IT Security News Weekly Summary – Week 45

• IT Security News Daily Summary 2021-11-14

• Updated: Hundreds of thousands of fake warnings of cyberattacks sent from a hacked FBI email server

• Digital Transformation Security: Guidelines for Success

• Why The Integration of Netops And Secops Is Here To Stay

• Solving Identity Theft Problems: 5 Actionable Tips

• How to Get Out of a Scam

• Upcoming Speaking Engagements

• FTC shares guidance for small businesses to prevent ransomware attacks

• Report: 80% of fintech execs worry about authentication security tools

• Canadian Foreign Intelligence and the Future of Canada-U.S. Relations

• How to fend off cybersecurity burnout

• Campus testbeds pilot smart city solutions to climate threats

• 3D Printing and Engineering; an Overview

• Connecting Red Hat Single Sign-on on Openshift to an External Database

• Threat Report Portugal: Q3 2021

• Week in review: Critical RCE in Palo Alto Networks firewalls, how to select a DRaaS solution

• Security Affairs newsletter Round 340

• Penetration testing

• Multiple Flaws in Citrix ADC, Gateway, and SD-WAN Let Attackers Trigger DoS Condition

• Is Windows 11 Safer Than Windows 10?

• Fuzz in Your Language, Fuzzer, or Architecture

• Bitcoin’s biggest upgrade in four years just happened – here’s what changes

• We Heard You: Updates to the (ISC)² Ethics Questions

• Weekly Update 269

• Report: 99% of federal security pros want the government to increase data protection

• Ransomware attacks are getting more complex and even harder to prevent

• NINJIO appoints Brett Wahlin to Board of Directors

• Carrier strengthens cybersecurity program with CVE Numbering Authority

• Hoax Email Blast Abused Poor Coding in FBI Website

• Hundreds of thousands of fake warnings of cyberattacks sent from a hacked FBI email server

• IT Security News Daily Summary 2021-11-13

• DHS warning about hackers in your network? Don’t panic!

• GravityRAT returns disguised as an end-to-end encrypted chat app

• IoT Security Concerns – How Secure Is the Hybrid Workforce?

• AutoPoC – Validating the Lack of Validation in PoCs

• Inaugural INTENT Summit Brings Together the Global Security Research Community

• S-RM: Cyber Budgets Rose Less Than 1% During the Pandemic, Despite 61% of Enterprises Having Experienced a Serious Incident

• (ISC)² Chapter Creates Space for Entry-Level Members and Professional Connections

• Some Thoughts on Teaching Hacking

• Report: Multiple data breaches common in past year

• Someone Snuck a Card Skimmer Into Costco to Nab Shopper Data

• Top Stories: Tim Cook on Sideloading, iOS 15.2 Features, Apple Silicon Roadmap, and More

• Intel and AMD address high severity vulnerabilities in products and drivers

• New evolving Abcbot DDoS botnet targets Linux systems

• Void Balaur – Hacker-for-Hire Group Stealing Emails & Sensitive Data From More Than 3,500 Targets

• Void Balaur – Hacker-for-Hire Group Stealing Emails & Sensitive Data From More 0Than 3,500 Targets

• Using Cloud to Live Test Malware Defenses

• “King of Fraud” Gets Ten Years

• (ISC)² Cybersecurity Entry-Level Certification Exam Topics Announced

• The Best Wi-Fi 6 Routers Secure and Fast Enough for Business

• OPM updates decade-old telework guide

• Week in security with Tony Anscombe

• Threat from Organized Cybercrime Syndicates Is Rising

• Retail giant Costco discloses data breach, payment card data exposed

• Join Us for the Student Contributor Program Information Session!

• CWS partners with Fugue to close security gaps with end-to-end policy as code enforcement

• Report: 91% of all bait attacks conducted over Gmail

• Socure raises $450M to strengthen its online identity verification solutions

• A multi-stage PowerShell based attack targets Kazakhstan

• Costco Confirms: A Data Skimmer’s Been Ripping Off Customers

• Emerging Security Tools Tackle GraphQL Security

• Ankura Launches Brooklyn Cyber Center

• BT to Deploy ‘Epidemiological AI’ Based on the Spread of Viruses in Humans to Combat Cyberattacks

• MSPAlliance Leadership Council Forms Vendor Council to Address Managed Services Supply Chain Risk

• Paul Mountford joins Protegrity as CEO

• Security company faces backlash for waiting 12 months to disclose Palo Alto 0-day

• Security researcher: Flaw in Apple Pay, Samsung Pay and Google Pay makes fraud easy for thieves

• Save an extra 15% off training in ethical hacking with this pre-Black Friday sale deal

• IT Security News Daily Summary 2021-11-12

• OWASP Top Ten and Software Composition Analysis (SCA)

• Election officials have another year to fight disinformation

• CISA warns of equipment vulnerabilities from multiple vendors

• RHEL 8.5 delivers key container improvements

• Open Source Project Aims to Detect Living-Off-the-Land Attacks

• HTML Smuggling technique used in phishing and malspam campaigns

• How to Use Apple’s Legacy Contact Feature to Let Your Family Access Your Photos and Data After You Die

• Apple’s 2022 iMac Pro: Everything We Know

• EFF to Supreme Court: Warrantless 24-Hour Video Surveillance Outside Homes Violates Fourth Amendment

• The ICS/OT Landscape: How CrowdStrike Supports Through Partnerships With Rockwell and Others

• Critical security controls for effective cyber defense strategies

• Google wants a place on the next big DOD cloud contract

• Virginia builds AI-, RPA-as-a-service offering for state agencies

• A chunk of Chinese satellite almost hit the International Space Station. They dodged it – but the space junk problem is getting worse

• Follow the Leaders: A Blueprint for Software Security Success

• AI Weekly: Workplace surveillance algorithms need to be regulated before it’s too late

• Top 10 Cybersecurity Best Practices to Combat Ransomware

• Intel, AMD Patch High Severity Security Flaws

• UK Funds Project to Teach Autistic Children Cybersecurity Skills

• Deals: Get One Month of Disney+ for $1.99 This Weekend Only (New and Returning Subscribers)

• Brydge’s MAX+ Keyboard for 11-Inch iPad Pro Now Available

• Northern Triangle Migration Root Causes Strategy Requires the Right Blend of Sticks and Carrots

• Ransomware experts question massive Pysa/Mespinoza victim dump

• Windows 10 Privilege-Escalation Zero-Day Gets an Unofficial Fix

• Spanish Brewery “Paralyzed” by Cyber-Attack

• Apple Has Listened And Will Retract Some Harmful Phone-Scanning

• How AI fights fraud in the telecom industry

• Pay-per-click fraud is costing top tech companies, and you, hundreds of millions of dollars

• MacRumors Giveaway: Win Custom Painted AirPods 3 From ColorWare

• ChaosDB: Infosec bods could pull anyone’s plaintext Azure Cosmos DB keys at will from Microsoft admin tools

• Which countries are most (and least) at risk for cybercrime?

• Report: 83% of U.S. orgs up their cybersecurity efforts for the new world of remote work

• Mac Zero Day Targets Apple Devices in Hong Kong

• BlueHat is Back!

• AMD reveals an Epyc 50 flaws – 23 of them rated High severity. Intel has 25 problems, too

• BotenaGo botnet malware targeting millions of IoT devices

• Google warns hackers used macOS zero-day flaw, could capture keystrokes, screengrabs

• Costco customers complain of fraudulent charges before company confirms card skimming attack

• The mobile VPNs of 2021 that you need to try

• Zoom Patches High-Risk Flaws in Meeting Connector, Keybase Client

• ‘BotenaGo’ Malware Targets Routers, IoT Devices with Over 30 Exploits

• Samba update patches plaintext passwork plundering problem

• Aruba Central breach exposed customer data

• MacOS Zero-Day Used against Hong Kong Activists

• Remembering Aaron Swartz: Aaron Swartz Day 2021

• The importance of backing up

• SASE and Zero Trust: What’s the Connection?

