IT Security News Weekly Summary – Week 42

• IT Security News Daily Summary 2021-10-24

• TodayZoo phishing kit borrows the code from other kits

• 5 Security Concerns for Developers In Workload Protection

• Insights Into Proactive Threat Hunting

• Apple Says Notch is a ‘Smart Way’ to Give Users More Space for Content on New MacBook Pros

• Google’s future in enterprise hinges on strategic cybersecurity

• Critical RCE Vulnerability in Discourse 

• Critical RCE Vulnerability in Discourse 

• Two European Men Sentenced for Providing ‘Bulletproof Hosting’ to Hackers

• What Kind of Safe Haven Is Afghanistan?

• Security Affairs newsletter Round 337

• These are the 10 best bargains on VPN subscriptions

• NATO releases its first strategy for Artificial Intelligence

• 11 Security Settings You Should Know About in Windows 11

• Threat actors offer for sale data for 50 millions of Moscow drivers

• Week in review: MITRE ATT&CK v10 released, BEC scammers’ latest tricks, WFH security tactics

• Penetration testing

• How to better secure user authentication protocols

• Active Directory Penetration Testing Checklist

• Wipro collaborates with National Grid to implement next generation hybrid cloud architecture

• Weekly Update 266

• New Images Offer Even Closer Look at New 14-Inch MacBook Pro

• Prodly raises $10M to expand its next-generation DevOps solutions for low-code apps

• IT Security News Daily Summary 2021-10-23

• Protecting SMBs from Current Cybersecurity Threats

• Forensic Collections From a Mac: Challenges & Solutions

• Cisco SD-WAN flaw could lead to arbitrary code execution, patch it now!

• CISA warns of trojanized versions of JavaScript library’s NPM package

• Here’s When You Can Download macOS Monterey

• New MacBook Pros Now Starting to Ship to Customers Ahead of Tuesday Release

• 8-Core 14-Inch MacBook Pro Around 20% Slower Than 10-Core Models in Multi-Core Benchmark

• ‘Critical Severity’ Warning for Malware Embedded in Popular JavaScript Library

• Introducing AT&T Managed Extended Detection and Response (XDR)

• Microsoft Warns of TodayZoo Phishing Kit Used in Extensive Credential Stealing Attacks

• BazarLoader Windows Malware Let Hackers Allow Backdoor Access & Network Reconnaissance

• Supply-chain attack on NPM Package UAParser, which has millions of daily downloads

• Top Stories: Apple Event Recap – New MacBook Pro, AirPods 3, and More

• Ransomware Rise Pushes Organizations to Prepare for Attack

• International Operation Knocks Notorious REvil Group Offline

• New Video Provides Extensive Hands-on Look at New 16-inch MacBook Pro

• macOS Monterey: Here Are All the Features Your Intel Mac Won’t Support

• Feds Reportedly Hacked REvil Ransomware Group and Forced it Offline

• Build or Buy your own antivirus product

• Today Marks the 20th Anniversary of Steve Jobs Introducing the iPod

• Popular NPM Package Hijacked to Publish Crypto-mining Malware

• #ISC2Congress – Diversity: The Key to Cybersecurity’s Future

• Why access management needs to evolve beyond passwords

• Gurman: Apple Event in November Unlikely, New MacBook Air With Biggest Redesign Since 2010 to Launch Next Year

• New Cybersecurity World Record Set

• Nebraska Issues First Federal Cyber-stalking Sentence

• Malware Discovered in Popular NPM Package, ua-parser-js

• Malware Discovered in Popular NPM Package, ua-parser-js

• Deals: New AirPods Pro With MagSafe Case Already Down to $219.99 ($29 Off)

• What’s lurking in the shadows? How to manage the security risks of shadow IT

• Week in security with Tony Anscombe

• Toshiba develops chip-based QKD system to address the demand for cryptography

• Report: Privileged access management still absent in 80% of organizations

• CISA awards $2 million to cybersecurity programs for rural, diverse communities

• Zero Trust and the Federal Government: Feedback for Progress

• AirHop partners with Juniper Networks to accelerate 4G and 5G network deployments

• Coast Guard looks to take law enforcement database mobile

• Resilience lies with security: Securing remote access for your business

• Hacker group upset the U.S. attacked its servers

• 2021-10-22 – Files for an ISC diary (October 2021 Forensic Contest)

• Facebook SSRF Dashboard allows hunting SSRF vulnerabilities

• UpdateAgent malware variant impersonates legitimate macOS software

• aDolus Raises $2.5M to Secure Critical Infrastructure and Grow Sales and Marketing Team

• IT Security News Daily Summary 2021-10-22

• Apple Updates App Store Guidelines as Part of Agreement With U.S. Developers

• With the New MacBook Pro Finally Out, Are There Any Other Products Coming From Apple in 2021?

• Apple Card 6% Daily Cash Listings for Apple Purchases Were in Error, but Apple is Honoring Them

• Gartner: Citizen developers will soon outnumber professional coders 4 to 1

• aDolus raises $2.5 million to secure critical infrastructure and grow sales and marketing team

• Groove ransomware group calls on other ransomware gangs to hit US public sector

• CoinMarketCap – 3,117,548 breached accounts

• Quantum computing: Expensive, uncertain, nascent — and essential

• Risk & Repeat: Apple bug bounty frustrations boil over

• Apple Updates App Store Review Guidelines as Part of Agreement With U.S. Developers

• This Week in Security News – October 22, 2021

• FIN7 Lures Unwitting Security Pros to Carry Out Ransomware Attacks

• IGs look to expand investigative authority

• REvil Ransomware Gang Hit by Law Enforcement Hack-Back Operation

• ‘TodayZoo’ Phishing Kit Cobbled Together From Other Malware

• John Gilmore Leaves the EFF Board, Becomes Board Member Emeritus

• #ISC2Congress – Diversity: The Key to Cybersecurity’s Future

• The Sussmann Indictment, Human Source Handling, and the FBI’s Declining FISA Numbers

• Google details cookie stealer malware campaign targeting YouTubers

• Civic tech vendor recognizes employee union

• MacRumors Giveaway: Win an iPhone 13 and Set of iPhone Cases From CaseBorne

• First Real-World Photos and Video of New MacBook Pro Models Begin to Surface

• How DevOps lost its way — and how to bring it back

• 7 Factors to Consider When Choosing a Cloud Workload Protection Platform (CWPP)

• Microsoft Introduces Security Program for Non-Profits

• 7 Ways to Lock Down Enterprise Printers

• Photos Depict Alleged AirPods Pro 2 With Same Design, Case With ‘Find My’ Speaker Holes and Strap Attachment

• Better late than never: Microsoft rolls out a public preview of E2EE in Teams calls

• New ‘ASTORS’ Finalist Forcepoint to Acquire SSE Leader Bitglass

• REvil Servers Shoved Offline by Governments – But They’ll Be Back, Researchers Say

• US Intel Warns China Could Dominate Advanced Technologies

• US Secret Service Announces Cyber Games Winner

• Recycled Cobalt Strike key pairs show many crooks are using same cloned installation

• Hands-on domain password policy setup for Active Directory

• What is Telecom LightBasin Cyber Attack

• BrandPost: CIS CSAT Pro v1.7: CIS Controls v8 Assessment and More

• Facebook Agrees To Pay French Newspapers

• How the 2011 DigiNotar Attacks Changed Cybersecurity for the Next Decade

• Private networks speed 5G deployments

• WinRAR vulnerability allowed attackers to remotely hijack systems

• Eswatini Government’s gov.sz website is running a cryptojacker

• Organizations Can Now Try Out End-to-End Encrypted Microsoft Teams Calls

• FOI Request Reveals Scale of Data Breaches at UK Councils

• Gigabyte Allegedly Hit By AvosLocker Ransomware

• Tony Fadell Reflects on Creating the iPod Ahead of Device’s 20th Anniversary

• Deals: Amazon Introduces First Discount on 14-Inch MacBook Pro, Get 8-Core M1 Pro 512GB Model for $1,949.99 ($50 Off)

• Over 250 New Mood and Activity Apple Music Playlists Now Rolling Out

• US Watchdog Questions Tech Giants On Electronic Payments

• 5 ways to keep vaccine ‘cold chain’ safe from hackers

• Hackers somehow got their rootkit a Microsoft-issued digital signature

• Cisco SD-WAN Security Bug Allows Root Code Execution

• Facebook Introduces New Tool for Finding SSRF Vulnerabilities

• REvil ransomware gang allegedly forced offline by law enforcement counterattacks

• Oversight Board Criticizes Facebook For Lack Of Transparency Over Giving Users Special Treatment

• ‘Lone Wolf’ Hacker Group Targeting Afghanistan and India with Commodity RATs

• A Hypothetical Command Vision Statement for a Fictional PLA Cyber Command

• Webhards and Torrents: the New Channels for RAT Malware Propagation in Korea

• Pentesters Wanted for Ransomware Attacks!

