IT Security News Daily Summary 2021-12-13

• password salting

• Kronos hit with ransomware, warns of data breach and ‘several week’ outage

• Experts say log4shell exploits will persist for ‘months if not years’

• iOS 15.2 Features: Everything New in iOS 15.2

• What’s needed for the future of software factories

• Keeping UX front and center in ID management

• HR platform Kronos hit with ransomware, UKG warns of data breach and ‘several week’ outage

• Impact of Log4j vulnerability on GFI

• 40% of Corporate Networks Targeted by Attackers Seeking to Exploit Log4j

• Why Classifying Ransomware as a National Security Threat Matters

• XSS Attacks: Best Prevention

• When the question is paying ransom, the answer isn’t always clear

• AF’s counter-drone tech nears completion

• Apple releases Tracker Detect Android app to identify AirTags, other Find My-enabled trackers

• Critical Log4j flaw exploited a week before disclosure

• CSAM Found on LSU Professor’s Computer

• Cybersecurity ‘Vaccines’ Emerge as Ransomware, Vulnerability Defense

• Vulnerability Summary for the Week of December 6, 2021

• Practical coexistence attacks on billions of WiFi chips allow data theft and traffic manipulation

• Apple Patches 42 Security Flaws in Latest iOS Refresh

• Vulnerability Summary for the Week of December 6, 2021

• Practical coexistence attacks on billions of WiFi chips allows data theft and traffic manipulation

• Apple’s 27-Inch ‘iMac Pro’ With Mini-LED Display Expected in Spring 2022

• No Foldable iPhone Expected Until 2023 at the Earliest, But 2024 More Likely

• Indian PM Modi’s Twitter Account HACKED for Bitcoin scam

• Government watchdog calls out TMF for low rate of cost recovery

• SANS Opens Free Holiday Hack Challenge

• Bug-Bounty Programs Shift Focus to Most Critical Flaws

• Multiple Vulnerabilities Found In GoAutoDial Call Center Software

• CloudGuard AppSec – The only solution providing preemptive Web Application Protection against the Log4j Vulnerability

• Critical Log4Shell security flaw lets hackers compromise vulnerable servers

• Name That Toon: Modern-Day Frosty

• Apple Releases ‘Tracker Detect’ App to Prevent Android Users From Being Tracked by AirTags

• Apple Officially Delays macOS Monterey Universal Control Until Spring 2022

• EFF to Federal Appeals Courts: Hold Police Accountable for Violating Civilians’ Right to Record

• New cybersecurity flaw shows vulnerability in ‘LOG4J,’ which poses risk to thousands of products

• Malicious PyPI Code Packages Rack Up Thousands of Downloads

• Where the Latest Log4Shell Attacks Are Coming From

• Hackers Target India’s Prime Minister

• Log4Shell Exploitation Grows as Cybersecurity Firms Scramble to Contain Threat

• The Log4j JNDI attack and how to prevent it

• The numbers behind a cyber pandemic – detailed dive

• Log4j exploits suggest attackers gearing up for ransomware

• Log4Shell Is Spawning Even Nastier Mutations

• Why you need an email security policy and how to build one

• Apple Releases watchOS 8.3 With Apple Music Voice Plan and App Privacy Report

• Apple Releases iOS 15.2 With App Privacy Report, Legacy Contacts, Hide My Email Improvements and More

• Apple Releases HomePod Software 15.2 With Apple Music Voice Plan Support

• Apple Releases macOS Monterey 12.1 With SharePlay

• When disaster strikes, data recovery really is a race against time

• Log4j Vulnerability | Avast | Blog

• White House elevates CX with executive order

• Ransomware suspect arrested over attacks on ‘high-profile’ organisations

• Paying a debt by gift card? Don’t fall for this scam

• Kaspersky Opens Doors to New Transparency Center in North America

• Darktrace Reports Information Technology and Communications Sector Most Targeted by Cyberattackers in 2021

• Responding to Fischerkeller on Initiative Persistence

• Securing U.S. Democracy

• Spectrum, cyber concerns surface in Grady’s nomination hearing

• Building a Scalable Security Architecture on AWS with Cisco Secure Firewall and AWS Gateway Load Balancer

• Spear phish, whale phish, regular phish: What’s the difference?

