IT Security News Weekly Summary – Week 48

• IT Security News Daily Summary 2021-12-05

• Report: Phishing campaign is actively targeting U.S. military families

• BitMart Exchange hacked as hackers steal $150 million

• First Apple Mixed Reality Headset Rumored to Focus on Gaming, Media, and Communication

• The Historian’s Approach to Understanding Terrorism

• iPad Pro With Wireless Charging, iPad Air 5, and iPad 10 Reported to Debut in 2022

• Apple Planning Five New Macs for 2022, Including Entry-Level MacBook Pro Refresh

• 2022 Apple Watch Lineup Rumored to Include New Apple Watch SE and ‘Rugged’ Model for Sports

• The Importance of Security Control Baselines

• Week in review: 150+ HP multifunction printers open to attack, how to combat ransomware with visibility

• Security Affairs newsletter Round 343

• Types of Encoders

• Mozilla Patched “BigSig” Vulnerability That Affects The NSS Cryptographic Library

• Hundreds of vulnerabilities in common Wi-Fi routers affect millions of users

• German BSI agency warns of ransomware attacks over Christmas holidays

• Different Ways You Can Monitor Personal Data

• Week in review: 150+ HP multifunction printers under attack, how to combat ransomware with visibility

• Penetration testing

• Online Shopping Reminder: If It Looks Too Good To Be True …

• The Best Way to Start Your Cloud Security Career

• Best Practices For GraphQL Security

• Prosimo partners with AWS to simplify and automate cloud networking

• 11:11 Systems acquires Green Cloud Defense to expand its cloud and security capabilities

• Vapor IO appoints Jason Bourg as Senior Director of Revenue and Alliances

• Cloud Security Alliance releases guidance to help organizations optimize business outcomes

• IT Security News Daily Summary 2021-12-04

• VA exploring emerging health care tech

• Weekly Update 272

• Be Cybersmart: 4 ERP Best Practices to Prioritize Security

• Researchers: Facebook Is Still Failing To Remove Medical Misinformation

• Cuba ransomware gang hacked 49 US critical infrastructure organizations

• Malvertising attack distributes malicious Chrome extensions, backdoors

• A Planned Parenthood LA Hack Affects 400,000 Patients

• Convergint Acquires Universal Security Systems, Bolstering Global Growth

• AI in Cybersecurity: How to Cut Through the Overhype and Maximize the Potential

• Four Cybersecurity Tips Everyone Should Know Before Black Friday and Cyber Monday

• Top Stories: iPhone SE 3 in Early 2022, macOS Monterey Tips, AirPower Revival, and More

• Pegasus Spyware Reportedly Hacked iPhones of U.S. State Department and Diplomats

• Build or Buy your own antivirus product

• CISA warns of vulnerabilities in Hitachi Energy products

• VirusTotal Announced a New Feature Let Researchers To Create & Share IoCs

• Warning: Yet Another Zoho ManageEngine Product Found Under Active Attacks

• A Safe and Secure Way to Decommission

• UL IoT Security Starter Kit helps organizations manage their cybersecurity risks

• Mirantis DevOpsCare boosts developer productivity and reduces organizational complexity

• D2iQ DKP now available in AWS Marketplace to help customers accelerate their cloud native journey

• American diplomats’ iPhones reportedly compromised by NSO Group intrusion software

• Top Cybersecurity Accounts to Follow on Twitter

• Scammers exploit Omicron fears in new COVID‑19 phishing campaign

• Week in security with Tony Anscombe

• AT&T Looks to Shut Down Botnet that Attacked 5,700 Network Appliances

• NSO Group Spyware Hits at Least 9 US State Department Phones

• 6 big Kubernetes container security launches at AWS re:Invent 2021

• Sensitive information of 30k Florida healthcare workers exposed in unprotected database

• FBI: Cuba ransomware group hit 49 critical infrastructure organizations

• IT Security News Daily Summary 2021-12-03

• Report: Ransomware victims increase security budgets due to surge in attacks

• Who Is the Network Access Broker ‘Babam’?

• Utility biz Delta-Montrose Electric Association loses billing capability and two decades of records after cyber attack

• Analyzing The Security Challenge of Hybrid and Remote Working Models

• Feds charge two men with claiming ownership of others’ songs to steal YouTube royalty payments

• How AI and ML can thwart a cybersecurity threat no one talks about

• White House presses for improved agency-IG cooperation

• Why self-sovereign identities are so valuable to residents and agencies

• Pegasus Maker Probes Reports its Spyware Targeted US Diplomats

• Ex Ubiquiti Developer Arrested for Data Theft

• NSO Group Spyware Used to Breach US State Dept. Phones

• One-Third of Black Friday Shoppers Were Bots, Fake Users

• NSO Group spyware used to compromise iPhones of 9 US State Dept officials

• Top Phishing Lures to Look Out for This Holiday Season

• IGI Cybersecurity Introduces CISO Team-as-a-Service

• County limits workers’ comp claims with motion capture tech

• Pandemic-Influenced Car Shopping: Just Use the Manufacturer API

• How Criminals Are Using Synthetic Identities for Fraud

• Friday Squid Blogging: Squeeze the Squid

• Apple Executives Talk Watch Bands: Emphasis on Backward Compatibility, Design Philosophy, and More

• Bill proposes suspension of instant payments in Brazilian state as crime surges

• Omicron Phishing Scam Already Spotted in UK

• Hundreds of new vulnerabilities found in SOHO routers

• Protecting your critical infrastructure is one thing…protecting your backups is the same thing

• Top 12 AI and machine learning announcements at AWS re:Invent 2021

• Is your state ready to handle the influx of federal funds for expanding broadband?

• Researchers Find 226 Vulnerabilities in Nine Wi-Fi Routers

• UK Government Fined Over Honors List Data Breach

• Review: Belkin’s Latest 3-in-1 Charger is Ideal for Apple Watch Series 7 Owners

• Hackers steal $120m from Badger Defi and $30m from MonoX

• The top 12 security announcements at AWS re:Invent 2021

• Iranians Charged for Cryptojacking After U.S. Firm Gets $760,000 Cloud Bill

• Mozilla patches critical “BigSig” cryptographic bug: Here’s how to track it down and fix it

• US Issues Cybersecurity Directive for Airlines and Railroads

• Logiq.ai Tackles Observability Problem With LogFlow

• What Are Your Top Cloud Security Challenges? Threatpost Poll

• How well do you know your APIs? Not well enough, says Cisco

• Netgear router flaws exploitable with authentication … like the default creds on Netgear’s website

• What’s next for CMMC

• Apple Reportedly Notified Some U.S. State Department Employees They May Have Been Targeted by NSO Group Spyware

• MacRumors Giveaway: Win a Leather Apple Watch Band From Southern Straps

• Cybersecurity for Idiots

• Emotet’s back and it isn’t wasting any time

• What the Internet Bug Bounty Teaches About Open-Source Software Security

• Ransomware Attack On Planned Parenthood Steals Data Of 400k Patients

• Hackers Steal $119 Million From Web3 Crypto Project With Old School Attack

• Researcher Found Way To Brute Force Verizon Customer PINs

• US Rejects Calls For Regulating Or Banning Killer Robots

• AWS re:Invent: News Roundup From 2021 Conference

• Relevant and Extended Detection with SecureX

• Attacker unmasked by VPN flubs charged with Ubiquiti hack

• Covid Omicron variant leads to Phishing Cyber Attacks

• AWS, CrowdStrike, Presidio Join Hands To Develop Ransomware Mitigation Kit

• CISA Informs Organizations About Vulnerabilities in Hitachi Energy Products

• USB Devices the Common Denominator in All Attacks on Air-Gapped Systems

• KAX17 threat actor is attempting to deanonymize Tor users running thousands of rogue relays