• Ransomware: Why do backups fail when you need them most?

• After Nation-State Hackers, Cybercriminals Also Add Sliver Pentest Tool to Arsenal

• DarkSide ransomware operators move 6.8M worth of Bitcoin after REvil shutdown

• Apple Car Battery Talks Stall in Another Blow to Electric Vehicle Project

• What Is Conti Ransomware?

• We dig into the Game Players Code

• Organized Cybercrime: The Big Business Behind Hacks and Attacks

• What Squid Game Teaches Us About Cybersecurity

• This Week in Security News – October 21, 2021

• Cybersecurity Training: Why You Should Train Employees on Social Media Discretion

• Hackers Set Up Fake Company to Get IT Experts to Launch Ransomware Attacks

• Apple Says High Power Mode on 16-Inch MacBook Pro With M1 Max Designed for Tasks Like Color Grading 8K ProRes Video

• Deals: Woot’s New Flash Sale Has Low Prices on Refurbished Previous Generation iPhones

• America must protect these 5 technologies if it wants to remain a superpower, intel officials warn

• Malicious Cracked Games Pose Risks | Avast

• Understanding The Facebook Outage | Avast

• This Frankenstein’s monster of a phishing campaign is after your passwords

• Illinois candy giant hit with ransomware weeks before Halloween

• Researchers Discover Microsoft-Signed FiveSys Rootkit in the Wild

• A bug is about to confuse a lot of computers by turning back time 20 years

• 22% of Brits Received Proof of Vaccination Phishing Email in Past Six Months

• Apple To Require Daily Tests For Unvaccinated Staff

• Ex-carrier employee sentenced for role in SIM-swapping scheme

• Threat Actors Abuse Discord to Push Malware

• What to do if your small business is a victim of a cyberattack

• YouTube Used to Push Password-Stealing Malware

• What Is Extended Detection and Response (XDR)? Features, Benefits, and Beyond

• Macaw Locker, Evil Corp’s Latest Version Makes New Victims

• Cyber Security and need of a progressive security solution

• South African police arrest eight men suspected of targeting widows in romance scams

• Critical Vulnerabilities Found in AUVESY Product Used by Major Industrial Firms

• Snap’s Stock Drops as iPhone Privacy Controls Pinch Ad Sales

• FIN7 cybercrime gang creates fake cybersecurity firm to recruit pentesters for ransomware attacks

• Nation-State Attacker of Telecommunications Networks

• iPhone SE 3 Rumored to Feature iPhone XR Design With Touch ID and Be Apple’s Last LCD Smartphone

• Top Tips for IoT Device Security: Designing Secure IoT Devices

• New Sex Toy Standards Let Some Sensitive Details Slide

• Network Computing Awards 2021: Heimdal™ Wins Best Cloud-Delivered Security Solution

• Unhappy customers and their own tricks used against them, REvil ransomware gang reportedly pulled offline by ‘multi-country’ operations

• Lyceum Hackers Stealing Credentials Windows By Deploy Keylogger Using PowerShell Scripts & .NET RAT

• Ransomware: Looking for weaknesses in your own network is key to stopping attacks

• Microsoft Teams: Now your video calls support end-to-end encryption

• Train to qualify for elite positions in the high-demand field of cybersecurity

• How IT pros can set boundaries and protocols

• 2022 MacBook Air Again Rumored to Feature Mini-LED Display

• Released: MITRE ATT&CK v10

• Security Recruiter Directory

• Cookie Theft Malware Used to Hijack YouTube Accounts

• Over 80% of Brits Deluged with Scam Calls and Texts

• Halloween Horror-Show for Candy-Maker Hit by Ransomware

• Edward Snowden warns weakening encryption would have dire consequences: ‘Privacy is power’

• Offline NHS Vaccine Passport Strands Travelers | Avast

• Government Agents Compromise REvil Backups to Force Group Offline

• All You Need to Know About DNS Spoofing to Keep Your Organization Safe

• FiveSys, a new digitally-signed rootkit spotted by Bitdefender experts

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• US CISA offers $2M award for Cybersecurity training

• Donald Trump’s social media network TRUTH hacked within hours of BETA launch

• How your phone, laptop, or watch can be tracked by their Bluetooth transmissions

• New infosec products of the week: October 22, 2021

• YouTubers fell for shady ‘sponsors’ who seized, then sold, accounts

• CDR: The secret cybersecurity ingredient used by defense and intelligence agencies

• Embracing secure hybrid work with four foundational IT controls

• Security changes needed to protect corporate networks from non-business IoT devices

• Eight Strategies to Help Organizations Implement Privacy by Design and Default

• Anomali Announces Detect LIVE 2021, The Premier Event for Global Intelligence, Detection, and Response

• #ISC2CONGRESS – Adam Steltzner Keynote: Perseverance and Ingenuity Will Get Us through the Pandemic

• #ISC2CONGRESS – Panel: DEI Initiatives Come Down To Choosing Talent

• Securing the edge with Zero Trust

• Google reports new highs for governments requesting content to be removed

• My Health Record imaging services security failed ADHA password standards

• Fraud detection and prevention market size to reach $62.7 billion by 2028

• Tech support scams becoming the top phishing threat to consumers

• Business composability: Mastering the risk of accelerating change and creating new business value

• Graylog Security provides security teams with ML-based anomaly detection solutions

• Spectra Logic expands its product portfolio to unify and secure data across multiple clouds

• Phishing Tackle releases Smishing-as-a-Service to reduce the risk of text message phishing

• Hillstone Networks iSource helps customers maintain their security posture

• Cybersecurity careers: What to know and how to get started

• ServiceNow Messaging Service enables two‑way conversations between businesses and customers

• The FP Paradox on the battlefield against COVID-19 and cyber threats

• Platform9 announces features to eliminate operational complexities in multi-cluster deployments

• AWS Panorama Appliance allows customers to analyze video feeds in edge environments

• Renesas develops wireless microcontrollers to support Bluetooth 5.3 LE specification

• CDC advisory panel unanimously approves expanded COVID vaccine boosters

• How hackers hijacked thousands of high-profile YouTube accounts

• The ‘Broadband Gap’ Is Now a Housing Problem

• Facebook Can’t Hide Its Problems Behind a New Name

• The new MacBook Pro seems to have an HDMI 2.0 port, not 2.1

• Report: Breaches of more than one target amplify financial damage by 26 times

• Multi-Party Cyberattacks Lead to Big Losses: Security Researchers

• Lenovo collaborates with VMware to launch edge-to-cloud and AI solutions for enterprise customers

• Arqit partners with Blue Bear to solve security challenges of autonomous systems

• Multiple governments involved in coordinated takedown of REvil ransomware group: Reuters

• U.S. Consumer Financial Protection Bureau Investigating Apple and Other Tech Companies

• Ransomware Group That Stole Apple’s MacBook Pro Schematics Taken Offline in Multi-Country Operation

• Ketch partners with SafeGuard Privacy to offer an end-to-end solution for program management

• Gartner advises tech leaders to prepare for action as quantum computing spreads

• Evil Corp rebrands their ransomware, this time is the Macaw Locker

• Guantanamo, the Courts and the Shrinking Scope of U.S. Military Detention Authority

• WekaIO expands its management team with two key executives

• Gartner’s list of top tech initiatives for 2022

• Republican Senate leaders slam new TSA cybersecurity regulations for rail, aviation industry

• DigiPlex hires Tommy Wahledow as Operations Manager

• Police Can’t Demand You Reveal Your Phone Passcode and Then Tell a Jury You Refused

• Google Buckles Down on Android Enterprise Security

• IT Security News Daily Summary 2021-10-21

• US Imprisons Bulletproof Hosting Providers

• Lawmakers seek probe of veterans’ records requests backlog

• Malware Abuses Core Features of Discord

• GPS Daemon (GPSD) Rollover Bug

• Apple Watch Series 7 Teardown Reveals Battery Capacity, Display Updates and More

• Trustwave released a free decryptor for the BlackByte ransomware

• Making Sure the Lights Don’t Go Out

• U.S. Ban on Sales of Cyberattack Tools Is Anemic, Experts Warn

• DOJ Sues Robocaller to Pay Massive Fine

• Akamai Technologies Completes Acquisition of Guardicore to Extend Its Zero Trust Solutions to Help Stop Ransomware

• Cybrary Launches New Partnership with Check Point Software to Make Cybersecurity Training Accessible to All

• GPS Daemon (GPSD) Rollover Bug

• 3 things to add to your 2022 cloud to-do list

• 450 million cyberattacks attempted on Japan Olympics infrastructure: NTT

• Nearly Three-Quarters of Organizations Victimized by DNS Attacks in Past 12 Months

• Invicti Security Announces $625 Million Growth Investment Led by Summit Partners

• Plurilock to Acquire Assets of CloudCodes Software

• A flaw in WinRAR could lead to remote code execution

• New MacBook Pro Tidbits: SD Card Speeds Limited to 250 MB/s, Peak Brightness for SD Content, eGPUs Still Not Supported, and More

• Next MacBook Air to Feature Off-White Bezels and Keyboard, M2 Chip, USB-C Ports Only, MagSafe, and iMac-Like Colors

• Cybersecurity blind spot: AI’s inherent vulnerabilities

• F-gases worth more than € 10 million seized in a week

• CSIRT – law enforcement cooperation workshop

• Why Should My Organization Consider XDR?