• Apple Arcade Launches Two New Games and Previews More Games Coming Soon

• Largest iPhone Supplier Says Chip Shortage to Drag Into Second Half of 2022

• iOS 15.2 Beta 2 Adds Macro Mode Toggle in Camera App on iPhone 13 Pro

• Researcher Shows Windows Flaw More Serious After Microsoft Releases Incomplete Patch

• Alan Paller, Founder Of The SANS Institute, Passes Away At 76

• Booking.com Was Reportedly Hacked By A US Intel Agency But Never Told Customers

• Analyzing A Watering Hole Campaign Using macOS Exploits

• Back-To-Back PlayStation 5 Hacks Hit On The Same Day

• As Facebook Joins the Race to the Metaverse, Chinese Tech Companies Face Hurdles

• Details about Pentagon’s Zero Trust Office

• HPE Says Customer Data Compromised in Aruba Data Breach

• VMware Releases Security Update for Tanzu Application Service for VMs

• Hackers Increasingly Using HTML Smuggling in Malware and Phishing Attacks

• macOS Zero-Day exploited in watering hole attacks on users in Hong Kong

• Email Filters Duped by Tiny Font Size in BEC Phishing Attacks

• 7 Common Digital Behaviors that Put Your Family’s Privacy at Risk

• Europol: Ransomware Gangs Focusing on High Profile Targets

• CISA Releases Advisory on Vulnerabilities in Multiple Data Distribution Service Implementations 

• VMware Releases Security Update for Tanzu Application Service for VMs

• MacOS Zero-Day Used against Hong-Kong Activists

• The Business of Fraud: Botnet Malware Dissemination

• Deals: Apple’s AirPods Pro With MagSafe Return to $189.99 ($59 Off)

• Magniber Ransomware Shifts Attention Now to Internet Explorer Vulnerabilities

• How to Hire — and Retain — Effective Threat Hunters

• Palo Alto Networks Release Security Updates for PAN-OS

• CISA Releases Advisory on Vulnerabilities in Multiple Data Distribution Service Implementations 

• Most Inspiring Women in Cyber 2021: Anne Woodley, Security Specialist at Microsoft

• Google, Adobe Announce New Open Source Security Tools

• Palo Alto Networks Release Security Updates for PAN-OS

• President Biden Tightens Restrictions On Huawei, ZTE

• Non-Traditional Cybersecurity Career Paths: How to Find Your Own Way

• The BotenaGo Botnet Targets IoT Devices

• Millions of Routers, IoT Devices at Risk from New Open-Source Malware

• Hackers Use Gmail Accounts to Execute Baiting Attacks

• Rise In Cyberattacks As Taiwan Government Faces Over 5 Million Cyberattacks Daily

• QAKBOT Loader Returns With New Techniques and Tools

• SunWater Data Breach: the Queensland’s Water Supplier Targeted by Hackers for Nine Months

• Could Apple’s new MacBooks signal a change in direction on security?

• Damage caused by hacking in the legal profession

• Tim Cook Says No Plans To Accept Crypto Payments

• Wikileaks Julian Assange Granted Permission To Marry In Prison

• Building a Modern Mentorship in the Cybersecurity Industry

• Azure Security must enable change to effectively support remote employees: Part 3

• This sneaky trick lets attackers smuggle malware onto your network

• Google warns of hackers using macOS zero-day flaw to capture keystrokes, screengrabs

• macOS Zero-Day Exploited to Deliver Malware to Users in Hong Kong

• Vulnerable Web Applications Prevalent in EU Pharma Companies

• In Appreciation: Alan Paller

• The Sneaky Way TikTok Is Connecting You to Real-Life Friends

• iPhone X With USB-C Port Sells For $86,001 on eBay

• iOS 15.2 Beta: How to Use Find My to Locate Items That Can Track You

• Critical RCE in Palo Alto Networks (PAN) firewalls revealed, patch ASAP! (CVE-2021-3064)

• 25 Things You Didn’t Know Siri Can Do

• How To Obfuscate Personal Data in Practice

• How to Use Falcon Spotlight’s ExPRT.AI

• Calling all privacy advocates: join PICCASO’s first event to promote a culture of privacy

• Interpol Closes in on Global BEC Gang

• Major Water Supplier Suffers Nine-Month Long Breach

• What Is DMARC?

• REvil ransomware explained: A widespread extortion operation

• Top cybersecurity M&A deals for 2021

• How we broke the cloud with two lines of code: the full story of ChaosDB

• Rumor: AirPods Pro 2 to Launch in Third Quarter of 2022

• Number of Malicious Shopping Websites Jumps 178% ahead of November e-Shopping Holidays, Breaking Records

• FCW Insider: November 12, 2021

• Pentagon Set to Open Zero Trust Office in December

• Expert Reaction On Diamond Comic Distributor Ransomware Attack

• Google Supreme Court: Our Private Data Is Preyed Upon Everytime We Use The Internet

• Gender Role Lessons From The Office | Avast

• NCOA Q&A | Avast

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Robinhood Announces Data Security Incident | Avast

• 14 New Vulnerabilities Uncovered In Linux Powered Embedded Devices

• Abcbot — A New Evolving Wormable Botnet Malware Targeting Linux

• BotenaGo botnet targets millions of IoT devices using 33 exploits

• New infosec products of the week: November 12, 2021

• New CEO of the company that produced Pegasus spying Malware quits

• Leveraging social media background checks to balance friction and risk

• Sophos finds new malware being distributed through email

• AMD reveals an EPYC 50 flaws – 23 of them rated High severity. Intel has 25 problems, too

• Hackers Exploit macOS Zero-Day to Hack Hong Kong Users with new Implant

• Lack of resources and skills continues to challenge PKI deployment

• As technology pervades, CIOs’ influence on business strategy grows

• Security standards should be strengthened outside the federal government too

• New BazarBackdoor Attack Discovered

• Industrial cybersecurity market to reach $22.3 billion by 2026

• There’s no Huawei back now – Biden signs Act that forbids US buyers acquiring kit on naughty list

• Recommendations for Fulfilling the Potentials of Cyber Insurance

• Cyware CyTAXII enables developers to ingest and share threat intelligence

• AT&T SASE with Cisco protects enterprises with SD-WAN technology and security capabilities

• DTEX InTERCEPT for Behavioral Data Loss Prevention delivers risk-based data analytics

• How to Manage Vulnerabilities on Your Home Network

• MetTel launches global cloud network to extend its secure networking services

• Extracting Server Certificates Made Easy With Certificate Ripper

• When the alarms go off: 10 key steps to take after a data breach

• Report: 90% of IT execs are embracing SASE migrations

• SecurityGate.io partners with Rokster to help industrial companies bridge the OT security skills gap

• NETSCOUT integrates its OCI technology with AWS Security Hub to extend cyberthreat visibility

• How to Securely Access Remote Desktop?

• Lacework acquires Soluble to strengthen its data-driven cloud security platform

• Lockheed Martin and Keysight advance 5G solutions for aerospace and defense communications

• ‘Lyceum’ Threat Group Broadens Focus to ISPs

• IntelePeer appoints Brian Gilman as CMO

• Christine Alpers joins Appfire as General Counsel

• Philippines gov takes down passport application website amid privacy leak fears

• Missouri apologizes to 600k teachers who had SSNs and private info exposed

• US President Biden signs law to ban Huawei and ZTE from receiving FCC licences

• Google Open Sources ClusterFuzzLite

• Exterro hires Jenny Hamilton as General Counsel

• Speed bumps for VA’s new scheduling system

• Tools to conduct security chaos engineering tests

• IT Security News Daily Summary 2021-11-11

• VP Harris announces US support for international cybersecurity partnership in Paris

• Brazil advances efforts to tackle electronic fraud

• How Do I Know It’s Time to Consider a SASE Migration?

• Cybersecurity education company touts 3 to 6 month program for unemployed veterans

• Indonesia, UK Discuss Future Technology and Cybersecurity

• Apple Store App for iOS Adds Saved Item Lists for Easy Sharing With Product Specialists

• Cybersecurity education company touts 3-6 month program for unemployed veterans

• Invest in These 3 Key Security Technologies to Fight Ransomware

• Learn how to become an ethical hacker for only $21 during this pre-Black Friday sale

• CyberVetsUSA Pilots Nebraska Project

• New Universal Prompt Raises the Bar for Fast, Easy Multi-Factor Authentication

• Critical WordPress plugin vulnerability allowed wiping databases

• Enlisting Employees to Fight Cyber Threats

• Why the Justice Department is Taking So Long to Indict Steve Bannon

• Dutch newspaper accuses US spy agencies of orchestrating 2016 Booking.com breach

• Google Advisory on Android Security Updates

• Vodafone Expands CityFibre Partnership To Continue FTTP Push

• Critical WordPress plugin vulnerability allowed attackers to wipe database

• Back-to-Back PlayStation 5 Hacks Hit on the Same Day

• CEO of Blacklisted Spyware Firm Quits

• Congress Mulls Ban on Big Ransom Payouts Unless Victims Get Official Say-So

• Cyber-Mercenary Group Void Balaur Attacks High-Profile Targets for Cash

• Designing a Proactive Ransomware Playbook for Today’s Threat Landscape

• DDoS Attacks Skyrocket, Kaspersky Researchers Say

• Apple’s Arguments Against Sideloading on iOS: All Your Questions Answered

• Apple to Roll Out 3D Maps With Custom-Designed Landmarks in Washington, D.C.

