IT Security News Daily Summary 2022-03-11

• Blunting RDP brute-force attacks with rate limiting

• Report: Cybersecurity teams need nearly 100 days to develop threat defenses

• Rethinking a ‘lift and shift’ approach to cloud migration

• When IT Spending Plans Don’t Reflect Security Priorities

• Friday Squid Blog: 328-million-year-old Vampire Squid Ancestor Discovered

• Water Wars: Indo-Pac Is Back: Biden Administration Releases New Indo-Pacific Strategy as Tensions Between China and Its Neighbors Simmer

• How Enterprises Can Get Used to Deploying AI for Security

• Rural county puts land records on blockchain

• How to write an information security policy, plus templates

• Prisma Cloud Supply Chain Security Reduces Code Complexity and Risk

• Building a Virtual SOC with the Cortex Suite of Products

• Network Security Innovation and Prevention with PAN-OS 10.2 Nebula

• Celebrating the Changing Face of Leadership

• HBO sued for sharing subscriber data with Facebook

• Is XDR Right for My Organization?

• Review: Anker’s 535 Portable Power Station Keeps Your Devices Running While You’re Off the Grid

• Mac Studio vs. Mac Mini Buyer’s Guide

• Anonymous Hacks Russian Media Censoring Agency Roskomnadzor

• Hacked US Companies to Face New Reporting Requirements

• Ukrainian Man Arrested for Alleged Role in Ransomware Attack on Kaseya, Others

• Lawmakers worry about cyber risks in space

• Android’s March 2022 Security Updates Patch 39 Vulnerabilities

• Ranovus demonstrates co-packaged optics

• Why and how the U.S. should increase cyber protection: A call to arms

• Russia Issues Its Own TLS Certs

• Avast Suspends Operations in Russia and Belarus

• U.S. cloud service giants take action against Russia

• French Bank Denies Access to Russian Workforce

• Divestment From Russia by Foreign Business Could Increase Pressure on Putin

• Dunno about you, but we’re seeing an 800% increase in cyberattacks, says one MSP

• Report: Recent 10x Increase in Cyberattacks on Ukraine

• Apple Clashes With UK Regulator in Fierce Response to Warning That Could Require It to ‘Redesign the iPhone’

• MacRumors Giveaway: Win an Apple Watch Series 7 and Band From BluShark

• Russian based APT Groups Conduct Phishing Campaigns Targeting Ukraine

• DARPA taps OTAs to accelerate the making of a useful quantum supercomputer

• NetWalker Suspect Extradited to US

• New RURansom Wiper Targets Russia

• Unit 42 Publishes New Techniques to Mitigate Vulnerabilities in GKE Autopilot

• LastPass vs 1Password: Battle of the password manager titans

• Data centres are still a tempting target for hackers: Here’s how to improve your security

• Bringing Kenna Security into SecureX Orchestration

• DDoS Releases Alleged Leak Of Russian Censorship Agency

• ‘We Are Not Ready’: A Cyber Expert On US Vulnerability To A Russian Attack

• NetWalker Ransomware Affiliate Extradited To The US For Further Charges

• Deals: Discover the Best Carrier Offers on Apple’s New iPhone SE, iPad Air, and Green iPhone 13

• High rates of known, exploitable vulnerabilities still found in the wild, report reveals

• Cyber Attack news headlines trending on Google

• screened subnet

• Google Attempts to Explain Surge in Chrome Zero-Day Exploitation

• How to build a security champions program

• The Justice Department Faces a Setback in the Capitol Riot Cases

• Proxy vs VPN – Differences and Advantages

• Train to Retain: How Technology Can Deliver World Class Learning and Development for Your Business

• Anonymous Claims to Have Leaked Over 360,000 Files From Russian Federal Agency

• Alleged Kaseya ransomware attacker arrives in Texas for trial

• iPhone 13 in Green and iPhone 13 Pro in Alpine Green Reviews: A ‘Saturated’ but ‘Subtle Statement’