• VA seeks full 2022 funding for health record project, despite six-month pause

• Cities worldwide aren’t adapting to climate change quickly enough

• TA551 Shifts Tactics to Install Sliver Red-Teaming Tool

• New 16-Inch MacBook Pro With M1 Max to Feature High Power Mode for Intensive Workloads

• Victory! Oakland’s City Council Unanimously Approves Communications Choice Ordinance

• CISA Awards $2M to Cybersecurity Training Programs

• What’s the Status of the Biden Administration’s Workplace Vaccine Mandate?

• Guantanamo, the Courts, and the Shrinking Scope of U.S. Military Detention Authority

• Sphere Chat App Acquired By Twitter

• Vue.js and Symfony: Roles Authentication

• US rolls out new rules governing export of hacking, cyberdefense tools

• Microsoft Launches Security Program for Nonprofits

• Apple Calls on Developers to Take Advantage of New In-App Events App Store Feature

• New MacBook Pro Models Feature High Power Mode for Intensive Workloads

• Why Is It So Hard to Figure Out What to Do When You Lose Your Account?

• Gigabyte Allegedly Hit by AvosLocker Ransomware

• Before and After a Pen Test: Steps to Get Through It

• Crowd-Sourced Suspicion Apps Are Out of Control

• Google Lowers Play Store Subscription Fee From 30% to 15%

• Apple Seeds Second iPadOS 15.1 Release Candidate for iPad Mini 6

• Apple Seeds Second macOS Monterey Release Candidate to Developers

• How Microsoft is partnering with vendors to provide Zero Trust solutions

• Report: 53% spike in hours spent on cybersecurity training among employees

• New missions could present challenges for the DOD cyber workforce

• #ISC2CONGRESS – Chris Krebs Keynote Address: Fighting Cyber Adversaries Requires New Thinking and Approaches

• (ISC)² Addresses the Cybersecurity Workforce Gap with New Entry-Level Cybersecurity Certification Pilot Program

• What is advanced persistent threat? Explaining APT security

• Boeing Delays Starliner Launch Until 2022

• Data analytics firm exposed 2m Instagram and TikTok users’ data

• Database Security Best Practices: The Essential Guide

• Macs Still Targeted Mostly With Adware, Less With Malware

• Cisco Releases Security Updates for IOS XE SD-WAN Software

• T-Mobile Will Pay Off Your Current Phone Up to $1,000 If You Switch

• Apple Card Customers Are Getting 6% Cashback for Apple Store Purchases

• Apple Shares New ‘Movie Magic’ Shot on iPhone 13 Pro Video

• Defenders wanted—building the new cybersecurity professionals

• Microsoft announces security programs for nonprofits as nation-state attacks increase

• How to digitally sign email in Apple Mail

• #ISC2Congress: How to Mitigate Evolving Insider Threats

• 72% of Organizations Experienced a DNS Attack in the Last Year

• Cisco Releases Security Updates for IOS XE SD-WAN Software

• Administrators of bulletproof hosting sentenced to prison in the US

• US Government warns of BlackMatter ransomware attacks against critical infrastructure

• Consumer Security Firm Aura Raises $200 Million at $2.5 Billion Valuation

• S3 Ep55: Live malware, global encryption, dating scams, and secret emanations [Podcasts]

• Duo Sentenced For Roles In Running Bulletproof Hosting Service

• Hackers Hijacked Thousands Of YouTube Accounts

• Ransomware Sinks Teeth Into Candy Corn Maker Ahead Of Halloween

• New 14-Inch and 16-Inch MacBook Pros Now ‘Preparing to Ship’

• Deals: Take Up to $200 Off Cellular Apple Watch Series 7 Models

• New Global Alliance Calls on European Parliament to Make the Digital Services Act a Model Set of Internet Regulations Protecting Human Rights and Freedom of Expression

• On Global Encryption Day, Let’s Stand Up for Privacy and Security

• Franken-phish: TodayZoo built from other phishing kits

• We regret to inform you there’s an RCE vuln in old version of WinRAR. Yes, the file decompression utility

• Forced Entry: A Security Test for Automatic Garage Doors

• Oversight Board: Facebook ‘Not Forthcoming’ On VIP Cross-check System

• C2 Communication Is Enabled via WebSockets in a Fresh PurpleFox Botnet Version

• Realize Your SASE Vision with Security Service Edge and McAfee Enterprise

• Microsoft bought CloudKnox because hybrid multicloud identity is complicated

• FiveSys Rootkit Abuses Microsoft-Issued Digital Signature

• How Psychology Can Save Your Cybersecurity Awareness Training Program

• Nvidia Announces New High-Performance Membership Tier for GeForce NOW

• SD Card Slot in New MacBook Pros Supports UHS-II With Speeds Up to 312 MB/s

• Russian Threat Actors Tempt YouTubers with Bogus Paid Collaborations to Hijack their Accounts

• Distributed Denial of Service Attacks Against Russia Have Tripled

• The iPod at 20 – How the Portable Music Player Laid the Foundation for Today’s Apple

• What is killware?

• Samsung Barred From Importing Smartphones Into Russia

• How to Report Identity Theft to Social Security

• Non-Traditional Cybersecurity Career Paths: Entering the Industry

• Deep North, which uses AI to track people from camera footage, raises $16.7M

• DOD testing director nominee wants cyber assessments for commercial cloud systems

• FCW Insider: October 21, 2021

• Palo Alto warns of BEC-as-a-service

• Bug in Popular WinRAR Software Could Let Attackers Hack Your Computer

• How To Assess a Potential Phishing Email

• FIN7 Recruits Talent for Push into Ransomware

• Update now! Chrome fixes more security issues

• Decline in ransomware claims could spark change for cyber insurance

• CISA seeks 24-hour cyber incident reporting timeline

• Why is Cybersecurity Failing Against Ransomware?

• Smart Security Camera Startup Rhombus Systems Raises $10 Million

• Product Overview: Cynet SaaS Security Posture Management (SSPM)

• SD Card Slot in New MacBook Pros Has Speeds Up to 312 MB/s

• Gummy Browsers: The New Cyberattack Developed by Researchers

• Chrome targeted by Magnitude exploit kit

• Vodafone To Hire 7,000 In Digital Services Push

• Palo Alto warns of BEC-as-a-service, finds average wire fraud attempted is $567,000 with peak of $6 million

• Proposed HTTPA Protocol Uses TEEs to Secure the Web

• Bloomberg: Apple’s Potentially Biggest Sales Quarter in History Threatened by Device Shortages

• Protecting your APIs from Attacks and Data Breaches

• What Is Different About Cloud Security?

• The Wildest Celebrity Hacks and How They Happened | Avast

• Google disrupts massive phishing and malware campaign

• Ransomware Sinks Teeth into Candy-Corn Maker Ahead of Halloween

• Two Bulletproof Hosting Administrators Sentenced to Prison in U.S.

• 2 Experts: Aussie Govt. Would Control “Critical Infrastructure” During Cyber-attacks

• The United States Government Will Ban the Reselling of Potentially Hacking Tools to Authoritarian Regimes

• Hacker Exploits an Old Microsoft Office Vulnerability to Deliver RATs

• Using Discord infrastructure for malicious intent

• US to Curb Hacking Tool Exports to Russia, China

• Former Execs of Cybersecurity Firm GigaTrust Charged With Financial Fraud

• Problems with Multifactor Authentication

• Top 7 Best Endpoint Detection & Response Products With Sandboxing Solutions – 2021

• Check Point Software makes cybersecurity training accessible to all through partnership with Cybrary – a global leader in cybersecurity professional development

• Malicious NPM Packages Caught Running Cryptominer On Windows, Linux, macOS Devices

• Ex-hospital Employee Wrongfully Exposed 9k Patient Records – Experts Insight

• Experts Comments On Gartner Latest Cybersecurity And Privacy Predictions For 2022 And Beyond

• Cybersecurity Awareness Month: Are You Cyber Smart?

• Donald Trump To Launch ‘TRUTH Social’ Media Platform

• Apple Music Android App Can Now Be Used in Windows 11

• LINE App Admits Limited Mishandling Of User Data – Elaborates On Data Sharing Policies

• Threat Actors Abusing Discord to Spread Malware

• Cost Of Scams On Wellbeing Calculated As £9bn A Year, Expert Weighs In

• 20+ Free Remote Desktop Software Tools You Need to Know

• Apple’s New MacBook Pros, Really for Pros – Intego Mac Podcast Episode 210

• Detecting anomalies with TLS fingerprints could pinpoint supply chain compromises

• US to Ban Export of Hacking Tools to Authoritarian States

• What is self-learning AI and how does it tackle ransomware?

