IT Security News Daily Summary 2022-02-01

• GAO audit again shines light on problems in VA’s health records rollout

• Army Materiel Command looks to advanced manufacturing to improve readiness

• ShiftLeft CORE ‘Velocity Update’ Streamlines Triage, Automates Build Security Controls

• Disclosure, Panic, Patch: Can We Do Better?

• Digital Shadows Launches New Vulnerability Intelligence Module

• Ping Identity Launches PingOne DaVinci

• Forescout Acquires CyberMDX to Expand Healthcare Cybersecurity Focus

• Universal Control vs. Sidecar: What’s the Difference?

• OMB’s Shalanda Young talks TMF, CX and improper payments

• Newly Detected “StrifeWater” RAT Linked to Iranian APT

• OMB’s Zero Trust strategy: Government gets good

• Unpatched Security Bugs in Medical Wearables Allow Patient Tracking, Data Theft

• Apple Releases watchOS 8.4.1 With Bug Fixes for Apple Watch Series 4 and Later

• NAPA report backs shift in leadership for cyber workforce development

• Next-gen contact centers demand upgraded infrastructure, automation, human-centered design

• The Account Takeover Cat-and-Mouse Game

• DOD opens two fresh facilities to field next-gen supercomputers

• Me on App Store Monopolies and Security

• YouTube Still Testing Picture-in-Picture on iOS With Premium Subscribers

• Google One VPN Now Available for iPhone and iPad Users

• Researchers Devise “DrawnApart” – A GPU Fingerprinting Technique

• Governments turning to data to find solutions to equity issues

• Samba ‘Fruit’ Bug Allows RCE, Full Root User Access

• Think Big, Start Small, Move Fast: Applying Lessons From The Mayo Clinic to Cybersecurity

• Israeli Police: Possible Improper Surveillance by Our Own

• 7 Red Flags That Can Stop Your Company From Becoming a Unicorn

• British Council exposed 144,000 files containing student details

• Specters of Fear and Executive Power

• The power of chaos: A robust and low-cost cryptosystem for the post-quantum era

• Civil rights groups launch effort to stop IRS use of ‘flawed’ ID.me facial recognition

• OpenSSF Alpha-Omega Project Tackles Supply Chain Security

• How Passwordless can Help us Win the Ransomware War

• How to Protect All Five Stages of the IoT Security Lifecycle

• DeepDotWeb Operator Sentenced to Eight Years for Role in $8.4 million Kickback Scheme

• Cyber Attackers Exploiting Microsoft Excel add-in Files

• BRATA Android malware factory resets phones after stealing funds

• Mozilla adding multi-account containers to VPN offering

• Two Dozen UEFI Vulnerabilities Impact Millions of Devices From Major Vendors

• Linux kernel patches “performance can be harmful” bug in video driver

• Apple TV+ Shares First Look at ‘Foundation’ Season 2 With New Cast Member Reveal

• iOS 15.4 Beta Adds Option to Hide iCloud Keychain Security Recommendations

• Improve your security defenses for ransomware attacks with Azure Firewall

• Congratulations to the Top MSRC 2021 Q4 Security Researchers!

• Ransomware means your database IS the front line. How are you defending it?

• British Council Student Data Found in Unprotected Database

• Complexity vs. Capability: How to Bridge the Security Effectiveness Gap

• SolarMarker Malware Uses Novel Techniques to Persist on Hacked Systems

• Expanding the Microsoft Researcher Recognition Program

• German Fuel Supplier Offline After Cyberattack

• Most Reliable Hosting Company Sites in January 2022

• Firewalla launches Purple: Its must-have network security device

• Shell forced to reroute supplies after cyberattack on two German oil companies

• California Passes FLASH Act

• Cyber-Attack on Oil Firms

• FBI Releases PIN on Potential Cyber Activities During the 2022 Beijing Winter Olympics and Paralympics

• Unreleased iPhone, Entry-Level iPad, and iPad Air Imported Into India Ahead of Rumored Spring Launch