• Lawmakers Choose the Wrong Path, Again, With New Anti-Algorithm Bill

• The Public Should Know Who Profits From Patent Troll Lawsuits

• Research: Supply chain and COVID-19 challenges forces companies to shift their security strategies

• Citrix DDOS bug leaves networks vulnerable

• Facebook To Finally Remove Ad Targeting Based On Race, Religion, Sexual Orientation, And More

• Cloud Attack Analysis Unearths Lessons for Security Pros

• What Happens If Time Gets Hacked

• Threat actors hacked a server of a Queensland water supplier and remained undetected for 9 months

• The Wild West of the Nascent Cyber Insurance Industry

• S3 Ep58: Faces on Facebook, scams that pose as complaints, and a Kaseya bust [Podcast]

• Hackers Targeted Hong Kong Apple Devices in Widespread Attack

• Deals: B&H Photo Discounts Previous Generation 32GB Apple TV 4K to $119.95 ($59 Off)

• How to assess and improve the security culture of your business

• How to Live a Digital Life Free of Spyware

• When ‘Good Enough’ Security Just Isn’t Enough

• VA releases new cybersecurity strategy in honor of Veterans Day

• Congress Mulls Ban on Big Ransom Payouts

• If even tech leaders struggle with email encryption, are we all doomed?

• Insider IP Theft Is Surging — and Most Can’t Stop It

• Third-Party Software Risks Grow, but So Do Solutions

• Researchers Uncover Hacker-for-Hire Group That’s Active Since 2015

• ActMobile (unverified) – 1,583,193 breached accounts

• CEO-designate of Pegasus spyware’s NSO Group resigns after US sanctions

• Google debuts ClusterFuzzLite security tool for CI, CD workflows

• #BHEU: 5 Ways to Approach Ransomware Negotiations

• DoJ sentenced to 10 years Russian ‘King of Fraud’ behind the fraud scheme 3ve

• Best Remote Desktop Software for Mac

• HTML smuggling surges: Highly evasive loader technique increasingly used in banking malware, targeted attacks

• Murder-for-hire, money laundering, and more: How organised criminals work online

• Palo Alto Networks patches 9.8 severity CVE in popular GlobalProtect product

• Didi App Nears Relaunch In China – Report

• Watch out as new PhoneSpy spyware hits Android devices

• New CEO-designate of Pegasus spyware maker NSO Group resigns after US sanctions

• This pre-Black Friday sale lets you save an extra 15% off cybersecurity certification training courses

• How to easily transfer files between computers with croc

• Apple’s Increasing Focus on Health Seen in Recent Hiring Trends, New Board Member

• The Chatter Podcast Debut: From CIA to Hollywood, with Joe Weisberg

• AT&T Alien Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits

• Ransomware Attack on MediaMarkt

• How cybercriminals use bait attacks to gather info about their intended victims

• Shining a light on the dark web

• Apple Releases Security Update for iCloud for Windows 13

• VMware Releases Security Advisory

• Wake up and smell the Javascript – website supply chain puts online retail at risk

• YouTube To Hide Dislike Counts On Videos

• U.S. Gov Announces Support for ‘Paris Call’ Cybersecurity Effort

• Apple Releases Security Update for iCloud for Windows 13

• VMware Releases Security Advisory

• This Backpack Will Support Apple’s ‘Find My’ Location Tracking Without an AirTag

• Deals: MagSafe Duo Charger Drops to Record Low Price of $89.99 ($39 Off)

• VoIP Provider Telnyx Targeted with DDoS Attacks

• Veterans Day & Remembrance Day 2021

• Roundup: Government Data Security Threats in 2021

• Ransomware gangs are using these ‘ruthless’ tactics as they aim for bigger payouts

• Massive Zero-Day Hole Found In Palo Alto Security Appliances

• USA Finally Signs Paris Call For Trust And Security In Cyberspace

• Tiny Font Size Fools Email Filters In BEC Phishing

• Most Inspiring Women in Cyber 2021: Sema Yuce, Director at Truth ISC Technology and Security Consultancy LTD

• Hackers Breached Aruba Central

• TrickBot and Shatak: the New Partnership in the Conti Ransomware Saga

• CCSP vs. Symantec Certified Cloud Credentials: How Do They Compare?

• NSO Incoming CEO Quits, Citing US Blacklist – Report

• DOD awards $32.6 million in spectrum OTAs

• Ransomware gangs are now using ‘ruthless’ tactics as they aim for bigger payouts

• Tiny Font Size Fools Email Filters in BEC Phishing

• Iranian threat actors attempt to buy stolen data of US organizations, FBI warns

• U.S. Charges Ukrainian For Kaseya Attack; Seizes $6mill In Ransom $

• Millions Of Devices Susceptible To Critical Nucleus Net Vulnerabilities

• REvil Gang Arrests, Information Security Experts Reactions

• 80% Of Business Have Been Attacked By Ransomware

• Europe’s top 10 pharma manufacturers all have vulnerable web applications

• CISA directive requires vulnerability fixes in 6 months

• Is reform enough for the U.S. to keep its technological edge?

• Ransomware Attack Hits UK Fertility Clinic

• How to Define Your Cyber Risk Appetite & Hold Vendors to the Threshold

• Amazon-Backed Rivian Enjoys Successful Nasdaq IPO

• BazarBackdoor now abuses Windows 10 apps feature in ‘call me back’ attack

• Nearly 100 TCP/IP Stack Vulnerabilities Found During 18-Month Research Project

• TrickBot Operators Partner with Shathak Attackers for Conti Ransomware

• Hackers-for-hire from Void Balaur Are Selling Stolen Mails and Personal Information

• Is Apple Planning to Lock Down the Mac? – Intego Mac Podcast Episode 213

• TeamTNT Upgrades Arsenal, Refines Focus on Kubernetes and GPU Environments

• Contrast Security Raises $150 Million at ‘Unicorn’ Valuation

• #BHEU: Can Time Be Hacked?

• Over 150 arrests made in 3-day operation against organised property crime

• Advice for Personal Digital Security

• Epic Games CEO to Speak in South Korea Next Week Against the App Store Amid Ongoing Tensions With Apple

• MasterFred Malware Poses a Threat to Netflix, Instagram, and Twitter Users

• Iranian Cybercriminals on the Lookout for Data Stolen from US Companies, FBI Says

• ClusterFuzzLite: Continuous fuzzing for all

• TrickBot Operators Partner with Shatak Attackers for Conti Ransomware

• AT&T Cybersecurity Delivers New Managed SASE Solution to Connect and Protect the Multi-Cloud, Hybrid Enterprise

• Electric Vehicle Charging: The Next Cyberattack Frontier

• New Magecart group uses an e-Skimmer that avoids VMs and sandboxes

• Attivo Networks – One Year Later

• Ransomware attack disrupted store operations in the Netherlands and Germany

• Highlights of Recent Mac Malware: OSX/WizardUpdate and OSX/Bundlore

• Elon Musk Sells $5bn Of Tesla Stock After Twitter Poll

• Digital Identity Solution For Mom | Avast

• Avast One Firewall | Avast

• October 2021’s Most Wanted Malware: Trickbot Takes Top Spot for Fifth Time

• Researchers Uncover Prolific Hacker-for-Hire Group

• Don’t get held to ransom – cause, prevention, recovery

• 5 IT risk assessment frameworks compared

• The 3 biggest challenges of SASE in hybrid cloud environments

• Flaws in the Nucleus embedded TCP/IP stack puts critical systems at risk

• Scam PACs Allegedly Stole $3.5m from Trump Voters

• Navigating The Threat Landscape 2021 – From Ransomware to Botnets

• US Firms Hit with Largest Ransoms Globally

• IOCTA 2021 unveils the most recent cyber threat (r)evolutions

• CVE-2021-3064: Easily exploitable RCE flaw in Palo Alto Networks in GlobalProtect VPN

• iOS 15.2 Beta: How to Use the Hide My Email Feature in the Mail App

• The top 5 cybersecurity threats to OT security

• Romanian Authorities Arrested Two REvil Ransomware RaaS Family Affiliates

• EU pharmaceutical giants run old, vulnerable apps and fail to use encryption in login forms

• Malicious Chrome extensions are bad. But what about nice ones that can be hijacked? This new tool spots them

• Do you know what your supply chain is and if it is secure?

