects Over 350,000 Projects

• Python tarfile vulnerability affects 350,000 open-source projects (CVE-2007-4559)

• Unscrambling Cybersecurity Acronyms: The ABCs of EDR and MEDR Security

• LockBit Ransomware Builder Leaks Online

• August 2022 Cyber Attacks Statistics

• Iranian Hackers Hid in Albanian Networks for Over a Year

• Authorized Push Payments Surge to 75% of Banking Fraud

• Apple’s New iPhone 14 and Apple Watch Series 8 – Intego Mac Podcast Episode 258

• Optus security breach compromises customers’ passport details

• What Is DNSSEC?

• How to Create the Best Resume to Apply for Job Interviews in 2022?

• Do you know what your supply chain is and if it is secure?

• Hackers Targeting Unpatched Atlassian Confluence Servers to Deploy Crypto Miners

• What you need to know about Evil-Colon attacks

• Presto, One of the Largest Labor Automation Technology Providers for the Hospitality Industry, to Become Publicly Traded Following Business Combination with Ventoux CCM Acquisition Corp.

• Guide to the best data privacy certifications for 2022

• Netflix customers suffer from Phishing Attacks

• USA blacklists two more Chinese Telecom firms for data security concerns

• How to Prevent Ransomware as a Service (RaaS) Attacks

• DISA plans further updates to DEOS support notice

• A disgruntled developer is the alleged source of the leak of the Lockbit 3.0 builder

• What could be the cause of growing API security incidents?

• Email-based threats: A pain point for organizations

• Federal cyber mandates for water infrastructure are too costly to implement, experts tell Hill panel

• ERI Opens 12th Office Location in Columbus, Ohio

• Industry Veteran Eric Dougherty Joins Kasada as Chief Revenue Officer to Drive Hypergrowth of Anti-bot Solution

• How to unite security and compliance in 5 simple ways

• Cloudflare integrates CASB and DLP services into its zero trust platform

• Commvault Metallic ThreatWise proactively detects unknown and zero-day threats

• SMBs vs. large enterprises: Not all compromises are created equal

• The best ways to safeguard crypto assets

• Trellix Launches Advanced Research Center, Finds Estimated 350K Open-Source Projects at Risk to Supply Chain Vulnerability

• (ISC)² CEO Clar Rosso Honored by SC Media’s Women in IT Security Program

• High Severity IDOR Bugs inCNCF ‘Harbor’ Project by VMware

• SecTor 2022: The IoT Hack Lab is Back!

• NATO’s Team in Albania to Help on Iran-Alleged Cyberattack

• NuID Ecosystem powered by Kii token enables users to control their digital identity

• NetWitness’ new MDR service helps customers address the ongoing cyber skills shortage

• Onfido Motion protects against display attacks and sophisticated 2D/3D masks

• The U.S. and its allies are joining forces on chips. That could stop China reaching the next level

• Fedora 35: mingw-poppler 2022-51b27699ce

• Scammers send fake ‘Energy Bills Support Scheme’ texts

• HoneyPoC is Dead – Long Live Disinformation

• Fedora 36: mingw-poppler 2022-f7b375eae8

• Cybersecurity is Front and Center in Coast Guard Reauthorization Bill

• European Spyware Investigators Criticize Israel and Poland

• Unpatched Python Library Affects More Than 300,000 Open Source Projects

• Black Box and Juniper Networks partner to deliver digital workplace connectivity

• Lookout extends collaboration with Verizon to bring data-centric cloud security to businesses

• Alert: 15-year-old Python tarfile flaw lurks in ‘over 350,000’ code projects

• Microsoft Releases Out-of-Band Security Update for Microsoft Endpoint Configuration Manager

• CompoSecure appoints Paul Galant to Board of Directors

• Napier names Greg Watson as CEO

• Theresa Payton joins Conceal Board of Advisors

• Tax refund phish logs keystrokes to swipe personal details

• 5 things to teach your kids about social media

• Vulnerable children’s identities used in tax fraud scheme

• Microsoft Releases Out-of-Band Security Update for Microsoft Endpoint Configuration Manager

• San Francisco cops can use private cameras to live-monitor ‘significant events’

• Deep Instinct appoints Lane Bess as CEO

• Vector Capital invests $100 million in Malwarebytes to improve cyberprotection for organizations

• ActionIQ and Snowflake join forces to build composable customer data stacks

• Is This The Crypto Winter or a Huge Discount?

