IT Security News Weekly Summary – Week 44

• IT Security News Daily Summary 2021-11-07

• Over-the-Horizon Does Not Have to Mean Next Door

• Heap Overflow Bug Affects All Linux Kernels Via TIPC Module

• Experts spotted a phishing campaign impersonating security firm Proofpoint

• Encryption Key Lifecycle Management: Tools and Best Practices

• Report: 51% of IT leaders don’t think they could mitigate a data breach

• The US Puts a $10M Bounty on DarkSide Ransomware Hackers

• New Magecart group uses an e-Skimmer that avoids VMs and sandboxes

• How to Prototype a Mobile Application in 2021

• Facebook Sunsets Face Recognition And Deletes Users’ Data Due to Privacy Concerns

• The Fastest WordPress Themes of 2021

• The AP Interview: Justice Dept. Conducting Cyber Crackdown

• Security Affairs newsletter Round 339

• Week in review: CVE + MITRE ATT&CK methodology, new issue of (IN)SECURE Magazine

• Penetration testing

• New! Improvements to Your (ISC)² Cybersecurity Online Continuing Education

• DIU director: Look beyond reform to keep the technological edge

• Casinos of tribal communities are losing millions in Ransomware attacks

• IT Security News Daily Summary 2021-11-06

• Decentralization may be key to protecting our digital identities

• How to Avoid Vulnerabilities in Your Code

• Telegram – What Parents Need To Know Now

• Threat actors stole $55 million worth of cryptocurrency from bZx DeFi platform

• Untraceable Communication is Here

• How secure access services edge security will transform networks

• Philips Tasy EMR healthcare infomatics solution vulnerable to SQL injection

• Report: 94% of devs say their company experienced a ‘preventable’ cyberattack

• Get all of the training you need to become a cybersecurity analyst for just $26

• Top Stories: New iMac Pro Rumor, Beats Fit Pro, New HomePod Mini Colors, and More

• White hat hackers earn over $1 Million at Pwn2Own Austin 2021

• Build or Buy your own antivirus product

• Hackers Exploit Microsoft Exchange Vulnerabilities To Drop Babuk Ransomware

• Security does not end with Implementing Controls

• Code similarity analysis with r2diaphora

• Best Risk Management Software for 2021

• Lessons From an Internet Outage: Issues Caused by Let’s Encrypt DST Root CA X3 Expiration

• Week in security with Tony Anscombe

• SecureAuth Buys Acceptto to Deliver Low-Friction Authentication to Enterprises

• 1.8 TB of Police Helicopter Surveillance Footage Leaks Online

• A drone was modified to disrupt U.S. Power Grid, says intelligence bulletin

• 1.8TB of Police Helicopter Surveillance Footage Leaks Online

• BrandPost: Bridging Data Retention Gaps En Route to Zero Trust

• Senators add CISA cyberattack/ransomware reporting amendment to defense bill

• US defense contractor Electronic Warfare Associates discloses data breach

• IT Security News Daily Summary 2021-11-05

• BrandPost: Secure Microsoft 365 with Reveal(x) 360 Network Detection and Response

• BrandPost: Wildcard Certificate Risks and the ALPACA TLS Attack

• The 7 Most Expensive Bugs in History

• Cybersecurity: Track data activity before “unusual” becomes dangerous

• Third-party patch roundup for October 2021

• BrandPost: The Cybercrime Crisis: Advanced & Automated DDoS Technology is Essential NOW

• BrandPost: Why Bad Actors Target VPNs, and What Can Be Done to Stop Attacks

• cache poisoning

• 7 ways to protect pharma supply chains from cyber-physical attacks in 2022

• CIS partners with CrowdStrike on cybersecurity platform protecting local governments

• Ohio Schools Get New Cybersecurity Resource

• Friday Squid Blogging: Squid Game Cryptocurrency Was a Scam

• M1 Pro and M1 Max MacBook Pro Owners Complain of Crashes Playing HDR YouTube Videos

• The Top 5 Data Breaches of the Decade and What We Can Learn From Them

• Cloudflare report highlights devastating DDoS attacks on VoIP services and several ‘record-setting HTTP attacks’

• Routers, NAS and phones hacked in Pwn2Own competition

• US Defense Contractor Discloses Data Breach

• Is a Consolidated Approach Better for WAAP Security?

• $500 million for TMF, other tech added to Build Back Better

• Track data activity before “unusual” becomes “dangerous”

• Who’s Minding Your Company’s Crypto Decisions?

• Ransom hits main street

• Intel Alder Lake Chips for Desktops Faster Than M1 Max in Benchmarks, But Use Much More Power

• Reg reader returns Samsung TV after finding giant ads splattered everywhere

• Native Tribal Casinos Taking Millions in Ransomware Losses

• 3 Experts- CISA Requires Agencies To Patch Known Exploited Vulnerabilities

• Lessons Learned From The Years Early Threats (and 5 must do actions)

• Why Safeguarding Endpoint Data In Distributed IT Environments Requires A Different Approach To Storage

• BlackBerry report highlights initial access broker providing entry to StrongPity APT, MountLocker and Phobos ransomware gangs

• Video Comparison: M1 MacBook Pro vs. M1 Pro MacBook Pro

• Will the EU Lose Access to U.S. Data Flows and Software?

• A Drone Tried to Disrupt the Power Grid. It Won’t Be the Last

• “Customer complaint” email scam preys on your fear of getting into trouble at work

• How InfoSec Should Use the Minimum Viable Secure Product Checklist

• Apple Fixes Bug That Bricked Some Intel Macs After macOS Monterey Install

• MacRumors Giveaway: Win an Apple Watch Series 7 and Band From BluShark

• ‘Critical Severity’ Warning: Malware Found in Widely Deployed npm Packages

• Babuk Ransomware Seen Exploiting ProxyShell Vulnerabilities

• Continuous Controls Monitoring: Automatically and Continuously Identify Gaps in Security Controls

• Device Exploits Earn Hackers Over $1 Million at Pwn2Own Austin 2021

• DOD Licenses Data Carver

• Apple Fixes Bug That Caused Some Intel Macs to Fail to Boot After macOS Monterey Install

• Getting to Know the Various Data Security Compliance Laws

• 7 Reasons Why Cybersecurity Is Important to Your Marketing Strategy

• Beyond the Basics: Tips for Building Advanced Ransomware Resiliency

• BrakTooth Bluetooth Bugs Bite: Exploit Code, PoC Released

• U.S. State Department Puts $10 Million Bounty on DarkSide Ransomware Group

• Meet Roela Santos, Honoree of the 2021 (ISC)² Julie Peeler Franz “Do It for The Children” Volunteer Award

• Starting with strategy – A multi-part series on building a robust cybersecurity program

• FBI: Scams Involving Cryptocurrency ATMs and QR Codes on the Rise

• MVSP: Will Google’s security baseline work?

• Ransomware Attack on Lab in Florida

• To Secure DevOps, Security Teams Must be Agile

• Deals: Take Up to $70 Off Apple’s AirPods Lineup

• What Next for MacBook Pro? Four Upgrades We’re Likely to See

• No day in court: US Foreign Intelligence Surveillance Court rulings will stay a secret

• Ransomware news trending on Google

• Cybersecurity, Data, and Automation: What You Need to Know

• How to Deal With Unpatched Software Vulnerabilities Right Now

• Proofpoint Phish Harvests Microsoft O365, Google Logins

• Google Ads for Faux Cryptowallets Net Scammers At Least $500K

• US government unveils $10 million bounty for DarkSide ransomware gang leaders

• Researchers Release PoC Tool Targeting BrakTooth Bluetooth Vulnerabilities

• Ukraine intelligence doxed 5 FSB Officers that are members of Gamaredon APT Group

• Microsoft Just Expanded Its Malware Protection For Linux Servers

• Mystery Surrounds Labour Party Ransomware Attack

• US Offers $10 Million Bounty For Colonial Pipeline Hackers

• Beijing Fingers Foreign Spies For Data Mischief

• Apple’s Federighi Delivers Dramatic Speech On Dangers Of Sideloading

• Enforcement Provisions in New National Security Reforms Packages

• Voice phishing attack spoofs Amazon to steal credit card information

• One in Three Workers Monitored by Their Employers

• Most Inspiring Women in Cyber 2021: Pat Ryan, Director and Founder of Cyber Girls First

• The US Offers a $10 Million Reward for Crucial Info on DarkSide Ransomware Operators

• Wanted! US offers $10m bounty for ransomware kingpins

• Reward! Uncle Sam promises $10m for info about DarkSide ransomware gang chiefs

• DSE measures and improves DevOps

• Future Apple Silicon Macs Will Reportedly Use 3nm Chips With Up to 40 Cores

• Apple To Drop Mask Requirement For Many US Stores – Report

• Twitter hacker charged in sim swapping, cryptocurrency scheme

• Hungarian Official: Government Bought, Used Pegasus Spyware

• 4 Tips on How Small to Midsize Businesses Can Combat Cyberattacks

• Online safety and end-to-end encryption can co-exist, says data protection watchdog. But how?

