IT Security News Weekly Summary – Week 46

• IT Security News Daily Summary 2021-11-21

• Eftpos added security features go-live as digital upgrades continue

• Report: Only 21% of remote workers say they are aware of cyberthreats

• Finding the Appropriate Balance of Risk in Over-the-Horizon Strikes

• Experts found 11 malicious Python packages in the PyPI repository

• Researchers were able to access the payment portal of the Conti gang

• Two Iranian Hackers Charged For Gaining Access to Confidential Voter Information

• For a limited time, new users can get a lifetime of VPNSecure Online Privacy for just $40

• The Open-Source Supply Chain Security Is in Danger: Here’s What You Can Do to Protect Yourself

• Attackers compromise Microsoft Exchange servers to hijack internal email chains

• New Microsoft Authenticator features for organizations

• Code Injection – Examples and Prevention

• Week in review: Intel chip flaw, shedding light on hidden root CAs, Emotet stages a comeback

• Penetration testing

• SentinelOne Receives Prestigious Awards For Outstanding Company Culture and Leadership

• Fugue helps cloud teams to prepare for and meet the AWS Well-Architected Framework

• Datadog partners with Confluent to provide real-time monitoring for Confluent Cloud

• Armorblox email security platform integrates with Microsoft Sentinel to help stop email-based BEC

• Cyware partners with Flashpoint to empower security teams to automate threat response workflows

• Nutanix names Anja Hamilton as Chief People Officer

• Security Affairs newsletter Round 341

• Infobip reinforces commitment to data privacy and security with completion of HIPAA

• U.S. banking regulators order banks to notify cybersecurity incidents in 36 hours

• IT Security News Daily Summary 2021-11-20

• NJ offers in-person ID verification for online services

• Mississippi launches digital driver’s license

• NIST calls for insights on emerging technologies

• Prognosis On The Future Of 3D Typography

• Report: Mid-sized businesses are 490% more likely to experience security breach since 2019

• Securing Today’s Hybrid Remote Workforce

• What You Should Know About CNC Prototyping

• 2022 Cybersecurity predictions

• Why retailers must adopt a Zero Trust approach during this holiday season

• RedCurl Corporate Espionage Hackers Return With Updated Hacking Tools

• North Korean Hackers Found Behind a Range of Credential Theft Campaigns

• Study reveals top 200 most common passwords

• Report: 54% of today’s ‘ethical hackers’ are Gen Z

• A Canadian Teen Was Arrested in a $36.5M SIM-Swap Heist

• Top Stories: Apple Self Service Repair, iOS 15.1.1 Released, and More

• SS7 Exploit Service Providers on The Dark Web are Fake

• The newer cybercrime triad: TrickBot-Emotet-Conti

• AWS IoT MQTT Tutorial Using Lua

• Check Point vs. Palo Alto – Enterprise Cybersecurity Top Contenders

• Build or Buy your own antivirus product

• Types of Test Cases to Apply When Testing Financial Applications

• Weekly Update 270

• Top IoT Security Solutions of 2021

• Iran-linked APT groups continue to evolve

• AT&T Alien Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits

• Enhancing AT&T SASE with Palo Alto Networks ‘as a Service’

• What agency tech leaders think about a U.S. Digital Service Academy

• SOC Prime Quick Hunt delivers one-click threat hunting capabilities to security teams

• CYBERWARCON – Foreign influence operations grow up

• Week in security with Tony Anscombe

• JetStream DR now generally available through the Azure Marketplace

• Protegrity Data Protection Platform and Cloud Protect for Snowflake now available in Azure Marketplace

• Report: 70% of IT pros say security hygiene has gotten harder over past two years

• Tor Project calls to bring more than 200 obfs4 bridges online by December

• Accenture to help build Organon’s enterprise capabilities with SAP S4/HANA on AWS

• VMware simplifies purchase and deployment of VMware Cross-Cloud services for AWS customers

• New Highly Secure TIC 3.0 Offering for Remote Users & Branch Offices

• New Apple Podcasts Rating Prompt Artificially Boosts App Store Score

• DataCore acquires MayaData to accelerate container deployments for cloud-first enterprises

• Speedb partners with Redis to deliver cost-effective performance for high capacity real-time datasets

• Report: Only half of companies employ a CISO

• Updated: APT Exploitation of ManageEngine ADSelfService Plus Vulnerability

• Ducen completes SOC 1 Type I compliance to protect customers’ data against breaches and cyber attacks

• 8 advanced threats Kaspersky predicts for 2022

• Cisco partners with JupiterOne to enhance its SecureX product portfolio

• Updated: APT Exploitation of ManageEngine ADSelfService Plus Vulnerability

• API security ‘arms race’ heats up

• US Banks Will Be Required to Report Cyberattacks Within 36 Hours

• Canadian teenager stole $36 Million in cryptocurrency via SIM Swapping

• IT Security News Daily Summary 2021-11-19

• ShakeAlert comes to LA Metro

• Friday Squid Blogging: Bigfin Squid Captured on Video

• Apple Celebrates Opening of The Grove Apple Store in LA With Ted Lasso Appearance

• Credentials, Authentications and Hygiene: Supercharging Incident Response with Falcon Identity Threat Detection

• Unexpected Adventures in JSON Marshaling

• Ransomware (R)evolution Plagues Organizations, But CrowdStrike Protection Never Wavers

• Introduction to the Humio Marketplace

• CrowdStrike Falcon’s Autonomous Detection and Prevention Wins Best EDR Award and Earns Another AAA Rating in SE Labs Evaluations

• Cybercriminals discuss new business model for zero-day exploits

• The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back

• Brit Admits Role in International Movie Piracy Ring

• Sky Slow to Fix Bug in Routers

• State IT execs lean into collaboration for cyber defense

• NSA and CISA Release Guidance on Securing 5G Cloud Infrastructures

• Android Devices May Soon Show iMessage Reactions as Emoji

• Companies Get Better at Fighting Ransomware Despite Escalating Threats

• 3 Takeaways from the Gartner Risk Management Summit

• California Pizza Kitchen discloses a data breach

• Iranians Charged in Cyberattacks Against U.S. 2020 Election

• Join us at InfoSec Jupyterthon 2021

• 123SWAP: A platform to mint and trade NFTs

• AI Weekly: Defense Department proposes new guidelines for developing AI technologies

• MacRumors Giveaway: Win an Apple-Themed Blanket From Throwboy

• Digital Rights Updates with EFFector 33.7

• NSA and CISA Release Guidance on Securing 5G Cloud Infrastructures

• NSL Verdict a Major Blow to Free Speech in Hong Kong

• Malwarebytes CrackMe – contest summary

• Practical API Security: The OWASP API Security Top Ten

• 6M Sky Routers Left Exposed to Attack for Nearly 1.5 Years

• US Charges Two Iranians with Cyber-based Electoral Interference

• New ‘SharkBot’ Android Banking Malware Hitting U.S., UK and Italy Targets

• Patch Management: Keep an Eye on App Software Updates

• Nimda

• Report: 56% of workers admit they’ve accidentally deleted cloud data

• DOD names cloud contenders in JEDI replacement

• Malware Downloaded From PyPI 41,000 Times Was Surprisingly Stealthy

• California Pizza Kitchen Serves Up Employee SSNs In Data Breach

• Facebook Demands LAPD End Social Media Surveillance

• Six Million Sky Routers Had Serious Security Flaw

• FBI issues flash alert after APT groups exploited VPN flaws

• FCW Insider: November 19, 2021

• Build Back Better passes House

• Canadian Teen Arrested Over Theft of $36 Million in Cryptocurrency

• How enterprises need to prepare for ‘cyberwar’ conflicts

• Deals: Amazon Discounts Every Model of the 2021 12.9-Inch iPad Pro (Up to $150 Off)

• Only a ‘Small Fraction’ of iPhone Users Will Use Self Service Repair Program, Study Suggests

• More and More Companies Are Getting Hit with Ransomware

• VMware Recognized for ESG Leadership with Invitation to Dow Jones Sustainability Indices for 2nd Consecutive Year

• Rookies Needed – Experience Required

• Is your company having Cyber Immunity

• Have the .NET Framework’s Security Woes Finally Come to an End?

• Japan Should Work With AUKUS For Cybersecurity, AI, Says Former PM

• Deprecating the cookie: The impact of eliminating third-party identifiers

• U.S Banks Required to Report Cyberattacks to Regulators Within 36 Hours

• #IRISSCON: 12 Ways to Defend and Respond to Cyber-Attacks Effectively

• To Beat Ransomware, Apply Zero Trust to Servers Too

• Policymakers want to regulate AI but lack consensus on how

• North Korea-linked TA406 cyberespionage group activity in 2021

• What happened in the easyJet data breach?

