IT Security News Daily Summary 2020-12-24

• The Importance of Cybersecurity in Biological Research

• Millions of devices could be hacked exploiting flaws targeted by tools stolen from FireEye

• Citrix ADC Servers Targeted in DDoS Attacks

• Active Chase Phishing Scam Disguised as Fraud Alerts

• Emotet Updates Prompt New Detection Strategies for Defenders

• Why AI and security pros need to work together to fight cybercrime

• Hacker Earns $2m in Bug Bounties

• DOJ Officials Shut Down Spoofed Domains of Moderna and Regeneron

• Amazon Gift Card Scam Delivers Dridex This Holiday Season

• DEF CON 28 Safe Mode Blockchain Village – Peiyu Wang’s Exploit Insecure Crypto Wallet’

• XKCD ‘Into My Veins’

• COVID-19 and Surveillance Tech: Year in Review 2020

• How COVID Changed Content Moderation: Year in Review 2020

• Merry Christmas Silicon UK Readers

• IRS IG: No taxpayer data exposed by hack

• Citrix devices are being abused as DDoS attack vectors

• White Ops Acquired by Goldman Sachs

• OWASP API Security Top 10: A Framework for Improving Your API Security Efforts

• Happy Holidays from Morphisec

• Lazarus Group Hits COVID-19 Vaccine Maker In Espionage Attack

• ‘Shark Tank’ host Robert Herjavec on the SolarWinds cyber hack

• A Christmas Miracle: How the IoT saved Christmas

• Smart Tachographs: Innovation out of necessity

• Why application-layer encryption is essential for securing confidential data

• Google not to use Fitbit data for advertising purposes

• Trump Vetoes $740bn Defense Bill Over Section 230

• Zoom To Deploy Email Service, Calendar App

• Windows Zero-Day Still Circulating After Faulty Fix

• SolarWinds Hackers “Impacting” State and Local Governments

• VideoBytes: Offensive security tools and the bad guys that use them

• Google reveals unpatched 0day vulnerability in Microsoft’s API

• Quarterbacking Vulnerability Remediation

• Google Asked AI Researchers To Strike Positive Tone – Report

• Google reveals unpatched zero day vulnerability in Microsoft’s API

• Vermont Hospital Says Cyberattack Was Ransomware

• HelpSystems Acquires Data Protection Firm Vera

• Credential Phishing Attack Impersonating USPS Targets Consumers Over the Holidays

• US Treasury officials’ Email Accounts Hacked by the Threat Actors Behind SolarWinds Attack

• Delivering Santa from Third-Party Risk

• HelpSystems Acquires Data Security Firm Vera

• Google reported that Microsoft failed to fix a Windows zero-day flaw

• Twitter To Remove All Followers From Potus Accounts

• S3 Ep12: A chat with social engineering hacker Rachel Tobac [Podcast]

• HelpSystems Acquires Vera to Expand Data Security Offerings

• Nintendo Went Mission-Impossible on Homebrew Hacker in 2013, Alleged Leaked Documents Show

• Cartoon: The Message Is Loud and Clear

• China cyber attacks: the current threat landscape

• Monitoring Microservices on AWS with Thundra: Part II

• How China Uses Stolen US Personnel Data

• Amazon Faces Union Challenge In Alabama

• Why You Should Update Your Software | Avast

• Goldman Sachs leads acquisition of bot mitigation company White Ops

• Government Security Experts Issue Farmers with New Advice

• ‘Ransomware Task Force’: Microsoft, McAfee and Rapid7 Coalition

• Hands-On: Kali Linux on the Raspberry Pi 4

• Misconfigured AWS Bucket Exposes Hundreds of Social Influencers

• ‘Ransomware Task Force’, Microsoft, McAfee and Rapid7 Coalition

• SolarWinds hackers are ‘impacting’ U.S. federal, state, and local governments

• US Teen Accused of Deadly Cyber-Stalking Campaign

• New Lawsuit Takes Aim at Ring After Smart Doorbell Hijacking

• Google Discloses Poorly-Patched, Now Unpatched, Windows 0-Day Bug

• Cyber Attacks are grave risks to National Security, says US President Joe Biden

• Ransomware attack confirmed on Vermont Hospital

• Payment Card Information leaked of Proliance Surgeons

• Malicious Word Document Delivering an Octopus Backdoor, (Thu, Dec 24th)

• Want to add antivirus to your existing portfolio?

