IT Security News Weekly Summary – Week 51

• IT Security News Daily Summary 2020-12-20

• Ledger – 1,075,241 breached accounts

• Ledger data breach: Hacker leaks stolen database on hacker forum

• Robert M. Lee’s & Jeff Haas’ Little Bobby Comics – ‘WEEK 308’

• DEF CON 28 Safe Mode Blockchain Village – Peiyu Wang’s ‘Exploit Insecure Crypto Wallet’

• Security Affairs newsletter Round 293

• SolarWinds hackers also breached the US NNSA nuclear agency

• Apple Offers Solution for ‘Pairing Canceled’ Error When Using Apple Fitness+ on Apple TV

• Almost 100 Apple Stores Closed Again, Including All Stores in California

• Afghanistan Will Be the Biden Administration’s First Foreign Policy Crisis

• Lawfare Live: U.S. Cyber Strategy and the SolarWinds Breach

• DEF CON 28 Safe Mode Hack The Seas Village – Grant Romundt’s ‘Hacking The SeaPod’

• SolarWinds Cyberattacks, Microsoft’s Turn?

• Apple Maps Vehicles Collecting ‘Look Around’ Imagery in Israel, New Zealand, and Singapore

• A Massive Fraud Operation Stole Millions From Online Accounts

• Ending the “Dual-Hat” Arrangement for NSA and Cyber Command?

• What is XSS (Cross Site Scripting) ? – A Detailed Understanding the Type of XSS

• The Top 21 Security Predictions for 2021

• Wireshark 3.4.2 Released, (Sun, Dec 20th)

• Heads-up: VirusTotal Functionality in Sysinternals Tools Not Working, (Sun, Dec 20th)

• COVID-19 themed attacks December 6 – December 19, 2020

• Week in review: SolarWinds hack and related attacks, life without passwords, how to make DevSecOps stick

• Penetration testing

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Zero-Hour Phishing Attack on Google’s App Engine Targeting Office 365 Users Pushes Holiday Spike Above 100%

• Remote Cybersecurity: Threats and Best Practices While Working From Home

• Memory Sizes: Now with zetta and yotta!

• NATO is checking its systems to determine the impact of SolarWinds hack

• What’s Next for the Western Sahara Conflict?

• Weekly Update 222

• EFF Calls Facebook’s Criticism of Apple’s Pro-Privacy Tracking Change ‘Laughable’

• IT Security News Daily Summary 2020-12-19

• Facebook bug exposed email addresses of Instagram users

• Trump Downplays Russia in First Comments on Cyberattack

• DEF CON 28 Safe Mode Hack The Seas Village – Nina Kollars’ ‘40,000 Leagues UUV Death Match’

• CISA Updates Alert and Releases Supplemental Guidance on Emergency Directive for SolarWinds Orion Compromise

• DEF CON 28 Safe Mode Hack The Seas Village – Stephen Gerling’s ‘Yacht Pwned’

• XKCD ‘2020 Election Map’

• Secure Communication using TLS in Elasticsearch, (Sat, Dec 19th)

• Trump contradicts Pompeo, plays down alleged Russian role in cyberattack

• Home Working Presents A New Type Of Challenge For The IT Team

• Fake Cyberpunk 2077 Android App Delivering Ransomware

• Deals: Get the AirPods for $109.99 ($50 Off) and AirPods Pro for $189.99 ($60 Off) in Latest Sales

• Experts On Android And iOS Users Blackmailed by ‘Goontact’ Spyware

• CoderWare Ransomware Masks Itself As Cyberpunk 2077 Mobile Game App

• Apple: Here’s how to secure an iPhone or Apple ID ‘when personal safety is at risk’

• Russia’s SolarWinds Hack Is a Historic Mess

• NATO Checking Systems After US Cyberattack

• What is “Sunburst”? A look into the Most Serious Cyberattack in American History

• Russia’s SolarWinds Hack Is the Big One

• Banking Industry Faces Surge in Cyber Security Challenges

• Top Stories: Hands-On With AirPods Max, Apple Fitness+ Debuts, iPhone 13 and Apple TV Rumors

• Is Venmo Safe? All of Your Questions Answered

• Using Machine Learning for Static Analysis

• Facebook Is Forcing UK Users To Abide By Worse Privacy Rules

• NSA warns of cloud attacks on authentication mechanisms

• How to Understand the Russia Hack Fallout

• UK Finance Body: Beware of Parcel Delivery Scam, Especially During Christmas Season

• Active Cypher: “great deal of orchestration of our intelligence in AI into existing systems”

• FBI and Interpol shut down some servers of Joker’s Stash carding marketplace

• Apple and Other Browser Makers Ban Kazakhstan HTTPS Certificate Used to Surveil Citizens

• Firefox to ship ‘network partitioning’ as a new anti-tracking defense

• ‘Build’ or ‘Buy’ your own antivirus product

• Week in security with Tony Anscombe

• The European Commission added VKontakte and Telegram to the list of pirate sites

• What’s Next for the Western Sahara Conflict?

• Cloudflare CEO discusses the company’s ‘zero-trust’ approach to cybersecurity

• Cloud-security firm Cloudflare CEO reacts to suspected Russian breach of U.S. government networks

• Scope of massive, months-long cyberattack is unknown and still no word from Trump

• The many ways you can be scammed on Facebook, part II

• Threat Roundup for December 11 to December 18

• Friday Squid Blogging: Christmas Squid Memories

• Cortex XDR Named a Strategic Leader in AV-Comparatives EPR Evaluation

• Comparison: AirPods Max vs Sony XM4, Sennheiser Momentum and Bose NC 700

• Lessons learned building supervised machine learning into DDoS Protection

• Cloudflare CEO says ‘zero-trust architecture’ is an answer to U.S. government breach

• BITSIGHT ANALYSIS OF SOLARWINDS ORION — PART 2: DECLINING PREVALENCE

• ONTAP System Manager 9.8 offers a new experience

• A Brief OSINT Analysis of Charming Kitten IoCs

• What Does the SolarWinds Orion Attack Say about the State of Cybersecurity?

• Apple Closing Los Angeles Stores as Virus Cases Rise in Southern California

• Expert Reacted On Manchester To Explore Biometrics For Transport, Education And Health Services

• The Brain Of Security

• U.S. continues investigating the depth of suspected Russian hack

• Scope of suspected Russian hack grows as more organizations reveal breaches

• Analyzing Solorigate, the compromised DLL file that started a sophisticated cyberattack, and how Microsoft Defender helps protect customers

• IT Security News Daily Summary 2020-12-18

• Securely managing the IT workload: In-house or outsource?

• T-Mobile: Massive BYOD growth raises huge enterprise security risks

• Apple, Google, Microsoft, and Mozilla ban Kazakhstan’s MitM HTTPS certificate

• VERT Alert: SolarWinds Supply Chain Attack

• Cloud is King: 9 Software Security Trends to Watch in 2021

• COVID-19 has not slowed global zero trust implementations

• DEF CON 28 Safe Mode Hack The Seas Village – Gary Kessler’s Build An AIS Receiver With A Raspberry Pi’

• Contrast Labs: Apache Struts CVE-2020-17530

• Hackers target COVID-19 vaccine supply chain and sell the vaccine in Darkweb

• Experts Insight On People’s Energy Data Breach

• Switzerland Charges Credit Suisse In Money Laundering Case – Comments From Specialist Financial Crime Lawyer

• Facebook’s Laughable Campaign Against Apple Is Really Against Users and Small Businesses

• Lawmakers press Trump to sign NDAA in the wake of massive hack

• Microsoft Confirms Its Network Was Breached With Tainted SolarWinds Updates

• FBI Warns of DoppelPaymer Attacks on Critical Infrastructure

• Instagram Supports Uploading ProRAW Photos Taken With iPhone 12 Pro

• Victory! Federal Appeals Court Confirms FOIA Requests Requiring a Database Query are Allowed Under the Law

• Research: Stealing data from air-gapped PC by turning RAM into Wi-Fi Card

• Authentication Bypass Vulnerability Patched in Bouncy Castle Library

• MacRumors Giveaway: Win an Apple-Themed Pillow From Throwboy

• Apple’s A14 Outperforms New Snapdragon 888 Chip Coming in Future Android Phones

• The Strategic Implications of SolarWinds

• Why the Flynn Pardon Matters

• The nation has to act as one team, there is too much secrecy and privacy around these hacks: Intel expert

• WordPress Plugin Installed 5 Million Times Has Critical Upload Vulnerability

• Iranian Nation-state actors linked to Pay2Key Ransomware

• NSA warns of Federated Login Abuse in Advisory

• BrandPost: 5 reasons the security of your endpoints could be at risk

• BrandPost: Securely managing the IT workload: In-house or outsource?

