IT Security News Daily Summary 2020-12-23

• Endpoint security quiz: Test your knowledge

• Trump threatens yet another shutdown

• The Joy of Tech® ‘Russian Hack!’

• Lions and Tigers and a December Full of Adversary Activity – Oh My!

• Garry on Lockdown: The Queen’s Gambit

• DEF CON 28 Safe Mode Blockchain Village – Peter Kacherginsky’s ‘Attacking & Defending Blockchain Nodes’

• Apple’s New Privacy-Focused Tracking Prompt Begins Appearing in iOS 14.4 Beta

• Why DOD needs DevOps to accelerate IT service delivery

• Trump vetoes 2021 defense bill

• Cloud, off-the-shelf gaming equipment expands flight training options

• 6 persuasion tactics used in social engineering attacks

• Microsoft, McAfee, Rapid7, and Others Form New Ransomware Task Force

• Lazarus Group Hits COVID-19 Vaccine-Maker in Espionage Attack

• US Teen Accused of Deadly Cyber-stalking Campaign

• White Ops Announces Its Acquisition

• Forward Air Trucking Victim of New Hades Ransomware Gang

• Joker’s Stash Carding Website Temporarily Disrupted

• Roanoke College Forced to Delay Spring Semester After Cyber-Attack

• Fashion marketplace giant 21 Buttons exposes millions of users’ data

• Garry on Lockdown: The Queen’s Gambit

• Cyber-Attack on European Court of Human Rights

• Lazarus Attacks Vaccine Research

• Lazarus Group Seeks Intelligence Related to COVID-19

• CISA Releases CISA Insights and Creates Webpage on Ongoing APT Cyber Activity

• Analysis Dridex Dropper, IoC extraction (guest diary), (Wed, Dec 23rd)

• SolarWinds: What the Intelligence Tells Us

• Building a Better U.S. Approach to TikTok—and Beyond

• Water Wars: Flirting in the Taiwan Strait

• Third-Party APIs: How to Prevent Enumeration Attacks

• Security measures critical for COVID-19 vaccine distribution

• Attackers Use Mobile Emulators on an Unprecedented Scale to Steal Millions of Dollars in a Few Days

• Fact vs. Fiction: Film Industry’s Portrayal of Cybersecurity

• Implementing a Common Controls Framework using Hyperproof

• 2020 in Review

• How We Saved .ORG: 2020 in Review

• McAfee’s Steve Grobman on massive SolarWinds cyber hack

• Signal Founder Dismisses Cellebrite Encryption Crack Claim

• US COVID-19 relief bill to make copyrighted content streaming a felony

• CISA warns that SolarWinds software may not be only entry point in latest breaches

• DOD announces first CMMC pilot contract nominees

• GAO tracks diversity in the intelligence community

• Navy’s aquatic drone plan faces operational hurdles

• Critical Flaws in Kepware Products Can Facilitate Attacks on Industrial Firms

• North Korean Hackers Target COVID-19 Research

• Semperis Appoints Igor Baikalov as Chief Scientist

• Europol and Eurojust sign new contribution agreement expanding cooperation on the SIRIUS project

• Emotet Returns To Hit 100K Mailboxes Per Day

• New York Temporarily Bans Facial Recognition In Schools

• DHS Warns Against Using Chinese Hardware And Digital Services

• US Regulator Charges Ripple Over Its XRP Asset

• Amid Apple Car Rumors, Volkswagen CEO Welcomes Competitors to Accelerate Transformation of the Auto Industry

• The IT skills gap: flexible resourcing is the solution

• A discount isn’t just for Christmas – why data can hold the key to relationships that go beyond the festive season

• No emails have leaked from the 2020 election campaigns yet — tiny USB sticks may be one reason why

• A RECIPE FOR AVOIDING SOFTWARE FAILURES

• Bitglass Security Spotlight: Popular Messaging App Exposes Users’ Private Data.

• Power in a Small Package: EF300 Entry Tier NVMe System is Newest Member of the E-Series Family

• Emotet Returns to Hit 100K Mailboxes Per Day

• Hey Alexa, Who Am I Messaging?

