IT Security News Daily Summary 2022-03-04

• Report: 9% of security incidents caused by USBs and other removable media

• IRS announces new office focusing on taxpayer experience

• NRO official examines commercial ISR challenges

• Cyberattack Knocks Thousands Offline in Europe

• Most Cybersecurity Vendors at Risk Due to Internet-Exposed IT Assets

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• Elon Musk warns of possible targeted attacks on Starlink in Ukraine

• New Wiper Malware Used Against Ukranian Organizations

• Ukraine Cyber Official: We Only Attack Military Targets

• Use digital identity proofing to verify account creation

• Conti Ransomware Group Diaries, Part III: Weaponry

• U.S. Security Agencies Release Network Security, Vulnerability Guidance

• CISA adds 95 flaws to the Known Exploited Vulnerabilities Catalog

• Imperva Mitigates Ransom DDoS Attack Measuring 2.5 Million Requests per Second

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• CrowdStrike Falcon Enhances Fileless Attack Detection with Intel Accelerated Memory Scanning Feature

• Ukraine’s IT army is doing well, hitting Russia with ‘cost and chaos’

• The top 1,000 open-source libraries

• CISA pledges to share incident reports with FBI after DOJ backlash to bipartisan cybersecurity act

• Russia Blocks Access to Facebook Over War

• Risk & Repeat: Conti ransomware gang gets breached

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• Schools would receive funding for cyber education programs under bipartisan bill

• Preparing for the quantum revolution

• These old security vulnerabilities are creating new opportunities for hackers

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• Update now! Cisco fixes several vulnerabilities

• Senate Passes Strengthening American Cybersecurity Act

• Vulnerabilities in Over 100k Medical Infusion Pumps

• Cyber-Criminals Exploit Invasion of Ukraine

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• Tips to protect your data, security, and privacy from a hands-on expert

• HermeticWiper: A detailed analysis of the destructive malware that targeted Ukraine

• Microsoft to stop Windows security updates in Russia

• Anonymous hacks & defaces Russian Space Research Institute Website

• Critical Flaws With Cisco Expressway Series and TelePresence VCS Let Attackers Execute Arbitrary Code

• DDoS Hacktivism | Avast

• Free HermeticRansom Ransomware Decryptor Released

• Closing the Cybersecurity Knowledge Gap for Your Organization

• The Federal Zero Trust Strategy

• Zero Trust Roundtable – The CISO Consensus

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• Google TAG Takes Down Coordinated Influence Operation Spreading Fake Information

• E-Bike Phishing Sites Abuse Google Ads to Push Scams

• Cyber Attacks Targeted on Websites Using WordPress

• Wolverhampton Wanderers Football Club Selects Arctic Wolf as Security Operations Partner

• Veridium Appoints Damon Ebanks as Vice President of Marketing

• Masergy Named as a Visionary in 2022 Gartner® Magic Quadrant™ for Network Services, Global for Sixth Consecutive Year

• Ermetic Launches Synergia Global Channel Partner Program

• Women in Cyber Webinar – Tackling Gender Bias and Defining Success

• This Week in Security News March 4, 2022

• Google: To stop phishing and malware we’re changing our comment notifications

• Slight Increase in Attacks on ICS Computers in 2021: Report

• February ransomware attacks hit major enterprises

• UK Government Launches Campaign Against Facebook Encryption

• These are the sources of DDoS attacks against Russia, local NCCC warns

• MITRE Launches Engage Deception Framework

• Amazon Alexa Can Be Hijacked Via Commands From Its Own Speaker

• Microsoft Suspends All New Sales To Russia

• Cryptocurrencies In A Time Of War

• Ukraine Government To Sell NFTs To Fund War With Russia

• Cultivating Europe’s Data Garden

• Ukrainian and Russian Will to Fight: An Early-War Assessment

• 71,000 Employees’ Credentials Exposed as a Result of NVIDIA Data Breach

• Not Feeling it Tonight? Here’s The Ultimate List of Safe Porn Sites.

