IT Security News Weekly Summary – Week 49

• IT Security News Daily Summary 2021-12-12

• How Log4j Vulnerability Could Impact You

• The Best Ways to Secure Communication Channels in The Enterprise Environment

• Report: IT automation to drive tech spending in 2022

• Quebec shuts down thousands of sites as disclosure of the Log4Shell flaw

• Critical ‘Log4Shell’ Zero-Day Vulnerability Wreaks Havoc Online

• Log4Shell: Reconnaissance and post exploitation network detection

• Anticipating Future Directions of Tech-Enabled Terror

• Update on Log4j Zero-Day Vulnerability

• Russian nation sentenced to 48 months in prison for helping Kelihos Botnet to evade detection

• A phishing campaign targets clients of German banks using QR codes

• How to Guard Against Smishing Attacks on Your Phone

• Security Affairs newsletter Round 344

• Week in review: Apache Log4j 0day exploited, Kali Linux 2021.4 released, Patch Tuesday forecast

• Protect Yourself Against The Apache Log4j Vulnerability

• Penetration testing

• Weekly Update 273

• Guidance for preventing, detecting, and hunting for CVE-2021-44228 Log4j 2 exploitation

• Microsoft’s Response to CVE-2021-44228 Apache Log4j 2

• ‘Vaccine’ against Log4Shell vulnerability has potential—and limitations

• TNS collaborates with Cellusys to enhance roaming and security solutions for 5G networks

• Cloudflare joins Microsoft 365 Networking Partner Program to optimize user connectivity

• Iron Mountain acquires ITRenew to expand its data center lifecycle management solutions

• Sigfox partners with Skyhook to improve delivery of geolocation services

• L3Harris Technologies elects Harry B. Harris Jr. to Board of Directors

• Apple Donating to Relief Efforts Following Tornadoes in Several U.S. States

• Western Digital SanDisk SecureAccess flaws allow brute force and dictionary attacks

• IT Security News Daily Summary 2021-12-11

• Canadian Citizen Charged for Ransomware Attacks in Alaska

• Cyber Pandemic Update – Protect yourself against a widely exploited vulnerability CVE-2021-44228 (Apache Log4j 2 versions 2.14.1)

• Update on Apache Log4j Zero-Day Vulnerability

• US Wins Appeal to Extradite Julian Assange

• (ISC)² Cybersecurity Scholarship Opportunities – Open Now!

• How to Prepare for CISSP Exam Day

• Hackers actively exploiting 0-day in Ubiquitous Apache Log4j tool

• New ‘Karakurt’ cybercrime gang focuses on data theft and extortion

• Facebook Finally Introduces Live Chat Support For People Locked Out Of Their Accounts

• Fields of application of artificial intelligence

• Cyber Pandemic Update – Protect yourself against a widely exploited vulnerability CVE-2021-44228 (Apache Log4j2 versions 2.14.1)

• Top Stories: Five New Macs in 2022, iPhone 14 Pro and AirPods Pro 2 Rumors, and More

• Mirai Based Botnet Moobot Exploit Hikvision Vulnerability

• Cybereason released Logout4Shell, a vaccine for Log4Shell Apache Log4j RCE

• 2022 ‘MacBook’ and ‘iMac Pro’ Could Help Apple Simplify Its Naming Strategy

• Protecting against CVE-2021-44228 (Apache Log4j2 versions 2.14.1)

• Protecting against CVE-2021-442228 (Apache Log4j2 versions 2.14.1)

• Build or Buy your own antivirus product

• What’s next for security clearance reform?

• How We’re Protecting Customers & Staying Ahead of CVE-2021-44228

• AwareGO Announces the Release of Human Risk Assessment for Enterprise

• IronNet Wins 2021 Threat Detection Product of the Year at the Cyber Security Awards

• ERI’s Partnership with Keys2Work Helps “Recycle Lives” in Indiana

• Bringing Cybersecurity to the Board (and Vice Versa)

• Data Consistency Storage in the Cloud

• Grady talks spectrum, cyber concerns in nomination hearing

• What to Do While Waiting for the Log4J Updates

• Extremely Critical Log4J Vulnerability Leaves Much of the Internet at Risk

• December 2021: Cyber Deception Month Continues…Halting Holiday Hackers…

• Apple Stores Getting Tool for Updating AirPods Pro to Latest Firmware Version

• Riverbed adds visibility and reporting capabilities for leading video applications

• Concerned by the Security Risk Affecting Popular Services and Apps? Here’s What We Know.

• 2021-12-10 – TA551 (Shathak) IcedID with Cobalt Strike and DarkVNC

• What’s the Deal with the Log4Shell Security Nightmare?

• Log4Shell Vulnerability is the Coal in our Stocking for 2021

• Report: Nearly two-thirds of orgs lack basic API security

• Dark web posts shed light on Panasonic breach

• CACI partners with Yubico to enhance trusted mobile platforms

• Cloudflare collaborates with leading cyber insurers to help businesses reduce their cyber risk

• Critical Apache Log4j 2 bug under attack; mitigate now

• CloudBees raises $245M to advance and accelerate product innovation

• How to detect the Log4j vulnerability in your applications

• Week in security with Tony Anscombe

• Apache Log4j Zero Day Exploit Puts Large Number of Servers at Severe Risk

• CISA Adds Thirteen Known Exploited Vulnerabilities to Catalog

• Jason Lewkowicz joins Optiv as SVP of Cyber Defense and Applied Security

• evil twin attack

• 1

• Volvo announces some R&D files stolen during cyberattack

• Mozilla rolls out GPC for all Firefox users, but enforcement limited to two states

• Apache Log4j Zero Day Exploit Puts Large Numbers of Servers at Severe Risk

• CISA Adds Thirteen Known Exploited Vulnerabilities to Catalog

• Apple Document Suggests Sony Considered Bringing PS Now Gaming Service to Mobile Devices

• Bitcoin mining has totally recovered from Chinese ban

• The Log4j vulnerability is bad. Here’s the good news

• IT Security News Daily Summary 2021-12-10

• Security Experts Sound Alarm on Zero-Day in Widely Used Log4j Tool

• Volvo Cars suffers a data breach. Is it a ransomware attack?

• Friday Squid Blogging: The Far Side Squid Comic

• Nobelium APT targets French orgs, French ANSSI agency warns

• Cuba ransomware gang hacked 49 US critical infrastructure organizations

• How quantum computing will transform government IT

• Log4j2 Vulnerability “Log4Shell” (CVE-2021-44228)

• Top House Republican pushes back on government telework

• Hackers reported 21% more vulnerabilities in 2021 than in 2020

• Irish Health Service ransomware attack happened after one staffer opened malware-ridden email

• How to Create a Data Loss Prevention Policy

• Cyber-attack on Hellmann Worldwide Logistics

• Russian National Sentenced for Role in Kelihos Botnet

• AWS exec: ‘Embrace more automation’ to boost cloud security

• HSE Missed Cyber-attack’s Warning Signs

• Video: Browsing the Web on Apple Watch With µBrowser

• Study: Most phishing pages are abandoned or disappear in a matter of days

• A Log4J Vulnerability Has Set the Internet ‘On Fire’

• Next-Gen Maldocs & How to Solve the Human Vulnerability

• Recent quantum computing advances point to brighter future

• Australian ACSC warns of Conti ransomware attacks against local orgs

• Dozen of Malicious NPM Packages Caught Hijacking Discord Servers

• virtual local area network hopping (VLAN hopping)

• UK High Court reverses course, approves Julian Assange’s extradition to US

• ‘Appalling’ Riot Games Job Fraud Takes Aim at Wallets

• Volvo Hit by Cyber-thieves

• Identity Authentication Access Market Set to Hit $28.9B in 2021

• Facebook Oversight Board Repeats Transparency Demand

• Apple Seeds Second Release Candidate Version of iOS 15.2 for iPhone 13 Models to Developers and Public Beta Testers

• Apple Seeds Second Release Candidate Version of macOS Monterey 12.1 to Developers

• Log4j zero-day “Log4Shell” arrives just in time to ruin your weekend

• German logistics giant Hellmann reports cyberattack

• Zero Day in Ubiquitous Apache Log4j Tool Under Active Attack

• Critical RCE 0day in Apache Log4j library exploited in the wild (CVE-2021-44228)

• Hackers Steal Research Data From Sweden’s Volvo Cars

• Deals: 32GB Apple TV 4K Gets New Low Price of $149.99 on Amazon

• MacRumors Giveaway: Win a Jackery Explorer 500 Portable Power Station and 100W Solar Panel

• On the Report of the Aspen Commission on Information Disorder

• New Yanluowang Ransomware Found to be Code-Signed, Terminates Database-Related Processes

