IT Security News Daily Summary 2022-03-09

• Why the U.S. can engage Russia on cyber over Ukraine

• City gains real-time visibility into snow removal operations

• Critical Exchange Server bug fixed for March Patch Tuesday

• FBI Alert: Ransomware Attacks Hit Critical Infrastructure Organizations

• iPad Air 2022 vs. iPad Pro 2021 Buyer’s Guide

• SEC proposes mandatory breach reporting for publicly traded companies

• APT41 Spies Broke Into 6 US State Networks via a Livestock App

• Russia Officially Blocks Facebook Access For Its Citizens

• Google blocked China-linked APT31’s attacks targeting U.S. Government

• SEC proposes four-day rule for public companies to report cyberattacks

• Happy birthday, TMF!

• Top Cybersecurity Trends to Watch Out for in 2022

• Dirty Pipe Makes Linux Privilege Escalation Easy

• 10 Signs of a Poor Security Leader

• Palo Alto Networks Introduces Prisma Cloud Supply Chain Security

• Bitdefender Launches New Password Manager Solution for Consumers

• Biden Signs Executive Order on Digital Assets

• Ransomware — Encrypt Your Data Before Others Do

• Endpoint Malware and Ransomware Volume Already Exceeded 2020 Totals by the End of Q3 2021

• Twitter makes the leap to Tor

• Updated: Conti Ransomware

• Australia Stresses Cybersecurity Precautions in Wake of Ukraine Conflict

• FormBook spam campaign targets citizens of Ukraine️

• Update now! Microsoft patches three zero-day vulnerabilities on Patch Tuesday

• Bitcoin Rises After Biden Signs Crypto Executive Order

• FormBook spam campaign targets citizens of Ukraine️

• Updated: Conti Ransomware

• iPhone SE 3 vs. iPhone 11 Buyer’s Guide

• M1 Ultra Mac Studio is 2 Pounds Heavier Than M1 Max Version Due to Thermal Differences

• Apple Confirms Studio Display Will Work With PCs, But With Some Caveats

• Third-Generation iPhone SE Features Increased 4GB of RAM

• Cybersecurity Platform CrowdSec Expands Into the United States with Collaborative Solutions Suite Launch

• Twitter Goes on Tor with New Dark Web Domain to Evade Censorship

• Detecting, Investigating, and Verifying Fixes for Security Incidents and Zero-Day Issues Using Lightrun

• ServiceNow releases guidance on Access Control List misconfigurations

• App, security teams need closer bond to fend off cyberattacks

• Consumers Worried About Digital Banking Security

• Blink launches out of stealth with $26M to automate cloud management tasks

• CISA warns of ransomware gang, issues indicators of compromise

• New Zealand Identifies 90,000 CSAM Trading Accounts

• Microsoft Fixes Critical Azure Bug That Exposed Customer Data

• Patches for Firefox Updates in an Emergency Two Zero-Day Vulnerabilities

• Threat Actors are Using Leaked Stolen Nvidia Certificates to Hide Malware

• Romanian Extradited to US to Face Cybercrime Charge

• Deals: Take Up to $150 Off 2021 iPad Pro, iPad Mini, and iPad in Latest Sales

• Mac Pro Now Starts With 512GB of Storage and Radeon Pro W5500X Graphics

• Deals: Expercom Offers First Discount on Apple’s New Studio Display

• Come Compete in the White Hat Cyber Forecasting Challenge

• ServiceNow releases guidance on Access Control List misconfigurations after report highlights prevalence

• Securing healthcare: An IT health check on the state of the sector

• 52 Critical Infrastructure Orgs Hit by Ragnar Locker Ransomware Gang – FBI

• Most ServiceNow Instances Misconfigured, Exposed

• HelpSystems to Acquire MDR Services Firm Alert Logic

• Microsoft Patch Tuesday, March 2022 Edition

• Ciaran Martin and Leeza Garber to Headline at the Infosecurity Magazine Online Summit

• Multiple Russian government websites hacked in a supply chain attack

• Seventy-One Vulnerabilities Addressed By Microsoft On Patch Tuesday

• Millions Of APC Smart-UPS Devices Vulnerable To TLStorm

• New Method That Amplifies DDoSes By 4 Billion-Fold. What Could Go Wrong?