• Enterprise IoT Security Is a Supply Chain Problem

• Launching a New Game Studio and Planning for Growth

• Cybereason vs. Clop Ransomware

• Deals: Christmas Week Sales Include Lowest-Ever Prices on M1 MacBook Pro, iMac, and More

• I played the free online games your kids are playing and here’s what happened

• WORKFORCE STUDY: REVIEWING CYBERSECURITY’S PANDEMIC RESPONSE

• Let’s Encrypt comes up with workaround for abandonware Android devices

• Elon Musk Offered Tesla To Apple’s Tim Cook

• How to make a QR code to accept Bitcoin while keeping it secure

• How to address security fatigue and stop cybercriminals from winning

• Police bring down “bulletproof” VPN services beloved by cybercriminals

• Cellebrite claims to be able to access Signal messages

• Forums, Marketplaces, and Shops Remain Essential Venues for the Criminal Economy

• Apple to Fix Resolution Issue With Ultrawide Displays on M1 Macs in Future macOS Update

• Fact vs. Fiction: Film Industry’s Portrayal of Cybersecurity

• Lessons from Teaching: Week 12

• Hacking Christmas Gifts: Artie Drawing Robot

• Biden Says Huge Cyberattack Cannot Go Unanswered

• ACLU Sues FBI to Learn How It Obtains Data From Encrypted Devices

• DHS Warns that Businesses Sourcing Data Services and Equipment from China May Face Legal Repercussions

• Apple Starts Accepting Developers Into Small Business Program

• The International Legal Implications of “Havana Syndrome”

• China and the U.S. Make Antitrust Moves Against Domestic Tech Giants

• 5 Core Elements of a Risk-Based Cybersecurity Dashboard

• Holiday Message from Clar Rosso, (ISC)² CEO

• Multiple government agencies hacked by Russia-backed actors

• Millions of Devices Affected by Vulnerabilities Used in Stolen FireEye Tools

• DHS Details Risks of Using Chinese Data Services, Equipment

• Cyber Insurance Market Expected to Surge in 2021

• Investigating the Navalny Poisoning

• Opportunities and Threats – IoT and the Rise of 5G

• Data Privacy – Now’s the Time for the US to Catch Up

• November 2020 Cyber Attacks Statistics

• Facebook To Allow Physical Security Keys Next Year

• 5 IoT Threats To Look Out for in 2021

• How to bring zero-trust security to microservices

• Ransomware: Attacks could be about to get even more dangerous and disruptive

• 2020 Shows the Danger of a Decapitated Cyber Regime

• How we protect our users against the Sunburst backdoor

• Facebook Employees Criticize Campaign Against Apple in Leaked Comments

• Securing Crypto Exchanges To Prevent Over-regulation

• How to avoid subdomain takeover in Azure environments

• Bath Council Refuses To Allow 5G Mast

• Web Page Layout Can Trick Users into Divulging More Info

• Leaky Server Exposes 12 Million Medical Records to Meow Attacker

• SolarWinds: Dozens Of US Treasury Email Accounts Hacked

• US: Buying Chinese Tech is a “Grave Threat” to Your Data Security

• Lazarus covets COVID-19-related intelligence

• How to Defend Against Malware, Phishing, and Scams During COVID-19 Crisis

• Biometrics Don’t Replace Mobile Password Security

• Looking for adding new detection technologies in your security products?

• Law Enforcement Seizes Joker’s Stash — Stolen Credit Card Marketplace

• Does the U.S. Need a National Cyber Strategy?

• New Critical Flaws in Treck TCP/IP Stack Affect Millions of IoT Devices

• Research: nearly all of your messaging apps are secure

• As technology develops in education so does the need for cybersecurity

• US Department of Homeland Security warns American business not to use Chinese tech or let data behind the Great Firewall

• Only 30% prepared to secure a complete shift to remote work

• Tech’s bigger role in pharma industry demands stronger security measures

• How to enhance onboarding for digital banking services using risk management

• ‘Twas the night before InfoSec

• Card-Not-Present Fraud: 4 Security Considerations for Point of Sale Businesses

• U.S. Government Warns of Phishing, Fraud Schemes Using COVID-19 Vaccine Lures

• Experts listed the possible goals of cyber criminals who hack websites

• New NIST guide helps healthcare orgs securely deploy PACS

• Comms Alliance argues TSSR duplicates obligations within Critical Infrastructure Bill

• New Paper: “Future of the SOC: SOC People — Skills, Not Tiers”

• DHS warns against using Chinese hardware and digital services

• ISC Stormcast For Wednesday, December 23rd 2020 https://isc.sans.edu/podcastdetail.html?id=7304, (Wed, Dec 23rd)

• Arista Networks Attack Surface Assessment: AI-driven threat hunting and incident response expertise

• Rapid website-blocking power for violent material proposed for eSafety Commissioner

• Sysdig meets the SOC 2 standards for security and availability

• Cybereason vs. SolarWinds Supply Chain Attack

• Apple Sending Special iPhones to First Participants in Security Research Device Program