• Research finds consumer-grade IoT devices showing up… on corporate networks

• Sinclair TV Confirms Cyber Attack – Expert Comments

• US judge sentences duo for roles in running bulletproof hosting service

• Russian Cyber-Criminals Switch to Cloud

• Data Scrapers Expose 2.6 Million Instagram and TikTok Users

• Apple Now Issues Mac-iOS Device Syncing Updates Via Software Update

• U.S. Government Bans Sale of Hacking Tools to Authoritarian Regimes

• Do you know what your supply chain is and if it is secure?

• What is self-learning AI and how does It tackle ransomware?

• Hackers Stealing Browser Cookies to Hijack High-Profile YouTube Accounts

• US Bureau of Industry and Security bans export of hacking tools to authoritarian regimes

• Top 5 Attack Vectors to Look Out For in 2022

• Vulnerability leads to data leak in Missouri Education Department

• Ransomware spreading hackers threatening to harass employees and business partners

• Fraud never sleeps: Why biometrics is essential for effective fraud prevention

• Smartphone counterespionage for travelers

• How do I select a GRC solution for my business?

• #ISC2Congress – Critical Infrastructure a Main Focus of Security Congress 2021

• #ISC2CONGRESS – Lisa Forte Keynote: Insider Threats A Bigger Challenge Than Ever

• #ISC2Congress – CEO Welcomes Virtual Attendees and Urges Them to Focus on Strong Team Development

• Stories from the SOC – Data exfiltration

• Introducing the Palo Alto Networks Panorama Advanced AlienApp

• Kim Kardashian Spotted Wearing Upcoming Beats Fit Pro Earbuds

• Many organizations lack basic cyber hygiene despite high confidence in their cyber defenses

• Prosimo claims to offer industry’s first autonomous multicloud networking

• Two Eastern Europeans Sentenced for Providing Bulletproof Hosting to Cyber Criminals

• Increased activity surrounding stolen data on the dark web

• Critical National Infrastructure (CNI) Attacks on the Rise: Are We Ready?

• CIS Control 09: Email and Web Browser Protections

• MacBook Pro’s M1 Max GPU is Over 3x Faster Than M1 in First Metal Benchmark

• Siloed security data hamper the ability to achieve collective defense

• NETSCOUT introduces VaaS managed service offering to protect critical IT services and applications

• OCF launches low power IoT platform to ensure secure end-to-end encryption for IP-based mesh networks

• SentinelOne Remote Script Orchestration enables security teams to remotely automate custom responses

• Brave browser replaces Google with its own search engine

• Entrust Seamless Travel Solution enables a touchless experience for travelers

• Apple Releases New Big Sur and Catalina Safari 15.1 Betas for Developers With Restored Tab Design

• Aruba CX 10000 Series Switch delivers security services for enterprise data centers

• Sierra Wireless offers its customers 5G cellular wireless connectivity for their business-critical apps

• 2021-10-20 – Files for an ISC diary (Stolen Images Evidence –> Sliver)

• AppleCare+ for New 16-Inch MacBook Pro Costs $399

• Viavi Solutions OneAdvisor-800 verifies field deployment of O-RAN radios

• CyberLink integrates FaceMe Facial Recognition into FaceScan’s temperature screening kiosks

• BAE Systems joins Center for Threat-Informed Defense to prevent and detect cyberattacks

• Theta Lake expands compliance and security capabilities for Cisco Webex

• 2021-10-20 – TA551 (Shathak) pushes Sliver-based malware

• UJET partners with Google Cloud to accelerate AI-powered contact center innovation

• Former cybersecurity leader says U.S. government can improve cybersecurity for all

• YouTube creators’ accounts hijacked with cookie-stealing malware

• Legal Ethics, Bar Discipline and John Eastman

• Lawfare Live: A Lawfare Open Forum

• Radiant Logic appoints Justin Sollenne as CFO

• Splunk Government Logging Modernization Program helps federal agencies meet cybersecurity requirements

• Gartner predicts privacy law changes, consolidation of cybersecurity services and ransomware laws for next 4 years

• Washington D.C. Attorney General Adds Mark Zuckerberg To Cambridge Analytica Privacy Suit

• Securonix expands its presence in India to meet the demand for cloud-native SIEM technology

• Pennsylvania bitcoin miner jumps 52% in Nasdaq debut as bitcoin price hits record

• Uncle Sam to clip wings of Pegasus-like spyware – sorry, ‘intrusion software’ – with proposed export controls

• Critical Vulnerability Cripples Visual Tools DVR Allowing RCE Attacks

• 1Password Launches Psst! Tool For Secure Password Sharing

• Sharpening the focus for smartphone-based evidence

• Optiv Announces Second Annual $40,000 Scholarship for Black, African American Identifying STEM Students

• IT Security News Daily Summary 2021-10-20

• Detections That Can Help You Identify Ransomware

• Amazon’s on-premises device for vision apps, AWS Panorama Appliance, launches publicly

• Report: Ransomware affected 72% of organizations in past year

• FLRA faces backlogs, staffing woes

• Chris Krebs weighs in on zero trust, FBI web shell removal

• Execs From Now-Defunct GigaTrust Arrested in $50M Fraud Scheme

• CISA Awards $2 Million to Bring Cybersecurity Training to Rural Communities and Diverse Populations

• MITRE Engenuity Announces ATT&CK® Evaluations Call for Participation for Managed Services

• Microsoft, Intel, and Goldman Sachs to Lead New TCG Work Group to Tackle Supply Chain Security Challenges

• Microsoft-Signed Rootkit Targets Gaming Environments in China

• Pwned – The Collected Blog Posts of Troy Hunt (Preview)

• You Probably Won’t Be Able to Get Apple’s New Polishing Cloth in Time for the Holidays

• Apple Requiring Unvaccinated Corporate Employees to Be Tested for COVID-19 Daily

• Could You Be Robbed Using Apple Pay?

• Google: Phishing Campaign Targets YouTube Creators

• Facebook Fined $70 Million By UK’s CMA

• Software observability platform Honeycomb raises $50M

• Google Patches 19 Vulnerabilities in Chrome 95 Browser Refresh

• Space ISAC and NY InfraGard to Collaborate on Cybersecurity in Space

• ThycoticCentrify Ransomware Report: 83 Percent of Victims Paying Ransom

• PurpleFox botnet variant uses WebSockets for more secure C2 communication

• AirPods 3 vs. AirPods Pro Buyer’s Guide

• Google Crushes YouTube Cookie-Stealing Channel Hijackers

• Gartner analysts debate ransomware payments

• Removing Friction for the Enterprise With Trusted Access

• #ISC2Congress – Critical Infrastructure a Main Focus of Security Congress 2021

• Alphabet’s Wing Begins Drone Deliveries In Texas

• Compliance and risk management startup Hyperproof lands $16.5M

• Intel open-sources AI-powered tool to spot bugs in code

• A 60-year-old IRS IT system won’t finish modernizing until 2030

• Cutting through data silos to reduce unemployment

• Data Breach Could Cost Missouri $50M

• Congratulations to the 2021 Rising Stars

• White House looks to boost federal employee union participation

• Announcing the 2021 Public Sector Innovation winners

• VPN Exposes Data for 1M Users, Leading to Researcher Questioning

• Apple Designing More Functional Products Since Jony Ive’s Departure, Argues Bloomberg Reporter

• We don’t want to be critical, but humans alone aren’t enough to protect your ICS

• IoT device security implications for the future

• #ISC2CONGRESS – Lisa Forte Keynote: Insider Threats A Bigger Challenge Than Ever

• FBI warns of ransomware gang – What you need to know about the OnePercent group

• VirusTotal Multisandbox += Microsoft Sysinternals

• FCC Urged To Address Spy Risk To US Telecom Networks

• Almost 25% of Weaponized JavaScript Samples are Obfuscated To Evade Detection

• Hyper Launches 27,000 mAh 245W Battery Pack for $149

• Box Drive Updated With macOS Monterey Support, Improved Security, and Finder Integration

• From Bangkok to Burlington — The Public Interest Social Internet

• New Microsoft Sysmon report in VirusTotal improves security

• Trends in connected homes in 2021 – Improved security and connectivity

• 5 Website Security Tips

• Google Pixel 6 Launches At Compelling Price Point

• Chip Shortage Could See Renault Confirm More Production Cuts

• What Is Proactive Cybersecurity?

• These hackers dodge Windows and target Linux as they look to steal phone data

• ‘LightBasin’ hackers spent 5 years hiding on telco networks

• Passwordless Is the Future … but What About the Present?