• BrandPost: Securely empowering today’s anytime-anywhere workforce

• Chinese drone developer DJI added to Commerce Department ‘Entity List’

• Sunburst’s C2 Secrets Reveal Second-Stage SolarWinds Victims

• Beware of cybercriminals: Keep your guard up during the last-minute shopping frenzy

• SolarWinds-related cyberattacks pose grave risk to government and private sector, says CISA

• Good and bad news for cybersecurity in 2021

• Predicting 2021 in cybersecurity: DDoS attacks, 5G speed, AI security, and more

• US Blacklists Chinese Companies Including Chip Giant SMIC

• Industrial Control Systems Ripe Targets for Ransomware

• SolarWinds Likely Hacked at Least One Year Before Breach Discovery

• VMware Flaw a Vector in SolarWinds Breach?

• JIBC Launches Cybercrime Analysis Certification

• New ISAC for K–12 Schools Names National Director

• Highly Evasive Attacker Leverages SolarWinds Supply Chain to Compromise
  Multiple Global Victims With SUNBURST Backdoor

• How X.509 Certificates Were Involved in SolarWinds Attack | Keyfactor

• Why 2020 will be a bumper Christmas for cybercriminals – and what retailers can do about it

• What Does Risk-Based Cybersecurity Reporting Look Like?

• SolarWinds Orion Breach — BitSight Analysis Part 1

• The Services You Need To Hire To Build A Quality E-Commerce Website

• Improving Workplace Security in 7 Easy Steps

• Building an App: 6 Things to Consider

• Weighing the Pros and Cons of Static Application Security Testing

• Goontact Spyware Targets Smartphone Users Via Fake Messaging Apps

• Linux containers can minimize cross-domain security headaches

• GAO tracks diversity in the intelligence community

• FBI & Interpol disrupt Joker’s Stash, the internet’s largest carding marketplace

• Practice vs Process Maturity: Strengthening Your Cyber Compliance & Risk Program

• NSA Warns Of Federated Login Abuse For Local-To-Cloud Attacks

• Five Russian Hacks That Transformed US Cybersecurity

• Add Microsoft To The List Of SolarWinds Victims

• GitHub Plans To Eradicate Password Usage Next Year

• Review: Activity Awards Bring Your Apple Watch Fitness Achievements to Life

• Apple Shares Manual on How to Lock Down Devices When Personal Safety is at Risk

• iPhone 12 Demand Helps Boost Qualcomm’s 5G Modem Revenue, But Apple Working on Own ‘High-End’ Modem

• Steve Wozniak Schematics for Prototype Apple II Computer Sell for $630k at Auction, Apple-1 goes for $737k

• Palo Alto Networks CEO: All companies must ensure they weren’t hit in suspected Russian cyberattack

• Why Microsoft is Morgan Stanley’s top software pick for 2021

• Google Hit With Third Antitrust Lawsuit

• How to lock down your Microsoft Account and keep it safe from outside attackers

• Best VPN services for 2021: Safe and fast don’t come for free

• Cyberpunk 2077 Headaches Grow: New Spyware Found in Fake Android Download

• Microsoft Caught Up in SolarWinds Spy Effort, Joining Federal Agencies

• Cybersecurity can use some help from AI and ML

• AI, ML can bolster cybersecurity, and vice versa, professor says

• 5 Key Takeaways From the SolarWinds Breach

• NSA on Authentication Hacks (Related to SolarWinds Breach)

• Deals: Get the M1 13-Inch MacBook Pro for $1,199.99 on Amazon ($99 Off)

• Barclays: iPad With OLED Display Unlikely to Launch Until 2022 at Earliest

• Cyber Events that Rocked 2020

• Channel updates: One Identity extends channel momentum as demand for identity-centric security accelerates

• Bracing for the shopping surge: retailers ramp up security measures for 2020 holiday season

• Former NSA executive on suspected Russian cyberattack on U.S. agencies

• Here’s what it will take to determine what suspected Russians hacked from U.S. agencies

• Why the SolarWinds cyberattack isn’t over

• CipherCloud Chronicles 8: CipherCloud DRM (Handing The Right Keys To The Right Person)

• Mitigating Cloud Supply-chain Risk: Office 365 and Azure Exploited in Massive U.S. Government Hack

• Ransomware payments doubled in 2020

• BrandPost: Protecting Online Holiday Shopping this Season

• ‘The Croods: A New Age’ same family, even bigger data demands

• Russian hackers targeted 40 agencies including US Nuclear Agency

• Insider Threats: What Are They, Really?

• 5G standalone networks may have more vulnerabilities than you think

• Mad About Malware: Hot Spots and Trends in 2020

• Alibaba Facial Recognition Tech Picks Out Uyghur Minorities

• 2021 Cybersecurity Predictions: The Intergalactic Battle Begins

• 5 Key Takeaways from the SolarWinds Breach

• Bugcrowd Report Shows Marked Increase in Crowdsourced Security

• SCAP Security Guide: helping you to achieve security policy compliance

• iPhone 13 Lineup May Support Game-Changing Wi-Fi 6E, Larger iPhone SE Unlikely in Early 2021

• Suspected Russian cyber attack looks like a ‘dream’ attack for hackers, says Palo Alto CEO

• Full interview with Palo Alto Networks CEO Nikesh Arora on massive cyber attack

• Unsecured Azure blob exposed 500,000+ highly confidential docs from UK firm’s CRM customers

• UK Energy Startup ‘People’s Energy’ Discloses Data Breach

• Spotify Hit by Yet Another Data Leak

• Remedying Shell Shock Part 2: The Power of PowerShell

• The SolarWinds Breach Is a Failure of U.S. Cyber Strategy

• How to Not Fall for a Charity Scam This Holiday Season

• Microsoft: 2020 was the year we almost said goodbye to passwords

• NSA warns of federated login abuse for local-to-cloud attacks

• Ransomware Gangs Use ‘SystemBC’ Tor Backdoor in Attacks

• How to address the skills gap of security and IT personnel

• Will the US Move to a Federal Privacy Law in 2021?

• Ransomware attackers are making threatening phone calls to their victims, warns FBI

• SonarSource now provides high-precision SAST tooling for developers, enabling them to own Code Security

• Absolute Zero

• Microsoft Finds Malicious Code In Its Systems After SolarWinds Compromise

• Ethical Hacking – Where And How Does It Fail?

• How Polypoly wants to reinvent the data economy

• Continuous Updates: Everything You Need to Know About the SolarWinds Attack

• Microsoft, Energy Department and Others Named as Victims of SolarWinds Attack

• Cyber News Rundown: Trickbot Spreads Via Subway Emails

• All-source intelligence: reshaping an old tool for future challenges

• Sunburst: connecting the dots in the DNS requests

• Apple Stops Offering Standalone Update Packages in macOS Big Sur

• Massive Fraud Operation Facilitated By Evil Mobile Emulator Steals Millions From Banks

• Fake Cyberpunk 2077 game installs malware

• US nuclear agency hit by cyberattack

• This Year in Ransomware Payouts (2020 Edition)

• Suspected Russian hack is much worse than first feared: Here’s what you need to know

• How Social Media Is Contributing to The Popularity of Bitcoin

• Investors Are Choosing Bitcoin Over Gold as The Better Hedge Against Inflation

• Top 5 online maps to track cyberattacks worldwide

• How To Choose A Laptop For Ethical Hacking

• People’s Energy Data Breach Impacts 270,000 Customers

• Senate passes NDAA but veto threat looms

• NSC invokes 2016 directive to respond to SolarWinds hack

• Telework gets Air Force IT seal of approval

• UK Energy Firm Suffers Data Breach Impacting Entire Customer Database

• Decade-Long Data Silo to Address Google-Fitbit Privacy Concerns

• €6 million in illegal profit of fraudulent organic pistachio sales

• TikTok Promotion Offers Users Four Free Months of Apple Music

• Microsoft identified over 40 SolarWinds hack victims

• COVID-19 vaccines for sale on the dark web

• Serious File Upload Vulnerability In Contact Form 7 Threatened Millions Of Websites

• Security Recruiter Directory

• What is typosquatting? A simple but effective attack technique

• FTC Questions Big Tech About User Data | Avast

• 10 Must-have Cyber Security Resources as You Plan for 2021

• Microsoft found malicious SolarWinds software in its systems

• FCW Insider: Dec. 18

• Bouncy Castle Bug Puts Bcrypt Passwords at Risk

• Massive Cyberattack On US Government Exposes Shortcomings, Russia Named Top Suspect

• Acunetix update introduces support for macOS Big Sur, support for ShadowRoot, improved CSRF token handling, and new vulnerability checks

• Microsoft confirms breach in SolarWinds hack, but denies its clients were affected

• Apple Clarifies Behavior of AirPods Max Low Power Mode When Not in Use

• Microsoft was also a victim of the SolarWinds supply chain hack

• ‘Long-standing vulns’ in 5G protocols open the door for attacks on smartphone users

• 5 essential steps needed to set up a secure e-commerce website

• Google Extends Support Period for Android Devices

• Microsoft and 40+ Customers Hit in Russian Espionage Attack

• The future of cyberconflicts

• A slightly optimistic tale of how patching went for CVE-2019-19781, (Fri, Dec 18th)

• Europol and the European Commission inaugurate new decryption platform to tackle the challenge of encrypted material for law enforcement investigations

• Putin: the US State Department and the US intelligence agencies come up with fake about Russian hackers

• Manufacturers Take the Initiative in Home IoT Security

• Fake mobile version of Cyberpunk 2077 spreads ransomware

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• How to avoid seven types of tweets and posts that can get you jailed or fired?