• Hackers are now using ransomware in attempt to remain undetected

• Germany: 2 Oil Storage and Supply Firms Hit by Cyberattack

• Social Security Numbers Most Targeted Sensitive Data

• Samba Releases Security Updates

• FBI Releases PIN on Potential Cyber Activities During the 2022 Beijing Winter Olympics and Paralympics

• FBI Urges Temporary Phones For Olympic Athletes

• NSO Group Pegasus Spyware Aims At Finnish Diplomats

• Apple Pays $100.5K Bug Bounty For Mac Webcam Hack

• Cyber Attack Strikes German Fuel Supplies

• U.S. State Department Picks Apart PRC’s South China Sea Customary Law Claim

• Four-day Working Week IS Possible For Cybersec Too!

• Brits Lost Over £96 Million To Dating Scams In 2021

• The High Stakes Of Network Security In 2022

• 600K WordPress Sites Impacted By Critical Plugin RCE Vulnerability

• Cyber Hacking Soars During Home Working, Research Suggests

• Why is cybersecurity one of the best fields for young people to enter?

• Quantum computing brings new security risks: How to protect yourself

• FBI says no smart phones, computers and tablets at Beijing Winter Olympics

• India To Launch Digital Currency In 2022

• Report: Enterprises expect remote work to take permanent hold

• Check Point acquires ‘developer-first’ security startup to boost CloudGuard platform

• Delinea Emerges as a Leading PAM (Privileged Access Mgmt) Provider

• Iranian Hackers Using New PowerShell Backdoor Linked to Memento Ransomware

• Qualys Adds Advanced Remediation Capabilities to Minimize Vulnerability Risk

• Samba Releases Security Updates

• Armis and Eseye joint solution reliably secures connected devices on cellular networks

• Andreas Deliandreadis announced as Kiteworks VP of Sales, EMEA

• Comment From Cybersecurity Expert: The Dangers Of Dating Apps As Valentine’s Day Approaches

• Samba patches critical vulnerability that allows remote code execution as root

• Cyberattacker hits German service station petrol terminal provider

• ESET: Criminals will be Able to Steal Personal Data Using Smartwatches

• CRTC Inquiry Targets Dark Web Marketplace Sellers and Administrator

• British Council Students’ Data Exposed in Major Breach

• Mastercard Launches Global Cybersecurity Alliance Program to Further Secure The Digital Ecosystem

• A cyber attack severely impacted the operations of German petrol distributor Oiltanking GmbH

• Deals: AirPods Max on Sale for $449.99 in Every Color ($99 Off)

• Elon Musk Offers Teenager $5,000 To Stop Tracking Bot

• Identity Fraud: 9 Consumer Scams (and How to Stop Them)

• Critical Log4j Vulnerabilities Are the Ultimate Gift for Cybercriminals

• MuddyWater Targets Turkey

• Gucci Releases $980 Case for $549 AirPods Max

• One in seven ransom extortion attempts leak key operational data

• THE STAKES HAVE NEVER BEEN HIGHER: HOW TO EXPAND THE CYBER WORKFORCE

• These hackers are hitting victims with ransomware in an attempt to cover their tracks

• Forescout acquires healthcare cybersecurity provider CyberMDX

• Living Off the Land: How to Defend Against Malicious Use of Legitimate Utilities

• Critical Flaw Impacts WordPress Plugin With 1 Million Installations

• Duo of Android dropper and payload target certain countries and app users

• Twitter Sues Over German Online Reporting Rule

• Cymulate Launches Service to Augment In-House Security Teams

• Coalition Launches Executive Risks Products With Personalized Risk Assessment

• Solarmarker Malware Uses Novel Techniques to Persist on Hacked Systems

• Black Unity Braided Solo Loop Available at Select Apple Stores Starting Today

• OneDrive Mac Users Unhappy With Buggy and Enforced New ‘Files On-Demand Experience’

• Google and Microsoft back the Alpha-Omega Project to bolster software supply chain

• Cybersecurity M&A Roundup: 31 Deals Announced in January 2022

• Virgin Media O2 Mulls Fibre Network Expansion With New Venture – Report

• One in seven ransomware extortion attempts leak key operational tech records

• FBI warn olympians to leave devices at home

• Critical WordPress Plugin RCE Impacts 600K WordPress Sites

• Island unveils secure browser to give enterprises ‘full control’ over data

• Inside Trickbot, Russia’s Notorious Ransomware Gang

• Android malware BRATA can wipe devices

• Apply those updates now: CVE bypass offers up admin privileges for Windows 10

• Ransomware: Is the party almost over for the cyber crooks?