• Crooks are selling access to hacked networks. Ransomware gangs are their biggest customers

• IoT security needs zero trust to face new botnet trends

• Deals: Take 20% Off Brydge iPad Keyboards This Week

• Google’s ‘Pixel Watch’ Planned for 2022 Launch to Compete With Apple Watch

• Apple AirTag Linked to Increasing Number of Car Thefts, Canadian Police Report

• An Insider’s Account of Disclosing Vulnerabilities

• Home routers riddled with vulnerabilities

• Phishing Actors Are Already Exploiting the Omicron COVID-19 Variant

• Bangladesh, South African and Iraqi Government sites have been found to be hosting web shells

• End-to-end Testing: How a Modular Testing Model Increases Efficiency and Scalability

• How to avoid being a hacker’s next target: Don’t overshare information on business social media

• Facebook, Twitter Take Down More State-Linked Accounts

• Technical Problem or Cyber Crime? How to Tell the Difference

• Researchers Detail How Pakistani Hackers Targeting Indian and Afghan Governments

• What Is Privilege Escalation? Definition, Types and Examples

• There’s been a big jump in crooks selling access to hacked networks. Ransomware gangs are their best customers

• Threat Group Takes Aim Again at Cloud Platform Provider Zoho

• Cisco Secure Firewall named Best Next Generation Firewall in SE Labs 2021 Annual Report

• Apple Fitness+ to Feature Prince William on Time to Walk and Apple Music 1

• Russia Seeks To Fine Google, Meta On Annual Turnover

• Holiday Season Online Privacy Recipe | Avast

• It’s a truly cruel scam. Here’s the dramatic way Google is trying to stop it

• Expert comment: CS Energy ransomware attack

• 17 Malware Frameworks Target Air-Gapped Systems for Espionage

• Threat actors stole $120 M in crypto from BadgerDAO DeFi platform

• Testing Faraday Cages

• The In-house Zoho ServiceDesk Exploit Used to Drop Webshells

• FTC Sues Nvidia To Block ARM Acquisition

• Printing Shellz – New Vulnerabilities That Affects 150 Different Multifunction Printers

• TSA Requires Rail and Airports to Strengthen Cybersecurity

• October 2021 Cyber Attacks Statistics

• Facebook Expands Advanced Security Program to More Countries

• Twitter and Meta Tackle Anti-Vaxxers and Chinese Disinformation

• Determined APT is exploiting ManageEngine ServiceDesk Plus vulnerability (CVE-2021-44077)

• Data Security: Defending Against the Cache Poisoning Vulnerability

• FCW Insider: December 3, 2021

• Misconfigured Database Leaks Info on 150K E-commerce Buyers

• New Malvertising Campaigns Spreading Backdoors, Malicious Chrome Extensions

• Computing Security Awards 2021: Heimdal™ Wins AI and Machine Learning-Based Security of the Year

• The Business of the Metaverse

• This password-stealing and keylogging malware is being spread through fake software downloads

• Omicron Phishing Campaign Hits User Inboxes

• Intel Eager to Avoid Clashes With Apple As It Looks to Secure TSMC’s 3nm Chip Supply

• Cyber-Attack on Planned Parenthood

• Hiding in plain sight: make sure Europe’s most wanted criminals do not escape their past

• Why Everyone Needs to Take the Latest CISA Directive Seriously

• Watch out for Omicron COVID-19-themed phishing messages!

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Poll Shows Most Shoppers Don’t Trust E-Commerce Sites | Avast

• New Payment Data Sealing Malware Hides in Nginx Process on Linux Servers

• New infosec products of the week: December 3, 2021

• Major trends in online identity verification for 2022

• US Military families targeted by Phishing Cyber Attacks

• BlackByte Ransomware found exploiting ProxyShell vulnerabilities

• This Week in Security News – December 3, 2021

• Tor2Mine cryptominer has evolved: Just patching and cleaning the system won’t help

• Twitter removes another 3,000 state-backed accounts linked to six countries

• Phishing kits’ favorite brand? Amazon

• CISA Warns of Actively Exploited Critical Zoho ManageEngine ServiceDesk Vulnerability

• Top tech trends for 2022

• 0Patch has a patch for Windows “InstallerFileTakeOver” 0-day vulnerability, Microsoft has none

• Enterprises are embracing the multicloud, turning to providers for strategy

• SMS firewall revenue to reach $4.1 billion in 2026

• How to Prepare for CISSP Exam Day

• A Look Back at Privacy in Q3 2021: Summertime and the Livin’ Was Easy

• Federal government refreshes digital transformation strategy and expands cyber hub trial

• Ondato’s AI-enabled ID forensics system detects document alterations

• Trifacta delivers scalable data transformations with Pushdown Optimization on Snowflake

• Trump’s Intelligence Briefings: Better Than Some Feared, Worse Than Many Hoped

• Qumu partners with GovSmart to modernize communications processes for government agencies

• Kudelski Security integrates with Microsoft Defender for Endpoint to proactively hunt for new threats

• CISA and FBI Release Alert on Active Exploitation of CVE-2021-44077 in Zoho ManageEngine ServiceDesk Plus

• Karamba Security raises $10M to accelerate development of its product roadmap

• Device Authority raises $2.9M to accelerate revenue growth

• CDW acquires Sirius Computer Solutions to enhance services and solutions capabilities

• Colorado energy company loses 25 years of data after cyberattack, still rebuilding network

• Launching ESET Research Podcast: A peek behind the scenes of ESET discoveries

• A Software Bug Let Hackers Drain $31M From a Crypto Service

• CISA and FBI Release Alert on Active Exploitation of CVE-2021-44077 in Zoho ManageEngine ServiceDesk Plus

• Eclypsium appoints Arif Kareem to Board of Advisors and Jarrod Bogue as CRO

• Sierra Wireless names Russell Jones as New Chair

• Nate Skinner joins Onfido as CMO

• Livestreamed Hearing Monday: EFF Urges Appeals Court to Allow Public Access to Documents in Patent Troll Litigation

• Nation-State Attackers Use RTF Injection to Easily Spread Malware

• Darktrace Reports 30% More Ransomware Attacks Targeting Organizations During the Holiday Period

• Ransomware, Carding, and Initial Access Brokers: Group-IB Presents Report on Trending Crimes

• Neustar Security Services spins out to combat the next generation of challenges and threats

• Manish Bharti joins CoreStack as CRO

• Amazon Web Services to beef up container security with new threat detection

• DHS: Cybersecurity coordinators and vulnerability assessments mandatory for rail companies

• BadgerDAO DeFi defunded as hackers apparently nab millions in crypto tokens

• IT Security News Daily Summary 2021-12-02

• re:Invent recap: Amazon showcases cloud computing innovation

• DHS releases new rules for rail companies, forces CISA incident reporting in 24 hours and mandates cybersecurity position

• Security Analytics Startup Panther Labs Scores $120M Investment

• Former Ubiquiti engineer arrested for inside threat attack

• Phishing Scam Targets Military Families

• Cyber-attack on Planned Parenthood

• Top 5 Reasons to Get ‘SASE’ With Security

• Twofish

• EV station map shows charging gaps

• Meta expanding Facebook security program for government officials, journalists, activists

• U.S. Federal Trade Commission Sues to Block Nvidia’s Planned Arm Acquisition

• Trump’s Intelligence Briefings: Better than Some Feared, Worse than Many Hoped

• Amazon Web Services security: 5 issues startups aim to fix

• Insider threats: How trustworthy are your employees?

