IT Security News Weekly Summary – Week 50

• IT Security News Daily Summary 2021-12-19

• Grim Finance hacked – $30 million worth of tokens stolen

• Ransomware Persists Even as High-Profile Attacks Have Slowed

• Clop ransomware gang is leaking confidential data from the UK police

• Overcoming 5 Challenges to Shifting AppSec Left

• CVE-2021-44228: Log4j2 Exploitability and Attack Path Mitigation

• Blurry Ideologies and Strange Coalitions: The Evolving Landscape of Domestic Extremism

• Finding a way out of the dead-end cyber wars

• Security Affairs newsletter Round 345

• TellYouThePass ransomware resurges and exploits Log4Shell in recent attacks

• Facebook Crowned ‘Worst Company of 2021’ by New Survey

• Facebook Crowned ‘Worst Company of 2021’ By New Survey

• Chinese Hackers Spotted Targeting Transportation Sector

• API Security Beginner’s Guide

• Singapore holds emergency meetings with CII sectors over Log4j

• Week in review: Log4Shell updates, Kronos ransomware attack, unused identities threat

• Penetration testing

• Tunnelling For Offensive Security

• HSBC partners with IBM to improve security for transactions between banks

• Apptio collaborates with Microsoft to deliver insights and business management applications for IT

• IT Security News Daily Summary 2021-12-18

• Reasons to go looking in the Registry

• StayHackFree – Don’t Be Barry

• It’s About Time: The Unappreciated Fundamental Metric for Security

• German audio tech giant Sennheiser exposed 55GB of customers’ data

• Western Digital customers have to update their My Cloud devices to latest firmware version

• Visualize Attack Paths in Production Environments With ThreatMapper

• The Greatest Asset Becomes the Biggest Risk

• Apache releases new 2.17.0 patch for Log4j to solve denial of service vulnerability

• 2022 Trends In The Convergence Of Cyber And Physical Security

• Vital Tips & Resources to Improve Your Internet Safety

• So, Your Kids Have Left School. Do You Still Need To Worry About Their Online Safety?

• Report: IT security teams struggle to mitigate vulnerabilities

• CCSP vs. Google Cloud Certified-Professional Cloud Security Engineer: Which Shows Broader Mastery in Cloud Security?

• 5 Endpoint security tips for the holidays

• Rising volume of email fatigue opens doors for Cybercriminals

• Hardening Your Kubernetes Cluster: Guidelines (Part 2)

• Conti Ransomware Group Exploiting Log4j Vulnerability

• Apache releases the third patch to address a new Log4j flaw

• What Log4Shell teaches us about open source security

• Log4j: Everything You Need to Know>

• Buckle Up for More Log4j Madness

• Top Stories: What’s New in iOS 15.2, Universal Control Delayed, and More

• Lenovo Laptop Flaws Let Attackers Gain Admin Privileges

• New Local Attack Vector Expands the Attack Surface of Log4j Vulnerability

• US distrust of Huawei linked in part to malicious software update in 2012

• Apache Issues 3rd Patch to Fix New High-Severity Log4j Vulnerability

• 1.8 Million customers of four sports gear sites impacted by credit cards breach

• Apple’s AR/VR Headset Could Be Less Than a Year Away

• Build or Buy your own antivirus product

• Log4Shell Vulnerability Risks for OT Environments — and How You Can Better Protect Against Them

• Top Books to Prepare You for CISSP Exam

• 5 holiday Cybersecurity tips retailers need this year

• Why authorization and authentication are important to API security – and why they’re not enough

• How your business can benefit from Cybersecurity automation

• Cybersecurity in 2022, Predictions for digital ecosystem facing more challenges and sophisticated threats

• Neuberger: Change Your Passwords Now

• The State of Security in the UK: Lessons from the NCSC Report

• Apache Log4j Vulnerability

• Log4j vulnerability opened the door to the ransomware operators

• SANBlaze SBExpress-RM5 delivers latest-generation validation and compliance testing

• Best cybersecurity schools and programs

• BehavioSec announces partnership with leading enterprise technology providers

• Week in security with Tony Anscombe

• Are Endpoints at Risk for Log4Shell Attacks?

• HITRUST i1 Assessment addresses information security risks and emerging cyber threats

• Implementing and Managing Your SIEM Securely: A Checklist

• IT Security News Daily Summary 2021-12-17

• December 2021 Patch Tuesday: AppX Installer Zero-day, Multiple Critical Vulnerabilities

• Ransomware affects the entire retail supply chain this holiday season

• Log4j: Conti ransomware attacking VMware servers and TellYouThePass ransomware hits China

• Friday Squid Blogging: UK Recognizes Squid as Sentient Beings

• Spider-Man: No Way Home exploited to push phishing and malware scams

• AI in 2022: What decision you need to make in the new year

• Kronos ransomware attack impacting government employee paychecks

• 10 Best CASB Security Vendors of 2022

• How Risky Is the Log4J Vulnerability?

• Conti ransomware gang exploits Log4Shell bug in its operations

• CISA issues emergency directive to fix Log4j vulnerability

• Apple Seeds First Beta of tvOS 15.3 to Developers

• Apple Seeds First Beta of watchOS 8.4 to Developers

• Apple Seeds First Betas of iOS 15.3 and iPadOS 15.3 to Developers

• NDAA requires DOD to report on prospects for a ‘cyber academy’

• Are we prepared for quantum-based security?

• The US is making plans to replace all of its lead water pipes from coast to coast

• Enterprise cybersecurity hygiene checklist for 2022

• Meta Acts Against 7 Entities Found Spying on 50,000 Users

• How the Army is embracing telework-friendly tech

• Facebook Bans Spy-for-Hire Firms for Targeting 50K People

• Ole Miss Students Charged with Cyber-stalking

• Deals: Take $300 Off 21.5-Inch iMac and Get $10 Amazon Credit When Buying $100 Apple Gift Card

• Spider-Man Movie Release Frenzy Bites Fans with Credit-Card Harvesting

• Citizen Lab Exposes Cytrox as Vendor Behind ‘Predator’ iPhone Spyware

• Trend Micro Spots Chinese Hackers Targeting Transportation Sector

• B&K Issues Cyber-attack Notice

• Facebook Bans Surveillance-For-Hire Companies From Its Platforms

• Malicious Joker App Scores Half-Million Downloads on Google Play

• ‘Notchmeister’ Lets You Decorate the Notch on Your MacBook Pro

• New Mobile App Security GitHub Action Enables Devs To Easily Test Security

• Russian Cyberspy Groups Start Exploiting Log4Shell Vulnerability

• Executive Partnerships Are Critical for Cybersecurity Success

• As Log4j sent defenders scrambling, this startup made its threat data free

• Google unleashes security ‘fuzzer’ on Log4Shell bug in open source software

• CISA: Federal agencies must immediately mitigate Log4J vulnerabilities

• Security firm Blumira discovers major new Log4j attack vector

• Best robot toys for kids: LEGO, Raspberry Pi, and other awesome STEM gift ideas

• Serious Security: OpenSSL fixes “error conflation” bugs – how mixing up mistakes can lead to trouble

• 2022 iMac Pro Rumor List: Everything We Know Summarized

• Meta Warns 50,000 Users Targeted By Surveillance Firms

• Brand-New Log4Shell Attack Vector Threatens Local Hosts

• Timely Questions for Log4j Response Now — And for the Future

• EFF Continues Legal Fight to Release Records Showing How Law Enforcement Uses Cell-site Simulators

• Meta Warns 50,000 Users Targetted By Surveillance Firms

• Gumtree exposed users’ personal and GPS location via source code

• Why We Need To Beat ‘Breach Fatigue’ — At Work and at Home

• Tech woes and fraud top the list of unemployment system issues

• GSA preps draft solicitations for major cloud BPA

• DISA done with MilCloud 2.0

• Fed 100 nominations: Time is running out

• CISA issues emergency directive to patch Log4j flaw

• CISA orders federal agencies to mitigate Log4J vulnerabilities in emergency directive

• How password troubles could cost your online business potential sales

• PseudoManuscrypt Malware Targeted Government & ICS Systems in 2021

• VMware Releases Security Advisory

• CISA Issues ED 22-02 Directing Federal Agencies to Mitigate Apache Log4j Vulnerabilities

• Apple Bringing Native Apple Music Experience to Music App for macOS

• MacRumors Giveaway: Win a Leather City Backpack From Harber London

• Nozomi Networks and BT Team to Deliver Advanced OT and IoT Cybersecurity to Enterprises Worldwide

• Understanding the Impact of Apache Log4j Vulnerability

• CISA Issues Emergency Directive on Log4j

• Time to Reset the Idea of Zero Trust

• CISA Issues ED 22-02 Directing Federal Agencies to Mitigate Apache Log4j Vulnerabilities

• Lenovo Laptops Vulnerable to Privilege Escalation Exploit

• Netlogon. What It Is and Why It’s Important?