• CISA Adds Recent iOS, SonicWall Vulnerabilities to ‘Must Patch’ List

• Iran-linked MuddyWater APT group campaign targets Turkish entities

• iOS 15.4 Beta Suggests Apple to Support Push Notifications From Web-Based Apps

• Google Topics | Avast

• AI-powered anti-phishing solution provider Pixm offers last line of defense

• State-sponsored Iranian hackers attack Turkish government, private organizations

• Apple Trolls Spotify Over Neil Young

• FBI: Olympic Athletes Should Leave Devices at Home

• Data Leak Exposes IDs of Airport Security Workers

• Iranian Hackers Using New PowerShell Backdoor in Cyber Espionage Attacks

• Tripwire Patch Priority Index for January 2022

• ‘White Tur’ Hacking Group Borrows Techniques From Multiple APTs

• Telehealth: A New Frontier in Medicine—and Security

• 14 Best Gaming Laptops Under $1000 2022 – Reviews & Buying Guide

• During a Live Stream Ceremony, the Nobel Foundation Disclosed a DDoS attack

• Cyber Attack: North Korea Suffers Internet Outage

• Making Progress Securing Our Nation’s Water Supply

• Russia’s naval exercise near Ireland unlikely to involve cable-tapping shenanigans

• Ukraine Continues to Face Cyber Espionage Attacks from Russian Hackers

• Apple Offering $25 Extra Credit During Apple Watch Trade-In in Celebration of Heart Month

• Looking for adding new detection technologies in your security products?

• Reasons Why Every Business is a Target of DDoS Attacks

• 7 Best Gaming PC under $500 That Can Run Any Game 2022 – Prebuild

• Ransomware Groups are Enlisting Breached Individuals to Persuade Firms to Pay Up

• Researchers Uncover New Iranian Hacking Campaign Targeting Turkish Users

• Review: Group-IB Threat Intelligence & Attribution (TI&A)

• Podcast Episode: Saving Podcasts from a Patent Troll

• Home Affairs singles out Meta as most reluctant to stop online abuse

• How ready are federal agencies for zero trust implementation?

• New SureMDM Vulnerabilities Could Expose Companies to Supply Chain Attacks

• RCE in WordPress plugin Essential Addons for Elementor impacts hundreds of thousands of websites

• Top attack trends every organization should build resilience against

• Microsoft stops 3.7 Tbps DDoS Cyber Attack in history

• Cengage to acquire Cybersecurity training company InfoSec

• North Korean Hacker Group Deliver KONNI Rat Malware Using Weaponized Office Document

• Understaffing persistently impacting enterprise privacy teams

• Organizations neglecting Microsoft 365 cybersecurity features

• Armor Unlocks the Constraints Companies Face with Traditional Cybersecurity Providers

• Verimatrix Key Shield Wins Cybersecurity Excellence Award

• REGISTER TODAY FOR THE (ISC)² ENTRY-LEVEL CYBERSECURITY CERTIFICATION PILOT EXAM

• How can home security be improved with IoT?

• What’s new in IoT in ’22?

• New Samba Bug Allows Remote Attackers to Execute Arbitrary Code as Root

• Infosec products of the month: January 2022

• IoT in smart cities market to reach $132.2 billion by 2026

• Imperva is on Top of the World as it Announces New PoP in Bogotá

• eBook: Anomaly Detection in Cybersecurity for Dummies

• Quantum Star Technologies Starpoint detects zero-day threats at the binary level

• Magnet AUTOMATE Enterprise provides parallel processing of multiple target endpoints

• Google Removed Fake Authenticator App From Play Store That Dropped Vultur Malware