• Zero Trust: An Answer to the Ransomware Menace?

• New Rowhammer Technique

• Campaign for Nuclear Disarmament Is Wrong on AUKUS Deal

• Most Inspiring Women in Cyber 2021: Rea James, Global Cyber Strategic Threat Intelligence Lead at Vodafone

• Linux Malware and Web Skimmer Deployed on E-commerce Servers

• Iranian Hackers Are Going After US Critical Infrastructure

• BOE’s Display for 2023 iPhone Expected to Put Pressure on LG

• Glitch Platform Abused by Phishing Hackers

• How to Design IoT Security From the Ground Up

• California Pizza Kitchen Says Employee Data Stolen in Breach

• Vaccine Research Among Cyber Attack Targets

• California Pizza Kitchen Suffers Breach Of Employee SSN

• Study – Most Online Shoppers Remain With Retailer After A Breach, Experts Weigh In

• UK And US Join Forces To Strike Back In Cyber-space

• Squirrelwaffle Exploits ProxyShell and ProxyLogon to Hijack Email Chains

• Amazon Web Services Opens Cloud Skills Training Centre

• FBI warning: This zero-day VPN software flaw was exploited by APT hackers

• California Pizza Kitchen Serves Up Employee SSNs in Data Breach

• U.S. Charged 2 Iranian Hackers for Threatening Voters During 2020 Presidential Election

• 11 Malicious PyPI Python Libraries Caught Stealing Discord Tokens and Installing Shells

• Microsoft Warns of Iranian Hacker Group That Rapidly Adapts New Tools & Techniques

• SnapAttack Spins Out of Booz Allen Hamilton With $8 Million in Funding

• U.S. Charged 2 Iranians Hackers for Threatening Voters During 2020 Presidential Election

• Researchers shed light on hidden root CAs

• The IT Sector Targeted by Iranian State Cybercriminals, Microsoft Says

• BrazKing Is Making a Comeback

• GBG to Acquire Acuant in $736 Million Deal

• Locked Out of ‘God Mode’, Runners Hack Their Treadmills

• Apple Delays Return To Office Again

• Avast One Password Protection | Avast

• 10 Fundamental Rights for Crypto Users | Avast

• Ransomware is now a giant black hole that is sucking in all other forms of cybercrime

• SecurityWeek to Host Security Operations Summit as Virtual Event Dec. 8

• Files Within Password-Protected WinRAR Archives Locked by New Memento Ransomware Group

• Security is the Achilles’ heel of multicloud

• North Korean Hacker Group Intensifies Espionage Campaigns

• #IRISSCON: Transition from Cybersecurity to Cyber-Immunity, Says Eugene Kaspersky

• Conti ransomware operations made at least $25.5 million since July 2021

• Malicious PyPl Packages Downloaded 40,000+ Times

• Suspected EncroChat Drug Trafficker Faces Trial

• FBI Issues Flash Alert on Actively Exploited FatPipe VPN Zero-Day Bug

• A Simple 5-Step Framework to Minimize the Risk of a Data Breach

• What Is Email Spoofing and How to Stay Protected

• What Is Endpoint Security?

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Android banking Trojan BrazKing is back with significant evasion improvements

• Criminals have made off with over $10 billion in ‘DeFi’ scams and thefts this year

• Most Important Web Application Pentesting Tools & Resources – 2021

• Defending critical infrastructure: The status quo isn’t working

• New infosec products of the week: November 19, 2021

• What is Endpoint Security?

• Experts Expose Secrets of Conti Ransomware Group That Made 25 Million from Victims

• Lack of API visibility undermines basic principle of security

• Apple autonomous cars to be out by 2025

• Memento Ransomware exhibits new traits, says Sophos

• How to handle third-party security risk management

• New Side Channel Attacks Re-Enable Serious DNS Cache Poisoning Attacks

• How to strengthen incident response in the health sector

• Penetration Testing for Cloud-Based Apps: A Step-by-Step Guide

• 52% of SMBs have experienced a cyberattack in the last year

• Top lesson from SolarWinds attack: Rethink identity security

• Gaps in IT staff skills causing stress and decreased productivity

• Search CT Logs for Misconfigured SSL Certificates

• Big data in IoT market to reach $50.9 billion by 2026

• CCSP vs. Microsoft Certified: Azure Administrator Associate — How Does Vendor Focus Factor In?

• Reversing a binary using GDB: tutorial for Reverse Engineers

• Web trust dies in darkness: Hidden Certificate Authorities undermine public crypto infrastructure

• How Hackers Use Payloads to Take Over Your Machine

• Teach and Write about Cybersecurity Law and Policy at the University of Texas, with the Strauss Center!

• ‘My bank account was in a shambles’: The ordeal of an identity theft victim

• US Government declassifies data to foster would‑be defenders

• By the Numbers: The State of Security in eCommerce

• Keysight Technologies and Credo accelerate validation of 800GE devices and network infrastructure

• JFrog collaborates with Slack to raise awareness of important software development events

• Apple’s Self Service Repair Program Must Live Up To Its Promises

• Report: 98% of IT leaders concerned about security challenges due to hybrid workforce

• Bitdefender vs. McAfee: Consumer & Enterprise Endpoint Security Software Compared

• Arista joins Microsoft Intelligent Security Association to help improve customer security

• Patch now! FatPipe VPN zero-day actively exploited

• Ontic raises $40M to accelerate product development and establish new partnerships

• SnapAttack raises $8M to empower collaboration among the next generation of threat hunters

• Russian language hacking forums warming up to Chinese hackers

• Microsoft Exchange Server Flaws Now Exploited for BEC Attacks

• Cyber Defense Labs promotes Michael Spotts to COO

• Langevin tees up cyber legislation for 2022

• Top Secure Email Gateway Solutions for 2021

• Microsoft addresses a high-severity vulnerability in Azure AD

• Canadian teen nabbed in $36.5M crypto heist – possibly the biggest haul yet by a single individual

• Github cookie leakage – thousands of Firefox cookie files uploaded by mistake

• Two Iranian Nationals Charged for Cyber-Enabled Disinformation and Threat Campaign Designed to Influence the 2020 US Presidential Election

• How Iran Tried to Undermine the 2020 US Presidential Election

• Boffins find way to use a standard smartphone to find hidden spy cams

• IT Security News Daily Summary 2021-11-18

• A quick guide to modern cryptography

• Report: 55% of Americans say paying ransoms encourages more cybercrime

• North Korean Cyber-criminal Recycles Tactics and Targets

• Palo Alto Networks raises FY22 revenue guidance

• Ransomware Phishing Emails Sneak Through SEGs

• EFF Tells Court to Protect Anonymous Speakers, Apply Proper Test Before Unmasking Them In Trademark Commentary Case

• Apple Shares ‘A Dozen Eggs’ Shot on iPhone Video

• Phishers target TikTok influencers with verification promises and copyright threats

• Cyber Security in the Public Sector: Global Trend Toward Increasingly Lucrative Public Sector Targets

• US Indicts Iranians for Election Meddling

• California Pizza Kitchen Suffers Data Breach

• Attackers deploy Linux backdoor on e-stores compromised with software skimmer

• 3 pillars of effective digital vaccine passports

• How to install the OpenSSH server on Windows with PowerShell

• Iran is ‘leapfrogging our defenses’ in a cyber war ‘my gut is we lose’: Hacking expert Kevin Mandia

• How common are ransomware attacks? Lawmakers want to find out.

• Thousands of Firefox users accidentally commit login cookies on GitHub

• Man Charged with Impersonating Female Minnesota Student Online

• Federal government still in the dark on ransomware

• 3 Top Tools for Defending Against Phishing Attacks

• Windows 11 SE: Why it’s both more and less locked down than Windows 10 S

• Supply Chain Security Fears Escalate as Iranian APTs Caught Hitting IT Services Sector

• Overworked CISOs are Skipping Family Vacations and Holidays

• Cybersecurity Mesh, Decentralized Identity Lead Emerging Security Technology: Gartner

• Belkin Launches $150 3-in-1 Charger With Fast Charging for Apple Watch Series 7

• A Memoir From the Head of Saudi Intelligence

• The Chatter Podcast: Leadership, Sports, and Intelligence Innovation, with Sue Gordon

• Biden vs. Trump: Who Has the Last Word on Presidential Records?