• Iran’s Lyceum Hackers Target Telecoms, ISPs in Israel, Saudi Arabia, and Africa

• GFC & Avast Foundation Launch Spark Fund | Avast

• Palo Alto Warns of Zero-Day Bug in Firewalls Using GlobalProtect Portal VPN

• Sophisticated Android spyware PhoneSpy infected thousands of Korean phones

• Ransomware: The ones that got away (with it)

• The world’s worst kept secret and the truth behind passwordless technology

• Humanizing hackers: Entering the minds of those behind the attacks

• Eliminate cyber friction with smarter technology

• Survey claims over 35 industries worst hit by Ransomware last year

• Valueless Degrees and Death of Jobs says Tesla Chief Elon Musk

• USA signs internet freedom and no-hack pact it’s ignored since 2018

• DDoS attacks were a more serious threat in Q3 2021 than ever before

• Phishing attacks grow 31.5% over 2020, social media attacks continue to climb

• The Threat of Insecure Interfaces and APIs

• Meet Roela Santos, Honoree of the 2021 (ISC)² Julie Peeler Franz “Do It for The Children” Volunteer Award

• Stories from the SOC – Powershell, Proxyshell, Conti TTPs OH MY!

• Dallas Police Surveillance Footage Leaked

• Are you less capable of innovation or more vulnerable to threats than you thought?

• As the holiday season approaches, threats to supply chain, e-commerce and travel soar

• New Zealand spooks say satellite snooping is obsolete – better intel is found elsewhere

• What You Need to Remember When Choosing a Managed Service Provider (MSP)

• Invest in Cyber Awareness to Prevent Attacks

• Huntsman Security SmartCheck for Ransomware strengthens security risk management

• MOXFIVE expand its platform with DFIR services to improve incident response for organizations

• Data Theorem Active Protection secures modern application stacks

• Thales CipherTrust Intelligent Protection classifies data based on sensitivity and vulnerability

• WALLIX Bastion 9 protects and monitors privileged accounts

• CyberRes delivers on product strategy for DevSecOps with CI/CD integrations

• Opsview releases two products to help IT operations teams uncover the root causes of alerts

• Dynatrace adds security gates to automatically detect and manage vulnerabilities in real time

• iStorage datAshur SD offers data storage solution to securely share and scale unlimited encrypted data

• Arctic Wolf expands content and program offerings for organizations worldwide

• Google scores big win as court blocks iPhone tracking lawsuit

• New Application Security Toolkit Uncovers Dependency Confusion Attacks

• ISG and Shift Technology deliver fraud mitigation services to customers

• Menta partners with Secure-IC to deliver a secure solution for sensitive applications

• Tanium collaborates with Deep Instinct to strengthen endpoint security for organizations

• Edgecore Networks partners with Spirent to manage post-deployment operational issues

• Contrast Security raises $150M to advance application security

• DomainTools acquires Farsight Security to enhance its threat intelligence capabilities

• ZEDEDA partners with PTC to scale industrial IoT solution deployments at the edge

• Audrey Zhao joins CloudBees as CFO

• Avint names Lisa Starkweather as COO

• Could Oracle Linux be the Logical Enterprise-Ready CentOS Replacement?>

• The struggle to modernize state UI systems

• CISA chief tees up cyber directives for the water and chemical sectors

• Hacker-for-Hire Group Spied on More Than 3,500 Targets in 18 Months

• Apple’s Messages Communication Safety Explained: What You Need to Know

• Paddle achieves SOC 2 certification to meet the highest data security standards

• AttackIQ appoints Ken Schock as CRO

• Ninth Circuit: Surveillance Company Not Immune from International Lawsuit

• Utah legislature awards two universities with $5 million for cybersecurity and tech programs

• VMware discloses a severe flaw in vCenter Server that has yet to fix

• Microsoft Patch Tuesday Patch Roundup for November

• IT Security News Daily Summary 2021-11-10

• Frequency analysis on hundreds of billions of reports at Report URI: Count-Min Sketch

• Report: 58M Americans were victims of fraud in the past year

• Disney+ Has 118.1 Million Subscribers Two Years After Launch

• Can cities monetize their data?

• Prepping responders for automated vehicles

• Comic book distributor struggling with shipments after ransomware attack

• North Korean hackers target the South’s think tanks through blog posts

• Remote Code Execution Flaw in Palo Alto GlobalProtect VPN

• SMS About Bank Fraud as a Pretext for Voice Phishing

• Microsegmentation Is Catching On as Key to Zero Trust

• ChaosDB: Researchers Share Technical Details of Azure Flaw

• A flaw in WP Reset PRO WordPress plugin allows wiping the installation DB

• SquirrelWaffle Leverages Malspam to Deliver Qakbot, Cobalt Strike

• Who’s going to volunteer for the new CMMC?

• VMware Working on Patches for Serious vCenter Server Vulnerability

• RE:WIRED 2021: Jen Easterly Wants Hackers to Help US Cyber Defense

• Black Friday Spotlight: Walmart Drops AirPods 2 to All-Time Low Price of $89

• Apple TV+ Movie ‘Finch’ Sets New Opening Weekend Record

• (ISC)² Security Congress Goes West – Las Vegas Here We Come!

• Microsoft Teams Integrates With Meta’s Workplace

• Beg Bounties

• How Artificial intelligence (AI) Stops Cybercriminals

• Critical Flaw in WordPress Plugin Leads to Database Wipe

• Patch Tuesday updates the Win 7 updater… for at most 1 more year of updates

• Apple Seeds Second Public Beta of macOS Monterey 12.1 With SharePlay

• Apple Seeds Second Public Betas of iOS and iPadOS 15.2 With Legacy Contacts, Find My Updates and More

• Apple Releases iCloud for Windows 13 With Support for ProRes, ProRAW, and Strong Password Generation

• Mirai Variant Dark.IoT Expands Reach Beyond IoT Devices to Linux Servers Hosted in the Cloud in Attempt to Increase DDoS Capability

• Critical Citrix DDoS Bug Shuts Down Network, Cloud App Access

• These industries were the most affected by the past year of ransomware attacks

• Anglers Redirected to Pornhub

• Arrest in Kaseya Attack Highlights Government Ransomware Progress

• SolarWinds Vulnerability Exploited in First Stage of Clop Ransomware Attacks

• Bandwidth.com reports multimillion dollar loss post DDoS attacks

• The Newest Malicious Actor: “Squirrelwaffle” Malicious Doc.

• Critical Citrix Bug Shuts Down Network, Cloud App Access

• Cybersecurity Trends from the Global Pandemic

• Compromised Docker Hub Accounts Abused for Cryptomining Linked to TeamTNT

• November Continues Streak of Quiet Patch Tuesdays

• Void Balaur and the Rise of the Cybermercenary Industry

• Why Detecting Generic Credentials Is a Gamechanger

• Palo Alto Networks patches zero-day affecting firewalls using GlobalProtect Portal VPN

• #BHEU: Ransomware is The New Terrorism, Contends Cyber Expert

• Defining the Hierarchy of Value in Cyber Intelligence

• Massive Zero-Day Hole Found in Palo Alto Security Appliances

• #BHEU: Leveraging Behavioral Psychology to Improve Teamwork in Cybersecurity

• Apple Begins Selling New Accessories, Including Updated Rotor Riot Game Controller for iPhone and iPad

• The hunt for NOBELIUM, the most sophisticated nation-state attack in history

• How Humio Outpaces Traditional Logging Solutions and Leaves Competitors in the Dust

• Neuro-ID tracks user behavioral data to help companies boost conversion

• Massive Zero Day Hole Found in Palo Alto Security Appliances

• US targets REvil, DarkSide ransomware with $10M rewards

• Facebook Reveals How Often Users See Bullying Or Harassment Content

• Fresh Scrutiny For Mexico After Arrest Of Suspect In NSO Spyware Case

• Example: forensicating the Mesa County system image

• CCSP vs. Microsoft Certified: Azure Administrator Associate — How Does Vendor Focus Factor In?

• CCSP vs. EXIN Cloud Certifications: What are the Differences?

• 6 Business functions that will benefit from cybersecurity automation

• Health Care Sector facing Identity theft threat in Canada Provinces

• Plusnet Email Outage Causes Frustrations

• Google Loses Appeal Against EU Antitrust Ruling

• 14 security vulnerabilities reported in BusyBox Linux utility

• Implement these MITRE D3FEND™ Techniques with Intezer Protect

• Legendary Entertainment Relies on MVISION CNAPP Across Its Multicloud Environment

• Exchange Server bug: Patch now, but multi-factor authentication might not stop these attacks, warns Microsoft

• iPhone users don’t care about sideloading

• Healthcare security: IT pros warn of vulnerable HVAC systems, imaging machines, check-in kiosks and more

• Businesses don’t know how to manage VPN security properly – and cyber criminals are taking advantage

• Experts tout $2 billion in cybersecurity funding in Biden’s infrastructure bill

• How healthcare organizations and patients are increasingly at risk from cyber threats

• RPC Firewall Dubbed ‘Ransomware Kill Switch’ Released to Open Source

• South Korean Users Targeted with Android Spyware ‘PhoneSpy’

• Medical devices at risk from Siemens Nucleus vulnerabilities

• 4 concepts that help balance business and security goals

• CISA and State and Local Partners Test Emergency Response Plans at Chevron Salt Lake Refinery

• Citrix addresses a critical flaw in ADC, Gateway

• Deals: Build Your Own Accessory Bundle on Verizon and Get Up to 40% Off

• Apple Celebrates 40 Years in France and Announces Paris Apple Music Studio

• Apple Announces ‘Business Essentials’ Service for Small Businesses

• Counterterrorism Successes Against Foreign Fighters

• A Gig Surveillance Economy

• With SLAs for DDoS Mitigation, the devil is in the details

• Playstation 5 hacked—twice!