• Feds Offer $10 Million Bounty for DarkSide Info

• Industry Reactions to New ‘Trojan Source’ Attack: Feedback Friday

• #SecTorCa: Cyber Expert Wendy Nather Unmasks “Scary Bits” of Infosec in 2021

• Wi-Fi Threat Shield | Avast

• 6 Potential Long-Term Impacts of a Data Breach

• Labour Party supplier ransomware attack: Who holds ex-members’ data and on what legal basis?

• Ukraine Identifies Russian FSB Officers Hacking As Gamaredon Group

• US Government Offers $10m Bounty For Colonial Pipeline Hackers

• Common Spyware Types and How To Detect Them

• Get patching: Cisco warns of these critical product vulnerabilities

• New Tom Hanks Sci-Fi Movie ‘Finch’ Premieres on Apple TV+

• CCSP vs. Microsoft Certified: Azure Administrator Associate — How Does Vendor Focus Factor In?

• Blue Origin Loses NASA Lawsuit After Judge’s Ruling

• Threat actor exploits MS ProxyShell flaws to deploy Babuk ransomware

• SSL certificate research highlights pitfalls for company data, competition

• The IoT is getting a lot bigger, but security is still getting left behind

• Ignore China’s New Data Privacy Law at Your Peril

• Peloton Says Apple’s Privacy Rules Limit Its Ability to Gain Subscribers

• Facebook Wants to Open ‘Welcoming’ Retail Stores Where People Can Experience the ‘Metaverse’

• How to Hide Your Torrenting Activity: A Handy Guide

• What is SOC As A Service?

• FCW Insider: November 5, 2021

• Quick Hits

• US Offers $10m Reward to Unmask DarkSide Leaders

• ONS Reports Huge Spike in Cybercrime and Fraud During COVID-19

• Weekly Update 268

• Cisco teams up with Singapore university in $40M research investment

• Get the training you need to switch to a cybersecurity career

• Facial Recognition Firm Could Be Ordered to “Close” in UK, Warn Experts

• U.S. Federal Agencies Ordered to Patch Hundreds of Actively Exploited Flaws

• Twitter on iOS Now Lets You Easily Search For Tweets From Specific Accounts

• Azure security must enable change to effectively support remote employees: Part 1

• Ukraine Unmasks Armageddon Group as FSB Officers

• U.S. Offers $10 Million Reward for Information on DarkSide Ransomware Group

• The CSO guide to top security conferences, 2021

• Update and isolate your Nagios servers now

• npm libraries coa and rc. have been hijacked to deliver password-stealing malware

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• New infosec products of the week: November 5, 2021

• Facebook Shuts Down Facial Recognition | Avast

• Software development: Why security and constant vigilance are everyone’s responsibilities

• Hardcoded SSH Key in Cisco Policy Suite Lets Remote Hackers Gain Root Access

• Truth behind Amazon stealing financial credentials of customers via Cyber Attack

• Salary given to cybersecurity specialists in UK

• Twitter joins backlash against Australian plan to ID social media users

• 77% of rootkits are used for espionage purposes

• Beijing fingers foreign spies for data mischief, with help from consulting firm

• Organizations seldom prioritize cybersecurity over business outcomes

• 5 Recommendations to Prevent Man in the Middle Attacks (MITMA’s) within the Financial Sector.

• Pink Botnet infected over 1.6 Million Devices, it is one of the largest botnet ever seen

• Trojan Source attack method allows hiding flaws in source code

• The Top 3 Cyber Security Mistakes and How to Avoid Them

• 50% of internet-facing GitLab installations are still affected by a RCE flaw

• Hackers gained access to mySA Gov accounts, including licence and rego details

• Fragmented approach to identity security management creates risk

• Every month should be Cybersecurity Awareness Month!

• Bowser to Pay Nintendo $4.5M Restitution

• DJI Launches New Mavic 3 Drone With Longer Flight Time, Improved Cameras and New Safety Features

• Blocked DDoS events up 75% in the first nine months of 2021

• TrustLogix Data Security Governance Platform helps data scientists modernize their data infrastructure

• Cyble Hawk protects sensitive assets for law enforcement and government agencies

• Fusion Risk Management Dynamic Response Console delivers real-time data responses for organizations

• Senators Push To Study “Unstable” Patent Law, While Patent Trolls Cheer Them On

• Google squashes Android zero‑day bug exploited in targeted attacks

• Quantum Scalar Ransom Block provides data security for cyber-resilient archives

• Infographic: What is the economic impact of a data security platform?

• Top 10 Things Everyone Should be Doing During Development

• US Gov offers a reward of up to $10M for info on DarkSide leading members

• Apple Card Promo Offers $10 Daily Cash for Adding New Family Members

• Ardoq joins Cloud Security Alliance to help improve cloud security

• US offers $10m reward for decisive info on DarkSide ransomware gang

• US Offers $10 Million Bounty in Hunt for DarkSide Ransomware Operators

• Secure Access for Remote Workers: RDP, VPN & VDI

• Brenda Bjerke, Jane Harper, and Diana Kelley join EWF Board of Advisors

• US Gov Offering $10M Reward for Data on DarkSide Ransomware Operators

• CISA recommends vendors to fix BrakTooth issues after the release of PoC tool

• Facial Recognition as a Less-Bad Option

• IT Security News Daily Summary 2021-11-04

• Five Games Worth Firing Up to Show Off Your New MacBook Pro

• US offers $10 million reward for information on DarkSide leaders, $5 million for affiliates

• How Is Zero Trust Different From Traditional Security?

• Improving SaaS Visibility: How To Provide Guardrails, Not Gates

• 2 Experts: Black Shadow Dumps 290,000 Medical Records & Entire LGTBQ Dating Database

• CISA sets two week window for patching serious vulnerabilities

• NortonLifeLock posts double-digit revenue growth in Q2

• Evaluate the components of Cisco SASE

• 7 best practices to ensure GDPR compliance

• Phishing Attack Blends Spoofed Amazon Order and Fraudulent Customer Service Agents

• US Offers $10M Reward For ID, Location of DarkSide Leadership

• Ripping Off the Blindfold: Illuminating OT Environments

• API Security Issues Hinder Application Delivery

• AT&T and Verizon Delay 5G Expansion to Address Aircraft Interference Concerns

• Fortinet outpaces Wall Street estimates, brings in $867 million revenue for Q3

• Cybersecurity, the pandemic and the 2021 holiday shopping season: A perfect storm

• UK Government Threatens Facebook With Criminal Action For Failing To Protect Users

• MITRE, CISA Reveal Dangerous Hardware & Software Vulnerabilities

• Cisco warns of hard-coded credentials and default SSH key issues in some products

• Cisco Plugs Critical Holes in Catalyst PON Enterprise Switches

• Honoring our ‘Cybersecurity Defender of the Year’

• FBI Warns Ransomware Actors Using Financial Events, Stock Valuation To Target Companies, Experts Weigh In

• Q3 2021 Cyber Attacks Statistics

• Using AI to verify renter eligibility and risk

• OPM rule gives agencies more direct-hire authority for recent college grads

• Call center scammers using Justin Bieber tickets, The Weeknd concerts and fake gun purchases to spread malware: Proofpoint

• Apple Stores to Drop Mask Requirement for Customers in Many U.S. States

• iPhone 13 Screen Replacements Can Break Face ID, a Repair Restriction iFixit Calls ‘Completely Unprecedented’

• Revolutionary identity verification technique offers robust solution to hacking

• 8 Best Hackintosh Motherboard 2021 – Review and Buying Guide

• Ransom fail: Iranian hackers leak trove of Israeli LGBTQ dating app data

• Kali Linux vs Parrot OS: Which One Is the Best?