• This Week in Security News – December 10, 2021

• 2021-11-30 – Emotet epoch 4 uses appinstaller for infection

• 2021-12-07 – obama141 malspam pushes both Qakbot and Matanbuchus

• 2021-12-08 – Pcap for an ISC diary (December 2021 Forensic Challenge)

• How to Include Cybersecurity Training in Employee Onboarding

• Exploits Swirling for Major Security Defect in Apache Log4j

• “Log4Shell” Java vulnerability – how to safeguard your servers

• Dark Reading Reflects on a Legacy and Life Well-Written: Tim Wilson

• REvil/Sodinokibi Ransomware: Origin, Victims, Prevention Strategies

• Journalists: stop selling NFTs that you don’t understand

• Sprawling Active Attack Aims to Take Over 1.6M WordPress Sites

• UK Court Paves Way for Julian Assange’s Extradition to the US

• CISA Releases Security Advisory for Hillrom Welch Allyn Cardiology Products

• Apache Releases Log4j Version 2.15.0 to Address Critical RCE Vulnerability Under Exploitation

• Click “OK” to defeat MFA

• Log4j RCE: Emergency patch issued to plug critical auth-free code execution hole in widely-used logging utility

• Hackers access DNA data of over 2 million patients

• CISA Releases Security Advisory for Hillrom Welch Allyn Cardiology Products

• Apache Releases Log4j Version 2.15.0 to Address Critical RCE Vulnerability Under Exploitation

• Milvus in IP Protection: Building a Trademark Similarity Search System With Milvus

• WD Updates SanDisk SecureAccess to Prevent Dictionary, Brute Force Attacks

• The business benefits of data compliance

• A zero-day exploit for Log4j Java library could have a tsunami impact on IT giants

• Apple Music Now Available on Google Nest Speakers in Five Additional Countries

• Securing Diversity for Success

• StrongPity Malware Spread Using Malicious Notepad++ Installers

• Bitdefender Free will be retired on December 31, 2021

• Kali Linux 2021.4 released with Samba compatibility, Apple M1 support, 9 new tools

• The Vulnerability Lag: Cut Ransomware Risks Resulting From Digital Transformation

• ALPHV BlackCat, a New Ransomware

• Real-world study shows the potential of gait authentication to enhance smartphone security

• Brazilian Ministry of Health suffers cyberattack and COVID-19 vaccination data vanishes

• Fujitsu Retires Tool Targeted by Threat Actors

• BlackCat: A New Rust-based Ransomware Malware Spotted in the Wild

• Ransomwared Payroll Provider Leaks Data On 38,000 Australian Government Workers

• This Decade Old Malware Has Picked Up Some Nasty New Tricks

• Worst Apache Log4j RCE Dropped On Internet

• 300,000 MikroTik Routers Are Security Ticking Timebombs, Say Researchers

• Julian Assange Can Be Extradited To US, Court Rules

• Deals: AirPods 3 Drop to New Low Price of $139.99

• MikroTik Routers: A Target for Threat Actors

• Revealed: Remember the Sony rootkit rumpus? It was almost oh so much worse

• Julian Assange Can Be Extradited To US, Court Decides

• IoT Security: Protecting Food and Agriculture Organizations

• Ahana goes deep on AWS to help Presto users set up and query secure data lakes

• ‘Karakurt’ Extortion Threat Emerges, But Says No to Ransomware

• Afero Raises $50 Million for Its Secure IoT Platform

• British Car Leasing Company Creates ‘Apple Car’ 3D Render Based on Patents

• China Again Uses Force to Bully Its Neighbors

• 10 countries take part in financial cyberattack war game

• Russian Who Helped Kelihos Malware Evade Detection Sentenced to 4 Years in Prison

• New Firefox Sandbox Isolates Third-Party Libraries

• Law Enforcement Access to Chat Data and Metadata

• 1.6 million WordPress Sites Were Attacked

• US Considers Extending Ban On Key Exports To China’s SMIC – Report

• Russia’s Internet Censorship Machine Is Going After Tor

• Vulnerabilities in Eltima SDK affect popular cloud desktop and USB sharing services

• What is Relevant Work Experience for CISSP?

• UK Court Permits Assange Extradition to US on Spying Charges

• 1.6 Million WordPress Sites Under Cyberattack From Over 16,000 IP Addresses

• 1.6 million WordPress sites targeted in the last couple of days

• Nobelium hackers targeting governments and businesses

• Do hackers take vacation during the festive season?

• This decade-old malware has picked up some nasty new tricks

• Security warning: New zero-day in the Log4j Java library is already being exploited

• Experts Meet to Share Info on Crypto Crimes

• EU Member States Agree to Extend Free Mobile Roaming Policy Until 2032

• Weak passwords caused 30% of security breaches

• Why Removing Admin Rights Closes Critical Vulnerabilities in Your Organization

• Saudi Activist Sues 3 Former U.S. Officials Over Hacking

• Top 5 Security Concerns of SaaS Users

• Work-from-Anywhere Requires “Work-from-Anywhere Security”

• Crypting Mastermind Gets Just Two Years for Kelihos Plot

• Russia Blocks Tor Privacy Service in Latest Censorship Move

• Firefox 95 Brings Security, Performance, and Efficiency Improvements to Mac

• Singapore-UK digital economy pact to focus on cybersecurity, trade

• Three-Quarters of Firms Admit Sub-Optimal IoT Security

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• BlackCat ransomware, a very sophisticated malware written in Rust

• Support Bot Scam on Twitter Steals Cryptocurrency | Avast

• New infosec products of the week: December 10, 2021

• Microsoft vulnerabilities have grave implications for organizations of all sizes

• Data of over 80k government employees leaked to hackers in Ransomware Attack

• Google files lawsuit against blockchain botnet operators

• How will emerging technologies impact the data storage landscape?

• Kali Linux 2021.4 Release – What’s New!!

• 30% of online users suffered security breaches due to weak passwords

• December 2021 Patch Tuesday forecast: How do you stack up?

• Ransomwared payroll provider leaks data on 38,000 Australian government workers

• Social media platforms being regulated as telcos under discussion in Australia

• Cloud services market to reach $927.51 billion by 2027

• Seller-related fraud threatens long-term customer retention

• The Best Way to Start Your Cloud Security Career

• What are the world’s most network ready markets?

• South Australian government employee data taken in Frontier Software ransomware attack

• Australia Leads with Controversial Cyber Laws

• RadiantOne Intelligent Identity Data Platform allows enterprises to unify distributed identity data

• NetSPI offers protection against cybersecurity threats with IoT penetration testing services

• Elastic increases real-time visibility and expands protection against advanced attack techniques

• Barracuda Email Protection detects malicious attacks and unauthorized activity

• Skybox Security’s network modeling mitigates critical infrastructure security risks

• (ISC)² accepts applications for 2022 Undergraduate, Graduate and Women’s Cybersecurity Scholarships

• ADVA enhances PNT resiliency against jamming and spoofing attacks

• Elastic Observability 7.16 accelerates troubleshooting with curated data exploration views

• Upland Cimpl Cloud helps customers gain complete visibility into their cloud environment

• ZPE Systems launches open SD-Branch platform for distributed enterprises and managed service providers

• Virtual Worlds, Real People: Human Rights in the Metaverse

• Now is the optimal time for orgs to collaborate on cybersecurity

• DOJ gives Russian national two-year sentence for work shielding Kelihos malware and other ransomware

• Atos partners with Dassault Systèmes to offer control and protection of data for critical industries

• Apple Rolls Out Updated Maps Interface in Australia

• Passbase raises $13.5M to help crypto businesses manage KYC compliance requirements

• Sentry acquires Specto to add deeper context in mobile application monitoring

• Avast acquires Evernym to bolster digital freedom vision and service delivery

• Why AI is the future of fraud detection

• SnapHack: Watch out for those who can hack into anyone’s Snapchat!