• Cybersecurity breach is worrying considering years of security efforts: Expert

• Solorigate Resource Center – updated December 22nd, 2020

• How to Avoid Identity Theft and Other Online Scams

• How to Protect Yourself With a VPN

• SolarWinds Cyber Attack – What We Know About It, So Far

• Don’t let a data breach sink your business: Here’s what you need to know

• SolarWinds Campaign Focuses Attention on ‘Golden SAML’ Attack Vector

• Highly Evasive Attacker Leverages SolarWinds Supply Chain to Compromise
  Multiple Global Victims With SUNBURST Backdoor

• Todd Cione joins Teradata as Chief Revenue Officer

• Enterprise EDR Expands New Linux Coverage to SUSE, OpenSUSE, Ubuntu, Oracle & Amazon Linux

• Quiz: Web application security threats and vulnerabilities

• FITARA grades mostly stable

• Emotet Campaign Restarts After Seven-Week Hiatus

• Microsoft Ups Security of Azure AD, Identity

• Firefox continues cracking down on tracking with cache partitioning

• Facebook to introduce hardware keys to bolster security

• Signal app’s on-device encryption can be decrypted, claims hacking firm Cellebrite

• IT Security News Daily Summary 2020-12-22

• iPhone Calendar Events spam is back: Here’s how to get rid of it

• Announcing the General Availability of Container Security in the VMware Carbon Black Cloud

• Biden promises ‘overwhelming focus’ on hack recovery

• Making population data count: The Census Data Lake

• 50 orgs ‘genuinely impacted’ by SolarWinds hack, FireEye chief says

• Robots for kids: STEM kits and more tech gifts for hackers of all ages

• Facebook Will Offer Improved Account Security In 2021

• Building a Non-Functional Requirements Framework – Overview

• Researchers shared the lists of victims of SolarWinds hack

• Elon Musk Claims He Once Reached Out to Tim Cook About Tesla Purchase But Was Refused Meeting

• Video: Testing Windows on an M1 Mac With Parallels 16

• Cybersecurity Trends: Keeping Up With 2020’s ‘New Normal’

• Union lawsuit looks to block Schedule F

• A quiet, steady communications revolution has radically improved response in public safety

• Holiday Puppy Swindle Has Consumers Howling

• Qualys Researchers Identify 7+ Million Vulnerabilities Associated with SolarWinds/FireEye Breach by Analyzing Anonymized Vulnerabilities across Worldwide Customer Base

• Rumors Persist of New Apple TV With Stronger Gaming Focus, Updated Remote, and Faster Chip Next Year

• The New IOT Security Act Shows the Limits of Congressional Policymaking for Cybersecurity

• Does Biden believe the Russia hack is an act of war?

• Two groups might have breached SolarWinds Orion software- Microsoft

• 7 Cybersecurity Tools On Our Holiday Wish List

• UK lawmakers propose law banning retail bots after PS5 fiasco

• UN Rights Expert Urges Trump to Pardon Assange

• Prepare to Fight Upcoming Cyber-Threat Innovations

• 5 Email Threat Predictions for 2021

• Risk Journeys with Lisa Young | Part 2

• The CASE Act Is Just the Beginning of the Next Copyright Battle

• Emotet returns just in time for Christmas

• NCSC Issues Cyber Security Guidance For Farmers

• Phishing Campaign Impersonates New York Department of Labor to Steal Private Information

• U.S. Seizes Domains Used for COVID-19 Vaccine Phishing Attacks

• cybercrime

• IoT cyber law signed amid growing vulnerabilities

• The best gifts for hackers

• Phishers Spoof New York Department of Labor

• New marketing campaign against UK subway by using TrickBot malware

• XKCD ‘Conjunction’

• Developer Successfully Emulates Nintendo Switch Games on M1 Mac

• The CASE Act, Hidden in the Coronavirus Relief Bill, Is Just the Beginning of the Next Copyright Battle

• Israel targets Al Jazeera journalists with spying Malware

• Microsoft and others set up Ransomware Task Force

• US Bill against foreign firms that are Spying

• Facebook to focus more on Mobile Security in 2021

• Dubber acquires Speik to expand its AI call-recording service

• Attesting to the Security of Data-in-Use

• Does a friend “need money urgently”? Check your facts before paying out…

• Shabang Banged to Rights

• NSO ‘Pegasus’ Hacking Tool Targets Journalists Again

• Deals: Apple Updates iTunes Movies With Sales on Holiday Classics, Recent Releases, Franchise Bundles, and More

• This Disastrous Copyright Proposal Goes Straight to Our Naughty List

• Year-End Challenge for Online Rights

• OneTrust’s Alan Dabbiere on government agency cyber attacks

• How to achieve cost savings with cloud management optimisation

• Why do bank account scammers fear icebergs?