• You can configure SSH to use a non-standard port with SELinux set to enforcing

• US Indicts Brit Over SIM Swap Crypto Theft

• Expert found a critical remote code execution bug in Linux Kernel

• Google Actively Bidding For Pentagon Cloud Contract

• When containers become a nightmare

• Twelve South Debuts ActionBand for Apple Watch Workouts

• US Blacklists Pegasus Spyware Maker

• S3 Ep57: Europol v. Ransomware, Shrootless bug, and Linux browser flamewars [Podcast]

• Amazon Spoofed in New Attack

• Graylog unites SIEM, AI-based anomaly detection in new security suite

• Automate and Augment Case Management, Threat Intelligence and Enrichment

• US government orders federal agencies to patch 100s of vulnerabilities

• ‘Tis the Season for the Wayward Package Phish

• Cisco Releases Security Updates for Multiple Products

• BrakTooth Proof of Concept Tool Demonstrates Bluetooth Vulnerabilities

• Apple ID Website Gets Design Overhaul

• Why retailers must adopt a Zero Trust approach during this holiday season

• Bill Gates Doubts 1.5 Degree Goal Is Achievable, Praises UK Climate Efforts

• Convergence in Cybersecurity and Cloud Operations: Lessons From NOC and SOC Fusion

• MariaDB Encryption (TDE) Using MariaDB’s File Key Management Encryption Plugin

• Microsoft expands zero-trust security capabilities at Ignite 2021

• DOD revamps controversial CMMC program

• Apple: Side-loading on iOS would open the malware floodgates

• Free Discord Nitro Offer Used to Steal Steam Credentials

• 2022 will be the year of convergence between edge, IoT and networking tech, Forrester predicts

• Linux Foundation Fixes ‘Dangerous’ Code Execution Kernel Bug

• Fake Company Sheds Light on Ransomware Group Tactics

• VB2021 localhost videos available on YouTube

• US Government Takes an Aim at Government Contractors with Poor Cybersecurity Standards

• Apple’s Craig Federighi Warns EU DMA Will Open ‘Pandora’s Box’

• Most Reliable Hosting Company Sites in October 2021

• Non-Traditional Cybersecurity Career Paths – One Experience Informs Another

• “PlugWalkJoe” indicted for $784K SIM swap cryptocurrency theft

• Critical Linux Kernel Bug Allows Remote Takeover

• Ukraine Doxes Russian Government Hackers’ Phone Calls

• Senate Panel Passes Slew Of Cybersecurity Bills

• Remote Code Execution Flaw Patched In Linux Kernel TIPC Module

• US Indicts UK Resident PlugwalkJoe For Cryptocurrency Theft

• Deals: Get Apple’s 512GB 16-Inch MacBook Pro for $2,449.99 ($49 Off)

• Google Play Will Let Developers Use Alternative Billing Systems in South Korea, While Apple Has Yet to Make Changes

• Discover what’s new and gain technical expertise from MISA at Ignite

• Mozilla Rolling Out ‘Site Isolation’ With Release of Firefox 94

• Appsian Security Announces Acquisition of Q Software, a Leader in JD Edwards Security and Compliance

• What Do—and Will—the Criminal Prosecutions of the Jan. 6 Capitol Rioters Tell Us?

• Machine Learning in Cybersecurity 101

• What Is Remote Desktop Protocol (RDP)?

• How iOS Malware Can Spy on Users Silently

• Conducting Digital Forensics Incident Response (DFIR) on an Infected GitLab Server

• RSA algorithm (Rivest-Shamir-Adleman)

• vulnerability disclosure

• White House extends vaccine deadline for contractors

• Engaging Customers on an Uncertain Journey

• Cisco Releases Security Updates for Multiple Products

• BrakTooth Proof of Concept Tool Demonstrates Bluetooth Vulnerabilities

• Hacker allegedly involved in 2020 Twitter hack charged with theft of $784K in crypto

• Most Inspiring Women in Cyber 2021: Sophia McCall, Security Consultant, NCC Group

• How iOS Malware Can Spy on Users Silently?

• Google To Allow Third Party App Payments In South Korea

• Recorded Future Partners With Swimlane For Intelligence-Driven Identity Fraud Prevention

• Data Breach Hits UK Labour Party

• Following Its Shutdown, the BlackMatter Ransomware Gang Transfers Victims to LockBit

• Having Trouble Finding Cybersecurity Talent? You Might Be the Problem

• Technically Speaking series decodes DevSecOps

• Maze Ransomware: Origins, Operating Mode, Attacks

• US indicts UK resident ‘PlugwalkJoe’ for cryptocurrency theft

• Work to earn several highly respected CompTIA certifications with these self-paced courses

• Sketchy Rumor Claims Future iPad Mini to Feature 120Hz ProMotion Display, Which Could Resolve ‘Jelly Scrolling’ Issue

• iPhone X Modded With USB-C Port Listed on eBay With Bids Topping $85,000

• Maritime Cybersecurity: A Rising Tide Lifts all Boats

• Magecart Credit Card Skimmer Avoids VMs to Fly Under the Radar

• House Passes Two Bills to Improve Small Business Cybersecurity

• Tens of thousands unpatched GitLab servers under attack via CVE-2021-22205

• How to Choose the Right iPhone for You in 2021

• Biden Administration Orders All Federal Agencies To Patch Systems

• Compliance-as-a-Service Platform Laika Raises $35 Million

• Consumers Warned About Rise in Call Center Threats

• Our journey to API security at Raiffeisen Bank International

• Critical RCE Vulnerability Reported in Linux Kernel’s TIPC Module

• FYI: Code compiled to WebAssembly may lack standard security defenses

• CISSPs from Around the Globe: An Interview with Dr. Christina Izuakor

• Labour Party Member Data Compromised After Breach

• Kyndryl set for IBM spin-off: Can it grow ecosystem, innovation and revenue?

• Twitter Hacker Charged Over Theft of $784,000 in Cryptocurrency

• CISA shares a catalog of 306 actively exploited vulnerabilities

• US Blacklists NSO Group

• Remote code execution flaw patched in Linux Kernel TIPC module

• Break into the cybersecurity field by learning the NIST risk management framework

• Parents Built a School App. Then the City Called the Cops

• Squid Game Cryptocurrency $SQUID Crashed on Monday in an Apparent Scam, Investors Lose Millions of Dollars

• The Mekotio Banking Trojan Is Apparently Back in Business

• CISA releases directive to remediate dangerous vulnerabilities across civilian agencies

• Scammers used Google Ads to Steal ~ $500k Worth of Cryptocurrency

• Iranian Hacking Group Leaks Patient and LGBTQ Info

• Threat Actor Claims ‘Groove’ Ransomware Gang Was Hoax

• The importance of user names in WordPress

• Apple’s Poor Patching Policies – Intego Mac Podcast Episode 212

• Spain busts migrant smugglers active along the Balkan route

• CERT-FR warns of Lockean ransomware attacks against French companies

• Facebook outage a prime example of insider threat by machine

• SolarWinds CISO: Know your adversary, what they want, watch everything

• NSO Group Blacklisted by US for Trade in Spyware

• Cybersicherheit – Zahl der Woche: Jeder Zweite hält Banken für besonders gefährdet

• Do you know what your supply chain is and if it is secure?

