IT Security News Daily Summary 2020-01-23

• Sophos adds mobile threat defense app to Intercept X line

• 5 Reasons K-12 School Districts Should Replace Active Directory

• Prominent dating & menstrual help apps selling your data to 3rd parties

• FFIEC IT Handbook Updates: Business Continuity Is 2020 Focus

• Sonos Backtracks: Legacy Devices Will Get Updates After May

• THSuite data leak exposes cannabis users information

• Windows 7 End of Life: What Organizations Are Using the Now Outdated OS?

• TrickBot Now Harvests Windows Active Directory Credentials

• Threat Analysis Unit (TAU) Threat Intelligence Notification: Snatch Ransomware

• How DNS-Layer Security Can Improve Cloud Workloads

• 5G promises faster speeds and greater security risks

• How to protect previous Firefox tabs from being hijacked

• How to Automate Vulnerability Patching and Bolster CVSS Scoring

• New York state wants to ban government agencies from paying ransomware demands

• FDA issues cybersecurity warning on GE medical equipment that monitors patients

• WSJ Profiles ‘The Blevinator,’ Apple’s VP of Procurement Who Handles Supplier Negotiations

• Inside Pwn2Own’s High-Stakes Industrial Hacking Contest

• 3 SecOps Strategies To Enable Your Smart People To Focus on Smart Things

• Cisco Patches Critical Vulnerability in Network Security Tool

• What Is Threat Management? Common Challenges and Best Practices

• Threat Analysis Unit (TAU) Technical Report: The Prospect of Iranian Cyber Retaliation

• Maloney, Scott press EEOC to clarify proposed official time policy

• prominent dating & menstrual help apps selling your data to 3rd parties

• Bipartisan Coalition Bill Introduced to Reform NSA Surveillance

• Citrix Releases Security Updates for SD-WAN WANOP

• Stephanie Link: Fortinet’s product portfolio has broadened over the years

• DHS Warns of Increasing Emotet Risk

• Authentication vs. digital identity: What’s the difference?

• How to install the Windows Server 2019 VPN

• Threat Analysis Unit (TAU) Threat Intelligence Notification: SatanCryptor Ransomware

• NSA Offers Guidance on Mitigating Cloud Flaws

• Breaking down a two-year run of Vivin’s cryptominers

• WhiteHat Provides Free Vulnerability Discovery Services to Gov’t Agencies

• Apple Revamps Jobs Site With New Design and Video Featuring Animated Apple Logos

• Microsoft misconfiguration exposed 250M customer service records

• Google finds security flaws in Apple’s web browser

• Critical, Unpatched ‘MDhex’ Bugs Threaten Hospital Devices

• Kids and Code: Object Oriented Programming with Code Combat

• US Tells UK It Still Has ‘Significant Concerns’ Over Huawei

• Buchbinder Car Renter Exposes Info of Over 3 Million Customers

• Vulnerabilities Found in GE Healthcare Patient Monitoring Products

• Deconstructing Web Cache Deception Attacks: They’re Bad; Now What?

• Critical MDhex Vulnerabilities Shake the Healthcare Sector

• MDhex vulnerabilities impact GE patient vital signs monitoring devices

• Apple Shares Trailer for ‘Carpool Karaoke’ Season 3

• CloudKnox Security Raises $12 Million in Funding

• Microsoft Leaks 250M Customer Details in Azure Fat-Finger Faux Pas

• U.S. Gov Agency Targeted With Malware-Laced Emails

• Mom Finds Pictures Of Her Kids On A Stranger’s Facebook Profile

• Shlayer, No. 1 Threat for Mac, Targets YouTube, Wikipedia

• Targeted Phishing Campaign Leverages Death of Iranian General Qasem Suleimani

• Severe Vulnerabilities Discovered in GE Medical Devices

• MDhex Critical Vulnerabilities Shake the Healthcare Sector

• Supporting the VA’s high reliability organization journey through data

• Union looks to set scientific integrity principles in EPA contract

• Insecure configurations expose GE Healthcare devices to attacks

• January 2020 Web Server Survey

• DC Water taps AI for sewer line assessments

• Ransomware attacks are causing more downtime than ever before

• Does strategic planning help organizations?