• Cybercrime Expected to Rise At an Unprecedented Rate in 2021

• The SolarWinds Supply Chain Hack: What You Need to Know

• 5 reasons IT should consider client virtualization

• Service NSW not effectively handling private information: NSW Auditor-General

• Operation SignSight: Supply‑chain attack against a certification authority in Southeast Asia

• Imagining a professional life without passwords

• 2020 broke cybersecurity records, here’s what’s to come in the new year

• Britons be aware of the new Cyber Scam before Christmas

• Mobile Security Threat to US Mobile Phones from China

• Microsoft says it identified 40+ victims of the SolarWinds hack

• Millions of Users Downloaded 28 Malicious Chrome and Edge Extensions

• Microsoft Says Its Systems Were Also Breached in Massive SolarWinds Hack

• If You Don’t Hire Robots to Attack Your Networks, You’re Not Doing Security Right

• Could Universities’ Use of Surveillance Software Be Putting Students at Risk?

• Cloud ITSM market size to grow to $12.2 billion by 2025

• Expedited shifts to hybrid infrastructure and remote work challenges

• SAP’s Conlon discusses ways for safe and effective Covid vaccine distribution

• ASPI warns Canberra about security risk with current data centre procurement approach

• Sberbank predicts an outflow of up to ₽4 trillion from banks to the digital ruble

• NSA Releases Cybersecurity Advisory on Detecting Abuse of Authentication Mechanisms

• 
”Amazon” invoice that asks to call 1-866-335-0659 “to cancel” an order that you never made is (obviously) a #scam, (Thu, Dec 17th)

• ISC Stormcast For Friday, December 18th 2020 https://isc.sans.edu/podcastdetail.html?id=7298, (Fri, Dec 18th)

• Sectigo helps OEMs and enterprises secure their connected devices and products

• Offensive Security announces bounty program for user generated content

• Anomali automates and speeds essential tasks performed by threat intelligence

• SolarWinds Sunburst Attack: What Do You Need to Know and How Can You Remain Protected

• Microsoft confirms it was also breached in recent SolarWinds supply chain hack

• Palo Alto Networks Rapid Response: Navigating the SolarStorm Attack

• Innodisk InnoAGE provides full recovery to IoT edge devices

• Inseego launches four 5G fixed wireless solutions for home cord-cutters and business premises

• HITRUST MyCSF streamlines regulatory compliance reporting

• Proact Hybrid updates offer customers flexibility in moving data between different platforms

• IBM Security allows companies to experiment with fully homomorphic encryption

• Russian hack against the U.S. government ‘will take years to overcome,’ former national intelligence official says

• Additional Analysis into the SUNBURST Backdoor

• Group rates states’ IT modernization work

• US nuke agency hacked by suspected Russian SolarWinds spies, Microsoft also installed backdoor

• “Is it you in the video?” – don’t fall for this Messenger scam

• CloudPassage adds Google Cloud Platform support for Halo Cloud Secure

• Entrust Certificate Manager now available in the ServiceNow Store

• nOps brings API integration with AWS Well-Architected Tool to support AWS Well-Architected Reviews

• “Amazon” invoice that asks to call 1-866-335-0659 “to cancel” an order that you never made is (obviously) a #scam, (Thu, Dec 17th)

• Tim Cook and Craig Federighi to Testify in Apple vs. Epic Battle

• iFixit Starts Tearing Down AirPods Max

• Datadog Compliance Monitoring integrates with the AWS Well-Architected Tool

• Cyberbit partners with Optiv to bring simulation-based SOC Team training to clients in North America

• The U.S. government is under the ‘hack of a decade’ after massive cyberattack grows

• This hack is bad for national security, and bad for leadership: Sue Gordon

• Microsoft was also breached in recent SolarWinds supply chain hack, report

• 5M WordPress Sites Running ‘Contact Form 7’ Plugin Open to Attack

• Nuclear Weapons Agency Hacked in Widening Cyberattack – Report

• How to Increase Your Security Posture with Fewer Resources

• ‘SocGholish’ Attack Framework Powers Surge in Drive-By Attacks

• Malicious Browser Extensions for Social Media Infect Millions of Systems

• Easy Tips To Guard Your Files From Most Types Of Hacking

• 5 Perks of VPN

• The Ultimate Guide to Bypassing Geo-restrictions While Streaming

• How did the pandemic change Esports landscape?

• Silo busting strategies for sharing intergovernmental data

• State CIOs face tighter budgets next year

• AWS again challenges JEDI award

• 5M WordPress Sites Running the Contact Form 7 Plugin are Open to Attack

• CISA: SolarWinds backdoor attacks are ‘ongoing’

• IT Security News Daily Summary 2020-12-17

• Streamlining AI workflows with the NetApp Data Science Toolkit

• Three Upcoming Security Regulations Automotive Companies Need to Know

• How using tactical literacy makes it harder for cybercriminals to fool end users

• Facebook Again Slams Apple Over Privacy Concerns

• 5 million WordPress sites potentially impacted by a Contact Form 7 flaw

• A Decade After the Arab Spring, Platforms Have Turned Their Backs on Critical Voices in the Middle East and North Africa

• A “quick wins” approach to securing Azure Active Directory and Office 365 and improving your security posture

• Collaborative innovation on display in Microsoft’s insider risk management strategy

• Ethical power supplier People’s Energy hacked, 250,000 customers’ personal info accessed

• CISA: SolarWinds’ Orion may not be only entry point for hackers

• How to quickly encrypt text for Apple Mail

• Microsoft, FireEye create kill switch for SolarWinds backdoor

• Syntax Ends 2020 with New Cybersecurity and Business Analytics Solutions, Expanded Leadership Team and Notable Amazon Web Services Designation

• More on the SolarWinds Breach

• Tim Cook and Craig Federighi Ordered to Testify in Apple vs. Epic Battle

• VideoBytes: Brute force attacks increase due to more open RDP ports

• Malware infected browser extensions stealing Chrome, Edge user data

• GSA preps launch of OASIS replacement

• Navy’s aquatic drone plan faces operational hurdles

• Russia’s Federal Cyber Attack on U.S.? What Are the Feds Doing?

• RubyGems Packages Laced with Bitcoin-Stealing Malware

• Air-Gap Attack Turns Memory Modules into Wi-Fi Radios

• Police Vouch for Hacker Who Guessed Trump’s Twitter Password

• Healthcare.gov Data Thief Jailed

• Disinformation Spreaders Predicted by AI

• CISA: SolarWinds Not the Only Initial Attack Vector in Massive Breach

• XDR 101: What’s the Big Deal About Extended Detection & Response?

• Top 10 Open Source Vulnerabilities In 2020

• Cybersecurity Evolves Beyond Antivirus With Morphisec Guard 5.0

• What Geopolitical Intelligence Means

• OffSec 2020 Recap

• AirPods Max Battery Drains Only Slightly Faster Outside of Case

• Apple Seeds First Beta of macOS Big Sur 11.2 to Public Beta Testers

• Technical Difficulties of Contact Tracing

• A breakthrough year for passwordless technology

• Mitigating Cloud Supply-chain Risk: Office 365 and Azure Exploited in Massive U.S Government Hack

• Google, Qualcomm team up to make long-term Android updates easier on Snapdragon

• FBI says DoppelPaymer Ransomware Gang is Harassing Victims Who Refuse to Pay

• Malicious RubyGem Package Steals Cryptocurrency

• Three Million People Installed 28 Different Malicious Web Extensions

• IRS Impersonated In Yet Another Tax-Related Scam

• 2020-12-15 – Qakbot (Qbot) infection with Cobalt Strike (Beacon)

• The worst bugs in the top programming languages

• Supply Chain Attack: CISA Warns of New Initial Attack Vectors Posing ‘Grave Risk’

• Indian Police Bust Illegal Call Center

• Rising to the Challenge: Perspectives from Security Leaders on 2020 and Beyond

• Advanced Persistent Threat Compromise of Government Agencies, Critical Infrastructure, and Private Sector Organizations

• Shadowserver Partnership Interview | Avast

• Samuel L. Jackson Starring in Apple TV+ Series ‘The Last Days of Ptolemy Grey’

• Apple Seeds First Betas of iOS 14.4 and iPadOS 14.4 to Public Beta Testers

• Parallels 16 for M1 Macs Now Available Through Technical Preview Program

• Understanding Apple’s New App Privacy Information

• Understanding Apple’s App Privacy Information – Intego Mac Podcast Episode 166

• Non-traditional small IT contractors: ‘A well-established niche that is here to stay’