• Dept. of Justice indicts two Iranians for interfering in the 2020 election

• Apple Working Toward Fully Autonomous Car With No Steering Wheel or Pedals, Aiming to Launch in 2025

• Apple Employees Expected to Return to Offices in February

• AAPL Stock Sets New All-Time High Following Latest Apple Car Rumors

• Apple Releases watchOS 8.1.1 With Fix for Apple Watch Series 7 Charging Issue

• Microsoft named a Leader in IDC MarketScape for Modern Endpoint Security for Enterprise and Small and Midsize Businesses

• A Guide to Ransomware: Prevention and Response

• How Malware Analysis Helps You Detect Reused Malware code

• Ransomware Threats Affecting the Public Sector

• Why DOD is so bad at buying software

• Best Practices for Robust Identity Management

• Are Companies Unprepared For Ransomware Attacks On Weekends And Holidays

• (ISC)² Chapter Creates Space for Entry-Level Members and Professional Connections

• We Heard You: Updates to the (ISC)² Ethics Questions

• Google takes a bold step toward securing your Gmail, but not without many complaints

• Privileged account management challenges: comparing PIM, PUM and PAM

• Meet the FluBot malware that is targeting Smart Phones worldwide

• Uncovering brandjacking with VirusTotal

• Artists, Rights Groups Protest Use Of Amazon One Palm Scanner

• EU May Ease State-Aid Rules To Help Fund New Chip Factories

• Revealed: The 200 Most used and Worst Passwords of 2021

• The State of Malware Analysis

• Digital Transformation Needs to (Re)Start with Security

• The UK pushes for better supply chain cybersecurity

• FBI: FatPipe VPN Zero-Day Exploited by APT for 6 Months

• Consumers like the benefits of online shopping despite the security risks

• How midsize companies are vulnerable to data breaches and other cyberattacks

• Cyber Defenders Should Prepare for Holiday Ransomware Attacks

• Acronyms Aside, the SOC of the Future Needs These 3 Capabilities

• New side channel attack resurrects DNS poisoning threat

• #IRISSCON: Understanding the Reality of Cyber Threats to Improve Defenses

• Drupal Releases Security Updates

• Zero-Day flaw in FatPipe products actively exploited, FBI warns

• Implementing ANSSI security recommendations for RHEL 7 and 8

• Black Friday Spotlight: Target Offers $15 Gift Card With Purchase of $100 Apple Gift Card

• Apple Researching All-Glass iPhone and Apple Watch Designs

• Microsoft unpacks comprehensive security at Gartner and Forrester virtual events

• Golang-based BotenaGo Malware Targets IoT Devices With Dozens Of Exploits

• Drupal Releases Security Updates

• FBI: FatPipe VPN Zero-Day Exploited By APT For 6 Months

• UK And US Join Forces To Strike-Back In Cyber-Space

• Hackers Backed By Iran Are Targeting US Critical Infrastructure

• Microsoft Exchange and Fortinet Vulnerabilities Exploited by Iranian APT

• Iranian targeting of IT sector on the rise

• Coast Guard completes on-shore MHS Genesis deployment

• FBI wants input on cyber reporting legislation

• DOD still struggles with IT controls, audit finds

• Spear-Phishing Campaign Exploits Glitch Platform to Steal Credentials

• New ETW Attacks Can Allow Hackers to ‘Blind’ Security Products

• Apple’s Mail Privacy Protection feature – watch out if you have a Watch!

• S3 Ep59: Emotet, an FBI hoax, Samba bugs, and a hijackable suitcase [Podcast]

• #IRISSCON: Security Industry Should Change the Rhetoric Around Cyber-Threats

• PerSwaysion Phishing Campaign Continues to Be an Active Threat for Organizations

• Swarm Intelligence May Be Just the Ticket for Improved Network & Device Security

• NCSC Releases 2021 Annual Review

• NDR unveiled as essential when complying with the Executive Order

• CISA Publishes Cybersecurity Playbooks for FCEB Agencies

• NCSC Report Shows Massive Spike In Russian Ransomware Attacks

• Armis study highlights device management complexities for NHS Trusts

• Most Inspiring Women in Cyber 2021: Gamze Konyar, Head of Cyber at Marsh CEE & Eastern Mediterranean Regions

• 3 Reasons for Attack Surface Scanning

• White House releases ‘vision’ for management agenda

• Cloud security firm Lacework secures $1.3 billion in new funding round

• Israel Defence Minister’s Cleaner Charged With Spying for Iran

• MDR Company Expel Raises $140 Million at Unicorn Valuation

• DuckDuckGo Wants to Stop Apps From Tracking You on Android

• Boosting Remote Access Security: Public Preview of Remote Desktop Protocol Support for Duo Network Gateway

• What’s the biggest threat to your best-laid plans? Events, dear boy. Events

• Rising Cyber Insurance Premiums Highlight Importance of Ransomware Prevention

• Managed detection and response provider Expel raises $140.3M

• Passwordless authentication platform Stytch raises $90M

• Device Management Complexities Could Create Cybersecurity Gaps And Leave NHS Trusts Vulnerable

• Update now! Netgear vulnerability patched

• Intel Security Flaw Affects Pentium, Atom, Celeron Chips

• Kandji, an Apple device management platform for enterprises, raises $100M

• Mabl aims to automate software testing, nabs $40M

• Microsoft Informs Users of High-Severity Vulnerability in Azure AD

• Cloud Security Firm Lacework Raises Record-Breaking $1.3 Billion

• China’s APT41 Manages Library of Breached Certificates

• How to Build a Security Awareness Training Program that Yields Measurable Results

• Critical Root RCE Bug Affects Multiple Netgear SOHO Router Models

• 90% Of IT Execs Are Embracing SASE Migrations

• Lacework lands $1.3B to expand its cloud cybersecurity platform

• Apple-Designed 5G Modem to Be Separate From A-Series Chip, Again Rumored to Debut in 2023 iPhones

• Russian Ransomware Gangs Might be Collaborating with Chinese Hackers

• To the Black Axe: #GardaWillGetYou

• Top 5 Recent Data Breaches: Causes and Lessons

• Ditto raises $9M to connect devices peer-to-peer

• How to Improve Red Team Effectiveness using Obfuscation

• FBI Warns of Actively Exploited FatPipe Zero-Day Vulnerability

• Google Signs Deal For News From AFP

• High severity Intel chip flaw left cars, medical and IoT devices vulnerable

• Amazon’s Dark Secret: It Has Failed to Protect Your Data

• TikTok Influencer Accounts Targeted in Major Phishing Campaign

• Quick Hits

• Solving the Right to be Forgotten Problem

• Amazon May Drop Visa As US Credit Card Partner – Report

• Russian Cybercrime Forums Open Doors to Chinese-Speakers

• Phishing campaign targets Tiktok influencer accounts

• Threat Actors Discuss Leasing Zero-Day Exploits

• Shop Safely on Black Friday and Cyber Monday – Intego Mac Podcast Episode 214

• NSA Grants Boost University’s Cyber Academy

• Global Europol taskforce identifies 18 child victims of sexual abuse

• 7 essential tips to stay safe shopping online, Cyber Week and all year

• Microsoft Warns about 6 Iranian Hacking Groups Turning to Ransomware

• US, UK and Australia warn of Iran-linked APTs exploiting Fortinet, Microsoft Exchange flaws

• Do you know what your supply chain is and if it is secure?