• Lean security: How small cybersecurity teams perform at Fortune 2000 levels

• US Sanctions Pegasus-maker NSO Group and 3 Others For Selling Spyware

• How to ease password pains while maintaining security

• Cyber Attack on Labour Party UK leaks sensitive data

• Rooting malware menace hits Google Play Store users

• Top 10 ways attackers are increasing pressure on their ransomware victims to pay

• Surge in cyber attacks confirms the need for zero trust security

• Organizations can save $1.9 million using workforce passwordless authentication

• CISSP: The Time is Now

• MEET THE RECIPIENTS OF THE 2021 (ISC)² GOVERNMENT PROFESSIONAL AWARD

• Trends in connected homes in 2021 – Improved security and connectivity

• Introducing AT&T Managed Extended Detection and Response (XDR)

• How the UK Cyber Security Council Careers Route Map addresses workforce shortages

• Ten CIO agenda predictions that will impact IT pros by 2026

• Firefox 94 adds plenty of new features, closes over a dozen security holes

• CIA director brings up Russian hackers at talks in Moscow

• Hack In The Box + CyberWeek brought back to Abu Dhabi by DisruptAD

• FCW Insider: November 4, 2021

• Reciprocity Risk Intellect enables compliance-driven cyber risk management

• The ultimate SaaS Security Posture Management (SSPM) checklist

• GuidePoint Security’s penetration testing offering combines automated and traditional reporting

• ExtraHop expands decryption support for Microsoft authentication and application protocols

• Devo unveils platform functionality to empower analysts to detect advanced cyberthreats

• CIS Control 11: Data Recovery

• SentinelOne launches App for Azure Active Directory to advance zero trust architecture

• Securing data transfers with relativity

• What’s it like to work as a malware researcher? 10 questions answered

• Win one for privacy – Swiss providers don’t have to talk

• Beijing lashes USA’s China Telecom ban – but quite gently

• US Puts New Controls on Israeli Spyware Company NSO Group

• How to Avoid Another Let’s Encrypt-Like Meltdown

• Telstra partners with Equinix to offer enhanced network connectivity for financial organizations

• Veritas collaborates with Microsoft to provide data protection solutions to enterprise customers

• Jony Ive’s LoveFrom Designs Award for Companies With Sustainable Practices

• SecureAuth acquires Acceptto to deliver identity security and access control architecture for enterprises

• Report: 93% of U.S. orgs experienced employee misuse of web apps

• Holiday Shopping Season is Upon Us: The State of Security Within eCommerce in 2021

• Nutanix names Dominick Delfino as CRO

• Report on Compliance (ROC)

• BlackMatter ransomware to shut down, affiliates transferring victims to LockBit

• SynSaber appoints Mark Weatherford and Ali Golshan to its Advisory Board

• Talha Tariq joins Torq CISO Advisory Board

• IT Security News Daily Summary 2021-11-03

• Top 6 Vulnerability Scanning Tools>

• Rubrik and Microsoft team up to secure hybrid clouds in a zero trust world

• Get to know the 2021 Public Sector Innovation winners

• Facebook Mistakenly Verified A Bitcoin Scammer Pretending To Be Elon Musk

• Researchers Scan the Web to Uncover Malware Infections

• BlackMatter ransomware gang is reportedly quitting operation

• Cisco Talos reports new variant of Babuk ransomware targeting Exchange servers

• Cyber-Incident Impacts UK Labour Party

• 5 MITRE ATT&CK Tactics Most Frequently Detected by Cisco Secure Firewalls

• CISA Issues New Directive for Patching Known Exploited Vulnerabilities

• The U.K. Labour Party discloses a data breach

• Reflecting on Apple’s Smart Home Ecosystem for Smart Home Day

• BlackMatter ransomware gang reportedly quits operation

• Cloud datacenters anticipated to become largely robot-dependent by 2025

• Former Microsoft exec DelBene tapped for top tech job at VA

• Cloud Data Security Startup Launches

• US Dept of Commerce sanctions NSO Group, Positive Technologies, other makers of snoopware

• BlackMatter claims to shut down ransomware operations

• iCloud Private Relay Down for Some Users

• M1 Pro vs. M1 Max: Real-World Performance Test

• Will Zero Trust Make EDR Irrelevant?

• Commerce Dept sanctions NSO Group, Positive Technologies and more for selling spyware and hacking tools

• Brazilians resign to remote work monitoring

• Mekotio Banking Trojan Resurges with Tweaked Code, Stealthy Campaign

• Data and the policies that protect it: 4 essential plans to have in place

• Why chaos engineering testing makes sense for cybersecurity

• US House Passes Acts to Help SMBs with Cybersecurity

• Where is Cloud Permissions Management headed?

• Microsoft rolls out $3-a-user Defender for small biz types

• Top 6 Best IP Geolocation APIs For Cybersecurity – 2022

• Training the diplomats of the future

• CISA orders civilian agencies to fix known flaws in six months

• To improve resilience, augment zero-trust models

• Infosec and Business Alignment Lowers Breach Cost, Boosts Security

• Apple Executives Explain Challenges of Adding Larger Display to Apple Watch Series 7

• TestFlight for Mac Officially Launches

• Facebook Finds New Way to Avoid Apple’s In-App Purchases With Creator Subscription Links

• The Impact of Carpenter v. United States in the Lower Courts and the Emerging Carpenter Test

• Google To Restore News For Spain After 2014 Closure

• Unauthenticated RCE Flaw in Gitlab Exploited Widely by Hackers

• Squid Game Cryptocurrency Scam Cheats Investors, Serves as a Warning

• Report: 47% of IT security pros want better penetration testing

• SecureAuth acquires Acceptto to deliver AI-driven passwordless authentication

• ‘Tortilla’ Wraps Exchange Servers in ProxyShell Attacks

• BlackMatter ransomware gang allegedly disbanding due to pressure from authorities

• Facebook to throw out face recognition, delete all template data

• CISA Orders Federal Agencies to Patch Flaws

• Predicting the Next OWASP API Security Top 10

• #SecTorCa: Jeff Moss Defines the Role of Hacking

• NSO Group, Positive Technologies and other firms sanctioned by the US government

• Cyber Defense Magazine – November 2021 has arrived. Enjoy it!

• Apple’s Craig Federighi Says Sideloading on iPhone Would Open the Floodgates to Malware

• Apple Releases HomePod Software 15.1.1 With Podcasts Bug Fix

• Apple Executives Explain Challenges of Adding Larger Display to Series 7

• CISA passes directive forcing federal civilian agencies to fix 306 vulnerabilities

• Facebook To Shutdown Facial Recognition System And Delete 1 Billion Faceprints

• US Sanctions Could Cut Off NSO From Tech It Relies On

• Almost Half Of Rootkits Are Used Against Government Organizations

• Credit card skimmer evades Virtual Machines

• Reversing a binary using GDB: tutorial for Reverse Engineers

• 6 Business functions that will benefit from cybersecurity automation

• How To Make Sure Your Business Website Is Running Smoothly

• Tesla Recalls 12,000 US Cars Over Software Glitch

• Facebook to end facial recognition and delete billions of records

• Application Security Startup Wabbi Raises Over $2 Million in Seed Funding

• Is Sandboxing Dead?

• Trojan Source bugs enable ‘invisible’ source code poisoning

• FBI Releases PIN on Attacks Using Significant Financial Events for Extortion

• Deals: Huge iPad Pro Sale on Amazon Taking Up to $150 Off 2021 Models With Record Low Prices

• A16 Bionic Chip in iPhone 14 Reportedly Set to Be Based on ‘4nm’ Process [Updated]

• Apple Fitness+ Starts Rolling Out in 15 Additional Countries

• Apple Debuts True-Crime Podcast ‘Hooked’ as First Standalone Original

• Evolving Zero Trust—Lessons learned and emerging trends

• BlackMatter ransomware gang says it’s disbanding – again – after Ukraine arrests

• XDR explained in 300 words

• Is Killware the next big Cyber Threat

• US Adds Israel’s NSO Group To Entity List

• Best VPN 2021: Top VPN services reviewed

• Privacy predictions for Europe in 2022

• BlackMatter Ransomware Gang Announces Shutdown

• Mozilla Releases Security Updates for Firefox and Firefox ESR

• FBI Releases PIN on Attacks Using Significant Financial Events for Extortion

• Product Overview – Cynet Centralized Log Management

• BlackMatter Ransomware Reportedly Shutting Down; Latest Analysis Released

• Mozilla Releases Security Updates for Firefox and Firefox ESR

• Taking Full Control of your Telemetry with the Intelligent Telemetry Plane

• A16 Bionic Chip in iPhone 14 Reportedly Set to Be Based on 4nm Process

• Mark Zuckerberg’s Metaverse Unlocks a New World of Content Moderation Chaos

• Government action needed to ensure insurance against major hacking of driverless vehicles, experts warn

• Locked up: UK’s Labour Party data ‘rendered inaccessible’ on third-party systems after cyber attack

• What is multifactor authentication and how does it work?