• Emotet being spread via malicious Windows App Installer packages

• 2021-11-24 – Gigi campaign pushes BazarLoader, leads to IcedID

• 2021-11-29 – Emotet epoch 5 infection sent from email on Friday 2021-11-26

• ‘Double-Extortion’ Ransomware Damage Skyrockets 935%

• Planned Parenthood LA Breach Compromises 400,000 Patients’ Data

• CISA adds Zoho, Apache, Qualcomm, Mikrotik flaws to the list of actively exploited issues

• The cost of data security – it’s not just about the numbers

• Exploring Container Security: A Storage Vulnerability Deep Dive

• Twitter Expands Its Information Policy To Avoid Media Sharing Without a Users Consent

• Apple Loses Engineering Director From Car Project

• Could faster buying undermine electronic warfare prep?

• Creating greater opportunity for women in digital services

• ‘Double-Extortion’ Ransomware Data Leaks Skyrocket 935%

• Snort 3 Anywhere

• Planned Parenthood Breach Opens Patients to Follow-On Attacks

• Holiday Season Fraud Fear Higher this Year

• Fortinet vs Palo Alto Networks: Top NGFWs Compared

• macOS Monterey: 40 Tips, Tricks, and Features You Might Have Missed

• White House instructs agencies on contracting equity goals

• America is investing billions in broadband. Let’s spend it wisely.

• Planned Parenthood LA: Ransomware attack leaks health data of 400,000 patients

• S3 Ep61: Call scammers, cloud insecurity, and facial recognition creepiness [Podcast]

• CISA Adds Zoho, Qualcomm, Mikrotik Flaws to ‘Must-Patch’ List

• New Yanluowang ransomware mounting targeted attacks in US

• Amazon’s EC2 Service to Offer M1 Mac Mini Instances for Faster Build Times

• Tears of Joy Remained Most Used Emoji in 2021

• Apple Seeds Fourth Beta of tvOS 15.2 to Developers

• Apple Seeds Fourth Beta of watchOS 8.3 to Developers

• Apple Seeds Fourth Betas of iOS 15.2 and iPadOS 15.2 to Developers

• Structured threat hunting: One way Microsoft Threat Experts prioritizes customer defense

• Planned Parenthood data breach: Hackers steal 400,000 patients’ data

• Shopping online? FBI says beware of these holiday scams and phishing threats

• AT&T Takes Steps to Mitigate Botnet Found Inside Its Network

• Key Characteristics of Malicious Domains: Report

• NSA and CISA Release Part III of Guidance on Securing 5G Cloud Infrastructures

• Russian internet watchdog Roskomnadzor bans six more VPN services

• X-Force Threat Intelligence: Monthly Malware Roundup

• IoT devices must “protect consumers from cyberharm”, says UK government

• Facebook Will Force More At-Risk Accounts to Use Two-Factor

• NSA and CISA Release Part III of Guidance on Securing 5G Cloud Infrastructures

• A White House Inspector General for Accountability

• The Chatter Podcast: America’s Fight to Defeat AIDS in Africa, with Emily Bass

• Behind the unprecedented effort to protect customers against the NOBELIUM nation-state attack

• Printing Shellz Vulnerabilities Affected 150+ HP Printers

• Former Google Scientist Timnit Gebru Founds AI Institute

• Report: 63% of C-suite execs do not have an incident response plan

• Privacy Dynamics debuts app that lets developers rapidly anonymize data

• FluBot malware warning after 70,000 attacks launched over SMS

• Ubiquiti Developer Charged With Extortion, Causing 2020 “Breach”

• When Will a Cloud Infrastructure Heavyweight Launch a SASE?

• USDA finalizes more expansive telework, remote work policies

• Webinar Today: CISO Fireside Chat With Steve Katz, World’s First Known CISO

• 7 arrested in Malta on suspicion of illegal money transfers

• NginRAT – A stealth malware targets e-store hiding on Nginx servers

• OpenShift Security Hardening for the healthcare industry

• Macs With ‘M3’ Chips Expected to Use TSMC’s 3nm Chip Technology With Test Production Reportedly Underway

• Edgescan appoints Alon Verdnikov as CRO in a push to expand its presence in North America

• SideCopy APT: Connecting lures to victims, payloads to infrastructure

• Apple Shares Dip Amid Slowing iPhone 13 Demand – Report

• Lawmakers Are Considering Cracking Down On Facebook As Whistleblower Prepares To Testify

• Is KAX17 Performing De-Anonymization Attacks Against Tor Users?

• Really Stupid “Smart Contract” Bug Let Hackers Steal $31 Million In Digital Coin

• Facebook To Mandate High Security Program For Politicians, Journalists

• Stealthy WIRTE Gang Targets Middle Eastern Governments

• InternetLab’s 2021 “Who Defends Your Data Brazil” Report Shows Improvement in Brazilian ISPs Privacy Practices, But Gaps Remain

• US fears shadow cyber attacks on its Satellites by Russia n China

• Beware of FluBot Android Malware That Targets Android Users Via SMS

• “Trusted Partner” in Cybersecurity: Cliché or Necessity?

• Mozilla Releases Security Updates for Network Security Services

• Stop Threats. Save Time. Reduce Costs! The Real-Life Impact of Intelligence

• Deals: Amazon Has AirPods Max at the Best Price This Year ($429 in Two Colors)

• Former Ubiquiti Employee Charged with Data Theft

• What We’ve Learnt From Home Learning During Lockdown

• Why Actionable Logs Require Sufficient History

• Breaking the Black Mirror and Other Lessons From Day of Shecurity

• Mozilla Releases Security Updates for Network Security Services

• Smart Contract Bug Results in $31 Million Loss

• Uber Partners With WhatsApp For Ride Booking In India

• Blockchain Security Provider CertiK Raises $80 Million

• Karamba Security Raises $10 Million to Protect Connected Devices

• Meta Expands Facebook Protect Program to Activists, Journalists, Government Officials

• InternetLab’s 2021 “Who Defends Your Data Brazil” Report Shows Improvement in Brazilian Internet/Telco Providers Privacy Practices, But Gaps Remain

• Why the Future Needs Passwordless Authentication

• Facebook’s Meta says bad actors are changing tactics as it takes down six more groups

• Data Hacked For 400,000 LA Patients

• Bogus Android App Steals Banking Credentials from Malaysian Individuals

• How the Great Supply Chain Disruption Affects IT Security

• SOAR Into More Integrated Cybersecurity

• Experts warn of attacks exploiting CVE-2021-40438 flaw in Apache HTTP Server

• All Your Go Binaries are Belong to Us

• Stopgap funding delays military SATCOM transfer to Space Force

• CISA draws plans for more secure federal civilian email

• Biden taps former Air Force weapons buyer to lead DOD acquisition

• Hackers are turning to this simple technique to install their malware on PCs

• Critical Flaw in NSS Cryptographic Library Affects Several Popular Applications

• Reduce the Risk of DNS Spoofing: Find and Fix DNSSEC Misconfigurations

• Data Consistency Storage in the Cloud

• What Will AI Bring to the Cybersecurity Space in 2022

• Karamba Security raises $10M to protect IoT devices, connected cars

• Russian Administrator of Bulletproof Hosting Sentenced to Prison in U.S.

