IT Security News Daily Summary 2022-05-16

• Maryland ramps up cybersecurity

• 50% of Orgs Rely on Email to Manage Security

• How cryptocurrencies enable attackers and defenders

• iPhones Open to Attack Even When Off, Researchers Say

• Critical bug in Zyxel firewalls, VPNs exploited in the wild

• Apple fixes the sixth zero-day since the beginning of 2022

• 8 Ways to Avoid CISO Burnout

• Password Authentication. How to Correctly Do It.

• Red Hat Enterprise Linux 8.6: Better security, more options

• New Facebook Photo App Raises Privacy Suspicions

• Good decision, bad outcome

• Open Source Security Gets $150M Boost From Industry Heavy Hitters

• British Citizen Alaa Abd El Fattah Demands An End to Mistreatment in Egyptian Prison

• AV camera footage can aid police investigations

• You Can’t Opt Out of Citizen Development

• SaaS App Vanity URLs Can Be Spoofed for Phishing & Social Engineering

• Attackers can Install Malware on iPhone When it is Powered Off – Research

• The plan to secure open source software

• Hacking the Army’s tech talent problem

• Bitdefender vs McAfee: Compare EDR software

• What to Make of the Subpoenas to House Republicans?

• Introducing Allies: A Podcast Series from Lawfare and Goat Rodeo

• The Ukraine Genocide Debate Reveals the Limits of International Law

• ManTech agrees on $4.2B sale to Carlyle Group

• Microsoft Defender vs CrowdStrike: Compare EDR software

• Delve into cybersecurity with this two-part training bundle

• Researchers Devise New Type of Bluetooth LE Relay Attacks

• Name That Toon: Knives Out

• NSA Cyber Chief Vows ‘No Backdoors’ in Quantum Encryption Standards

• Apache Releases Security Advisory for Tomcat

• EFF, Al Sur Launch Guide to Raise Awareness About Deficiencies in Cross-Border Surveillance Treaty and Strategies to Mitigate Human Rights Risks

• Hackers are after your data. So why are you making it so easy for them?

• Beyond Awareness: How to Cultivate the Human Side of Security

• Crippling AI cyberattacks are inevitable: 4 ways companies can prepare

• Brazilian e-commerce firm Americanas reports multimillion-dollar loss following cyberattack

• Microsoft Defender vs CrowdStrike: EDR software comparison

• Compare zero trust vs. the principle of least privilege

• Critical Zyxel Firewall Bug Under Active Attack After PoC Exploit Debut

• Apache Releases Security Advisory for Tomcat

• Stories from the SOC – Persistent malware

• The front lines of government cybersecurity defense

• Biden administration releases $45B for broadband to states

• Ransomware Gang Threatens to Overthrow Costa Rica Government

• Google offers Open Source Security Maintenance Crew

• Secure Software Supply Chain: Why Every Link Matters

• US Manufacturing Giant Parker Hit by Conti Ransomware Gang

• US Cyber Director: Forging a Cybersecurity Social Contract Is Not Optional

• US Courts Are Coming After Crypto Exchanges That Skirt Sanctions

• Microsoft showcases the future of comprehensive security at RSA 2022

• New Version of ‘Sysrv’ Botnet is Targeting Windows and Linux Servers

• Frustrated IT Admin Gets 7 Years in Prison for Wiping Employer’s Databases

• Hackers Can Abuse Low-Power Mode to Run Malware on Powered-Off iPhones

• Eavesdroppers can hack 6G frequency with DIY metasurface

• Experts show how to run malware on chips of a turned-off iPhone

• Defending the Healthcare Security Landscape in the Age of Connected Devices

• US, EU to Ramp Up Chip Making and Raise Pressure on Russia

• Microsoft Identifies Botnet Variant Targeting Windows and Linux Systems

• Avoiding the Unintended Consequences of Strict Cybersecurity Policies

• Report: Devs say the current model of data observability is broken

• Crippling AI cyberattacks are inevitable: 4 ways security pros can prepare

• Me, My Digital Self, and I: Why Identity Is the Foundation of a Decentralized Future

• San Francisco Police Use Driverless Cars For Surveillance

• Ex-eBay Exec Admits Cyberstalking Critics

• Twitter Turns Its Privacy Policy Into An Old School Video Game

• Microsoft’s May Patch Tuesday Updates Cause Windows AD Authentication Errors

• Zyxel Remote Execution Bug Is Being Exploited

• Crypto Executive Says Bitcoin Has ‘No Future’ As Payments Network

• Secure Email Gateway Vs. Integrated Cloud Email Security (SEG Vs. ICES) – What’s the difference, and which should my business use?

• SIMS Software Named a Premier Sponsor in the 2022 ‘ASTORS’ Awards

• CISA ‘temporarily’ removes Windows vulnerability from its must-patch list

• Are period tracking apps safe?