• Chinese APT Zero Days Compromised US State Governments

• Artificial Intelligence to help communicate with animals

• New 16 High-Severity UEFI Firmware Bugs Uncovered in Millions of HP Devices

• SEC to vote on new cybersecurity disclosure rules as Ukraine crisis gives them ‘special relevance’

• Microsoft Patch Tuesday March Addressed 71 Bugs Including 3 Zero-Day

• Elon Musk Asks Judge For End Of Oversight Of His Tweets

• Is Anyone Doing Anything About the Explosion in Crypto Crime?

• Security Leaders Find Value in Veterans to Solve Cyber Skills Shortage

• Google Blocks Chinese Phishing Campaign Targeting U.S. Government

• Immersive Labs: Average cyberthreat response takes 96 days

• Zero Trust Can’t Stop at the Federal Level

• Anonymous hacked Russian cams, websites, announced a clamorous leak

• Russian APTs Furiously Phish Ukraine – Google

• Online Safety Bill To Include Online Scam Protections

• CrowdStrike and Cloud Security Alliance Collaborate to Enable Pervasive Zero Trust

• Zscaler, Okta, CrowdStrike seek to combat zero trust ‘confusion’

• SlashNext launches anti-phishing solution for Microsoft 365

• Siemens Addresses Over 90 Vulnerabilities Affecting Third-Party Components

• Want to donate to Ukraine relief? Here’s a list of top-rated charities to help the relief effort

• Telegram Founder Reassures Ukrainian Users Of Privacy

• Smartphone malware is on the rise, here’s what to watch out for

• Hackers Abuse Mitel Devices to Amplify DDoS Attacks by 4 Billion Times

• Stay on target: How accurate threat detection leads to better defense

• The Conflict in Ukraine Has Brought Attention to the Vulnerability of Critical Energy Infrastructure

• What Caused The Ransomware Attack On Toyota? Experts Insight

• 68% Govt Covid Passport Apps At Risk

• Ukraine Conflict Puts Organisations’ Cyber-Resilience To The Test

• Small Danish Businesses Can Apply for a 50.000 DKK Government Grant to Spend on Cyber Resilience

• Zero-Click Flaws Discovered in UPS Devices

• Ukrainian CERT Alerts Citizens of Phishing Attacks Using Hacked Accounts

• Meet our new improved VirusTotal Graph

• Millions of APC Smart-UPS devices vulnerable to TLStorm

• Mitel Devices Abused for DDoS Vector With Record-Breaking Amplification Ratio

• Security and the Peter Principle – Seven Signs That You Are Working for a “Peter”

• UK Announces New Rules to Tackle Surging Online Scam Adverts

• Fraud on Zelle

• PSA: Studio Display Stands Are Not Interchangeable

• Log4j Breaches At Least 6 U.S. State Governments

• New Specops Report Reveals Passwords Are Weakest Link For Networks

• Expert Reacted On ‘Dirty Pipe’ Linux Vulnerability

• Comment: Chinese Spies Hacked A Livestock App To Breach US State Networks

• Linux Dirty Pipe Exploit Gives Root Access – Patch Now

• New Nokoyawa Ransomware Possibly Related to Hive

• China Backed Hackers Compromised Six US State Governments – Mandiant

• Microsoft Warns of Spoofing Vulnerability in Defender for Endpoint

• The Incident Response Plan – Preparing for a Rainy Day

• Critical Bugs Could Let Attackers Remotely Hack, Damage APC Smart UPS Devices

• HP addressed 16 UEFI firmware flaws impacting laptops, desktops, PoS systems

• US critical infrastructure hit by ransomware

• RagnarLocker ransomware gang breached 52 critical infrastructure organizations

• Experts Estimated the Probability of Disconnecting Russia From the Internet

• Apple Releases Mac Studio, Studio Display, and Updates iPhone SE and iPad Air

• How To Make A Messenger App

• Lawmakers face tight deadline to pass funding bills

• The Psychology of Ransomware Response

• 16 Vulnerabilities Found in Firmware of HP Enterprise Devices

• Apple’s $1599 Standard Studio Display Does Not Come With a Polishing Cloth

• Studio Display Supports 5th-Gen iPad Air, But Not the 4th-Gen or the iPad Mini 6