• North Korean Hackers Trying to Steal COVID-19 Vaccine Research

• Best of 2020: The SolarWinds Supply Chain Hack: What You Need to Know

• U.S. cybersecurity: Preparing for the challenges of 2021

• 7 ways malware can get into your device

• Network operator spend on multi-access edge computing to reach $8.3B by 2025

• Securing the future of IoT devices

• Three Strikes & You’re in!

• Bitglass Security Spotlight: Popular Messaging App Exposes Users’ Private Data.

• 2021 Cybersecurity in healthcare

• New SUPERNOVA Backdoor Found in SolarWinds Cyberattack Analysis

• Building a Better U.S. Approach to TikTok and Beyond

• Geoverse announces successful 5G data session using its GeoCore intelligent service platform

• Daimler and Infosys partner to drive IT infrastructure transformation

• FaaS: Security Considerations to Know Before Going Serverless

• Minimice las pérdidas corporativas al monitorear el desempeño de sus aplicaciones

• Stack8 to offer RingCentral’s UCaaS platform to its enterprise customers

• 2020-12-23 (Wednesday) – Quick post: Qakbot infection with spambot activity

• FireEye shares jump back to pre-hack levels

• Attack Surface Discovery: A Review of FINRA-lookalike Domain and Linked IoCs

• 2020-12-23 (Wednesday) – Quick post: recent Emotet activity

• Android security: The last piece of advice you’ll need for 2020

• Apple’s New Privacy-Focused Tracking Prompt Begins Appearing for iOS 14 Users [Updated]

• Five Reasons Why You Might Want to Consider AirPods Max

• The White House Counsel and Trump’s Attack on the 2020 Election

• Lawfare Live: All the President’s Pardons

• SolarWinds: The Need for Persistent Engagement

• IT Security News Daily Summary 2020-12-23

• Endpoint security quiz: Test your knowledge

• Trump threatens yet another shutdown

• The Joy of Tech® ‘Russian Hack!’

• Lions and Tigers and a December Full of Adversary Activity – Oh My!

• Garry on Lockdown: The Queen’s Gambit

• DEF CON 28 Safe Mode Blockchain Village – Peter Kacherginsky’s ‘Attacking & Defending Blockchain Nodes’

• Apple’s New Privacy-Focused Tracking Prompt Begins Appearing in iOS 14.4 Beta

• Why DOD needs DevOps to accelerate IT service delivery

• Trump vetoes 2021 defense bill

• Cloud, off-the-shelf gaming equipment expands flight training options

• 6 persuasion tactics used in social engineering attacks

• Microsoft, McAfee, Rapid7, and Others Form New Ransomware Task Force

• Lazarus Group Hits COVID-19 Vaccine-Maker in Espionage Attack

• US Teen Accused of Deadly Cyber-stalking Campaign

• White Ops Announces Its Acquisition

• Forward Air Trucking Victim of New Hades Ransomware Gang

• Joker’s Stash Carding Website Temporarily Disrupted

• Roanoke College Forced to Delay Spring Semester After Cyber-Attack

• Fashion marketplace giant 21 Buttons exposes millions of users’ data

• Garry on Lockdown: The Queen’s Gambit

• Cyber-Attack on European Court of Human Rights

• Lazarus Attacks Vaccine Research

• Lazarus Group Seeks Intelligence Related to COVID-19

• CISA Releases CISA Insights and Creates Webpage on Ongoing APT Cyber Activity

• Analysis Dridex Dropper, IoC extraction (guest diary), (Wed, Dec 23rd)