• Tripwire Patch Priority Index for October 2021

• Microsoft Announces New Endpoint Security Solution for SMBs

• Valtix Delivers Free Cloud Security for Departmental, Development, and Test Applications

• Most Inspiring Women in Cyber 2021: Shehnaaz Sonde, Senior Manager – Cyber Response Services at KPMG

• Organizations Attacked by Ransomware Actors During Purchasing and Merging Events, FBI Warns

• Update now! Mozilla fixes security vulnerabilities in Firefox 94

• Former Google Boss Eric Schmidt Casts Doubt On Facebook’s Metaverse

• You Can’t Reset Your Fingerprint

• Report: More than half of organizations do not effectively defend against cyberattacks

• Deals: Nomad’s New Sitewide Sale Has 20% Off iPhone 13 Cases, iPad Folios, and More

• Apple Once Again Refers to Unreleased ‘homeOS’ in Job Listing

• Future iPad Pro and MacBook Pro Models Rumored to Feature Ultra-Bright Double-Stack OLED Displays

• More than 30,000 GitLab Servers Remain Unpatched

• Why Web Application Firewalls and Website Security are so Crucial for all Organizations?

• ByteDance Chairman Zhang Yiming To Step Down

• Rootkits: Expensive to build, cheap to rent

• Digital natives more likely to fall for phishing attacks at work than their Gen X and Boomer colleagues

• Ransomware gangs leaking sensitive financial information to extort organizations

• CISA Lists 300 Exploited Vulnerabilities That Organizations Need to Patch

• Risk Quantification: A Powerful Tool in Your Cyberthreat Defense Arsenal

• Avast One VPN | Avast

• Report: Cost of a Data Breach in Energy and Utilities

• Trojan Source: Hiding malicious code in plain sight

• Almost half of rootkits are used for cyberattacks against government organizations

• UK data spillers fined, but enforcement slows: £5m in ICO penalties not yet paid

• White House pick for DOD CIO eyes tweaks to CMMC

• Medical school exposes personal data of thousands of students

• SpotCam Video Doorbell 2: A Ring-killer this is not

• Report: BlackMatter Ransomware Gang Goes Dark, Again

• Influencing International AI Policy with ForHumanity

• Harvest Now, Decrypt Later

• Ransomware Expert Offer Insights On BlackMatter Data Exfiltration Tool

• BitSight Apache Risk Analysis Highlights Need To Address CISA “Known Vulnerabilities”

• BlackMatter ransomware group announces shutdown. But for how long?

• The Price of Tech: The Challenge of Managing Technology Costs

• Industrial cybersecurity: know the biases that can derail collaboration between OT and IT

• Most Dangerous Hardware Vulnerabilities in 2021

• The Threat of Insecure Interfaces and APIs

• Printers Hacked for First Time at Pwn2Own

• Another Cybersecurity Awareness Month Has Passed and Little Has Changed

• Iran Says Fuel System Running Again After Cyber Attack

• CISA Issues BOD 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities

• Expert Reacted On ‘Trojan Source’ Bug Threatens The Security Of All Code

• Graff Cyber Attack Response – How To Mitigate The Damages Of Ransomware Attacks

• BlackMatter Ransomware to Shut Down Its Operations

• Akamai CEO on strong Q3 earnings after high-profile cybersecurity attacks

• Facebook To End Facial Recognition Use – Cites ‘Societal Concerns’

• Announcing the 2021 Public Sector Innovation winners

• Revealed: The 10 worst hardware security flaws in 2021

• Google signs deal with US Air Force, announces FedRAMP High and IL4 authorizations

• CISA Issues BOD 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities

• Using Fake Student Accounts to Shill Brands

• MacBook Air Drives 6.5 Million Apple Laptop Shipments in Q3 2021

• Telehealth app helps medical staff find specialists

• Centralized address database eases NG911 adoption

• Parallel CDC network makes lab data more accessible

• IRS’ bot shop streamlines IT services

• Veterans Affairs Platform One speeds cloud app development

• Arrests were made, but the Mekotio Trojan lives on

• Holiday Shopping Disruption Beckons as Retail Bot Attacks Surge 13%

• Love online shopping? Here’s how to protect yourself against online scammers

• An Attack Against Time

• Student Loans Company Dismissals Highlight Insider Risk

• Mekotio Banking Trojan Resurfaces with New Attacking and Stealth Techniques

• Samsung Follows Apple and Lets Users Move Mobile Browser Address Bar to the Bottom of the Screen

• Many GitLab Servers Affected by Actively Exploited Flaw Patched Six Months Ago

• ICO Collects Just 26% of Value of Fines Since 2020

• CyberUp presents four principles to keep security researchers out of jail for good-faith probing

• How to configure Microsoft Defender for cloud-based attacks

• (IN)SECURE Magazine issue 70 released

• Nessus 10 is out, with Raspberry Pi support

• Build your own Android security product

• Simulation Game Teaches Non-Security Staff How to Handle a Cyber Crisis

• Cybercrime underground flooded with offers for initial access to shipping and logistics orgs

• Notability Changes App Subscription Policy, Promises Existing Users Lifetime Access to Purchased Features

• Facebook to Shut Down Facial Recognition System and Delete Billions of Records

• BlackMatter ransomware gang is shutting down due to pressure from law enforcement

• A ransomware reality check for CISOs

• Third-party patch roundup for October 2021

• Google fixes actively exploited Zero-Day Kernel flaw in Android

• Proven third-party risk management strategies

• Rooting malware discovered on Google Play, Samsung Galaxy Store

• Keeping an eye on critical infrastructure and industrial systems? So are legions of cyber-criminals

• Mapping ATT&CK techniques to CVEs should make risk assessment easier

• US sees $1 billion worth of Child Identity Theft and Fraud

• Facebook suspends Facial Recognition Program and deletes over 1bn face prints

• How the rise in identity crimes and cyberattacks impacts small businesses

• Google Warns of New Android 0-Day Vulnerability Under Active Targeted Attacks

• Ransomware attacks increased 148% in Q3 2021, showing no sign of slowing

• The Bug Report – October Edition

• While businesses are ramping up their risk mitigation efforts, they could be doing more

• What Is Different About Cloud Security?

• Hands-on domain password policy setup for Active Directory

• Only 2% of IT practitioners are confident in their organization’s ability to reduce API security issues

• Linux Foundation protects the software supply chain with enhanced security features

• Qrypt releases two solutions to ensure quantum-secure encryption for businesses

• IntelePeer Reputation Management helps prevent calls from being tagged and mislabeled as fraud or spam

• Cynamics NDR provides visibility and threat prediction without having to install appliances or agents

• IronCore Labs Cloaked Search encrypts sensitive data before it goes to the search service

• NETSCOUT Omnis Cyber Intelligence detects suspicious activities in real-time and retrospectively

• 8 Daily Practices to Avoid Cybersecurity Burnout

• What Types of Security Capabilities Do Managed Service Providers (MSP) Offer?

• Arista extends EOS network stack architecture for data-driven cloud networking

• Clearview AI slammed for breaching Australians’ privacy on numerous fronts

• Man charged with hacking major US sports leagues to illegally stream games

• WatchGuard Cloud helps MSPs to manage security for their customers with the addition of Wi-Fi

• This Steam phish baits you with free Discord Nitro

• ADVA launches OSA 5400 SyncModule to bring embedded timing solution for equipment vendors

• NETGEAR Orbi NBK752 delivers 5G speeds and WiFi for use in homes and businesses

• IBM to acquire ReaQta to expand its cybersecurity threat detection and response offerings

• GSA addresses plans for FBI headquarters at House hearing

• Yahoo pulls plug on services in China: Report

• Rockwell Automation acquires AVATA to expand supply chain services

• Digi International acquires Ventus Holdings to simplify enterprise WAN management

• Steve Daheb joins Tanium as CMO

• Face Recognition Is So Toxic, Facebook Is Dumping It

• Microsoft to release ‘Defender for Business’ platform

• Spruce sets the bar for sovereign identity storage options, secures $7.5M

• ‘Trojan Source’ a Threat to All Source Code, Languages

• IT Security News Daily Summary 2021-11-02

• macOS flaw allowed attackers to install persistent, undetectable malware

• The Ultimate Holiday Shopping Guide: Secure Gadgets for Everyone

• Attackers Flaunt Remote Access Credentials, Threaten Supply Chain

• Niantic’s ‘Harry Potter: Wizards Unite’ Augmented Reality Game Shutting Down

• FBI: Ransomware groups tying attacks to ‘significant financial events’

• Facebook is going to shut down Face Recognition system and data it collected

• Lead a Cross-Organization Test Automation Project Fearlessly!