• Beware of Spider Man No Way Home movie Cyber Fraud

• Censorship and Sybil Attacks Threaten Tor | Avast

• Convergence Ahoy: Get Ready for Cloud-Based Ransomware

• Phorpiex Botnet Hijacked 3,000 Cryptocurrency Transactions

• Using a Sanctions Framework to Fix the ICTS Executive Order

• Meta Expands Facebook Bug Bounty To Include Scraping Bugs

• RAF shoots down ‘terrorist drone’ over US-owned special ops base in Syria

• VMware fixes critical SSRF flaw in Workspace ONE UEM Console

• Deals: Apple TV HD With New Siri Remote Drops to Record Low Price of $124.98 ($24 Off)

• iOS 15.3 Beta Leaks With Only Minor Changes as Apple Prepares for More Feature-Packed Updates in the Spring

• Software Patching Statistics: Common Practices and Vulnerabilities [Updated 2021]

• Is Data Security Worthless if the Data Life Cycle Lacks Clarity?

• Using Intelligence to Defend Two of the World’s Largest Cities

• 5 Common Ransomware ATT&CK Techniques

• Anubis malware resurfaces targeting crypto wallets and banking apps

• It’s Not Too Soon to Start Talking About 6G

• VMware Patches Critical Flaw in Workspace ONE UEM Console

• Facebook Bans 7 ‘Cyber Mercenary’ Companies for Spying on 50,000 Users

• Conti Gang Suspected of Ransomware Attack on McMenamins

• Backdoor Gives Hackers Complete Control Over Federal Agency Network

• Facebook Exposes Mercenary Spy Firms That Targeted 50,000 People

• DHS Moves To Make Bug Bounties A Permanent Fixture

• Sainbury’s Payroll Hit By Kronos Attack

• How COVID-19 made the Zero Trust model the right approach to modernise networks

• Phorpiex Botnet Is Becoming Harder to Disrupt

• Log4j: Major IT vendors rush out fixes for this flaw and more ahead of Christmas

• Android malware warning: Over 500,000 users have been infected after downloading this app from Google Play

• Google unleashes security ‘fuzzer’ on Log4Shell bug in open-source software

• How to Respond to Apache Log4j using Cisco Secure Analytics

• Virginia Museum Shuts Down Website Amid IT Breach

• Hive Ransomware Wreaked Havoc in Four Months: Hundreds of Organizations Breached

• China Orders Microsoft Bing To Suspend Auto-suggest Function

• Hackers Using Weaponized IIS Module to Stealing Credentials & Enabling RCE

• MobileIron Users Targeted in Log4Shell Attacks as Exploit Activity Surges

• Spider-Man Fans Warned About Scams Leveraging New Movie

• Meta says 50,000 Facebook users may have been spied on by private surveillance firms

• The Other Type of Shadow IT

• Staging a Quack: Reverse Analyzing a Fileless QAKBOT Stager

• Oracle In Talks To Acquire Cerner – Report

• Encrypt your emails from end to end for a lifetime with this software

• Cybersecurity: Go from novice to expert with this course bundle

• Sophisticated Noberus Ransomware First to Be Coded in Rust

• Phorpiex botnet is back, in 2021 it $500K worth of crypto assets

• Monero Miners Injected in Log4j Through RMI

• Spyware Find Highlights Depth of Hacker-for-Hire Industry

• London Classified Ads Site Gumtree Experiences Data Breach Due to F12 Key

• STRIDE Threat Modeling: What You Need to Know

• Self-driving shuttle program planned for NJ city

• NOAA mapping tool projects county-level climate risks

• The best way to protect personal biomedical data from hackers could be to treat the problem like a game

• Michigan posts statewide dashboard for COVID-19 wastewater monitoring

• How the bipartisan infrastructure bill could jumpstart mobility on demand

• This company was hit with ransomware, but didn’t have to pay up. Here’s how they did it

• Has Your Email Been Hacked? Part-1

• CISA: Prepare Now for Holiday Cyber Onslaught

• How to Prevent Customer Support Help Desk Fraud Using VPN and Other Tools

• New PseudoManuscrypt Malware Infected Over 35,000 Computers in 2021

• Feral’s ‘Alien: Isolation’ for iPhone and iPad ‘One of the Best iOS Conversions Ever’

• Attacks on UK Firms Increase Five-Fold During Pandemic

• Weekly Update 274

• Mobile App Developers Keep Fraudulent Traffic at Bay with Anti-Fraud API

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• PseudoManuscrypt, a mysterious massive cyber espionage campaign

• New Phorpiex Botnet Variant Steals Half a Million Dollars in Cryptocurrency

• New infosec products of the week: December 17, 2021

• Australia and United States enter a Data Sharing CLOUD Agreement

• Credential stuffing cyber attacks to double up in UK during Christmas

• 5 Things We’ve Learned About CVE-2021-44228

• NSW government casual recruiter suffers ransomware hit

• Want to assemble a cyber Dream Team? Look back at the ‘92 Olympics

• WLAN security: Best practices for wireless network security

• Digital IDs don’t have to impinge on civil liberties and privacy

• Immudb: Open-source database, built on a zero trust model

• Why is a well thought-out approach to cloud migration imperative?

• ISG Presents 2021 ISG Star of Excellence Awards to Hexaware, Infosys and Rackspace Technology

• Acuity International Celebrates the Holiday Season with $10,000 Donation to Toys for Tots

• (ISC)² Cybersecurity Scholarship Opportunities – Open Now!

• Bringing Cybersecurity to the Board (and Vice Versa)

• Global outbreak of Log4Shell

• Top 10 Cyber Attack in Great Britain

• Ransom DDoS Enters its Fourth Wave

• European UCaaS market to gain momentum in 2022

• The “Office of the CISO”: A New Structure for Cybersecurity Governance

• SAIC Rugged Apps delivers secure commercial applications to government users

• ForgeRock announces two features to serve all identity types from one platform

• ShiftLeft’s features identify attackable JavaScript and TypeScript vulnerabilities

• HUB Security Docker Digital Twin authenticates and verifies incoming Docker traffic

• Fugue Organization Management streamlines security oversight for large cloud operations

• Finite State’s enhanced search capability enables users to gain full visibility into their IoT devices

• Extreme Trusted Delivery protects critical network infrastructure

• Over Log4j? VMware has another critical flaw for you to patch

• Facebook locks out 1,500 fake accounts used by cyber-spy firms to snoop on people, alerts 50k potential targets

• With Log4j vulnerability, the full impact has yet to come

• US Senate passes Bill to ban goods produced from Uyghur forced labour

• ioSafe 1520+ NAS device offers disaster recovery capabilities for businesses

• Verifyle partners with NYSIA to protect members from the growing threat of hackers

• Endace collaborates with LinkShadow to enhance SOC team productivity and reduce threat exposure

• MSP360 adds Wasabi Object Lock to help MSPs protect cloud-based backups

• Meta removes accounts of spyware company Cytrox after Citizen Lab report on gov’t hacks

• MobileIron customers urged to patch systems due to potential Log4j exploitation

• Anomali appoints Justin Coker as VP and General Manager for EMEA

• Noname Security raises $135M to help customers mitigate the risk of deploying APIs

• Ermetic raises $70M to scale sales and marketing operations

• Cequence Security raises $60M to enhance its API security solutions

• Wipro acquires LeanSwift Solutions to expand its cloud transformation business

• Why Log4j Mitigation Is Fraught With Challenges

• Telstra expands its network infrastructure in the United States

• Honeywell opens security operations center in Europe, based in Romania

• DXC Technology names Kristie Grinnell as SVP and CIO

• 2021-12-16 – Hancitor infection with Cobalt Strike

• NSA and CISA Release Final Part IV of Guidance on Securing 5G Cloud Infrastructures

• IT Security News Daily Summary 2021-12-16

• Log4Shell (Log4j RCE): Detecting Post-Exploitation Evidence is Best Chance for Mitigation

• Firefox: Ad blockers are 2021’s most popular browser extensions

• NSA and CISA Release Final Part IV of Guidance on Securing 5G Cloud Infrastructures

• Gathering security data for container images using the Pyxis API

• MacBook Pro Owners Noticing Smoother ProMotion Safari Scrolling After Installing macOS Monterey 12.2

• Improving OSS-Fuzz and Jazzer to catch Log4Shell

• EFF to Court: Deny Foreign Sovereign Immunity to DarkMatter for Hacking Journalist