• Twitter suspends account of hacker obtaining access to Argentina ID Card Database

• The Importance of Correctly Scoping Your Information Systems

• Hacker steals govt database with info of entire Argentine population

• Be on the Lookout for a New Wave of QR Code Scams

• “To the moon!” Cryptocurrency hamster Mr Goxx trades online 24/7

• WeTheNorth: A New Canadian Dark Web Marketplace

• Operation Secondary Infektion Targets Pfizer Vaccine

• Apple VideoPad Device Scrapped by Steve Jobs Headed to Auction

• Apple Announces ‘Tech Talks’ Where Developers Can Interface With Apple Experts

• High school student rickrolls entire school district, and gets praised

• Query.AI Raises $15 Million in Series A Funding Round

• Investors Bet Big on Attempts to Solve Encryption ‘Holy Grail’

• Hackers Are Disguising Their Malicious JavaScript With A Trick

• Black Market Cashes In On Fake COVID-19 Vaccination Records

• Squirrel Bug Lets Attackers Execute Code In Games, Cloud Services

• Google Releases Security Updates for Chrome

• Modernizing Security Operations with XDR

• 2022 MacBook Air Rumors: Non-Tapered Design With Notched Mini-LED Display, MagSafe, ‘M2’ Chip, and More

• New MacBook Pros Include Improved Thermal System That Apple Says You’ll Rarely Need Thanks to Apple Silicon

• Twelve South Launches New ‘PowerPic Mod’ Wireless Charging Picture Frame

• Retailers are Potentially Losing out on Profit Protecting Against Fraud…New Report Provides Insight

• Google Releases Security Updates for Chrome

• How to delete your Snapchat account

• Understanding Ransomware and How To Protect Against It?

• Exploring the Costs, Risks and Causes of a Government Data Breach

• Magnitude EK Expands Arsenal With PuzzleMaker Exploit Chain

• Deals: Verizon Discounting the MagSafe Battery Pack ($74.24), MagSafe Duo Charger ($96.74), and Other Apple Accessories

• AirPods 3 Feature Improved In-Ear Detection, Don’t Have Conversation Boost

• Prosecuting Project Raven: A New Frontier for Export Control Enforcement

• Best VPN for torrenting 2021

• Geriatric Microsoft Bug Exploited by APT Using Commodity RATs

• Acer Confirms Breach of Servers in Taiwan

• Threat Detection Marketplace SOC Prime Raises $11 Million

• The Ransomware Payment Dilemma: Should Victims Pay or Not?

• How Hackers Hijacked Thousands of YouTube Accounts

• Researchers Break Intel SGX With New ‘SmashEx’ CPU Attack Technique

• Six paths to a job in cybersecurity

• Open XDR vs. SIEM

• New Linux kernel memory corruption bug causes full system compromise

• China-linked LightBasin group accessed calling records from telcos worldwide

• Acer suffers a second data breach in a week

• Good News! A Free Decryptor for BlackByte Ransomware Has Just Been Released

• Acer Hit Twice in One Week by the Same Hacker

• How Passwordless Can Elevate Higher Education

• More Network Security Monitoring Tools Doesn’t Mean More Visibility

• Not just deprecated, but deleted: Google finally strips File Transfer Protocol code from Chrome browser

• Summit Partners acquires majority stake in app security company Invicti Security for $625M

• 81% of UK Healthcare Organizations Hit by Ransomware in Last Year

• Application Security is Key to Stopping Ransomware, Vendor Says

• Russian-speaking cybercrime evolution: What changed from 2016 to 2021

• Dealing with Deserialization of Untrusted Data in Java Applications

• Hackers are disguising their malicious JavaScript code with a hard-to-beat trick

• Black market traders cash in on fake COVID-19 vaccination records

• Oracle’s October 2021 CPU Includes 419 Security Patches

• Zerodium Buying Zero-Day Exploits Targeting VPN Software

• Textbook Rental Scam

• Report: Facebook to Change Its Name Next Week to Better Reflect Company’s ‘Metaverse’

• NHS Digital exposes hundreds of email addresses after BCC blunder copies in entire invite list to ‘Let’s talk cyber’ event

• Check Point Software and Splunk Showcase Automated Threat Response at .conf21 Splunk

• Key Takeaways from the 2021 Gartner® Market Guide for Mobile Threat Defense

• Missouri Budget Officials Outline $50M Cost of Data Breach

• Microsoft launches Privacy Management for Microsoft 365

• A Well-Known Bug Bounty Platform Wants Zero-day Exploits for Windows VPN Clients

• Facebook Considers Name Change In Major Rebrand – Report

• Supply chain attacks are the hacker’s new favourite weapon. And the threat is getting bigger

• Security, remote work support top concerns amongst firms

• How to Spot an Effective Security Practitioner

• Twitter Pulls Account After Argentinian Mega Breach Claims

• Over 25% of Malicious JavaScript Is Being Obfuscated, Research Shows

• Microsoft, Intel and Goldman Sachs Team Up For New Supply Chain Security Initiative

• False Government Websites Steal Private Financial Data, FBI warns

• SSRF attacks explained and how to defend against them

• (ISC)2 pilots new entry-level cybersecurity certification to tackle workforce shortages

• New Windows browser security options and guidance: What you need to know

• Quick Hits

• FCW Insider: October 20, 2021

• Despite M1 Pro and M1 Max Performance and Efficiency Gains, Intel Still Hopes Apple Will Do Business With It

• Centre for Computing History apologises to customers for ’embarrassing’ breach

• LightBasin Operation Compromises 13 Global Telcos in Two Years

• OWASP’s 2021 List Shuffle: A New Battle Plan and Primary Foe

• Brave Browser Says Goodbye to Google As Default Search Engine, Replaces With ‘Privacy-Preserving’ Brave Search

• Cyberattacks are expected to increase as cloud adoption grows due to Covid, says Acronis

• LightBasin Hackers Breach at Least 13 Telecom Service Providers Since 2019

• Build your own Android security product

• When it comes to ransomware, every second hurts

• Microsoft Warns of New Security Flaw Affecting Surface Pro 3 Devices

• Generational Internet Use | Avast

• Zerodium is looking for zero-day exploits in ExpressVPN, NordVPN, and Surfshark Windows VPN clients

• Case Study: How Can Heimdal™’s Next-Gen Antivirus Help You Stay Safe?

• Duckduckgo vs Google: A Security Comparison and How to Maximize Your Privacy

• Most companies think paying ransom is wise in ransomware attacks

• Hackers immensely interested in Health App Data

• What are the post-pandemic security concerns for IT pros?

• Crims target telcos’ Linux and Solaris boxes, which don’t get enough infosec love

• Apple Rumored to Launch 27-Inch Mini-LED iMac With ProMotion in Early 2022 [Updated]

• Why virtual desktops make sense for a virtual workforce

• Five game-changing factors for companies dealing with ransomware attacks

• Acer servers cracked in India and Taiwan – including systems with customer data

• #ISC2CONGRESS – Lessons Learned from the Baltimore Ransomware Attack

• Meet the Recipients of the 2021 (ISC)² Diversity Global Achievement Awards

• CCSP vs. CCNA and CCNP Data Center: What Are the Key Differences?

• Introduction to SAST

• Beware!! New Ad-Blocking Chrome Extension That Injects Malicious Ads

• Cyber incident impact sits at over $500,000 for half of small to medium APAC businesses

• Apple Rumored to Launch Lower-Priced 27-Inch Version of Pro Display XDR With ProMotion in Early 2022

• Organizations lack basic cybersecurity practices to combat the growing tide of ransomware

• New ‘ASTORS’ Finalist Forcepoint to Acquire SSE Leader Bitglass

• Three key areas CIOs should focus on to generate value

• Celebrating the Journey into Cybersecurity: Movies, Military, and Dance Parties

• What Pandemic Responses Teach Us About Cybersecurity

• Attack surface larger than ever as organizations shift to remote and hybrid work

• Splunk enhances security solutions to help organizations embrace digital transformation

• Veritas NetBackup Recovery Vault increases ransomware resiliency for enterprises

• Mobile application security guide, from development to operations

• CNAP Platforms: The Next Evolution of Cloud Security

• SEON unveils digital device fingerprinting capabilities to counter internet and mobile fraud tactics

• Checkmarx Application Security Platform allows CISOs to address the growing security challenges

• SecLytics Augur pXDR reduces risk while streamlining SOC operations

• ZeroFox Physical Security Intelligence provides real-time situational awareness for security teams

• A recipe for failure: Predictably poor passwords

• $5.2 billion worth of Bitcoin transactions possibly tied to ransomware

• SolarWinds Database Mapper and Task Factory enable data professionals to accelerate cloud migrations

• CyberCube releases version 3 of Account Manager to address ransomware and pricing challenges

• Napatech updates Link Capture software to mitigate critical emerging security threats

• You’ve heard of HTTPS. Now get a load of HTTPA: Web services in verified remote trusted environments?