• The six most common threats against the device that knows you best

• Bots are lurking in your zombie and shadow APIs

• Hackers Hijacked Alibaba Servers to Install Cryptominer Malware

• How to improve your SaaS security posture and reduce risk

• Hack In The Box announces key speakers ahead of HITB+CyberWeek 2021, brought by DisruptAD

• The COVID-19 crisis has fueled the increase of cybercrime in all its forms

• Cyber Threat by using own name as Password

• Microsoft servers facing Iranian Cyber Threat

• US, UK, and Australia pin Iran for exploiting Fortinet and Exchange holes

• Cyber complexity negatively impacts a company’s ability to respond to threats

• Security leaders need more data and context to conduct cloud investigations

• Cybersecurity for Oil and Gas: An Overview

• New Partnership to Invest in Cybersecurity Startups

• NSA Grants Boost University’s Cyber Academy

• Reality check: Your security hygiene is worse than you think it is

• The Dawn of True IoT Security

• (ISC)² Cybersecurity Entry-Level Certification Exam Topics Announced

• AT&T Cybersecurity’s managed SASE service wins CyberSecurity Breakthrough award

• Singaporean regulator punishes biggest-ever data breach: almost 5.9 million hotel customers’ info exposed

• CyberGRX Predictive Risk Profile allows users to monitor and analyze third-party risk

• Jetico BCWipe Total WipeOut 5 offers an enhanced overview of all wiping operations

• Palo Alto Network CASB helps organizations enable safe adoption of SaaS

• Report: The ROI of Modern Pentesting 2021

• Guardicore strengthens existing ransomware protection capabilities

• Spirion adds new capabilities to manage privacy risk and ensure data compliance for enterprises

• BlastWave BlastShield addresses the three most common attack vectors

• BigID Privacy Impact Assessment evaluates data processing risk

• Druva Data Resiliency Cloud empowers organizations to protect critical data

• New evolving Abcbot DDoS botnet targets Linux systems

• Nokia launches SaaS services to strengthen business outcomes for CSPs

• Nebulon smartIaaS provides multi-cloud solution for hosted and customer-owned data centres

• Terranova Security Click and Launch prepares organizations for various cyber attack scenarios

• What Are The Best Ways To Detect Malicious Activity?

• i-PRO introduces 360° fisheye cameras with embedded AI-capabilities for real time analytics

• Threat intelligence platform DomainTools acquires Farsight Security

• Large-scale global cyber project aims to answer most pressing security questions

• Infosys partners with MIT Technology Review to help enterprises maximize value from the cloud

• Nexthink collaborates with Citrix to improve the employee remote work experience

• Karlsgate and LexisNexis Risk Solutions deliver secure patient data for healthcare

• Justt raises $70M to help global merchants fight false chargebacks with smart technology

• KeyCaliber raises $2.6M to accelerate platform development and propel go-to-market channels

• Norway orders Sectra Tiger solution to protect their most sensitive communication

• NC town builds IoT center of excellence

• Tech CEO Pleads to Wire Fraud in IP Address Scheme

• authID.ai appoints Neepa Patel to its Board of Directors

• Sedric raises $3.5M to support its global expansion and transform fintech compliance

• Analysis: Are better debriefings driving down protests?

• Ohio Attorney General Sues Facebook For Deceiving Users About The Potential Harm It Causes

• CyberSaint appoints Jerry Layden as CEO

• Recruitment is top of mind for OPM’s Kiran Ahuja

• Palo Alto Networks Delivers What’s Next in Security at Ignite ’21

• Sift Acquires Passwordless Authentication Pioneer Keyless to Provide Secure, Frictionless Authentication

• CISA Releases Incident and Vulnerability Response Playbooks to Strengthen Cybersecurity for Federal Civilian Agencies

• Buying Data and the Fourth Amendment

• Lawfare Live: A Discussion on the January 6 Committee’s Recent Activity

• IT Security News Daily Summary 2021-11-17

• Cryptography and Secure Connection: How It Works

• IT skills gap is forcing leaders to prioritize cloud and security hires

• Coast Guard completes MHS Genesis deployment

• Can I Have XDR Without EDR?

• Netflix Bait: Phishers Target Streamers with Fake Service Signups

• Fake Ransomware Infection Hits WordPress Sites

• Netgear fixes code execution flaw in many SOHO devices

• Malwarebytes slams Apple for inconsistent patching

• CISA Adds Four Known Exploited Vulnerabilities to Catalog

• Merry #pwnedmas!

• Apple’s Plan to Pay $100 Million to Settle Developer Lawsuit Gets Preliminary Approval From Judge

• Stellar Cyber raises $38M to provide 360-degree visibility across attack surface

• Accessibility: A roadmap for creating an equitable experience

• Cloud Data Protection Startup Laminar Closes $32M Funding Round

• CISA Adds Four Known Exploited Vulnerabilities to Catalog

• An in-depth look at hacking back, active defense, and cyber letters of marque

• US to Sell $56M in Seized Crypto-currency

• Cybercriminals Contemplate ‘Exploit-as-a-Service’ Model

• CISA releases incident response plans for federal agencies

• Review: 2021 Ford Mustang Mach-E Brings Wireless CarPlay to a Huge Infotainment Display

• iFixit Lauds Apple’s New Self Service Repair Program, Calls It a ‘Remarkable Concession’

• Guidance for Azure Active Directory (AD) keyCredential property Information Disclosure in Application and Service Principal APIs

• Bogus JS libraries become sustained ransomware threat for Roblox gamers

• Intel confirms two local security issues that affect many Intel processor generations

• “Small Lapses” Lead To Ransomware Attacks, WordPress Hack

• Deals: AirTag 4-Pack Drops to $87.99 for Amazon Prime Members

• Review: 2021 Ford Mach-E Brings Wireless CarPlay to a Huge Infotainment Display

• Fortanix reveals confidential AI for seamless app development

• Key Takeaways From the Glasgow Climate Pact

• Managing the Cybersecurity Vulnerabilities of Artificial Intelligence

• Stripchat database mess up exposes 200M adult cam models, users’ data

• Infrastructure law: High-speed internet is as essential as water and electricity

• 5 predictions to help you focus your web app security resources in 2022

• Apple Releases iOS 15.1.1 With Call Improvements for iPhone 12 and 13 Models

• SIMS Software Named a Premier Sponsor in the 2021 ‘ASTORS’ Awards

• Cybercriminals are looking forward to 2022, so you need to plan your response now

• 5 Things ML Teams Should Know About Privacy and the GDPR

• How Imperva Leverages AWS to Help Customers Prevent Attacks

• UK witnesses an increase in ransomware attacks from Russia

• BrandPost: Retail Data Needs Better Security in a Contextual World

• Apple To Allow iPhone Users To Repair Their Own Device

• Hardening Your Kubernetes Cluster: Threat Model (Part 1)

• Visualizing data for on-demand transit planning

• Adopting a Zero Trust approach throughout the lifecycle of data

• Singapore delays satellite road toll system due to global chip shortage

• Exchange, Fortinet Flaws Being Exploited by Iranian APT, CISA Warns

• How to beef up your multicloud security

• Apple’s Privacy Protection feature – watch out if you have a Watch!

• Is XDR Overhyped?

• What is DevOps and DevSecOps?

• Nokia Launches Cloud Software Subscription Service For Telcos

• Covid Research Remains Prime Target For Cyberattacks – NCSC

• Can Thieves Steal Identities With Only a Name and Address?

• How to protect your organization from ransomware attacks during the holiday season

• U.S., U.K. and Australia Warn of Iranian APTs Targeting Fortinet, Microsoft Exchange Flaws

• Kuo: iPhone 14 and Mixed Reality Headset to Feature Wi-Fi 6E

• Fake ransomware warnings hit WordPress sites: How to stay safe

• (ISC)² Security Congress Goes West – Las Vegas Here We Come!

• Five reasons why MNOs play a central role in the drone ecosystem

• Netgear Patches Code Execution Vulnerability Affecting Many Products

• Hackers Targeting Myanmar Use Domain Fronting to Hide Malicious Activities

• U.S., U.K. and Australia Warn of Iranian Hackers Exploiting Microsoft, Fortinet Flaws

• Getting started with Red Hat Insights and OpenSCAP for compliance reporting

• Robinhood Hack Also Included Thousands Of Phone Numbers

• FBI Email Hoaxer ID’ed By The Guy He Allegedly Loves To Torment

• Over 7 Million Robinhood Customers’ Data Stolen & Sold on a Popular Hacking Forum

• Report: 95% of businesses will make multicloud a strategic priority in 2022

• Phishing Scam Aims to Hijack TikTok ‘Influencer’ Accounts

• Your weak passwords can be cracked in less than a second

• Iranian Government-Sponsored APT Cyber Actors Exploiting Microsoft Exchange and Fortinet Vulnerabilities

• DNS Cache Poisoning Comes Back To Linux

• Evil Corp: Searching For The World’s Most Wanted Hackers

• Deals: B&H’s ‘Holiday Head Start’ Sale Offering Discounts on HomePod Mini, 14-Inch MacBook Pro, and More

• Bringing commercial innovations in chip design to national security

• How to Navigate the Mitigation of Deepfakes

• Another Intel Chip Flaw Puts a Slew of Gadgets at Risk

• The rise of millionaire zero-day exploit markets

• Emergency Powers Reform Within Grasp

• Most Inspiring Women in Cyber 2021: Jennifer Valentine, Security Specialist Lead at Jamf

• Top Cybersecurity Threats Around the Globe

• Now Iran’s state-backed hackers are turning to ransomware

• You Need a Password Manager. Here Are the Best Ones

• Learn Subscriptions: Course Structure and New Courses

• Apple Announces Self Service Repair Program, Starting With iPhone 12 and 13

• Iranian Government-Sponsored APT Cyber Actors Exploiting Microsoft Exchange and Fortinet Vulnerabilities in Furtherance of Malicious Activities

• Iranian Government-Sponsored APT Cyber Actors Exploiting Microsoft Exchange and Fortinet Vulnerabilities

• Is Microsoft Stealing People’s Bookmarks?