• Countering Harmful Content: A Research Agenda

• BazarBackdoor Malware Distributed via Corporate Website Contact Forms

• Google, Meta Investigated By EU, UK Over Ad Deal

• Raccoon Stealer Crawls Into Telegram

• How to Combat the No. 1 Cause of Security Breaches: Complexity

• Anonymous hacked Roskomnadzor agency revealing Russian disinformation

• Improve your hybrid cloud security with these 3 tips

• Linux “Dirty Pipe” vulnerability gives unprivileged users root access

• UK Announces Legislation to Govern Digital Identity Security

• Senate passes $1.5T funding bill

• Google: We’re spotting more Chrome browser zero-day flaws in the wild. Here’s why

• Russian Cyber Restraint in Ukraine Puzzles Experts

• Going Passwordless With py_webauthn

• Businesse’s Pascom Cloud Phone System Contains Severe RCE Flaws

• High-Severity Vulnerabilities Patched in Omron PLC Programming Software

• Multiple Security Flaws Discovered in Popular Software Package Managers

• Apple Now Accepting Pre-Orders for New iPhone SE and iPad Air

• 12 Best Tablets Under $150 to Buy 2022 – Top Quality for Low-Price

• Chip Shortage Fears Raised, After Ukraine Halts Neon Production

• Bridging the digital divide with American Rescue Plan Act funding

• Canadian NetWalker Ransomware Operator Extradited to U.S.

• Meta Releases Open Source Browser Extension for Checking Code Authenticity

• 1Password Raise Bug Bounty Rewards To $1 Million

• Meta Allows Calls For Violence Against Putin And Russian Soldiers

• Google: More Chrome browser zero-day flaws are being spotted in-the-wild. That’s not always a bad thing

• EU Lawmakers to Probe ‘Political’ Pegasus Spyware Use

• Ukraine’s IT Army Targeted by Disguised Malware

• Open database leaves major Chinese ports exposed to shipping chaos

• Telegram Messenger Gains Download Manager, New Attachment Menu, and More

• SaaS Security Explained: Definition and Best Practices

• Cybersecurity for banks – Securing growing data centers and high-frequency trading platforms

• #DSbD: Cybersecurity Advances Must Focus on Building Trust in Technologies

• Conti ransomware group spent millions in 2021

• Microsoft calls for more women in cyber

• SaaS Security: How to Protect Your Enterprise in the Cloud

• Ukrainian IT Army Hijacked by Info-stealing Malware

• Russian Pushing New State-run TLS Certificate Authority to Deal With Sanctions

• Kali Linux on bare-metal gets snapshotting functionality

• SEC Proposes Four-Day Breach Notification Rules

• Vodafone and Mercado Libre Likely Hit by Ransomware Attacks

• Have We Seen the Last of the 27-inch iMac?

• Here’s How to Find if WhatsApp Web Code on Your Browser Has Been Hacked

• Lapsus$ Ransomware Group is hiring, it announced recruitment of insiders

• Spoofing: What It Is and How Can You Prevent It?

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Setting the Bar for Government Access to Have I Been Pwned

• Kuo: New High-End Mac Mini Won’t Arrive Until Next Year

• Infosys, Wipro silent on their Russian operations

• Infosys, Wipro, silent on their Russian operations

• Here’s How to Find If WhatsApp Web Code on Your Browser Has Been Hacked

• Apple Store Down Ahead of New iPad Air and iPhone SE Pre-Orders

• New infosec products of the week: March 11, 2022

• Weekly Update 286

• Shipping fraud quickly emerging as one of the top fraud types

• Single Packets Launching DDoS Attacks in the Wild

• Conti Ransomware gang pays salaries and develops cryptocurrency

• Ukraine now faces MicroBackdoor malware threat from Russia

• Critical Vulnerabilities In APC Smart-UPS Devices Let Attackers Remotely Manipulate The Power

• Vodafone investigates claims of a data breach made by Lapsus$ gang

• Cosumers don’t think they can dodge identity fraud

• New DDoS Does 4 Billion Times The Damage | Avast

• What is fueling the adoption of passwordless authentication?