• Forrester report suggests Imperva Data Protection delivers high value and rapid ROI

• Windstream Enterprise collaborates with VMware to bring SASE to customers

• Smart microgrids are replacing legacy electrical systems

• Keysight Technologies acquires SCALABLE to accelerate the use of simulation capabilities

• Alcatel-Lucent Enterprise partners with Versa Network to expand its SASE and SD-WAN capabilities

• SOC Prime raises $11M to accelerate the adoption of the threat detection marketplace

• Penetration Testing in the Cloud Demands a Different Approach

• Dragos provides access to its industrial cybersecurity technology and services for UK customers

• (ISC)² launches entry-level certification to support cybersecurity career ambitions

• Telecommunications Providers Worldwide Are Targeted in Sophisticated Cyber-Espionage Campaign

• Squirrel Bug Lets Attackers Execute Code in Games, Cloud Services

• Nation-State APT Targets Afghans With New Toolset

• U.S. Government Issues Urgent Warning on BlackMatter Ransomware

• Enterprise Cybersecurity Strategies Are Getting More Attention

• Cato Networks Valued at $2.5B, Raises Additional $200M to Accelerate SASE Adoption Among Large Enterprises

• IT Security News Daily Summary 2021-10-19

• Report: Facebook Engineers Expressed Doubts That AI Could Handle Content Moderation

• Query.ai Closes $15M Series A for Security Investigations Tool

• How the Mouse Pointer Deals with the Notch on the MacBook Pro

• Why NDR? See the Entire Elephant in the Room

• q-logger skimmer keeps Magecart attacks going

• Biden’s pick to lead DOD’s weapons testing wants cyber assessments for commercial cloud systems

• Apple iCloud Hacker Steals Nudes

• Oracle Releases October 2021 Critical Patch Update

• #ISC2CONGRESS – Lessons Learned from the Baltimore Ransomware Attack

• States making slow, steady progress to the cloud

• Twitter suspends hacker who allegedly stole data of 45 million Argentinians

• Customer services firm Atento hit by cyberattack

• Fresh APT Harvester Reaps Telco, Government Data

• Oracle Releases October 2021 Critical Patch Update

• Apple’s 67W Power Adapter Unable to Fast Charge 14-Inch MacBook Pro

• Apple’s New $19 Polishing Cloth is Sold Out Until Late November

• BlackMatter ransomware gang will target agriculture for its next harvest – Uncle Sam

• Prison for UPMC Data Thief

• Senate funding bill zeros out TMF

• CrowdStrike Invests in Microsoft AD Competitor JumpCloud

• 2021 State of Ransomware Report Reveals 83% of Victims Paid to Get Data Restored

• Keysight Technologies Acquires SCALABLE Network Technologies

• Hacker Group Linked To China Compromising Global Telecom Networks

• Taking zero trust beyond the user: The importance of endpoint visibility

• Name That Toon: Bone Dry

• Candy Corn Maker Hit With Ransomware

• Microsoft, Intel and Goldman Sachs Lead New Supply Chain Security Initiative

• Privacy Management for Microsoft 365 Now Generally Available

• Google Launches New Flagship Pixel 6 and Pixel 6 Pro Smartphones Priced at $599 and $899

• macOS Monterey Includes New ‘Monterey’ Screen Saver

• M1 Pro vs. M1 Max Buyer’s Guide

• What the Inspector General’s Latest FISA Report Can (and Can’t) Tell Us

• An Update on the Prospects for a Contempt Prosecution of Steve Bannon

• REvil ransomware gang goes dark after its Tor sites are hacked

• CISA seeks 24-hour timeline for cyber incident reporting

• Army data fabric to unify tactical, enterprise networks

• Scrambling to counter a ransomware attack could leave you with egg on your face

• Data Breach Hits US Dental Patients

• Threat Trends: Firewall

• Experts found many similarities between the new Karma Ransomware and Nemty variants

• Chinese VPN app Quickfox caught exposing 1 million users’ data

• Social Network Account Stealers Hidden in Android Gaming Hacking Tool

• How health care organizations can improve their cybersecurity in 2021

• CISA says BlackMatter ransomware group behind recent attacks on agriculture companies

• Lyceum APT Returns, This Time Targeting Tunisian Firms

• Winners Announced for 2021 Infosec Inspire Security Awareness Awards

• ‘LEGO Star Wars: Castaways’ Coming to Apple Arcade on November 19

• Instagram Now Allows Users to Post From Desktop

• EFF Files New Lawsuit Against California Sheriff for Sharing ALPR Data with ICE and CBP

• Email phishing crapcannon operators TA505 are back from the dead, researchers warn

• Hackers leak over 24M of user records from Vimeo’s Livestream

• After Years of Delays and Alarmingly Flimsy Evidence, Security Expert Ola Bini’s Trial Set for This Week

• Protect yourself from BlackMatter ransomware: Advice issued

• Introducing AT&T Managed Extended Detection and Response (XDR)

• How to better secure user authentication protocols

• Bill Gates Advised To End Emails With Female Staffer, WSJ Alleges

• AI-powered fraud-fighting platform Resistant AI raises $16.6M

• 83% of ransomware victims paid ransom: Survey

• Microsoft, Intel and Goldman Sachs Lead New Supply Chain Security Group at TCG

• Former NSA Deputy Director William Crowell Joins [redacted] Board of Directors

• New MacBook Pros Have Up to 3x Brighter Displays for HDR Content

• Facebook AI algorithms have immensely failed, say UK Ministers

• Apple Adds Notch To New MacBook Pro

• Data Privacy API Company Skyflow Raises $45M Series B Funding to Help Fintech and Healthtech Companies Ship Faster

• NIST and No-notice: Finding the Goldilocks zone for phishing simulation difficulty

• How security has changed in the era of cloud computing

• UK competition watchdog unveils principles to make a kinder antivirus business

• Google Cloud invests $50 million in cybersecurity startup Cybereason

• 83% of ransomware victims paid ransom: survey

• A Guide to Doing Cyberintelligence on a Restricted Budget

• How to keep your data off the Dark Web

• How to proactively detect and prevent ransomware attacks

• Aruba introduces the industry’s first distributed services switch

• Tech support scams top list of latest phishing threats

• Federal agencies issue warning on BlackMatter ransomware

• Squirrel Engine Bug Could Let Attackers Hack Games and Cloud Services

• Deals: Apple’s 256GB Wi-Fi 12.9-Inch iPad Pro Hits New Low Price of $999 ($200 Off)

• 14-Inch MacBook Pro vs. 16-Inch MacBook Pro Buyer’s Guide

• How to Stay Safe from BlackMatter Ransomware Attacks

• Coinbase stock rises after Facebook taps it for help on new cryptocurrency project

• #ISC2CONGRESS – Adam Steltzner Keynote: Perseverance and Ingenuity Will Get Us through the Pandemic

• Halloween comes early for Syniverse, Facebook, and Twitch: What we can learn from their spooky outages plus breaches

• 83% of Ransomware Victims Pay the Demand

• REvil ransomware disappears after Tor services hijacked

• PurpleFox Adds New Backdoor That Uses WebSockets

• Passwordless Authentication Is Here: What Do You Need to Know?

• Valence Emerges From Stealth to Address Business App Connectivity Risks

• Customer Data Privacy Provider Skyflow Raises $45 Million

• Apple’s 140W Power Adapter is Company’s First GaN Charger, Supports USB-C Power Delivery 3.1

• Malicious Accounts that Targeted Security Researches Were Suspended by Twitter

• REvil ransomware gang disappears after Tor services hijacked

• Social Networks Account Stealer Hidden in Android Gaming Hacking Tool

• Tattleware And Privacy | Avast

• Network and security services provider Cato Networks nabs $200M

• Feds Warn BlackMatter Ransomware Gang is Poised to Strike

• Shared Responsibility Key to Protecting Critical Infrastructure

• The Simmering Cybersecurity Risk of Employee Burnout

• 451 Research “Modern Clouds Need A Novel Security Approach”

• NSA Warns Of Wildcard TLS Certificate Dangers, Expert Reacted

• CMA Competition Probe Into Music Streaming Market

• SASE Firm Cato Networks Raises $200 Million at $2.5 Billion Valuation

• University of Pittsburgh Medical Center Hacker Sentenced to Prison

• Using Machine Learning to Guess PINs from Video

• Deals: Don’t Want AirPods 3? Get Apple’s Previous-Gen AirPods With Wireless Charging Case for All-Time Low of $129

• Watch out! Attackers Can Guess Your Credit Card PIN Even If You Are Covering the ATM Pad

• Simplifying the complex: Introducing Privacy Management for Microsoft 365

• Seed-stage cybersecurity companies see investment slowdown, report finds

• Skyflow, which delivers data privacy via an API, raises $45M

• Expert Insights: Joint Cybersecurity Advisory Announced – CISA, FBI, EPA, NSA

• A New Variant of FlawedGrace Spreading Through Mass Email Campaigns

• BitSight Algorithm Update: What You Should Know

• #ISC2CONGRESS – Panel: DEI Initiatives Come Down To Choosing Talent

• Identity protection provider Aura raises $200M at a $2.5B valuation

• Threat detection marketplace SOC Prime nabs $11.5M

• FCC mulls over new rules demanding carriers block spam robot texts at network level