• Bugcrowd correlates $27bn risk reduction with ethical hacking to find vulnerabilities

• Protecting Against Ransomware: Zero Trust Security For a Modern Workforce

• Analyzing ProxyShell-related Incidents via Trend Micro Managed XDR

• Tesla Sued By JPMorgan Over Elon Musk Privatisation Tweet

• Open XDR Company Stellar Cyber Raises $38 Million

• Insider Threats Can Turn Your Cloud Security Into a Storm

• Why are you still using QWERTY? 2021’s most common passwords revealed

• The ransomware threat is getting worse. But businesses still aren’t taking it seriously

• GitHub fixed serious npm registry vulnerability, will mandate 2FA use for certain accounts

• CISA Releases Incident and Vulnerability Response Playbooks

• Organizations More Susceptible to Ransomware Attacks During Weekends and Holidays

• Apple Music App for LG Smart TVs Now Available

• The US Space Force Wants to Clean Up Junk in Orbit

• How to Increase Your PS5’s Internal Storage

• Vaccine research among cyber attack targets

• Intel CPU flaw could enable hackers to attack PCs, cars, and medical devices`

• Israeli spyware firm linked to watering hole attacks on Middle East, UK websites

• New DoubleX Extension Analyzer Tool Detects Rogue Browser Extensions

• Amazon To Stop Accepting Payments From UK Visa Credit Cards

• UK Orders National Security Review of NVIDIA Deal to Buy Arm

• DDoS Attacks Surge 35% in Q3 as VoIP is Targeted

• NCSC Cyber Threat Report: DDoS Trends, Expert Weighs In

• FBI System Hacked To Email Warning Fake Cyberattacks

• Fake Ransomware Attacks Targeted WordPress Sites

• You wanna use GCHQ offshoot NCSC’s threat intel feeds? Why not, say bosses

• UK government publishes guidance on security rules for tech takeovers

• Israel’s Candiru Spyware Found Linked to Watering Hole Attacks in U.K and Middle East

• New Emotet Spam Campaigns Hard at Work

• Pakistani and Syrian Threat Actors Banned from Facebook

• The Trojan Source Is Not Your Mane Problem

• BrazKing Android Malware Upgraded and Targeting Brazilian Banks

• The race to secure Kubernetes at run time

• Report: Flawed data management leads to lost revenue for most companies

• Who’s ready to volunteer for the new CMMC?

• Google wants a place on the next big DOD cloud contract

• FCW Insider: November 17, 2021

• Ghostwriter Disinformation Operation Linked to Belarus

• Team Cymru Acquires Amplicy

• On-Demand Webinar: Into the Cryptoverse

• Advanced threat predictions for 2022

• Emotet stages a comeback via Trickbot and spam

• Software composition analysis explained, and how it identifies open-source software risks

• IBM Eagle Quantum Processor Delivers 127-Qubit

• UK Spooks Handled Record Number of Cyber Incidents Last Year

• Iran-linked APT groups continue to evolve

• Build your own Android security product

• Illuminating the path: Compliance as the key to security-by-design

• Employees Connecting Personal Devices To SMB Networks | Avast

• Facebook Bans Pakistani and Syrian Hacker Groups for Abusing its Platform

• Combating cybercrime: Lessons from a CIO and Marine veteran

• IDC Games – 3,966,871 breached accounts

• The latest trends in online cybersecurity learning and training

• Over $27billion worth Cyber Crime prevented during COVID-19 Pandemic

• DHS offers program to recruit and retain talent in Cybersecurity

• 76% of gamers were financially affected by a cyberattack, losing $700+ on average

• What is challenging secure application development?

• South Korean privacy watchdog apologises for violating privacy while mediating privacy lawsuit

• Businesses are forced to adopt new cybersecurity measures

• Digital transformation spending to reach $2.8 trillion in 2025

• CCSP vs. Symantec Certified Cloud Credentials: How Do They Compare?

• Identity in Africa – an existential right for every citizen

• Starting with strategy – A multi-part series on building a robust cybersecurity program

• Is It Difficult to Bypass Protection That Uses Big Data?

• Remote Work and Cybersecurity in the Legal Industry: What to Know

• Palo Alto Networks Prisma Cloud 3.0 protects cloud environments from development to runtime

• Saviynt Enterprise Identity Cloud secures cloud assets for Microsoft customers

• Viavi Observer 3D 18.6 delivers network visibility across hybrid IT environments

• BioCatch Mule Account Detection brings mule detection capabilities for financial institutions

• WatchGuard increases operational efficiency with four endpoint security modules

• Fortanix Confidential AI uses sensitive data without compromising privacy or compliance

• Palo Alto Networks Cortex XMDR Specialization empowers customers’ security operations

• StorONE S1:Backup enables companies to complete their ransomware recovery strategy

• Darktrace aims to expand into ‘proactive’ security AI by end of year

• Google Maps Warns You About Crowded Areas With Updated ‘Busyness’ Feature

• Code42 partners with Splunk to help security teams and SOC analysts prioritize insider risk

• Mandiant links Ghostwriter operations to Belarus

• SecurityGate.io partners with Network Perception to improve compliance standards for customers

• Quantum Xchange and Thales offer quantum-resistant network security for protecting data

• 5 Signs Your Device May be Infected with Malware or a Virus

• ThreatX names David Howell as CMO

• Stellar Cyber raises $38M to expand its Open XDR success and increase market footprint

• Holly Grey joins Exabeam as CFO

• SecurID hires Greg Nelson as President and Chief Business Officer

• Vaccine mandate, holiday travel season loom for TSA workforce

• FBI wants in on cyber reporting legislation

• FBI Email Hoaxer ID’ed by the Guy He Allegedly Loves to Torment

• IT Security News Daily Summary 2021-11-16

• BrandPost: Security Threat Researchers Uncover “Dropper-as-a-Service Platforms”

• Data management platform Bigeye unveils rapid dataset validation tool

• IT controls still a pain point, DOD audit finds

• Emotet Makes a Comeback

• New Global Rackspace Technology Survey Underscores Rapid Pace of Cloud Adoption

• GitHub addressed two major vulnerabilities in the NPM package manager

• Limited-Edition Beats Flex Launching in Collaboration With Fragment Design

• Rooting Malware Is Back for Mobile. Here’s What to Look Out For.

• How to create security metrics business leaders care about

• Report: Facebook Has Continued Collecting Teens’ Data For Advertising Despite Promises

• Cybercriminals Increasingly Employ Crypto-Mixers to Launder Stolen Profits

• The inside story of ransomware repeatedly masquerading as a popular JS library for Roblox gamers

• Emotet malware reemerges, building botnet via Trickbot malware

• A Foray into Fuzzing

• Why we should insist on technology-neutral broadband infrastructure funding

• 14 tactics to use during a ransomware negotiation

• Emotet is Rebuilding its Botnet

• Strategic web compromises in the Middle East with a pinch of Candiru

• Chrome 96 Plugs High-Risk Browser Flaws

• The Old Ways Aren’t Working: Let’s Rethink OT Security

• REvil Is Down—For Now

• 200M Adult Cam Model, User Records Exposed in Stripchat Breach

• Blacksmith: Rowhammer Fuzzer Bypasses Existing Protections

• Apple Updates AirPods Pro Firmware to Version 4A402 and AirPods 3 Firmware to 4B66

• Everything New in iOS 15.2 Beta 3: Macro Mode Updates, iCloud Private Relay Tweaks and More

• TrickBot helps Emotet come back from the dead

• Lock up your Office macros: Emotet botnet back from the dead with Trickbot links

• ESET Finds Candiru Campaign On UK, Middle East Websites

• Hackers Targeted Afghan Officials on Facebook Amid Taliban Offensive

• HTML Smuggling Techniques on the Rise: Microsoft

• Protecting today’s web applications requires more than a firewall

• Protect against phishing with Attack Simulation Training in Microsoft Defender for Office 365

• Army seeks to leverage native analytics for supply chain resilience

• The big lift: Modernizing state UI systems

• Best VPN Black Friday deals: Surfshark for $2.21/mo, NordVPN for $3.29/mo

• FBI Hacker Offers to Sell Data Allegedly Stolen in Robinhood Breach

• Microsoft releases out-of-band update for Windows Server

• 3 ways to balance app innovation with app security

• Ethical Hackers Stymie $27bn of Cybercrime

• ‘Ghostwriter’ Looks Like a Purely Russian Op—Except It’s Not

• A nanoantenna for long-distance, ultra-secure communication

• MosesStaff Locks Up Targets, with No Ransom Demand, No Decryption

• GitHub Confirms Another Major NPM Security Defect

• The self-driving smart suitcase… that the person behind you can hijack!