• Emotet Is Back and More Dangerous Than Before

• Broadcom Inc. Announces $10 Billion Share Repurchase Authorization

• Gili Brudno joins BioCatch as CPO

• IDIQ names Patrick Glennon as CTO

• Neelam Sharma joins K2 Integrity as Global Head of Business Development and Sales

• HackerOne appoints Chris Evans as CISO

• Automating AppSec with Contrast Security

• Malicious npm packages are stealing Discord tokens

• Fujitsu to discontinue ProjectWEB tool after Japanese govt data breaches

• CISA releases advisory on five Apache HTTP server vulnerabilities affecting Cisco products

• NetApp appoints Harvinder Bhela as CPO

• NYC eyes drones for building inspections

• Malware distribution in public repositories highlighted by malicious npm packages stealing Discord tokens

• Researchers Explore Microsoft Outlook Phishing Techniques

• IT Security News Daily Summary 2021-12-09

• Lack of Patching Leaves 300,000 Routers at Risk for Attack

• Paddle Postpones Launch of In-App Purchase Alternative After Apple Wins Reprieve

• Microsoft Was Willing to Bring Xbox-Exclusive Games to iPhone via xCloud

• How a Florida county’s election office solved authentication challenges

• Saudi human rights activist files lawsuit against former US intelligence operatives for hacking scandal

• Presenting the Security Outcomes Study, Volume 2

• Duo Passwordless Public Preview is Here

• Meta To Pilot Crypto Payments Via Novi Wallet In WhatsApp

• OCSP (Online Certificate Status Protocol)

• Canadian Ransomware Arrest Is a Meaningful Flex, Experts Say

• Cloud application developers need built-in security

• Dark Mirai botnet spreads targeting RCE on TP-Link routers

• Best practices for AI security risk management

• US Military’s Hacking Unit to take on ransomware gangs

• Vaccination rates tick up slightly among federal employees

• Why companies should be using AI to fight cyberattacks

• Want to be a cybersecurity pro? Here’s where to learn quickly and start a new career

• Integrate security into CI/CD with the Trivy scanner

• Fueled by Pandemic Realities, Grinchbots Aggressively Surge in Activity

• Verdict Reached in Josh Duggar Case

• One-Third of Phishing Pages Active Less Than A Day

• Chrome Users Beware: Manifest V3 is Deceitful and Threatening

• A third of you slackers out there still aren’t using HTTPS by default

• What is Camfecting and what can you do about it?

• Top 5 Tips to Prevent Getting Hacked While Working from Home

• Numerous Flaws In USB Over Ethernet Crippled Many Cloud Services

• Virginia releases data-driven coastal resiliency plan

• Protecting 911 from unwanted robocalls

• Meta expands ban on Myanmar military after $150 billion lawsuit

• 17 Discord malware packages found in NPM repository

• Mozilla fixed high-severity bugs in Firefox and Thunderbird mail client

• Lawsuit Claims Swollen Apple Watch Batteries Can Lead to ‘Substantial Personal Injury’

• Apple Updates AirPods, AirPods Pro, and AirPods Max Firmware

• Apple Updates MagSafe Charger Firmware to 10M229

• Newspapers vs Big Tech: Antitrust Tackles the Problems That Copyright Just Can’t Fix

• US Senators Propose Data Transparency Bill For Social Media

• New tech for the holidays? Watch out for these tech support scams.

• How to protect your business and its data during the 2021 holiday season

• Ex-Googlers Snag $5 Million for Software Supply Chain Security Tech

• DARPA Announces SMOKE Program

• How to Develop an Incident Response Plan

• Pentagon adds new top AI role

• 2021 marks another record year for security vulnerabilities

• How to restrict server users to a specific directory in Linux

• One-Third of Phishing Pages Gone in a Day

• Cisco Releases Security Advisory for Multiple Products Affected by Apache HTTP Server Vulnerabilities

• A Password Manager Isn’t Just for Christmas, It’s for Life (So Here’s 50% Off!)

• A closer look at Qakbot’s latest building blocks (and how to knock them down)

• Email Security Company IronScales Raises $64 Million

• Enable automation with a network digital twin

• GDPR as we enter 2022: Challenges, enforcement and fines

• S3 Ep62: The S in IoT stands for security (and much more) [Podcast+Transcript]

• Most Phishing Pages are Short-lived

• Why the Private Sector Is Key to Stopping Russian Hacking Group APT29

• Cisco Releases Security Advisory for Multiple Products Affected by Apache HTTP Server Vulnerabilities

• Kali Linux 2021.4 released: Wider Samba compatibility, The Social-Engineer Toolkit, new tools, and more!

• Increase Security With Ephemeral Access Control [On-Demand]

• IAM OT Security Risks Call for Strategic Defenses

• IoT under attack: Security is still not good enough on these edge devices

• Here’s a First Look at Apple Music’s Voice Plan Launching With iOS 15.2

• How a phishing campaign is able to exploit Microsoft Outlook

• LastPass Announces New Integration with Google Workspace

• Fake job interviews plague major game developers like Riot Games and Rockstar

• SMA 100 flaws in SonicWall VPN expose devices to remote takeover

• Simplifying Data Security in Modern, Multi and Hybrid Cloud Environments

• How a Generalized Validation Testing Approach Improves Efficiency, Boosts Outcomes and Streamlines Debugging

• Volume of Attacks on IoT/OT Devices Increasing: Microsoft Study

• iOS 15 Now Installed On Nearly 60% Of Devices, Exactly 80 Days After Launch

• (ISC)² Ransomware Study: Collaboration and Communication are Essential for Ransomware Readiness

• Insurance company says it will no longer cover state funded Cyber Attacks

• Australia Switches On Tesla Megapack Facility For Renewable Energy Capture

• IoT under attack: Security is still good not enough on these edge devices

• How MikroTik Routers Became a Cybercriminal Target

• Google Shuts Down Glupteba Botnet, Sues Operators

• Gathering security data using the Red Hat Security Data API

• Sonicwall Customers That Are Using SMA 100 Series Appliances Were Urged to Patch Critical Bugs

• Has your WordPress site been backdoored by a skimmer?

• Accounting for software in weapons systems

• Facebook, GDPR and Max Schrems – Under the Hood of GDPR Legal Processes

• Deals: Get Up to $150 Off Apple’s M1 MacBook Air

• New iPhone SE Inches Closer to Launch as Suppliers Begin Preparing for Shipments

• The Biden war on administrative burdens

• Mozilla Patches High-Severity Vulnerabilities in Firefox, Thunderbird

• How to Build a Better Internal Fraud Protection Program

• CISA Releases Guidance on Protecting Organization-Run Social Media Accounts

• Crooks injects e-skimmers in random WordPress plugins of e-stores

• McLaren selects Immersive Labs to support cyber workforce optimization of the McLaren F1 team

• Saudi Human Rights Activist, Represented by EFF, Sues Spyware Maker DarkMatter For Violating U.S. Anti-Hacking and International Human Rights Laws

• Resistance is … cheap? Cloudflare, Mandiant, and pals form incident response ‘n’ cyber insurance borg

• PRODUCT REVIEW: Frontline Vulnerability Manager (Frontline VM) by digitaldefense

• Apple Wins Court Delay To App Store Payment Change

• Google Disrupt The Glupteba Botnet Controls More Than 1 Million Windows PCs

• How To Tell If Your Smartphone Has Been Hacked

• What is a search engine and why does anyone care which one you use?

• IRONSCALES Raises $64 Million in Series C Funding Round Led by PSG

• The Executive Women’s Forum on Information Security, Risk Management & Privacy Presents the Leadership Scholarship

• CISA Releases Guidance on Protecting Organization-Run Social Media Accounts

• 6 Ways Intelligence Stops Ransomware

• AWS Among 12 Cloud Services Affected By Flaws In Eltima SDK

• Deepfakes Widen Fraud Opportunities For Financial Hackers

• Malicious npm Code Packages Built For Hijacking Discord Servers

• Tor Is Under Threat From Russian Censorship And Sybil Attacks

• AWS Is The Internet’s Biggest Single Point Of Failure

• China Wants to Join Southeast Asia’s Nuclear-Free Zone. Why Now?

• Federalism and Coronavirus Vaccination Mandates for Military Personnel

• CrowdStrike’s Strategic Counter-Adversarial Research Team (SCAR): Developing the Technology Falcon OverWatch Threat Hunters Need

• Ransomware Operators Leak Data Stolen From Wind Turbine Giant Vestas

• Zscaler Extends Zero Trust Exchange Platform to Deliver Zero Trust for Workloads

• (ISC)² Welcomes Students to Apply for its Undergraduate, Graduate, and Women’s Cybersecurity Scholarships

• Intel 471 Forms Tech Alliance With CyCognito

• Credit Card Swipers Injected into WordPress Plugins

• Reasons Your Sales Team Needs Email Tracking Software

• The Evolution of IoT Linux Malware Based on MITRE ATT&CK TTPs

• FCW Insider: December 9, 2021

• How to back up your Gmail: The ultimate guide

• Apple Continuing Work on New Apple Music App for Classical Music

• Hikvision Video Systems Targeted by Moobot Botnet

• 5 Vendor Evaluation Tools to Add to Your Cyber Risk Management Toolkit

• CCSP vs. Google Cloud Certified-Professional Cloud Security Engineer: Which Shows Broader Mastery in Cloud Security?