• Organizations need to evolve their data management strategy

• Check Point Research Reveals Leaks of Conti Ransomware Group

• Mobile data protection market to reach $13.999 billion by 2026

• Consumers demand a digital banking experience with security at its foundation

• Moscow to issue HTTPS certs to Russian websites

• New Report by U.K. NCSC Highlights the Impact of Diversity on the Cybersecurity Workforce

• ‘Game-changer’: SEC rules on cyber disclosure would boost security planning, spending

• Druva unveils cloud backup capabilities for Amazon EC2 to improve data security

• Armorblox Advanced Data Loss Prevention protects critical business workflows

• VPN use in Russia is surging as citizens try to bypass government’s tightening internet control

• True or false? How to spot – and stop – fake news

• Malwarebytes’ cloud console updates simplify threat management processes for SMBs

• Darktrace platform enhancements provide additional vulnerability insights

• Beware the Never-Ending Disinformation Emergency

• Canadian accused of unleashing NetWalker ransomware extradited

• GSA plans follow-on to e-commerce platform pilot

• NetWalker ransomware affiliate extradited to the US for further charges

• Telenor Sweden collaborates with YesWeHack to defend its critical infrastructure

• BT selects Google Cloud to boost digital transformation efforts

• Analysis of leaked Conti files blows lid off ransomware gang

• Lid blown off Conti ransomware gang after leaked internal files analyzed

• Kevin Powers joins CyberSaint Growth Advisory Board

• Safe Security appoints Michael Johnson to Board of Directors

• Thrive acquires SouthTech to strengthen IT service offerings for the Florida market

• HelpSystems acquires Alert Logic to address cybersecurity skills shortage with hybrid IT approach

• Big Tech Pay-Outs to European ISPs Would Just Concentrate Their Power

• Over 40% of Log4j Downloads Are Vulnerable Versions of the Software

• Richard Orange joins Exabeam as VP of EMEA Sales

• MSP360 hires Alexandra Courson as VP of Sales

• Thomas Dekens joins At-Bay as CSO

• Codenotary appoints Alan Fudge to Board of Directors

• Zuul reveals executive advisory board to drive company advancements

• Quantum Xchange appoints Vincent Berk as Chief Revenue and Strategy Officer

• ACP and security platform provider Gradient Cyber look to bring 24/7 monitoring to enterprises

• Security Teams Prep Too Slowly for Cyberattacks

• Federal Court in Virginia Holds Geofence Warrant Violates Constitution

• IT Security News Daily Summary 2022-03-10

• Log4Shell vulnerability continues to menace developers

• MacBook Air and ‘MacBook’ With M2 Chips Slated for Launch Later This Year

• Utah: Urge Governor Cox to Veto This Weak Data Privacy Bill

• Fortinet says it’s all about the security ASICs

• USDA looks to modify a key nutrition program for the online age

• Compliance fatigue: Can states stay on top of privacy monitoring?

• Use microsegmentation to mitigate lateral attacks

• Crooks target Ukraine’s IT Army with a tainted DDoS tool

• Alleged Ukrainian Member of REvil Ransomware Gang Extradited to US

• How You Can Use Our New Open-Source Database Access Control Tool

• WhatsApp emits extension to detect tampering with desktop web apps

• Watch Dogs – An Entertaining Simulation of a Fantasy Hacking World

• Alleged Ukrainian member of REvil Ransomware Gang extradited to US

• metamorphic and polymorphic malware

• WhatsApp emits browser extension to detect tampering with desktop web apps

• Inside China’s National Defense Mobilization Reform: Capacity Surveys, Mobilization Resources, and “New-Type” Militias

• Netflix Raises Prices For British And Irish Users

• Avast Response To War In Ukraine | Avast

• Class Action Suit Alleges That Facebook “Built The Largest Real-Time Surveillance System In Existence”

• Spotlight on First Dan Kaminsky Fellow: Jonathan Leitschuh

• Don’t Become a Horrible Headline: Some Tips on Redesigning Your Threat Posture for The 2022 Threat Landscape