• 3M Users Targeted by Malicious Facebook, Insta Browser Add-Ons

• Cryptologists Crack Zodiac Killer’s 340 Cipher

• 51% of WFH Parents Say Children Have Accessed Work Accounts

• DEF CON 28 Safe Mode Hack The Seas Village – Gary Kessler’s ‘Hacker Challenge Single Point Prediction’

• 3 Million Chrome Users Infected via Extensions—Here We Go Again

• DoppelPaymer ransomware gang now cold-calling victims, FBI warns

• Review: Belkin’s Car Vent Mount PRO Offers Easy MagSafe Mounting

• Google Wins EU Approval For Fitbit Deal

• Ad-blocker AdGuard deploys world’s first DNS-over-QUIC resolver

• Code42 Incydr Series: Bringing Shadow IT into the light with Code42 Incydr

• FBI, CISA, ODNI Describe Response to SolarWinds Attack

• The Why of AI and ML

• 4 Security Strategies to Keep Your Data Safe During the Holidays

• Federal Incentives for Cybersecurity Maturity

• How Suspected Russian Hackers Outed Their Massive Cyberattack

• People’s Energy Data Breach Affects All 270,000 Customers

• Irish Data Regulator Defends Order To Halt Facebook Data Flow

• Evil Mobile Emulator Farms Used To Steal Millions From Banks

• Apple Prototyped Hundreds of AirPods Max Designs, Says Smart Case is Designed for Storage Efficiency

• Deals: Holiday Sales Hit Apple’s iMac, MacBook Pro, and Mac mini (Up to $400 Off)

• Vulnerabilities in the Next Generation of 5G Could Allow Attackers to Steal Credentials and Falsify Subscriber Authentication

• Becoming resilient by understanding cybersecurity risks: Part 2

• Brexit erupts new data privacy fears among Facebook and Google users

• Google Staff Seek Removal Of VP Involved In Timnit Gebru ‘Firing’

• How to protect your organization following the SolarWinds compromise

• Increase In Attack: SocGholish

• Cobalt Finishes 2020 with Record Growth, Poised to Continue Disruption of Multibillion Dollar Pentesting Market

• Kaspersky Security Bulletin 2020. Statistics

• Eve Update Brings its HomeKit App to the Mac

• How Biden Can Take the High Road on Misinformation

• Face Verification And Multi-user SMS 2FA Options Added To SingPass – Expert Reaction

• Developing A Unified Crypto Strategy to Get Ahead Of Tomorrow’s Security Threats

• 3 Powerful Ways To Keep Your Remote Workers Cybersafe And Secure

• Taking An Automated Approach To Defending The Public Sector

• EU’s Digital Services Act And Digital Markets Act – Experts’ Perspectives

• 50% of U.S. tech execs say state-sponsored cyber warfare their biggest threat: CNBC survey

• One In Four UK Homes Can Access Gigabyte Broadband, Ofcom Says

• Phone scammers were able to get 270% more personal information in 2020 than in 2019

• Trend Micro Patches Serious Flaws in Product Used by Companies, Governments

• Little-Known SolarWinds Gets Scrutiny Over Hack, Stock Sales

• FBI Warns of DoppelPaymer Ransomware Targeting Critical Infrastructure

• 5 tools to help improve IoT visibility, device security

• S3 Ep11: DIY phishes, sandwich scams and vaccine hacking [Podcast]

• Two-Thirds of Orgs Expect Increase in #COVID19 Phishing Attacks Next Year

• 19 arrests for smuggling irregular migrants from Morocco to the Spanish Canary Islands

• VPNs, MFA & the Realities of Remote Work

• Talos Tools of the Trade

• Apple Adjusts Trade-In Prices for Apple Watch, iPad, and Mac

• Apple TV+ Shares Trailer for Original Film ‘Palmer’ Starring Justin Timberlake, Debuts January 29

• Third-Party Browser Extensions For Instagram, Facebook Infected With Malware

• Should You Use End-to-End Encryption for Your Email?

• 2020-12-14 – Quick post: Hancitor infection with Cobalt Strike and Ficker Stealer

• This ‘off the shelf’ Tor backdoor malware is now a firm favorite with ransomware operators

• Hybrid Networks Are a Business Reality – and Most Security Can’t Keep Up

• Experts spotted browser malicious extensions for Instagram, Facebook and others

• SolarWinds’ codebase hacked to inject backdoor

• DoppelPaymer ransomware gang is harassing victims who don’t pay

• Egregor and Ryuk ransomware leverages SystemBC backdoor

• Why Are More Industries Switching From SMS 2FA to Push?

• Smart toy security: How to keep your kids safe this Christmas

• A Recipe for Avoiding Software Failures

• Facebook Slams Apple Advertising Changes

• SolarWinds Sunburst Attack: What do you need to know and how can you remain protected

• Agency challenges in wake of SolarWinds hack

• Two Malware-Laced Gems Found in RubyGems Repository

• When zombie malware leads to big-money ransomware attacks

• Ransomware and Cyber-Extortion Payments Double in 2020

• FireEye Hack Turns into a Global Supply Chain Attack

• Which Third-Party Pods Do You Need in Your K8s Cluster?

• Facebook Temporarily Disables Some Messenger and Instagram Features in Europe to Comply With EU Data Rules

• Why Cyber Security Should Be at the Top of Your Christmas List

• Phobos Ransomware: Everything You Need to Know and More

• Whistleblowers have come to us alleging spy agency wrongdoing, says UK auditor IPCO

• CISO playbook: 3 steps to breaking in a new boss

• Google Sued By 10 US States For Alleged Facebook Collusion

• Adrozek Adware Dangers | Avast

• IBM launches experimental homomorphic data encryption environment for the enterprise

• EU Unveils Revamp of Cybersecurity Rules Days After Hack

• Killswitch Found for Malware Used in SolarWinds Hack

• Experts Urge Users to Ignore Facebook Christmas Bonus Scam

• Dutch Hacker Who Allegedly Broke into Trump’s Twitter Account Walks Free

• Malicious Browser Extensions | Avast

• Microsoft Edge Browser Now Available With Native Support for M1 Macs

• Business are tracking customers and not telling them

• How cyber-attackers are coming after you in 2021

• GLBA explained: What the Graham-Leach-Bailey Act means for privacy and IT security

• Fully Homomorphic Encryption: Unlocking the Value of Sensitive Data While Preserving Privacy

• FCW Insider: Dec. 17

• Quick Hits

• Malicious Chrome and Edge Extensions Affect Millions of Users

• Software Supply-Chain Attack Hits Vietnam Government Certification Authority

• How to Use Password Length to Set Best Password Expiration Policy

• Launched OSSISNa, the Observatory for the Protection of the National Strategic Industrial System

• WhatsApp Testing Voice and Video Call Features for Mac Desktop Client

• United States Federal Government’s Shift to Identity-Centric Security

• Was Google hacked?

• Facebook Criticizes Apple Privacy Policy in Newspaper Ads

• Analysis of 5G Network Security Reveals Attack Possibilities

• BEC Hits Double Digits as COVID-19 Scams Abound

• Spain dismantles top Russian-speaking organised crime network that had infiltrated public institutions

• How secure are smart contracts?

• Digging the recently leaked Chinese Communist Party database

• Facebook Runs Second Full-Page Ad Criticizing Apple, Says Opt-In Tracking Will Make the Internet Worse

• Twitter Kills Quote Tweet Prompt, Returns Retweet Action to Original Behavior

• UK Home Office chucks US firm Leidos £30m for help snooping on comms data

• How to Ensure Mobile App Security: Key Risks & Top Practises

• Passwords begone: GitHub will ban them next year for authenticating Git operations

• Want to add antivirus to your existing portfolio?

• Phobos launches Orbital, a tool for finding attack pathways and entry points into your network

• Visual Notes : SolarWinds Supply Chain compromise using SUNBURST backdoor (detected by FireEye)

• Enterprises Increase Security Spending but not Efficacy

• Identity Verification: Protecting Customer Data Across Borders

• Dutch officials say Donald Trump really did protect his Twitter account with MAGA2020! password

• Stress levels are rising, but that doesn’t have to mean more security incidents

• Apple launches Privacy Labels for increased Mobile Security

• China steals data from Google Servers

• Cybersecurity Advent calendar: Stay close to one another… Safely!