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• Microsoft DDoS protection response guide

• BBC points Russians to the Tor version of itself

• Ukrainian Researcher Released  Software for Conti Ransomware

• 5 Key Benefits of Digitalizing Your Business’ Payments and Collections

• Microsoft suspends all new sales of Microsoft products and services in Russia

• DORA’s Global Reach and Why Enterprises Need to Prepare

• Both Sides in Russia-Ukraine War Heavily Using Telegram for Disinformation and Hacktivism

• U.S. Justice Department Puts an End to Controversial China Initiative

• List of IPs and Domains Targeting the Russian Infrastructure with DDoS Was Made Public by the Govt

• Handling the Cybersecurity Effects of the War in Ukraine

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• Cyber Attack on Bridgestone Lead to Plant Closures Across North America & Latin America

• Sony And Honda Team Up For Electric Vehicles

• NSA report: This is how you should be securing your network

• VISO Trust Raises $11 Million for Cyber Risk Management Platform

• Victims of the T-Mobile 2021 Data Leak Are in Danger of Identity Theft

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• Women in Cyber Webinar – Tackling Gender Bias and Defining Success

• Airbnb Suspends All Operations In Russia, Belarus

• NSA Publishes Best Practices for Improving Network Defenses

• Credentials of 71,000 NVIDIA Employees Leaked Following Cyberattack

• Samsung Encryption Flaw

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• Elon Musk Warns Donated Starlink Systems Could Be Targeted

• These are the problems that cause headaches for bug bounty hunters

• Get patching now: CISA adds another 95 flaws to its known exploited vulnerabilities list

• Tens of Cybersecurity Firms Found Exposing Their Assets: Study

• CISA Says Recent Cisco Router Vulnerabilities Exploited in Attacks

• Nearly All Cybersecurity Companies Expose AWS Assets – Report

• Weekly Update 285

• Russia-Ukraine, who are the soldiers that crowd cyberspace?

• Why Deep Learning Technology Is Dividing Opinion In The Tech World

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• TikTok under investigation in US over harms to children

• NHS Digital’s demise bad for 55 million patients’ privacy – ex-chairman

• Over 60% of SOC Analysts Are Planning to Quit Next Year

• What Caused The Ransomware Attack On Toyota? Experts Insight

• Survey Finds Electric Vehicle Cybersecurity Fears

• Log4Shell Threat Far From Gone: Attackers Continue To Target Vulnerability

• Over 100,000 Medical Infusion Pumps Vulnerable To Years Old Critical Bug

• Blackouts hit Ukraine

• Telegram now favoured by hacktivists, cybercriminals

• Ukraine’s request to block Russia’s internet rejected

• Zero Trust Explained: What It Is and How It Can Benefit Your Company

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• How to Report Email Fraud

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• Namecheap To Offer Free Anonymous hosting, Domains for any anti-War Sites

• Feroot raises $11 million to meet growing customer demand for client-side security solutions

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Analysis of EU Digital Identity Architecture and Reference Framework | Avast

• Nvidia Allegedly Hacks Back | Avast

• ESET Research Podcast: Ukraine’s past and present cyberwar

• New Security Vulnerability Affects Thousands of GitLab Instances

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• Russia Releases List of IPs, Domains Attacking Its Infrastructure with DDoS Attacks

• What is Ransomware Protection as a Service?

• Perennial security challenges hampering organizations in achieving their security objectives

• New infosec products of the week: March 3, 2022

• March 2022 Patch Tuesday forecast: Pressure mounts to resolve vulnerabilities

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• Hackers targeting Multi Factor Authentication sophisticatedly

• Beware of this Citibank Phishing Email alert

• Preparing for Heightened Attacks in the Current Geopolitical Environment

• MSPs see cybersecurity as both a challenge and an opportunity

• What is challenging malware analysis?

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• Tufin Orchestration Suite Named 2022 Cybersecurity Excellence Gold Award Winner for Security Automation

• Neustar Security Services Wins Two Globee Awards in 2022 Cyber Security Global Excellence Awards

• BlackCat ransomware

• Fake News of Cyber Attacks Fast-Spreads, as Conflict between Russia and Ukraine Escalates

• Digital supply chain market to reach $13.67 billion by 2030

• The most impersonated brands in phishing attacks

• ‘Hacktivists’ have declared a cyber war against Russia

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• Dragos Announces Christophe Culine as President of Global Sales and Chief Revenue Officer

• UJET CX Intercloud offers automatic failover between public cloud infrastructures

• Pulumi Business Critical edition enables organizations to manage modern cloud infrastructure

• IronNet Collective Defense platform enhancements reduce false positives

• Attivo Networks ADSecure-DC solution identifies enumeration and attacks targeting Active Directory

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• Now Will the Justice Department Investigate Trump?