• 4 Considerations for Improving Cloud Security Hygiene

• New Blacksmith Exploit Bypasses Current Rowhammer Attack Defenses

• Qualcomm Expecting to Supply Just 20% of 2023 iPhone Modems As Apple Prepares to Launch Its Own Chips

• Apple Seeds Third Beta of watchOS 8.3 to Developers

• Apple Seeds Third Betas of iOS 15.2 and iPadOS 15.2 to Developers

• Apple Seeds Third Beta of macOS Monterey 12.1 to Developers

• Protect against phishing with Attack Simulation Training in Microsoft Defender for Officer 365

• Apple brings feature back that allow users to report fraudulent apps

• Cyber Threats to Veterans in 2021: Spam and Scams Exploit Support for Veterans

• Big data privacy for machine learning just got 100 times cheaper

• What To Know to Fight Against Cyber Attacks

• GitHub fixes authorisation vulnerability in the NPM JavaScript package registry

• Call to Patch: Zero Day Discovered in Enterprise Help Desk Platform

• CAPTCHA (Completely Automated Public Turing Test to Tell Computers and Humans Apart)

• The concrete effects of body cameras on police accountability

• Belarus government accused of ‘partial responsibility’ for Ghostwriter campaigns

• K-12 School Districts Failing at Cloud Security

• Cisco Bolsters Endpoint Security to Stop Threats with Simple, Unified Defense

• The importance of identity and Microsoft Azure Active Directory resilience

• Moody’s: Cyber Risk Quantification Is Credit Positive

• Five James Bond gadgets which use real world technologies

• 2022 Cybersecurity predictions

• UK Orders Full Investigation Of Nvidia’s ARM Acquisition

• ProxyShell vulnerabilities exploited in domain-wide ransomware attacks

• ‘Ghostwriter’ Looked Like a Purely Russian Op—Except It’s Not

• Learning From China’s Techlash

• Agile Multilateralism Is Needed to Address Cybercrime Safe Havens

• When renting a hitman online goes horribly wrong

• BrandPost: 4 Reasons to Unify Endpoint and Network Protections

• Google To Invest $740 Million After Australia Clash

• FBI Investigates After Internal Server Sent Fake Emails

• How Does Penetration Testing Fit into Your Security Strategy?

• Apple AR Headset ‘Approaching Liftoff’ as Development Mirrors Period Before Apple Watch Launch

• Managing chaos: How 9/11 and the pandemic changed the way organisations understand critical events

• Evolving trends in Iranian threat actor activity – MSTIC presentation at CyberWarCon 2021

• Mozilla sprinkles Firefox Relay with Premium fairy dust

• New Type of Supply Chain Attack Could Put Popular Admin Tools at Risk

• Qualities of a Highly Available Cloud

• Data Breach Pulse Check: On-Prem Database Security

• Ransomware gangs are now rich enough to buy zero-day flaws, say researchers

• Threat Hunting Firm Team Cymru Acquires Attack Surface Management Firm Amplicy

• UK Government Orders Phase Two Review into Nvidia-Arm Deal

• Google Releases Security Updates for Chrome

• Red Hat Global Customer Tech Outlook 2022: Hybrid and multicloud strategies lead the way as funding priorities hold steady

• 1Password 8 for Windows is here, features enhanced security and privacy

• Cryptomining Malware Targets Alibaba ECS Instances

• SharkBot Android banking Trojan cleans users out

• SoNot SoSafe: Android malware disguises itself as secure messaging app

• Joker Malware Disguised As Smart TV Remote App Targets Android Users

• Zero Trust’s Impact on API Security

• How I Got Here: Trevor’s Career Journey Across Four Countries and Five Roles

• Avast Threat Labs Q3 Report | Avast

• Google Releases Security Updates for Chrome

• This New Attack Bypasses Rowhammer Defenses In Most DRAM, Say Researchers

• Robinhood Customers Have Their Email Addresses Available for Sale on Hacker Forum

• Not only MSPs: All cloudy firms are in line for UK security law crackdown

• Amazon Fined $500,000 Over Covid Notification Mistakes

• Justt emerges from stealth with $70M to fight chargeback fraud with AI

• Navigating the Complexity of Today’s Digital Supply Chain

• Adult cam site StripChat exposes the data of millions of users and cam models

• Most Inspiring Women in Cyber 2021: Anjali Das, Partner, Co-Chair Cybersecurity and Data Privacy at Wilson Elser

• EFF’s New Series of How to Fix the Internet Podcast Tackles Toughest Issues in Tech

• As cloud threats inundate businesses, Cado Security aims for rapid expansion

• The US government just launched a big push to fill cybersecurity jobs, with salaries to match

• Palo Alto Networks updates Prisma Cloud to secure the full app lifecycle

• Emotet malware: “The report of my death was an exaggeration”

• New Federal Government Cybersecurity Incident and Vulnerability Response Playbooks

• Deals: Save Up to $149 on Apple’s 2020 M1 Mac Mini, Starting at $599.99 for 256GB

• Mail Privacy Protection Seemingly Undermined by Apple Watch

• Emotet Malware Appears to Be Back in Business

• As cloud threats inundate businesses, Cado Security aims for rapid expansion

• Palo Alto Networks updates Prisma Cloud to secure the full app lifecycle

• Emotet malware: “The report of my death was an exaggeration”

• Emotet Malware Appears to Be Back in Business

• UK Covid App Goes Offline

• Emotet Resurfaces on the Back of TrickBot After Nearly a Year

• Fear and shame are making it harder to fight ransomware and accidental data loss, report finds

• Intel CPU Vulnerability Can Expose Cryptographic Keys

• New Federal Government Cybersecurity Incident and Vulnerability Response Playbooks

• Heimdal™ Black Friday E-Fraud Study Reveals Upsurge in Cryptomining Domains

• Top 5 Considerations for Single Sign-On (SSO)

• Financial advisors struggle with putting their clients into cryptocurrencies

• CrowdStrike Falcon’s Autonomous Detection and Prevention Delivers Another AAA Rating in SE Labs Evaluations

• Everything You Need To Know About Log Analysis

• Palo Alto Networks unveils ML-powered cloud security platform

• New Federal Government Cybersecurity Incident and Vulnerability Response Playbooks

• What Is Privileged Access Management (PAM)?

• 3 Tips for Cyber Risk Mitigation that Drive Operational Efficiencies

• The Importance of Security Control Baselines

• Emotet, once the world’s most dangerous malware, is back

• Emotet Using TrickBot to Get Back in the Game

• Researchers Demonstrate New Way to Detect MITM Phishing Kits in the Wild

• Wire Fraud Scam Upgraded with Bitcoin

• MosesStaff attacks organizations with encryption malware – no payment demand made

• Epic Games CEO Renews Attack on Apple and Calls for Single, Universal App Store

• Heimdal™ Security Feature on Irish Tech News Podcast to Discuss the Recent GLS Scam Insights

• Openreach To Pilot Closure Of Five Telephone Exchange Areas

• Report: 91% of attacks on tech platforms now come from bots

• Why I Hate Password Rules

• Starter Templates Plugin Flaw Affected 1M+ WordPress Sites

• SharkBot Android Trojan Steals Banking and Crypto Accounts

• New Mac malware raises more questions about Apple’s security patching

• 6 key points of the new CISA/NSA 5G cloud security guidance

• Cyber Security in the Public Sector: Global Trend Toward Increasingly Lucrative Public Sector Targets

• FCW Insider: November 16, 2021

• Israeli Entities Targeted by the New Politically-motivated “Moses Staff” Hacking Group

• China Telecom Appeals Against US Ban

• Zoom patches vulnerabilities in its range of conferencing apps

• Peloton bike, Amazon Halo Band and Facebook Portal featured on Mozilla list of holiday gifts lacking privacy features

• New banking Trojan SharkBot makes waves across Europe, US

• Cryptojackers Disable Alibaba Cloud Security Agent

• Notorious Emotet Botnet Makes a Comeback with the Help of TrickBot Malware

• Intel addresses 2 high-severity issues in BIOS firmware of several processors

• Global Operations Lead to Arrests of Alleged Members of GandCrab/REvil and Cl0p Cartels

• Looking for adding new detection technologies in your security products?