• Boat biz breaches itself: Brittany Ferries ‘fesses up to leaks caused by routine website update

• Apple Developing Patch For Face ID Issue Found By iFixit

• Ploutus ATM Malware Case Study: Automated Deobfuscation of a Strongly Obfuscated .NET Binary

• Citrix Patches Critical Vulnerability in ADC, Gateway

• #BHEU: How to Create a Safe and Democratic Digital Infrastructure

• Securing the Public: Who Should Take Charge?

• 4 Tips to Secure the OT Cybersecurity Budget You Require

• Most Inspiring Women in Cyber 2021: Marilise de Villiers, Founder & CEO of ROAR! Coaching and Consulting

• Vulnerable Docker Servers: Targets of TeamTNT

• 14 Security Vulnerabilities Found in BusyBox

• Patch now! Microsoft plugs actively exploited zero-days and other updates

• Operation Mobile 4 sees 23 countries clamp down on smuggling and trafficking

• Researcher Details Vulnerabilities Found in AWS API Gateway

• Researchers Discover PhoneSpy Malware Spying on South Korean Citizens

• Today Marks the One Year Anniversary of the First Apple Silicon Macs

• Armis sees demand for OT/ICS cybersecurity rise 400% year on year

• Clop Ransomware Exploits SolarWinds Serv-U Flaw

• Breach and Attack Simulation: Hack Yourself to a More Secure Future

• ControlUp lands $100M to help enterprise IT teams manage remote software

• New Android Spyware Poses Pegasus-Like Threat

• ICS, OT Cybersecurity Incidents Cost Some U.S. Firms Over $100 Million: Survey

• Dark Reading Video News Desk Comes to Black Hat Europe

• Disinformation Isn’t Just Fueling Arguments – It’s Also Putting Your Business At Risk

• eBook: Using NIST guidelines for secure passwords

• Apple’s Original Computer Sells For $500,000

• Introducing Cisco Secure MSP – grab the opportunity and simplify SaaS security for managed service providers

• Vulnerabilities in Nucleus NET TCP/IP stack could lead to real-world damage

• The Dawn of True IoT Security

• Density, which provides occupancy-tracking sensors to companies, raises $125M

• Cybersecurity: This prolific hacker-for-hire operation has targeted thousands of victims around the world

• The Rising Threat Stemming From Identity Sprawl

• Socure Raises $450 Million at $4.5 Billion Valuation

• #BHEU: Zero Trust Protects Against Ransomware, Claims Engineer

• Experts found 14 new flaws in BusyBox, millions of devices at risk

• Hacking the Sony Playstation 5

• Robinhood Data Breach – Expert Comments

• State Hackers Breach Nine After CISA Alert Warns Of Exploits

• Remote Employee ‘Surveillance’ Is Dangerous Territory

• Data Broker Veraset Gave Bulk Device-Level GPS Data to DC Government

• RobinHood has been hacked

• High Court Blocks $4.3bn Lawsuit Over Google iPhone Tracking

• Security pros want federal government to improve private sector security posture

• Iranian State Hackers Are Attacking ISPs and Telcos

• Stor-a-File hit by ransomware after crooks target SolarWinds Serv-U FTP software

• Taiwan Government Faces 5 Million Cyberattacks Daily: Official

• Experts found 14 new flaws in BusyBox

• Streaming wars continue — what about cyberthreats?

• Patched Zoho Vulnerability Is Being Exploited by Hackers

• New Phishing Campaign Exploits Proofpoint’s Name To Steal Credentials

• Microsoft: Patch Zoho Bug Now to Stop Chinese Hackers

• Are cybercriminals turning away from the US and targeting Europe instead?

• FCW Insider: November 10, 2021

• Quick Hits

• 13 New Flaws in Siemens Nucleus TCP/IP Stack Impact Safety-Critical Equipment

• Rare Apple-1 Computer in Koa Wood Case Fetches $500,000 at Auction

• UK Supreme Court Sides With Google in Lawsuit Over Alleged Tracking of iOS Safari Users Without Their Consent

• How to spot and block cryptominers on your network

• 4 tools to prevent leaks in public code repositories

• Europol Practices Post-Terror Incident Response

• Over 80% of CNI Firms Have Been Breached in Past 36 Months

• Medatixx Hit with Ransomware Attack, Customers Need to Change Passwords ASAP

• Hackers claim they have cracked the PS5 and obtained all symmetric root keys

• 14 New Security Flaws Found in BusyBox Linux Utility for Embedded Devices

• Build your own Android security product

• CyberSec&AI Connected 2021 | Avast

• TeamTNT group targets poorly configured Docker servers exposing REST APIs

• Microsoft Issues Patches for Actively Exploited Excel, Exchange Server 0-Day Bugs

• Organizations believe they are ready for ransomware attacks

• The role of visibility and analytics in zero trust architectures

• Most CIOs and CISOs underestimate the risk of an OT breach

• Dependency Combobulator: Open source toolkit to combat dependency confusion attacks

• Former Broadcom engineer accused of pinching chip tech to share with new Chinese employer

• Vulnerabilities associated with ransomware increased 4.5% in Q3 2021

• 14 New Vulnerabilities Discovered in BusyBox

• As the move to the cloud accelerates, data privacy and security remain critical

• SAP Patches Critical Vulnerability in ABAP Platform Kernel

• Most cybersecurity leaders use microsegmentation to augment corporate network security

• (ISC)² CEO Clar Rosso Receives Cyber Futurist Executive Award

• Reversing a binary using GDB: tutorial for Reverse Engineers

• 8 Best Practices for Data Security in Hybrid Environments

• WhiteSource SBOM helps developers to protect the software supply chain

• As Nvidia pushes for leadership in metaverse, here’s everything it announced at GTC 2021

• ThreatQ v5 supports the SOC of the future with data management capabilities

• Absolute releases Application Persistence-as-a-Service to strengthen their mission-critical apps

• Titania Nipper NIST 800-171 module protects controlled and sensitive government information

• ColorTokens Xshield 2.0 automates micro-segmentation at scale

• Tufin Orchestration Suite R21-3 provides centralized visibility into critical access policies

• CYTRIO unveils privacy rights management automation solution for mid-market companies

• Barracuda strengthens security operations for MSSP customers with Stellar Cyber’s XDR platform

• Veracode launches enhanced scanning tool to find and fix vulnerabilities in APIs

• ForgeRock’s features allow enterprises to keep their passwords on-premises

• API Security Issue 155

• Judge Says Apple Has Until December 9 to Make App Store Change Letting Developers Link to Alternate Payment Methods

• Robinhood data breach affects 7 million people

• Samsung LPDDR5X DRAM boosts capacity and power savings for 5G applications

• KIOXIA EDSFF E1.S SSDs optimizes system density for servers in cloud and hyperscale data centers

• NETMONASTERY partners with SecurityHQ to deliver cyber threat detection solutions for enterprises

• Protiviti collaborates with Microsoft to help organizations meet compliance obligations

• Protecting Yourself in the Wake of the Robinhood Data Breach

• SafeBreach raises $53.5M to expand its market footprint

• Kerv acquires Gyrocom to expand its SD-WAN and SASE offerings

• VERT Threat Alert: November 2021 Patch Tuesday Analysis

• Why you need to rethink your data security strategy and go beyond DLP

• Are You Planning for the Quantum, Transhumanist Threat?

• Microsoft Fixes Exchange Server Zero-Day

• Samba Releases Security Updates

• Microsoft Releases November 2021 Security Updates

• Everything New in iOS 15.2 Beta 2: Legacy Contacts, Hide My Email Improvements, and More

• Lightspin adds four executive members to its Advisory Board and Board of Directors

• Samba Releases Security Updates

• Microsoft Releases November 2021 Security Updates

• IT Security News Daily Summary 2021-11-09

• Report: Government agencies are top target for rootkit attacks

• It’s time to dump Chrome as your default browser on Android

• Jony Ive Discusses Steve Jobs, Continued Work With Apple, Wearables and More

• Johnson & Johnson Chairman Alex Gorsky Joins Apple’s Board of Directors

• Headless BI solution released by data startup Supergrain

• Zscaler strengthens monitoring of digital experiences across apps

• Microsoft Nov. Patch Tuesday Fixes Six Zero-Days, 55 Bugs

• It’s time you dump Chrome as your default browser on Android

• Citrix Releases Security Updates

• Robinhood data breach exposes 7 Million users’ information

• Coinbase shares drop after third-quarter revenue misses analysts’ estimates

• Union complains of ‘double standard’ for fed and contractor vaccine mandates

• Citrix Releases Security Updates

• Apple Drops Device Trade-In Prices in the U.S.