• Upcoming HomePod 14.4 Software Update to Add New HomePod Mini U1 Features

• Migration delays prevent AD-centric zero trust security framework adoption

• How employees view and manage company security

• API Security Weekly: Issue #114

• Vulnerabilities in Standalone 5G Networks Expose Users to Attacks

• 5 Key Security Challenges Facing Critical National Infrastructure (CNI)

• A new approach to scanning social media helps combat misinformation

• Cost savings and security are key drivers of MSP adoption

• Data Visibility and Management When Selecting or Working with an MSSP

• Facebook Shuts Down Fake Accounts Associated With Russia and French Military

• ISC Stormcast For Thursday, December 17th 2020 https://isc.sans.edu/podcastdetail.html?id=7296, (Thu, Dec 17th)

• CodeZero ZERO BrandCard: Enabling a secure and contactless digital identity exchange

• Proposed OPM rule would elevate the role of performance in layoff decisions

• Three million users installed 28 malicious Chrome or Edge extensions

• CloudKnox extends support for serverless functions on AWS, Azure, and Google Cloud

• WekaIO and Rancher Labs team up to help enterprises run containers and Kubernetes in production

• NETSCOUT extends its Smart Perimeter Protection to AWS

• Okera launches adaptive security plane with nScale elasticity

• Russian Hackers Breached US govt, FireEye in a Supply Chain Attack

• The Growing Importance of Endpoint Security

• Russia’s Hacking Frenzy Is a Reckoning

• DNS Logs in Public Clouds, (Wed, Dec 16th)

• Open Group and University of York join €4.5M EU TYPHON project to address hybrid big data challenges

• Twitter chooses AWS to provide global cloud infrastructure

• Semtech integrates LoRaWAN protocol on the Network Server with AWS IoT Core

• Asigra announces Cloud Backup with Deep MFA integration with Microsoft Office 365

• Russia’s Hacking Frenzy Is a Reckoning

• Focus of OT and IoT Cybersecurity in Australia’s Critical Infrastructure

• Solarwinds Vulnerabilty: Address the Basics First

• Welcome to the new JumpCloud brand!

• FireEye, GoDaddy, and Microsoft created a kill switch for SolarWinds backdoor

• Apple Responds to Facebook’s Anti-Tracking Criticism, Says Users Deserve Control and Transparency

• NS1 appoints David Coffey as chief product officer

• LogicGate secures $8.75M in growth capital to fuel international expansion and new product offerings

• Cloudhouse acquires UpGuard Core to provide instant visibility of an entire IT infrastructure

• Tufin SecureCloud now supports the Google Cloud Platform

• Top 9 Web Security Tools to Secure Your App/System

• Update on Widespread Supply-Chain Compromise

• SolarWinds’ shares drop 22 per cent. But what’s this? $286m in stock sales just before hack announced?

• Apple Maps Look Around Feature Expands to Denver, Detroit, Miami and More

• EfficientIP expands leadership team with two new senior appointments

• CUBE appoints Pedro Pereiro and Steve Pool to the executive leadership team

• Jim Pflaging joins Cloudentity board of directors

• The FireEye Breach and the SolarWinds Supply Chain Compromise Campaign

• Secure telework capabilities top DISA’s 2021 plans

• Rethinking computing for next-level problems

• Congress moves to bring back domestic electronics manufacturing

• Navy to drive out duplicative IT systems

• 2021 defense bill takes on new pilot for consumption-based solutions

• After Solar Winds, it’s time for a National Software Security Act

• GAO calls out agencies for IT supply chain risks

• DOD announces first CMMC pilot contract nominees

• Most businesses are tracking customers yet don’t tell them

• FBI says DoppelPaymer ransomware gang is harassing victims who refuse to pay

• How Apple’s new App Store privacy requirements may affect users and app developers

• Report: Facebook Is Developing Technology To Read Your Thoughts

• New IRS Form Fraud Campaign Targets G Suite Users

• Attackers Leverage IMAP to Infiltrate Email Accounts

• FireEye Identifies Killswitch for SolarWinds Malware as Victims Scramble to Respond

• Apple in Talks to Pick Up Two Animated Films Produced by John Lasseter

• Apple Seeds First Beta of macOS Big Sur 11.2 to Developers

• Doxxing: Tips To Protect Yourself Online & How to Minimize Harm

• SolarWinds hack has shaved 23% from software company’s stock this week

• IT Security News Daily Summary 2020-12-16

• Navigating continuous change with AI

• 6 remote workforce cybersecurity strategies for 2021

• SolarWinds struggles with response to supply chain attack

• US-CERT Reports 17,447 Vulnerabilities Recorded in 2020

• HPE discloses critical zero-day in Systems Insight Manager

• Did Al-Shabaab Attempt a 9/11-Style Aircraft Attack Targeting the United States?

• SUNBURST Malware and SolarWinds Supply Chain Compromise

• The Cyber Pandemic is Here – Protect Your Organization

• Microsoft will build Inventec’s private 5G networks for smart manufacturing

• AT&T Survey Surfaces Lots of 5G Security Confusion

• Likely lead generation scam targets potential Malwarebytes MSP partners

• Global Cybercrime Costs Reached $1 Trillion In 2020 – Yet Organizations Are Unprepared

• German Government Backs Bill Requiring 5G Security Pledge

• Sextortionists Deploy New Spyware

• Senior Managers Twice as Likely to Share Work Devices With Outsiders

• Corporate Credentials for Sale on the Dark Web: How to Protect Employees and Data

• DEF CON 28 Safe Mode Hack The Seas Village – Gary Kessler’s ‘Build A Raspberry AIS’

• PyMICROPSIA Windows malware steals browsing data, record audio

• Anatomy of a Linux Ransomware Attack>

• Lawmakers seek details on damage done by the SolarWinds hack

• Ryuk, Egregor Ransomware Attacks Leverage SystemBC Backdoor

• Cyberattack on Independence Systems Causes Bill-Paying Delay

• Trump Twitter Account Hacked, No Charges: Dutch Prosecutors

• Data Protection Firm BigID Raises $70 Million at $1 Billion Valuation

• SolarWinds breach highlights dangers of supply chain attacks

• Malicious Domain in SolarWinds Hack Turned into ‘Killswitch’

• Why the Weakest Links Matter

• Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

• Apple Seeds First Beta of tvOS 14.4 to Developers

• Apple Seeds First Beta of watchOS 7.3 to Developers

• Apple Seeds First Betas of iOS 14.4 and iPadOS 14.4 to Developers

• iOS 14 Now Installed on 81% of iPhones From the Last Four Years

• One Identity Research Highlights Barriers to Adoption of Zero Trust Framework

• Log right in, the water’s fine, whispers Microsoft as it adds autofill to Authenticator app

• Defending against the threats within

• Microsoft to Block Infected SolarWinds Binaries Today

• New Android and IOS Spyware Targeting Asia-Residing Users

• BrandPost: Bringing Security and Networking Together for Unified, Edge-to-Edge Protection

• Big Tech Firms Face EU Fines Of 10 Percent Of Turnover

• Check Point CloudGuard is a launch partner for AWS Outposts to Enhance AWS Hybrid-Cloud Security

• The SolarWinds Perfect Storm: Default Password, Access Sales and More

• New Evidence Suggests SolarWinds’ Codebase Was Hacked to Inject Backdoor

• Security Stories review of the year, with Fareedah Shaheed and Ben Munroe

• Russian Hack of U.S. Federal Agencies Shine Spotlight on SIEM Failures in Cybersecurity

• BigID Announces $70 Million in New Investment, Raising the Company’s Valuation to $1B

• The top 5 known vulnerabilities that are a threat to your security posture

• Vaccine Passports: A Stamp of Inequity

• Anatomy of an Attack: Evasive Zoom phishing campaign using multiple phishing techniques at once

• Ransomware payments can make OFAC issue sanctions on companies

• 3 Ways in Which AI Strengthens Cybersecurity Defense

• Leadership matters: Driving inclusion at NetApp

• Facebook Sued By Australia For Onavo Protect Data Gathering

• Robots for kids: STEM kits and more tech gifts for hackers of all ages

• Survey says: Almost half of Americans claim they own cryptocurrency

• Singapore law firm offers ‘integrated’ cybersecurity, legal assistance

• Partial Gmail outage resolved: Users reported a variety of problems Tuesday

• Sextortionist Campaign Targets iOS, Android Users with New Spyware

• Social engineering: How psychology and employees can be part of the solution

• iOS Spyware Emerges in Longstanding Extortion Campaign

• Cybersecurity employee training: How to build a solid plan

• Cloudhouse Acquires UpGuard Core to Help Customers Resolve Compliance Issues

• Lithuania Suffers “Most Complex” Cyber-attack in Years

• Refinitiv Acquires GIACT

• Leaky Databases Expose over 45 Million Medical Images and Patient Data

• SSO and MFA Are Only Half Your Identity Governance Strategy

• Why Secure Email Gateways Rewrite Links (and Why They Shouldn’t)

• Patching Still Poses Problems for Industrial Controllers, Networking Devices

• Lookout Discovers New Spyware Used to Blackmail iOS and Android Users

• EU Digital Services and Digital Markets Acts aim at setting new rules for tech giants

• How to Apply Elite Intelligence to Microsoft Azure Sentinel

• Zooming in on Zoom

• Deals: End-of-the-Year Sales Hit Apple’s iPad Pro and iPad Air With Up to $150 Off

• Apple TV App Coming to ‘Chromecast With Google TV’ Early Next Year and More Android TV Devices in Future

• Google Stadia Cloud Gaming Platform Now Available on iPhone and iPad Through Safari

• Major U.S. Publishers Join Coalition for App Fairness

• Facebook Says Apple’s Upcoming Anti-Tracking Prompt is ‘More About Profit Than Privacy’ and Backs Epic Games vs. Apple

• Debunking a New Chinese Talking Point Against U.S. Policy in the South China Sea

• Irish Twitter fine Is Seasonal Reminder That Hackers Don’t Take A Break

• What Is a Crypto Virus and How Does It Work?