• Chinese phishing accounts are targeting EU diplomats

• Sextortion scams are on the rise

• Apple Raises Price For Entry-Level iPhone SE

• February 2022’s Most Wanted Malware: Emotet Remains Number One While Trickbot Slips Even Further Down the Index

• #DSbD: UK Could Face a “Cyber Disaster” on its Current Security Trajectory

• China state-backed hackers compromised networks of at least 6 U.S. state governments, research finds

• There is no proof of a Russian TV hack

• Ragnar Locker Ransomware compromises 52 of critical infrastructures in the United States

• Where are the (serious) Russian cyberattacks?

• Chinese APT41 Group Compromises Six US Government Networks

• Car Dealership Employees Begin Legal Case Following Breach

• Chinese APT41 Hackers Broke into at Least 6 U.S. State Governments: Mandiant

• Azure AutoWarp brings automation headaches

• Microsoft Fixes 71 Bugs Including Three Zero Days

• Critical RCE Bugs Found in Pascom Cloud Phone System Used by Businesses

• SharkBot – New Generation Malware on Google Play Distributed as Android Antivirus App

• 10 Best Tablets Under $500 to Buy 2022 – Tablet For Home Use Under a Reasonable Budget

• Build your own Android security product

• Wartime Hacktivism Is Not The Answer | Avast

• Samsung data breach: Lapsus$ gang stole Galaxy devices’ source code

• Data privacy laws are an opportunity to become more honest in reaching your target audience

• Understanding US Defense Department’s relaxed cybersecurity protocols under CMMC 2.0

• Mid-market tackling high rate of costly attacks, worsened by complex, siloed defences and staff burnout

• Internet backbone provider Lumen quits Russia

• Critical Security Patches Issued by Microsoft, Adobe and Other Major Software Firms

• Ragnar ransomware gang hit 52 critical US orgs, says FBI

• Consumers fed up with passwords and KBAs, looking to voice enabled technology as the future

• Sharp rise in SMB cyberattacks by Russia and China

• UPS flaws allow for remote code execution and remote fire-based interruptions

• Small business owners worried about the cybersecurity of their commercial vehicles

• PCS-Mosaic Holdings Welcomes Intelligence Community Veteran and Technology Entrepreneur Larry Cox to Board of Managers

• Domini 2021 Impact Report Highlights a Just Climate Transition, Corporate Emissions, and Access to Affordable Housing

• An Entry-Level Cybersecurity Certification: Why Every Employer Should Want Their Staff to Have One

• Back to Barcelona: MWC 2022 Survival Guide

• DevSecOps code process

• Digital transformation market to reach $1,759.4 billion by 2028

• Ingram Micro Expands Relationship with Okta Identity Solutions

• Start a cybersecurity career with the help of (ISC)², exam costs only $125

• Niagara Networks empowers security teams with deep network inspection visibility

• CyberGRX platform enhancements provide real-time notifications to third-party breaches

• Dasera Mt. Rainier release allows enterprises to scale data protection efforts

• Reciprocity ROAR Platform enables companies to mitigate risk in business processes

• Observe.AI Selective Redaction reduces compliance risk without losing important data

• FBI says Ragnar ransomware gang hit 52 critical US orgs

• In-the-wild DDoS attack can be launched from a single packet to create terabytes of traffic