• Password hygiene fortifies defense against cyberattacks

• The Executive Women’s Forum on Information Security, Risk Management & Privacy Elects Three Board Advisers

• ColorWare Now Offering Custom-Painted AirPods 3 Starting at $319

• ‘Squid Game’ token cost Shanghai investor life savings of $28,000 after coin plunged to near zero

• Zero-trust has a branding problem

• Squid Game Crypto Scammers Rips Off Investors for Millions

• Annual Cost of Child Identity Fraud Almost $1Bn

• FBI: Ransomware Actors Use Financial Events to Extort Victims

• Microsoft Expands Security to AWS in Multicloud Push

• 44% of Parents Struggle to Follow Tech Rules They Set for Their Kids

• Vaultree Raises $3.3M for Encryption Solution

• Dragos Launches ServiceNow’s OT Asset Discovery App

• Report: 95% of orgs say they struggle with digital ID management

• Morale plunges at site of VA’s new electronic health record

• Ransomware Gangs Target Corporate Financial Activities

• Secure SSH logins with knockd

• Female-founded Cybersecurity Startup Wabbi Raises Over $2M in Seed Funding

• Webex by Cisco earns adherence to the EU Cloud Code of Conduct

• Linux Foundation adds software supply chain security to LFX

• Ransomware gangs target companies involved in time-sensitive financial events, FBI warns

• PDX Privacy: Building Community Defenses in Difficult Times

• Yahoo Pulls Out Of China, Citing Challenging Restrictions

• Digital transformation delivers more than productivity — it rebuilds public trust, too

• FBI: Ransomware gangs using financial info to target companies

• Building Scalable Security with Cisco Secure Firewall Cloud Native Version 1.1

• New Nexus Forensic Guide

• Lawfare Live: The State of the U.S.-Iraq Relationship

• The Jan. 6 Committee Should Take Its Time With Mark Meadows

• New malware lures fake Chrome update to attack Windows PCs

• EBT for broadband payments?

• CISA promotes election cybersecurity platform debunking misinformation

• FBI: Ransomware Attacks Exploit Financial Business Events

• How a Squid Game Crypto Scam Got Away With Millions

• Hackers Release Israeli LGBTQ Dating Site Details

• IBM Moves Into EDR Market With ReaQta Acquisition

• Phishing and Spam Lures Feature Sports, Aim to Steal Credentials

• Facebook Shuttering Facial Recognition System, Will Delete Data From Over a Billion Users

• Netflix Taking on Apple Arcade With Official Games Launch on Android

• IBM acquires endpoint security company ReaQta, announces expanded XDR suite

• Facebook to Shut Down Face-Recognition System, Delete Data

• #WebSummit2021: Thierry Henry Launches Platform to Tackle Online Bullying

• FTC Updates Safeguards Rule

• Zuckerberg’s Metaverse, and the possible privacy and security concerns

• Android Patches Actively Exploited Zero-Day Kernel Bug

• Signal Working on Improving Anti-Spam Capabilities

• Experts Are Already Concerned About User Privacy In Facebook Metaverse

• Google patches zero-day vulnerability, and others, in Android

• Meet Roela Santos, Honoree of the 2021 (ISC)² Julie Peeler Franz “Do It for The Children” Volunteer Award

• Security does not end with Implementing Controls

• How online retailers can boost sales completion at checkout

• Why access management needs to evolve beyond passwords

• Apple Reduces iPad Production To Bolster iPhone Manufacturing

• Squid Game App or Mobile Malware in Disguise?

• Why cloud bugs don’t get CVEs, and why it’s an issue

• Cyberversity Helps Budding Cyber Pros

• SaaS and Third-Party Risk: Is Your Organization Asking the Hard Questions?

• Check Point CloudGuard is a launch partner of Azure Gateway Load Balancer

• Yubikey Security Key C NFC

• Own an iPhone, Android, laptop or desktop system? You need this $29 security key

• IBM Security to Acquire ReaQta for xDR Push

• Cisco Secure Firewall to Support Microsoft Azure Gateway Load Balancer

• Apple’s Former Design Chief Jony Ive to Speak at WIRED Event Next Week

• Identity Sprawl: survey reveals identities have more than doubled

• Facebook Artificial Intelligence Metaverse is concerning

• DDoS attacks through 1.6 million infected Pink Botnet Malware devices

• Stealthy Trojan that roots Android devices makes its way on app stores

• Cracking the code in the boardroom

• Using Open-Source Intelligence for Mergers and Acquisitions

• Office 365 Phishing Campaign Abuses Stolen Amazon SES Token

• Apple macOS Flaw Allows Kernel-Level Compromise

• Kaspersky Patches Vulnerability That Can Lead to Unbootable System

• The ‘Groove’ Ransomware Gang Was a Hoax

• Google triples bounty for new Linux Kernel exploitation techniques

• Heimdal™ Detection Telemetry Highlights Risk of Successful Cyberattacks Drop Amidst Volumetric Attacks Increase

• BrandPost: The 5 Layers of Effective Endpoint Security

• Huawei To Offload Server Division – Report

• What Is Zero Trust Security?

• Windows 10 and 11 receive enterprise-focused upgrades from Microsoft

• Google Triples Bounty for Linux Kernel Exploitation

• ISE 3.1. Cloud-delivered NAC enables security minded IT

• 50% of internet-facing GitLab installations are still affected by a RCE flaw

• The Booming Underground Market For Bots That Steal Your 2FA Codes

• Trojan Source Hides Invisible Bugs In Source Code

• Pirate Sports Streamer Gets Busted, Pivots To Extortion

• Google Just Tripled Its Bounty For Linux Kernel Bugs

• A Belated Farewell to (and a Liber Amicorum Honoring) Former EU Counterterrorism Coordinator Gilles de Kerchove

• How Microsoft Defender for IoT can secure your IoT devices

• Protect your business with Microsoft Security’s comprehensive protection

• Microsoft brings enterprise security to nonprofits and SMBs

• GPT-3 comes to the enterprise with Microsoft’s Azure OpenAI Service

• At Ignite, Microsoft unveils data analytics, server, and DevOps products for Azure

• Can AI Win the Battle for Cybersecurity Companies?

• HelloKitty Ransomware Adds New Extortion Tactics

• Cring Ransomware Group Stands Out with One More Hit

• Cyberserve Hijacked by BlackShadow Hacker Group to Extort Customers

• Key foundations for protecting your data with Azure confidential computing

• Fortnite To Withdraw From China Amid Gaming Crackdown

• Phishing attacks are harder to spot on your smartphone. That’s why hackers are using them more

• DevSecOps Startup Oxeye Emerges From Stealth With $5.3 Million in Funding

• Apple Says Fourth-Generation iPad Released in 2012 is Now Obsolete

• Mobile phishing threats surged 161% in 2021 – Lookout Energy Threat Report

• Most Inspiring Women in Cyber 2021: Bronwyn Boyle, CISO at Mambu

• Third stimulus checks are still available — and scammers are on the prowl

• What is Twitch?