• Terranova Security Gone Phishing Tournament reveals continued weak spot in cybersecurity

• Customer Guidance on Recent Nation-State Cyber Attacks

• Amazon Urges Rethink On JEDI Contract Award

• The SolarWinds and US government breach is not a marketing opportunity

• SolarWinds Removes Customer List From Site as It Releases Second Hotfix

• Cybercriminals Steal Millions by Spoofing Thousands of Mobile Devices

• Revisited After a Decade: The Optimist’s Cybercrime Predictions for 2011

• Australia Watchdog Sues Facebook Over ‘Misleading’ VPN App

• Society at Increasingly High Risk of Cyber-Attacks

• Twitter Fined €450,000 Under GDPR Over ‘Protected’ Settings Bug

• Highly Evasive Attacker Leverages SolarWinds Supply Chain to Compromise
  Multiple Global Victims With SUNBURST Backdoor

• New 5G Network Flaws Let Attackers Track Users’ Locations and Steal Data

• Ransomware Attackers Using SystemBC Malware With RAT and Tor Proxy

• JumpCloud Introduces Conditional Access Policies to its Directory Platform Making it Easier for Businesses to Adopt a Zero Trust Security Model

• Review: Boss Audio’s New Head Units Deliver Wireless CarPlay for Just $400

• Apple Says Employee Giving Program Has Raised Nearly $600 Million Since 2011

• Experts Reacted On China suspected of Spying on Americans via Caribbean Phone Networks

• Security Expert Re: US-CERT Notes Record Number Of Vulnerabilities For 4th Year In A Row

• SolarWinds Orion Breach — BitSight Analysis Part 1

• Perfect strangers: How CIOs and CISOs can get along

• Windows 10X – Microsoft’s newest OS on track for Spring 2020 release

• E-Commerce Skimming is the New POS Malware

• Join 1/2 Day Workshop : How To Perform Penetration Testing On Industrial Control Systems And Operational Technology Safely

• Apple now shows you all the ways iOS apps track you

• FICO launches cryptocurrency trade risk solution for banks

• What is Geocoding? — How to Find Coordinates of An Address

• Sextortion campaign uses Goontact spyware to target Android and iOS users

• Zodiac Killer Cipher Solved

• Facebook Takes Out Full-Page Newspaper Ads to Attack Apple’s iOS Privacy Changes

• Organisations May Fail to Prepare Employees for Cybersecurity Threats

• SolarWinds hackers’ capabilities include bypassing MFA

• What Does Risk-Based Cybersecurity Reporting Look Like?

• Workforce Study: Reviewing Cybersecurity’s Pandemic Response

• Can you trust the Google Play Store?

• Facebook To Move UK Users To US Data Agreements

• Detecting Fraud – Every Step of the Way

• Hack May Have Exposed Deep US Secrets; Damage Yet Unknown

• Ginp Banking Trojan Exploits Covid-19 Fears

• Moving to a SaaS Model – A Customer Service Perspective

• How to Assign Primary Users to Individual HomePods in the Same Household

• Comment: China Suspected Of Spying On Americans Via Caribbean Phone Networks

• Goontact spyware targets Android and iOS users

• Gmail suffers two outages in one day

• UK proposes new powers for comms regulator to legally unleash avenging hordes on security-breached telcos

• RAM-Generated Wi-Fi Signals Allow Data Exfiltration From Air-Gapped Systems

• NCSC Names Academic Centers of Excellence in Cybersecurity Education

• Microsoft Set to Block SolarWinds Orion Binaries

• Third-Gen AirPods With AirPods Pro Design to Cost $200 and Launch in First Half of 2021

• Expert Reacted On Apple Launches Privacy Labels On Apps

• Lookout Exposes New Spyware Used By Sextortionists To Blackmail iOS And Android Users

• SolarWinds Breached To Infect Multiple US Companies/Gov Networks – Expert Comment

• Face verification and multi-user SMS added to SingPass’s 2FA

• Do you know the Impact of COVID-19 on the Security Threat Landscape?

• Privacy, data protection regulations clamp down on biometrics use

• 14 tips to prevent business email compromise

• California Asks Court To Force Amazon To Comply With Coronavirus Probe

• Identifying E-Card Scams | Avast

• Global Policies Announcement | Avast

• Breach Trends and Insights-Report December 2020

• FCW Insider: Dec. 16

• New Account Fraud Surges 28% in the UK as Global Rates Drop

• NCSC Names Academic Centres of Excellence in Cybersecurity Education

• SolarWinds’ dominance became a liability in sprawling spy campaign

• Apple Patches Tens of Code Execution Vulnerabilities in macOS

• EU, Britain to Toughen Rules, Fines for Tech Giants

• Total Published CVEs Hits Record High for Fourth Year

• Police detained hackers who stole more than 20 million rubles

• Microsoft partnered with security firms to sinkhole the C2 used in SolarWinds hack

• AirPods Max Now Available for Same-Day Pickup at Apple Stores in Some European Countries Including France, Italy, Spain, and UK

• Your ship comms app is ‘secured’ with a Flash interface, doesn’t sanitise SQL inputs and leaks user data, you say?

• Singapore adds face verification, multi-user SMS to SingPass 2FA

• XDR Has Promise – and a Fair Share of Risks

• Looking for adding new detection technologies in your security products?

• Chinese chipmaker SMIC falls 5% as co-CEO plans to resign and it faces removal from MSCI indexes

• How to leak data via Wi-Fi when there’s no Wi-Fi chip: Boffin turns memory bus into covert data transmitter

• SolarWinds Issues Second Hotfix for Orion Platform Supply Chain Attack

• Security automation: Time for a new playbook

• New Goontact spyware discovered targeting Android and iOS users

• 45 million medical images left exposed online

• Accelerated cloud migration may leave business data insecure

• Massive mobile banking cyber fraud discovered by IBM

• Twitter faces £410,000 penalty from Ireland

• SolarWinds said no other products were compromised in recent hack

• From a Single Pane of Glass, to Functional Dashboards to Manage Cyber Risk

• Researchers develop tool that automates device programming in the IoT

• 35% of organizations believe the NIS Directive expectations are unclear

• CipherCloud Chronicles 8: CipherCloud DRM (Handing The Right Keys To The Right Person)

• Medical scans of millions of patients exposed online

• Trend Micro Cloud One – File Storage Security: Designed to mitigate threats across the cloud

• ISC Stormcast For Wednesday, December 16th 2020 https://isc.sans.edu/podcastdetail.html?id=7294, (Wed, Dec 16th)

• 42Crunch unveils new IDE OpenAPI editing plugins for Eclipse, IntelliJ, PyCharm

• DigiCert now enables manufacturers to embed certificates on chips prior to manufacturing

• Facebook dragged to court by ACCC over deceptive VPN conduct allegations

• Microsoft to quarantine SolarWinds apps linked to recent hack starting tomorrow

• Facebook Closes Disinformation Accounts Linked to French Military

• Tufin Adds Support for Google Cloud

• Mindtree launches Microsoft go-to-market business unit, accelerates cloud business

• ISACA Blockchain Framework and Guidance: Helping enterprises adopt the emerging tech

• WatchGuard’s Firebox M series appliances provide simplified, extensive and flexible security

• How to prepare for quantum computing cybersecurity threats

• PyMICROPSIA Windows malware includes checks for Linux and macOS

• Bastille awarded a Phase 5 OTA from DHS

• Arrow Electronics Security Starter Kit helps IoT device companies build and deliver secure connected devices

• ADVA unveils set of edge and access network synchronization devices for next-gen apps

• The EU’s Digital Markets Act: There Is A Lot To Like, but Room for Improvement

• ContainerDrip, Another Example of Why HTTP Basic Authentication Is Flawed

• Telework gets Air Force IT seal of approval

• New bill would shed light on “midnight regulations”

• Gmail down again? Users are reporting a variety of problems

• We’re not saying this is how SolarWinds was backdoored, but its FTP password ‘leaked on GitHub in plaintext’

• Twitter Fined in Irish GDPR Action

• Concerns Run High as More Details of SolarWinds Hack Emerge

• Hands-On With the AirPods Max

• Entrust nShield HSMs delivers enhanced security to the Mirantis Kubernetes Engine