• Cybersecurity Expert Reaction On UK’s Financial Regulator Scraps 90-day Authentication Rule

• IKEA Suffering Ongoing “Reply-Chain” Email Attack

• Vectra Research: 89% Of Security Leaders Think Traditional Security Approaches Are Failing In The Face Of Modern Threats

• Former Employee Accused of Being Behind Ubiquiti Hack

• Data Hacked for 400,000 Planned Parenthood LA Patients

• Microsoft Slammed For ‘Buy Now, Pay Later’ Prompt In Edge Browser

• Researches Detail 17 Malicious Frameworks Used to Attack Air-Gapped Networks

• Fake Adobe Windows App Installer Packages Are Distributing the Emotet Malware

• Planned Parenthood LA Impacted by Ransomware Attack that Led to Data Breach

• Police Arrest 1800 in Major Money Laundering Crackdown

• Ransomware attack leads to data leak of over 400,000 patients

• HP to fix vulnerabilities in its 150 product models by this year end

• Android Banking Trojans Garnered 300K Downloads By Faking Apps

• Jack Dorsey’s Square Changes Name To Block

• Beware of FluBot Android Malware that Targets Android Users Via SMS

• Check Point Software named a Major Player in Modern Endpoint Security for Enterprise in the latest IDC MarketScape Report

• FCW Insider: December 2, 2021

• Russian Bulletproof Hosting Kingpin Gets Five Years

• Quick Hits

• Acra: Open-source database protection with field-level encryption and intrusion detection

• Double Extortion Ransomware Victims Soar 935%

• Europol arrested 1800 money mules as part of an anti-money-laundering operation

• Tracking a P2P network related to TA505

• What Is Virtual Network Computing (VNC)

• New UK product security law won’t be undercut by rogue traders upping and vanishing, government boasts

• The Problem with Default Passwords – Intego Mac Podcast Episode 216

• Do you know what your supply chain is and if it is secure?

• Apple Reveals the Most Downloaded iOS Apps and Games of 2021

• European Cybercrime Centre confident it’s kicked credit card crims – again

• Researchers Warn Iranian Users of Widespread SMS Phishing Campaigns

• How To Protect A New Technology Purchase | Avast

• Australia to appoint its first National Data Commissioner

• Mozilla properly fuzzed NSS and still ended up with a simple memory corruption hole

• The importance of vulnerability management for your organization

• How phishing kits are enabling a new legion of pro phishers

• Russian Man Gets 60 Months Jail for Providing Bulletproof Hosting to Cyber Criminals

• Open source cloud native security analyzer Terrascan embeds security into native DevOps tooling

• Three key ransomware actors changed jobs on October 18 – the same day REvil went dark

• Critical Bug in Mozilla’s NSS Crypto Library Potentially Affects Several Other Software

• Mozilla fixes critical flaw in Network Security Services (NSS) cryptography library

• Malware variants in 2021: Harder to detect and respond to

• Railway cyber risk management: Raising awareness on relevant threats

• Concentric Named Industry’s Cybersecurity Rising Star in US Channel Innovation Awards 2021 Program

• CCSP vs. Symantec Certified Cloud Credentials: How Do They Compare?

• (ISC)² Security Congress Goes West – Las Vegas Here We Come!

• The 5G market is about to take off: What to expect in 2022 and beyond?

• CIS Control 13: Network Monitoring and Defense

• iPhone 13 Demand Weakening Ahead of Holidays, Apple Tells Suppliers

• AWS announces four storage services and capabilities to help customers protect their data

• IriusRisk V4 enables teams to present progress of threat modeling to senior leadership

• Berlin’s Second Apple Store Opening on Thursday

• Freevolt Technologies S-Key enables unified authentication across multiple workplace settings

• Paessler adds new sensors to deliver insights into server system health

• CISA taps CrowdStrike for endpoint security

• Deals: MagSafe Battery Pack on Sale for $74.99 ($24 Off)

• Lawfare Live: Alexander Vindman and Dominic Bustillos on Recent Developments in Ukraine

• Understanding the Pro-China Propaganda and Disinformation Tool Set in Xinjiang

• Verizon enhances its NaaS digitization strategy with Cisco managed SD-WAN services

• Panasas joins Thales Accelerate Partner Network to safeguard HPC storage systems and customer data

• AWS Private 5G helps enterprises scale their private mobile network

• Cambridge Quantum and Honeywell Quantum Solutions merge to create a new firm called Quantinuum

• ATG selects YesWeHack to identify potential vulnerabilities on its platforms and applications

• SS8 Networks partners with Ocient to deliver high-performance solutions for law enforcement customers

• Mirantis collaborates with Equinix to help businesses accelerate cloud-native application deployment

• Australia set to gain ability to sanction cyber attackers under ‘Magnitsky-style’ law

• Jumping the air gap: 15 years of nation‑state effort

• ReliaQuest expands its current business operations and international growth with a new funding round

• CertiK raises $80M to protect blockchains against sophisticated security threats

• IBM acquires SXiQ to modernize applications and technology infrastructure in the cloud

• Aqua Security acquires Argon to secure all stages of software build and release

• 8×8 acquires Fuze to expand enterprise customer base and global presence

• Final Member of ‘The Community’ Sentenced

• Securiti achieves ISO/IEC 27001:2013 certification to manage the security of its data assets

• Bryan Jones joins RightCrowd as CTO

• Idaho State Police upgrade crime dashboard

• Military Vets Share Lessons That Helped Them Build Infosec Startups

• Apple Car Hardware Engineer Leaves for Air Taxi Startup

• New OPM ‘playbook’ supports government hiring surge

• Russian Man Sentenced to 60 Months in Prison for Running ‘Bulletproof’ Hosting for Cybercrime

• IT Security News Daily Summary 2021-12-01

• Reimagining mobile security for the way we live our lives today, tomorrow, and beyond.

• Connolly presses for legislation on telework, internships and OPM

• CrowdStrike beats estimates for Q3, sees revenue increase 63% compared to 2020

• CrowdStrike chosen by CISA for government endpoint security initiative

• New Ransomware Variant Could Become Next Big Threat

• How to See ‘Spotify Wrapped’ for Apple Music

• Latest macOS 12.1 Beta Appears to Fix Intermittent ‘Tap to Click’ Issue

• Annual Imperva Hackathon Inspires 2022 Product Roadmap

• Scalpers, and their bot armies, swing in to net web-based Spiderman tickets

• Miami to deploy air-quality monitoring on Algorand blockchain

• CrowdStrike Is Working to Strengthen the U.S. Government’s Cybersecurity Posture

• U.S.-China Tech Decoupling Accelerates With New Export Controls on Chinese Quantum Computing Companies

• Lawmakers dig into FedRAMP security

• CISA floats plan to better secure federal civilian email

• Rewriting your disaster recovery plan might just save your company…and could transform it

• China’s Data Privacy Law Poses Challenge for International Companies

• Trade group warns of contractor workforce shortfall over vaccine mandate

• Charging ahead: Data drives EV adoption for state and local fleets

• Escondido police enlist app for collecting racial identity data

• 80K Retail WooCommerce Sites Exposed by Plugin XSS Bug

• Cybersecurity: Increase your protection by using the open-source tool YARA

• Twitter to Remove Private Media

• VirusTotal Collections allows enhancing the sharing of Indicators of Compromise (IoCs)

• Roundup: Ransomware, the Future of the Cloud and Cyber Careers

• BlackByte ransomware attacks exploiting ProxyShell flaws

• CISA Names 23 Members to New Cybersecurity Advisory Committee

• ReliaQuest Valued At More Than $1 Billion Following Growth Round Led by KKR

• CyCognito Raises $100 Million Series C Funding

• Facebook’s Secret “Dangerous Organizations and Individuals” List Creates Problems for the Company—and Its Users

• Four Key Factors When Selecting a Cloud Workload Protection Platform

• CyCognito Snags $100M Investment for Attack Surface Management

• Top IT Asset Management Tools for Security

• Apple Seeds Fourth Beta of macOS Monterey 12.1 to Developers

• SANS Institute Founder Dies

• Best Cybersecurity Awareness Training for Employees in 2022

• How Will Cyber Threats Impact the Beijing Winter Olympics?