• Is VPOTUS Bluetooth-phobic or sensible? The answer’s pretty clear

• A Journey in Organizational Resilience: Geopolitical and Socio-Economic Trends and Threats

• How Check Point Infinity Protects Customers from the Log4j Vulnerability

• Multilingual Cybersecurity Awareness Training adapted for your needs

• WooCommerce Credit Card Stealer Found Implanted in Random Plugins

• What is Cyber Security Risk Modeling?

• A non-traditional IT contractor looks a gift horse in the mouth

• Ransomware Affiliate Arrested in Romania

• Adobe Launches Creative Cloud Express App With Drag-and-Drop Content Creation

• The Use of Gift Cards as a Scam Payment Method Has Increased Dramatically, FTC Data Shows

• All You Need to Know About the New Zero-Day Found in the Log4j Java Library

• Cyber Threat forces Canada to shut down 4000 government websites

• Heimdal™ Confirms Log4J Vulnerability Does Not Impact Customers

• Volvo Cars Data Breach Results in Theft of Proprietary Information

• The Use of Gift Cards As a Scam Payment Method Has Increased Dramatically, FTC Data Shows

• What is an Evil Twin Attack?

• A Look Into Purple Fox’s Server Infrastructure

• Patch Now: Apache Log4j Vulnerability Called Log4Shell Actively Exploited

• Ascendex cryptocurrency exchange hacked – $77 million stolen

• Responding to the Log4j 2 vulnerability (CVE-2021-44228)

• HANCITOR DOC drops via CLIPBOARD

• 6 Tips to Protect Yourself From Holiday Shopping Scammers

• FCW Insider: December 13, 2021

• Quick Hits

• Bolster physical defenses with IoT hardware security

• 2 Website Threats to Address for the Holiday Shopping Rush

• iPhone 13 Depreciates Half as Much as Flagship Android Rival

• Deals: Apple’s 24-Inch iMac (8-Core, 256GB) Drops to New Low Price of $1,399

• Heimdal™ Official Statement on Log4Shell Vulnerability

• Timekeeping biz Kronos hit by ransomware and warns customers to engage biz continuity plans

• Logistics Firm Hellmann Scrambling to Recover From Cyberattack

• Log4j Zero Day Flaw: What You Need To Know And How To Protect Yourself

• Indian PM Modi’s Twitter Hacked With Bitcoin Tweet

• Are Your Home Security Cameras Vulnerable To Hacking?

• Polish Regulator To Investigate Apple’s Privacy Policy

• One-Time Password Security Might Fail 80% of the Time. IAM is Better

• New data tracks polling place locations for 37 states

• Log4j zero-day flaw: What you need to know and how to protect yourself

• Germany Jails Operators of ‘Cyberbunker’ Darknet Hub

• Cybersecurity M&A Roundup for December 1-12, 2021

• CISA adds Log4Shell Log4j flaw to the Known Exploited Vulnerabilities Catalog

• CVE-2021-44228 vulnerability in Apache Log4j library

• Deals: Apple Watch Series 7 Gets New All-Time Low Prices on Amazon ($50 Off)

• Responding to Fischerkeller on Initiative Persistence, Defend Forward and Persistent Engagement

• Hackers Use QR Codes to Steal Banking Credentials in Recent Phishing Attempts

• Heimdal™ Security Statement on log4j Vulnerability (CVE-2021-44228)

• Building a Scalable Security Architecture on AWS with Cisco Secure Firewall and AWS Transit Gateway

• CCSP vs. Microsoft Azure Certified Security Engineer Associate — How Does Vendor Focus Factor In?

• Polymer lands $4M to bring no-code data loss prevention to SaaS apps

• CISA Expands ‘Must-Patch’ List With Log4j, FortiOS, Other Vulnerabilities

• A week in security (Dec 6 – 12)

• Silicon UK In Focus Podcast: Threat Hunters

• Log4j flaw: Attackers are making thousands of attempts to exploit this severe vulnerability

• Ex-NFL Star Gets Three Years for #COVID19 Fraud

• Top 3 SaaS Security Threats for 2022

• Karakurt: A New Emerging Data Theft and Cyber Extortion Hacking Group

• Log4Shell update: Attack surface, attacks in the wild, mitigation and remediation

• Teachers targeted by TikTok Teens

• Companies Respond to Log4Shell Vulnerability as Attacks Rise

• “Sadistic” Online Extortionist Jailed for 32 Years

• Volvo Cars Discloses Breach And R&D Data Theft – Cyber Experts Comment

• What Experts Say On Critical Log4j Vulnerability?

