IT Security News Daily Summary 2021-05-08

• $2 million lost as WallStreetBets forum members fall for crypto scam

• A cyberattack shutdown US Colonial Pipeline

• Major U.S. Pipeline Crippled in Ransomware Attack

• CPDP 2021 – Moderator: Eduard Fosch-Villaronga ‘Artountability: Accountability, Ai And Art’

• KeePass 2.48 update includes an upgraded password database file format

• Yubico New YubiKey 5 FIPS Series Enables Passwordless Authentication

• Ransomware attack leads to shutdown of major U.S. pipeline system

• CPDP 2021 – Moderator: Marcus Michaelsen ‘Social Media Monitoring And Movement Tracking Of Political Dissidents: The End Of Political Asylum In The EU?’

• XKCD ‘Vaccinated’

• IBM X-Force: Ransomware Was the Preferred Attack Method in 2020

• Colonial Pipeline cyberattack shuts down pipeline that supplies 45% of East Coast’s fuel

• Workings of US Firms Disturbed Due to Covid Surge in Banglore

• Threat Actors Use Several New Advanced Techniques To Exploit Windows Services

• Integre la gestión del ciclo de vida de los certificados con la MDM empresarial y optimice la seguridad de su entorno móvil

• Security News In Review: PyInstaller, Cloud Frameworks, and Scripps (Oh My)

• Here’s How International Application Security Market Is Expected To Grow This Decade

• New Spectre Vulnerability Let Hackers Attack Billions of Computers

• API Security Weekly: Issue #132

• Cyberattack Forces Shutdown of Major U.S. Pipeline

• Microsoft Will Soon Kill Flash on Windows 10 for Good

• Microsoft warns of a large-scale BEC campaign to make gift card scam

• Top Stories: Epic Games vs. Apple, Hidden AirTag Mode, Apple Music Hi-Fi, Colorful MacBook Air?

• TsuNAME: New DNS Bug could be used to DDoS Authoritative DNS Servers

• Top 12 Security Flaws Russian Spy Hackers Are Exploiting in the Wild

• Facebook Will Limit Your WhatsApp Features For Not Accepting Privacy Policy

• Week in security with Tony Anscombe

• Modem Vulnerabilty Attacks Android Phones, Steals Data and Records Calls

• Research Shows 19 Petabytes of Data Exposed Across 29,000+ Unprotected Databases

• ISPs Funded 8.5 Million Fake Comments Opposing Net Neutrality

• ShinyHunters is Leaking Data of all the Big Conglomerates

• ‘Build’ or ‘Buy’ your own antivirus product

• Critical Event Management (CEM) Leader Everbridge Completes Acquisition of xMatters to Accelerate Digital Transformation for Enterprise IT and Cyber Resilience

• Eclypsium Awarded AFWERX SBIR Phase One Contract to Explore Air Force Use of Enterprise Device Security Platform

• Keeping Excess Out of Access

• Weak passwords is one of the main reasons for computer hacking in Russia

• LogDNA Browser Logger empowers developers to more efficiently debug web applications

• Entrust Production Analytics Solution optimizes card issuance operations

• An In-Depth analysis of the new Taurus Stealer

• WPScan Intro: How to Scan for WordPress Vulnerabilities

• Three Ivanti Wavelink applications now available on SAP Store

• Intermedia Unite offers enterprise-grade business phone features to Microsoft Teams

• MariaDB updates MariaDB SkySQL cloud database, expands support for AWS

• Security Catalyst Office Hours Recap for May 7, 2021

• Adam Blitzer joins Datadog as COO

• Importance of Using an Email Filter Security Measure

• Security Compass names Rob Bentley as CRO

• Granholm says cyber R&D is a priority at DOE

• ThycoticCentrify Unveils “Definitive Guide to Securing Privileged Access”

• How to successfully automate GRC systems in 7 steps

• Despite confusion, zero-trust journey underway for many

• How North Korean APT Kimsuky Is Evolving Its Tactics

• Russia-linked APT29 group changes TTPs following April advisories

• Tile to Leverage Amazon Echo and Ring Devices to Better Compete With AirTags

• IT Security News Daily Summary 2021-05-07

• How to Remain Secure While Using Running Apps

• RSA Conference 2021: The Best Place to Strengthen Your Resilience

• iPhone Hack Allegedly Used to Spy on China’s Uyghurs

• Twitter’s Tip Jar Privacy Fiasco Was Entirely Avoidable

• China’s PLA Unit 61419 Purchasing Foreign Antivirus Products, Likely for Exploitation

• Apple Releases Safari Technology Preview 124 With Bug Fixes and Performance Improvements