• LogMeIn To Spin Off LassPass As Separate Cloud Security Firm

• Phorpiex Botnet Variant Spread Across 96 Countries

• Anubis Android Malware Found Targeting Nearly 400 Financial Apps

• EU’s Digital Identity Framework Endangers Browser Security

• CISA director says the LOG4J security flaw is the “most serious” she’s seen in her career

• CISA adds Log4Shell Log4j flaw to the Known Exploited Vulnerabilities Catalog

• December 2021: Cyber Deception Month Continues…Halting Holiday Hackers…

• December 2021: Cyber Deception Month Continues…Today’s Cyber Deception Tools Are Straight Out of Science Fiction

• Crooks injects e-skimmers in random WordPress plugins of e-stores

• Turn your basic networking and coding skills into in-demand cybersecurity qualifications

• New Jersey Cancer Care Providers Settle Data Breach Claim

• Meta Ousts 7 Surveillance-for-Hire Operations From Its Platforms

• The Next Wave of Log4J Attacks Will Be Brutal

• Meta Targets ‘Cyber Mercenaries’ Using Facebook to Spy

• LOG4J vulnerability the most serious I’ve seen in my decades-long career, says CISA director

• Russia Fines Meta, Twitter and TikTok Over ‘Banned Content’

• Zero Trust and DNS Security: Better Together

• US and Australia Enter CLOUD Act Agreement

• ‘Tropic Trooper’ Reemerges to Target Transportation Outfits

• Flaws in Lenovo laptops allow escalating to admin privileges

• Apple Building Chip Team to Bring More Wireless Component Production In-House

• Privacy, Identity, and Device Protection: Why You Need to Invest in All Three

• ‘PseudoManuscrypt’ Mass Spyware Campaign Targets 35K Systems

• How organizations should prioritize security vulnerabilities

• Google Says NSO Pegasus Zero-Click ‘Most Technically Sophisticated Exploit Ever Seen’

• MSP to MSSP: Mature your security stack

• Ransomware, Trojans, DDoS Malware and Crypto-Miners Delivered in Log4Shell Attacks

• NSO zero-click iMessage exploit hacks iPhone without need to click links

• CISA, White House urge organizations to get ready for holiday cyberattacks

• 6 life-changing tech habits you need in 2022

• France Orders Clearview AI to Delete Data

• Apple Seeds First Beta of macOS Monterey 12.2 to Developers

• Cyber Command Is in the Ransomware Game—Now What?

• Microsoft Launch Vulnerable And Malicious Driver Reporting Center

• Hillrom Addressed A Zero-Day Vulnerability Affecting Its Cardiac Devices

• New Phishing Campaign Targets German Banks Via QR Codes

• Microsoft December Patch Tuesday Out With 67 Bug Fixes Including A Zero-Day Patch

• Microsoft Teams End-to-End Encryption Now ‘Generally Available’

• Why ransomware attacks happen out of hours or during the holidays

• S3 Ep63: Log4Shell (what else?) and Apple kernel bugs [Podcast+Transcript]

• NY Man Pleads Guilty in $20 Million SIM Swap Theft

• 60% of UK Workers Have Been Victim of a Cyber-Attack, Yet Awareness Remains Low

• Log4Shell: The Big Picture

• Corellium Lands $25 Million Investment for Virtualization Tech

• How developers scrambled to secure the Log4j vulnerability

• Beware of a New Amazon Token Crypto Scam

• 2022 Predictions | Avast

• Thousands of Industrial Systems Targeted With New ‘PseudoManuscrypt’ Spyware

• Pixelmator Photo Now Available on iPhone

• Review: Woolnut’s Leather Case for AirPods Max is a Suitable, But Not Perfect All-In-One Travel Solution

• log4j-jndi-be-gone: A simple mitigation for CVE-2021-44228

• East Londoners nicked under Computer Misuse Act after NHS vaccine passport app sprouted clump of fake entries

• Grindr fined £5.5m for selling user data to advertising companies

• VT Collections Swiss army knife

• Apple Delays Staff Return To Offices Indefinitely

• Apache Kafka in the Public Sector – Part 5: National Security and Defense

• Brazil investigates use of staff credentials in cyberattacks against government bodies

• How to install the ConfigServer and Security Firewall combo on Ubuntu Server

• Online Shoppers Could Face Eight Million Credential Stuffing Attacks Per Day Over Christmas

• More Log4j News

• Panda Security: top rated in AV-Comparatives performance test

• Another Apache Log4j Bug Discovered – Patch Released – Update (Once Again!)

• Automate Your Cloud Operations With Humio and Fylamynt

• stealth virus

• Iran-Linked APT Abuses Slack in Attacks on Asian Airline

• Upskilling Cyber Defenders Requires a Readiness Environment

• Top 4 cloud misconfigurations and best practices to avoid them

• This is the 1 Thing Every Security Team Needs Before 2022

• Deals: Year’s Best Prices Hit AirPods 2 ($90) and AirPods 3 ($140), But Will Arrive After Christmas

• SiriusXM Platinum VIP Tier Now Includes 12 Months of Free Apple Music

• India’s $10 Billion Plan To Attract Chip Makers

• SecurityWeek Announces Virtual Cybersecurity Event Schedule for 2022

• Dear Congress: It’s Complicated. Please Consider This When Crafting New Cybersecurity Legislation

• Russia Proposes Holding Security Talks With EU-TASS

• DarkWatchman RAT Shows Evolution In Fileless Malware

• Log4shell: US Demands Christmas Eve Deadline For Hack Fix

• Documents Link Huawei To Uyghur Surveillance Projects

• The Log4j Vulnerability Is Now Used by State-Backed Hackers

• Homeland Security Offering $5,000 Bug Bounty to Hack DHS

• Botnet steals half a million dollars in cryptocurrency from victims

• While attackers begin exploiting a second Log4j flaw, a third one emerges

• Apple Rumored to Launch Lower-Priced 24-Inch and 27-Inch External Displays: What to Expect

• The Collapsed Bridge Loan: Israel’s Shin Bet Location Tracking of Omicron Carriers

• The Chatter Podcast: From National Security Blogger to Editor of Rolling Stone with Noah Shachtman

• Report: 74% of orgs struggle to achieve true observability

• Log4j flaw: This new threat is going to affect cybersecurity for a long time

• ‘DarkWatchman’ RAT Shows Evolution in Fileless Malware

• CISA Calls for Improved Critical Infrastructure Security

• What Retailers Should Know About Cybersecurity This Holiday Season

• North American Propane Distributor ‘Superior Plus’ Discloses Ransomware Attack

• Researchers Uncover New Coexistence Attacks On Wi-Fi and Bluetooth Chips

• Security awareness gaps identified in the UK according to new Armis study

• State-sponsored Threat Actors Steal Airline Data Using the Slack API

• Comprehensive Phishing Study Shows Who Is More Prone to Fall Victim to Phishing Attacks

• The Cybersecurity Role as a Business Partner

• Importance Of Medical Alert Devices In 2021

• Ory lands $22.5M for zero trust security powered by open source

• The DHS is inviting hackers to break into its systems, but there are rules of engagement

• The Guide to Automating Security Training for Lean Security Teams

• Senate Passes NDAA Without Key Cyber Provisions

• Grindr fined for selling user data to advertisers

• Algorithms are everywhere – what should you know about them?

• Reddit Files To Go Public With US Regulator

• Threat Groups Reportedly Working on Log4Shell Worm

• Multiple Nation-State actors are exploiting Log4Shell flaw

• WhiteSource Log4j Detect scans projects to find vulnerable Log4j versions

• Cobalt Strike Is Being Installed by Emotet for Faster Attacks

• 1-15 November 2021 Cyber Attacks Timeline

• Variant of Phorpiex botnet used for cryptocurrency attacks in Ethopia, Nigeria, India and more

• Suspected Iranian hackers target airline with new backdoor

• Google: This zero-click iPhone attack was incredible and terrifying

• Iran-Linked Hackers Attack Israeli Targets: Company

• Cyber-attack On Superior Plus Gas Distributor

• Industry Reaction To Government’s National Cyber Strategy

• Noname Security Raises $135 Million at ‘Unicorn’ Valuation

• All Change at the Top as New Ransomware Groups Emerge

• After Log4j, December’s Patch Tuesday has snuck up on us

• Phorpiex botnet is back with a new Twizt: Hijacking Hundreds of crypto transactions

• Regulator: Venues Must Protect User Privacy During #COVID19 Checks

• PseudoManuscrypt: a mass-scale spyware attack campaign

• Does the Log4j Vulnerability Affect You? – Intego Mac Podcast Episode 218

• Experts: All Breach Victims Should Freeze Credit

• New Fileless Malware Uses Windows Registry as Storage to Evade Detection

• Digital Security by Design reinforced through new Government National Cyber Strategy

• New Scam Emails Purport to Come from NSO Group Hacker – Intego Mac Podcast Episode 218

• Apple releases macOS 12.1, iOS 15.2, watchOS 8.3 and more

• Germanys National Cybersecurity Agency declares red alert: Wave of attacks possibly imminent due to Log4Shell vulnerability

• Move fast, break security: Why CISOs must push back against Agile IT

• Do you know what your supply chain is and if it is secure?