• Coinbase reports third-quarter revenue that misses analysts’ estimates

• Let us give thanks that this November, Microsoft has given us just 55 security fixes, two of which are for actively exploited flaws

• Security pros say federal government should do more to protect and secure private sector

• Microsoft Patch Tuesday, November 2021 Edition

• Adobe Releases Security Updates for Multiple Products

• Funding challenges hamper cyber EO compliance, CIOs say

• County speeds rental assistance processing with cloud suite

• Rust-proofing the internet with ISRG’s Prossimo

• Average ransomware payment for US victims more than $6 million, survey says

• Not Punny: Angling Direct Breach Cripples Retailer for Days

• Why Self-Learning AI Is Changing the Paradigm of ICS Security

• Adobe Releases Security Updates for Multiple Products

• Microsoft Patch Tuesday security updates for November 2021 fix 2 Zero-Days actively exploited

• Deals: Take 20% Off MagSafe-Compatible Accessories and More at Belkin

• iOS 15.2 Adds Option to Scan for Nearby AirTags and Find My-Enabled Items

• Microsoft patches actively exploited Exchange, Excel zero-days (CVE-2021-42321, CVE-2021-42292)

• Microsoft is a 5-time Leader in the Gartner Magic Quadrant for Access Management

• Smart TV adverts put a wrinkle in your programming

• Public safety collaboration platform gets DHS investment

• Microsoft November 2021 Patch Tuesday: 55 bugs squashed, two under active exploit

• The Way Forward on Congressional Subpoena Reform

• Lawfare Live: Roger Parloff on the Criminal Prosecutions of Jan. 6 Capitol Rioters

• How Facebook’s Outage Could Shape Public Preferences on Cybersecurity Policy

• SSA plans to bring workers back to the office

• Shotgun targeting of malware attacks will be the defining infosec theme of 2022, reckons Sophos

• Zero-Days Under Attack: Microsoft Plugs Exchange Server, Excel Holes

• Hide My Email Available in Mail App With New iOS 15.2 and macOS Monterey 12.1 Betas

• iOS 15.2 Beta 2 Lets Your Family Access Your Data If You Pass Away

• Apple Walks Back iPhone 13 Display Repair Restriction That Disabled Face ID

• (ISC)² Cybersecurity Entry-Level Certification Exam Topics Announced

• Russian Cybercrime Group Exploits SolarWinds Serv-U Vulnerability

• Free Cybersecurity Training for SMBs

• Clop gang exploiting CVE-2021-35211 RCE in SolarWinds Serv-U in recent attack

• Windows RDP Client Porting Critical Vulnerabilities to Hyper-V Manager

• Singapore embraces Zero Trust: A prediction comes true

• Ransomware attacks are increasingly exploiting security vulnerabilities

• Digital driver’s licenses: Are they secure enough for us to trust?

• Kaspersky finds 31% increase in “smart” DDoS attacks

• Zoho ManageEngine Flaw Highlights Risks of Race to Patch

• SAP Releases November 2021 Security Updates

• Apple Seeds Second Beta of watchOS 8.3 to Developers

• Apple Seeds Second Beta of macOS Monterey 12.1 to Developers

• Apple Seeds Second Betas of iOS 15.2 and iPadOS 15.2 to Developers

• iOS 15.2 Beta Adds Messages Communication Safety Feature for Kids

• New Netflix Games Feature Now Available on iOS Devices

• Ransomware: How to Protect Your Data

• 12 New Flaws Used in Ransomware Attacks in Q3

• US amps up war on ransomware with charges against REvil attackers

• Micro-Segmentation Used by 83% of Cybersecurity Leaders

• How to Minimize Ransomware’s Trail of Destruction and Its Associated Costs

• CISA Releases Security Advisory on Siemens Nucleus Real-Time Operating Systems

• SAP Releases November 2021 Security Updates

• Researchers Warn Of Software Flaws With Medical Devices

• Robinhood Data Breach – Hackers access millions of users’ data

• 83% of Critical Infrastructure Organizations Suffered Breaches, 2021 Cybersecurity Research Reveals

• CISA Releases Security Advisory on Siemens Nucleus Real-Time Operating Systems

• Enabling Easy and Secure Access for All

• Robinhood Trading Platform Data Breach Hits 7 Million Customers

• Here’s What A COD Vanguard Account Boosting Farm Looks Like

• Hacking Group Claims It Found Encryption Keys Needed To Unlock PS5

• Some 14-Inch and 16-Inch MacBook Pro Models Backordered Into 2022

• Review: Vissles’ LP85 Keyboard is Like a Mechanical Apple Magic Keyboard, But Decidedly More Fun

• Tim Cook: Users Who Want to Sideload Apps Can Use Android, While the iPhone Experience Maximizes ‘Security and Privacy’

• Twitter Blue Subscription Service Expands to the United States and New Zealand

• Unified Endpoint Management Explained: (Why) Does Your Company Need One?

• Microsoft is recognized as a Leader in the 2021 Forrester Wave for Unified Endpoint Management

• US Charges Ukrainian And Russian Nationals Over Ransomware Attacks

• Brazil’s Fake News Bill: Congress Must Stand Firm on Repealing Dangerous and Disproportionate Surveillance Measures

• Brazil’s Fake News Bill: Perils and Flaws of Expanding Existent Data Retention Obligations

• Google takes a bold step toward securing your Gmail, but not without many complaints

• Ransomware Attack on Robinhood Stock Brokering App

• Robinhood Data Breach Exposed Data of 7 Million Users

• Security Tool Guts: How Much Should Customers See?

• The New Frontier of Enterprise Risk: Nth Parties

• Adobe Patches Critical RoboHelp Server Security Flaw

• API security strategies must evolve to include API protection

• DomainTools Acquires Farsight Security

• Tim Cook Reveals He Owns Cryptocurrency and Has Been ‘Interested in It For a While’

• Deals: Apple Pencil 2 on Sale for $99.99 at Amazon ($29 Off)

• Apple Launches Holiday Gift Guide and Personalized Holiday Cards

• Robinhood’s data breach involved about 7 million customers. How to protect your credit

• 81% of Organizations Experienced Increased Cyber-Threats During COVID-19

• SafeBreach Closes $53.5 Million Series D in New Funding to Fuel Momentum

• Pythonizing Nmap

• Robinhood data breach shows company is ‘not ready’, Cramer says

• More Arrests In Ongoing Campaign Against REvil Hacking Gang

• Security Researchers Reveal Activity Targeting ManageEngine ADSelfService Plus

• Robinhood Trading Platform Data Breach Hits 7M Customers

• Security is Everywhere. Can Your Services Keep Up?

• ICS Patch Tuesday: Siemens and Schneider Electric Address Over 50 Security Flaws

• Building Bridges to a More Secure Hybrid Workplace

• The State of the CISO

• Security Researchers Reveal Activity Targeting ManageEngine ADSelfService Plus

• Most Inspiring Women in Cyber 2021: Lisa Ventura, Founder of Cyber Security Unity

• Vulnerabilities Impacting Philips TASY EMR Could Lead to Patient Data Exposure

• Robinhood Suffered a Massive Data Breach

• Designing a BYOD Approach for the Future

• Socure lands $450M as the identity verification market heats up

• Contrast Security expands its cybersecurity tech to new markets with $150M

• These cybersecurity vulnerabilities could leave millions of connected medical devices open to attack

• 99% of Federal Security Pros Feel the U.S. Government Must Do More to Protect Its Data and Systems

• Breach and Attack Simulation Firm SafeBreach Doubles Funding With $53.5M Series D Round

• Many Healthcare, OT Systems Exposed to Attacks by NUCLEUS:13 Vulnerabilities

• Multiple BusyBox Security Bugs Threaten Embedded Linux Devices

• New Universal Prompt Raises the Bar for Fast, Easy Multi-Factor Authentication

• How to Leverage Scheduled Searches

• Customers, Conviction, Speed: A Conversation With George Kurtz, CEO and Co-Founder at CrowdStrike

• Critical Flaw in Sitecore Experience Platform Exploited in Attacks

• Tabletop exercise hosted by Europol to disrupt terrorist content online

• Unique Challenges to Cyber-Security in Healthcare and How to Address Them

• Cisco named a leader in The Forrester Wave™: ICS Security

• Cash in, fraud out: Criminals target bitcoin ATMs as crypto popularity surges

• CIS Critical Security Controls: What Are They and How Can You Meet These Standards?

