IT Security News Daily Summary 2020-12-28

• Prepare for IoT’s role in U.S. CMMC compliance

• Uma lista de 8 pontos para acertar no gerenciamento Cisco

• Security by Design y UEM: el enfoque de la ciberseguridad en 2021

• Scanner de Porta: O que é e por que você deveria utilizá-lo

• Conceitos de ITOM: Monitoramento de processos

• As tendências tecnológicas para 2021

• Zix acquires CloudAlly backup for SaaS data protection

• Apple Hearing Study Bug Results in Accidental Historical Data Collection From Participants

• Defending the COVID-19 Vaccine Supply Chain

• Best of 2020: The SolarWinds supply chain hack: What you need to know

• CMMC Level 1 requirements?

• Did Shannon Alone Invent Our Future?

• The Joy of Tech® ‘Have A Merry Zoom-mas!’ (Belated)

• DEF CON 28 Safe Mode Demo Labs – Chris Nevin’s ‘Carnivore’

• Nefilim ransomware operators leak data stolen from Whirlpool

• Los Angeles Residents Able to Add COVID Vaccination Proof to Apple Wallet

• Github-Hosted Malware Decodes Cobalt Strike Beacon From Imgur Picture

• US CERT Warns of Another Solar Winds Vulnerability

• Finland says hackers accessed MPs’ emails accounts

• Experts Slam Facebook For “Laughable” Privacy Criticisms Of Apple

• Apple Launches First-Generation College Student Mentorship Program

• Security Vulnerability Detection with Vulnture

• Hackers phish 615,000 login credentials by using Facebook ads

• How Reverse Engineering Can Help Secure Your Linux Systems Against Malware>

• Hackers Amp Up COVID-19 IP Theft Attacks

• Privacy Management Firm OneTrust Secures $300M at $5.1B Valuation

• Goldman Sachs Buys Anti-Bot Startup White Ops

• Smart DNS for the New Network Edge: Emerging Requirements for DNS Encryption

• DevSecOps: The good, the bad, and the ugly

• DEF CON 28 Safe Mode Demo Labs – Matthew Creel’s ‘Redlure’

• Multi-platform card skimmer targets Shopify, BigCommerce, Zencart, and Woocommerce stores

• Caviar Introduces Custom ‘Pure Gold’ AirPods Max for $108,000

• Third-Party AirPods Max Solutions Seek to Address Smart Case Criticisms

• Morocco’s Partial Normalization with Israel Comes with Risks and Gains

• In 2020, Congress Threatened Our Speech and Security With the “EARN IT” Act

• EFF Members Rise Up: 2020 in Review

• Using Microsoft 365 Defender to protect against Solorigate

• A week in security (December 21- December 27)

• Hackers steal Defense Information from servers of Kawasaki Heavy

• GoDaddy Apologized For The Insensitive Phishing Test Of Its Staff

• A match made in heaven: best practices for StorageGRID and FabricPool

• Top 5 ways to protect MFA codes

• 10 Benefits of Running Cybersecurity Exercises

• Vulnerability Summary for the Week of December 21, 2020

• AI Enables Predictability and Better Business

• Protected: Rebranding Perception Point

• LG Begins Rolling Out AirPlay 2 and HomeKit to 2018 Smart TVs

• HomePod Mini Now Works With Select 18W Chargers Following 14.3 Software Update

• 7 Cybersecurity Frameworks To Reduce Cyber Risk

• Apple Holding Shopping Event in Japan on January 2-3, Offering Free Apple Store Gift Card With Select Products

• Tesla Software Update Hints at Support for Apple Music

• 1-15 December 2020 Cyber Attacks Timeline

• Twitter Download To Your Computer For Free

• Main areas to consider before implementing a new virtualized SQL server

• Voice Assistants Can Store And Leak Texts Typed On Smartphones In Proximity

• REvil hackers to leak photos of plastic surgery patients after massive hack

• Ransomware in 2020: A Banner Year for Extortion

• Google: Microsoft Improperly Patched Exploited Windows Vulnerability

• Russia’s SolarWinds Attack

• Preventing Developer Burnout in the Age of Rapid Software Delivery

• Security Predictions for 2021from the (ISC)² Community of Security Professionals (PART 1)

• New Zero-Day, Malware Indicate Second Group May Have Targeted SolarWinds

• Homomorphic Encryption: The ‘Golden Age’ of Cryptography

• Remote Desktop Bugs: Patches That Took Priority in a Pandemic Year

• How Your Digital Trails Wind Up in the Police’s Hands

• SolarWinds SUNBRUST backdoor investigation using ShiftLeft’s Code Property Graph

• A Month of Reckoning for SaaS software creators and consumers

• Ten Ways to Ensure Web Application Security

• Six Steps To Mobile Device Safety | Avast

• Sangoma Technologies Confirms Data Breach as Result of Ransomware Attack

• Beyond the Technical – Advise for those starting in Infosec

• 12 new state privacy and security laws explained: Is your business ready?