• Rise in API-Based Attacks Underscore Investments in New Tools

• When is a Scrape a Breach?

• National Cyber Strategy will lead to BritChip for mobile devices by 2025, claims UK.gov

• Owowa, a malicious IIS Server module used to steal Microsoft Exchange credentials

• The impact of the Log4j vulnerability on OT networks

• Victims awarded $18 million in GirlsDoPorn online video case, boss on the run

• How to implement security into software design from the get-go

• Japan draws a LINE: web giants must reveal where they store user data

• Hackers Begin Exploiting Second Log4j Vulnerability as a Third Flaw Emerges

• Europe’s quantum communication plans: Defending against state-sponsored cyber attacks

• When done right, network segmentation brings rewards

• Ransomware Attack halts Christmas 2021 paychecks and bonuses

• Now a Digital blue print to protect UK from Cyber Threats

• Online shopping at risk: Mobile application and API cyber attacks at critical high

• Microsoft confirms new ransomware family deployed via Log4j vulnerability

• Digital ID age verification trials for online alcohol purchases in Australia underway

• ERI’s John Shegerian Calls Morgan Stanley Data Breach Settlement a ‘Cautionary Tale’ About Responsible Data Destruction

• (ISC)² Ransomware Study: Collaboration and Communication are Essential for Ransomware Readiness

• What is Relevant Work Experience for CISSP?

• Predict Cyber-attacks via digital twins

• DMARC and the prevention of World Health Organization phishing scams

• FBI Recovers Oregonians’ Stolen Data

• Virginia Reeling from Ransomware

• Security priorities are geared toward ongoing remote and hybrid work

• Hackers Exploiting Log4j2 Vulnerability in The Wild To Deploy Ransomware

• OAIC determines AFP interfered with privacy of Australians after using Clearview AI

• Cybersecurity Standards, Ransomware, and Zero Trust: 3 Key Considerations for the UK Government

• Adoption of private 5G networks accelerates, as organizations look to improve security and speed

• MobileSphere SLYGuard secures communications on popular messaging applications

• MetricStream’s software release measures cyber risk in monetary terms

• Syxsense Secure protects businesses against the Log4j vulnerability

• MicroAI Security offers asset protection from cyber security intrusions

• Stratodesk NoTouch LTS helps IT teams ensure their VDI/DaaS deployment

• Cobalt Iron Compass EOS allows users to search the entire enterprise backup landscape

• Home Affairs releases second Critical Infrastructure Bill with leftover obligations

• Checkmarx KICS integrates into GitLab 14.5 to manage IaC vulnerabilities

• Teradata releases integrations for Dataiku to speed data and AI initiatives

• Facebook expands bug bounty program to include scraping attacks, two years after it was scraped – hard

• US Senate passes $768 billion defense bill without cyber incident reporting provisions

• Addressing Log4j2 Vulnerabilities: How Tripwire Can Help

• Lightbits Labs partners with Define Tech to accelerate cloud-native deployments

• Elliptic Labs collaborates with Intel to deliver platform for PC and IoT manufacturers

• NICE Actimize partners with Sparkling Logic to offer financial crime management strategies

• Theta Lake introduces free archiving capability for Zoom customers

• NetWitness partners with Datashield to protect customers from Log4j Java security vulnerability

• Lightview Capital invests in CyberSheath to protect the federal government supply chain

• Unisys acquires CompuGain to expand cloud and infrastructure capabilities

• Workiva acquires AuditNet to empower internal auditors with more technology and resources

• Kroll acquires Security Compass Advisory to enhance its managed security solutions portfolio

• ITC Secure and Cassava Technologies bring cloud security solutions to the African market

• How CrowdStrike Protects Customers from Threats Delivered via Log4Shell

• Cybersecurity experts debate concern over potential Log4j worm

• US and Australia enter CLOUD Act agreement for cross-border access to electronic evidence

• The dirty dozen of Latin America: From Amavaldo to Zumanek

• What every business leader needs to know about Log4Shell

• Companies Must Assess Threats to AI & ML Systems in 2022: Microsoft

• Original Fix for Log4j Flaw Fails to Fully Protect Against DoS Attacks, Data Theft

• ThreatX appoints Tom Axbey to Board of Directors

• Karen Buffo joins Anomali as CMO

• Druva hires Yogesh Badwe as CSO

• Appaegis raises $7.7M to deliver data-centric zero trust by federating identity and authorization

• As CISA tells US govt agencies to squash Log4j bug by Dec 24, fingers start pointing at China, Iran, others

• Relentless Log4j Attacks Include State Actors, Possible Worm

• Apple Shares ‘Ted Lasso’ Animated Christmas Short

• Build successful data security evaluation criteria with help from your peers

• Drata announces automated HIPAA compliance to safeguard protected health information

• Datadobi appoints Charlie Collins as Americas Channel Sales Director

• Moran Goldboim joins Codefresh as VP of Product

• IT Security News Daily Summary 2021-12-15

• How government can use better outreach to aid constituents

• AirPods Max 2: Everything We Know One Year After the High-End Headphones Launched

• Apple Delays Corporate Return to Offices Indefinitely

• Microsoft Spots Multiple Nation-State APTs Exploiting Log4j Flaw

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• Why NSA has to rebid its $10 billion top-secret cloud buy

• After theft of $77.7 million, victim AscendEX to reimburse customers

• Initial access brokers: How are IABs related to the rise in ransomware attacks?

• Investors Bet Big on Cloud Security Startups Ermetic, Dazz

• Dept. of Homeland Security Launches ‘Hack DHS’ Program

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• What SMBs can do to protect against Log4Shell attacks

• How to Set Yourself Up for Real XDR Success

• Senate passes 2022 defense authorization bill

• Self-driving shuttle program planned for Trenton

• US, Australia Agree to Share Phone, Text Records in Criminal Probes

• Nation-state threat groups are exploiting Log4Shell

• Report: Facebook Could Struggle To Stop Harassment On Its Virtual Reality Platforms

• US lawmakers want to put NSO Group, 3 other spyware makers out of business with fresh severe sanctions

• Log4j: How to protect yourself from this security vulnerability

• Analysis: Log4j Vulnerability Highlights the Value of Defense-in-Depth, Accurate Inventory

• FBI’s investigation accidentally revealed the HelloKitty ransomware gang operates out of Ukraine

• The iPhone 14 in a Nutshell: All the Rumors Summarized

• Cyber attack would be most significant financial stability risk, says Fed chair Powell

• Amazon Web Services Suffers Another Outage

• Malicious Exchange Server Module Hoovers Up Outlook Credentials

• The importance of automated certificate management

• Kroll Acquires Security Compass Advisory

• Cybereason Announces Availability of AI-Driven Cybereason XDR and EDR on Google Cloud Marketplace

• VirusTotal += Vir.IT

• SAP Kicks Log4Shell Vulnerability Out of 20 Apps

• DHS Launches Bug Bounty Program

• LG Possibly Developing Three New Apple Displays, Including Pro Display XDR With Apple Silicon Chip

• Checklist for Thinking About Cybersecurity in Connected Vehicles

• API Security Firm Cequence Raises $60 Million

• ‘Insane’ spread of Log4j exploits won’t abate anytime soon

• Apple’s Android App to Scan for AirTags is a Necessary Step Forward, But More Anti-Stalking Mitigations Are Needed

• Google Warns That NSO Hacking Is On Par With Elite Spy Groups

• Apple Fitness+ Turns One Year Old

• Apple Releases Swift Playgrounds 4 With Support for Creating Apps on iPad

• The Strategic Intelligence Value of Ransomware

• Data privacy and consent engagement platform provider raises $5M

• Ransomware in 2022: We’re all screwed

• New “Hack DHS” program will pay up to $5,000 for discovered vulnerabilities

• Meta targets user information, database scraping in bug bounty expansion

• Nation-State Attackers, Ransomware Groups Take Aim at Apache Log4j Flaw

• What Are the Pros and Cons of a SASE Architecture?