• AWS re:Invent Conference Welcomes Back Crowds

• Treasury Crypto Security Sanction Blocks Exchange Favored by Ransomware Actors

• FCW Insider: December 1, 2021

• Stealthy ‘WIRTE’ Gang Targets Middle Eastern Governments

• Best Cybersecurity Awareness Training for Employees in 2021

• CyCognito Secures $100M to Accelerate Next Evolution of Attack Surface Management

• When to Expect Apple to Release macOS 12.1 With SharePlay and More

• Luna Display Gains PC-to-Mac Mode, 5K Support and More

• Most Inspiring Women in Cyber Awards 2021

• The Internet Needs Fair Rules of the Road – and Competitive Drivers

• 5 Online Security Tips to Prevent Hacking

• Capcom Arcade Stadium’s record player numbers blamed on card mining

• Most Brazilian businesses set to boost cybersecurity spend in 2022

• Prediction Season: What’s in Store for Cybersecurity in 2022?

• CISA Adds Five Known Exploited Vulnerabilities to Catalog

• Thousands Of AT&T Customers In The US Infected By New Data Stealing Malware

• DNA Testing Center Admits To Breach Of Data For 2 Million People

• Twitch Unleashes AI Tool To Spot Banned Users

• These Researchers Wanted To Test Cloud Security. They Were Shocked By What They Found

• More Than 1/3 Of The World Has Never Used The Internet, Says UN

• ‘Spotify Wrapped’ Recaps Your Listening History for 2021

• Nomad Launches 30W USB-C Charger and Sport Cables With iPhone Fast Charging Support

• Deepfake technology and its implications for the future of cyber-attacks

• Privacy alert as Texas school district scans student devices

• Head Of Car Giant Stellantis Issues Electric Vehicle Cost Warning

• Critical Vulnerability Found in More Than 150 HP Printer Models

• Aqua Security Acquires Software Development Security Firm Argon

• CISA Adds Five Known Exploited Vulnerabilities to Catalog

• Most Reliable Hosting Company Sites in November 2021

• VirusTotal Introduces ‘Collections’ to Simplify IoC Sharing

• New RTF Template Inject technique used by APT groups in recent attacks

• Apple Adding iPhone 6 Plus to Vintage Products List Later This Month

• SpaceX’s Elon Musk Warns Of Bankruptcy Risk Over Engine Issue

• What Is SIM Swapping? 3 Ways to Protect Your Smartphone

• Tripwire Patch Priority Index for November 2021

• Cybersecurity M&A Roundup: 40 Deals Announced in November 2021

• The Cyber Threats Facing Retailers This Holiday Shopping Season

• Singapore and UK ink digital trade agreements at Future Tech Forum in London

• Warning: Cyberattacks Are on The Rise! IKEA’S Emailing Compromised

• Latest SpyAgent Malware Campaign Abuses Legit RATs To Target Devices

• Amazon Web Services, CrowdStrike and Presidio partner for ransomware mitigation kit

• Apple Makes Six (RED) Apple Watch Faces Available to Download and More for World AIDS Day

• Deals: AirPods 3 Return to Black Friday Price of $149.99 ($29 Off)

• Twitter To Remove Photos Tweeted Without Permission

• Development of Corporate Applications Based on Artificial Intelligence

• How to Cut Down on Data Breach Stress and Fatigue

• Here’s what data the FBI can get from WhatsApp, iMessage, Signal, Telegram, and more

• CyCognito nabs $100M to fight cyberattacks with bots

• Clearview AI face-matching service set to be fined over $20m

• New EwDoor Botnet Targeting Unpatched AT&T Network Edge Devices

• DNA Testing Firm Discloses Data Breach Affecting 2.1 Million People

• Aqua Security acquires Argon to protect the software supply chain

• VMware’s Carbon Black offers more analyst assistance to respond to attacks

• Missouri Man Sentenced to Prison Over Role in SIM Swapping Scheme

• OSCP Exam Change

• CISSPs from Around the Globe: An Interview with Chinyelu Philomena Karibi-Whyte

• Analyzing How TeamTNT Used Compromised Docker Hub Accounts

• CoinHelper Research | Avast

• Growing Ransomware Dangers Demand Layered Defense of Your Endpoints

• Panasonic Becomes Latest Victim Of Data Breach – Security Expert Comment

• Top AppSec Missteps In The Fight Against Cyber Criminals

• 300.000+ users downloaded malware droppers from Google Play

• ReliaQuest, maker of open XDR platform, reaches $1B valuation with new funding

• These researchers wanted to test cloud security. They were shocked by what they found

• Widespread ‘Smishing’ Campaign Defrauds Iranian Android Users

• ‘WIRTE’ Attacks Targeting Middle Eastern Governments Linked to Hamas Cyberspies

• Yanluowang Ransomware Targeting U.S. Financial Corporations

• CISO Conversations: Steve Katz, the World’s First CISO

• New Quantum Computing Giant Quantinuum to Launch Cybersecurity Product

• Researchers Have a Method to Spot Reddit’s State-Backed Trolls

• Elon Musk Urges Customers to Buy ‘Tesla Cyberwhistle’ Instead of Apple Polishing Cloth

• Pytilia partners with CSIT to deliver UKRI funded Digital Security by Design Project

• 16-31 October 2021 Cyber Attacks Timeline

• Most people aren’t upgrading to Windows 11: Not the end of the world

• Have you downloaded that Android malware from the Play Store lately?

• Facebook Cryptocurrency Executive David Marcus To Leave

• Had It With the Dropbox App? Here Are Five Alternative Dropbox Clients

• NY AG Seeks Overseer For Amazon Worker Safety

• SMS Messages Socially Engineered to Steal Billions of Rial from Iran’s Citizens

• Organizations Now Have 76 Security Tools to Manage

• The Matrix Is the Best Hacker Movie

• Hackers Increasingly Using RTF Template Injection Technique in Phishing Attacks

• IoT Security firm Armis now valued at $3.4B

• European Money Mule Action leads to 1 803 arrests

• HP Printer Hijack Bugs Impact 150 Models

• MI6 Boss: Digital Attack Surface Growing “Exponentially”

• FBI training document shows lawful access to multiple encrypted messaging apps

• Hacker Jailed for Stealing Millions of Dollars in Cryptocurrencies by SIM Hijacking

• Build your own Android security product

• WIRTE’s Hacker Group Uses Weaponized MS Excel Droppers To Attack High Profile Targets

• Sabbath Ransomware target critical infrastructure in the US and Canada

• UK watchdog’s punishment for Blackbaud, Easyjet, other big privacy lawbreakers was slap on the wrist in private

• The ripple effect: Why protection against supply chain attacks is a must

• Thanksgiving and Black Friday were marred with several Cyber Bots related trade controversies

• Deloitte: How sensitive AI data may become more private and secure in 2022

• API security awareness: The first step to better assessing the risk

• China setting up data traps says UK

• The Bug Report – November Edition

• Twitter Bans Users From Posting ‘Private Media’ Without a Person’s Consent

• Control failures are behind a growing number of cybersecurity incidents

• Despite the popularity of password managers, many still use pen and paper

• Alarming rise in cyberattacks against healthcare facilities, 68 attacks in Q3 2021 only

• Infosec products of the month: November 2021

• How can businesses realize the true value of digital transformation?