• The 7 Top Cybersecurity Conferences for 2022

• Malware Posing as Russia DDoS Tool Bites Pro-Ukraine Hackers

• Ex-Canadian Government Employee Charged in NetWalker Ransomware Attacks

• Nearly Half Of UK Organisations Suffer Multiple Breaches

• Come Join the Scam Party

• How agencies can reshape online and in-person services delivery

• Enhance Critical Communications During Natural Disasters

• Oculus Quest 2 Movement Data Will Sync With Apple Health App Starting in April

• Sony Offering Three Month Apple TV+ Trial for PS4 Users

• What Is Whaling Phishing?

• Here’s How ICE Illegally Obtained Bulk Financial Records from Western Union

• The IRS “Dirty Dozen” – Top Tax Season Scams to Steer Clear of This Year

• What’s up with in-the-wild exploits? Plus, what we’re doing about it.

• SharkBot Android Trojan Mimics Legit Apps To Appear On Google Play Store

• Anonymous & its affiliates hacked 90% of Russian misconfigured databases

• Keeper vs 1Password: Compare Password Managers

• Dirty Pipe Privilege Escalation Vulnerability in Linux

• MacRumors Giveaway: Win a New Mac Studio From GRID Studio

• How the NTIA Can Fund Future-Proof Open Access Fiber

• Changes to the CISSP Exam Length Coming Soon

• Anonymous and affiliates hacked 90% of Russian misconfigured databases

• Colorado Elections Clerk Charged with Identity Theft

• Cyber Insurance and Business Risk: How the Relationship Is Changing Reinsurance & Policy Guidance

• Dirty Pipe Privilege Escalation Vulnerability in Linux

• An attacker’s toolchest: Living off the land

• Ransomware: February 2022 review

• UPI Turns Webless

• PROPHET SPIDER is Abusing Citrix ShareFile Remote Code Execution Bug to Deploy Webshell

• Fresh Flaws in Facebook Canvas Second Time

• Identity and the Battle For Privacy | Avast

• Qakbot Debuts New Technique

• Chinese hackers target state governments

• Alleged Kaseya Attacker Extradited to US

• Bugcrowd’s Top Bug Bounty Reward Increases To $1 Million

• Qakbot Botnet Sprouts Fangs, Injects Malware Into Email Threads

• Mitel VoIP Systems Used In Staggering DDoS Attacks

• Alleged REvil Suspect Extradited And Arraigned On Ransomware Spree Charges

• Republican County Clerk Indicted In Voting Machine Breach, Arrest Warrant Issued

• 5G has military promise but security concerns are still being untangled

• Redistricting delays scramble state elections

• S3 Ep73: Ransomware with a difference, dirty Linux pipes, and much more [Podcast]

• AI Accountability Framework Created to Guide Use of AI in Security

• Why decentralization is the future of digital identities

• US Lawmakers Urge DoJ Investigation Of Amazon

• House Committee’s cyber training bill targets public sector responders

• Microsoft: There’s a critical shortage of women in cybersecurity, and we need to do something about it

• Watch out for this phishing attack that hijacks your email chats to spread malware

• Ragnar Locker ransomware – what you need to know

• 6 potential enterprise security risks with NFC technology

• CISA added 98 domains to the joint alert related to Conti ransomware gang

• First M2 Macs Expected to Launch Later This Year Using TSMC’s 4nm Chip Process

• The ICC Investigates the Situation in Ukraine: Jurisdiction and Potential Implications

• Russia might take help of ransomware payments to fund Ukraine war costs

• The House approves a 6.7% full-year domestic spending increase, and another CR

• From Cyber Threats to Cyber Talent, Insights From the Front Lines

• U.S. Warns of Conti Ransomware Attacks as Gang Deals With Leak Fallout

• Alleged REvil suspect extradited and arraigned on ransomware spree charges

• Most Orgs Would Take Security Bugs Over Ethical Hacking Help

• Iranian Hackers Targeting Turkey and Arabian Peninsula in New Malware Campaign

• Deals: Apple’s 12.9-Inch iPad Pro Magic Keyboard on Sale for $293 ($56 Off)