• Privacy and Safety Issues With Facebook’s New ‘Metaventure’

• Google Warns That NSO Hacking Rivals Elite Nation State Spies

• Government Unveils National Cyber Strategy To Protect UK Plc

• The final report on NOBELIUM’s unprecedented nation-state attack

• Facebook to Pay Hackers for Reporting Data Scraping Bugs and Scraped Datasets

• Google Staff Refusing Vaccine Will Be Fired

• Microsoft: Ransomware ‘access brokers’ now exploiting Log4j vulnerability

• Just in time for Christmas, Kronos payroll and HR cloud software goes offline due to ransomware

• Kodachi is the operating system for those who value privacy but don’t want to learn Linux

• Blender Begins Testing Metal GPU Rendering on M1 Macs

• Disney+ Gains SharePlay Support for Watching With Friends on FaceTime Calls

• Deals: Apple’s 256GB 27-Inch iMac Discounted to Year’s Best Price of $1,399.99 ($399 Off)

• AirPods Max Launched One Year Ago Today

• Here Are All the Apple Deals You Can Still Take Advantage of in Time for Christmas

• Another US Oil and Gas Company suffers from Ransomware Attack

• Irani and Chinese State Hackers Exploiting Log4j Vulnerability

• Quizzes and Other Identity Theft Schemes to Avoid on Social Media

• Atmosec raises $6M to fight SaaS security threats

• Why Cloud Storage Isn’t Immune to Ransomware

• Why We Need “Developer-First” Application Security

• Relevant and Extended Detection with SecureX, Part Two: Endpoint Detections

• Microsoft December 2021 Patch Tuesday fixes an actively exploited zero-day

• The Palo Alto Networks Full-Court Defense for Apache Log4j

• New PS4 Exploit Points To Similar PS5 Hacks To Come

• MS Warns State Based Hackers Are Using Log4j Flaw

• Grindr Fine Cut To $7 Million In Norway Data Privacy Case

• Oregon Medical Group Notifies 750,000 Patients Of Data Breach

• Pen Test Partners: Anyone could view Gumtree users’ GPS location by pressing F12

• Industry Reactions to Log4Shell Vulnerability

• U.S. Government Launches ‘Hack DHS’ Bug Bounty Program

• UK’s New Cyber Strategy Designed to Boost Position as “Global Cyber Power”

• Grindr Fined €6.5m for Selling User Data Without Explicit Consent

• Immediate Steps to Strengthen Critical Infrastructure against Potential Cyberattacks

• Cynet’s MDR Offers Organizations Continuous Security Oversight

• Patch Tuesday December 2021 – Microsoft Fixes 67 Flaws, Including 6 Zero-Day Vulnerabilities

• A List of Vulnerable Products to the Log4j Vulnerability

• Anubis Android Malware Is Back and It Is Focusing on Financial Institutions

• Espionage Hacking Campaign Is Targeting Telecom Operators

• Apache’s Fix for Log4Shell Can Lead to DoS Attacks

• Railway Cybersecurity Firm Cylus Raises $30 Million

• Immediate Steps to Strengthen Critical Infrastructure against Potential Cyberattacks

• What Does the Defense Department Inspector General Report About Jan. 6 Actually Say?

• Starting From Scratch: How to Build a Small Business Cybersecurity Program

• Ermetic raises $70M for ‘identity-first’ cloud security

• Cequence Security lands $60M for ML-powered API protection

• Noname Security gets $135M to ‘proactively’ lock down APIs

• Kryptowire Collaborates With Orange and Finds Vulnerabilities in Mobile Devices

• Bank Of England Issues Fresh Cryptocurrency Warning

• SAP Patches Log4Shell Vulnerability in 20 Applications

• Apple TV Just Got More Screen Savers, Here’s How to Get Them on Your Mac

• Cloud Security Complements Data Privacy

• Accelerate Troubleshooting, Forensics and Response With Fast and Efficient Search

• CrowdStrike Falcon Detects 100% of Attacks in New SE Labs EDR Test, Winning Highest Rating

• CrowdStrike Falcon Awarded AV-Comparatives Approved Business Security Product for the Second Time in 2021

• Sysdig Raises $350 Million at $2.5 Billion Valuation

• Recent Ransomware Trends Reinforce the Need for Cyber Hygiene, Collaboration

• Volatile and Adaptable: Tracking the Movements of Modern Ransomware

• NSO Considers Sale Or Shutdown Of Pegasus Unit – Report

• UK’s New Cyber Strategy Designed to Boost Position as ‘Global Cyber Power’

• The Biggest Deepfake Abuse Site Is Growing in Disturbing Ways

• Hackers Using Malicious IIS Server Module to Steal Microsoft Exchange Credentials

• Iran-linked Seedworm APT targets Telecoms organizations across the Middle East and Asia

• IIS Extensible Web Server Used to Steal Microsoft Exchange Credentials

• Why Payroll Is The Next Company Security Battleground?

• Problematic Log4j Functionality Disabled as More Security Issues Come to Light

• Log4Shell Tools and Resources for Defenders

• Log4Shell: A new fix, details of active attacks, and risk mitigation recommendations

• New Ransomware Family Deployed in Log4Shell Attacks

• Nation State Threat Group Targets Airline with Aclip Backdoor

• Log4j flaw: Now state-backed hackers are using bug as part of attacks, warns Microsoft

• Looking Ahead: Tech Predictions for 2022

• Apple Releases ‘Tracker Detect’ For Android AirTag Detection

• Securing the Kubernetes software supply chain

• Sysdig lands $350M for ‘end-to-end’ cloud and container security

• Log4j vulnerability: Why your hot take on it is wrong

• Government Experts in Last Minute Seasonal Scam Warning

• Web App Attacks Surge 251% in Two Years

• Product showcase: Is Crystal Eye XDR the most comprehensive security platform on the market?

• Log4j Looms Large Over Patch Tuesday

• Kaspersky Security Bulletin 2021. Statistics

• Kaspersky Managed Detection and Response: interesting cases

• Apple Removes All References to Controversial CSAM Scanning Feature From Its Child Safety Webpage

• iOS 15.2 Makes It Easier to Reset Your Locked Device Without Needing a Computer

• Web Browsing Security Firm Guardio Raises $47 Million

• Opening Of Email Attachment Led To HSE Cyber Attack, Report Finds

• Cyber-Attack on Financial Apps

• Singapore-South Korea digital economy deal to sync up on data, payments

• Build your own Android security product

• DHS announces its ‘Hack DHS’ bug bounty program

• Microsoft Issues Windows Update to Patch 0-Day Used to Spread Emotet Malware

• Leveraging AIOps for a holistic view of network performance and security

• Password offenders: Who’s the naughtiest of them all?

• Meet the Karakurt hacking group that is into data exfiltration and extortion

• A $60m funding for a Cloud Security startup named DAZZ

• Passwordless verification API transforms every mobile phone into a security token for zero trust access

• Ransomware Affiliate Arrested for Selling Stolen Data of 300 Million People

• How healthcare providers handle safeguards to protect payment and PII

• Second Log4j Vulnerability (CVE-2021-45046) Discovered — New Patch Released

• Why are data professionals investing in data governance programs?

• HR Management Firm Kronos Needs Weeks to Recover From Ransomware Attack

• Foundational cloud security with CIS Benchmarks

• Anomali Appoints Cybersecurity Industry Veteran Karen Buffo as Chief Marketing Officer

• Arcfield Appoints Kevin Kelly as Chairman and CEO, Announces New Company Name

• Open Source Tamper-Proof Database immudb Now Capable of Serving as Main Transactional Database

• ERI Releases ESG & Data Security Report

• Australia to establish youth advisory council for countering online child exploitation

• The cyber risk future doesn’t look good, but organizations are ready

• Mitigating Industrial Production Risk with Tripwire

• Cohesity Security Advisor uncovers cyber exposures and blind spots in customer environments

• PingOne Authorize delivers enhanced authorization capabilities for enterprises

• Microsoft closes installer hole abused by Emotet malware, Google splats Chrome bug exploited in the wild

• EXPLAINER: The Security Flaw That’s Freaked Out the Internet

• NETSCOUT UCaaS capabilities optimize WFH/hybrid workforce models

• SynSaber announces closed beta of palm-sized threat sensors for industrial asset security

• Tufin Security Policy Builder App automates corporate security access policies

• Pondurance Cyber Risk Assessments analyze and visualize potential cybersecurity gaps

• Chinese, Iranian State Hackers Exploiting Log4j Flaw: Mandiant

• Cisco’s Ash Devata on Securing the Hybrid Workforce With Zero Trust

• Bitwarden releases free families program for enterprise customers

• Oregon medical group notifies 750,000 patients of breach, says FBI seized accounts from HelloKitty ransomware

• ANNKE adds human and vehicle detection to its C800 security camera series

• Report: 83% of IT professionals can’t guarantee infrastructure is safe from ex-employees

• FCW Insider: December 15, 2021

• Adobe Releases Security Updates for Multiple Products

• Orion Corporation selects Infosys to transform its ERP and planning platforms

• IBM partners with Samsung to deliver vertical transistor architecture for the semiconductor industry