• Get patching: SonicWall warns of vulnerabilties in SMA 100 series remote access devices

• The First Building Block for the SOC of the Future is Data

• Australian Electricity Provider ‘CS Energy’ Hit by Ransomware

• ‘Moobot’ Botnet Targets Hikvision Devices via Recent Vulnerability

• WhatsApp Launches Instant Cryptocurrency Payments in the US

• Amazon Fined Record $1.3 Billion By Italian Regulators

• Top 1 Million Analysis – November 2021

• New Scam Emails Purport to Come from NSO Group Hacker – Intego Mac Podcast Episode 217

• The UK is under attack from ransomware

• Half of Websites Still Using Legacy Crypto Keys

• Over 300,000 MikroTik Devices Found Vulnerable to Remote Hacking Bugs

• “I am hacker NSO Group,” New Email Scam Leverages Controversial Pegasus Malware

• UK’s 2G, 3G Networks Switched Off By 2033, Government Says

• November 2021’s Most Wanted Malware: Emotet Returns to the Top 10

• SonicWall Customers Warned of High-Risk Flaws in Remote Access Appliances

• NVD: It’s Another Record Year for Vulnerabilities

• Tens of malicious NPM packages caught hijacking Discord servers

• Passport forgeries at all time high

• NIST analysis shows record number of reported vulnerabilities in 2021

• Call centre network security at risk: GOautodial vulnerability could lead to information disclosure and RCE

• What Is a Virtual Patch and Why You Need It

• Oppo Says Smartphone Innovation Has ‘Hit a Wall’ As It Teases First Foldable Device

• Cybercriminals take advantage of unpatched Hikvision systems

• QNAP NAS devices targeted by new bitcoin miner

• IT Execs Half as Likely to Face the Axe After Breaches

• The life cycle of phishing pages

• Evernym Joins Avast | Avast

• Apple AR Headset to Feature Advanced Hand Gesture Interface and Object Detection

• watchOS 8.3 Release Candidate Expands AssistiveTouch to Older Apple Watch Models

• It’s time to patch your SonicWall SMA 100 series appliances again!

• BitMart Attack – Combatting Cyber Criminals’ Crypto Appetite

• Report Says Russian Hackers Haven’t Eased Spying Efforts, Expert Weighs In

• Security Expert – 5th Record Year Of Security Vulnerabilities Published By US-CERT

• Do you know what your supply chain is and if it is secure?

• Surveillance Technology Industry Ally | Avast

• Moobot botnet spreads by exploiting CVE-2021-36260 flaw in Hikvision products

• Ransomware giving you sleepless nights? Here’s how to insure a good night’s sleep

• Extracting value from the interconnected network of risk management

• Over a Dozen Malicious NPM Packages Caught Hijacking Discord Servers

• Burned out workers are less likely to follow security guidelines

• Top practices to improve enterprise security

• Russian ransomware attack was to black out nearly 3m Australian homes

• Canada man arrested for launching malware attacks on United States

• Google Pixel bug preventing users from making 911 calls caused by Microsoft Teams

• SonicWall Urges Customers to Immediately Patch Critical SMA 100 Flaws

• Apple AR Glasses to Offer an Advanced Hand Gesture User Interface and Object Detection

• Sophisticated identity document fraud increased 57% over previous year

• What cybersecurity trends do company executives expect to see next year?

• How can organizations ease audit overload?

• A Safe and Secure Way to Decommission

• The Cybersecurity Skills Gap: Myth or Reality?

• CIS Control 14: Security Awareness and Skill Training

• Beware of ransomware attacks between Christmas and New Year’s!

• Elk Cloner

• Oz Feds reveal distribution model behind backdoored ‘An0m’ chat app spread by crims

• Rewind recovers and protects vital data with Backups for Microsoft 365

• Forter releases Trusted Identities to block fraudsters from unlawfully accessing accounts

• Code42 adds new insider threat detectors for government security teams

• Tenable.cs prevents cloud security risk and improves developer productivity

• Action1 RMM platform updates empower IT teams to secure their remote and hybrid workforce

• Tigera strengthens real-time intrusion detection and prevention with container firewalls

• Queensland government energy generator says ransomware attack not state-based

• House passes a compromise on the 2022 NDAA bill

• Digi International Connect EZ provides connectivity for critical infrastructure and distributed systems

• Coast Guard picks AT&T as primary telecom provider

• Quick Hits

• Android malware infected more than 300,000 devices with banking trojans

• Microsoft Vancouver leaking website credentials via overlooked DS_STORE file

• Verint and Theta Lake reshape collaboration risk mitigation technology for financial firms

• Arqit and NEOM develop software capable of defending cognitive cities against cyberattacks

• DigitSec partners with Copado to minimize security risks for Salesforce development teams

• oak9 integrates with ServiceNow to secure application infrastructure for customers

• (ISC)² extends partnership with NTT-AT to deliver SSCP cybersecurity training in Japanese

• iPhone 14 Pro Models to Feature Hole-Punch Display

• Broadcom acquires AppNeta to provide IT teams with end-to-end visibility into network performance

• Ingram Micro acquires BRLink to expand its portfolio of cloud services

• Claroty acquires Medigate and raises $400M to secure cyber-physical systems

• Airtel selects Juniper Networks to expand broadband network coverage across India

• CyCognito partners with Intel 471 to strengthen cybersecurity postures for enterprise customers

• Biden executive order calls for 65% drop in federal government emissions by 2030

• Canada Charges Its “Most Prolific Cybercriminal”

• A Year After SolarWinds, Supply Chain Threats Still Loom

• Imply names Jennifer Palecki as Chief People Officer

• Amanda Gourbault joins CompoSecure as CRO

• Torq raises $50M to reinvent security automation for digital enterprises

• With 18,378 vulnerabilities reported in 2021, NIST records fifth straight year of record numbers

• Instagram Reintroducing Chronological Feed Option in 2022

• Apple Releases Safari Technology Preview 136 With Bug Fixes and Performance Improvements

• Apple Car Project Loses Three Key Engineers

• Entrust announces geographic expansion of its cloud security services

• Dragos Academy helps practitioners better understand OT cybersecurity environments

• Drawbridge appoints Edna M. Conway to Board of Directors

• You can’t stop the ‘next SolarWinds’ — but you can slow it down

• The unrealized promise in COVID apps

• Instagram Head Set To Testify Before Congress About Child Safety Controversy

• How to Stop Hackers From Turning Your Systems Against You

• IT Security News Daily Summary 2021-12-08

• Report: Despite optimism, 65% of orgs can’t achieve mature cybersecurity programs

• You can’t stop the ‘next SolarWinds’—but you can slow it down

• Cyber in the 2022 defense bill

• GAO: Justice needs better use-of-force data

• Malicious npm Code Packages Built for Hijacking Discord Servers

• Claroty Raises $400M More, Acquires Healthcare IoT Security Firm Medigate

• Apple Increasing App Store Prices in Turkey Amid Continued Economic Instability

• How To Effectively Secure Connected Devices

• December 2021: Cyber Deception Month Continues…Today’s Cyber Deception Tools Are Straight Out of Science Fiction

• US Cyber Command head confirms direct actions against ransomware gangs

• GraphQL API authorization flaw found in major B2B financial platform

• Apple Launches Redesigned Open Source Website

• The new Firefox 95 might be the most secure web browser on the market

• Prepare to take the CISSP certification exam that can turbocharge your cybersecurity career

• Is a passwordless future getting closer to reality?

• GraphQL API authorization vulnerability found in large B2B financial technology platform

• Moobot Botnet Chews Up Hikvision Surveillance Systems

• AWS Outage Hits Eastern US

• SonicWall strongly urges customers to apply patches to SMA 100 devices

• Apple Wins Stay in Epic Case, Won’t Have to Implement App Store Changes Tomorrow

• Cybersecurity can pose a risk in more than one way for financial advisors

• Google discrupts Glupteba blockchain botnet that infected 1mn PCs

• Does Your Child Have an Unhealthy Relationship with Social Media?

• Windows URI Handling Flaw Leads to Drive-by Code Execution

• Report: Chinese Hackers Targeted Southeast Asian Nations

• Trickbot-Infected Machines Drop Emotet Samples

• How Do I Empower a Remote Workforce Without Compromising Security?