• Cybercriminals launching more MFA bypass attacks

• AttachMe – Oracle Patches “Severe” Vulnerability in its Cloud Infrastructure

• Mageia 2022-0340: google-gson security update

• Mageia 2022-0341: libxslt security update

• Mageia 2022-0342: open-vm-tools security update

• SUSE: 2022:3331-1 important: libconfuse0

• 2022-09-21 – IcedID (Bokbot) with Cobalt Strike

• DOT, SBA and others team up to attract new entrants to the federal market

• Dashboard showcases local-level census data

• Investigators tap data, tech, tipsters to root out fraudsters

• SEC fines Morgan Stanley Smith Barney $35 million over failure to secure customer data

• Quantify Risk, Calculate ROI

• Wintermute DeFi Platform Offers Hacker a Cut in $160M Crypto-Heist

• MSSP Focus: Three ways your SIEM (even NG-SIEM) is hurting your ability to grow

• Scammers Target Microsoft Edge Users Via News Feed

• Hackers Use Microsoft Edge’s News Feed to Redirect Websites Pushing Tech Support Scams

• How To Optimize and Modernize Threat Exposure Management

• Mageia 2022-0343: sofia-sip security update

• Mageia 2022-0344: firefox security update

• Thinking Like a Hacker: Abusing Stolen Private Keys

• White House roadmap will guide efforts to regulate crypto, digital assets

• Senators float plan to authorize local-level federal executive boards

• Hackers Paralyze 911 Operations in Suffolk County, NY

• Iranian State Actors Conduct Cyber Operations Against the Government of Albania

• Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

• Trump Special Master Review: Enter Dearie

• How DeFiChain gives DeFi a major boost with innovative decentralized assets

• Focus on digital equity in broadband push, official urges

• Pay-per-install services provide access to thousands of compromised computers

• Security Data Lakes Emerge to Address SIEM Limitations

• Threat Actor Abuses LinkedIn’s Smart Links Feature to Harvest Credit Cards

• Iranian State Actors Conduct Cyber Operations Against the Government of Albania

• Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

• Enter the 2023 Cybersecurity Excellence Awards

• Crypto Market Maker Wintermute Hacked, $160 Million Stolen

• SUSE: 2022:3326-1 important: go1.19

• Debian: DSA-5234-1: fish security update

• RedHat: RHSA-2022-6531:01 Important: OpenShift Container Platform 4.10.33

• Ransomware Groups Turn to Intermittent Encryption to Speed Attack Times

• Data Scientists Dial Back Use of Open Source Code Due to Security Worries

• Applications for Lawfare Fall 2022 Internship Open

• Indonesia accuses Google of abusing monopoly

• LastPass Hacked, Customer Data and Vaults Secure

• How to Secure Your APIs

• Decreasing ad revenue, iOS 14.5 make case for programmatic SEO

• Sophisticated Hermit Mobile Spyware Heralds Wave of Government Surveillance

• Finding Out What Russians Think—Without Asking Them

• How “Long-Sightedness” Can Improve Security and Fraud Programs

• Microsoft Upgrades Windows 11 With New Security Features

• Iranian State Actors Conduct Cyber Operations Against the Government of Albania

• Iranian State Actors Conduct Cyber Operations Against the Government of Albania

• Azure Payment HSM achieves PCI PIN certification offering customers secure digital payments solutions in the cloud

• Rewards plus: Fake mobile banking rewards apps lure users to install info-stealing RAT on Android devices

• Phishing attacks on Revolut and American Airlines leads to data breached

• VC3 Completes Acquisition of Accent Computer Solutions, California-based Managed Information Technology Services Provider

• Crystal Group maximizes physical and data protections for military applications with new NVMe M.2 drive

• Conceal to Host Premiere of Ransom, Episode 2 in Raleigh, NC

• California legalizes human composting

• Morgan Stanley to Pay $35M Fine for Exposing Information of Millions of Customers

• Don’t Wait for a Mobile WannaCry

• Iranian State Actors Conduct Cyber Operations Against the Government of Albania

• Iranian State Actors Conduct Cyber Operations Against the Government of Albania

• Russia- Linked Sandworm Enacted Ukrainian Telecoms for Injecting Malicious Code