• Iran-Linked PupyRAT backdoor used in recent attacks on European energy sector

• How Iran’s military outsources its cyberthreat forces

• The Public Domain Is the Rule, Copyright Is the Exception

• Someone is uninstalling the Phorpiex malware from infected PCs and telling users to install an antivirus

• Deepfakes laws and proposals flood US

• The Joy of Tech® ‘The Fine Print On Apple’s Privacy’

• Did Saudi Crown Prince use Israeli spyware to hack Jeff Bezos’s iPhone?

• Is Your SAN Healthy? Take the SAN Health Check to Find Out!

• Geopolitical tensions are high, putting global economy at risk, UN Secretary-General says

• What We Know, And Don’t, About the Alleged Bezos Phone Hack

• Livestream: Senate Impeachment Trial Day 3

• Founder of DDoS Mitigation Company Admits to Paying Threat Actors to Carry Out DDoS Attacks

• How to Protect Your Business from Ransomware

• TrickBot Starts the Year off With New Tricks

• Introducing ‘The Report, Season 2: The Impeachment’

• Sodinokibi Operators Threaten Another Victim

• Apple Dropped Plan For Encrypting Backups After FBI Complained

• BrandPost: Security Performance in the Age of Digital Transformation

• Trending Client-Side Innovations In Malvertising Payloads

• Microsoft and Zscaler help organizations implement the Zero Trust model

• Geopolitical tensions are high and putting global economy at risk, UN Secretary-General says

• DECEMBER 2019 AppSec Intelligence Report

• Pornhub launches Tor mirror site with encryption to ensure porn-viewing privacy

• Azure Security Benchmark—90 security and compliance best practices for your workloads in Azure

• Cisco Releases Security Updates

• Twitter Demands AI Company Stops Collecting Faces

• US Cybersecurity Agency Issues Emotet Warning

• Suspected Iranian Hackers Target European Energy Companies

• Amazon Engineer Leaks Encryption Keys To Public GitHub Repo

• Security — What if We All Speak to Each Other?

• Phishing Campaign Leads To UPS Store Data Breach

• Ransomware: The average ransom payment doubled in just three months

• Why many small and midsized businesses remain vulnerable to cyberattack

• US County Suffers Two Cyber-attacks in Three Weeks

• Get a Royal Flush of Benefits with Memory-Accelerated FlexPod

• EFF Activists To Demonstrate Against Sell Out of .ORG to Private Equity at Los Angeles Protest

• Cisco Warns of Critical Network Security Tool Flaw

• Microsoft Exposes 250M Customer Support Records On Leaky Servers – Experts Comments

• Sodinokibi Ransomware attack on GEDIA

• LastPass Mistakenly Removes Extension from Chrome Store, Causes Outage

• Over Half of Organizations Were Successfully Phished in 2019

• We need to make it even easier for UK terror cops to rummage about in folks’ phones, says govt lawyer

• The Emotet Threat Group Has Military Emails, and Phishing Campaigns are Spiking

• SECURITY ALERT: Microsoft Accidentally Exposed 250 Million Customer Support Records

• Ryuk Ransomware Hit Multiple Oil & Gas Facilities, ICS Security Expert Says

• IoC Scanner shows if Citrix appliances have been compromised via CVE-2019-19781

• Microsoft Exposes 250 Million Customer Records: What to Do

• Citrix: These are new patches for your vulnerable servers

• Cryptomining Malware Vivin Uses Pirated Software as Attack Vector

• Weathering the Privacy Storm from GDPR to CCPA & PDPA

• Five Microsoft Elasticsearch Servers with Private Data for 250 Million People Found Unsecured Online

• Legacy TLS is on the way out: Start deprecating TLSv1.0 and TLSv1.1 now

• Elections Globally Are Under Threat. Here’s How to Protect Them

• Russian Bank reminds about the danger of transferring personal data to someone

• Malware spotlight: Nodersok

• Apple Fixed Tracking Flaws In Safari, But Google Director Disagrees

• Data Security Startup Privafy Emerges From Stealth Mode

• MITRE ATT&CK: Disk content wipe

• ‘Apple Watch Connected’ Program Will Offer Rewards for Working Out at Participating Gyms