• How to enhance access to digital banking with risk management

• ‘Tis the season for session hijacking – Here’s how to stop it

• Microsoft Developing Own ARM-Based Server Chips

• Feds seize VPN service used by hackers in cyber attacks

• Joker’s Stash Carding Site Taken Down

• Tech Giants Lend WhatsApp Support in Spyware Case Against NSO Group

• Tech Giants Show Support for WhatsApp in Lawsuit Against Spyware Firm

• What is SecOps? Everything you need to know

• Police Seize VPN Service Beloved by Cyber-criminals

• Law Enforcement Disrupts VPN Services Enabling Cybercrime

• Cybercriminals’ Favorite Bulletproof VPN Service Shuts Down In Global Action

• Eavesdropping on Phone Taps from Voice Assistants

• Joker’s Stash Carding Site Taken Down, For Now

• Signal: Firm Claims To Have Cracked Chat App’s Encryption

• Law Enforcement Take Down Three Bulletproof VPN Providers

• U.S. House Intel Chair Wants Briefing On Recent Hacking Campaign

• Trump Administration Says Russia Behind SolarWinds Hack. Trump Himself Begs To Differ

• Apple TV+ Show ‘Ted Lasso’ Likely to End After Season 3

• Expert Reaction On Microsoft Says It Identified 40+ Victims Of The SolarWinds Hack

• Experts Reacted On Microsoft Confirming Breached In Recent SolarWinds Supply Chain Hack

• UK firm NOW: Pensions tells some customers a ‘service partner’ leaked their data all over ‘public software forum’

• Trucking And Freight Company Forward Air Suffered Ransomware Attack

• How to secure your business from cyberattacks

• What Is the Safest Backup Option Available to Regular Users

• Is your app modernization strategy ready for the future?

• VPN Service Used by Cybercriminals Disrupted in Global Law Enforcement Operation

• Top 10 cybersecurity online courses for 2021

• Firefox 85 to Bring Full Network Partitioning to Block Most User Tracking Efforts

• The Ministry of Internal Affairs of Russia is creating a cyber police

• Security as Code: How Repeatable Policy-Driven Deployment Improves Security

• Wake on LAN with IP address manager: A holistic approach to remote booting

• 2021 Security Crystal Ball: Trends and Predictions for the Year Ahead

• How the Edge Improves Microservices

• WFCM 1.7.0: new file integrity checks & detailed email notifications

• Bulletproof VPN services took down in a global police operation

• Netatmo Video Doorbell With HomeKit Now Available to Order in U.S. and Canada, Ships Early January

• Reflections on the SolarWinds Breach

• Ask Lawfare: A Special Year-End Edition of the Lawfare Podcast

• The Military Waiver Requirement for Secretary of Defense Shouldn’t Substitute Individuation

• Six Trends Shaping the 2021 Cybersecurity Outlook

• Patching alternative to Solarwinds Orion

• Sen. Wyden: Dozens of Treasury Department email accounts were hacked during cyberattack

• Apple Sets 2024 Deadline For Passenger Vehicle – Report

• How to combat future cyberattacks following the SolarWinds breach

• Crypto Exchange EXMO Says Funds Stolen in Security Incident

• Ministry of Justice Suffers 17 Serious Data Breaches Last Year

• Security Intelligence Handbook Chapter 5: How Security Intelligence Drives Proactive Response

• Beware: not so festive social media scams

• Patrick Wardle on Hackers Leveraging ‘Powerful’ iOS Bugs in High-Level Attacks

• CISA Issues ICS Advisory for New Vulnerabilities in Treck TCP/IP Stack

• Gartner Ranks Radware #1 for API & High Security Use Cases in 2020 Critical Capabilities Report

• Expert Commentary On Crypto Exchange EXMO Hacked

• UK firm NOW: Pensions tells 1.7 million customers a ‘service partner’ leaked their data all over ‘public software forum’

• Cybersecurity Consultant: Are More CISSPs Embracing the Gig Economy?