• The Chatter Podcast: Recovering from a Russian Attack with Toomas Ilves

• SQL Injection Vulnerability Discovered in Moodle

• Surfshark Review: A Robust Online Privacy Solution On Budget

• Vodafone Investigates Hacker Threat To Release Source Code

• Starting at Home: Cybersecurity in the Hybrid Workplace

• 1Password Increases Top Bug Bounty Reward to $1 Million

• Why You Should Be Using CISA’s Catalog of Exploited Vulns

• ‘Dirty Pipe’ Kernel Bug Enables Root Patched via Linux Distros

• Anonymous Has Hacked Public Cameras in Russia and Announced a Clamorous Leak

• Multi-Ransomwared Victims Have It Coming–Podcast

• Russia May Use Ransomware Payouts to Avoid Sanctions

• Log4j and Livestock Apps: APT41 Wages Persistent Cyberattack Campaign on US Government

• New Exploit Bypasses Existing Spectre-v2 Mitigations in Intel, AMD, Arm CPUs

• 3 Steps to Putting a Modern Database Security Solution into Practice

• 10 Best Tablets Under $400 to Buy 2022 – Top Reasonably Priced Tablets

• 1Password launches the largest financial incentive program for ethical hackers

• Qakbot Botnet Sprouts Fangs, Injects Malware into Email Threads

• Toshiba’s Top Shareholder Opposes Breakup Plan

• Extortion scheme impersonates government officials, law enforcement

• Latin e-commerce giant Mercado Libre hacked

• In a world of deepfakes, this billion-dollar startup wants you to trust AI-powered ID checks

• It’s time to stop hoping that cybersecurity problems will just go away

• Vodafone Investigating Source Code Theft Claims

• What Security Controls Do I Need for My Kubernetes Cluster?

• Introducing the new ‘Defending Against Critical Threats’ report

• App Store and iTunes Purchases Reportedly ‘Turned Off’ in Russia

• Click, Click, BOOM: The Digital Evidence Surge Behind Prosecuting Jan. 6 Rioters

• What Top Security Controls Do I Need for My Kubernetes Cluster?

• Fewer Than Half Of London Boroughs Have Invested In Cyber Insurance

• War in Ukraine: What type of cyber attacks can we expect next?

• Russian Government Sites Hacked

• Brave browser goes the extra mile to block third party cookies

• All About the Bots: What Botnet Trends Portend for Security Pros

• New Variant of Spectre Attack Bypasses Intel and Arm Hardware Mitigations

• Threat Intelligence Firm Cybersixgill Raises $35 Million

• 90% of MSPs Hit By a Successful Cyber-Attack in the Past 18 Months

• Where’s the Russia-Ukraine Cyberwar?

• Your Biometric Data in Danger of Being Exploited by Hackers

• Mitel VoIP systems used in staggering DDoS attacks

• KnowBe4 Spreads Cyber Awareness Training to Their Community

• New Emotet botnet is rapidly growing, with +130K unique bots spread across 179 countries

• China’s Hacking of European Diplomats Aligns With Russia-Ukraine Conflict

• Conti Group Spent $6m on Salaries, Tools and Services in a Year

• UK Security Agency Issues New Guidance on Data Center Protection

• Studio Display Outputs At 1440p Resolution When Connected to 4th-Gen iPad Air and iPad Mini 6

• Geekbench Scores of New iPhone SE Show On-Par Performance With iPhone 13

• Twitter Launches Dark Web Site To Bypass Russian Block

• Dark web threat intelligence firm Cybersixgill lands $35M

• Over 90% of Exposed Russian Cloud Databases Compromised

• DSbD claims UK is on the path to “cyber disaster”

• February 2022 Cyber Attacks Statistics

• China takes control of 6 government networks in the United States

• Hackers selling high-value targets in the United States

• Reg reader rages over Virgin Media’s email password policy

• 11-Inch iPad Pro No Longer Expected to Gain Mini-LED Display in 2022

• Up to 30% of WordPress plugin bugs don’t get patched

• The Jargon Episode – Intego Mac Podcast Episode 230

• State of Crypto Crime | Avast

• Italy Fines US Facial Recognition Firm

• 27-Inch ‘Studio Display Pro’ With Mini-LED and ProMotion Could Launch in June

• Do you know what your supply chain is and if it is secure?