• Google is launching iOS-style privacy labels for Android apps next year

• Louisiana adds vaccine status to digital driver’s license app

• Agencies struggle to find the right AI solutions

• 3 ways intelligent virtual assistants will drive citizen services delivery

• DHS pushes to hire 200 cyber pros

• Apple Rejected Approximately 35% of Apps Submitted to App Store Between 2017 and 2019

• AirTag Accessories: Keyrings and Holders for Apple’s AirTags

• ‘XcodeGhost’ Malware Attack in 2015 Impacted 128 Million iOS Users, According to Trial Documents

• Three Marylanders Indicted Over BEC Scam

• Most Organizations Feel More Vulnerable to Breaches Amid Pandemic

• People of JumpCloud | Emma Neuberger

• Review: 2021 Volkswagen Tiguan Adds Wireless CarPlay With Multi-Screen Support for Apple Maps Directions

• It’s Not Just You: Tweet Previews Aren’t Showing in iMessage Right Now

• Apple Hires New Vice President of Worldwide Corporate Communications

• Millions put at risk by old, out of date routers

• Russian cyber-spies changed tactics after the UK and US outed their techniques – so here’s a list of those changes

• Leaky database exposes fake Amazon product reviews scam

• How to Operationalize Falcon Horizon

• session key

• Better acquisition data would improve DOD oversight

• Boosting student loan debt forgiveness could pay off for cyber recruiting

• Lawmakers seek new probe into AWS JEDI collusion

• Navy to update business systems for performance, reduced costs

• Senate defense committee delays NDAA markup

• Commerce digs into supply chain security

• Better info transfer marks step forward for quantum computing

• Facebook Moving Ahead With “Instagram For Kids” Despite Privacy Concerns

• FBI, NSA, CISA & NCSC Issue Joint Advisory on Russian SVR Activity

• What is File Sanitization? Everything to Know

• Hackers exploit vulnerability on UK NHS Covid vaccine website

• Cyber Threats: The Financial System’s Top Risk

• How a Firewall Can Foster Zero Trust

• computer forensics (cyber forensics)

• The Enemy of Uptime: An Expired SSL Certificate

• The problem with APIs

• Cybersecurity warning: Russian hackers are targeting these vulnerabilities, so patch now

• US-UK Gov Warning: SolarWinds Attackers Add Open-Source PenTest Tool to Arsenal

• Bot Attacks a Top Cybersecurity Concern

• Lawsuit Filed Over Contact Tracing Data Breach

• Over €1 million in cash seized as part of investigation into tobacco smuggling ring

• Smishing Campaign: Roaming Mantis Attacks OS Android Systems With Malware

• New South Wales Labor Party Hit By Avaddon Threat Attackers Demand Ransom

• Exim Releases Security Update

• Very Many Qualcomm Phone Chips Hiding Very Nasty Vulnerability

• 19 petabytes of data exposed across 29,000+ unprotected databases

• Israel’s Version of Moving Fast and Breaking Things: The New Cybersecurity Bill

• SolarWinds aftermath, new data protection law: GFI’s top cybersecurity stories of the month

• 4 Major Privacy and Security Updates From Google You Should Know About

• Critical Cisco Bugs Threaten Corporate Networks

• New Moriya Rootkit Stealthily Backdoors Windows

• Ryuk Ransomware Attack Sprung By Frugal Student

• Biggest ISPs Paid For 8.5 Million Fake FCC Comments Opposing Net Neutrality

• Three US healthcare providers suffer data breach

• Privacy activist Max Schrems on Microsoft’s EU data move: It won’t keep the NSA away

• Protect Against Lost Or Stolen Passwords | Avast

• 3 Ways to Reduce the Cost of a Government Data Breach

• The latest defence against banking scams: Your voice

• Privacy is just for crooks, says enlightened government agency

• 80% of Net Neutrality Comments to FCC Were Fudged

• DevOps is getting code released faster than ever. But security is lagging behind

• Android App Developers Required by Google to Share More Info on Data Handling

• CISA Analyzes FiveHands Ransomware

• Under the Microscope: ISACA Survey on Cybersecurity Workforce, Resources and Budgets

• Qakbot Malware is Targeting the Users Via Malicious Email Campaign

• Defending Against Web Scraping Attacks

• The Edge Pro Quote: Password Empowerment

• Revealing the ‘Snip3’ Crypter, a Highly Evasive RAT Loader

• LogicGate Significantly Expands Integrations Suite and Services

• How to accurately match OVAL security data to installed RPMs

• Multiple Healthcare Provider Clients Affected by CaptureRx Ransomware Attack

• Peloton Shares Price Drop 14% After Suffering Data Breach and Recalling All Its Treadmills

• 51% of Organizations Have Suffered Data Breaches Caused by Third-Party Remote Access

• LibInjection – Detect SQL Injection (SQLi) and Cross-Site Scripting (XSS)

• Malicious Office 365 Apps Are the Ultimate Insiders

• Investment Scammer John Davies Reinvents Himself?