• How to remove adware on an Android phone

• (ISC)² Chapter Creates Space for Entry-Level Members and Professional Connections

• Sophos 2022 Threat Report: Malware, Mobile, Machine learning and more!

• Internationa law enforcement arrested REvil ransomware affiliates in Romania and Kuwait

• Google Advisory on Android Security Updates

• Pentagon announces version 2.0 of its controversial CMMC program

• Public Payphone Protections Revealed By Ofcom

• OpenText Acquires Email Security Firm Zix for $860 Million

• A Tough Week for REvil Ransomware

• Trading App Robinhood Admits Data Breach

• Authorities arrest REvil ransomware operators in Kuwait and Romania

• Microsoft: Chinese hackers are targeting Zoho ManageEngine software

• A New Cybersecurity Executive Order Puts the Heat on Critical Infrastructure Suppliers

• Meet Lyceum: Iranian hackers targeting telecoms, ISPs

• The future of OT security in an IT-OT converged world

• Mexico Arrests Suspect in Pegasus Spyware Case

• Phishing Attack Triggers Electronic Warfare Associates Data Breach

• Why are people so bad at risk assessment? Blame the brain

• Facebook Can Pursue NSO Lawsuit, Appeals Court Rules

• Euro Police Arrest Two More REvil Affiliates as US Issues Sanctions

• McAfee Sold to Investor Group for $14bn

• Hive Ransomware Gang Impacts MediaMarkt

• Instagram Preparing to Launch Subscriptions to Let Users Pay for ‘Exclusive Content’ From Creators

• Twitter Backs Elon Musk Selling 10 Percent Of Tesla

• Robinhood Data Breach Hits Seven Million Customers

• Nvidia’s transformation into a full-stack computing company

• Nvidia launches Jetson AGX Orin to speed up computing at the edge

• US to Charge Suspects Over Kaseya Ransomware Attack

• Robinhood Trading App Suffers Data Breach Exposing 7 Million Users’ Information

• US DoS offers a reward of up to $10M for leaders of REvil ransomware gang

• ActMobile (unverified) – 1,583,193 breached accounts

• The cyber insurance dilemma: The risks of a safety net

• Why are we still asking KBA questions to authenticate identity?

• Ukrainian REvil affiliate charged with Ransomware Attack on Kaseya

• API sprawl: A threat you might want to address later, but you can’t ignore it

• U.S. Charges Ukrainian Hacker for Kaseya Attack; Seizes $6 Million from REvil Gang

• EU Commission takes on challenge to improve the cybersecurity of wireless devices

• Banking malware threats are increasing sharply

• Passport scam foxing Texas populace with data collection

• US DOJ seizes $6 million from REvil ransomware gang

• ‘Tis The Season for Holiday Cyber Threats Targeting Enterprises in a Pandemic World

• Retail industry security incidents soaring, worsened by the supply chain crisis

• Indian securities depository exposed 44 million investors’ personal info – twice

• Most Important Security Tools and Resources For Security Researchers and Malware Analyst

• Cybersecurity and OWASP in an Increasingly Digital World

• Comply 2 Connect (C2C) – A Solution to Quell the Rogues in Our Midst

• Cloud adoption growing steadily, but cost and regulatory challenges remain

• CISSPs from Around the Globe: An Interview with Dr. Christine Izuakor

• Suspected REvil Ransomware Affiliates Arrested in Global Takedown

• Test your CCSP knowledge with interactive flash cards

• Akamai App & API Protector protects against complex web and API-based attacks

• Coalition launches executive risks products to defend SMBs against cyber attacks

• REvil Ransom Arrest, $6M Seizure, and $10M Reward

• Shining a light on the dark web

• Forecast: Cloudy With A Chance Of 404

• Zoho Password Manager Flaw Torched By Godzilla Webshell

• Passwordless authentication: Is your company ready to move beyond passwords?

• Investment app Robinhood: Extortionist tricked our support desk and made off with customer information

• Report: Most global execs say AI drives financial, cultural benefits

• The Biggest Ransomware Bust Yet Might Actually Make an Impact

• NSO fails once again to claim foreign sovereign immunity in WhatsApp spying lawsuit

• OMB official reviews progress six months after the cyber EO

• Robinhood breach leaks information of 7 million people

• DoJ Arrests Hacker Involved With REvil Group That Stole Apple’s MacBook Pro Schematics

• Investor Group to acquire McAfee for over $14 Billion

• Threat actor DEV-0322 exploiting ZOHO ManageEngine ADSelfService Plus

• REvil Affiliates Arrested; DOJ Seizes $6.1M in Ransom

• UL Launches SafeCyber Platform to Secure IoT

• The Law of Individual Disqualification in a Democracy

• Ping Identity appoints Shalini Sharma as Chief Legal Officer

• Rockwell Automation announces investments to enhance its incident response services

• Application Security Predictions Over the Next 12 Months

• Labor Department rolls back Trump-era religious exemption for contractors

• US Charges Ukrainian National for Kaseya Ransomware Attack

• Review: Nanoleaf’s HomeKit-Enabled Lines Offer Futuristic Accent Lighting

• Apple’s Redesigned 2022 MacBook Air: Everything We Know

• DDoS attack cost Bandwidth.com nearly $12 million

• Kaseya ransomware suspect nabbed in Poland, $6m seized from absent colleague

• McAfee’s Consumer Business to Be Acquired by Private Equity Groups

• Best practices in WAF gateways to meet the demands of digital transformation

• IT Security News Daily Summary 2021-11-08

• Europol arrests three suspects possibly involved in major ransomware activities

• What Security Strategies Are Driving InfoSec’s Decisions Around Defense?

• Multiple video games break after domain name snafu

• DOD awards $32.6 million in spectrum OTAs

• $1.2T infrastructure plan offers lucrative target for fraud

• Ukrainian cuffed, faces extradition to US for allegedly orchestrating Kaseya ransomware infection

• Robinhood Hacked, Millions of Names, Emails Stolen

• Robinhood reveals data security incident

• US Department of Justice recovers $6 million and indicts two REvil principals

• Investor Group to Acquire McAfee for $14B

• macOS Monterey 12.1 Beta: How to Share Your Screen on a FaceTime Call

• Biden takes shot at Putin as he touts REvil ransom seizure, new criminal cyberattack cases

• Guntrader Data Breach: Victims Concerned Over Impact

• You’ve Been Attacked by Ransomware. How Will You Respond?

• DDoS Attacks Shatter Records in Q3, Report Finds

• Will they try it for 30 days? McAfee goes private again in $14bn cash deal

• Early Facebook Investor Warns Against Letting The Company Create Metaverse

• Conti ransomware gang apologized to Arab Royals over data leak

• Reduce the ‘blast radius’ in credential attacks, Krebs advises

• Tampa CV pilot seeks volunteers

• REvil ransomware affiliates arrested in international takedown

• What My Optometrist Taught Me About InfoSec Presentations

• Ransomware attack disrupted store operations in the Netherlands and Germany

• BrandPost: Novel Encryption Technique Helps Lockfile Ransomware Hide in Plain Sight

• Annke NC400 and NC800 security camera review: Nice mid-price cameras — but the desktop app needs to be updated

• DOJ charges and sanctions REvil leaders behind Kaseya attack, seizes $6 million in ransoms

• Zebra2104 Initial Access Broker Supports Rival Malware Gangs, APTs

• U.S. Charges Two Suspected Major Ransomware Operators

• DOJ seized $6 million in REvil ransomware payments, seeks extradition of Ukrainian for cyberattacks

• BrandPost: Selecting a Network Firewall for Today and Tomorrow

• CISA directive requires vulnerability fixes in 6 months

• Apple-1 Computer to be Auctioned

• US Treasury Sanctions Crypto Exchange in Anti-Ransomware Crackdown

• FIN7 Group Lures Cyber Pros With Fake Jobs

• US Government Contractor EWA Discloses Data-Theft Breach

• Global Companies Compromised via ADSelfService Plus Exploitation

• $55M Stolen from Crypto Company

• Protect workloads with inline DDoS protection from Gateway Load Balancer partners

• Zoho Password Manager Flaw Torched by Godzilla Webshell

• Europol Announces Arrests of 7 People Linked to REvil, GandCrab Ransomware

• Drata Scores $100M Investment for Security and Compliance Automation

• Vulnerability Summary for the Week of November 1, 2021

• U.S. seeks extradition of Ukrainian, 2 others busted in REvil ransomware attacks