• New Video Offers First Hands-On Look at New Green and Alpine Green iPhone 13 and iPhone 13 Pro Colors

• Vodafone investigating threat from hackers behind Samsung breach to leak source code

• Samsung Confirmed that Hackers Stole Galaxy Devices Source Code

• Ukrainian Hacker Linked to REvil Ransomware Attacks Extradited to United States

• Does the future of digital identity offer us greater security and convenient experiences?

• Emotet Botnet’s Latest Resurgence Spreads to Over 100,000 Computers

• Why are CAPTCHAs still used?

• Building Password Purgatory with Cloudflare Pages and Workers

• ITOps teams are getting buried beneath too many disparate solutions for endpoint management

• Organizations taking nearly two months to remediate critical risk vulnerabilities

• TLStorm flaws allow to remotely manipulate the power of millions of enterprise UPS devices

• Organizations need to change their current password usage and policies, and do it fast

• Huawei UK board members resign over silence on Ukraine invasion

• Businesses under pressure as consumers exercise their privacy rights

• Still too many parents don’t monitor their children’s online activity

• BigBear.ai to Showcase Advanced AI Solutions for Space, Intelligence, and Logistics at Upcoming Industry Conferences

• Cloud Security Alliance Sets Countdown Clock to Quantum

• New Study Uncovers Behavior and Beliefs of Financial Industry Employees Could Lead to Cybersecurity Risks

• Building Cyber Resilience in a heightened alert environment

• Facial recognition market to reach $12.67 billion by 2028

• Allison Transmission Announces Collaboration with Freightliner Custom Chassis Corporation on Walk-In Van Program

• CrowdStrike Reports Fourth Quarter and Fiscal Year 2022 Financial Results

• Palo Alto Networks Prisma Cloud Supply Chain Security reduces code complexity and risk

• SpyCloud Session Identity Protection prevents fraud from compromised web sessions

• AvePoint Ransomware Detection identifies suspicious behavior within users’ Microsoft OneDrive

• Asigra enhances data protection suite to secure backups against Log4j vulnerabilities

• Veeam Backup for Microsoft 365 v6 boosts customers’ data resilience and mitigates SaaS data risks

• Elastic introduces platform enhancements to protect customers against advanced cyber threats

• ACI Worldwide Fraud Scoring Services provides fraud protection for financial institutions

• Alleged Ukrainian Hacker in US Court After Extradition From Poland

• Spirent Communications brings new test solutions to maintain explosive growth of the cloud

• Legion Cyberworks and Horizon3.ai join forces to improve security controls for organizations

• Ingram Micro and Okta expand relationship to help global channel partners prevent ransomware attacks

• Curricula collaborates with Drata to streamline security awareness training

• Updated Mac Mini Still Coming With M2 and M2 Pro Chips

• CircleCI acquires Ponicode to improve product capabilities for software developers

• Major tech firms launch Security First Initiative to combat third-party data breaches

• Republican county clerk indicted in voting-machine breach, arrest warrant issued

• The secret US mission to bolster Ukraine’s cyber defenses ahead of Russia’s invasion

• Apple Continues Its Slow March Toward the MacPad Future

• AWS Reports Malware Targeting Aid Organizations in Ukraine

• Nvidia’s hacked data is being actively used to disguise malware as legit files

• Is Hacktivism Good or Bad? How Could It Affect Your Business?

• Researchers disclose new Spectre V2 vulnerabilities

• NetAbstraction appoints Alissa Knight to Board of Advisors

• Ukraine invasion: This may be the quiet before the cyber-storm, IT staff warned

Generated on 2022-03-11 23:55:32.940826