• FBI says Ragnar ransomware hit 52 critical American orgs

• Cloudflare and Akamai refuse to pull services out of Russia

• Microsoft patches critical remote-code-exec hole in Exchange Server and others

• Adobe Releases Security Updates for Multiple Products

• Kuo: 2022 MacBook Air to Feature M1 Chip, More Color Options and All-New Design

• ADVA MicroMux Edge BiDi boosts capacity and address fiber constraints in access networks

• Mandiant reminds us: Don’t forget about Log4j

• Adobe Releases Security Updates for Multiple Products

• Trellix partners with Gotara to help women navigate and grow their careers in STEM

• Cow-counting app abused by China ‘to spy on US states’

• CISA Releases Security Advisory on PTC Axeda Agent and Desktop Server

• FBI Releases Indicators of Compromise for RagnarLocker Ransomware

• Mozilla Releases Security Updates for Firefox and Firefox ESR

• Microsoft Releases March 2022 Security Updates

• SAP Releases March 2022 Security Updates

• Microsoft March 2022 Patch Tuesday updates fix 89 vulnerabilities

• HomePod Mini Launching in Belgium, Netherlands, and Switzerland at End of March

• M1 Ultra CPU is 60% Faster Than 28-core Mac Pro, GPU is 80% Faster Than Highest-End Radeon Pro W6900X Graphics Card

• M1 Ultra Outperforms 28-Core Intel Mac Pro in First Leaked Benchmark

• Apple’s New Studio Display Includes 1-Meter Thunderbolt Cable With 3-Meter Option Coming Soon

• Delivery Estimates for Mac Studio and Studio Display Slip to April

• Cydarm raises $3 million to enhance its platform and expand globally

• Axonius raises $200 million to meet global customer demand for CAASM and SaaS management solutions

• Chinese hacking groups target US and European governments

• Crypto exchange Coinbase says it already blocks 25,000 Russian addresses

• Twitter launches Tor website to tackle Russian censorship

• Cow-counting app ‘abused by China to spy on US states’

• Identity Theft Statistics You Need to Know in 2022

• For defense IT, acquisitions need to be more than ‘just in time’

• Microsoft’s latest Windows patches fix the bug causing user data not to be erased

• VERT Threat Alert: March 2022 Patch Tuesday Analysis

• Internet Backbone Giant Lumen Shuns .RU

• Mandiant achieves FedRAMP Ready designation to improve security for federal agencies

• Juniper Networks UMSP provides end-to-end network visibility and optimization for MSPs

• Intelsat appoints David Wajsgras as CEO

• QuintessenceLabs secures additional funding to scale its quantum-safe crypto solutions

• Cloud performance: How to measure the things that matter

• Microsoft Patches Critical Exchange Server Flaw

• IT Security News Daily Summary 2022-03-08

• With Mandiant, Google can challenge Microsoft’s security dominance

• How states can streamline broadband grant administration

• Water, power utilities, hospitals get free access to zero-trust tools

• Utah inches closer to becoming fourth state to pass privacy law

• Microsoft Addresses 3 Zero-Days & 3 Critical Bugs for March Patch Tuesday

• SAP Patches Critical Security Flaws in Monitoring Solutions

• Even ‘Perfect’ APIs Can Be Abused

• SAP Releases March 2022 Security Updates

• Google TAG: Russia, Belarus-linked APTs targeted Ukraine

• Access:7 Supply Chain Flaws Impact ATMs, Medical, IoT devices

• Microsoft March 2022 Patch Tuesday: 71 vulnerabilities fixed

• Patch Tuesday: Microsoft Fixes Multiple Code Execution Flaws

• FBI finds Ragnar Locker hit 52 U.S. critical infrastructure targets

• “Dirty Pipe” Linux kernel bug lets anyone write to any file

• What should we do about ‘systemic’ cyber risks? But wait, what even are those

• How to Give Your Apple Devices a Cybersecurity Review

• McAfee Teammates Share How They’ll Help #BreakTheBias this International Women’s Day

• White House reminds agencies to adopt NIST’s software supply chain security framework