• Intel’s recent Atom, Celeron, Pentium chips can be lulled into a debug mode, potentially revealing system secrets

• SharkBot, a new Android Trojan targets banks in Europe

• If cybercriminals can’t see data because it’s encrypted, they have nothing to steal

• OAuth 2.0 Session Clustering

• China Telecom requests court to overturn US ban: Report

• New ‘Moses Staff’ Hacker Group Targets Israeli Companies With Destructive Attacks

• We need a Cyber Awareness Century

• Cloud compliance: Falling out of it could spell doom

• EFF’s How to Fix the Internet Podcast Offers Optimistic Solutions to Tech Dystopias

• Podcast Episode: What Police Get When They Get Your Phone

• Gravity Malware Returns As Fake Encrypted Chat App To Steal Sensitive Data

• How do I select a policy automation solution for my business?

• Operational technology and zero trust

• China Telecom’s US arm sues in last-ditch bid to retain license

• China makes cybersecurity inspections mandatory for companies

• Some details about PhoneSpy Malware

• SharkBot — A New Android Trojan Stealing Banking and Cryptocurrency Accounts

• New BotenaGo Botnet With 30+ Exploits Targets Millions Of IoT Devices

• Shrinking cyber budgets are leaving businesses at risk

• Ducks Unlimited – 1,324,364 breached accounts

• Cultural divide between IT and OT teams leaves 65% of organizations unable to secure both environments

• Internal audit leaders expect new risks to emerge post-pandemic

• 5G and edge computing will lead an app development revolution

• Executech Announces Acquisition of Elevate

• Why retailers must adopt a Zero Trust approach during this holiday season

• NICE Actimize IFM-X Dark Web Intelligence detects fraud and account takeover threats

• RangeForce launches tiered offering for security teams to combat current and emerging threats

• ACI Worldwide Network Intelligence Technology protects customers in a real-time fraud environment

• FBI systems compromised to send out fake attack alerts

• Zyxel collaborates with Avira to help SMBs defend against unknown threats

• Immuta strengthens Snowflake integration to evolve complex data access control policies

• Ducks Unlimited (unverified) – 1,324,364 breached accounts

• Immersive Labs acquires Snap Labs to bring cyber simulations customized for specific environments

• Digivault partners with Asset Reality to assist law enforcement agencies with asset recovery

• Chinese Communist Party official expelled for mining cryptocurrency

• Army seeks native data analytics in its logistics systems

• T-Mobile’s ‘Ultra Capacity’ 5G Now Covers 200 Million People

• Netography raises $45M to secure the atomized network and boost technology innovations

• OneSpan appoints Matthew Moynahan as President and CEO

• Booz Allen spins out SnapAttack to a new cyber threat hunting and detection company

• The Troubling Rise of Internet Access Brokers

• Cybersecurity is a growing field that can benefit from hiring veterans

• Hacker Compromises FBI Server to Send Fake Emails

• Immersive Labs Acquires Snap Labs to Power Cyber Simulations With New Depth and Realism

• Operation Reacharound – Emotet malware is back

• IT Security News Daily Summary 2021-11-15

• Report: 60% of orgs hit by ransomware-as-a-service attacks in the past 18 months

• New York needs to get ahead of cyberattacks, audit finds

• Norton Special Report Reveals Nearly 1 in 2 Gamers Have Experienced a Cyberattack

• Trend Micro: 90% of IT Decision Makers Believe Organizations Compromise on Cybersecurity in Favor of Other Goals

• Apple Adds 120Hz Scrolling for New MacBook Pro Models in Latest Safari Technology Preview Release

• GSA announces $150M in Federal Citizen Services Fund projects

• Data transparency helps builds public faith in police

• The Best Ransomware Response, According to the Data

• FBI Attributes Abuse of Its Email Account to Software ‘Misconfiguration’

• When the world ends, all that will be left are cockroaches and new Rowhammer attacks: RAM defenses broken again

• FBI email system compromised to issue fake alerts

• Apple’s Home Services Head Departs Company After Two Years

• virus hoax

• High-Severity Intel Processor Bug Exposes Encryption Keys

• Cloudflare Battles 2 Tbps DDoS Attack Launched by Mirai Botnet

• Microsoft Says HTML Smuggling Attacks On The Rise

• Cloudflare mitigated 2 Tbps DDoS attack, the largest attack it has seen to date

• Book Sale: Click Here to Kill Everybody and Data and Goliath

• TechTank: In the U.S.A.’s Tech-Driven Economy, Is Enough Being Done to Protect Consumer Choice and Privacy?

• 3 ways agencies can fix their lagging digital verification infrastructures

• Cybercriminals Target Alibaba Cloud for Cryptomining, Malware

• Federal Agencies Need to Be Staffed to Advance Broadband and Tech Competition

• America, when you’re done hitting us with the ban hammer, see these on-prem Zoom bugs, says Positive

• DHS Cybersecurity Talent Management System

• Fake emails exploited FBI email service to warn of phony cyberattacks

• Hacker accessed FBI server to send fake email threats

• ProxyShell leads to domain-wide ransomware attack

• Scam Spotter Campaign Flags Gift Card Fraud

• How Open Systems uses Microsoft tools to improve security maturity

• How organizations are beefing up their cybersecurity to combat ransomware

• Costco Hit by Card Skimming Attack Heading Into Holiday Season

• Cloudflare Mitigates 2 Tbps DDoS Attack Launched by Mirai Botnet

• Facebook Admits That Content Moderation In Metaverse Will Be “Practically Impossible”

• After Facebook Leaks, Here Is What Should Come Next

• WP Reset PRO Plugin Bug Could Allow Wiping Site Databases

• BrandPost: Keeping Up With the Botnets

• Falcon Spotlight ExPRT.AI Aids Federal Agencies in Meeting CISA Mandate

• Reduce the risk of cyber attacks with frameworks, assessments

• US Journalist Imprisoned for Spreading False Information is Freed

• How to Negotiate With Ransomware Attackers

• Vulnerability Summary for the Week of November 8, 2021

• HYPER Debuts 15-Port Dock That Supports 3 4K Displays

• Apple Defends Its Ads for Third-Party Apps, Says It Regularly Communicates With Developers and Has Been Running Them for Five Years

• Email encryption should be a no-brainer, not a brain melter

• Don’t fall for LinkedIn phishing: How to watch for this credential-stealing attack

• Costco Hit by Card Skimming Attack Head of Holiday Season

• How zero-trust SDP can work with a VPN for remote work

• Vulnerability Summary for the Week of November 8, 2021

• Deepfakes and Synthetic Media Ethics Explained

• Card Skimmers Found At Chicago Costcos

• This Mysterious Malware Could Threaten Millions Of Routers And IoT Devices

• BrandPost: Seeking Digital Innovators for the $1M Future of Life Online Challenge

• BrandPost: Why Innovation Is Critical in Today’s Rapidly Changing Digital World

• BrandPost: Success! Separate Yourself From the Pack for Innovative Online Experiences

• A Journey in Organizational Resilience: The Data Life Cycle

• Immersive Labs Acquires Snap Labs

• JupiterOne and Cisco Announce Launch of Secure Cloud Insights

• IBM Says Quantum Chip Could Beat Standard Chips In Two Years

• FBI System Exploited To Email Fake Cyberattack Alert

• Apple Highlights ‘Disney Melee Mania’ Apple Arcade Exclusive, Shares ‘Fraggle Rock: Back to the Rock’ Teaser

• Amazon Launches Prime Video App for Mac

• Establishing a Humanitarian Financial Corridor for Afghanistan

• Intel chip flaw could enable attacks on laptops, cars, medical devices (CVE-2021-0146)