• LexisNexis Risk Solutions and Shift Technology bring new tool for automating claims processing

• Veritone collaborates with Snowflake to provide AI-powered data cloud for enterprises

• In 2022, Expect More Supply Chain Pain and Changing Security Roles

• Adobe Releases Security Updates for Multiple Products

• FileCloud raises $30M to accelerate innovation and global market expansion

• ClosingLock acquires SafeWire to combat fraud in real estate transactions

• Silver Lake invests €344M in Software AG to accelerate the company’s growth

• ActZero partners with Measured Analytics and Insurance to detect all types of cybersecurity threats

• Apache takes off, nukes insecure feature at the heart of Log4j from orbit with v2.16

• CISA orders federal civilian agencies to patch Log4j vulnerability and 12 others by December 24

• 5 warning signs your identity has been stolen

• VERT Threat Alert: December 2021 Patch Tuesday Analysis

• Attackers Target Log4J to Drop Ransomware, Web Shells, Backdoors

• Ground Labs Research Reveals 71% of American Consumers are Unaware of Data Protection Laws

• Tufin Introduces Security Policy Builder (SPB) App to Marketplace

• Knightscope appoints Patricia Watkins to Board of Directors

• QuickCode.ai raises $2M to improve efficiencies and accuracy in ML development pipelines

• JWCC is not a cloud ‘competition’

• Khonsari ransomware, Nemesis Kitten are exploiting Log4j vulnerability

• Apple iOS Update Fixes Cringey iPhone 13 Jailbreak Exploit

• Apache dusts off, nukes insecure feature at the heart of Log4j from orbit with v2.16

• How to install Qubes OS as a virtual machine

• Propane Gas Distributor Hit With Ransomware

• Apple Employees Have Donated $725 Million to Various Causes Over the Last 10 Years

• Continuing to Stay Ahead of CVE-2021-44228: Addressing Your Top Questions

• LogMeIn establishes LastPass as an independent cloud security company

• FICO appoints Matt Cox as VP and General Manager for EMEA

• Andrew Hill joins Arctic Wolf as Chief Legal Officer and General Counsel

• DHS scales up bug bounty program

• Khonsari ransomware, Iranian group Nemesis Kitten seen exploiting Log4j vulnerability

• Tool Overload & Attack Surface Expansion Plague SOCs

• Ransomware Hits Virginia Legislative Agencies

• Adobe addresses over 60 vulnerabilities in multiple products

• IT Security News Daily Summary 2021-12-14

• Log4j exploits attempted on 44% of corporate networks; ransomware payloads spotted

• Tax identity theft: How to protect your credit and finances

• Actively Exploited Microsoft Zero-Day Allows App Spoofing, Malware Delivery

• Log4Shell: Experts warn of bug’s severity, reach

• Microsoft Patch Tuesday, December 2021 Edition

• Microsoft Patches Zero-Day Spreading Emotet Malware

• MasterClass Adds Support for Apple’s FaceTime SharePlay Feature

• Have an Open Records Horror Story? Shine a Light by Nominating an Agency for The Foilies 2022

• Romanian arrested for ransomware attacks and data theft

• How to Prepare for a Personal Data Compliance Audit

• Propaganda-as-a-service may be on the horizon if large language models are abused

• New Microsoft Exchange credential stealing malware could be worse than phishing

• Dan Kaminsky Inducted into Internet Hall of Fame

• Victory! Federal Court Blocks Texas’ Unconstitutional Social Media Law

• All-New Golf GTI and Golf R Headline VW’s 2022 Lineup With Wireless CarPlay on Many Trims

• Second Log4j vulnerability discovered, patch already released

• Cyber-attack on Financial Apps

• SAP Releases December 2021 Security Updates

• Hackers exploit Log4Shell to drop Khonsari Ransomware on Windows systems

• Romanian arrested for ransomware attack and data theft

• Developing a successful government disaster recovery plan

• 400 Banks’ Customers Targeted with Anubis Trojan

• SAP Releases December 2021 Security Updates

• Adobe Adds New Smudge and Sponge Tools to Photoshop for iPad

• Microsoft patches spoofing vulnerability exploited by Emotet (CVE-2021-43890)

• Google’s Manifest V3 Still Hurts Privacy, Security, and Innovation

• Researcher Spotlight: Dr. Nestori Syynimaa’s Constant Mission Protecting Identities

• Indian PM Modi’s Twitter Account Hacked – Again

• 2021-12-14 – Pcap from web server with log4j attempts and lots of other probing/scanning

• DHS gets nearly 2,000 applications for new cyber cadre

• Get a year of PlayStation Plus, a lifetime of learning and maximum VPN protection for $64

• Tips for DFIR Analysts, pt VI

• Microsoft Releases December 2021 Security Updates

• Why Is Application Security (AppSec) Important For Business?

• A Brief Note on Log4perl

• Microsoft December 2021 Patch Tuesday: Zero-day exploited to spread Emotet malware

• Microsoft Patches 67 Security Flaws, Including Zero-Day Exploited by Emotet

• Use these 6 user authentication types to secure networks

• LastPass to Become Standalone Company

• Microsoft Releases December 2021 Security Updates

• Shielding the Nuclear Arsenal From Cyber Attacks

• Log4Shell: How It’s Being Exploited and How to Mitigate Damage

• Full Spectrum Detections for 5 Popular Web Shells: Alfa, SharPyShell, Krypton, ASPXSpy, and TWOFACE

• Apple Plans ‘Ring in the New Year’ Activity Challenge for Apple Watch Users

• Samsung S21 Series- Price, Features and More

• A deep dive into a real-life Log4j exploitation

• Microsoft is rolling out end-to-end Teams call encryption to business users

• The 10 worst password snafus of 2021

• E-commerce: How to build customer trust without sacrificing security

• Apple Patches Vulnerabilities That Earned Hackers $600,000 at Chinese Contest

• Adobe Joins Security Patch Tuesday Frenzy

• Facebook Executive Blames Users For Misinformation Problem

• TAG to Open New Global Headquarters

• Upcoming Speaking Engagements

• Apple Arcade Getting New Disney and Nickelodeon Games

• Xcode 13.2 Update Downloaded From Mac App Store Causing Errors for Developers

• Testing Apple’s New Apple Music Voice Plan in iOS 15.2

• New research reveals that one third of all log-in attempts on eCommerce sites are malicious

• Empowering the next generation of Android Application Security Researchers

• Google’s Manifest V3 still hurts privacy, security, and innovation

• You may have cracked serverless development, but it’s almost certain you haven’t solved serverless security

• Log4j flaw: Nearly half of corporate networks have been targeted by attackers trying to use this vulnerability

• Billion-dollar natural gas supplier Superior Plus hit with ransomware

• LogMeIn announces plan to spin off LastPass into its own company

• What the Log4Shell Bug Means for SMBs: Experts Weigh In

• TAG to Open Near Wall Street

• Source Code Leaks: The Real Problem Nobody Is Paying Attention To

• Government Wins Key Ruling on Issue Affecting Hundreds of Capitol Riot Cases

• Online Safety Bill Changes Urged By MPs

• 5 Ways AI Will Revolutionize Cybersecurity

• State CIOs focusing on cyber, digital services, connectivity in 2022

• Cities enlist sensors to tackle noise pollution

• How to Buy Precious Patching Time as Log4j Exploits Fly

• 4 API authentication methods to better protect data in transit

• Log4Shell Exploitation Grows as Security Firms Scramble to Contain Log4j Threat

• Securing Multicloud Environments with Cisco Secure Firewall Threat Defense on Alkira Cloud

• Nomad Launches Base Station Hub With Magnetic Alignment

• Your guide to mobile digital forensics

• 5 security lessons from 18 months of working from home

• Popular password manager LastPass to be spun out from LogMeIn

• Apple Car Details Exposed In Patent Filings – Report

• Top workforce management firm Kronos hit by ransomware attack

• How to test if your Linux server is vulnerable to Log4j

• Significant Disconnect Between SOC Leaders and Staff

• Yes – Vaccine Cold Storage Can Be Hacked

• Apple Patches Vulnerabilities That Earned Hackers $500,000 at Chinese Contest

• Google Releases Security Updates for Chrome

• Apple Releases Security Updates for Multiple Products

• Apple TV+ App Now Rolling Out to Sky Q and Sky Glass TVs

• How the iPhone 14 Pro’s Upgraded 48-Megapixel Camera is Expected to Work

• MPs charged with analysing Online Safety Bill say end-to-end encryption should be called out as ‘specific risk factor’

• Details of SANS Holiday Hack Challenge 2021

• Internet Key Exchange (IKE)