• New Phishing Campaign Delivers AsyncRAT Malware

• Google Launched Differential Privacy Tool for Python Developers

• UK NCSC Rolls Out SME NMAP Scripts To Detect Vulnerabilities

• FBI urges athletes to keep personal devices at home, use burners during Beijing Winter Olympics

• Apple Targeting Indie Director Over ‘Apple-Man’ Film Title Trademark

• Researchers develop automated approach to extract security policies from software

• LambdaTest integrates with Datadog to enable better collaboration among testing and development teams

• SoftBank-backed Cybereason reportedly files confidential paperwork to go public

• Apple, SonicWall, Internet Explorer vulnerabilities added to CISA list

• How to tell if your phone has been hacked

• Vista and Evergreen to acquire Citrix for $16.5 billion

• Updates released for multiple vulnerabilities found in 42 Gears’ SureMDM products

• Vulnerability Summary for the Week of January 24, 2022

• What Hackers Know About Your Software Supply Chain (That You Don’t)

• CVE-2022-0185: Kubernetes Container Escape Using Linux Kernel Exploit

• Free cybersecurity tools for state, local governments

• IaC security options help reduce software development risk

• Mandiant: One in 7 Ransomware Extortion Attacks Expose OT Data

• Security Service Edge Boosters Form New Forum to Encourage Adoption

• Vulnerability Summary for the Week of January 24, 2022

• Wasabi opens Paris storage region to enhance the availability of its services

• BigBear.ai appoints Carla Fitzgerald as CMO

• SaaS Security Guide: How to Protect Your SaaS Business

• 3 Ways to Save Incident Response Time

• State Department confirms ‘defect’ led to resolved global IT outage

• Edge, public cloud, security drive network transformation

• IT Security News Monthly Summary – February

• IT Security News Daily Summary 2022-01-31

• 2022-01-27 – Contact Forms Campaign IcedID (Bokbot) with Cobalt Strike

• Getting facial recognition right

• No, a researcher didn’t find Olympics app spying on you

• Labor Department announces grants for states to expand UI access

• No-cost cybersecurity tools for state, local governments

• Include defensive security in your cybersecurity strategy

• How to prepare for malicious insider threats

• Aggressive BlackCat Ransomware on the Rise

• BlackBerry Agrees to Sell Legacy Patents for $600M

• Samba fixed CVE-2021-44142 remote code execution flaw

• Popular Browser Game ‘Wordle’ Sold to The New York Times, Will Remain Free ‘Initially’

• DIU boasts more rapid acquisition agreements, fewer transitioned tech in 2021

• Dashburgh: Pittsburgh’s open data portal

• Public Exploit Released for Windows 10 Bug

• 2022-01-27 – Contact Forms Campaign IcedID (Bokbot) with Cobalt Strike

• Getting facial recognition right

• Facebook Messenger Will Now Notify You If Someone Screenshots Your Disappearing Message

• CISA adds 8 new vulnerabilities to its Known Exploited Vulnerabilities Catalog

• Sports Scores and Favorite Team Selection Likely Coming to Apple News App

• Apple TV+ Subscribers Who Join for Major Releases Like ‘Greyhound’ Don’t Stick Around

• No, a researcher didn’t find Olympics app spying on you

• Phishing Campaign Registers Attacker’s Device With Victim Network

• Apple Stops Providing EarPods With iPhones Sold in France

• IG report points to weaknesses in the Commerce Department’s infosec program

• Cengage to Buy Cybersecurity Training platform, Infosec

• Hundreds of thousands of routers exposed to Eternal Silence campaign via UPnP

• Mini-LED iMac Pro to Launch in Mid-2022, Not Expected at Spring Event

• Deals: Apple’s M1 iMac (8-Core GPU, 256GB) Drops to New Low of $1,349.99 in Several Colors

• Top 9 Best Laptop for Adobe Creative Cloud 2022 – Photoshop, Illustrator

• Security giant exposed 3TB of sensitive airport & employees data

• Apple Pays $100.5K Bug Bounty for Mac Webcam Hack

• Cyber Insights 2022: Improving Criminal Sophistication

• Conti Ransomware Targets Taiwanese Apple and Tesla Supplier Delta Electronics

• Zscaler CEO: Network security firms have ‘hijacked’ zero trust

• The deadline is here for federal contractors to start paying at least $15 an hour