• The Best Way to Start Your Cloud Security Career

• The Importance of Security Control Baselines

• New Advanced AlienApps for Akamai ETP and Akamai EAA help streamline threat management

• Securing Serverless Architectures [Infographics]

• Zerto In-Cloud for AWS protects mission-critical applications running on Amazon EC2

• ThreatConnect 6.4 allows security operations and CTI analysts to improve threat intelligence process

• Castellan releases Crisis Management module to drive organizational readiness and response

• Verimatrix Streamkeeper empowers media and entertainment industry to combat piracy threats

• Everbridge Digital Operations Platform automates IT incident management

• UK intel chief says MI6 must outsource innovation – and James Bond’s in-house ‘Q’ is nonsense

• Senate inches closer to FedRAMP legislation

• Starburst Galaxy helps enterprises analyze data across cloud platforms

• Neurotechnology Face Verification 12 extends facial authentication features to web-based apps

• Data center backlash in Arizona town

• TMD Security launches key-less lock solutions for ATMs and access doors

• GlobalLogic partners with Cybereason to develop next-generation cyber defense solutions

• Accenture extends partnership with AWS to address the challenges in cloud migrations

• McAfee and FireEye integrate with Amazon Inspector to protect data in the cloud

• Renesas R9A06G037 PLC modem IC enables long-distance communication for P2P networks

• Cyber crime down as hackers go after bigger fish

• DNA testing service data breach impacting 2.1 million users

• Twitter to ban sharing of photos and videos without people’s consent

• The D.C. Circuit Takes on Executive Privilege

• Secure Code Warrior partners with AWS to enhance developer-led security

• Play collaborates with Allot to offer cybersecurity services for their consumer customers

• Senate inches closer to FedRAMP authorization

• SpeQtral raises $8.3M to develop quantum-secure communication systems

• Upbound raises $60M to broaden its worldwide go-to-market efforts

• Armis raises $300M to accelerate strategic platform development and regional expansion

• 1984 vs 2021 | Avast

• Exabeam appoints Gianna Driver as Chief Human Resources Officer

• Riya Shanmugam joins New Relic as Group VP of Global Alliances and Channels

• DNA testing center admits to breach affecting SSNs, banking info of more than 2 million people

• Best Privileged Access Management (PAM) Software for 2022

• Legal Cases and Privacy Rulings Aim to Curtail Facial Biometrics

• Aqua Security gets AWS Graviton Ready designation to address security and compliance obstacles

• 4 trends shaping government cloud use

• HP Issues Firmware Updates for Printer Product Vulnerabilities

• IT Security News Monthly Summary – December

• IT Security News Daily Summary 2021-11-30

• Building out Alaska’s broadband infrastructure

• Zscaler delivers strong Q1, sees revenue grow 62% year over year

• Five Features to Look Forward to in the 2022 MacBook Air

• walled garden

• Enterprise password security guidelines in a nutshell

• What’s the Difference Between SASE and SD-WAN?

• Malicious Google Play Apps Stole User Banking Info

• Play the Opera Please – Opera patches a flaw in their turbo servers

• potentially unwanted program (PUP)

• Finland Faces Blizzard of Flubot-Spreading Text Messages

• Lloyd’s Carves Out Cyber-Insurance Exclusions for State-Sponsored Attacks

• How Decryption of Network Traffic Can Improve Security

• Business School Dean Guilty of Data Conspiracy

• Attacker Sentenced in Multimillion-Dollar SIM Hijacking Scheme

• Where is the Biden Administration on Presidential Reform?

• The Business of Knowing: Private Market Data and Contemporary Intelligence

• Coinbase to Acquire Cryptography Firm Unbound Security

• Privacy Startup Soveren Raises $6.5 Million Seed Round

• Apple Updates Beats Fit Pro Firmware to Version 4B65

• Review: 2022 Lexus NX Brings an All-New Infotainment Experience With Wireless CarPlay and Built-In Apple Music

• Twitch Adds Support for FaceTime’s SharePlay Feature on iOS Devices

• It’s the flu season – FluBot, that is: Surge of info-stealing Android malware detected

• Multiple Vulnerabilities Spotted In Zoom Video Conferencing App

• Preparing for the Next Ransomware Generation

• Leaked Credentials Leads Are Candy for Dark Web Actors

• How to create a company password policy, with template

• Texas School District to Scan Children’s Devices

• New EwDoor Botnet is targeting AT&T customers

• SATCOM shift to Space Force stalled under CR

• Amazon unveils new security features for AWS Lake Formation

• Finland Faces Blizzard of FluBot-Spreading Text Messages

• Clearview AI to be Fined $22.6M for Breaching UK Data Protection Laws

• Apple Shares 2021 Apple Music Top Charts and Highlights

• 300,000 Android users impacted by malware apps on Play Store

• Biden taps former USAF buyer to lead DOD acquisition

• Panasonic’s Data Breach Leaves Open Questions

• Government-Industry Cooperation May Be the Most Potent Ransomware Antidote

• T-Reqs – A Tool For HTTP Request Smuggling (HRS) attacks

• New TrickBot Phishing Technique Checks Device Screen Resolution To Evade Detection

• Lawsuit By Former Google Staffers Cites ‘Don’t Be Evil’ Moto

• Why everyone should have this cheap security tool

• Become an ethical hacker for just $13 during this Cyber Week sale

• 2.1 Million People Affected by Breach at DNA Testing Company

• Windows Installer zero-day under active exploitation

• Apple Announces New Limited-Edition Beats Studio Buds

• Massive faceprint scraping company Clearview AI hauled over the coals

• Zoom Launches Auto-Update Feature For Windows And Mac Clients

• Hack ‘Sabbath’: Elusive new ransomware detected

• 20 Years of Red Hat Product Security: From inception to customer experience (Part 1)

• Livestream: D.C. Circuit Hears Donald Trump v. Bennie Thompson

• Introducing the January 6 Project

• Increase Security with Ephemeral Access Control [Webinar Sign-up]

• Hardware Security Firm Axiado Banks $25M Investment

• ‘Sabbath’ Ransomware Operators Target Critical Infrastructure

• New iPhone SE Reportedly on Track for Release in First Quarter of 2022

• Queensland Ransomware and Malware on Finland Smart Phones

• Defense Cybersecurity: The Easy Doors for Adversaries are Closed, so How are They Still Getting In?

• Amazon’s Alabama Warehouse To Vote Again On Trade Union

• Panasonic Disclosed a Security Breach that Hackers Gained Access to Servers

• Hackers could steal encrypted data now and crack it with quantum computers later, warn analysts

• Visiting a booby-trapped webpage could give attackers code execution privileges on HP network printers

• Ransomware vs. Cities: A Cyber War

• Critical Printing Shellz flaws impact 150 HP multifunction printer models

• MI6 Boss Calls For Greater Co-operation With Tech Sector

• Controversial face matchers Clearview set to be fined over $20m

• Accenture to Create 3000 Tech and Cyber Jobs in the UK

• Deals: Take Up to $80 Off Apple’s Smart Keyboard Folio and Magic Keyboard for iPad Pro

• Apple Supports World AIDS Day With Red Logo at Stores and Apple Pay Promotion

• Translucent AirPods and 29W Power Adapter Prototypes Surface in Photos

• Unpatched Microsoft Exchange Servers abused in new phishing campaign

• What Is a Hypervisor (VMM)?

• Source Code Security Firm Cycode Raises $56 Million

• Multiple States Join Investigation Into Facebook’s Allegedly Harmful Practices

• Finding Your Niche in Cybersecurity

• New Hub for Lean IT Security Teams

• U.S. Government issues directive to prioritize fixing exploited CVEs: How Red Hat Insights can help

• MI6 Must Adapt To New Technology To Survive, Says Spy Chief

• Zoom Owes Everyone $25 For Giving Their Data To Facebook

• Printing Shellz: Critical Bugs Impacting 150 HP Printer Models Patched

• IKEA Hit By Email Reply Chain Cyber Attack

• Yanluowang Ransomware Tied To Thieflock Threat Actor

• Clearview’s £17 Million Fine For Processing 10+ Billion Images Is Surprisingly Small And Lenient

• Most Inspiring Women in Cyber 2021: Areej Eliyan, IT Administrator at MOEHE Qatar

• Leaked footage shows British F-35B falling off HMS Queen Elizabeth and pilot’s death-defying ejection

• Who will win the metaverse battle?