• Palantir CEO Alex Karp defends his company’s relationship with government agencies

• Looking for silver linings in the CVE-2020-0601 crypto vulnerability

• CloudKnox raises $12 million to protect cloud infrastructure from insider risks

• Switching from Other Fields to Cybersecurity Is Profitable

• Key Global Takeaways From India’s Revised Personal Data Protection Bill

• The almost-secret hidden iPhone switch that blocks spam text messages and notifications

• The Importance of Training Your Sales Team | Avast

• Canadian Teenager Charged and Arrested for $50 Million Cryptocurrency Theft

• Glass Class: Finding Shadow IT

• Mastercard Opens New Center and Intelligence in Canada

• Ooh, watch out Google. You’ve got competition. Verizon has a new ‘privacy-focused’ search engine

• Google to Apple: Safari’s privacy feature actually opens iPhone users to tracking

• Iran-Linked RAT Used in Recent Attacks on European Energy Sector

• Suspected Iranian hacking campaign targets European energy companies

• Mastercard Opens New Intelligence and Cyber Center in Vancouver, Canada

• Comments On Thousands Of WordPress Sites Hacked To Fuel Scam Campaign

• Experts On Findings: Researchers Create OT Honeypot, Attract Exploits And Fraud

• Amazon Files Motion To Halt Microsoft Work On Pentagon JEDI Contract

• Experts On UPS Reveals Phishing Attack Might Have Exposed Customer Information

• The DevOps Evolution: What It Means for PKI

• The Decade Ahead for Cybersecurity

• Security Implications: Seattle-Area Voters To Vote By Smartphone In 1st For U.S. Elections

• Jeff Bezos’ Phone Hacked By Saudi Crown Prince – Expert Comments

• StackRox on security for Google Anthos

• Apple Abandoned Plans for Encrypted iCloud Backup after FBI Complained

• Apple Likely to Drop Adobe Flash Support in Next Version of Safari

• Microsoft exposed 250 million customer support records

• BitPyLock Ransomware Evolves Its Tactics

• It’s time to patch your Cisco security solutions again

• Cisco: Patch this critical firewall bug in Firepower Management Center

• Serious Vulnerabilities Expose Honeywell Surveillance Systems to Attacks

• Shlayer Trojan Accounted for 30 Percent of Detections for macOS in 2019

• Google: Flaws in Apple’s Private-Browsing Technology Allow for Third-Party Tracking

• Workday CEO Aneel Bhusri in Davos on his vision for company growth and more

• UN report alleges that Saudi crown prince hacked Jeff Bezos’s phone

• AMD patches critical vulnerabilities in its Radeon graphics cards

• Maze Ransomware Not Getting Paid, Leaks Data Left and Right

• Euro Cup and Olympics Ticket Reseller Hit by MageCart

• Over 2000 WordPress Sites Hit by Malicious Redirects

• What is cryptojacking? How to prevent, detect, and recover from it

• A Complete Guide to Hacking the 2020 RSA Conference

• Sodinokibi Ransomware Threatens to Publish Data of Automotive Group

• How the Tour de France secures its broadcast from disruption

• Apple allegedly made nice with FBI by dropping iCloud encryption plan

• Securing data and maintaining compliance in ServiceNow

• Head in the Clouds: Scaling Business Workloads Without Scaling Risk

• Thousands of WordPress Sites Hacked as Part of a Scam Campaign

• Sonos Angers Owners Again With Update Cancellation

• Maze Ransomware Going Unpaid, Leaking Data Left and Right

• Sonos’s tone-deaf legacy product policy angers customers

• UPS Store Subject to a Data Breach After Phishing Scam

• Here’s how international collaboration led to arrest of child sexual abuser in Portugal.