• Reposify gets $8.5M to secure customers’ internet-facing assets

• iOS 15.2’s App Privacy Report: How to turn it on, and what it all means

• Google Releases Security Updates for Chrome

• Apple Releases Security Updates for Multiple Products

• US CISA orders federal agencies to fix Log4Shell by December 24th

• On the Log4j Vulnerability

• Gathering security data for container images using the Pyxis API

• Kronos crippled by ransomware, service may be out for weeks

• Log4Shell (Log4j RCE): Detecting Post-Exploitation Evidence is Best Chance for Mitigation

• Hackers Steal $140 Million From Users Of Crypto Gaming Company

• Seedworm Attackers Target Telcos In Asia, Middle East

• The Latest On The Log4j Remote Code Execution Nightmare

• Brazilian Ministry Of Health Hit By Second Attack In Same Week

• Review: Anker’s MagGo Accessories Offer Flexible MagSafe-Compatible Charging Solutions (25% Off Today Only)

• Combat Misinformation by Getting Back to Security Basics

• Agent Tesla Spyware Used in Phishing Campaign

• Tech Industry Scrambles Over Log4j Vulnerability

• Log4Shell Tools and Resources for Defenders – Continuously Updated

• Deals: HomePod Mini on Sale for $79.99 at Target ($20 Off)

• Understanding iOS and iPadOS App Privacy Report

• Guardio nabs $47M for an AI-powered browser extension that protects from cyberthreats

• Iranian APT Targets Middle East Telecoms Operators in Espionage Campaign

• Most Recent iOS Updates from Apple Fix Remote Jailbreak Exploit for iPhones

• Hackers Attacked 1.6 Million WordPress Sites Via Four Different Vulnerable Plugins

• Log4j flaw puts hundreds of millions of devices at risk, warns cybersecurity agency

• Brazilian Ministry of Health hit by second cyberattack in less than a week

• ‘Seedworm’ Attackers Target Telcos in Asia, Middle East

• Officials: Virginia IT Agency Hit With Ransomware Attack

• Apple security updates are out – and not a Log4Shell mention in sight

• When to Expect New AirPods Pro to Launch in 2022

• Karakurt: Another Threat Actor Group on the Cyberthreat Landscape

• UncommonX adds $9.5M as enterprises continue to prioritize cybersecurity

• Dazz, from ex-Microsoft team, gets $60M to automate cloud security

• Collecting In the Dark: Tropic Trooper Targets Transportation and Government

• Government Issues Warning, After Altice Increases BT Stake

• Chrome 96 Update Patches Exploited Zero-Day Vulnerability

• Ransomware, Trojans, DDoS Malware and Crypto-Miners Delivered in Log4Shell Attacks

• The Ransomware Attack Suffered by Kronos May Cause Weeks of Downtime

• Top Books to Prepare You for CISSP Exam

• Log4j flaw puts hundreds of millions of devices at risk, says US cybersecurity agency

• Cybersecurity is Under Assault, And It’s Growing Worse

• Connect: The Fourth Pillar of Industrial Cybersecurity

• Experts: Log4j Bug Could Be Exploited for “Years”

• How Extended Security Posture Management Optimizes Your Security Stack

• Hackers Exploit Log4j Vulnerability to Infect Computers with Khonsari Ransomware

• French Users and Orgs Targeted by TinyNuke Info-Stealing Malware

• Owowa: the add-on that turns your OWA into a credential stealer and remote access panel

• ‘Vaccine’ For Apache Log4j Vulnerability Released Amidst Active Exploits

• Amazon Warehouse Flattened By Tornado, Killing Six Staff

• Christmas Payroll Fears After Ransomware Hits Software Provider

• Industrial Organizations Targeted in Log4Shell Attacks

• Police Arrest Suspected Ransomware Actor in Romania

• Ransomware hits HR solutions provider Kronos, locking customers out of vital services

• Log4j Vulnerability and Cloud Guard AppSec Machine Learning based Approach for Preemptive Prevention

• WhatsApp Now Hides Your ‘Last Seen’ Status From Strangers

• Volvo Cars Servers Hacked – Attackers stolen Research and Development Information

• Looking for adding new detection technologies in your security products?

• Google fixed the 17th zero-day in Chrome since the start of the year

• 2022 Predictions | Avast

• Ransomware Affiliate Arrested in Romania; 51 Stolen Data Brokers Arrested in Ukraine

• TinyNuke banking malware targets French organizations

• log4j-jndi-be-gone: A simple mitigation for CVE-2021-44228

• XDR: What It Is, What It Isn’t

• Hybrid work is dead, long live “work”

• Enterprise email encryption without friction? Yes, it’s possible

• Podcast Episode: A Better Future Starts with Secret Codes

• Latest Apple iOS Update Patches Remote Jailbreak Exploit for iPhones

• Modern cars: A growing bundle of security vulnerabilities

• Serious vulnerability in Apache Logging System

• Ransomware attack news trending on Google

• Protecting against Log4j with Secure Firewall & Secure IPS

• Employees think they’re safe from cyberthreats on company devices

• How to thwart SIM swapping attacks?

• How organizations analyze data to source insights that inform business decisions

• FCW Insider: December 14, 2021

• How Building a Solid Foundation Will Help Grow Your Cybersecurity Program

• Update Google Chrome to Patch New Zero-Day Exploit Detected in the Wild

• Execs upping the ante on technology investment for 2022, acquiring talent a major focus

• Beware of a New Amazon Token Crypto Scam

• AwareGO Human Risk Assessment for Enterprise measures employees’ cybersecurity behavior

• Virginia legislative agencies and commissions hit with ransomware attack

• BrightVPN allows users to protect their IP from being tracked for commercial reason

• Inside Ireland’s Public Healthcare Ransomware Scare

• U.S. Labor Department Opens Investigation Into Apple

• iPhone 14 Pro Models Rumored to Feature 48-Megapixel Camera and 8GB of RAM

• The Log4J Vulnerability Will Haunt the Internet for Years

• Innodisk launches EGPL-T101 M.2 2280 10GbE LAN module for various high-speed scenarios

• ‘Less obvious’ uses of Log4j pose a major risk

• Security company offers Log4j ‘vaccine’ for systems that can’t be updated immediately

• Australia’s first data strategy to create ‘one-stop shop’ for accessing government data

• CISA Creates Webpage for Apache Log4j Vulnerability CVE-2021-44228

• Lockheed Martin partners with Radisys to accelerate development of 5G.MIL network capabilities

• Tales from the Dark Web: Fingerprinting Access Brokers on Criminal Forums

• CISA Creates Webpage for Apache Log4j Vulnerability CVE-2021-44228

• Nigel Fox joins Isotropic Systems as CFO

• DFIN acquires Guardum to help companies tackle their risk and compliance needs

• Log4Shell vulnerability: What we know so far

• Blancco’s data erasure offering supports U.S. federal government CMMC accreditation efforts

• Imperva appoints Marty Overman as SVP, North America

• Transmit Security names Chris Kaddaras as CRO

• Log4j update: Experts say log4shell exploits will persist for ‘months if not years’

• Kronos Ransomware Outage Drives Widespread Payroll Chaos

• Booz Allen Hamilton opens new office in Hawaii to support critical Indo-Pacific missions

• Log4j RCE latest: In case you hadn’t noticed, this is Really Very Bad, exploited in the wild, needs urgent patching

• How cyber gray zone conflict can shape conventional war

• Dream Job Alert: Senior Fellow for Decentralization at EFF

• IT Security News Daily Summary 2021-12-13

• password salting

• Kronos hit with ransomware, warns of data breach and ‘several week’ outage

• Experts say log4shell exploits will persist for ‘months if not years’

• iOS 15.2 Features: Everything New in iOS 15.2

• What’s needed for the future of software factories

• Keeping UX front and center in ID management

• HR platform Kronos hit with ransomware, UKG warns of data breach and ‘several week’ outage

• Impact of Log4j vulnerability on GFI

• 40% of Corporate Networks Targeted by Attackers Seeking to Exploit Log4j

• Why Classifying Ransomware as a National Security Threat Matters

• XSS Attacks: Best Prevention

• When the question is paying ransom, the answer isn’t always clear

• AF’s counter-drone tech nears completion

• Apple releases Tracker Detect Android app to identify AirTags, other Find My-enabled trackers

• Critical Log4j flaw exploited a week before disclosure

• CSAM Found on LSU Professor’s Computer

• Cybersecurity ‘Vaccines’ Emerge as Ransomware, Vulnerability Defense

• Vulnerability Summary for the Week of December 6, 2021

• Practical coexistence attacks on billions of WiFi chips allow data theft and traffic manipulation