• Fighting Supply Chain Threats Is Complicated

• How Do You Plan to Celebrate National Computer Security Day?

• Understanding the Adversary: How Ransomware Attacks Happen

• Cisco releases Shared Signals and Events reference document to solve “head on a swivel” problem

• Apple Celebrates Best Podcasts of 2021

• What You Can Do to Mitigate Cloud Misconfigurations

• Cycode raises $56M to scan apps for security vulnerabilities

• Yanluowang Ransomware Tied to Thieflock Threat Actor

• Lloyd’s of London suggests insurers should not cover ‘retaliatory cyber operations’ between nation states

• Wind Turbine Giant Vestas Confirms Ransomware Involved in Cyberattack

• WIRTE APT group targets the Middle East since at least 2019

• 150+ HP multifunction printers open to attack (CVE-2021-39237, CVE-2021-39238)

• Printing Shellz: Critical bugs impacting 150 HP printer models patched

• Chinese hackers could steal data now and crack it with quantum computers later, warns report

• Spy chief’s warning: Our foes are now ‘pouring money’ into quantum computing and AI

• Critical Wormable Security Flaw Found in Several HP Printer Models

• An Open Security Ecosystem with Shared Signals is the Future of Zero Trust

• How to Calculate Cyber Risk and Your Organization’s Financial Exposure

• A Safe and Secure Way to Decommission

• Meta Ordered To Sell Giphy By British Regulator

• North Korean Hackers Use New ‘Chinotto’ Malware to Target Windows, Android Devices

• Introducing VirusTotal Collections

• Clearview AI Faces £17m Fine For ‘Serious’ Data Protection Breaches

• Troll Free Future Study | Avast

• MI6 Spy Chief Says China, Russia, Iran Top UK Threat List

• UK and Israel Pledge Greater Cooperation in Cybersecurity

• Some 16-inch MacBook Pro Owners Report MagSafe 3 Charging Issues When Mac Is Closed

• Bye Jack. Twitter Co-Founder And CEO Jack Dorsey Steps down

• Come Meet Check Point Software at AWS re:Invent 2021

• Trustpage lands $5M to boost security transparency for SaaS vendors

• Cyber Essentials Set for Major Update in 2022

• Ransomware Group Rebrands Multiple Times to Evade Detection

• APT annual review 2021

• Zoom Monitoring with Tripwire Configuration Manager

• Police Set for Record Haul in Anti-Card Fraud Operation

• Malicious USB drives: Still a security problem

• Massive online crime crackdown leads to 1,000 arrests

• Unpatched Unauthorized File Read Vulnerability Affects Microsoft Windows OS

• Panasonic Suffers Data Breach After Hackers Hack Into Its Network

• Apple Announces Winners of Third Annual Apple Music Awards

• WIRTE Hacker Group Targets Government, Law, Financial Entities in Middle East

• Looking for adding new detection technologies in your security products?

• Vaccine Passports And Privacy | Avast

• 4 Android banking trojans were spread via Google Play infecting 300.000+ devices

• Intel is Maintaining Legacy Technology for Security Research

• Winter is coming … with a blizzard of live and virtual SANS Institute events

• How to combat ransomware with visibility

• Implications of strengthening the cybersecurity of small business in America

• Podcast Episode: Who Should Control Online Speech?

• Queensland government energy generator hit by ransomware

• Most challenging security threats for CTOs

• CISA issues Mobile Security Checklist and plans for Secure Email Service

• Data leak on Panasonic Corporation servers

• Ecommerce retailers facing a 350% increase in fraudulent online orders

• Patching takes 2.5 times longer when endpoints are remote

• Secure cloud products and services with new CIS Benchmarks

• Panasonic admits intruders were inside its servers for months

• Rookies Needed – Experience Required

• Privileged account management challenges: comparing PIM, PUM and PAM

• Eftpos expands security kit bag with new AI anti-fraud capability

• National Computer Security Day: Tips for Securing Your Home Computers

• Tigera Calico Cloud offers security and observability for Amazon EKS clusters

• Immuta SaaS enables customers to control their own cloud environment

• Checking in with the Army and Navy principal cyber advisors

• CISA issues enterprise mobile security checklist

• 2021-11-29 – Emotet epoch 5 infection sent from email on Friday 2021-11-26

• Immersive Labs collaborates with British Army to improve the cyber abilities of their personnel

• How to Help Your Kids Combat Clickbait Scams

• More than 1,000 arrested in global crackdown on online fraud

• Panasonic confirms cyberattack and data breach

• GlobalPlatform offers a framework to protect applications and data against high-profile attacks

• Tom Krueger joins Qumu as CFO

• 9 out of 10 Healthcare Organizations Provide Telehealth Services, Yet Almost Half Face Patients’ Mistrust Toward Privacy

• Stellar Cyber Raises $38M Series B to Address Need to Provide 360-Degree Visibility Across Entire Attack Surface

• Armis Now Valued at $3.4B

• 3 Ways To Prepare For Cyber Attacks

• Social Engineering: Tis the Season for Tricky Hackers

• How SBOMs for cybersecurity reduce software vulnerabilities

• Google experts found 2 flaws in video conferencing software Zoom

• IT Security News Daily Summary 2021-11-29

• How Hiya taps AI to kill phone spam

• Amazon Web Services unveils enhanced cloud vulnerability management

• CISA mulls plan to safeguard federal civilian email

• Over 1,000 Individuals Arrested in Global Cybercrime-Fighting Operation

• Phishing Remains the Most Common Cause of Data Breaches, Survey Says

• Google Analyzes Methods Behind GCP Workload Attacks

• IKEA Email Systems Targeted in Cyberattack

• Apple Invites Some Developers to Try Swift Playgrounds 4 Ahead of Launch

• ‘Tis the Season for Scams

• What Are the Five Steps of Ethical Hacking?

• Live-fire cyber training slashes incident response time

• Panasonic confirmed that its network was illegally accessed by attackers

• What is the Dark Web? Everything You Need to Know

• TSA calls for public transportation info sharing center

• CBP expands biometric authentication to Maine border crossings

• Researchers Flag 300K Banking Trojan Infections from Google Play in 4 Months

• IKEA Hit by Email Reply-Chain Cyberattack

• Panasonic Hit in Data Breach

• A Hacking Spree Against Iran Spills Out Into the Real World

• Dream Job Alert: Media Relations Director for EFF

• plaintext

• White House asks agencies to delay consequences for vaccine mandate violations

• Cyber Monday: Original Apple TV 4K Drops to $99.99 for Amazon Prime Members

• Developers That Embrace Security Add Personal, Organizational Value

• McAfee Enterprise Defender Blog | Windows Zero-Day – CVE-2021-41379

• Elastic Security app enables affordable threat hunting

• Elastic Stack Security tutorial: How to create detection rules

• Data Breach at Panasonic

• ScarCruft APT Mounts Desktop/Mobile Double-Pronged Spy Attacks

• Project Zero Flags High-Risk Zoom Security Flaw

• The intersection of privacy by design and privacy engineering

• The components and objectives of privacy engineering

• Our Patent Review System is Ten Years Old. It’s Time to Make It Stronger.