• How to Use Live Text on iPhone, iPad, and Mac

• EU ‘Set To Approve’ Microsoft’s $16bn Nuance Buy

• Volvo Cars Investigates Cyber-Theft Of R&D Data

• Mirai-Based ‘Manga’ Botnet Targets Recent TP-Link Vulnerability

• How to Open Spotify Links in Apple Music and Vice Versa

• Google Warns Of Bug That Can Block Android Emergency Calls

• Lawmakers Say Instagram’s Promises ‘Won’t Cut It’

• VirusTotal += Vir.IT

• Indian PM’s Twitter Hacked Again by Crypto Scammers

• Log4Shell was in the wild at least nine days before public disclosure

• Ireland Health Service ‘Compromised Two Months Before Attack’

• “Worst-Case Scenario” Log4j Exploit Travels the Globe

• Trying to register your antivirus in Windows Security Center?

• Meta Releases Horizon Worlds Amidst VR Push

• New zero-day in the Log4j Java Library Exploiting in Wide

• College Email Phishing Scams | Avast

• Ooh, an update. Let’s install it. What could possibly go wro-

• Microsoft Details Building Blocks of Widely Active Qakbot Banking Trojan

• Ultimate guide to the CCSP: Build the most needed skill in cybersecurity

• Two Linux botnets already exploit Log4Shell flaw in Log4j

• How C-suite executives perceive their organizations’ readiness for ransomware attacks

• Unused identities: A growing security threat

• EV certificate usage declining: Is the internet becoming more secure?

• Bitcoin Cyber Attack leads to Indian Prime Minister Narender Modi Twitter hack

• Hellmann ransomware attack and Volvo Cyber Attack

• Log4j RCE activity began on December 1 as botnets start using vulnerability

• Hacker-powered pentests gaining momentum

• Apache Log4j Vulnerability — Log4Shell — Widely Under Active Attack

• How worried should organizations be about their phishing click rate?

• Why is trust in legacy vendors on shaky ground?

• Poll Data: What CEOs Need to Know About Cybersecurity Going into 2022

• A Bank SMS Text Phish Attempt

• Database security market to reach $16,273.8 million by 2028

• What Are the Key Challenges for Cybersecurity Professionals Going into 2022?

• CasaOS: Open-source home cloud based on the Docker ecosystem

• Powering up red team operations

• Nerdio adds backup and disaster recovery features to improve Azure Virtual Desktop resiliency

• Log4Shell explained – how it works, why you need to know, and how to fix it

• LinkedIn Security Vulnerability: A Lesson for Security Engineers

• US, Australia and Japan stump up for subsea cable between Nauru, Kiribati and Federated States of Micronesia

• Microsoft: Log4j exploits extend past crypto mining to outright theft

• IT Security News Weekly Summary – Week 49

• IT Security News Daily Summary 2021-12-12

• How Log4j Vulnerability Could Impact You

• The Best Ways to Secure Communication Channels in The Enterprise Environment

• Report: IT automation to drive tech spending in 2022

• Quebec shuts down thousands of sites as disclosure of the Log4Shell flaw

• Critical ‘Log4Shell’ Zero-Day Vulnerability Wreaks Havoc Online

• Log4Shell: Reconnaissance and post exploitation network detection

• Anticipating Future Directions of Tech-Enabled Terror

• Update on Log4j Zero-Day Vulnerability

• Russian nation sentenced to 48 months in prison for helping Kelihos Botnet to evade detection

• A phishing campaign targets clients of German banks using QR codes

• How to Guard Against Smishing Attacks on Your Phone

• Security Affairs newsletter Round 344

• Week in review: Apache Log4j 0day exploited, Kali Linux 2021.4 released, Patch Tuesday forecast

• Protect Yourself Against The Apache Log4j Vulnerability

• Penetration testing

• Weekly Update 273

• Guidance for preventing, detecting, and hunting for CVE-2021-44228 Log4j 2 exploitation

• Microsoft’s Response to CVE-2021-44228 Apache Log4j 2

• ‘Vaccine’ against Log4Shell vulnerability has potential—and limitations

• TNS collaborates with Cellusys to enhance roaming and security solutions for 5G networks

• Cloudflare joins Microsoft 365 Networking Partner Program to optimize user connectivity

• Iron Mountain acquires ITRenew to expand its data center lifecycle management solutions

• Sigfox partners with Skyhook to improve delivery of geolocation services

• L3Harris Technologies elects Harry B. Harris Jr. to Board of Directors

Generated on 2021-12-13 23:55:16.033300