• Secure your databases against opportunistic attackers

• Hacker Steals Government Database Of All Argentine Citizens

• Qubits Are Coming: Your Quantum Computing Future

• 3 things to add to your 2022 cloud to-do list

• Social Now Among Top Three Sectors to be Imitated in Phishing Attempts in Q3 2021

• The VC View: Vendor Risk Management

• CSIRT – law enforcement cooperation workshop

• Symantec uncovered a previously unknown nation-state actor, named Harvester, that targeted telcos

• 14-inch MacBook Pro Can Fast Charge Via Thunderbolt, But Fast Charge Limited to MagSafe in 16-inch Model

• M1 Max Chip May Have More Raw GPU Performance Than a PlayStation 5

• Apple Goes Pro in Second Homegrown Silicon Salvo

• $1.9 Million Paid Out for Exploits at China’s Tianfu Cup Hacking Contest

• US Authorities Issue BlackMatter Ransomware Alert

• Harvester Malicious Group Is Going After Telcos

• VPN Provider’s Misconfiguration Exposes One Million Users

• Trickbot module descriptions

• Third-Gen AirPods Offer Only 5 Hours’ Listening Time With Spatial Audio Enabled

• Revamped Apple Maps Rolls Out in Australia

• Ransomware Attacks Go On with One More Hit: Sinclair TV Stations Targeted

• Researchers Devise Prefetch Side-Channel Attack Threatening AMD CPUs

• Facebook To Hire 10,000 In EU For Metaverse Concept

• The brighter side of Facebook

• Twitter accounts linked to cyberattacks against security researchers suspended

• 4 Steps to Future-Forward SOC Transformation

• Israeli Hospitals Allegedly Targeted by Chinese Threat Actors

• 8 top multifactor authentication products and how to choose an MFA solution

• Managed open source data infrastructure provider Aiven raises $60M

• FCW Insider: October 19, 2021

• TA505 Gang Is Back With Newly Polished FlawedGrace RAT

• UK in Midst of $200m Crypto Fraud Epidemic

• Apple Offering Up to $1,000 of Trade-in for M1 MacBooks Towards Purchase of New MacBook Pros

• Apple’s ‘Unleashed’ Event Now Available on YouTube and Events Website

• 16-inch MacBook Pro With M1 Max Chip Is Marginally Heavier Than Same Model Configured With M1 Pro

• The CISO’s guide to evaluating third-party security platforms

• F-gases worth more than € 10 million seized in a week

• New macOS ‘Compatibility Mode’ Lets Fullscreen Apps Use Area Around Notch

• Looking for adding new detection technologies in your security products?

• FBI, CISA, NSA published a joint advisory on BlackMatter ransomware operations

• Reg scribe spends week being watched by government Bluetooth wristband, emerges to more surveillance

• Top IoT Devices Reported By Abuse Victims | Avast

• 7 Cross-Industry Technology Trends That Will Disrupt the World

• Cybersecurity Experts Warn of a Rise in Lyceum Hacker Group Activities in Tunisia

• Compliance does not equal security

• SASE emerges as the edge becomes an enterprise focal point

• Beware of this Flubot malware that swept entire Australia

• REvil ransomware group hacked

• Trustwave released a free decryptor for the BlackByte ransomware

• WFH is here to stay: Five tactics to improve security for remote teams

• Recommendations for improving DEI in cybersecurity teams

• #ISC2CONGRESS – Chris Krebs Keynote Address: Fighting Cyber Adversaries Requires New Thinking and Approaches

• What Would You Say to the CEO about Hiring for the Cloud?

• Why access management needs to evolve beyond passwords

• Is There Really Such a Thing as a Low-Paid Ransomware Operator?

• Kuo: Mass Production on Apple’s AR/VR Headset May Be Delayed Until End of 2022

• Bots to become the future of work and provide ROI to organizations using them

• Multi-factor authentications soar as enterprises move away from passwords to secure hybrid workers

• #TripwireBookClub – Practical IoT Hacking: The Definitive Guide to Attacking the Internet of Things

• IoT investment to overtake other Industry 4.0 tech in the near future

• Logicalis Secure OnMesh empowers the digital workplace with data-driven managed security services

• ThreatConnect launches Risk Quantifier 6.0 to bring cyber risk quantification for businesses

• Water treatment facilities named in joint cyber advisory

• Here Are All the Ports on the New 14-Inch and 16-Inch MacBook Pro

• BitTitan Migration Discovery Solution offers tenant-to-tenant migration assessments for MSPs

• ManageEngine adds anti-ransomware capabilities to its UEM solution to combat evolving cyberthreats

• SecurID Governance and Lifecycle Cloud helps organizations secure the hybrid workforce

• macOS Monterey and iPadOS 15.1 Release Candidates Limit Safari Color Tab Bar Option to Compact View

• New MacBook Pros Feature 3.5mm Headphone Jack With Advanced Support for High-Impedance Headphones, Six-Speaker Sound System

• New MacBook Pro Keyboard Has All-Black Design, Full-Size Function Keys, and Touch ID Ring

• Japanese messaging giant Line admits it mishandled user data, promises to do better

• REvil ransomware operators claim group is ending activity again, victim leak blog now offline

• Qualcomm Smart Cities partner weaves IoT lighting into large-scale digital twins

• Sinclair Hit by Ransomware Attack, TV Stations Disrupted

• Kovrr collaborates with Aon to improve cyber risk quantification for its clients

• iPhone Hackers Win $300K

• Everything Apple Announced at Today’s Event in Just 7 Minutes

• Top Open Source Security Tools

• FIDO Alliance Research Tracks Passwordless Authentication as It Moves Mainstream

• Survey: How well do IT pros know AI and machine learning?

• Drew Prante joins Strata as CRO

• Pondurance receives Registered Provider Organization status from the CMMC-AB

• Loss Prevention Teams Up With Cybersecurity to Address Retail Fraud

• Group With Potential Links to Iranian Threat Actor Resurfaces

• BlackMatter Ransomware

• CISA, FBI, and NSA Release Joint Cybersecurity Advisory on BlackMatter Ransomware

• iMovie for Mac Optimized for New MacBook Pro and Editing Cinematic Mode Videos Shot on iPhone 13

• Deals: Expercom Offers Up to $300 Off Apple’s New 14-Inch and 16-Inch MacBook Pro

• New MacBook Pro Models Include HDMI 2.0 Port Instead of HDMI 2.1

• New MacBook Pros Offer Up to 10 Hours Longer Battery Life Than Prior-Generation

• How the Jan. 6 Committee Can Make It Easy to Prosecute Bannon for Contempt

• Report: 54% of social media users don’t think their info is safe

• BlackMatter Ransomware

• CISA, FBI, and NSA Release Joint Cybersecurity Advisory on BlackMatter Ransomware

• Why Now Is the Time to Jump into Cybersecurity and Join Imperva

• IT Security News Daily Summary 2021-10-18

• Report: Public-sector cyber forecast looks mostly sunny

• Sinclair confirms ransomware attack after TV station disruptions

• Gartner analyst: 12 technologies to accelerate growth, engineer trust and sculpt change in 2022

• Top 5 tips for dealing with supply-chain disruptions

• How to deal with supply-chain disruptions: 5 tips

• Apple’s New AirPods Lineup Starts at $129 With AirPods 2, AirPods 3, AirPods Pro and AirPods Max

• macOS Hides the Notch on New MacBook Pro in Full-Screen Mode

• New Beats Fit Pro Headphones Revealed in iOS 15.1 Beta

• Third-Generation AirPods Require iOS 13, Drop Support for Older iPhones, iPads, and iPods

• Mentions of High Power Mode Possibly for New MacBook Pros Again Found in macOS Monterey

• General Dynamics challenges rival’s $2.7B cloud migration win

• Podcast: Could the Zoho Flaw Trigger SolarWinds 2.0?