• New Relic’s new Kubernetes experience helps engineers analyze application and cluster performance data

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• 2022-03-03 – Brazil-targeted malware infection from email

• Twitch to ban users who persistently share ‘harmful misinformation’

• Some ‘Smol’ NFTs returned after Treasure marketplace exploit leads to theft

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• This new security feature in Windows 11 will help block malicious apps

• PagerDuty acquires Catalytic to transform digital operations with no-code workflow automation

• Magna5 acquires TCG Network Services to strengthen its cybersecurity capabilities

• Calix and Arlo expand partnership to offer end-to-end security solution for homes and small businesses

• SpecterOps collaborates with Quest Software to improve AD security posture for enterprises

• Chargebacks911 and Microsoft launch fraud detection platform for financial institutions

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• MITRE Engage framework provides defense strategies for the cyber defense community

• Summer Fowler joins CyberSaint Growth Advisory Board

• Splunk appoints Gary Steele as CEO

• Negotiations Over UN Cybercrime Treaty Under Way in New York, With EFF and Partners Urging Focus on Human Rights

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• House panel advances DHS acquisition bills

• Former SBA officials press Congress for a more accessible 8(a) program

• Ukrainian cities hit with blackouts after attacks on energy infrastructure

• Accelerated Ransomware Attacks Pressure Targeted Companies to Speed Response

• Hacktivists Stoke Pandemonium Amid Russia’s War in Ukraine

• Avast released a free decryptor for the HermeticRansom that hit Ukraine

• Robinhood – 5,003,937 breached accounts

• The Campaign to Shut Down Crucial Documentary Tool youtube-dl Continues – And So Does the Fight to Save It

• Wartime Is a Bad Time To Mess With the Internet

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• IT Security News Daily Summary 2022-03-03

• KeePassXC 2.7.0 Beta adds support for Windows Hello, Touch ID, Apple Watch, improves Auto-Type, and more

• 10 ways analytics improves endpoint security and asset management

• How AI protects machine identities in a zero-trust world

• Complex ARPA reporting calls for streamlined, centralized solutions

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• AI-powered intelligent security makes the hybrid enterprise possible

• Predicting the future of AI and analytics in endpoint security

• Why analytics are core to any endpoint security business case

• Why zero-trust security tops VPN for remote work — using AI

• How AI-powered XDR can secure the hybrid workforce

• State and local agencies target cyber, broadband, mobility with infrastructure funds

• Infusion Pumps Impacted by Years-Old Critical Vulnerabilities: Report

• Cybersecurity Mesh Architecture: Hope or Hype?

• Critical GitLab Vulnerability Could Allow Attackers To Steal Runner Registration Tokens

• High Assurance Delivers SD-WANs For All

• Potential cyber targets as war in Ukraine rages on

• Box CEO says hybrid work, digitization and cybersecurity are driving its business

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• Nvidia, the ransomware breach with some plot twists

• 75% of Tested Smart Infusion Pumps Vulnerable to Hacking

• ICANN rejects Ukraine’s request to block Russia from the internet

• 75% of medical infusion pumps affected by known vulnerabilities

• Recent Developments in AI and National Security: What You Need to Know

• SharkBot: a “new” generation Android banking Trojan being distributed on Google Play Store

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• ICANN Rejects Ukraine Request To Remove Russia

• Telecoms blackout reported in northeastern Ukraine, first major outage so far

• Cyber threat activity in Ukraine: analysis and resources

• Switzerland’s SWIFT data centre under guard after Russian banks excluded

• Amazon Alexa can be hijacked via commands from own speaker

• Europol Dismantles Criminal Network Distributing Forged EU Travel Documents on Dark Web

• NVIDIA Cyberattack Update: Employee Credentials Exposed

• Twitter Expands ‘Birdwatch’ Trial

• All You Need to Know About User Session Security

• NIST moves toward cybersecurity labeling for IOT devices

• Intel debuts vPro enterprise platform supported by 12th-gen processor range

• Emerging nations more open to cryptocurrency, see long-term potential

• Phishing Campaign Targeted Those Aiding Ukraine Refugees

• Most Disclosed ICS Vulnerabilities are Low Complexity

• HHS Issues Threat Warning to US Healthcare Sector

• Cyber-Attack on New York Ethics Watchdog

• Attivo Expands Active Directory Protection from Unmanaged Devices, Including Mac, Linux, IoT/OT

• Palo Alto Networks Introduces PAN-OS 10.2 Nebula

• Cybersecurity Platform CrowdSec Expands Into the United States

• 8-Character Passwords Can Be Cracked in Less than 60 Minutes

• CISA Adds 95 Known Exploited Vulnerabilities to Catalog

• NSA Releases Network Infrastructure Security Guidance

• The Chatter Podcast: WWII in the Movies with Elizabeth Samet

• Apple and FBI grilled by lawmakers on spyware from Israeli NSO Group

• Secure your OT and IoT devices with Microsoft Defender for IoT and Quzara Cybertorch™