• Learn how Microsoft strengthens IoT and OT security with Zero Trust

• Why we fail at getting the cybersecurity basics right, with Jess Dodson: Lock and Code S02E21

• bZx DeFi Platform Lost $55 Million Stolen In The Latest Crypto Heist

• BrandPost: The Role of AI in Modern Endpoint Security

• A Journey in Organizational Resilience: Supply Chain and Third Parties

• Passport Scammers Spoof Texas HSI

• Kaspersky Finds DDoS Attacks in Q3 Grow by 24%, Become More Sophisticated

• Arctic Wolf Security Operations Cloud Reaches Massive Scale and a Global Footprint

• Vulnerability Summary for the Week of November 1, 2021

• TA505 exploits SolarWinds Serv-U vulnerability (CVE-2021-35211) for initial access

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Blacklisted apps in corporate companies on Android and iOS devices

• Hacker stole $55M worth of crypto from DeFi lender bZx via phishing

• API Security Weekly: Issue 158

• Check Point recognized as Leader in the 2021 Gartner® Network Firewall Magic Quadrant™

• Investor group acquires McAfee for more than $14 billion

• Valeo Networks Acquires On Time Tech, Accelerating National Growth Strategy

• Banking Malware Threats Surging as Mobile Banking Increases – Nokia Threat Intelligence Report

• Suspect REvil Ransomware Affiliates Arrested

• Fishing Gear Seller Caught In Hacker’s Net

• Palestinian Activists’ Mobile Phones Hacked Using NSO Spyware

• Hostage-Style Bitcoin Scam Videos Spread On Instagram

• Deals: Get Apple’s 512GB M1 MacBook Air for New Low Price of $1,049.99 ($199 Off)

• Apple Will Continue to Accept App Store Submissions Throughout Holiday Season

• You’ll never guess who’s been exploiting the ManageEngine service to steal passwords

• Azure security must enable change to effectively support remote employees: Part 2

• SCYTHE Banks $10M Investment for Adversary Simulation

• Initiative Persistence and the Consequence for Cyber Norms

• Google Ads Used for Stealing Credentials and Draining Accounts

• Hackers Impersonate Proofpoint to Collect Microsoft Office 365 and Google Credentials

• Two people suspected in international ransomware attacks arrested in Romania

• BrandPost: For the Metaverse, Gaming Security Leads the Way

• Managed vs. Unmanaged VPS hosting -What are the Differences?

• Ransomware: Suspected REvil ransomware affiliates arrested

• McAfee to be Taken Private in $14 Billion Private Equity Deal

• Healthcare – Patient or Perpetrator? – The Cybercriminals Within

• Most Inspiring Women in Cyber 2021: Alison Dyer, Group CISO at Urenco

• Spot Those Black Friday and Cyber Monday Shopping Scams

• Cybersecurity M&A Roundup for First Week of November 2021

• Could Cyber Diplomacy Be the Ultimate Answer to American Ransomware Woes?

• Experts Detail Malicious Code Dropped Using ManageEngine ADSelfService Exploit

• Operation Cyclone targets Clop Ransomware affiliates

• Five affiliates to Sodinokibi/REvil unplugged

• BlackBerry Uncovers Initial Access Broker Linked to 3 Distinct Hacker Groups

• Deals: AirPods Max Drop to New Low of $429.98 ($119 Off)

• Angling (re)Direct: Criminals net website of Brit fishing tackle retailer, send users straight to smut site

• Multiple Vulnerabilities Discovered In Philips Tasy EMR Solution

• Zero Trust: What NIST’s Guidelines Mean for Your Resources

• Bug bounty programs in 2021: High payouts, higher stakes

• UK Cyber Skills Shortage Rises by Over a Third

• 3 Ways to Deal With the Trojan Source Attack

• Types of Penetration Testing

• Twitter Deploying Top-Spec MacBook Pros Across App Development Teams

• We Heard You: Updates to the (ISC)² Ethics Questions

• Six Arrested for Roles in Clop Ransomware Operation

• COA and RC npm Packages Hijacked

• Silicon UK In Focus Podcast: Cyrus Gilbert-Rolfe, CRO, EVRYTHNG

• Frequency analysis on hundreds of billions of reports at Report URI: Count-Min Sketch

• Experts Analyze Proposed Bill Allowing Private Entities to ‘Hack Back’

• Report: 6 Palestinian Rights Activists Hacked by NSO Spyware

• DDoS attacks in Q3 2021

• Drones Carrying Explosives

• Silicon UK In Focus Podcast: Cyrus Gilbert-Rolf, CRO, EVRYTHNG

• Security and compliance automation company Drata raises $100M

• Insurers Tap Cyber “Opportunity” as Rates Continue to Rise

• Clop Ransomware’s Members Arrested in ‘Operation Cyclone’

• A week in security (Nov 1 – Nov 7)

• US CISA Pushes Vendors For BrakTooth Patches After PoC Goes Public

• Congressional cybersecurity legislation update: 12 key bills move forward

• GitHub’s Mike Hanley: Today’s CISOs have to be out talking to customers

• US Senate Looks To Limit Big Tech Companies’ Acquisitions

• Investors Sue SolarWinds Directors Over Security Breach

• What Facebook Facial Recognition Shutdown Means For Users | Avast

• Chinese Spy Faces Decades in Jail After Conviction

• Nation-state actors target critical sectors by exploiting the CVE-2021-40539 flaw

• Instagram Re-Introduces Twitter Card Previews

• New York Mayor ‘Wants First Three Paychecks In Bitcoin’

• Nintendo Lowers Sales Forecast On Chip Supply Issues

• Supermarket Chain Investigates Fake Bitcoin Cash Press Release

• iPhone 13 Availability Expected to Improve As Holiday Season Approaches

• Avast Adds Network Discovery To Avast Business Hub | Avast

• Report: 57% of all ecommerce cyberattacks are bot-driven

• Interpol Hunts for Remaining Clop Ransomware Members

• CLEAR partners with Microsoft to improve secure exchange of verified information and credentials

• Semafone appoints three new board members to accelerate global growth

• Preparing for a World Without the Public Services Network (PSN)

• Beg Bounties

• Hungarian official confirms Hungary used NSO Group Pegasus spyware

• Netflix Gaming Service on iOS Likely to Offer Individual Games Through the App Store

• WhatsApp Rolls Out Multi-Device Support to All Users on iOS and Android

• Ann Johnson joins N-able Board of Directors

• Why DOD is so bad at buying software

• Cybersecurity firms provide threat intel for Clop ransomware group arrests

• FBI warns of fraudulent schemes using cryptocurrency ATMs and QR for payments

• Trying to register your antivirus in Windows Security Center?

• Facebook Metaverse Plans Called ‘Dystopian’

• November 2021 Patch Tuesday forecast: More mandates in the United States

• Computer misuse crimes in UK surge to high not seen since 2017 even as prosecutions slump 20%

• Why integrating SIEM tools is crucial to managing threats

• Unseen gatekeepers: Industrial software providers’ role securing global infrastructure

• How do I select a DRaaS solution for my business?

• Hackers steal $55m through Ethereum based DeFi network protocol hack

• Indian company leaks 40m sensitive records of Citizens

• 80% of organizations experienced employees misusing and abusing access to business apps

• Mobile phishing exposure in the energy industry surged 161% in 2021

• Who Will Bend the Knee in RaaS Game of Thrones in 2022?

• Two NPM Packages With 22 Million Weekly Downloads Found Backdoored

• Younger generations care little about cybersecurity

• Preparing for a World Without the Public Service Network (PSN)

• Security teams need to become more proactive and risk-driven

• Example: forensicating the Mesa County system image

• Labor wants new anti-scam centre and code of practice for fighting against scams

• IT Security News Weekly Summary – Week 44

• IT Security News Daily Summary 2021-11-07

• Over-the-Horizon Does Not Have to Mean Next Door

• Heap Overflow Bug Affects All Linux Kernels Via TIPC Module

• Experts spotted a phishing campaign impersonating security firm Proofpoint

• Encryption Key Lifecycle Management: Tools and Best Practices

• Report: 51% of IT leaders don’t think they could mitigate a data breach

• The US Puts a $10M Bounty on DarkSide Ransomware Hackers

• New Magecart group uses an e-Skimmer that avoids VMs and sandboxes

• How to Prototype a Mobile Application in 2021

• Facebook Sunsets Face Recognition And Deletes Users’ Data Due to Privacy Concerns

• The Fastest WordPress Themes of 2021

• The AP Interview: Justice Dept. Conducting Cyber Crackdown

• Security Affairs newsletter Round 339

• Week in review: CVE + MITRE ATT&CK methodology, new issue of (IN)SECURE Magazine

• Penetration testing

Generated on 2021-11-14 23:59:14.622689