• Insights on ransomware attacks

• Attackers exploiting Windows Installer vulnerability despite patching

• North Korean Hackers Group Posed as Samsung Recruiters To Target Security Firms

• Clearlake Capital to Acquire Quest Software

• CISA Seeks Extra Email Protection

• How agencies can conquer generational technology skips

• Unpatched Windows Zero-Day Allows Privileged File Access

• 1,000 Arrests Made In Online Fraud Crackdown, Says Interpol

• Panasonic Confirms Data Breach After Hackers Access Internal Network

• What The SEC Requires From Businesses After A Data Breach

• Chinese Could Hack Data For Future Quantum Decryption, Report Warns

• How the Rise in Cyberattacks Is Changing Consumer Behavior

• Military service principal cyber advisors take root

• Marine Services Provider Swire Pacific Offshore Discloses Data Breach

• How Red Canary and Microsoft can help reduce your alert fatigue

• How To Secure Your Broadband?

• The other victims of FluBot: How cybercriminals exploit WordPress to distribute malware

• Over 300,000 Android users have downloaded these banking trojan malware apps, say security researchers

• Shape-Shifting ‘Tardigrade’ Malware Hits Vaccine Makers

• Technology Diplomacy Changes Are the Right Start

• Recent Additions to Entity List Part of Broader U.S. Effort Targeting Spyware

• TechTank: How to Build Back Better With Telehealth

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Frequency analysis on hundreds of billions of reports at Report URI: Top-K

• Vulnerability Summary for the Week of November 22, 2021

• Apple Introduces New MacBook Upgrade Program for Business Partners

• Rising volume of email fatigue opens doors for Cybercriminals

• IKEA servers hit by Qakbot Malware

• Remote access tools abused to spread malware and steal cryptocurrency

• The State Of Security In E-Commerce to Improve Online Transactions

• Nowhere to Hide: Detecting SILENT CHOLLIMA’s Custom Tooling

• Check Point CloudGuard Network Security streamlines operational efficiency with as-a-Service solution on AWS

• WFH security: How to protect your remote endpoints from vulnerabilities

• Panasonic Investigating Data Breach

• Paving the Road to Zero Trust With Adaptive Authentication

• Vulnerability Summary for the Week of November 22, 2021

• 4 Android Banking Trojan Campaigns Targeted Over 300,000 Devices in 2021

• NanoLock Security and Waterfall Security Partner to Deliver OT Security for Industrial and Energy Applications

• Experts warn of attacks exploiting CVE-2021-40438 flaw in Apache HTTP Server

• Best Cyber Monday Apple Accessory Deals Available Today

• Hackers all over the world are targeting Tasmania’s emergency services

• What is crypto gaming?

• EdbMails Review

• Threat Actors Used Tardigrade Malware In Attacks On Biomanufacturing Firms

• CronRAT Linux Malware Abuses A Non-Standard Date To Evade Detection

• Amazon brings automated secrets detection to CodeGuru

• 1,000 arrests made in online fraud crackdown, says Interpol

• CISA Releases Guidance on Securing Enterprise Mobile Devices

• Most Inspiring Women in Cyber 2021: Anna Collard, SVP Content Strategy & Evangelist at KnowBe4

• Wind turbine maker Vestas confirms recent security incident was ransomware

• Armis Raises $300 Million at $3.4 Billion Valuation

• Cyber Monday – enjoy the discounts safe !

• CronRAT targets Linux servers with e-commerce attacks

• What the SEC Requires From Businesses After a Data Breach

• NinjaOne expands data backup, security features to thwart ransomware

• Armis expands past IoT with $300M for ‘comprehensive’ asset security

• New Chinotto Spyware Targets North Korean Defectors, Human Rights Activists

• Simplify Network Security with Cisco Secure Firewall-as-a-service (FWaaS) on AWS

• Cisco Security Heroes: The power of partnerships, employee education, and zero trust policies

• Black Hat Europe 2021 Network Operations Center: London called, We answered

• Biopharmaceutical firm Supernus Pharmaceuticals hit by Hive ransomware during an ongoing acquisition

• Best Cyber Monday Deals for AirPods, Apple Pencil, iMac, More

• A week in security (Nov 22 – Nov 28)

• Recently Patched Apache HTTP Server Vulnerability Exploited in Attacks

• How to Prepare for CISSP Exam Day

• New RATDispenser JavaScript Loader Delivers Infostealers To Pilfer Passwords

• Ransomware Operators Threaten to Leak 1.5TB of Supernus Pharmaceuticals Data

• Israel Blamed for Crippling Attack on Iranian Gas Stations

• Reply-Chain Email Cyberattacks Hit Ikea’s Email Systems

• Cybersecurity graduates are doubling, but that’s still not going to fix the skills crisis

• 12 online fraudsters arrested in global operation against counterfeiters

• ScarCruft surveilling North Korean defectors and human rights activists

• Quick Hits

• FCW Insider: November 29, 2021

• Two Drug Dealers Get 18 Years Following EncroChat Bust

• Hackers Using Compromised Google Cloud Accounts to Mine Cryptocurrency

• Apple Still Working on AirPower-Like Charger, Also Long-Range Wireless Charging and Reverse Charging

• The role of runtime protection in eCommerce security

• Rapid Money Laundering Response Helps Intercept $27m

• Israel cut cyber export list, excluding totalitarian regimes

• Android.Cynos.7.origin trojan infected +9 million Android devices

• Why Email Archiving Builds Cyber Resilience

• Overcoming the Limitations of VPN, NAC, and Firewalls with Zero Trust Access

• Trying to register your antivirus in Windows Security Center?

• WIRTE’s campaign in the Middle East ‘living off the land’ since at least 2019

• Interpol Arrests Over 1,000 Cyber Criminals From 20 Countries; Seizes $27 Million

• Big salaries alone are not enough to hire good cybersecurity talent: What else can companies do?

• Behavioral biometrics: A promising tool for enhancing public safety

• Putting the “sec” in DevSecOps: An overall reduction of risk

• Mediatek vulnerability in Android phones fixed

• REvil ransomware spreading hackers found to be leading plush lives in Russia

• Addressing the cybersecurity skills gap with higher education

• Mid-market IT leadership top 2022 objective: Strengthening security

• Phishing attacks top 260,000 in Q3 2021

• Redirecting the Zero Trust Conversation to Build a More Robust Architecture

• Ghidra 101: Binary Patching

• Key benefits of iSIM technology for enabling secure connectivity

• The Bitglass Blog

• 20% off official (ISC)² CISSP online self-paced training

• 82% of IT leaders looking to cloud for critical mainframe applications to remain competitive

• ADEX unveils real-time traffic analysis to combat fraud and high-technology threats

• Telcos to get expanded scam-blocking powers through telecommunications law amendment

• Australia will force social networks to identify trolls, so they can be sued for defamation

• AWS re:Invent 2021 Guide: Checklist & Key Sessions

• French court indicted Nexa Technologies for complicity in acts of torture

• IT Security News Weekly Summary – Week 47

• IT Security News Daily Summary 2021-11-28

• Tech Expert Devises Test To See If Facebook Is Eavesdropping On Users

• Google warns crypto miners are using compromised cloud accounts

• Ongoing Phishing Attack Targets IKEA Employee Mailboxes To Spread Trojan

• Anatomy of a Linux Ransomware Attack>

• RATDispenser, a new stealthy JavaScript loader used to distribute RATs

• What Is a Watering Hole Attack?

• The Android 12 Privacy Settings You Should Update Now

• North Korea-linked Zinc group posed as Samsung recruiters to target security firms

• MediaTek Smartphone Chip Vulnerability Could Allow Spying On Android Smartphones

• Security Affairs newsletter Round 342

• 0patch releases unofficial patches for CVE-2021-24084 Windows 10 zero-day

• Virtual Function Calls in Constructors and Destructors (C++)

• Week in review: Windows EoP flaw still exploitable, GoDaddy breach, malicious Python packages on PyPI

• Penetration testing

• Become a cybersecurity analyst for just $9

• Weekly Update 271

• Hypernet Labs hires Jon Venverloh as COO

Generated on 2021-12-05 23:59:21.736391