• NDAA requires new job data, software job series

• Critical SonicWall VPN Bugs Allow Complete Appliance Takeover

• Not with a Bang but a Whisper: The Shift to Stealthy C2

• Microsoft Seizes Domains Used by a Chinese Hacking Group

• SonicWall Releases Security Advisory for SMA 100 Series Appliances

• New German Government is Pro-Encryption and Anti-Backdoors

• macOS 12.1 Fixes Menu Bar Icons Obscured by Notch on 2021 MacBook Pros

• Canadian charged with running ransomware attack on US state of Alaska

• AWS Among 12 Cloud Services Affected by Flaws in Eltima SDK

• Browse the best email security gateways for your enterprise

• SonicWall Releases Security Advisory for SMA 100 Series Appliances

• Cybersecurity Trends for 2022

• Two Countries Charge Canadian with Cybercrimes

• Why Cloud Service Providers Are a Single Point of Failure

• Apple Seeds Release Candidate Version of tvOS 15.2 to Developers

• EFF, Partners Launch New Edition of Santa Clara Principles, Adding Standards Aimed at Governments and Expanding Appeal Guidelines

• New research shows IoT and OT innovation is critical to business but comes with significant risks

• Not all tech disasters are ‘all hands’ events. But how do you tell which is which?

• WhatsApp Disappearing Message Feature Now Available For All Newly Initiated Chats

• Edge Computing and 5G: Will Security Concerns Outweigh Benefits?

• Identity Fraud: A Major Growth Area for Criminals

• Passports Now Most Attacked Form of ID

• How to Opt Out of Verizon’s Custom Experience Tracking

• Apple Wallet Now Supports Hotel Keys From Some Hyatt Locations

• 7 data privacy solution features your organization needs to have

• Grinchbots strike again this holiday shopping season as bot traffic spikes 73%

• Improve kernel security with the new Microsoft Vulnerable and Malicious Driver Reporting Center

• Google Cloud boosts threat detection with cloud-native network security offering

• Software Vulnerabilities Up by 20% in 2021

• Restore the 4th Minnesota: Racking Up Victories in 2021

• Virgin Media fined £50,000 after spamming 451,000 who didn’t want marketing emails

• Canadian Man Faces Charges in Canada, U.S. for Ransomware Attacks

• Apple Giving Customers a Second Chance to Buy AppleCare+ After Their iPhone or Mac is Repaired

• Coinbase customers demand refunds over GYEN stablecoin glitch

• Conti Ransomware attack locks down guests in hotel

• How security professionals will rise to the challenge of cyber defense in 2022

• Meta To Allow Staff To Defer Office Return Until June 2022

• Hotel claims Conti ransomware attack on system as guests locked out

• Best VPNs for small and home-based businesses in 2021

• CS Energy foiled a ransomware attack

• Telemedicine: Doctors and patients are both worried about privacy and data security

• Cybersecurity: Organizations face key obstacles in adopting zero trust

• Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

• Chinese State-Sponsored Cyber Espionage Activity Supports Expansion of Regional Power and Influence in Southeast Asia

• RTF Injection Poised For More Widespread Adoption

• Canadian Indicted For Launching Ransomware Attacks

• Google Takes Down Glupteba Botnet

• Hacker Named Bowser Must Pay Nintendo $10 Million In Piracy Case

• Everyone Is Burned Out. That’s Becoming A Security Nightmare

• Deals: eBay’s Brand Outlet Sale Has 20% Off Anker, Spigen, Jabra, and More

• UK to Shut Down 2G and 3G Networks by 2033

• Vulnerability in Windows 10 URI handler leads to remote code execution

• Visa Rolls Out Crypto Advisory Service

• Emotet’s Behavior & Spread Are Omens of Ransomware Attacks

• Private Equity Firm Permira to Acquire Mimecast in $5.8 Billion Deal

• 5 Tips to Stay on the Offensive and Safeguard Your Attack Surface

• Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

• What to Do When a Ransomware Group Disappears

• What a Departure Email Can Teach Us About Security

• Cognitive Biases and Penetration Testing

• Report: iOS Users Who Opt-Out of App Tracking Continue to Be Tracked by Facebook and Snapchat

• Satechi Launches Thunderbolt 4 Dock and USB-C Adapters for Apple Silicon Macs

• National Security by Platform

• Red Hat brings Ansible IT automation engine to Azure

• QNAP Warns of New Crypto-Mining Malware Targeting NAS Devices

• Was threat actor KAX17 de-anonymizing the Tor network?

• (ISC)² Cybersecurity Scholarship Opportunities – Open Now!

• Microsoft To Change Hiring Policy After DoJ Finds Immigrant Discrimination

• Claroty Raises $400 Million, Acquires Healthcare IoT Security Firm Medigate

• Ripple Effects Felt Across the Internet With AWS Outage

• Google Disrupts Blockchain-based Glupteba Botnet; Sues Russian Hackers

• Emotet Is Dropping Cobalt Strike

• 3 Ways to Conduct a Vulnerability Probe to Expose Hidden Cyber Risk

• VPS Hosting Vs. Dedicated Servers – Which Is Better?

• Over 300 SPAR Stores Switch To Cash-only Payments After Cyber Attack

• ‘USB Over Ethernet’ Driver Vulnerabilities Affected Major Cloud Services

• FCW Insider: December 8, 2021

• Identity Verification Company Incode Raises $220 Million at $1.25 Billion Valuation

• Dramatic Fall in .UK Domain Suspensions

• Initial Time Machine Backup Failures Increasingly Being Reported by Mac Users

• Microsoft Releases Preview of Native OneDrive Client for Apple Silicon Macs

• QNAP NAS Devices Targeted Now by Another Cryptocurrency Mining Malware

• Meta Expands Facebook Crackdown On Myanmar Military

• Google Takes Action Against Glupteba Botnet and Its Russian Operators

• New paper: Collector-stealer: a Russian origin credential and information extractor

• Omicron variant being used to phish students

• The Pentagon and UMD to launch intel-focused research center

• Could faster buying undermine electronic warfare prep?

• What’s next for CMMC

• Ransomware attack locks hotel guests out of rooms

• Trickbot Rebirths Emotet: 140,000 Victims in 149 Countries in 10 Months

• Claroty raises $400M to protect ‘cyber-physical’ systems such as IoT and industrial

• French Transport Giant Exposes 57,000 Employees and Source Code

• Google Files Lawsuit Against Blockchain Botnet Operators

• [eBook] Guide to Achieving 24×7 Threat Monitoring and Response for Lean IT Security Teams

• 140,000 Reasons Why Emotet is Piggybacking on TrickBot in its Return from the Dead

• Apple iPhone 13 Production Down 20 Percent – Report

• Android Security Updates Patch 46 Vulnerabilities

• Apple Looking to Create an ‘Entirely New Application Paradigm’ for AR and VR

• watchOS 8.3 and iOS 15.2 Release Candidates Enable Apple Watch ECG in China

• Hotel Guests Locked Out of Rooms After Ransomware Attack

• Apple Reportedly Planning to Launch New iPhone SE Models in 2022 and 2023

• Rumored Apple Watch Lineup for 2022 to Include Three New Models

• Build your own Android security product

• Kuo: AirPods Pro 2 With New Design and Improved Chip to Launch in Late 2022

• Businesses fear rise of third-party attacks, as ransomware impact grows

• What’s the right amount of trust to build into your network? Less than Zero

• Kuo: Second-Generation Apple AR Headset to Launch in 2024 With Lighter Design, Redesigned Battery System, and More

• From DDoS to bots and everything in between: Preparing for the new and improved attacker toolbox

• Warning: Yet Another Bitcoin Mining Malware Targeting QNAP NAS Devices

• XMGoat: Open-source pentesting tool for Azure

• House passes NDAA compromise bill

• Emotet directly drops Cobalt Strike beacons without intermediate Trojans

• Skewed analytics caused by bots damage businesses as much as ad fraud

• Threat actors contacted for compensation against cryptocurrency heist

• Ransomware news headlines trending on Google

• 2021 will be a record-breaking year for data breaches, what about 2022?