• The Russian Hacker Group Killnet Took Down the Anonymous Website

• Cyberattack on NATP Can Trigger Collective Defense Issue

• Viasat Claims Delay on a “Cyber Event”

• Moscow Exchange Downed by Cyber-Attack

• Google Sets 4 April For Staff Return To Offices

• Russia Said Hacking Russian Satellite Infrastructure is an Act of war

• CrowdStrike Falcon Enhances Fileless Attack Detection with Accelerated Memory Scanning Feature

• Mayor snagged in WhatsApp debate

• Russia Leaks Data From a Thousand Cuts–Podcast

• British Firm Tackles ‘Harvest Now, Decrypt Later’ Problem With Sharding Technology

• BastionZero Raises $6M Seed for Secure Remote Access Tech

• Intel Unveils vPro Security Enhancements for 12th Gen Core Processors

• Intel touts security improvements in 12th-gen Core CPUs

• Teen Who Tracked Elon Musk’s Jet Turns His Attention To Russian Oligarchs

• Ukraine IT Army Targets Belarus Railway Network, Russian GPS

• Details Of 120,000 Russian Soldiers Leaked By Ukrainian Media

• We’re taking our second chance to trim a cybersecurity stock near 52-week highs

• SpecterOps and Quest Software Partner to Minimize Attack Paths and Secure Active Directory

• Cyber Attack on Bridgestone leads to shut down of facilities in North America

• Amazon To Close 68 Retail Stores

• Ukrainian military emails hacked to phish and steal refugee data

• Report: 34% increase in security vulnerabilities for IoT and IT tech

• VISO Trust lands $11M to automate third-party cyber risk management

• Healthcare Company Mon Health Discloses Second Data Breach

• #CCSE22: Why Are Organizations Getting Zero Trust “Wrong”?

• Cisco Releases Security Updates for Multiple Products

• Was an Attempt to Take Over a Tennessee Courthouse in 2010 a Preview of Jan. 6?

• Cyberattacks are Prominent in the Russia-Ukraine Conflict

• URL Analysis 101: Machine Learning What and How?

• Don’t fall for the “Donate to help children in Ukraine” scam

• Cyberbit launches cyber readiness platform to test security team skills

• Security researchers warn of phishing attempts against officials helping refugees

• US legislation brings mandatory cyberattack and ransomware reporting one step closer

• Securing Data With a Frenzied Remote Workforce–Podcast

• CardinalOps Raises $17.5 Million for Threat Coverage Optimization Platform

• Universities Should Prepare for Attacks

• S3 Ep72: AirTag stalking, web server coding woes and Instascams [Podcast + Transcript]

• #CCSE22: The Latest Cybersecurity Workforce Trends

• How to Get One Step Ahead of Mobile Attacks

• 10 Best 4K Monitor for PS4 Pro 2022 – Gaming on High Resolution

• New Trick by DDoS Attackers to Knock over Websites

• Visa, Mastercard Block Russian Financial Institutions

• Expert Insights: What’s Next for Ransomware?

• US launches KleptoCapture force to tackle cryptocurrency use in Russian sanction avoidance

• How Retailers Can Address ‘Buy Now, Pay Later’ Fraud

• How to Automate Offboarding to Keep Your Company Safe

• Critical Patches Issued for Cisco Expressway Series, TelePresence VCS Products

• Researchers Demonstrate New Side-Channel Attack on Homomorphic Encryption

• Launch Of OneWeb Satellites Halted By Russian Demands

• Pulumi launches Business Critical edition for enterprise customers

• The Difference Between Human and Machine Identities

• Cisco fixed two critical flaws in Expressway, TelePresence VCS solutions

• Details of an NSA Hacking Operation

• Log4Shell Threat Remains Extremely High, Cyber Security Expert Insight

• Old Critical Vulnerabilities Impact More Than 100,000 Medical Infusion Pumps

• Hacking iOS vs Android: Which Generates Most Interest?