• OT Data Stolen by Ransomware Gangs Can Facilitate Cyber-Physical Attacks

• SolarWinds breach news center

• 8 best practices for blockchain security

• Emsisoft releases DeadBolt ransomware decryption tool

• Website operator fined for using Google Fonts “the cloudy way”

• Aussie Tech Entrepreneur Extradited Over SMS Fraud

• iMac Pro to Launch in Mid-2022, Not Expected at Spring Event

• Prepublication Review and the Quicksand Foundation of Snepp

• An Important Development in the Law of Diplomatic Appointments

• CrowdStrike Falcon Proactively Protects Against Wiper Malware as CISA Warns U.S. Companies of Potential Attacks

• The top reasons countries ask Google to remove content

• NSO Group Pegasus Spyware Aims at Finnish Diplomats

• Prison for Dark Overlord Collaborator

• Apple Patched Two Zero-Day Bugs And Other Flaws With iOS 15.3, Safari 15.3

• This Phishing Attack Meddles With Your Emails – Alerts Microsoft

• Cyberattacks Increasingly Hobble Pandemic-Weary US Schools

• Some iPhone Users Experiencing Issues With Apple Card Payments

• Workplace Disruption Reported at Meta Amid AR and VR Push, Some Staff Defecting to Competitors Like Apple

• How a few PhD students revealed that phishing trainings might just not work: Lock and Code S03E03

• Top-Ranking Banking Trojan Ramnit Out to Steal Payment Card Data

• Enabling Zero Trust with Azure network security services

• Multilingual Cybersecurity Awareness Training adapted for your needs

• French Court Upholds 100m Euro Fine On Google Over Cookies

• Looking Back at Rumors of iPhone X Design With Rear Touch ID That Never Emerged

• Cyber attacks at an all time high for UK corps

• North Korean Hackers Abuse Windows Update Client in Attacks on Defense Industry

• 7 Privacy Tips for Security Pros

• Your Graphics Card Fingerprint Can Be Used to Track Your Activities Across the Web

• Curated, tested and supported: How enterprise vendors mitigate open source supply chain risk

• Unsecured AWS Server Exposed 3TB In Airport Employee Records

• What To Do To Delete The Scary Amount Of Data Google Has On You

• Smart-Chain Financial Site Qubit Hacked For $80 Million

• Top US Spy Warns Too Many Government Secrets Harms National Security

• Lazarus APT Cell Exploits the Windows Update Client

• What data does Google store about you

• Healthcare and the increasing importance of cybersecurity

• PwnKit Linux Vulnerability Discovered And Fixed After 12 Years

• New LockBit Ransomware Variant Evolves To Target Linux Systems

• Your device’s GPU may be used for fingerprinting purposes

• MoD Reported 7 Serious Data Losses To ICO

• Silicon In Focus Podcast: Content Enablement

• Funny and malicious server banners

• Why Local Governments Remain at Risk of Cyber Crime

• DARPA phase 2 of project targeting ‘quantum advantage’

• Unsecured AWS server exposed 3TB in airport employee records

• Ransomware: Over half of attacks are targeting these three industries

• More Russian Attacks Against Ukraine Come to Light

• The Looming CISO Mental Health Crisis — and What to Do About It, Part 2

• Privacy And You: Take A Step Forward On Data Privacy Day

• DARPA phase 2 of project targeting ‘quantum advantage’

• Ransomware: Over half of attacks are targeting these three industries

• The Zero Trust Timer Is on for Federal Agencies — How Ready Are They?