• iOS 15.2 Adds ‘Parts and Service History’ Feature to iPhone

• Finding the key for balancing remote workforce security with productivity

• Microsoft extends Secured-core concept to servers

• The current state of zero trust: Awareness is high, adoption is lagging

• CrowdStrike Receives Global Recognition as a Pre-Eminent Market and Technology Leader in Cybersecurity

• Data Consistency Storage in the Cloud

• Rising volume of email fatigue opens doors for Cybercriminals

• Stand der Cybersicherheit in Deutschland 2021

• State of Cybersecurity in Germany in 2021

• Healthcare cybersecurity market size to reach $35.5 billion by 2027

• NetQuest Streaming Network Sensors extend visibility and optimize threat detection

• F5 unveils multiple security offerings to prevent automated and human-driven malicious activity

• Save 20% on official (ISC)² CCSP online self-paced training

• Aryaka introduces SD-WAN and SASE offerings to accelerate cloud adoption for enterprises

• Cloudentity SaaS platform enables zero trust access control for APIs

• VEON MobileID offers digital identity validation compliant with local data privacy laws

• Oxeye CNAST platform delivers contextualized risk assessment for cloud native applications

• Quantum Origin protects data and systems against evolving quantum attacks

• Aruba EdgeConnect Microbranch improves connectivity services for remote workers

• DigiCert PKI platform supports certificate-based authentication for Windows Hello for Business

• 2021-11-30 – Emotet epoch 4 uses appinstaller for infection

• 2021-12-08 – Pcap for an ISC diary (December 2021 Forensic Challenge)

• Journalists: stop selling NFTs that you don’t understand

• AWS launches its second Top Secret region

• Hackers using concern about Omicron strain of COVID-19 to attack US universities

• IDnow and ARIADNEXT launch AutoIdent+QES to comply with KYC requirements

• Open Systems appoints Gavriella Schuster to Board of Directors

• Ayla Networks raises $20M to accelerate momentum in IoT markets

• Accenture invests in Interos to help companies improve their supply chain management

• Jumio acquires 4Stop to deliver next-generation identity and anti-fraud solutions

• Aon partners with Guidewire to help clients quantify their risks

• Is your web browser vulnerable to data theft? XS-Leak explained

• 5 common gift card scams and how to spot them

• Brothers Confess to Conning Spanish-speaking Americans

• TAG Cyber opens headquarters in New York to support RaaS platform development

• Sequans Communications achieves CC EAL5+ certification for GSMA-compliant iUICC support

• Jennifer Jackson joins Actian as CMO

• IDEMIA NSS appoints three vice presidents to their executive leadership team

• First certified ‘secured-core’ Windows Servers and Azure Stack HCI servers are now available

• Canadian indicted for launching ransomware attacks on orgs in US, Canada

• New Financial Services Industry Report Reveals Major Gaps in Storage and Backup Security

• Why good program governance is a key to success

• Google Disrupts Botnet Targeting Windows Machines

• Google disrupts the Glupteba botnet

• IT Security News Daily Summary 2021-12-07

• Zero trust network access should be on every CISO’s SASE roadmap

• Quantum computing is reality, not fiction. Here’s how agencies can prepare

• BadgerDAO users’ cryptocurrency stolen in cyber attack

• Facebook Sued For $150 Billion Over Hate Speech

• Virtual-Network Vulnerability Found in AWS, Other Clouds

• Rubrik’s New Managed Service Protects Data from Ransomware Attacks

• AAPL Shares Hit Another All-Time High as Morgan Stanley Raises Apple Price Target to $200

• Nikkei Does Deep Dive Into Apple’s ‘Nightmare Before Christmas’ Supply Chain Issues

• Amazon Web Service outage is impacting major websites

• HPC helps scientists extract data from satellite and drone imagery

• Google announces lawsuit and action against blockchain botnet Glupteba

• SentinelOne brings in $56 million for Q3, reports more than 6,000 customers

• Federal court blocks contractor vaccination mandate

• DigiCert Advances Passwordless Authentication with Support for Windows Hello for Business

• Cerberus Sentinel Announces Acquisition of Arkavia Networks

• First Circuit Affirms School’s Punishment of Students for Online Social Media Posts

• 5 Common Hybrid IT Security Challenges and How to Overcome Them

• Omicron Scam Targets Universities

• Windows 10 Drive-By RCE Triggered by Default URI Handler

• Vulnerabilities Found in GOautodial

• Understanding the Cyber Risk Exposures Within the Health Care Industry

• Israeli govt pledges greater oversight of cyber-exports after NSO tools hacked US officials

• When Scammers Get Scammed, They Take It to Cybercrime Court

• Google takes action against blockchain-based Glupteba botnet

• Amazon Prime, Ring Services In US Impacted By AWS Outage

• Save Incident Response Time with Intezer Analyze

• Data science proved what Pittsburgh’s Black leaders Knew: Racial disparities compound covid risk

• LogDNA Snags $50 Million for Data Observability Tech

• 5 Ways GRC & Security Can Partner to Reduce Insider Risk

• Universal Control Not Coming in macOS Monterey 12.1 and iPadOS 15.2

• macOS Monterey 12.1 Fixes Major Tap to Click, YouTube HDR, and Charging Bugs

• biometric payment

• AWS goes down and with it goes a host of websites and services

• Israeli govt pledges greater oversight of cyber exports after NSO tools used to spy on US officials

• How employee burnout may be putting your organization at risk

• Cambridge Quantum delivers first quantum encryption keys

• 8 tips to protect company data sent via home internet connections

• 5 Ways to Ensure Your Child’s Online Safety

• Razer Launches MagSafe-Compatible Cooling Fan for iPhones

• Apple Seeds Release Candidate Version of watchOS 8.3 to Developers

• Apple Seeds Release Candidate Versions of iOS 15.2 and iPadOS 15.2 to Developers

• Apple Seeds Release Candidate Version of macOS Monterey 12.1 to Developers

• Apple Music Voice Plan Coming in iOS 15.2

• Why the FCC Expelled a Chinese Telecom for National Security Risks

• Google Takes Down Glupteba Botnet; Files Lawsuit Against Operators

• Firefox update brings a whole new sort of security sandbox

• New Secured-core servers are now available from the Microsoft ecosystem to help secure your infrastructure

• Microsoft disrupts activity of Chinese hackers by seizing 42 websites

• Bosses are reluctant to spend money on cybersecurity. Then they get hacked

• Rust takes a major step forward as Linux’s second official language

• Hackers Target Random Business Printers To Spread Anti-Work Messages

• Meta Sued For $150 Billion By Rohingya Refugees

• SIEM Should Focus On Active Threat Detection Over Operational Tasks

• What Are Best Identity & Access Mgmt Tools Currently Available?

• “Hello Quantum World:” New cybersecurity service uses entanglement to generate cryptographic keys

• How and why people use password managers

• Deals: Take $49 Off Apple’s iPad Pro Magic Keyboards on Amazon, Starting at $249.99 for 11-Inch Model

• Recorded Twitter Spaces Now Available for All iOS, Android, and Web Users

• Zero Trust core to contemporary cybersecurity strategy, One Identity research finds

• Cryptominers aren’t just a headache – they’re a big neon sign that Bad Things are on your network

• Israel to keep a vigil on cyber software exports

• Intel To List Self-driving Car unit Mobileye

• Melissa virus

• Grip Security Raises $25 Million to Secure SaaS Applications

• Three Hundred Spar Convenience Stores in UK Affected by Cyber Incident

• Expert Comments: Spar Stores Hit By Major Cyberattack

• New reforms will enhance the security and resilience of Australia’s critical infrastructure

• Bitcoin Miner [oom_reaper] targets QNAP NAS devices

• 20 years of Red Hat Product Security: The rise of branded exploits (Part 2)

• Apple CEO Tim Cook ‘Secretly’ Signed $275 Billion Deal With China in 2016

• Encryption Does Not Equal Invisibility – Detecting Anomalous TLS Certificates with the Half-Space-Trees Algorithm

• Defending Against the Use of Deepfakes for Cyber Exploitation

• Protecting Veterans from Targeted Online Scams

• Losses From BitMart Breach Reach $200 Million

• Founder Of Massive Robo Text Service Accused Of Running Secret Spying Operation

• Court Allows Microsoft To Dismantle Infrastructure Of APT15

• Apache Kafka Cloud Clusters Expose Sensitive Data For Companies

• Data Security Comment: Colorado Energy Company Loses 25 Years Of Data

• Planned Parenthood LA breached, Experts Weigh In

• Expert Comment: Ceeloader Malware

• A chink in the armor of China-based hacking group Nickel

• Pushing Forward: Key Takeaways From Trend Micro’s Security Predictions for 2022

• Virgin Media O2 Completes Gigabit Network Upgrade

• GitGuardian raises $44M to offer ‘comprehensive’ code security

• Identity verification startup Incode raises $220M

• Grip Security gets $19M to automatically lock down SaaS apps

• Torq lands $50M to bring no-code automation to security

• Eve Updates HomeKit-Enabled ‘Eve Room’ Air Quality Monitor With Thread Support

• Deals: AirPods 2 Return to Black Friday Price of $99.99 With Christmas Delivery

• Trump’s Judicial Campaign to Upend the 2020 Election: A Failure, But Not a Wipe-Out

• A Critical Zoho ManageEngine Desktop Central and Desktop Central MSP Vulnerability Is Exploited by an APT Actor

• Pay a Hacker, Save a Life

• Foreign Office IT chaos: Shocking testimony reveals poor tech support hindered Afghan evac attempts