• SolarWinds: What the Intelligence Tells Us

• Building a Better U.S. Approach to TikTok—and Beyond

• Water Wars: Flirting in the Taiwan Strait

• Third-Party APIs: How to Prevent Enumeration Attacks

• Security measures critical for COVID-19 vaccine distribution

• Attackers Use Mobile Emulators on an Unprecedented Scale to Steal Millions of Dollars in a Few Days

• Fact vs. Fiction: Film Industry’s Portrayal of Cybersecurity

• Implementing a Common Controls Framework using Hyperproof

• 2020 in Review

• How We Saved .ORG: 2020 in Review

• McAfee’s Steve Grobman on massive SolarWinds cyber hack

• Signal Founder Dismisses Cellebrite Encryption Crack Claim

• US COVID-19 relief bill to make copyrighted content streaming a felony

• CISA warns that SolarWinds software may not be only entry point in latest breaches

• DOD announces first CMMC pilot contract nominees

• GAO tracks diversity in the intelligence community

• Navy’s aquatic drone plan faces operational hurdles

• Critical Flaws in Kepware Products Can Facilitate Attacks on Industrial Firms

• North Korean Hackers Target COVID-19 Research

• Semperis Appoints Igor Baikalov as Chief Scientist

• Europol and Eurojust sign new contribution agreement expanding cooperation on the SIRIUS project

• Emotet Returns To Hit 100K Mailboxes Per Day

• New York Temporarily Bans Facial Recognition In Schools

• DHS Warns Against Using Chinese Hardware And Digital Services

• US Regulator Charges Ripple Over Its XRP Asset

• Amid Apple Car Rumors, Volkswagen CEO Welcomes Competitors to Accelerate Transformation of the Auto Industry

• The IT skills gap: flexible resourcing is the solution

• A discount isn’t just for Christmas – why data can hold the key to relationships that go beyond the festive season

• No emails have leaked from the 2020 election campaigns yet — tiny USB sticks may be one reason why

• A RECIPE FOR AVOIDING SOFTWARE FAILURES

• Bitglass Security Spotlight: Popular Messaging App Exposes Users’ Private Data.

• Power in a Small Package: EF300 Entry Tier NVMe System is Newest Member of the E-Series Family

• Emotet Returns to Hit 100K Mailboxes Per Day

• Hey Alexa, Who Am I Messaging?

• Enterprise IoT Security Is a Supply Chain Problem

• Launching a New Game Studio and Planning for Growth

• Cybereason vs. Clop Ransomware

• Deals: Christmas Week Sales Include Lowest-Ever Prices on M1 MacBook Pro, iMac, and More

• I played the free online games your kids are playing and here’s what happened

• WORKFORCE STUDY: REVIEWING CYBERSECURITY’S PANDEMIC RESPONSE

• Let’s Encrypt comes up with workaround for abandonware Android devices

• Elon Musk Offered Tesla To Apple’s Tim Cook

• How to make a QR code to accept Bitcoin while keeping it secure

• How to address security fatigue and stop cybercriminals from winning

• Police bring down “bulletproof” VPN services beloved by cybercriminals

• Cellebrite claims to be able to access Signal messages

• Forums, Marketplaces, and Shops Remain Essential Venues for the Criminal Economy

• Apple to Fix Resolution Issue With Ultrawide Displays on M1 Macs in Future macOS Update

• Fact vs. Fiction: Film Industry’s Portrayal of Cybersecurity

• Lessons from Teaching: Week 12

• Hacking Christmas Gifts: Artie Drawing Robot

• Biden Says Huge Cyberattack Cannot Go Unanswered

• ACLU Sues FBI to Learn How It Obtains Data From Encrypted Devices

• DHS Warns that Businesses Sourcing Data Services and Equipment from China May Face Legal Repercussions

• Apple Starts Accepting Developers Into Small Business Program

• The International Legal Implications of “Havana Syndrome”