• How to connect all the dots in a complex threat landscape

• Revisiting APT1 IoCs with DNS and Subdomain Intelligence

• Longtime agency watchdog to head CIGIE

• Gmail flaking out again

• Why it’s SASE and zero trust, not SASE vs. zero trust

• Fourth Record Year in a Row for Vulnerabilities

• Apple TV+ Series ‘Servant’ Renewed for Season 3

• Google confirms its second outage, addresses problems with Gmail

• IT Security News Daily Summary 2020-12-15

• 2020 – A year of Ups and Downs

• Zerologon vulnerability: How federal teams can secure endpoints

• NSC invokes 2016 directive to respond to SolarWinds hack

• It takes a lot of energy for machines to learn – here’s why AI is so power-hungry

• Chicago raises its cloud tax, but remote work may limit revenue gains

• How COVID-19 has changed the conversation between MSPs and IT leaders

• Firefox Patches Critical Mystery Bug, Also Impacting Google Chrome

• Gitpaste-12 Worm Widens Set of Exploits in New Attacks

• Easy WP SMTP Security Bug Can Reveal Admin Credentials

• Subway Sandwich Loyalty-Card Users Suffer Ham-Handed Phishing Scam

• Third-Party Risk Management: How to get your vendors on board

• Bugcrowd Study Reveals 65% Increase in Discovery of High-Risk Vulnerabilities in 2020 Amid COVID-19 Pandemic

• Flaws in Medtronic MyCareLink can allow attackers to take over implanted cardiac devices

• 5 Biggest Ransomware Attacks of All Time

• IBM Trusteer Exposes Massive Fraud Operation Facilitated by Evil Mobile Emulator Farms

• Microsoft and industry partners seize key domain used in SolarWinds hack

• Ohio Couple Sold Secrets to China

• The FTC Orders Facebook To Explain How They Collect User Data

• Medical Imaging Leaks Highlight Unhealthy Security Practices

• 95% of Organizations Admit To at Least One Successful Application Exploit in Past Year

• How the SolarWinds Hackers Bypassed Duo’s Multi-Factor Authentication

• Periscope App Shutting Down in March as Most Functionality Has Transitioned to Twitter

• Egypt’s Crackdown on EIPR: Instrumentalizing Counterterrorism to Silence Dissent

• Artemis Accords: A Step Toward International Cooperation or Further Competition?

• Ensuring customers are protected from Solorigate

• CVSS (Common Vulnerability Scoring System)

• Group Behind SolarWinds Hack Bypassed MFA to Access Emails at US Think Tank

• Twitter Fined Half a Million Dollars for Privacy Violation

• California Hospital Notifies 67k Patients of Data Breach

• Nowhere to Hide: Don’t Let Your Guard Down This Holiday Season

• 45M Medical Imaging Files Left Accessible Online

• Year In Review: Ransomware

• In an unprecedented year, this healthcare organization doesn’t miss a beat with SecureX

• AirPods Max Customer Impressions: Premium Design and Competitive Sound Quality, Can Feel Heavy on Ears and Smart Case is Useless

• Halide Developer Explains How Apple’s ProRAW Option Works on iPhone 12 Pro

• New Windows Trojan Steals Browser Credentials and Outlook Files

• Twitter Fined by EU Data Protection Watchdog For GDPR Breach

• Office 365 Credentials Under Attack

• Struggling Cruise Company Suffers Apparent Ransomware Attack

• Twitter scores a first for big tech after being fined €450,000 by Ireland’s data watchdog for violating the EU’s GDPR

• Linux attacks are rising: Why I’m not concerned

• Why I’m not concerned about the rise in Linux attacks

• DEF CON 28 Safe Mode Aerospace Village – Harshad Sathaye’s ‘A Deeper Dive Into ILS And ADS B Spoofing’

• XKCD ‘I Just Don’t Trust Them’

• Molerats APT: New Malware and Techniques in Middle East Espionage Campaign

• Signal App Crypto Cracked, Claims Cellebrite

• Apple Releases 14.3 Software for HomePod and HomePod Mini

• Photographer Austin Mann Demos iPhone 12 Pro ProRAW Capabilities

• New Research: 2020 Vulnerabilities on Target to Match or Exceed Last Year

• 45 Million Medical Images Left Exposed Online

• The lines between corporate and tech strategy continue to blur

• SolarWinds Hack Could Affect 18K Customers

• Apple Releases Security Updates for Multiple Products

• Q&A: What is Credential Stuffing?

• Norwegian cruise company Hurtigruten was hit by a ransomware

• macOS Big Sur 11.1 Enables Full-Screen iPhone and iPad Apps on M1 Macs

• EU Introduces Strict Rules on Big Tech Companies to Promote Competition and Protect Users

• Apple Shares Trailer for Billie Eilish Documentary ‘The World’s a Little Blurry’

• AT&T Has AirPods Max in Stock in Silver and Space Gray for Delivery Later This Week

• Microsoft’s 365 Mac Apps Gain Native M1 Support

• Atlantica Digital and NanoLock Security Partner to Protect Tens of Millions of Smart Meters and Connected Devices in Italy and throughout Europe

• Hurtigruten suffers a serious Ransomware Attack

• Security vs. User Experience (87% Say User Experience Is What Counts)

• BrandPost: Fortinet Ensures Secure Cloud Migration for European Real Estate Company

• BrandPost: Tis the Season for Cyber Scams

• Russian hackers also hacked Department of Homeland Security – Report

• 8 Reasons to Try Intezer Protect Community Edition

• Millions of Unpatched IoT, OT Devices Threaten Critical Infrastructure

• Agent Tesla Keylogger Gets Data Theft and Targeting Update

• Businesses Often Do Not Inform Customers of Tracking

• New Ransomware MountLocker Uses Extortion and Data Exfiltration

• Future Apple Watch Could Gain Touch ID and Under-Display Camera

• Firefox Updated With Native Support for M1 Macs, Mozilla Touts ‘Dramatic Performance Improvements’

• SASE: A beginner’s guide

• Myth or Truth: Can I migrate my data without disruption?

• Online Safety Bill Could Fine Firms 10 Percent Of Turnover

• Part II: Secure Coding Made Easy: 5 Tips to Integrate Security into Development

• How understanding cognitive science can strengthen cybersecurity’s weak links

• Securing the New IT/OT Reality

• Vulnerabilities in Medtronic Product Can Allow Hackers to Control Cardiac Devices

• How to develop a cybersecurity strategy: Step-by-step guide

• Naked Security Live – How to avoid “big brand” email scams

• Millions of Medical Imaging Files Freely Accessible on Unprotected Servers

• #BSEC: Staying Alert to the Growing Dangers of Cybercrime

• The Private Sector Needs a Cybersecurity Transformation

• Digital Defense Joins Microsoft Intelligent Security Association

• DigiCert Solves Challenge of PKI Management in the IoT Device Supply Chain and at the Edge with New IoT Device Manager Release

• 18k Customers Downloaded The SolarWinds Backdoored Software

• Hospitals Are Leaving Millions Of Sensitive Medical Images Exposed Online

• Spotify Notifies Customers Of Breach, Files Under CCPA

• DHS Among Those Hit In Sophisticated Cyberattack By Foreign Adversaries

• Apple Shares Helpful Tips for AirPods Max and Fitness+, Confirms AirPods Max Aren’t Water Resistant

• Twitter Fined 450,000 Euros Over Public Tweet Bug

• Academics turn RAM into Wi-Fi cards to steal data from air-gapped systems

• Programming language security: These are the worst bugs for each top language

• Vendors Respond to Method for Disabling Their Antivirus Products via Safe Mode

• Phishing tricks that really work – and how to avoid them

• FTC and Law Enforcement Agencies Partner up against Fraudulent Income Schemes Targeting Consumers

• Stopping Active Attacks with Penalty Box

• Smartphones are not the problem with MFA security

• Auth0 Launches Adaptive MFA to Increase Security and Reduce Friction for End Users

• 42Crunch Publishes New OpenAPI Security Audit Plugins for Eclipse, IntelliJ, PyCharm

• cPanel and WHM Vulnerability Easy to Exploit With Dark Web Credentials

• Expert Insight On Landmark Twitter Fine

• DHS Hacked As Part Of Massive Cyberattack On Federal Agencies

• Threat profile: Egregor ransomware is making a name for itself

• SolarWinds attack explained: And why it was so hard to detect

• Hospitals are leaving millions of sensitive medical images exposed online

• Ransomware and IP Theft: Top COVID-19 Healthcare Security Scares

• Cybersecurity Assessment Firm Outpost24 Raises €19 Million

• DHS, CISA and NCSC Issue Warnings After SolarWinds Attack

• OffSec 2020 Recap

• Deals: Get the 44mm GPS Apple Watch SE for $249.99 on Amazon ($59 Off, Lowest Price)

• AirPods Max Now Available With Same-Day Pickup at Select Apple Stores

• European Commission’s Proposed Digital Services Act Got Several Things Right, But Improvements Are Necessary to Put Users in Control