• NCSC Sets Out Security Principles for Smart Cities

• Insurer AXA says it will no longer cover ransomware payments in France

• A spice worth its weight in gold: a multi-million euros fake saffron trafficking scheme uncovered

• Black Hat Asia Speakers Share Secrets About Sandboxes, Smart Doors, and Security

• 11 Reasons Why You Sorta Love Passwords

• Joint NCSC-CISA-FBI-NSA Cybersecurity Advisory on Russian SVR Activity

• 6 Unpatched Flaws Disclosed in Remote Mouse App for Android and iOS

• [Full-Disclosure] HideezKey 2 FAIL: How a good idea turns into a SPF (Security Product Failure)

• Teaching Cybersecurity to Children

• Deals: Shop All-Time Low Prices on M1 MacBook Air and MacBook Pro (Up to $199 Off)

• Prosser: Next MacBook Air Could Come in Colors Similar to iMac

• Obrela teams up with ABS to boost industrial defences against cyberattacks

• Risk to Financial Services and Insurance Organisations increased by 125% in 2020, report reveals

• Data of Over 200,000 People Involved in Amazon Fake Product Review Schemes Was Leaked

• Millions of Old Broadband Routers in the UK Have Serious Security Flaws

• Google to start automatically enrolling users in two-step verification “soon”

• Most Important Security Tools and Resources For Security Researchers and Malware Analyst

• What is Ghimob Malware?

• New Moriya rootkit stealthily backdoors Windows systems

• TsuNAME Vulnerability Can Be Exploited for DDoS Attacks on DNS Servers

• Recycled Phone Numbers Threaten Digital Privacy and Safety, Study Shows

• More Than 180 OAuth 2.0 Cloud Malware Apps Discovered

• 40% of all Android Phones Affected by Qualcomm Snapdragon Vulnerability

• VMware addresses critical RCE in vRealize Business for Cloud

• Apple Exec: We Feature Competitors’ Apps ‘All The Time’ on the App Store

• A New DNS Bug Called TsuNAME Could Be Used to DDoS Key DNS Servers.

• Google Will Require Android App Developers to Disclose Data Collection Procedures

• Cisco Secure Democratizes Extension Security for Firefox and Edge

• Jeff Bezos Offloads $2 Billion In Amazon Shares

• Cryptocurrency Warning From Bank Of England Governor

• Smart cities are a tempting target for cyberattacks, so it’s time to secure them now

• Security Experts Warn Smart Cities Are Vulnerable to Cyberattacks

• New TsuNAME Flaw Could Let Attackers Take Down Authoritative DNS Servers

• FTC Report Highlights Consumer Harms of Manufacturer Repair Restrictions

• New Moriya Rootkit Being Used in The Wild

• Qualcomm’s Mobile Station Modems Vulnerability Puts Android Users’ Privacy at Risk

• VPN protocols explained and compared

• TsuNAME – DNS Bug That Allow Hackers to DDoS Authoritative DNS Servers

• When not to use edge computing

• IRS secures order to serve Kraken with customer data request on cryptocurrency traders

• Google Plans to Switch 2FA (Two-Factor Authentication) On by Default

• VMware Patches Critical Flaw Reported by Sanctioned Russian Security Firm

• Millions of Households at Risk from Outdated Routers

• Apple Supplier Foxconn Raises Employee Bonuses Ahead of iPhone 13 Production

• NCSC provides guidance on cybersecurity for smart cities

• Ryuk Ransomware Infects Bio Research Institute After Student Installs Pirated Software

• How easy is it for hackers to take control of your car?

• Security Recruiter Directory

• Twitter Suspends Account Sharing Trump Posts

• Quick Hits

• FCW Insider: May 7, 2021

• Google teams up with Stop Scams to tackle financial fraud in the UK

• Google Plans to Switch 2F Authentication On by Default

• Misconfigured Database Exposes 200K Fake Amazon Reviewers

• #COVID19 Researchers Lose a Week’s Work to Ryuk Ransomware

• Connecting the Bots – Hancitor fuels Cuba Ransomware Operations

• Analytics Suggest 96% of Users Leave App Tracking Disabled in iOS 14.5

• 16-30 April 2021 Cyber Attacks Timeline

• Fake Amazon Review Scheme Tricking Customers

• New action at EU level against ‘Ndrangheta in Italy and Germany

• New Stealthy Rootkit Infiltrated Networks of High-Profile Organizations

• New Android app for IT Security News with push notifications

• Possible attacks on the TCP/IP protocol stack and countermeasures

• Analytics Suggest 96% of iPhone Users Leave App Tracking Off in iOS 14.5

• Fake Covid-19 Test Results Stifle Travel | Avast

• Suicide prevention body calls for gambling platform data-sharing practices to be reined in