• Ransomware Group Threatens To Release Hospital Patient Photos

• California Authorises First Commercial Robo-Delivery Service

• SolarWinds Issues Fix After Massive Hacking Campaign

• Don’t Let Your Stored Procedures Lack Integrity

• Privacy in 2020 and What to Expect for the Year Ahead

• E-commerce app 21 Buttons exposes millions of users’ data

• What Comes Next for the Santa Clara Principles: 2020 in Review

• Trying to register your antivirus in Windows Security Center?

• Best of 2020: Signal App Crypto Cracked, Claims Cellebrite

• Vietnam targeted in complex supply chain attack

• Hackers now indulge in donations to Charity

• Most tragic Cyber Attacks of 2020

• DEF CON 28 Safe Mode Demo Labs – Vincent Rose’s ‘Starkiller’

• Robert M. Lee’s & Jeff Haas’ Little Bobby Comics – ‘WEEK 309’

• DEF CON 28 Safe Mode Demo Labs – Tamoaki Tani’s ‘Malconfscan With Cuckoo’

• Phishing Will Continue Wreak Havoc in 2021—Make Sure You’re Ready

• SaaS security in 2021

• Working together to suppress complex and organized fraud

• 12.9-Inch iPad Pro With Mini-LED Display Rumored to Launch in First Quarter of 2021

• CFOs taking strategic roles after overcoming COVID-19 challenges

• Data Mapping and Data Planning Are Essential for an Organization

• ISC Stormcast For Monday, December 28th 2020 https://isc.sans.edu/podcastdetail.html?id=7306, (Mon, Dec 28th)

• Trump signs 2021 funding bill, averting Tuesday shutdown

• Apple Looks to 2021 With Japanese New Year Ad Highlighting the App Store

• 2020-12-24 (Thursday) – Dridex infection example

• Critical Vulnerability In Nintendo 3DS Console Could Allow MiTM Attacks

• SolarWinds Attack Gives Rise to New Runtime Security Models

• Quickie: Bit Shifting With translate.py, (Sun, Dec 27th)

• IT Security News Weekly Summary – Week 52

• IT Security News Daily Summary 2020-12-27

• Samsung and Xiaomi Plan to Ship Upcoming Smartphones Without Charger After Mocking Apple Over Same Move

• Livecoin Cryptocurrency Exchange Hacked Losing Control Of All Servers

• Surveillance Self-Defense and Security Education: Year in Review 2020

• Book Promotion Site NetGalley Disclosed Data Breach Following Website Defacement

• Here are 7 VPN Reviews on Reddit You Need to Check Out If You’re Looking for a VPN

• The Most Dangerous Online Threats Businesses Should Prepare For

• Sangoma Technologies Disclose Ransomware Attack – Conti Ransomware Gang Involved

• New Top 10 Best Antivirus for Android in 2021 -100 % Mobile Protection

• Vermont Hospital confirmed the ransomware attack

• Kuo: Apple Car Still in Early Stages, Unlikely to Launch Until 2025-2027 at Earliest

• Apple iCloud Outage Caused Setup Issues and Account Activation Failures

• Evaluating My 2020 VDI and DaaS Predictions

• Security Affairs newsletter Round 294

• Cellebrite Claims To Decrypt Signal App On Android Devices

• The Worst Hacks of 2020, a Surreal Pandemic Year

• Teenspire Global: Innovative Training for the Next Generation

• HackerOne announces first bug hunter to earn more than $2M in bug bounties

• Rebranding Perception Point

• SolarWinds releases updated advisory for SUPERNOVA backdoor

• UK Police Arrested Online Criminal Marketplace That Advertised Stolen Personal Credentials

• Penetration testing

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Halo Cloud Secure Now Supports Google Cloud Platform

• CYBERSECURITY CONSULTANT: ARE MORE CISSPS EMBRACING THE GIG ECONOMY?

• A New SolarWinds Flaw Likely Had Let Hackers Install SUPERNOVA Malware

• The Bitglass Blog

• OWASP Mobile Top 10 Vulnerabilities and Mitigation Strategies

• Weekly Update 223

• Biggest Security Takeaway of 2020: Don’t Leak Secrets on GitHub

• Eliminating API Authentication and Access Control Security Gaps

• The U.S. Internet Is Being Starved of Its Potential: 2020 in Review

Generated on 2020-12-28 23:55:08.461296