• Sodinokibi Ransomware Threatens to Publish Data Belonging to an Automotive Group

• FBI Warns of Fake Jobs Used by Hackers to Steal Users’ Personal Information

• Microsoft Disclose a Security Breach Affecting One of Their Own Customer Support Databases

• Microsoft Leaves 250M Customer Service Records Open on the Web

• European Energy Sector Organization Targeted by PupyRAT Malware in Late 2019

• Google Finds Security Vulnerability in Apple’s Highly-Praised Privacy Technology

• US Presses France for ‘Strong Security Measures’ Against Huawei

• Cybercriminals using fake job listings to steal money, info from applicants

• FBI issues warning about lucrative fake job scams

• Data on 30,000 Cannabis Users Exposed in Cloud Leak

• 2019 Cyber Attacks Statistics

• Shlayer Trojan attacks one in ten macOS users

• Microsoft Confirms Breach Of 250 Million Customer Service Records

• UN Wants US Probe into Bezos-Saudi Phone Hack

• ClarkeModet: industrial and intellectual property protected with Panda Security

• UkeySoft Unlocker Review: Best Tool to Unlock Apple ID & Screen Lock

• Cocaine caravans immobilised: 12 arrests in big bust against drug traffickers in the Canary Islands

• UkeySoft FoneEraser Review: 100% Erase All iOS Data before Selling Your iPhone/iPad/iPod

• 5 of the Best Security Tweets About Jeff Bezos and MBS, as Questions Swirl Over Hack

• US Military Veterans Targeted By Online Scams

• 23 arrests in France and the Netherlands as Iraqi-Kurdish smuggling network busted

• The State of Vulnerabilities in 2019

• Complex Obfuscation VS Simple Trick, (Thu, Jan 23rd)

• 5 Ways to Prevent Data Leakage

• 250 Million Microsoft customer support records and PII exposed online

• Still losing sleep over that awful Citrix bug? This scanner is here to help… you realize you’ve already been pwned

• Cybersecurity Process Issues Will Dominate 2020

• FTCODE Ransomware steals credentials and passwords

• Zero Trust: Beyond access controls

• There is no easy fix to AI privacy problems

• Singapore inks digital trade partnership with global group, firms

• Saudi Prince hacks Amazon Jeff Bezos WhatsApp number

• CIOs using AI to bridge gap between IT resources and cloud complexity

• How to protect your organization against targeted phishing attacks

• To Avoid Disruption, Ransomware Victims Continue to Pay Up

• NETSCOUT delivers DDoS visibility and protection for service providers and large enterprises

• How to identify phishing emails and what to do

• How CISOs Can Expand Their Security Duties into Industrial Environments

• GoSecure adds Insider Threat Detection and Response to its portfolio

• ISC Stormcast For Thursday, January 23rd 2020 https://isc.sans.edu/podcastdetail.html?id=6836, (Thu, Jan 23rd)

• sLoad 2.0 -A PowerShell Based Malware Infecting Windows Systems With An Anti-Analysis Techniques – Microsoft APT

• Privafy unveils cloud-native, security-as-a-service application to protect Data-in-Motion

• OneLogin launches Trusted Experience Platform, a complete IAM solution for enterprises

• buguroo enhances its bugFraud solution with New Account Fraud prevention capabilities

• RiskRecon joins with Mastercard to help customers achieve good third-party risk outcomes

• Jeff Bezos, Amazon Founder & The World’s Richest Man Phone Hacked by Saudi Prince with a WhatsApp Spyware

• Axio joins the Cyber Readiness Institute to help orgs become more resilient and cyber ready

• Facebookery: New Year, Same Missteps

• Jeff Bezos, the World’s Richest Man Phone Hacked by Saudi Prince with a WhatsApp Video Message

• Zenuity chooses HPE to develop next generation autonomous driving systems

• Coalition improves its cyber insurance and security platform with the acquisition of BinaryEdge

• FireEye acquires Cloudvisory to add cloud workload security capabilities to FireEye Helix

• Varicent acquires Symon.AI to provide enhanced analytics to business users and data scientists

• Night court and the cloud

• Vicarius raises $5 million to accelerate international growth and operating scale

• Is There a Targeted Troll Campaign Against Lisa Page? A Bot Sentinel Investigation

• Sysdig raises $70M to enable enterprises to confidently run cloud-native workloads in production