• AI-driven adaptive protection against human-operated ransomware

• FBI server hijacked to send up to 100,000 bogus attack mails

• Driftwood Security Tool Released to Prevent Private Key Leaks

• HTML Smuggling Attack In The Wild Targeting The Banking Sector

• Multilingual Cybersecurity Awareness Training adapted for your needs

• FBI Email Servers hacked

• New vulnerabilities allowed attackers to intercept Zoom meetings

• FBI Says Its System Was Exploited to Email Fake Cyberattack Alert

• Apple Allegedly Buys Ads for Subscription-Based Apps to Collect More Commission

• Enhancing AT&T SASE with Palo Alto Networks ‘as a Service’

• Netography, which offers security for the ‘atomized’ network, gets $45M

• Cybersecurity M&A Roundup for Second Week of November 2021

• Researchers Demonstrate New Fingerprinting Attack on Tor Encrypted Traffic

• North Korea-linked Lazarus group targets cybersecurity experts with Trojanized IDA Pro

• Costco Credit Card Skimmer Led to Data Breach

• Groups Target Alibaba ECS Instances for Cryptojacking

• This mysterious malware could threaten millions of routers and IoT devices

• Diebold Nixdorf ATM Flaws Allowed Attackers to Modify Firmware, Steal Cash

• FBI email hack spreads fake security alerts. Here’s what to do…

• Exclusive Deals: Start Your Holiday Shopping With 30% Off Any One Item Sitewide at ZAGG/Mophie

• Apple Imposing Strict Terms on U.S. States for Digital IDs in Wallet App

• Cloudflare enables developers to build apps on its serverless platform

• A New Europol Report Says That High Profile Targets Were the Focus of Ransomware Groups

• The hard benefits of soft skills

• Facebook and Google “listening” is more pervasive than you think

• Malicious shopping websites surge in number in advance of Black Friday

• How Visibility Became the Lifeblood of SecOps and Business Success

• Microsoft rolled out emergency updates to fix Windows Server auth failures

• Most Inspiring Women in Cyber 2021: Eleanor Ludlam, Senior Associate at DAC Beachcroft LLP

• Netography, which offers security for the ‘atomized’ network, gets $45M

• Securing Your Smartphone

• Evasive maneuvers: HTML smuggling explained

• MacOS Zero-Day Vulnerability Allowed Keylogging and Screengrabs

• Google Release ClusterFuzzLite Fuzzing Tool As Part Of CI/CD Workflows To Find Bugs

• How big data analytics helps enterprises improve cybersecurity

• How Attackers Exploit the Remote Desktop Protocol

• Cisco partners with JupiterOne for cloud security platform

• 91% of IT leaders affected by supply chain disruption: survey

• As ransomware attacks rise, US government advice to protect K-12 schools is “vastly outdated”

• November 2021 Patch Tuesday: Two Active Zero-Days and Four Publicly Disclosed CVEs

• Cisco Secure Cloud Insights is your Eye in the Sky

• 1-15 October 2021 Cyber Attacks Timeline

• There’s something to be said for delayed gratification when Windows 11 is this full of bugs

• Rookies Needed – Experience Required

• Sketchy Pwned Passwords

• FCW Insider: November 15, 2021

• New cyber talent system, years in the making, goes into effect at DHS

• What Makes Us Click? Cyberscams and The Brain with Martina Dove, PhD

• IoT Protocol Used by NASA, Siemens and Volkswagen Can Be Exploited by Hackers

• Instagram’s memorialize feature abused to memorialize…Instagram’s boss

• Time to upgrade? Windows 10 version 2004 support ends soon

• Costco says card skimmers were found at Chicago-area warehouses, less than 500 people affected

• Network Security Company Netography Raises $45 Million

• 42% of UK Gamers Have Experienced a Cyber-Attack on Their Account or Device

• 3 reasons devops must integrate agile and ITSM tools

• Fake Emails Sent From FBI Address via Compromised Law Enforcement Portal

• Four Things Your CISO Wants Your Board to Know

• Happy 10th Birthday, Security Affairs

• Morgan Stanley initiates CrowdStrike at underweight, says cyber stock is too expensive

• Ancient Olympia To Be Preserved As Virtual Reality Archive

• Toshiba Plans To Break Itself Up Into Three Units

• Elon Musk Sells More Tesla Stock As Value Slides

• Uber Raises London Prices By 10 Percent Amidst Driver Shortage

• Quick Hits

• US and Israel Agree Anti-Ransomware Coalition

• GravityRAT Distributed by Bogus End-to-end Encrypted App

• FBI’s Email Servers Were Hacked

• China looks to classify online data in draft security laws

• CISA: Patch These ICS Flaws Across Multiple Vendors

• North Korean Hackers Target Cybersecurity Researchers with Trojanized IDA Pro

• QAKBOT Trojan returns using Squirrelwaffle as a dropper

• Resecurity brings dark web and threat intelligence to AWS Marketplace

• A week in security (Nov 8 – Nov 14)

• 8 tips for a standout security analyst resume

• How Target’s CISO balances customer security and customer experience

• FBI Fixes Misconfigured Server After Hoax Email Alert

• How to Tackle SaaS Security Misconfigurations

• Trying to register your antivirus in Windows Security Center?

• Alibaba Singles’ Day Growth Slumps Amidst Crackdown

• Two Sony PS5 exploits disclosed the same day

• Strengthen Muscles of Software Systems

• When cybersecurity becomes terrifying

• How to achieve permanent server hardening through automation

• When it comes to securing systems against quantum computers, there is no one-size-fits-all solution

• Intel confirms two local security issues that affect many Intel processor generations

• Digital life after death: Do you have a password-sharing plan in place?

• 10,000+ websites and apps are vulnerable to Magecart

• Cloud API Services, Apps and Containers Will Be Targeted in 2022

• FBI’s Email System Hacked to Send Out Fake Cyber Security Alert to Thousands

• Healthcare organizations at risk: The attack surface is expanding

• US to fight Ransomware Attacks with Israel

• Ransomware gangs targeting companies in M&A transition

• Top risks auditors should cover in their 2022 audit plans

• The future of digital infrastructure: Top 10 predictions

• FBI spams thousands with fake infosec advice after ‘software misconfiguration’

• Skillsoft’s Global Knowledge Skills and Salary Report Finds Three in Four IT Departments Face Critical Skills Gaps

• CISSPs from Around the Globe: An Interview with Dr. Christine Izuakor

• How Achieving Compliance with PCI DSS Can Help Meet GDPR Mandates

• VERT Research Tips: Byting into Python

• eBook: Biometric Authentication For Dummies

• Report: New banking trojans rise 80% each year

• SIMS Software Named a Premier Sponsor in the 2021 ‘ASTORS’ Awards

• BT Inflame uses epidemiological modeling to help combat cyberattacks

• FBI spams thousands after ‘software misconfiguration’

• Bad form: FBI server sending fake emails taken offline and fixed, no data impacted

• ENISA – The need for Incident Response Capabilities in the health sector

• Home Affairs launches new principles for critical technology supply chain security

• IT Security News Weekly Summary – Week 45

• IT Security News Daily Summary 2021-11-14

• Updated: Hundreds of thousands of fake warnings of cyberattacks sent from a hacked FBI email server

• Digital Transformation Security: Guidelines for Success

• Why The Integration of Netops And Secops Is Here To Stay

• Solving Identity Theft Problems: 5 Actionable Tips

• How to Get Out of a Scam

• Upcoming Speaking Engagements

• FTC shares guidance for small businesses to prevent ransomware attacks

• Report: 80% of fintech execs worry about authentication security tools

• Canadian Foreign Intelligence and the Future of Canada-U.S. Relations

• How to fend off cybersecurity burnout

• Campus testbeds pilot smart city solutions to climate threats

• 3D Printing and Engineering; an Overview

• Connecting Red Hat Single Sign-on on Openshift to an External Database

• Threat Report Portugal: Q3 2021

• Week in review: Critical RCE in Palo Alto Networks firewalls, how to select a DRaaS solution

• Security Affairs newsletter Round 340

• Penetration testing

• Multiple Flaws in Citrix ADC, Gateway, and SD-WAN Let Attackers Trigger DoS Condition

• Is Windows 11 Safer Than Windows 10?

• Fuzz in Your Language, Fuzzer, or Architecture

• Bitcoin’s biggest upgrade in four years just happened – here’s what changes

• We Heard You: Updates to the (ISC)² Ethics Questions

• Weekly Update 269

• Report: 99% of federal security pros want the government to increase data protection

• Ransomware attacks are getting more complex and even harder to prevent

• NINJIO appoints Brett Wahlin to Board of Directors

Generated on 2021-11-21 23:59:18.829506