• Cybercrime Lurks During Tax Season with New Rules Around Cryptocurrency

• The federal employee appeals board is finally functional again

• Log4Shell flaw: Still being used for crypto mining, botnet building… and Rickrolls

• Regulating a Nation’s Information Security Workforce

• U.S. Gov Issues Stark Warning, Calling Firmware Security a ‘Single Point of Failure’

• Hacked Ukrainian Military Emails Used in Attacks on European Governments

• Ukrainian WordPress sites under massive complex attacks

• Cyber attack attempts on Ukraine surge tenfold

• Countries Assisting Ukraine Refugees Targeted in Phishing Cyberattacks

• Zero trust? Not yet a must for most IT departments

• Apple Peek Performance Prognostics – Intego Mac Podcast Episode 229

• U.S. Gov: Firmware Security is ‘Single Point of Failure’

• NATO Completes Quantum-Safe Comms Test

• Russia Denies Satellite Hacking and Warns of Wider War

• Vulnerability Exploit Attempts Surge Tenfold Against Ukrainian Websites

• Hackers Who Broke Into NVIDIA’s Network Leak DLSS Source Code Online

• Threat landscape for industrial automation systems, H2 2021

• Medical infusion pumps vulnerable to attack

• Four SMB cybersecurity practices during geopolitical upheaval

• Singapore to set up digital intelligence unit as cyber threats intensify

• Cisco Patches Critical Vulnerabilities in Expressway, TelePresence VCS Products

• Report: Nearly 75% of Infusion Pumps Affected by Severe Vulnerabilities

• UK government starts public consultation on telco security

• Are used software licences an alternative to buying new ones?

• U.S. Senate Passes Cybersecurity Bill to Strengthen Critical Infrastructure Security

• Research Project: SmartVMI

• Cybersecurity Experts Urge EU Lawmakers to Fix Website Authentication Proposal That Puts Internet Users’ Security and Privacy at Risk

• Do you know what your supply chain is and if it is secure?

• Telegram becomes a digital forefront in the Conflict

• How Attack Path Modelling can help prevent your next cyber-attack

• TeaBot Banking Trojan Posted as QR Code app in Google Play Store Targeting US Users

• Look out for identity theft and fraud crimes as tax season begins

• The biggest threat to ICS/OT is a lack of prioritization

• Phishing attacks hit all-time high in December 2021

• Navigating data privacy in the higher education ecosystem

• Why banks should incorporate software bill of materials (SBOM) into their third-party risk programs

• Stop Ransomware with AI, says Darktrace

• Cyber threat to Electric Vehicles

• Payment security market to reach $54.1 billion by 2028

• The Linux Foundation’s Census of OSS app libraries helps prioritize security work

• Splunk Announces Fiscal Fourth Quarter and Full Year 2022 Financial Results

• AlertEnterprise Unveils New Integrator Reseller Strategy, Hires Jason Alestra To Lead Rapid Channel Growth

• Microsoft: Data wiper cyberattacks continuing in Ukraine

• ‘Several combinations of social engineering’ used during cyberattack on camera maker Axis

• How to Stimulate Organizations’ Security Awareness Training Programs

• Endace OSm 7.1 allows analysts to reconstruct and extract files from recorded packet data

• Data Dynamic Insight AnalytiX 1.4 reduces data vulnerability for enterprises

• Secret Double Octopus expands multifactor authentication offerings to MSP’s and SMB’s

• Enzoic’s automated credentials monitoring in Active Directory detects unsafe passwords

• Anomali XDR solution helps enterprises against advanced cyber threats

• MacGeneration – 101,004 breached accounts

• Imply Polaris enables developers to build modern analytics applications

• Clouded Perceptions: Debunking private cloud security myths

• Why cyberattacks haven’t crippled Ukraine’s communication systems

• Maryland Officials Outline Package to Tighten Cybersecurity

• Unlimited Technology and Integrated Security Technologies join forces to expand service offerings

• Post-Quantum secures NATO’s communications for the quantum era

• Boise State University partners with Stellar Cyber to offer training program for state-funded organizations

• ZNet Technologies collaborates with Acronis to empower service providers in USA and Canada

• Details of ‘120,000 Russian soldiers’ leaked by Ukrainian media

• CrowdStrike offers fully managed identity-threat-detection-as-a-service

• Cape Privacy applies ML to encrypted data to address security concerns

• Senate passes cybersecurity act forcing orgs to report cyberattacks, ransom payments

• A cyberattack on Russian satellites is an act of war, the invasion of Ukraine no

• BGN Technologies launches Israel-US consortium for cyber protection of energy infrastructure

• Cognizant appoints Stephen Rohleder to Board of Directors

• PKWARE names Craig Irwin as VP of Global Sales

• William Monk joins Napier as CPO

• Paysafe appoints Daniel Henson as Chairman

• NVIDIA – 71,335 breached accounts

Generated on 2022-03-04 23:55:38.398735