• Native American health agencies struggled to access federal data amid pandemic

• Rave Mobile Safety Sees 12th Consecutive Year of Revenue Growth

• What should we do about ‘systemic’ cyber risks? First, what even are those…

• Bitwarden vs 1Password: Compare Top Password Managers

• Security Industry Association Reveals the 2022 Women in Security Forum Power 100 List

• Dark Reading Reflects on International Women’s Day

• Microsoft Releases March 2022 Security Updates

• Access:7 flaws impact +150 device models from over 100 manufacturers

• March 2022 Patch Tuesday: Microsoft fixes RCEs in RDP client, Exchange Server

• What should we do about ‘systemic’ cybersecurity risks? First, what are those…

• Mandiant has ‘more exciting’ future with Google than Microsoft, analyst says

• A new rule aims to boost Biden’s ‘Made in America’ program

• Insurance policies may tighten amid U.S.-Russia tensions, cyber pros warn

• Ermetic Launches New Synergia Global Channel Partner Program

• Within hours of the Log4j flaw being revealed, these hackers were using it

• Chronicles Of Mandiant: Google put a ring on it

• Researchers uncover vulnerabilities in APC Smart-UPS devices

• Google to Buy Mandiant, Aims to Automate Security Response

• FBI Releases Indicators of Compromise for RagnarLocker Ransomware

• Mozilla Releases Security Updates for Firefox and Firefox ESR

• New 16 High-Severity UEFI Firmware Flaws Discovered in Millions of HP Devices

• CISA urges to fix actively exploited Firefox zero-days by March 21

• The Seizure of A Russian Merchant Vessel Raises Questions About Neutrality

• U.S. Cyber Command’s Annual Legal Conference

• Guidance for CVE-2022-23278 spoofing in Microsoft Defender for Endpoint

• IT security is at crisis point – so what are you going to do about it?

• Cybersleuths probe what makes a cyber risk ‘systemic’

• Rivian Sued By Shareholder, Alleging Misleading IPO Data

• Pactera Edge tackles challenges in digital fraud protection

• More rules for IT radicals

• Adobe Patches ‘Critical’ Security Flaws in Illustrator, After Effects

• “Dirty Pipe” Linux kernel bug lets anyone to write to any file

• Oklahoma Hospital Data Breach Impacts 92,000 People

• Prison for Man Who Scammed US Government to Buy Pokémon Card

• Russia, China May Be Coordinating Cyber Attacks: SaaS Security Firm

• Google to Acquire Mandiant; EDR Acquisition Next?

• CISA Releases Security Advisory on PTC Axeda Agent and Desktop Server

• 2.5 million-plus cybersecurity jobs are open—women can fill them

• Anonymous Hacks Russian State TV Stations

• Intel’s Mobileye Files For IPO

• Similarities and Difference Between Ransomware and DDoS Extortion Attacks

• How Ivanti hopes to redefine cybersecurity with AI

• Best crypto wallet 2022: Secure your cryptocurrency

• What If Trump Were Still the President?

• The Open App Markets Bill Moves Out of the Senate Judiciary Committee

• Google to acquire cybersecurity company Mandiant for $5.4 billion

• DoS Attackers are Employing ‘TCP Middlebox Reflection’ to Knock Websites Offline

• IsaacWiper, The Third Wiper Spotted Since the Beginning of The Russian Invasion

• Coalition Named to Fast Company’s Annual List of the World’s Most Innovative Companies for 2022

• Igniting Adoption of a Secure Software Development Lifecycle – A Guide for Secure Software Champions

• Google to buy security firm Mandiant for $5.4 billion

• Attackers can Exploit Dirty Pipe Linux Vulnerability to Overwrite Data

• security identifier (SID)

• States use road sensors to combat treacherous ‘tire carcasses’

• Okta, Airbnb, Zendesk, Asana and Snap join Whistic in forming cybersecurity consortium