• Apple Patches 42 Security Flaws in Latest iOS Refresh

• Vulnerability Summary for the Week of December 6, 2021

• Practical coexistence attacks on billions of WiFi chips allows data theft and traffic manipulation

• Apple’s 27-Inch ‘iMac Pro’ With Mini-LED Display Expected in Spring 2022

• No Foldable iPhone Expected Until 2023 at the Earliest, But 2024 More Likely

• Indian PM Modi’s Twitter Account HACKED for Bitcoin scam

• Government watchdog calls out TMF for low rate of cost recovery

• SANS Opens Free Holiday Hack Challenge

• Bug-Bounty Programs Shift Focus to Most Critical Flaws

• Multiple Vulnerabilities Found In GoAutoDial Call Center Software

• CloudGuard AppSec – The only solution providing preemptive Web Application Protection against the Log4j Vulnerability

• Critical Log4Shell security flaw lets hackers compromise vulnerable servers

• Name That Toon: Modern-Day Frosty

• Apple Releases ‘Tracker Detect’ App to Prevent Android Users From Being Tracked by AirTags

• Apple Officially Delays macOS Monterey Universal Control Until Spring 2022

• EFF to Federal Appeals Courts: Hold Police Accountable for Violating Civilians’ Right to Record

• New cybersecurity flaw shows vulnerability in ‘LOG4J,’ which poses risk to thousands of products

• Malicious PyPI Code Packages Rack Up Thousands of Downloads

• Where the Latest Log4Shell Attacks Are Coming From

• Hackers Target India’s Prime Minister

• Log4Shell Exploitation Grows as Cybersecurity Firms Scramble to Contain Threat

• The Log4j JNDI attack and how to prevent it

• The numbers behind a cyber pandemic – detailed dive

• Log4j exploits suggest attackers gearing up for ransomware

• Log4Shell Is Spawning Even Nastier Mutations

• Why you need an email security policy and how to build one

• Apple Releases watchOS 8.3 With Apple Music Voice Plan and App Privacy Report

• Apple Releases iOS 15.2 With App Privacy Report, Legacy Contacts, Hide My Email Improvements and More

• Apple Releases HomePod Software 15.2 With Apple Music Voice Plan Support

• Apple Releases macOS Monterey 12.1 With SharePlay

• When disaster strikes, data recovery really is a race against time

• Log4j Vulnerability | Avast | Blog

• White House elevates CX with executive order

• Ransomware suspect arrested over attacks on ‘high-profile’ organisations

• Paying a debt by gift card? Don’t fall for this scam

• Kaspersky Opens Doors to New Transparency Center in North America

• Darktrace Reports Information Technology and Communications Sector Most Targeted by Cyberattackers in 2021

• Responding to Fischerkeller on Initiative Persistence

• Securing U.S. Democracy

• Spectrum, cyber concerns surface in Grady’s nomination hearing

• Building a Scalable Security Architecture on AWS with Cisco Secure Firewall and AWS Gateway Load Balancer

• Spear phish, whale phish, regular phish: What’s the difference?

• Is VPOTUS Bluetooth-phobic or sensible? The answer’s pretty clear

• A Journey in Organizational Resilience: Geopolitical and Socio-Economic Trends and Threats

• How Check Point Infinity Protects Customers from the Log4j Vulnerability

• Multilingual Cybersecurity Awareness Training adapted for your needs

• WooCommerce Credit Card Stealer Found Implanted in Random Plugins

• What is Cyber Security Risk Modeling?

• A non-traditional IT contractor looks a gift horse in the mouth

• Ransomware Affiliate Arrested in Romania

• Adobe Launches Creative Cloud Express App With Drag-and-Drop Content Creation

• The Use of Gift Cards as a Scam Payment Method Has Increased Dramatically, FTC Data Shows

• All You Need to Know About the New Zero-Day Found in the Log4j Java Library

• Cyber Threat forces Canada to shut down 4000 government websites

• Heimdal™ Confirms Log4J Vulnerability Does Not Impact Customers

• Volvo Cars Data Breach Results in Theft of Proprietary Information

• The Use of Gift Cards As a Scam Payment Method Has Increased Dramatically, FTC Data Shows

• What is an Evil Twin Attack?

• A Look Into Purple Fox’s Server Infrastructure

• Patch Now: Apache Log4j Vulnerability Called Log4Shell Actively Exploited

• Ascendex cryptocurrency exchange hacked – $77 million stolen

• Responding to the Log4j 2 vulnerability (CVE-2021-44228)

• HANCITOR DOC drops via CLIPBOARD

• 6 Tips to Protect Yourself From Holiday Shopping Scammers

• FCW Insider: December 13, 2021

• Quick Hits

• Bolster physical defenses with IoT hardware security

• 2 Website Threats to Address for the Holiday Shopping Rush

• iPhone 13 Depreciates Half as Much as Flagship Android Rival

• Deals: Apple’s 24-Inch iMac (8-Core, 256GB) Drops to New Low Price of $1,399

• Heimdal™ Official Statement on Log4Shell Vulnerability

• Timekeeping biz Kronos hit by ransomware and warns customers to engage biz continuity plans

• Logistics Firm Hellmann Scrambling to Recover From Cyberattack

• Log4j Zero Day Flaw: What You Need To Know And How To Protect Yourself

• Indian PM Modi’s Twitter Hacked With Bitcoin Tweet

• Are Your Home Security Cameras Vulnerable To Hacking?

• Polish Regulator To Investigate Apple’s Privacy Policy

• One-Time Password Security Might Fail 80% of the Time. IAM is Better

• New data tracks polling place locations for 37 states

• Log4j zero-day flaw: What you need to know and how to protect yourself

• Germany Jails Operators of ‘Cyberbunker’ Darknet Hub

• Cybersecurity M&A Roundup for December 1-12, 2021

• CISA adds Log4Shell Log4j flaw to the Known Exploited Vulnerabilities Catalog

• CVE-2021-44228 vulnerability in Apache Log4j library

• Deals: Apple Watch Series 7 Gets New All-Time Low Prices on Amazon ($50 Off)

• Responding to Fischerkeller on Initiative Persistence, Defend Forward and Persistent Engagement

• Hackers Use QR Codes to Steal Banking Credentials in Recent Phishing Attempts

• Heimdal™ Security Statement on log4j Vulnerability (CVE-2021-44228)

• Building a Scalable Security Architecture on AWS with Cisco Secure Firewall and AWS Transit Gateway

• CCSP vs. Microsoft Azure Certified Security Engineer Associate — How Does Vendor Focus Factor In?

• Polymer lands $4M to bring no-code data loss prevention to SaaS apps

• CISA Expands ‘Must-Patch’ List With Log4j, FortiOS, Other Vulnerabilities

• A week in security (Dec 6 – 12)

• Silicon UK In Focus Podcast: Threat Hunters

• Log4j flaw: Attackers are making thousands of attempts to exploit this severe vulnerability

• Ex-NFL Star Gets Three Years for #COVID19 Fraud

• Top 3 SaaS Security Threats for 2022

• Karakurt: A New Emerging Data Theft and Cyber Extortion Hacking Group

• Log4Shell update: Attack surface, attacks in the wild, mitigation and remediation

• Teachers targeted by TikTok Teens

• Companies Respond to Log4Shell Vulnerability as Attacks Rise

• “Sadistic” Online Extortionist Jailed for 32 Years

• Volvo Cars Discloses Breach And R&D Data Theft – Cyber Experts Comment

• What Experts Say On Critical Log4j Vulnerability?

• How to Use Live Text on iPhone, iPad, and Mac

• EU ‘Set To Approve’ Microsoft’s $16bn Nuance Buy

• Volvo Cars Investigates Cyber-Theft Of R&D Data

• Mirai-Based ‘Manga’ Botnet Targets Recent TP-Link Vulnerability

• How to Open Spotify Links in Apple Music and Vice Versa

• Google Warns Of Bug That Can Block Android Emergency Calls

• Lawmakers Say Instagram’s Promises ‘Won’t Cut It’

• VirusTotal += Vir.IT

• Indian PM’s Twitter Hacked Again by Crypto Scammers

• Log4Shell was in the wild at least nine days before public disclosure

• Ireland Health Service ‘Compromised Two Months Before Attack’

• “Worst-Case Scenario” Log4j Exploit Travels the Globe

• Trying to register your antivirus in Windows Security Center?

• Meta Releases Horizon Worlds Amidst VR Push

• New zero-day in the Log4j Java Library Exploiting in Wide

• College Email Phishing Scams | Avast

• Ooh, an update. Let’s install it. What could possibly go wro-

• Microsoft Details Building Blocks of Widely Active Qakbot Banking Trojan

• Ultimate guide to the CCSP: Build the most needed skill in cybersecurity

Generated on 2021-12-19 23:59:17.180200