• GSA sets the stage for update to federal sites and apps

• Alison Lewis joins Neustar’s Board of Directors

• Pwn2Own Miami Contestants Haul in $180K for Hacking ICS Equipment

• FireMon expands leadership team with Andrew Warren as vice president of global channel sales

• Using Push Notifications for MFA

• Apple Addresses iPhone 11 Location Privacy Concern

• Increased Emotet Malware Activity

• Who honestly has a crown prince in their threat model? UN report officially fingers Saudi royal as Bezos hacker

• Malware redirecting visitors found on 2,000 WordPress sites

• Leak suggests Apple may replace Midnight Green with Navy Blue in iPhone 12

• For Mismanaged SOCs, The Price Is Not Right

• Jeff Bezos’ Hacked Phone, Coronavirus Hits the US, and More News

• IT Security News Daily Summary 2020-01-22

• Tale of Jailbreaking Disobedient IoT Appliances Shortlisted for the National Canada Reads Prize

• Vivin Nets Thousands of Dollars Using Cryptomining Malware

• Multiple Vulnerabilities Found in AMD ATI Radeon Graphics Cards

• Security clearance backlog continues to drop

• Safari’s Intelligent Tracking Protection is misspelled, says Google: It should be Dumb Browser Stalking Enabler

• Safari’s ‘Intelligent Tracking Protection’ is misspelled, says Google: It should be ‘dumb browser stalking enabler’

• Thousands of WordPress Sites Hacked to Fuel Scam Campaign

• 3 tips for writing a quality penetration testing report

• DOD takes AI to school

• Zero trust lessons from CDM and Comply-to-Connect programs

• CBP pilot collects data on small international packages

• A timeline of events surrounding the Bezos phone hack

• DEF CON 27, Voting Village – Sherri Ramsay’s ‘2020 Ready Or Not’

• Owner of DDoS mitigation firm launched DDoS attacks on others

• EFF to Supreme Court: Criminal Immigration Statute Threatens Free Speech Online

• RPA Playbook: DigitalGov’s guide to the care and feeding of automated programs

• Wednesday is Deadline for Claims in 2017 Equifax Data Breach

• Defend Yourself Now and in the Future Against Mobile Malware

• 3 biggest threats cybersecurity professionals are facing in 2020

• How to disconnect devices and revoke app privileges from your Firefox cloud account

• BlackBerry Cylance Integrates with SafeBreach to Deliver Automated Enterprise Endpoint Security Validation

• HPKP is no more!

• SC Media Names Prisma Cloud an Industry Innovator

• Eight Flaws in MSP Software Highlight Potential Ransomware Vector

• Cleaning Up Unused Service Accounts – Part 2: Detecting Common Locations Where Service Accounts Are Used

• This free ransomware decryption tool just got a handy update

• Linux Rekoobe Operating with New, Undetected Malware Samples

• Internal Email Security Risks

• Why DPOs and CISOs Must Work Closely Together

• Operation Glowing Symphony–Stopping Terrorism Recruitment and Propaganda

• Configuration Error Reveals 250 Million Microsoft Support Records

• identity theft

• sLoad 2.0 Malware

• Netgear under fire after TLS certificates found in firmware — again

• Here’s how the Saudis allegedly hacked Jeff Bezos’ phone, and how to protect yourself

• Speaking Freely: An Interview with Addie Wagenknecht

• Customer Information Exposed After UPS Store Chain Suffered a Phishing Attack

• How to speed up Senate confirmation

• What are the most common digital authentication methods?

• Citrix Releases Scanner to Detect Hacked Citrix ADC Appliances

• Flaws in Apple’s Intelligent Tracking Prevention Safari Feature Let People Be Tracked

• ‘We Only Have Two of the Blinky Boxes Left to Go’

• Endpoint Security in Action: How Security Intelligence Provides Protection for Endpoints

• Luke Kingma’s & Lou Patrick-Mackay’s Futurism Cartoons ‘Salaryman’