• Zero-Click Flaws in Widely Used UPS Devices Threaten Critical Infratructure

• The Uncertain Future of IT Automation

• U.S. State Governments Targeted by Chinese Hackers via Zero-Day in Agriculture Tool

• Webinar Today: Protect the Software Supply Chain, Eliminate Risks in Code

• Medical, IoT Devices From Many Manufacturers Affected by ‘Access:7’ Vulnerabilities

• #DSbD: Embrace Change and Collaboration to Revolutionize Cybersecurity

• Google to Acquire Mandiant

• Chinese Spies Hacked a Livestock App to Breach US State Networks

• Ragnar Locker ransomware group breached at least 52 organizations across 10 critical infrastructure sectors

• The Media Environment and Domestic Public Opinion in China Toward Russia’s War On Ukraine

• Google buys threat intel giant Mandiant for $5.4bn

• Google WAF Circumvented Via Oversized POST Requests

• Google To Acquire Mandiant For $5.4 Billion

• Why You Need a Diversity and Inclusion Program in Cybersecurity

• Bug in the Linux Kernel Allows Privilege Escalation, Container Escape

• 8 More Women in Security You May Not Know but Should

• 7 Essentials for More Security-Aware Design Automation

• Google: Russian Hackers Target Ukrainians, European Allies via Phishing Attacks

• AutoWarp: Critical Cross-Account Vulnerability In Microsoft Azure Automation Service

• Phishing Attempts From FancyBear And Ghostwriter Stepping Up

• 7 Vulnerabilities Patched In Axeda IIoT Remote Mgmt Tool

• Russia Mulls Legalizing Software Piracy As It’s Cut Off From Western Tech

• Linux Has Been Bitten By Its Most High Severity Bug In Years

• The Rules Don’t Apply To Me: Addressing The Cultural Aspect Of Cyber Security

• Meet PCI compliance with credit card tokenization

• Google buys threat intel firm Mandiant for $5.4bn

• New RURansom Wiper Targets Russia

• IT professionals plan to adopt passwordless technology, according to ESG report

• Axonius, which brings asset visibility to complex IT environments, raises $200M

• Google to acquire cybersecurity company Mandiant for $5.4B

• The rise of confidential blockchains

• FBI warns: This ransomware group has gone after critical infrastructure firms again and again

• Palo Alto: More than 100,000 infusion pumps vulnerable to 2 vulnerabilities

• Cloud computing: Microsoft fixes Azure flaw that could have allowed access to other accounts

• 1Password review: Pretty close to perfect

• Android’s March 2022 Security Updates Patch 39 Vulnerabilities

• Millions of APC Smart UPS Devices Can Be Remotely Hacked, Damaged

• CISA Urges Organizations to Patch Recent Firefox Zero-Days

• Breaking the Bias for International Women’s Day 2022

• War Is Calling Crypto’s ‘Neutrality’ Into Question

• Samsung Confirms Data Breach After Hackers Leak Galaxy Source Code

• Google Buys Cybersecurity Firm Mandiant for $5.4 Billion

• Why I Joined Cisco

• Experts Reactions On Samsung Data Breach

• Patch Tuesday March 2022 – Microsoft Releases Fixes for 21 Common Vulnerabilities

• The Dilemma of Defense in Depth

• Decade-Old Critical Vulnerabilities Might Affect Infusion Pumps

• Samsung Admits Hackers Stole Source Code

• Ukraine’s CERT-UA warns of phishing attacks against Ukrainian citizens

• Using Radar to Read Body Language

• TLStorm: Armis finds Three Critical Zero-Days in APC Smart-UPS devices that could impact over 7 in 10 organisations worldwide

• Hive Ransomware Gang Impacts Rompetrol Gas Station Network

• Ragnar Locker Ransomware Breached 52 US Critical Infrastructure Organizations

• Axonius Valued at $2.6 Billion After New $200 Million Funding Round

• Google to Acquire Mandiant for $5.4 Billion in Cash

• Widely used UPS devices can be hijacked and destroyed remotely

• Google to acquire Mandiant for $5.4 billion

• Over 25,000 Russian-linked Cryptocurrency Addresses Have Been Blocked by Coinbase