• South Korea Wants Help to Arrest Alleged Cyber-Criminals

• cipher

• Sinclair Confirms Ransomware Attack That Disrupted TV Stations

• NSA, FBI, CISA Issue Advisory on ‘BlackMatter’ Ransomware

• macOS Monterey Release Candidate Undoes Safari Changes, Reintroduces Old Tab Design

• Delivery Dates for MacBook Pro Models Slipping Into November and December

• New 16-Inch MacBook Pro is Thicker and Heavier Than Previous Generation

• First Apparent Geekbench Score Surfaces for MacBook Pro M1 Max With 2x Faster Multi-Core Performance Compared to M1

• #ISC2CONGRESS – Chris Krebs Keynote Address: Fighting Cyber Adversaries Requires New Thinking and Approaches

• Scaling up secure, single sign-on

• Acer hit with second cyberattack in less than a week, Taiwanese authorities notified

• FinCEN: 2021 ransomware activity outpaces 2020 in 6 months

• After Springhill: Assessing the Impact of Ransomware Lawsuits

• How Machine Identities Can Imperil Enterprise Security

• TeamTNT Deploys Malicious Docker Image On Docker Hub

• How MFA and Cyber Liability Insurance Effectively Manage Risk in Higher Education

• Canon Sued for Disable The Scanning Feature When Printers Run Out of Ink

• Digital twin of Texas coastline informs flood resilience

• Gartner survey of CIOs highlights investments in AI, cloud and cybersecurity

• Sinclair Broadcast Group suffers ransomware attack, breach

• Apple Says Universal Control Coming to macOS Monterey Later This Fall

• Apple Removes References to Original HomePod From Website, Months After Discontinuation

• Apple Releases Polishing Cloth for $19

• 14-Inch MacBook Pro Starts With 8-Core CPU and Has 2 Power Adapter Options, 24-Core GPU Option Available for 16-Inch Model

• Apple Ditches Intel Chips for MacBook Pro With Lineup Featuring M1, M1 Pro, and M1 Max

• Microsoft achieves a Leader placement in Forrester Wave for XDR

• TikTok Serves Up Fresh Gamer Targets via Fake Among Us, Steam Offerings

• Cyber-Attack on US TV Broadcaster

• Sinclair Broadcast Group Confirms Ransomware Attack

• Prometheus endpoint unprotected installs could expose sensitive data

• Easy Access to OAuth 2.0 Protected Resources With the Spring WebClient

• Free Decryptor Released for BlackByte Ransomware

• “Left of Boom” Cybersecurity: Proactive Cybersecurity in a Time of Increasing Threats and Attacks

• EFF Joins Press Freedom Groups In Asking U.S. To Drop Assange Extradition Efforts

• How using the purple team approach helps in addressing cybercrime

• Microsoft called out as big malware hoster – thanks to OneDrive and Office 365 abuse

• HomePod Mini Getting Three New Colors in November: Yellow, Orange, and Blue

• Apple Music Gaining New ‘Voice Plan’ for $4.99/Month

• Apple Announces Redesigned Third-Generation AirPods

• Apple Announces M1 Pro and M1 Max Chips Designed for New MacBook Pro

• AirPods 3 Pricing and Release Date: Available to Order Today for $179, AirPods 2 Now $129

• Profiling hackers using the Malvertising Attack Matrix by Confiant

• Data breach extortion scheme uncovered by NCC Group

• The growing importance of GWACs

• The infrastructure bill won’t be enough to close the digital divide

• Is your organization safe from a cybersecurity attack?

• Third-Party Attacks Are Increasing, But Third-Party Risk Management Is Failing

• Private Data Sharing Firm TripleBlind Raises $24 Million in Series A Funding

• Hands-on domain password policy setup for Active Directory

• A Journey in Organizational Resilience: Training and Testing

• Twitter Suspends Accounts Used to Snare Security Researchers

• Apple Event Live Updates: MacBook Pro and More Expected

• New Facebook whistleblower testifies in U.K.

• Get career advice from 7 inspiring leaders in cybersecurity

• New High Impact Scenarios and Awards for the Azure Bounty Program

• “Killware”: Is it just as bad as it sounds?

• Ransomware attack on US TV Broadcaster Sinclair

• Cybersecurity And Web Hosting: What Businesses Need To Know

• iPhone 13 Pro, Windows, Chrome, Linux and others pwned at Tianfu Cup

• Best gaming VPN for 2021

• 50th EU day against human trafficking

• Why Database Patching Best Practice Just Doesn’t Work and How to Fix It

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Elders And Digital Burden Fears | Avast

• Robots for kids: Best STEM kits and other tech gifts for hackers of all ages

• Cybersecurity Awareness Month: Why haven’t you updated your security policies?

• Vulnerability Summary for the Week of October 11, 2021

• October 2021 Apple Event Spoiler-Free Video Stream

• Apple Considered Launching Cloud Gaming Service

• This Week Marks the 20th Anniversary of the iPod and 30th Anniversary of the PowerBook

• #ISC2Congress – CEO Welcomes Virtual Attendees and Urges Them to Focus on Strong Team Development

• Vulnerability Summary for the Week of October 11, 2021

• Taking Stock of the New U.S. Trade Policy on China

• Tracking CVE-2021-26084 and Other Server-Based Vulnerability Exploits via Trend Micro Cloud One and Trend Micro Vision One

• Fraud Victims Lose £9.3bn in Well-Being per Year

• BlackByte Ransomware Decryptor Released

• Google Warns Of Surge In Activity By State-Backed Hackers

• Governor Wants To Prosecute Journalist Who Clicked View Source On Government Site

• Senior Officials Join the U.S. in an Anti-Ransomware Initiative

• $5.2 Billion Worth of Bitcoin Transactions Related to Ransomware

• Accenture Discloses It Had Suffered Data Breach Following a Ransomware Attack

• Cybersecurity Careers: Awareness, Opportunities and Retention

• Banks Informed U.S. Treasury of $590 Million in Ransomware Payments

• Third Party Attacks Are Increasing, But Third-Party Risk Management Is Failing

• Multiple vulnerabilities in popular WordPress plugin WP Fastest Cache

• (ISC)² Addresses the Cybersecurity Workforce Gap with New Entry-Level Cybersecurity Certification Pilot Program

• White House international ransomware initiative outlines hopes and challenges

• New High-End Mac Mini: Everything Rumors Say We Can Expect

• Organisers of Security Serious Week set new Guinness World Records® title for an Online Cybersecurity Lesson

• Critical Vulnerabilities Discovered in Fastest Cache Plugin For WordPress

• Joint cyber advisory issued for water treatment facilities

• BlackByte ransomware decryptor released

• This ‘particularly dangerous’ phishing attack features a weaponized Excel file

• University still recovering from major cyberattack that disrupted IT systems

• Password Auditing Tool L0phtCrack Released as Open Source

• A week in security (Oct 11 – Oct 17)

• Accenture Confirms Data Stolen in Ransomware Attack

• Many Prometheus Endpoints Expose Sensitive Data

• Windows 11 Security Features & Requirements

• Check Point Software Again Earns Leadership Spot in G2 NGFW Reviews

• Does someone else secretly have access to your iPhone or iPad?

• Sinclair TV stations downtime allegedly caused by a ransomware attack

• Could You Be Robbed Using Apple Pay?

• Cybersecurity Awareness Month: Building your career

• How to Switch From Google Authenticator to Another 2FA App

• Lyceum group reborn

• Online Apple Store Goes Down Ahead of ‘Unleashed’ Apple Event

• BEC attacks: Scammers’ latest tricks

• MirrorBlast, the New Phishing Campaign Targeting Financial Organizations

• Chinese tech minister says he’s ‘dealt with’ 73,000 sites that breached the law

• Apple Watch Series 7 Review: A Larger Display, but No Essential Changes

• Twitch Warns Over Source Code Breach

• Dorsey: Square May Develop Bitcoin Mining Hardware

• Learning Framework For Detection of Novel Malware | Avast

• Missouri Governor Urged to Appoint Cybersecurity Panel

• REvil Ransomware’s Tor Sites Were Hijacked

• OpenSea Vulnerabilities Allowed Malicious NFT Uploads To Steal Crypto

• 6 zero trust myths and misconceptions

• Microsoft’s very bad year for security: A timeline

• Europol Warns of Major EU Recovery Fund Fraud

• Facebook Developing ‘Egocentric’ Artificial Intelligence

• US, Kazakhstan Take Bitcoin Mining Lead From China

• Twitch: No Passwords Were Taken in Data Breach

• Full-Size Function Keys Expected to Feature on New MacBook Pro Models

• The Data Breach Twitch Suffered Had Minimal Impact, the Company Says

• US Treasury Tracks $5.2bn of Ransomware Transactions in Six Months

• Apple Removes Quran App In China

• Sunderland University Seeks To Recover From ‘Extensive’ Cyber-Attack

• Over 30 Countries Pledge to Fight Ransomware Attacks in US-led Global Meeting

• Chinese tech minister says he’s ‘dealt with’ 73,000 websites that breached the law

• Trying to register your antivirus in Windows Security Center?

• Waymo Vehicles Clog Quiet San Francisco Street

• Whatever sort of disaster we’re talking about, if your backups are fried, you’re not going to recover

• REvil ransomware operation shuts down once again

• Heimdal™ Security Is a Finalist at the Computing Security Awards 2021 in Thirteen Categories

• REvil Ransomware Gang Goes Underground After Tor Sites Were Compromised

• Experts spotted an Ad-Blocking Chrome extension injecting malicious ads

• Analyzing and implementing a national zero trust architecture

• Ransomware news headlines trending on Google

• Google alerts over 50k users about State funded Cyber Attacks

• Windows 10, Linux, iOS, Chrome and Many Others at Hacked Tianfu Cup 2021

• The importance of crisis management in the age of ransomware

• New Google Dorks List Collection for SQL Injection – SQL Dorks 2021

Generated on 2021-10-24 23:59:25.601548