• Vocus turning to sovereignty as its competitive advantage

• BazarBackdoor Campaigns in Attempts to Avoid Detection

• The Security Industry is Protecting the Wrong Thing

• Protecting Collaboration Channels for Remote Work

• What Is Software Deployment: Definition, Specific Activities, Challenges and Advantages

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• Security Vulnerabilities in Dell Laptops

• No more insurance reimbursements for Ransomware Attacks in France

• New Financially Motivated UNC2529 Hacking Group Targets U.S. Organizations with 3 Malware

• Qualcomm’s Modem Bug Makes Billions of Android Devices Exploitable

• Despite MDM, Financial Services Plagued by Phishing, Malware

• Enterprises in the Crosshairs of Nation-State Attacks

• Private Blockchains: Hyperledger vs. Quorum vs. Corda

• Fantastic passwords and where your children can find them

• Popular routers found vulnerable to hacker attacks

• Be a “dumbass”, like some of the world’s best cyber investigators

• May 2021 Patch Tuesday forecast: Spring cleaning is in order

• The obvious and not-so-obvious data you wouldn’t want companies to have

• New infosec products of the week: May 7, 2021

• Kids in Hong Kong and other highly surveilled states worry infosec careers are just asking for trouble

• Cisco HyperFlex web interface has critical flaw that lets attackers get root and execute arbitrary commands

• Building Cyber Resilience in a Cloudy World

• Why Application Security is Still Important for Financial Services?

• A Secure 5G: US Cyber Center of Excellence Selects Palo Alto Networks

• Consumer views and behaviors on creating and using passwords

• Acting on a security risk assessment of your organization’s use of Salesforce

• NSW readies its own data breach notification scheme for state agencies

• Cisco publishes solutions to SD-WAN and HyperFlex software security vulnerabilities

• Qualcomm chip vulnerability found in millions of Google, Samsung, and LG phones

• ISC Stormcast For Friday, May 7th, 2021 https://isc.sans.edu/podcastdetail.html?id=7490, (Fri, May 7th)

• New workloads are driving data protection modernization

• DefakeHop: A deepfake detection method that tackles adversarial threat detection and recognition

• A Deep Dive into Known Magecart IoCs: What Are the Connected Internet Properties?

• Android developers will need to add iOS-like privacy information soon

• Splunk Observability Cloud helps IT and DevOps teams conquer complexity at any scale

• Juniper Security Director Cloud: Helping customers transition seamlessly to a SASE architecture

• Veriff enables external use of AI-powered identity verification technology for developers and users

• Arete launches Arsinal, a toolkit for threat protection and reporting integrated into SentinelOne

• Google Play to require privacy labels on apps in 2022, almost two years after Apple

• Apple Shares Details on How Apple Card Family Works

• Achieving PCI DSS Compliant Firewalls within a Small Business

• Bosch introduces Autodome IP starlight 5100i IR moving camera with built-in AI

• IBM unveils 2 nm chip technology to increase performance and energy efficiency

• Cequence Security API Sentinel 2.0 helps orgs strengthen their runtime API protections

• RMS announces innovations in ExposureIQ to provide real-time event visualization

• Who’s responsible for cloud security?

• Exposed Azure Storage Containers, (Fri, May 7th)

• Ramp eCDN integrates with Microsoft Teams to securely deliver live and VoD streaming experience

• Cisco partners with Box to advance secure work in the cloud

• Thales and Senetas unveil quantum resistant network encryption solution

• Then a Hacker Began Posting Patients’ Deepest Secrets Online

• Dell just patched a driver security flaw dating from 2009

• Three new malware families found in global finance phishing campaign

• Microsoft launches open source tool Counterfeit to prevent AI hacking

• FDA reportedly plans to authorize Pfizer’s COVID vaccine for teens 12-15 in days

• Google will make you use two-step verification to login

• The growing security problem of Bring Your Own Device (BYOD)

• Proper data hygiene critical as enterprises focus on AI governance

• Insurer AXA Halts Ransomware Crime Reimbursement in France

• Windows Moriya rootkit used in highly targeted attacks

• OPSWAT expands leadership team with the appointment of Mike Barker and Eric Spindel

• Sensata invests in Nanoprecise to expand its IoT and MHM offerings

• Kerv acquires cloudThing to further enhance its cloud and digital credentials

• Infobip acquires Anam to offer enhanced product and service offerings for mobile network operators

• Spam text messages spike in the U.S. during the pandemic

Generated on 2021-05-08 23:55:21.781494