• Apple Seeds Third Betas of iOS 13.3.1 and iPadOS 13.3.1 to Developers

• Livestream: Senate Impeachment Trial Day 2

• Big Microsoft data breach – 250 million records exposed

• Saudi crown prince reported to be behind Jeff Bezos hack

• The Verge’s Nilay Patel on Netflix earnings and Apple’s encryption fight

• Alan Dershowitz’s Strange Constitutional Arguments on Impoundment and Foreign Policy

• Why People Don’t Go to NetApp INSIGHT

• US Journalist Denounced for Alleged Involvement with Brazilian Criminal Organization

• DEF CON 27, Voting Village – Tod Beardsley’s ‘Securing Voting Systems Beyond Paper Ballots’

• The Half-Life Series is Free to Play Until March 2020

• Cyber Attack Alert! A Fake Factory Network Attacked With RAT, Ransomware, Malware and So On!

• Facebook Crime Rises 19% as UK Tries to Police Social Media

• Twitter Releases Updated Android App to Fix Crashes

• Fake Smart Factory Captures Real Cyber-threats

• iPhone 12 Lineup Rumored to Feature All-New Navy Blue Color Option

• Everything We Know About the Jeff Bezos Phone Hack

• New paper: Behind the scenes of GandCrab’s operation

• Analysts question whether FBI election cybersecurity changes are robust enough

• What is a Package Dependency Manager?

• Cyber Insurance Provider Coalition Acquires BinaryEdge

• Active Directory for Small Businesses

• Kroll acquires Cybersecurity firm RP Digital Security

• UN Experts Urge Probe Into Alleged Saudi Hacking of Bezos Phone

• Managing risks according to Clause 6 of ISO 27001

• Boss of Cybersecurity Firm launches DDoS Cyber Attacks on other companies

• Onapsis Announces Exciting New Boardroom Addition

• How to Connect the Dots in Davos

• FireEye acquires Cloud Security startup Cloudvisory

• Hacker leaks Telnet passwords of more than 500,000 devices

• Startup Privafy Raises $22M with New Approach to Network Security

• Did Saudi Arabia Hack Phone Of Amazon Boss Jeff Bezos?

• It is getting harder for us to prove who we are

• Army chief says to expect fewer program cuts in 2021 budget

• VA benefits platform makes a splash without busting the budget

• WindiLeaks: Microsoft exposes 250 million customer support records dating back to 2005 (Not on purpose though)

• DISA’s Fourth Estate network modernization pushes on

• IC3 Issues Alert on Employment Scams

• WOOF locker: Unmasking the browser locker behind a stealthy tech support scam operation

• Amazon Web Services aims to stop JEDI roll-out

• Academics call for UK’s Computer Misuse Act 1990 to be reformed

• Microsoft to Force Bing Search in Chrome for Office 365 ProPlus Users

• sLoad Malware Revamped as Powerful ‘StarsLord’ Loader

• 250 Million Microsoft Customer Support Records Exposed Online

• Crown Prince Of Saudi Arabia Accused Of Hacking Jeff Bezos’ Phone

• Data Leak Strikes US Cannabis Users, Sensitive Info Exposed

• Dating apps share personal data with advertisers, study says

• Microsoft Discloses Security Breach Of Customer Support Database

• Brazil Prosecutes Greenwald In Attack On Press Freedom

• FlexPod Adapts and Thrives in a Decade of Constant Change

• Intezer Raises $15 Million in Series B Funding

• Apple Begins Selling OtterBox’s Stackable Wireless Charging System and Other Latest Accessories

• Email malware targets U.S. senator and military

• Comparitech discover 250 million Microsoft records left exposed online

• Malware attack took down 600 computers at Volusia County Public Library

• Microsoft Exposes 250M Customer Support Records on Leaky Servers

• Apple To Launch Low Cost iPhone In March – Report

• Cybersecurity Lessons Learned from ‘The Rise of Skywalker’

• Jeff Bezos hack: Amazon boss’s phone ‘hacked by Saudi crown prince’

• Access Governance Strategy and Technology: How to Plan It Well

• Facebook Will Probably Have To Face Massive Privacy Class-Action Lawsuit

• U.S. and China Sign “Phase One” Trade Deal but Leave Key Issues Unresolved

• World Economic Forum Global Risks Report Highlights Dangers of Digital innovation