• China and the U.S. Make Antitrust Moves Against Domestic Tech Giants

• 5 Core Elements of a Risk-Based Cybersecurity Dashboard

• Holiday Message from Clar Rosso, (ISC)² CEO

• Multiple government agencies hacked by Russia-backed actors

• Millions of Devices Affected by Vulnerabilities Used in Stolen FireEye Tools

• DHS Details Risks of Using Chinese Data Services, Equipment

• Cyber Insurance Market Expected to Surge in 2021

• Investigating the Navalny Poisoning

• Opportunities and Threats – IoT and the Rise of 5G

• Data Privacy – Now’s the Time for the US to Catch Up

• November 2020 Cyber Attacks Statistics

• Facebook To Allow Physical Security Keys Next Year

• 5 IoT Threats To Look Out for in 2021

• How to bring zero-trust security to microservices

• Ransomware: Attacks could be about to get even more dangerous and disruptive

• 2020 Shows the Danger of a Decapitated Cyber Regime

• How we protect our users against the Sunburst backdoor

• Facebook Employees Criticize Campaign Against Apple in Leaked Comments

• Securing Crypto Exchanges To Prevent Over-regulation

• How to avoid subdomain takeover in Azure environments

• Bath Council Refuses To Allow 5G Mast

• Web Page Layout Can Trick Users into Divulging More Info

• Leaky Server Exposes 12 Million Medical Records to Meow Attacker

• SolarWinds: Dozens Of US Treasury Email Accounts Hacked

• US: Buying Chinese Tech is a “Grave Threat” to Your Data Security

• Lazarus covets COVID-19-related intelligence

• How to Defend Against Malware, Phishing, and Scams During COVID-19 Crisis

• Biometrics Don’t Replace Mobile Password Security

• Looking for adding new detection technologies in your security products?

• Law Enforcement Seizes Joker’s Stash — Stolen Credit Card Marketplace

• Does the U.S. Need a National Cyber Strategy?

• New Critical Flaws in Treck TCP/IP Stack Affect Millions of IoT Devices

• Research: nearly all of your messaging apps are secure

• As technology develops in education so does the need for cybersecurity

• US Department of Homeland Security warns American business not to use Chinese tech or let data behind the Great Firewall

• Only 30% prepared to secure a complete shift to remote work

• Tech’s bigger role in pharma industry demands stronger security measures

• How to enhance onboarding for digital banking services using risk management

• ‘Twas the night before InfoSec

• Card-Not-Present Fraud: 4 Security Considerations for Point of Sale Businesses

• U.S. Government Warns of Phishing, Fraud Schemes Using COVID-19 Vaccine Lures

• Experts listed the possible goals of cyber criminals who hack websites

• New NIST guide helps healthcare orgs securely deploy PACS

• Comms Alliance argues TSSR duplicates obligations within Critical Infrastructure Bill

• New Paper: “Future of the SOC: SOC People — Skills, Not Tiers”

• DHS warns against using Chinese hardware and digital services

• ISC Stormcast For Wednesday, December 23rd 2020 https://isc.sans.edu/podcastdetail.html?id=7304, (Wed, Dec 23rd)

• Arista Networks Attack Surface Assessment: AI-driven threat hunting and incident response expertise

• Rapid website-blocking power for violent material proposed for eSafety Commissioner

• Sysdig meets the SOC 2 standards for security and availability

• Cybereason vs. SolarWinds Supply Chain Attack

• Apple Sending Special iPhones to First Participants in Security Research Device Program

• Cybersecurity breach is worrying considering years of security efforts: Expert

• Solorigate Resource Center – updated December 22nd, 2020

• How to Avoid Identity Theft and Other Online Scams

• How to Protect Yourself With a VPN

• SolarWinds Cyber Attack – What We Know About It, So Far

• Don’t let a data breach sink your business: Here’s what you need to know

• SolarWinds Campaign Focuses Attention on ‘Golden SAML’ Attack Vector

• Highly Evasive Attacker Leverages SolarWinds Supply Chain to Compromise
  Multiple Global Victims With SUNBURST Backdoor

• Todd Cione joins Teradata as Chief Revenue Officer

Generated on 2020-12-24 23:55:09.875352