• NCSC: Be Cyber Aware, especially during the Christmas season

• Patch Management in IT and OT Environments

• The StorageGRID SG100 appliance for FabricPool: Ideal load balancer for entry-level deployments

• StorageGRID load balancer: Simplicity, performance, and advanced QoS

• Secure multitenancy for object storage with NetApp StorageGRID

• New StorageGRID appliance unlocks the full power of on-premises object storage for smaller environments

• Apple Launches Privacy Labels For App Store Apps

• Vast Majority of OT Devices Affected by Urgent/11 Vulnerabilities Still Unpatched

• Cruise line operator Hurtigruten crippled in ransomware attack

• The Zodiac Killer’s Cipher Is Finally Cracked After 51 Years

• SecZetta Adds Ronen Zoran to Board of Advisors

• 2021 Cybersecurity Predictions: Our Experts Weigh In

• Another Massive Russian Hack of US Government Networks

• How to Reset AirPods Max to Factory Settings

• Apple Boosts iPhone Orders By 30% for First Half of 2021 Following Strong Demand

• Top 10 in-demand cybersecurity skills for 2021

• SolarWinds supply chain attack explained: Why organizations were not prepared

• Oracle Joins California Leavers, Relocates To Texas

• US Treasury, Commerce Departments Hacked

• Pornhub suspends over 10 million videos to eradicate illegal content

• Great gift for the techie for under $15: PortaPow Power Monitor V3

• Government Threatens Tech Firms with Fines of 10% of Turnover

• Spotify Resets Passwords After Leaking User Data to Partners

• #BSEC: The Continuous Evolution of Cyber-Attacks

• Hackers Dropping Malware via Free WinZip Trial Popup Vulnerability

• Wormable Gitpaste-12 Botnet Returns to Target Linux Servers, IoT Devices

• Definitive Technology’s Studio 3D Mini Sound Bar System Supports Atmos, DTS:X, and AirPlay 2

• Signal Private Messenger Rolls Out Encrypted Group Video Calls Feature

• Department of Homeland Security hacked in cyberattack

• Dataset of 20 million malware samples exposed online

• Over 45 Million Medical Images available online

• Rumour has it that WhatsApp data can be hacked by spyware, but they deny these allegations

• 45 million medical scans from hospitals all over the world left exposed online for anyone to view – some servers were laced with malware

• PgMiner Botnet Attacks PostgreSQL Databases to Install a Cryptocurrency Miner

• Russian hackers broke into the systems of the United States Department of the Treasury and Department of Commerce

• Download the Essential Guide to Response Automation

• Nikkei: Apple Working on New Apple TV for Release Next Year

• More Than 45 Million Medical Images Openly Accessible Online

• U.S. Government Victimized By Russian Cyberattacks – Expert Commentary

• U.S. Homeland Security and businesses respond to suspected Russian hack

• ‘PGMiner’ Crypto-Mining Botnet Abuses PostgreSQL for Distribution

• SolarWinds: Our Office 365 Emails Were Compromised

• Nearly 18,000 SolarWinds Customers Installed Backdoored Software

• Kaspersky Security Bulletin 2020. Statistics

• Analyzing FireEye Maldocs, (Tue, Dec 15th)

• What to Do if You’re Not Seeing Your Apple Fitness+ 3-Month Free Trial Offer

• Tools for Safe and Speedy Browsing | Avast

• Survey: 78% of Retailers Took Additional Security Precautions Ahead of the 2020 Holidays

• Unifying Security and Applications Through Identity

• Application security testing is not just buzzwords

• Exfiltrating Data from Air-Gapped Computers via Wi-Fi Signals (Without Wi-Fi Hardware)

• Who Watches the Watchers, Italian Style – Insider IP Theft at Leonardo

• Network Discovery Using AppViewX

• SoReL-20M Sophos & ReversingLabs release 10 million disarmed samples for malware study

• Apple addressed multiple code execution flaws in iOS and iPadOS

• Secure enclave protection for AI and ML

• Flaws with PoS Terminals Let Attackers Execute Arbitrary Code

• Evolution of Law Enforcement is Driving Changes Cryptocurrency

• Countries that retaliate too much against cyberattacks make things worse for themselves

• More than half of organizations don’t have an insider risk response plan

• Time to invest in cyclical travel stocks: Asset management CEO

• The Binary Security story: A cybersecurity startup run out of Darwin

• Fitzsimmons claims trust is always factored into government-built tech systems

• Lessons from Teaching Cybersecurity: Week 11

• High-risk vulnerabilities discovery increased 65% in 2020

• 42% of security leaders said the pandemic has changed their cybersecurity priorities

• Data of over 2 million members of Communist Party China leaked in Cyber Attack

• Google down outage not because of cyber attack

• How scammers target PayPal users and how you can stay safe

• Finding SUNBURST Backdoor with Zeek Logs & Corelight

• Solar flare: Why the SolarWinds supply chain attack matters

• SolarWinds: Hey, only as many as 18,000 customers installed backdoored software linked to US govt hacks

• 2020-12-14 – Quick post: Hancitor infection with Cobalt Strike and Ficker Stealer

• ISC Stormcast For Tuesday, December 15th 2020 https://isc.sans.edu/podcastdetail.html?id=7292, (Tue, Dec 15th)

• FACEPOINT enhances NICE Actimize’s AML screening and KYC solutions

• CipherCloud helps prevent unintended cloud misconfigurations that lead to data loss

• Congress moves to bring back domestic microelectronics manufacturing

• FCW Insider: Dec. 15

• ASD leaves TikTok ban decisions in departmental hands

• Over 4,000 privacy complaints made about Aussie telcos in FY20

• Hunting for SolarWinds Orion Compromises

• How to Download the Fitness+ App on iPad

• AirPods Max Begin Arriving to Customers in New Zealand and Australia

• SoftServe achieves AWS Migration Competency status for helping businesses move to AWS

• Authorization Code Grant Flow With Spring Security OAuth 2.0

• 5 building blocks of a well-developed security culture

• Risks You Need to Consider When Using SaaS Providers

• Serverless, contenedores y microservicios: La nueva era de la optimización

• The SolarWinds Supply Chain Attack and the Limits of Cyber Hygiene

• iOS 14.3 Features: New Apple TV+ Tab, AirPods Max Support, ProRAW for iPhone 12 and More

• iOS 14.3 Lets Siri Replicate Sounds Like Lion Roaring

• Lawfare Live: Biden’s Emerging National Security Team

• The Latest Skirmish in the Transatlantic Data Wars

• The SolarWinds Breach: Why Your Work Computers Are Down Today

• Protecting Your Rights to Understand and Innovate on the Tech in Your Life

• Why Cheniere energy stock is fueled for gains

• Major government agencies get hacked

• Report: Facebook Employees Slam The Company’s Policies On The Way Out The Door

• Threat Advisory: SolarWinds supply chain attack

• My Best Buy Members With Apple Watches Purchased Before September 15 Eligible for Extra Free Month of Fitness+

• Apple Website Highlights Workout Equipment Used in Fitness+ Videos

• Visa and Mastercard are Trying to Dictate What You Can Watch on Pornhub

• IT Security News Daily Summary 2020-12-14

• DHS tests tech to spot rogue wireless devices

• What is a neural network? A computer scientist explains

• Government file sharing: What IT managers should know

• DHS testing portable kit to uncover rogue wireless devices

• CISA: Unplug systems using compromised net monitoring tool

• 5 essential programming languages for cybersecurity pros

• 18,000 Organizations Possibly Compromised in Massive Supply-Chain Cyberattack

• No One Knows How Deep Russia’s Hacking Rampage Goes

• Vulnerability Summary for the Week of December 7, 2020

• Tracing the SolarWinds exploit upstream

• SolarWinds confirmes 18,000 customers may have been impacted

• Apple Updates Final Cut Pro, iMovie, Clips, and Compressor Apps With Streamlined YouTube/Facebook Sharing Function

• Apple Fitness+ Appears to Be Incompatible With AirPlay

• Apple Fitness+ Works on iPhone and iPad Without an Apple Watch

• How to Start Workouts In Apple Fitness+

• Expert Reacted On US Treasury And Commerce Departments Targeted In Cyber-attack

• One Million US Dental Patients Impacted by Data Breach

• Intel’s AI Developer Habana Labs Suffered Pay2Key Ransomware Attack

• WinZip Trial Popup Vulnerability That Allowed For Malware Attacks – Update Now!

• The new Wondershare PDFelement with added features

• Spotify Changes Passwords After Another Data Breach

• Kaspersky: Gamers face high and ongoing risk of identity theft and bullying

• Apple’s App Stores Open New Privacy Window for Customers

• Pornhub Removes All Unverified Content

• EDR. NDR? XDR! … is it more than just marketing?

• Should There Be Limits on Persuasive Technologies?

• How Regulation Is Impacting 5G Security in Europe

Generated on 2020-12-20 23:58:24.367870