• Microsoft Leaves 250M Customer Service Records Open to the Web

• The user experience of security

• IntelliGO Acquired by ActZero

• Coalition acquires IoT search engine BinaryEdge

• MITRE ATT&CK: Disk structure wipe

• Most Employers Don’t Pay Full Cost of Certifications

• The 5 Most Essential Third-Party Cyber Risk Assessment Tools

• Microsoft discloses security breach of customer support database

• Saudi Prince Allegedly Hacked World’s Richest Man Jeff Bezos Using WhatsApp

• How Your Company Can Benefit From Penetration Testing

• Which Incident Response Investments Are You Prioritizing in 2020?

• Teenager charged over $50 million SIM-swap cryptocurrency theft

• VirusTotal Graph++

• WindiLeaks: Microsoft exposes 250 million customer support records dating back to 2005. (Not on purpose though)

• 250 million Microsoft customer support records leaked in plain text

• How To Simplify The Complicated IoT | Avast

• AI startups raised record $26.6 billion globally in 2019

• Source Code Released for All ProtonVPN Apps

• Did Apple drop end-to-end encrypted iCloud backups because of the FBI?

• Audi and Qualcomm will deploy C-V2X on Virginia roads in Q3 2020

• NIST Releases Privacy Risk Management Framework

• The Most Secure Laptops In 2020

• Reviving Qui Tam Monitoring of Executive Branch Officials

• Ransomware, snooping and attempted shutdowns: The state of this honeypot shows what hackers do to systems left unprotected online

• ServiceNow acquires AI for IT startup Loom Systems

• What Are You Protecting Against? Deploying Proper Use Cases Is Critical to Build Security Maturity

• Data leak strikes US cannabis users, sensitive information exposed

• Microsoft Warns Attackers Are Exploiting Zero Day In Internet Explorer Scripting Engine

• Microsoft Exposed 250 Million Customer Support Records

• The Challenge of Compliance in the Cloud

• BitPyLock Ransomware Now Threatens To Publish Stolen Data

• New Muhstik Botnet Attacks Target Tomato Routers

• ProtonVPN apps handed to open source community in transparency push

• Panorays And Hysolate Comment On New NIST 1.0 Privacy Framework

• Anchore raises $20 million to automate container security management

• Hysolate Comments On Hackers Aiming For The Biggest Enterprise Targets

• Access Misconfiguration for Customer Support Database

• In the Midst of a Digital Revolution, Hospitality Vendors Need to Focus on Data Security

• More Spending Won’t Solve Your Hardest IT Challenges In 2020 And Beyond. Here’s What Will.

• Half a Million IoT Device Passwords Published

• UPS Says Phishing Incident Might Have Exposed Some Customers’ Data

• Red Hat Survey Shows Hybrid Cloud, AI and Machine Learning are the Focus of Enterprises

• Download: The State of Security Breach Protection 2020 Survey Results

• Unofficial Patch Released for Recently Disclosed Internet Explorer Zero-Day

• Apple Dropped iCloud Encryption Plans After FBI Complaint: Report

• EXPERT COMMENT: Shop16 Phishing Campaign Now Targets PayPal Customers

• Jeff Bezos phone hack

• Secure DevOps Company Sysdig Raises $70 Million

• FTCODE Ransomware Now Capable of Compromising Chrome and Firefox Credentials

• Are You Smarter Than a Jeopardy GOAT? 5 Cybersecurity Topics to Know

• Comments On The Hanna Anderson Magecart Attack

• Ubisoft sues DDoS-for-hire operators for ruining game play

• Ubisoft Sues Alleged DDoS-for-Hire Service

• More Than 500K Telnet Credentials Leaked by Hacker for IoT Devices

• What is a buffer overflow? And how hackers exploit these vulnerabilities

• Cloud security FireEye scoops up startup Cloudvisory

• WhatsGap removed from Google app store

• French Spy Suspected of Selling Data on Darknet

• In enterprise attack wave, NetWire Trojan now buries itself in disk image files