• Android security: Analysis, advice, and next-level knowledge

• Google, Facebook Team Up To Tackle Antitrust Lawsuit – Report

• Critical Dell Wyse Bugs Let Attackers to Execute Code and Access Files and Credentials

• Farmers get their own security advice as cyberattacks increase

• Law enforcement take down three bulletproof VPN providers

• SolarWinds Claims Execs Unaware of Breach When They Sold Stock

• Cybereason Adopts Oracle Cloud Infrastructure to Enhance its Platform Security

• iPhones of Al Jazeera Journalists Being Snooped On Via Israeli Firm’s Spyware

• How to Build Successful Security Awareness Training Programs in 2021 and Beyond

• $10 Credit Cards, $2 PayPal Accounts + More Findings From VMware Carbon Black – Expert Insight

• UK Unlikely To Hit 5G And Broadband Target

• Google, Facebook Team Up To Tackle Antitrust Lawsuits – Report

• Servers of Carding Site “Joker’s Stash” Seized by Law Enforcement

• Cyberattack Hit Key US Treasury Systems: Senator

• Tech Giants Support Facebook in Case Against Spyware Maker

• Cybercriminals’ favourite VPN taken down in global action

• What can we learn from the SolarWinds Breach?

• Monitoring Microservices on AWS with Thundra: Part I

• Malware Victim Selection Through WiFi Identification, (Tue, Dec 22nd)

• Expert Says SolarWinds Cyber-Attack Serves Important Password Security Reminder

• The 4 Key Security Gaps Every Security Team Needs To Close In 2021

• Expert Insight On Flavors Designer Symrise Ransomware Attack

• 16-30 November 2020 Cyber Attacks Timeline

• How have digital transactions become safer?

• What is Security Orchestration Automation and Response?

• 6 Information security predictions for 2021

• Just released! AT&T Cybersecurity Insights™ Report: 5G and the Journey to the Edge

• What is a managed firewall? Benefits, offerings explained

• 6 board of directors security concerns every CISO should be prepared to address

• STEM Activities For Kids | Avast

• Mobile Disinformation Campaigns | Avast

• Just 8% of Firms Offer Regular Security Training

• NSO Group Spyware Used To ‘Hack’ Al Jazeera Journalists

• December 2020 Web Server Survey

• Microsoft and Google join Facebook’s legal battle against hacking company NSO

• Threat Actors Increasingly Using VBA Purging in Attacks

• Big Tech Joins Up to Ransomware Task Force

• A Second Hacker Group May Have Also Breached SolarWinds, Microsoft Says

• Zero Trust: Not Just for Humans, but Also Machines

• Application security testing is not just buzzwords

• Report: 2020 Sees Spikes in Mobility, Fintech Fraud

• VMware and Cisco also impacted by the SolarWinds hack

• Objectives of Nation State Cyber Attackers

• Microsoft and McAfee headline newly-formed ‘Ransomware Task Force’

• Steps IT pros can take to prioritize interpersonal needs

• Cybersecurity Advent calendar: Stay aware, stay safe!

• Trukno: “On A Mission To Deliver Cyber Intelligence, Not Cyber News”

• Worldwide new account fraud declined 23.2% in 2020

• Three reasons why context is key to narrowing your attack surface

• EFF to Ninth Circuit: Don’t Grant Immunity to Notorious Spyware Company

• Three Strikes & You’re in!

• Detecting SUNBURST/Solarigate activity in retrospect with Zeek – a practical example

• CFOs optimistic, expect the economy to improve in 2021

• Operational planning simulation for defense against an attacking drone swarm

• How A Device to Cloud Architecture Defends Against the SolarWinds Supply Chain Compromise

• ISC Stormcast For Tuesday, December 22nd 2020 https://isc.sans.edu/podcastdetail.html?id=7302, (Tue, Dec 22nd)

• You Think You’re Prepared for the Next SolarWinds. You Are Not.

• ColorTokens Partner Program: Content, tools, and training in ColorTokens’ Zero Trust approach

• December 21st, 2020 – Solorigate Resource Center

• NSA Warns of Cloud Attacks on Authentication Mechanisms

• D-Link Layer 3 Stackable 10G Managed Switches offer high scalability, availability, and redundancy

• Tufin Orchestration Suite R20-2: Users can evaluate network access risks and minimize attack surface

• Microsoft, Google, Cisco, and others file amicus brief in support of Facebook’s NSO lawsuit

• Cognizant acquires Inawisdom to help businesses improve business outcomes

• uCloudlink and Vodafone extend partnership on data procurement

• Software factories are new ‘crown jewels,’ Air Force official says

• 5 recommendations for cyber maturity

• OneLogin expands leadership team with the appointment of two new members

• May Mitchell joins iboss as Senior Vice President of Marketing

• Microsoft has discovered yet more SolarWinds malware

• Zero-click iMessage zero-day used to hack the iPhones of 36 journalists

• Security experts warn of long-term risk tied to Energy Department breach

• Apple is allegedly working on a passenger car, breakthrough battery tech

• What we know about the new SARS strain that’s shutting down the UK

• The U.S. Government Is Targeting Cryptocurrency to Expand the Reach of Its Financial Surveillance

Generated on 2020-12-23 23:55:11.681815