• DIU test portable private 5G network for responders

• After Security Flaw Found, Missouri Hires Data Breach Group

• How Hackers Are Targeting Cryptocurrency

• Group Policy Objects: Definition, Types and Examples

• Toronto subways hit by ransomware as US lawmakers slam ‘burdensome’ cybersecurity rules

• Marshall University Launches New Cybersecurity Institute

• Google Patches Android Zero-Day Exploited in Targeted Attacks

• Security Pros Know What They Need to Do, But Constrained by Lack of Resources

• Encryption-as-a-Service Provider Vaultree Emerges From Stealth

• 56% of UK Businesses Plan to Hire a CISO

• Twitch Breach Shows the Difficulty of Cloud Security

• Trio of Friends Create Missing macOS Dynamic Wallpaper of Monterey Landscape

• Firefox 94 Brings Updated Homepage on iOS, Battery Saving Mode on Mac

• Facebook’s Meta Name Faces Trademark Issue With PC Maker

• Taking Threat Detection and Response to the Next Level with Open XDR

• Report: 44% of enterprises experience API security issues

• Google just tripled its bounty for Linux kernel bugs. Here’s why

• Location Data Collection Firm Admits Privacy Breach

• YouTube Channels to Set Up 2-Step Verification

• Multiple Vulnerabilities Uncovered In FreeSwitch, Telecoms Stack Software

• Squid Game Popularity Being Used By Online Scammers

• The ‘Trojan Source’ Attack Method Allows the Injection of Vulnerabilities Into Open-Source Code

• Reduce Vendor-Related Risk with BAA: BitSight Assessment Accelerator

• China says it applied to join digital free trade deal days after proposing law against cross-border data flow

• Meet Roela Santos, Honoree of the 2021 (ISC)² Julie Peeler Franz “Do It for The Children” Volunteer Award

• Toronto public transportation system reports ransomware attack as US lawmakers demand investigation into ‘burdensome cybersecurity regulations

• Trojan Source attack method allows hiding flaws in source code

• On Cell Phone Metadata

• Cyberattack Impacts Canadian Province HealthCare Network

• Q3 2021 Cyber Attacks Statistics

• 8 Best Hackintosh Motherboard 2021 – Review and Buying Guide

• Is Apple’s Safari browser the last, best hope for web privacy?

• Remote working up, and so are cyberattacks

• China says it applied to enter digital free trade agreement days after proposing law against cross-border data movement

• BlackMatter Ransomware Operators Develop Custom Data Exfiltration Tool

• Most Computer Code Compilers Vulnerable to Novel Attacks

• How to Use iCloud+’s New Security Features

• Tesla To Open Charging Network To Other EVs

• The Future of Cybersecurity: What Will it Look Like in 2031?

• NeuReality and IBM team up to develop AI inference platforms

• Squid Game cryptocurrency creators pull the rug from under investors, steal millions

• Businesses don’t talk about being victims of cyberattacks. That needs to change

• Trojan Source bugs may lead to extensive supply-chain attacks on source code

• Heimdal™ Security and Techni Team Announce Strategic Partnership

• When containers become a nightmare

• Alert! Hackers Exploiting GitLab Unauthenticated RCE Flaw in the Wild

• Notability Users Frustrated By Switch to Subscription Model Claim Violation of App Store Guidelines

• Quick Hits

• FCW Insider: November 2, 2021

• Google to Pay Hackers $31,337 for Exploiting Patched Linux Kernel Flaws

• 11 cybersecurity buzzwords you should stop using right now

• Cybercriminals flog access to international shipping, logistics giants

• Looking for adding new detection technologies in your security products?

• The Toronto Transit Commission (TTC) hit by a ransomware attack

• Apple Reportedly Using iPad Components in iPhone 13 to Offset Shortages

• Fleeceware Apps Posing As National Postal Sites | Avast

• SOC First Defense Phase – Understanding The Cyber Attack Chain – A Defense Approach with/without SOC

• Active Directory control: How adversaries score even bigger goals via attack paths

• What is wrong with developer security training?

• Advice from a young, female CISO: Key lessons learned

• This is how ransomware hackers are putting pressure on victims

• Facebook Artificial Intelligence Metaverse is concerned

• Cybersecurity threat landscape growing in sophistication, complexity and impact

• 40% of organizations suffered a cloud-based data breach in the past 12 months

• 80% of organizations plan to increase spending on cybersecurity posture management

• CCSP vs. EXIN Cloud Certifications: What are the Differences?

• #ISC2Congress – Diversity: The Key to Cybersecurity’s Future

• Code similarity analysis with r2diaphora

• Top ten worldwide IT industry predictions for 2022 and beyond

• What Are the Key Elements of an Effective Risk Management Process?

• LG to Offer Free Three-Month Apple TV+ Trial on 2016 and Newer Smart TVs

• CISO Interview Series: Cybersecurity at a Global Scale

• China Tightens Control Over Company Data With Transfer Rules

• Facebook gives Kazakhstan government direct access to content reporting system

• Office 365 Phishing Campaign Uses Kaspersky’s Amazon SES Token

• Report: Only 31% of employees are trained against ransomware attacks

• Facebook targets Nicaraguan government for alleged ‘troll farm’ campaign

• CrowdStrike acquires SaaS-based cybersecurity service SecureCircle

• Cyber-Incident at South Carolina School District

• #WebSummit2021: Facebook Whistleblower Denounces Meta Rebrand and Calls for Zuckerberg to Step Down

• EU to Force IoT, Wireless Device Makers to Improve Security

• Senate Republicans seek IG probe of TSA pipeline directives

• IT Security News Daily Summary 2021-11-01

• How AI-Driven Security Analytics Speeds Up Enterprise Defense

• Apple to Start Offering iPhone XR as Loaner Device During Lengthier Repairs

• Apple Discontinues Powerbeats, Beats Solo Pro, and Beats EP

• Zscaler’s 2021 Encrypted Attacks Report Reveals 314% Spike in HTTPS Threats

• CISA and Partners Coordinate on Security, Combatting Misinformation for Election Day

• Cring ransomware continues assault on industrial organizations with aging applications, VPNs

• CrowdStrike to Buy Zero-Trust SaaS Provider

• New ‘Trojan Source’ Method Lets Attackers Hide Vulns in Source Code

• Apple CEO Tim Cook to Speak at The NYT DealBook Summit on November 9

• Your inbox is mine. How attackers could gain continuous access to your email

• Imperva Recognized as a Best Place to Work in Israel

• 5 Questions to Ask Before Choosing a SIEM Platform in 2021 and Beyond

• Free Tool Scans Web Servers for Vulnerability to HTTP Header-Smuggling Attacks

• SonicWall: ‘The Year of Ransomware’ Continues with Unprecedented Late-Summer Surge

• You know how to identify phishing emails – a cybersecurity researcher explains how to trust your instincts to foil the attacks

• Pirate Sports Streamer Gets Busted, Pivots to MLB Extortion

• Types of Firewalls Explained

• Apple Discounts Beats Studio Buds, Beats Flex, and Powerbeats Pro

• Details on discipline emerge as contractor vaccination deadline looms

• California Health Network Reports Data Breach

• Your data is wider and deeper than ever – and so are the threats

• Tens of Thousands Download “AbstractEmu” Android Rooting Malware

• Student Mods an iPhone X to Add a Functional USB-C Port

• NYC launches $157 million plan for broadband equity

• 7 zero-trust misconceptions that every agency should know

• Signal Provides Only Two Timestamps as Response to Grand Jury Subpoena

• Venmo to Reimburse Hacking Victims

• HelloKitty ransomware gang also targets victims with DDoS attacks

• Programming languages: This sneaky trick could allow attackers to hide ‘invisible’ vulnerabilities in code

• Continued uncertainty forces attention on securing relationships in 2022

• Ransomware decryptor roundup: BlackByte, Atom Silo, LockFile, Babuk decryptors released

• Name That Edge Toon: Parting Thoughts

• Users Reporting ‘Memory Leak’ Issues After Updating to macOS Monterey

• Nominations for the 2022 Fed 100 are now being accepted

• Dealing with negative information about your organization in the social media age

• Vulnerability Summary for the Week of October 25, 2021

• Apple Releases tvOS 15.1.1 for Apple TV HD and Apple TV 4K

• Lessons from a real-life ransomware attack

• Trojan Source attack: Code that says one thing to humans tells your compiler something very different, warn academics

• Starting with strategy – A multi-part series on building a robust cybersecurity program