• Added Transparency and Security sourced by ProtonVPN Apps

• Chameleon Attack Can Manipulate Your ‘Likes’ On Social Media

• NIST’s new privacy rules – what you need to know

• Silicon in Focus: Florian Roth, Chief Information Officer: SAP SE

• How to implement Windows 7, Server 2008 security updates after end-of-life

• Nobody boogies quite like you

• Jeff Bezos phone was hacked by Saudi crown prince

• Honeywell Maxpro VMS/NVR systems vulnerable to hijacking

• PoC Exploits Do More Good Than Harm: Threatpost Poll

• Regus spills data of 900 staff on Trello board set to ‘public’

• Tracking Privacy from a Risk Standpoint

• Microsoft Exposes 250 Million Call Center Records in Privacy Snafu

• The Most Important Role of Penetration Testing in Data Privacy and Protection

• Capita Education Services accidentally spaffs email addresses in Helpdesk snafu

• OECD Tells UK To ‘Hold Fire’ On Digital Tax

• Public Shaming 2.0: Chinese City Uses Facial Recognition Against Pajama Wearers

• Campaigners Threaten ICO with Legal Action for AdTech Failings

• Panda Security promotes “Global security in the age of hybrid conflicts”

• Saudi Dismisses Link to Hack of Amazon Owner Bezos

• KnowBe4 Donates $250,000 to Stetson University College of Law

• FCW Insider: Jan. 22

• Quick Hits

• Maryland Bill Would Make Owning Ransomware a Criminal Offense

• WhatsApp Reaches 5 Billion Downloads On Play Store

• German government to pay €800,000 in Windows 7 ESU fees this year

• Apple Dropped iCloud Encryption Plan After FBI Pressure – Report

• OP Glowing Symphony – How US military claims to have disrupted ISIS ‘s propaganda

• 2020 Report on State of Breach Protection by Cynet

• Facebook To Hire 1,000 UK Staff

• Collaboration Makes Smart Cities More Secure

• 5 Ways to Get the Most From Your PAM Program

• DevOps Chats: Security for Developers, With ShiftLeft

• Container security requires continuous security in new DevSecOps models

• Companies risk revenue growth due to innovation achievement gap

• Email security industry miss rates when encountering threats are higher than 20%

• Thirty-four years in IT – The Application That Almost Broke Me (Part 9)

• State CIOs see innovation as critical priority, only 14% report extensive innovation

• Amazon CEO Jeff Bezos’ Phone Hacked with a WhatsApp Message

• The Role PCI-DSS Plays in Security

• Download: State of Breach Protection 2020 survey results

• FireEye scoops up cloud security startup Cloudvisory

• The Vendor Security Assessment (VSA): What You Need to Know

• ISC Stormcast For Wednesday, January 22nd 2020 https://isc.sans.edu/podcastdetail.html?id=6834, (Wed, Jan 22nd)

• 16Shop – Malware-as-a-service Phishing Toolkit Attack PayPal Users With Anti-Detection Techniques

• Apple Dropped A Plan Let iPhone Users Have Fully Encrypt Backups On Their Devices Including WhatsApp Chats

• Navigating ICS Security: Best Practices for ICS Decision-Makers

• Stellar Cyber’s new app applies machine learning to firewall data to spot anomalies

• FireEye Mandiant unveils two new services to help orgs improve detection, investigation, and response

• We Wrote a Book: “Unmaking the Presidency”

• Biometric ID a worry but still acceptable to Australians: AIC

• German language malspam pushes Ursnif, (Wed, Jan 22nd)

• STEALTHbits StealthRECOVER 1.5: Easier and faster AD rollback and recovery

• Crown Prince of Saudi Arabia accused of hacking Jeff Bezos’ phone with malware-laden WhatsApp message

• Mary Davie exits GSA for NASA

• Microsoft Starts Pushing Windows 10 1909 to More Devices

• 2020-01-21 – Pcap and malware for an ISC diary (Ursnif)

• Apple’s Upcoming Low-Cost iPhone Could Launch as Early as March

• Skylo raises $116M to bring affordable IoT connectivity to over 1 billion devices globally

• In Serving Big Company Interests, Copyright Is in Crisis

Generated on 2020-01-23 23:55:10.387865