• Hackers stole $80M worth of cryptocurrency from the Qubit DeFi platform

• Deals: Get the 32GB Apple TV 4K for $159.99 ($19 Off)

• Natural Silk Fibers Used by Researchers to Generate Secure Keys

• 9 Best Gaming Mouse Under $50 2022 – For Fortnite, CS:GO

• Healthcare and the increasing importance of cybersecurity

• MoD Reported 7 Serious Data Losses To ICO

• Funny and malicious server banners

• Why Local Governments Remain at Risk of Cyber Crime

• More Russian Attacks Against Ukraine Come to Light

• Crypto Agility: Solving for the Inevitable

• DeepDotWeb admin sentenced to 97 months in prison for money laundering scheme

• Microsoft OneDrive for macOS Local Privilege Escalation

• Privacy And You: Take A Step Forward On Data Privacy Day

• $770 Million Lost from Social Media Fraud Surge

• PwnKit Linux Vulnerability Discovered And Fixed After 12 Years

• New LockBit Ransomware Variant Evolves To Target Linux Systems

• Your device’s GPU may be used for fingerprinting purposes

• Unsecured AWS server exposed 3TB in airport employee records

• The Looming CISO Mental Health Crisis — and What to Do About It, Part 2

• Deals: iPad Air Drops to All-Time Low Price of $499.99 ($99 Off)

• Apple Watch Getting New Activity Challenge for Heart Month

• FAA Agrees To Switch On More 5G Towers And Masts

• SureMDM Vulnerabilities Exposed Companies to Supply Chain Attacks

• The Third Building Block for the SOC of the Future: Balanced Automation

• HOW TO BECOME AN (ISC)² VOLUNTEER AND MAKE A DIFFERENCE IN THE CYBERSECURITY COMMUNITY

• Projects I Support

• Microsoft: Here’s how we stopped the biggest ever DDoS attack

• Expert earned $100,500 bounty to hack Apple MacBook webcam and microphone

• Cloud-Native Threats in 2022

• Finnish Diplomats Targeted by Pegasus Spyware: Ministry

• CISA’s ‘Must Patch’ List Puts Spotlight on Vulnerability Management Processes

• $2m Bug Bountry offered to Hackers

• Actor’s verified Twitter profile hijacked to spam NFT giveaways

• How to Make Your Smartphone Secure with These 7 Apps

• North Korean Hackers Leverages Windows Update Client to Execute Malicious Payload

• A week in security (January 24 – 30)

• Putin Orders New System To Ban ‘Toxic’ Internet Content

• Crypto Finance Firm Offers $2m Bug Bounty to Hackers

• US Revokes China Unicom’s License

• Attackers are Using Shipment-Delivery Scams to Lure Victims to Install Trickbot

• 10K Victims Infested via Google Play 2FA App Loaded with Banking Trojan

• Russia Recorded the Largest Botnet Attack on Retail

• Priti Patel Approves Extradition Of Autonomy Founder Mike Lynch

• QNAP Ransomware: Thousands Infected with DeadBolt

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of January 24, 2022

• Why Do Many CISOs Prefer Incident Response over Threat Prevention?

• Protecting Networks From Future Attacks | Avast

• German Court Rules Websites Embedding Google Fonts Violates GDPR

• Trying to register your antivirus in Windows Security Center?

• China Unicom Latest To Be Banned Over National Security

• Americans lost $770 million from social media fraud in 2021, FTC reports

• Why vulnerability scanners aren’t enough to prevent a ransomware attack on your business

• Apple Pays $100,500 Bounty to Hacker Who Found Way to Hack MacBook Webcam

• Researchers Use Natural Silk Fibers to Generate Secure Keys for Strong Authentication

• Cybersecurity staff turnover and burnout: How worried should organizations be?

• Reducing the blast radius of credential theft

• FBI still unsure about Israel Phantom Spyware

• Work from Home leading to surge in Cyber Attacks in UK

• Crypto outfit Qubit appeals to the honour of thieves who lifted $80M of its digi-dollars

• How costly is an insider threat?

• DeepDotWeb News Site Operator Sentenced to 8 Years for Money Laundering

• Number of data compromises reaching all-time high

• Manufacturing firms turning to the cloud to increase their business agility

• Cloud infrastructure spending jumped to $18.6B in 3Q21

• Cybersecurity and Drones: How to Address the Security Threats

• IT leadership appointments: Arkose Labs, IDEMIA NSS, McAfee, Seagate, Transmit Security, and Zenoss

• Three New iOS Features Expected for iPhones Later This Year

• Over 100 Million android users fall under Dark Herring Trap

Generated on 2022-02-01 23:55:27.138312