• Trojan Source attack lets hackers exploit source code

• ‘Trojan Source’ Hides Invisible Bugs in Source Code

• 10 ways ransomware attackers pressure you to pay the ransom

• Atlanta Man Charged for Role in BEC Fraud Scheme

• Tips for DFIR Analysts, pt IV

• Vulnerability Summary for the Week of October 25, 2021

• Most Inspiring Women in Cyber Awards

• Heimdal™ Reverses New GLS Credit Card Fraud Campaign and Potentially Has Picture of Head Attacker

• Multilingual Cybersecurity Awareness Training adapted for your needs

• OptinMonster Plugin Bug Potentially Risked Over A Million WordPress Websites

• Cross-Site Scripting Vulnerability Riddled NextScripts WordPress Plugin

• Chrome Zero-Day Mayhem Continues – Google Fixed Two More Flaws

• HashThemes Demo Importer Plugin Bug Could Allow Wiping WordPress Sites

• Apple Fixes Critical Bugs, Including A Zero-Day, With Latest iOS 14.8.1

• Hiding Vulnerabilities in Source Code

• Conti Ransomware Gang targets Jeweler website and Customers

• Enterprises with subsidiaries more prone to cyberattacks, study says

• A Journey in Organizational Resilience: Security by Design

• ‘Trojan Source’ Attack Abuses Unicode to Inject Vulnerabilities Into Code

• Squid Game Cryptocurrency exit scam! Operators made $2.1 Million

• Man Accused of Streaming Illegal Re-broadcasts of MLB, NBA, and Others

• Microsoft Found A Way To Evade SIP On macOS

• Signal Unveils How Far US Law Enforcement Will Go To Get Information About People

• Android Has Its Head In The Sand With AbstractEmu Malware

• Apple’s Extended Return Policy Now in Effect for 2021 Holiday Shopping Season

• The Pros and Cons of Mandating Reporting From Ransomware Victims

• Snake Malware Used in Multiple Campaigns

• All About Ring’s New Virtual Security Guard

• This sneaky trick could allow attackers to hide ‘invisible’ vulnerabilities in code

• Adopt 5 best practices for hybrid workplace model security

• Celebrity jewelry house Graff falls victim to ransomware

• 10 Free and Best OSINT Tools 2021

• Hackers Threaten to Out Israeli LGBTQ Dating Site Users

• Deals: Amazon’s Early Black Friday Sale Has All-Time Low Prices on AirPods Pro With MagSafe, 21.5-Inch iMac, and More

• New HomePod Mini Colors Now Available to Order and for Apple Store Pickup

• Deals: Apple’s 13-Inch MacBook Pro Gets Record Low Price Cuts on Amazon (Up to $249 Off)

• Beats Fit Pro Debut With a Fitness Focus, Active Noise Cancellation, and a $200 Price Tag

• 5 Things Your Small Business Cybersecurity Plan Must Cover

• Cybersecurity Awareness Month: Security Experts Reflect on Safety

• Cybersecurity M&A Roundup: 41 Deals Announced in October 2021

• Understanding the Human Communications Attack Surface

• How to hack Wincor Cineo ATMs to bypass black-box attack protections and withdraw cash

• iOS 15, Windows 10 and Google Chrome Hacked During the Tianfu Cup Contest

• What’s New in the OWASP Top 10 2021?

• Here’s a First Real-World Look at the New HomePod Mini Colors

• Android has its head in the sand with AbstractEmu malware rooting phones

• Suse acquires NeuVector to bolster Kubernetes security

• Iran Suspects Israel and US Behind Fuel Cyber Attack

• Critical Flaws Uncovered in Pentaho Business Analytics Software

• Pink Botnet infected over 1.6 Million Devices, it is one of the largest botnet ever seen

• Apple’s Privacy Features Have Cost Social Media Companies Nearly $10 Billion in Revenue

• iPhones and Apple Watches Could Detect a Car Crash and Auto-Dial 911 Starting Next Year

• Minecraft Alt Lists Used by Chaos Ransomware

• (ISC)² CEO Clar Rosso Receives Cyber Futurist Executive Award

• When Pwned Passwords Bloom!

• Securing SaaS Apps — CASB vs. SSPM

• Spam and phishing in Q3 2021

• A week in security (Oct 25 – Oct 31)

• Air Safety Regulators Voice ‘Deep Concern’ Over 5G Interference

• Tech Giants Defend Record Against Online Scams

• Microsoft: This macOS flaw could have let attackers install undetectable malware

• Data transfers between the EU and the US: Still unclear on what you’re supposed to do? Here’s an explainer

• Google Introduces New Open-Source Data Privacy Protocol

• New ‘Trojan Source’ Technique Lets Hackers Hide Vulnerabilities in Source Code

• Hive Ransomware Now Encrypts Linux and FreeBSD Operating Systems

• Conti Group Leak Celebs’ Data After Ransom Attack on Jeweller

• BlackMatter Group Speeds Up Data Theft with New Tool

• The Demise of White House Market Will Shake Up the Dark Web

• US Security Committee Reviews Tencent’s £919m Sumo Takeover

• Electric Car Battery Prices Rise As Lithium Costs Soar

• Balikbayan Foxes group spoofs Philippine gov to spread RATs

• Review: Anker’s Soundcore Frames Offer Bluetooth Audio Eyewear in a Range of Styles

• Some Older Macs Reportedly Bricked After Installing macOS Monterey

• Kuo: Apple’s 2022 AR/VR Headset to Support Faster Wi-Fi 6E

• China Personal Information Protection Law starts from November 1st, 2021

• Avast And Diffbot Collaboration | Avast

• From Thanos to Prometheus: When Ransomware Encryption Goes Wrong

• Euro Police Swoop on 12 Suspected Ransomware Gang Members

• Biden’s cybersecurity executive order, a progress report

• Facebook Says Instagram Makes People ‘Feel Better’

• Apple Expands iPhone Sales In Spite Of Shortages

• Microsoft warns of an increase in password spraying attacks

• Researchers Uncover ‘Pink’ Botnet Malware That Infected Over 1.6 Million Devices

• Trying to register your antivirus in Windows Security Center?

• Location Data Firm Addresses Privacy Breach Concerns

• Snake Infostealer Malware Steal Credentials, Take Screenshot From Over 50 Apps

• Avoiding the costly ESU cycle: Lessons learned from Windows 7 end-of-life

• Cybersecurity can drive business transformation instead of holding it back

• The antidote to brand impersonation attacks is awareness

• Signal unveils how far US law enforcement will go to get information about people

• Infosec products of the month: October 2021

• Stand up your SOC with Crystal Eye XDR: Lift your security monitoring and incident response maturity

• Most Important Network Penetration Testing Checklist

• Financial services need to prioritize API security to protect their customers

• ‘Trojan Source’ Bug Threatens the Security of All Code

• Confidential computing market to reach $54 billion in 2026

• Nation States Will Weaponize Social and Recruit Bad Guys with Benefits in 2022

• OT Security: Risks, Challenges and Securing your Environment

• Imperva Snapshot delivers cloud data security posture assessment for Amazon RDS managed databases

• China’s personal data protection law kicks in today

• None of NSW’s lead cluster agencies have implemented all Essential Eight controls

• IT Security News Monthly Summary – November

• IT Security News Weekly Summary – Week 43

• IT Security News Daily Summary 2021-10-31

• Medical digital twins secure COVID-19 data

• Report: At least 25% of consumers use biometrics for online security

• Iranian Black Shadow hacking group breached Israeli Internet hosting firm

• The Taliban Haven’t Changed, But U.S. Policy Must

• Minecraft Japanese gamers hit by Chaos ransomware using alt lists as lure

• Two major bitcoin mining companies are battling it out in a Texas town of 5,600 people

• Graff multinational jeweller hit by Conti gang. Data of its rich clients are at risk, including Trump and Beckham

• Week in review: Popular npm package hijacked, zero trust security key tenets, wildcard certificate risks

• Security Affairs newsletter Round 338

• Penetration testing

• Debunking: that Jones Alfa-Trump report

• Report: 55% of execs say that SolarWinds hack hasn’t affected software purchases

• CIS Mobile Opens Mobile Integration Center in Northern Virginia HQ

Generated on 2021-11-07 23:59:22.565140