• Extend Threat Visibility With Humio’s Integration With CrowdStrike’s Indicators of Compromise (IOCs)

• Critical Hit: How DoppelPaymer Hunts and Kills Windows Processes

• How to check for Windows updates and install them

• Hackers pretending to be Iranian govt steal credit card infomation and create botnet

• Aruba rolls out “Microbranch” networking to level up home offices

• Too many bosses are reluctant to spend money on cybersecurity. Then they get hacked

• GitGuardian Raises $44 Million to Create Code Security Platform

• Money, Reputations at Stake in Dark Web Courtrooms

• Misconfigured Kafdrop Instances Lead to Sensitive Data Exposure for Many Companies

• Duo Passwordless Public Preview is Here

• SolarWinds Attackers Spotted Using New Tactics, Malware

• Microsoft Seizes Domains Used by China-Linked APT ‘Nickel’

• Presenting the Security Outcomes Study, Volume 2

• Bringing Cybersecurity to the Board (and Vice Versa)

• Webcast: Why your email encryption solution is doomed

• 300 Spar Stores Impacted After Cyberattack On Supplier

• Craig Wright Wins US Case Over Bitcoin Inventor Claim

• 9-1-1 There’s Been A Data Breach

• You can learn coding, 3D animation, cybersecurity and more with this e-learning bundle

• Firefox 95 Rolls Out With New ‘RLBox’ Isolation Feature

• Eltima SDK Contain Multiple Vulnerabilities Affecting Several Cloud Service Provides

• Someone Is Running Lots of Tor Relays

• Take a Unique Peek into How AirPods Have Evolved With Every Generation

• Google Rolls Out Voice and Video Call Features to Gmail App

• The story of the year: ransomware in the headlines

• Fraudsters abuse Twitter APIs to monitor public tweets and pish cryptocurrency scams

• Dozens of malicious APT15 sites seized by Microsoft

• Ramping Up Malware Hunting with Heimdal™

• EC Gathers Feedback On Microsoft’s Nuance Buy, Despite US Approval

• Security Matters: Vulnerability Scanning Done Right!

• Integrate security into CI/CD with the Trivy scanner

• Just 3% of UK Firms Escaped a Supply Chain Breach in 2021

• SolarWinds Hackers Targeting Government and Business Entities Worldwide

• Conti ransomware hits Nordic Choice Hotels

• Attackers exploit another zero-day in ManageEngine software (CVE-2021-44515)

• New Ceeloader Malware Used By Russian-backed Advanced Persistent Threat (APT) Organization Nobelium

• FCW Insider: December 7, 2021

• Ransomware Victims Pay $700K in Extra Extortion Fees

• Microsoft seized 42 domains used by the China-linked APT15 cyberespionage group

• Apple Reportedly Increasing iPhone Shipments by 30% in First Half of 2022

• WhatsApp Makes Disappearing Messages a Default Option With Multiple Durations

• Kafka Cloud Clusters Expose Sensitive Data

• Cuba Ransomware Obtained $44 Million in Ransom Payments

• 2021 Year In Review | Avast

• Google Patches Serious Use-After-Free Vulnerabilities in Chrome

• UK’s Poor Cyber Risk Planning Could “Wreak Havoc”

• Beware of new Malicious Chrome Extension that Delivers Password Stealer Malware

• Trust Erodes Amid Ransomware Growth: 2021 CrowdStrike Global Security Attitude Survey

• Report: Enterprises lose millions of dollars to ad fraud each year

• Rubrik looks to protect sensitive cloud-based data from ransomware attacks

• A Password Manager Isn’t Just for Christmas, It’s for Life (So Here’s 50% Off!)

• Looking for adding new detection technologies in your security products?

• CrowdStrike survey says Microsoft customers ‘losing trust’; Microsoft calls report ‘self-serving’

• Microsoft Seizes 42 Malicious Web Domains Used By Chinese Hackers

• Nobelium continues to target organizations worldwide with custom malware

• The threats of modern application architecture are closer than they appear

• Secure transactions top retailers’ wish lists this holiday season

• Adapting higher education to address the cybersecurity skills shortage

• Microsoft wins court approval to take over sites run by Chinese crime gang

• How to protect air-gapped networks from malicious frameworks

• Microsoft shuts down 42 cyber spying Chinese websites

• Ransomware attack on Spar Supermarket Chain England

• LINE Pay leaks around 133,000 users’ data to GitHub, of all places

• Latest Firefox 95 Includes RLBox Sandboxing to Protect Browser from Malicious Code

• Attivo Networks Joins SentinelOne’s Singularity XDR Marketplace

• CIS Benchmarks communities: Where configurations meet consensus

• How your business can benefit from Cybersecurity automation

• Removing the Fantasy of Cybersecurity Metrics with Tripwire Connect

• Tripwire Industrial Edge – The New Method of Visibility for Industrial Networks

• LINE Pay leaks around 133,000 users’ data to Github, of all places

• 5G services revenue to reach $600 billion by 2026

• SES GS Hydra provides end-to-end situational awareness for government and military users

• SentinelOne Singularity Mobile combats mobile malware and phishing attacks

• Cloud.gov explores authentication service

• Cloudflare expands firewall capabilities to help companies secure their entire corporate network

• BitMart says it will compensate victims of $196 million hack and restore trading by Tuesday

• Hackers pretending to be Iranian govt use SMS messages to steal credit card info, create botnet

• Wipro partners with Celonis to help enterprises optimize their supply chain management

• Apple Still Hasn’t Fixed Siri Issue That Nixed Call, Email, and Voicemail Features Used by Low Vision and Blind Users

• Kasada raises $23M to accelerate global momentum combating online fraud

• LogDNA raises $50M to bring observability pipeline solution to market

• Terralogic brings Stellar Cyber Open XDR platform to its customers across India

• Before You Download: Steer Clear of Malicious Android Apps

• What are buffer overflow attacks and how are they thwarted?

• Prison for Newstar Websites Money Launderer

• Lisbeth McNabb joins Acronis Board of Directors

• Accounting for software in weapons systems

• Best gifts for hackers: Cybersecurity presents, secured

• Microsoft seizes domains used to attack 29 governments across Latin America, Caribbean, Europe

• MITRE Engenuity & Cybrary Surpass 25,000 Users in MITRE ATT&CK Defender Certification Program

• Broadridge appoints Dipti Kachru as Global CMO

• Ex-Googler Timnit Gebru Starts Her Own AI Research Center

• BitMart the latest crypto exchange to suffer cyber attack

• IT Security News Daily Summary 2021-12-06

• Losses from BitMart breach reach $200 million

• Crypto-Exchange BitMart to Pay Users for $200M Theft

• Microsoft Seizes Malicious Websites Used by Prolific Chinese APT Group

• Zoho Releases Security Advisory for ManageEngine Desktop Central and Desktop Central MSP

• Nobelium APT targets French orgs, French ANSSI agency warns

• Some SD Cards Not Working Properly With 2021 14 and 16-Inch MacBook Pros

• DOD, UMD to launch IC research center

• Are You Guilty of These 8 Network-Security Bad Practices?

• Fearing Misuse, Israel Tightens Supervision of Cyber Exports

• Cyber-attack Closes UK Convenience Stores

• Zoho Releases Security Advisory for ManageEngine Desktop Central and Desktop Central MSP

• White House embeds cyber EO in FISMA reporting

• BitMart Confirms $150M Crypto Theft

• Department of Justice Exploring Apple’s Treatment of ‘Roblox’ Game in Antitrust Investigation

• Tile Buyer Life360 Selling Precise Location Data on Millions of Users

• NICKEL targeting government organizations across Latin America and Europe

• Fake KPSPico Windows activator tool KPSPico steals crypto wallet data

• How to Create a Data Loss Prevention Policy

• On the offense: Deterring threats with cyber strategy

• Cyber Command Publicly Joins Fight Against Ransomware Groups

• Video: CISO Fireside Chat With Steve Katz, World’s First Known CISO

• Russian Actors Behind SolarWinds Attack Hit Global Business & Government Targets

• US Military Has Acted Against Ransomware Groups: Report

• How identity and access management enabled county’s remote work

• Facebook Wants Users To Send It Nude Photos To Prevent Incidents Of “Revenge Porn”

• SEARCH for Hidden Cyber Threats: 6 Steps to Unleash a Hyper-effective Threat Hunting Team

• Hands-On With iOS 15’s SharePlay Feature

• Check Point named a Major Player in Modern Endpoint Software Security for Small and Midsize Businesses in the latest IDC MarketScape Report