• How IBM Secured the 2022 US Open

• Android System WebView

• ChromeLoader: Microsoft, VMware Warns of the New Malware Campaigns

• NetWitness Names Tod Ewasko as Chief Product Officer

• Secure Cyber Defense Named to MSSP Alert’s Top 250 MSSPs List for 2022

• Penetration testing is in the eye of the beholder

• Ubuntu 5623-1: Linux kernel (HWE) vulnerabilities

• Google Debugs, JFrog Jumps Code, Confidential Kubernetes, Meta-PyTorch

• Math could help crack forensic genetic cases 10x faster

• SIM Swapper Abducted, Beaten, Held for $200k Ransom

• 15-Year-Old Python Flaw Slithers into Software Worldwide

• Cyber Insurers Clamp Down on Clients’ Self-Attestation of Security Controls

• The art and science behind Microsoft threat hunting: Part 2

• Email Phishing Attack Revealed by American Airlines

• Shikitega – New stealthy malware targeting Linux

• Multiple Vulnerabilities Discovered in Dataprobe’s iBoot-PDUs

• NCSC: British Retailers Need to Move Beyond Passwords

• 350K Open-Source Projects At Risk of Supply Chain Vulnerability

• Over 39K unauthenticated Redis services on the internet targeted in cryptocurrency campaign

• SIEM vs Log Management – Definitions, Features, Capabilities, and Deployment

• Malwarebytes blocks Google, YouTube as malware

• 6 Necessary Features of SIEM Alternatives

• Atlassian Confluence Vulnerability CVE-2022-26134 Abused For Cryptocurrency Mining, Other Malware

• Elon Musk, Tesla Set To Reveal ‘Optimus’ Robot Prototype

• Ubuntu 5626-1: Bind vulnerabilities

• Debian: DSA-5232-1: tinygltf security update

• Linus Torvalds: Rust will go into Linux 6.1

• Linux Log Analysis

• Elasticsearch TLS Activation: X-Pack Security

• Report: Login fatigue compromises employee productivity, security and well-being

• Vulnerability Summary for the Week of September 12, 2022

• Is $15.6 billion enough to protect critical infrastructure?

• Thousands of Users Impacted in Revolut Data Breach

• Hundreds of eCommerce Domains Infected With Google Tag Manager-Based Skimmers

• Cobalt Strike gets emergency patch

• Interested in cybersecurity? Join us for Security SOS Week 2022!

• Over 39,000 Unauthenticated Redis Instances Found Exposed on the Internet

• Hackers stole $160 Million from Crypto market maker Wintermute

• Finally, a Better U.S. War Crimes Bill. Now What?

• Rockstar GTA Leak – Dark Web Research

• Rockstar Confirm Data Leak, GTA Footage Stolen

• Phishing Scams Are Targeting Netflix Users

• Bosnia And Herzegovina Cyberattack

• Experts Insight: Revolut And Amercian Airlines Suffer Data Breach

• 3 free Linux security training courses you can take right now

• ‘I Don’t Care About Cookies’ extension sold to Avast

• Vulnerabilities in the iBoot Power Distribution Unit Let Hackers Remotely Shut Down Devices

• ServiceNow evolves from ITSM, aims to simplify business processes

• Hackers Steal $160 Million From Crypto Market Maker Wintermute

• Ransomware: The Latest Chapter

• U.S. gov adds more Chinese Telecom firms to the Covered List

• Crypto Biz Wintermute Loses $160 Million In Cyber Heist

• US Considers Two More Chinese Carriers Security Threats

• $35 Million Fine For Morgan Stanley After Unencrypted, Unwiped Harddrives Are Auctioned

• BBC Warns Of Cost-of-living Phishing, Expert Weighs In

• Security Risks in Logistics APIs Used by E-Commerce Platforms

• LastPass Says No User Data Compromised in Cyberattack

• Ubuntu 5625-1: Mako vulnerability

• Third-party risk: What it is and how CISOs can address it

• 5 Steps to Strengthening Cyber Resilience

• TPx Introduces Penetration Scanning, Expands Security Advisory Services

• Why Zero Trust Should be the Foundation of Your Cybersecurity Ecosystem

• Crypto Trading Firm Wintermute Loses $160 Million in Hacking Incident

• Cyber Firms Explain Their Ongoing Hacker Group Name Game

• Thousands Of Customers Affected In Revolut Data Breach

• US to award $1B to state, local, and territorial governments to improve cyber resilience

• Fake Zoom Sites Deploying Vidar Malware

• Defense-in-Depth Updates for Azure Identity libraries and Azure Key Vault libraries within Azure SDK plus Best Practice Implementation Guidance

• Data Security Training Needs an Update

Generated on 2022-09-25 23:59:51.093444

Liked it? Take a second to support IT Security News on Patreon!