• IBM, Joins Microsoft, Oracle, SAP With Russia Suspension

• 8 Top Git Security Issues & What To Do About Them

• Empowering Women in Cybersecurity with Check Point’s Majority-Female Senior Leadership Team

• IT professionals plan to adopt passwordless technology

• Dirty Pipe Exploit Rings Alarm Bells in the Linux Community

• Coinbase: We’re Blocking 25,000 Russian Accounts

• Critical “Access:7” Supply Chain Vulnerabilities Impact ATMs, Medical and IoT Devices

• 16-28 February 2022 Cyber Attacks Timeline

• When fake dating profiles try the military approach

• PressReader witnesses cyber attack on its IT Infrastructure

• Password characters that neutralize brute force attacks

• Emergency Patch – 2 New Mozilla Firefox 0-Day Bugs Under Active Attack

• The Five Stages of File Integrity Monitoring (FIM)

• 25,000 Russian-linked accounts blocked by Coinbase

• Cyberattack hits PressReader

• Easily exploitable Linux bug gives root access to attackers (CVE-2022-0847)

• Silicon UK Roundtable: International Women’s Day 2022

• Lapsus$ Ransomware Gang – A Malware in Disguise

• Researchers Warn of Linux Kernel ‘Dirty Pipe’ Arbitrary File Overwrite Vulnerability

• The Continuing Threat of Unpatched Security Vulnerabilities

• An attacker’s toolchest: Living off the land

• Dirty Pipe Linux flaw allows gaining root privileges on major distros

• Looking for adding new detection technologies in your security products?

• Increasing security for single page applications (SPAs)

• China’s annual parliament gives tech industry much to ponder

• Microsoft Azure ‘AutoWarp’ Bug Could Have Let Attackers Access Customers’ Accounts

• ICS vulnerability disclosures surge 110% over the last four years

• 5 steps that simplify IoT security for OEMs

• Azure flaw allowed users to control others’ accounts

• Russia, China May Be Coordinating Cyber Attacks: SaaS App Security Firm

• Critical Bugs Expose Hundreds of Thousands of Medical Devices

• Improve your organization’s cyber hygiene with CIS CSAT Pro

• Fraud detection and prevention costs merchants more than fraud itself

• Application security market to reach $22.655 billion by 2026

• 70% of breached passwords are still in use

• Linux distros patch ‘DirtyPipe’ make-me-root kernel bug

• OpenVPN, Inc. Promotes “Operation Information Freedom”

• Intertek Issues First UL 2900-2-1 Certification to Medical Device Manufacturer NuVasive, Inc.

• KnowBe4 Revolutionizes Security Culture Measurement With Industry-First Maturity Model

• What Google, Amazon and Microsoft revealed about Ukraine’s cyber situation

• The Challenge of Asset Tracking in Industrial Environments

• Imperva API Security protects data across legacy and cloud-native applications

• Medigate PROS establishes cyber physical system security service standards for HDOs

• Coinbase blocks 25,000 Russian-linked accounts and promotes crypto over fiat for sanctions

• Conti Ransomware Group Diaries, Part IV: Cryptocrime

• FBI warns of online scammers impersonating government officials, law enforcement

• Google Enters Bidding War for Mandiant: Reports

• Trio of Vendors Offer Free Services to Organizations at Risk of Russian Cyberattacks

• SS8 Networks acquires Creativity Software to help CSPs comply with precise location data requests

• Infosys partners with Telenor Norway to enhance business agility and operational efficiency

• Sherweb collaborates with Trend Micro to provide more security tools for MSPs

• Grading the FITARA scorecard

• Cyber range training for government IT pros, students

• ‘Dirty Pipe’ Linux vulnerability discovered

• Google in Talks to Acquire Mandiant

• UN mulls Russia’s pitch for cybercrime treaty

Generated on 2022-03-09 23:55:58.186682