• Security experts question new DHS/TSA cybersecurity rules for rail companies

• How to get started with attack surface reduction

• Passwordless authentication issues to address before adoption

• 330 SPAR stores close or switch to cash-only payments after a cyberattack

• Why Macs are the best, according to Mac expert Thomas Reed: Lock and Code S02E23

• CISA Releases Security Advisory on WebHMI Vulnerabilities

• Best robot toys for kids: LEGO, Raspberry Pi, and other awesome STEM gift ideas

• Anti-Fraud Bot Protection Firm Kasada Bags $23 Million Investment

• CISA Releases Security Advisory on WebHMI Vulnerabilities

• December 2021: Cyber Deception Month

• Spar shops across northern UK shut after cyber attack hits payment processing abilities

• Cuba Ransomware Gang Hauls in $44M in Payouts

• How to write YARA rules for improving your security and malware detection

• Bot protection firm Kasada lands $23M to abolish the CAPTCHA

• Apache Kafka Cloud Clusters Expose Sensitive Data for Large Companies

• Pegasus Spyware Infects U.S. State Department iPhones

• How Crowd-Forecasting Might Decrease the Cybersecurity Knowledge Deficit

• Federal Intervention, Conflict and Drought in the American West

• iPhones of 9 State Dept officials hijacked by NSO Pegasus spyware

• 7 Holiday Cybersecurity Tips to Try Before The Year Ends

• Brace yourself for these five top data breach trends in 2022, Experian warns

• Hackers are using this new malware which hides between blocks of junk code

• A cyber attack has forced supermarket Spar to close some stores

• Zoho Confirms New Zero-Day, Ships Exploit Detector

• Cryptocurrency startup fails to subtract before adding, loses $31m

• Vulnerability Summary for the Week of November 29, 2021

• Thieves Using AirTags to “Follow” Cars

• Magecart Groups Abuse Google Tag Manager

• HYPER’s ‘DUO PRO’ 7-in-2 USB-C Hub Debuts for New MacBook Pro Models

• Wrap Up Your Holiday Shopping With Our Exclusive Apple Accessory Sales at Nomad, Satechi, Twelve South, More

• Miscreants make off with $150m of digital assets in BitMart security breach

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Insider Threats Can Turn Your Cloud Security Into a Storm

• 5 holiday Cybersecurity tips retailers need this year

• These cyber laws violation can land you in jail

• How to lock a Zoom meeting to keep out unwanted guests

• FBI Warns of Cuba Ransomware Attacks on Critical Infrastructure

• Vulnerability Summary for the Week of November 29, 2021

• DMEA Colorado electric utility hit by a disruptive cyberattack

• American Diplomat’s iPhones Compromised By NSO Group

• FBI: Cuban Ransomware Hits 49 Critical Infrastructure Organizations

• SolarWinds Hackers Keep Compromising Targets

• BitMart Crypto Exchange Loses $150 Million To Hackers

• Researchers Reveal More Details About SideCopy, the Pakistani Threat Actor Group

• Excel XLL Add-ins Are Pushing a Password-stealing Malware

• Pegasus Spyware Used to Hijack Phones of US State Department Officials

• How File Hashes Fail As A Malware Detection Heuristic

• “Get Your Free Omicron PCR test” is the latest Omicron phishing scam

• NSO Group spyware found on iPhones of US State Department employees

• Web Browsers Vulnerable to 14 New Types of XS-Leak Attacks

• Why the C-Suite Doesn’t Need Access to All Corporate Data

• Deals: AirPods Pro With MagSafe Available for $169.99 and Christmas Delivery on Amazon ($79 Off)

• Apple Partners With Boys & Girls Clubs to Provide Tens of Thousands of Kids With Opportunity to Learn How to Code

• Kafdrop flaw allows data from Kafka clusters to be exposed Internet-wide

• Public Wi-Fi Security: Is It Safe to Use for Business?

• LogDNA raises $50M to bring ‘full power’ of observability data to security

• How the President Can Shape the Role and Oversight of the National Cyber Director

• Colorado Energy Company DMEA Loses 25 Years Of Data After Cyberattack

• How to Build an Integrated Security Posture Using XDR

• Apple Attempts to Stop Developers Promoting Alternative Payment Options for In-App Purchases in Russia

• Omicron phishing emails found targeting the UK

• What Ransomware Trends Mean for Your Vendor Risk Program

• Microsoft’s Loop Project Management Software

• Cuba ransomware gang scores almost $44m in ransom payments across 49 orgs, say Feds

• Malicious KMSPico Windows Activator Stealing Users’ Cryptocurrency Wallets

• New Malvertising Campaign Spreads Backdoors, Malicious Chrome Extensions

• Governemnt Data Breach Of New Years Honours Recipients

• Why Data Protection Is More Than Just A Tick Box For Charities

• Twitter Verified Accounts Targeted as Part of a Large Phishing Attempt

• Hackers Steal $150 Million Worth of Cryptocurrency From BitMart

• Vulnerability Scanning Frequency Best Practices

• Enter the Heimdal™ Social Media Giveaway for a Chance to Win Holiday Goodies

• Poll Data: What CEOs Need to Know About Cybersecurity Going into 2022

• Cyberattack Causes Significant Disruption at Colorado Electric Utility

• Threat actors stole more than $150 million worth of cryptocurrency tokens from BitMart platform

• FBI warns that Cuba ransomware group has compromised 49 entities in five critical infrastructure sectors

• Malicious Online Ad Campaign Steals User Logins

• Cuba Ransomware Nets Nearly $50m

• United States military hacking unit acknowldges offensive action to disrupt malware

• 14 New Cross-Site Leaks Attacks Discovered

• BitMart hacked in “large-scale security breach”

• Romance Fraudster Targeted 670 Women Online

• Nine State Department Phones Hijacked by Spyware

• A week in security (Nov 29 – Dec 5)

• Starlink Plans Services In India As SpaceX Breaks Launch Record

• NSO Spyware ‘Used To Hack US Diplomats’

• Hackers Steal $200 Million Worth of Cryptocurrency Tokens from BitMart Exchange

• Meta Expands Facebook Protect Program to Protect People Targeted by Malicious Hackers

• Hackers Steal $200 Million Worth of Cryptocurrency Tokens from Bitmart Exchange

• Uber To Pay $9m Settlement Over Safety Reporting Failure

• Musk Tesla Share Sale Surpasses $10bn

• 10th Anniversary Avast Mobile Security | Avast

• 14 New XS-Leaks (Cross-Site Leaks) Attacks Affect All Modern Web Browsers

• Hackers are sending receipts with anti-work messages to businesses’ printers

• Trying to register your antivirus in Windows Security Center?

• Didi Global To Delist From New York Stock Exchange

• Ahuja tees up 2022 plans for OPM

• Magnat malvertising campaigns spreads malicious Chrome extensions, backdoors and info stealers

• Making robotics security a top priority

• 2022 and the threat landscape: The top 5 future cybersecurity challenges

• Fraudulent e-commerce transactions spiked between Thanksgiving and Cyber Monday

• Cybercrime supply chain: Fueling the rise in ransomware

• ASIC says financial market cyber resiliency remained steady but fell short of target

• How proactive are companies when managing data?

• CISSPs from Around the Globe: An Interview with Chinyelu Philomena Karibi-Whyte

• US orders for cybersecurity breach reports from railroads and airlines

• Google AI research resisting lady sets up new AI Institute

• Increased connectivity: What’s in store for 2022?

• The New “Attack Surface” – Securing the Business Beyond Conventional Boundaries

• Quantum computing market to reach $8.6 billion in 2027

• Didi to leave Wall St listing for Hong Kong Stock Exchange

• Waterfall Security Solutions and NanoLock Security to deliver OT security

• No surprise: NSW iVote fails during local council elections

• AWS Cloud WAN automates network management and security tasks in one location

• Privitar NOVLT protects sensitive data using a format preserving encryption algorithm

• Australia commences work on electronic surveillance law reforms

• Gravatar – 113,990,759 breached accounts

• Hackers take $196 million from crypto exchange Bitmart, security firm says

• IT Security News Weekly Summary – Week 48

• IT Security News Daily Summary 2021-12-05

• Report: Phishing campaign is actively targeting U.S. military families

• BitMart Exchange hacked as hackers steal $150 million

• First Apple Mixed Reality Headset Rumored to Focus on Gaming, Media, and Communication

• The Historian’s Approach to Understanding Terrorism

• iPad Pro With Wireless Charging, iPad Air 5, and iPad 10 Reported to Debut in 2022

• Apple Planning Five New Macs for 2022, Including Entry-Level MacBook Pro Refresh

Generated on 2021-12-12 23:59:23.387338