• The downside of ‘debugging’ ransomware

• Fake Clickjacking Bug Bounty Reports: The Key Facts

• Researchers Find Potential Way to Run Malware on iPhone Even When it’s OFF

• Everything You Need to Know About HIPAA

• Why MRG-Effitas matters to SMBs

• Fake Mobile Apps Steal Facebook Credentials, Cryptocurrency-Related Keys

• TerraUSD Organisers ‘Spent $2bn’ In Bitcoin To Maintain Value

• ‘Sysrv’ Botnet Targeting Recent Spring Cloud Gateway Vulnerability

• 4 Tips to Implement Online Cybersecurity Training for Your Information Technology and Security Teams

• EU’s NIS 2 Directive to strengthen cybersecurity requirements for companies

• Palo Alto Networks and Deloitte announce joint managed security service

• This phishing attack delivers three forms of malware. And they all want to steal your data

• SonicWall Patches Unauthorized Access Vulnerability in SMA Appliances

• Global Snack Manufacturer Becomes Cyber Resilient While Cutting Production Costs

• How COVID-19 fuelled a surge in malware

• Report: Cybersecurity Skills Gap Creates Vulnerabilities

• High-Severity BIOS Vulnerability Found In Multiple HP Product Models

• Microsoft Patch Tuesday May Fixed 75 Bugs Including Three Zero-Day Flaws

• Multiple Vulnerabilities Found In Icinga IT Monitoring System

• Researchers Explain How Exploit Vanity URLs Could Allow Phishing Attacks

• Google: Here comes our ‘Open Source Maintenance Crew’

• Microsoft warns: This botnet has new tricks to target Linux and Windows systems

• Microsoft’s May Patch Tuesday Updates Cause Windows AD Authentication Errors

• The NSA Says that There are No Known Flaws in NIST’s Quantum-Resistant Algorithms

• Serious Flaw in Firewalls and VPNs Manufactured by Zyxel Exploited

• Fake reCAPTCHA forms dupe users via compromised WordPress sites

• Iran’s COBALT MIRAGE Threat Group Behind Ransomware Attacks in US

• CISA Removes Windows Vulnerability From ‘Must-Patch’ List Due to Buggy Update

• New Cybersecurity Directive Agreed between the European Parliament and EU Member States

• Bitcoin Slide Continues As Regulators Weigh In

• ‘The People Hacker’ Jenny Radcliffe Inducted into Infosecurity Europe’s Hall of Fame

• Researchers Find Way to Run Malware on iPhone Even When It’s OFF

• Ukrainian national sentenced to 4 years in prison for selling access to hacked servers

• San Francisco police use driverless cars for surveillance

• Shanghai Plans To Ease Lockdown Amidst Supply Chain Disruption

• More money for open source security won’t work

• Researchers warn of APTs, data leaks as serious threats against UK financial sector

• Zyxel Firewall Vulnerability Exploitation Attempts Seen One Day After Disclosure

• Kaspersky: 9 Of 10 Orgs Previously Hit With Ransomware Would Pay If Targeted Again

• Cornwall Council Data Breach

• UK announces nuclear cybersecurity strategy

• Tesla Recalls China Vehicles Over Touchscreen Issue

• A week in security (May 9 – 15)

• Italian Police Foil Pro-Russia Attacks on Eurovision

• Researchers Warn of “Eternity Project” Malware Service Being Sold via Telegram

• Custom PowerShell RAT targets Germans seeking information about the Ukraine crisis

• Musk Criticises Twitter Feed Algorithm, Checks For Bots

• UK Sets Out Nuclear Cybersecurity Strategy

• EU announces provisional cybersecurity directive

• Users’ Crypto Wallets are Stolen by Fake Binance NFT Mystery Box Bots

• Over 20,000 Zyxel Firewalls Still Exposed to Critical Bug

• Read Novel (unverified) – 22,424,472 breached accounts

• EU, US Look To Avoid Semiconductor ‘Subsidy Race’

• 2022 Q1 Privacy Update — A new year sparks new initiatives

• HTML attachments in phishing e-mails

• Wannacry – 5 Years On, 68% Of Enterprises Are Still At Risk

• Kasten by Veeam releases new Kubernetes data management platform

• Sysdig releases new Kubernetes troubleshooting tool

• How to Know If Your Computer Has Virus? How to Protect Your PC?

• Who is Responsible for Taking Action During a Site Cyber Attack?

• Google announces new security and privacy improvements at Google I/O

• SonicWall Urges Admins to Fix SSLVPN SMA1000 Flaws

• Eternity Project: You can pay $260 for a stealer and $490 for a ransomware

• Google to use Apple iPhones and Android devices to block Phishing Attacks

• Russia launched multiple cyber attacks on Eurovision Song Contest

• Iranian Hackers Using BitLocker & DiskCryptor to Conduct Ransomware Attacks in U.S.

• Adlumin Announces New U.S. Distribution Relationship with Ingram Micro’s Emerging Business Group

• Recovering from a cybersecurity earthquake: The lessons organizations must learn

• The most insecure and easily hackable passwords

• Nasty Zyxel remote execution bug is being exploited

• Ukrainian Hacker Jailed for 4-Years in U.S. for Selling Access to Hacked Servers

• Europe Agrees to Adopt New NIS2 Directive Aimed at Hardening Cybersecurity

• Where do federal agencies stand with zero trust implementation?

• 79% of organizations have activated a disaster recovery response within the past 12 months

• Progress MOVEit 2022 allows users to secure and control all file transfer activity

• BlackBerry Fans – 174,168 breached accounts

• OGUsers (2021 breach) – 348,302 breached accounts

• China has been quietly building a blockchain platform. Here’s what we know

• Some top 100,000 websites collect everything you type—before you hit submit

• Musk says Twitter deal “on hold” over concern about number of spam accounts

• Bill Gates Is So Over This Pandemic

• Italy prevents pro-Russian hacker attacks during Eurovision contest

• Firefox out-of-band update to 100.0.1 – just in time for Pwn2Own?

• IT Security News Weekly Summary – Week 19

• IT Security News Daily Summary 2022-05-15

• Car hack attacks: It’s about data theft, not demolition

• How to spot the signs of a virtual kidnap scam

• May 08 – May 14 Ukraine – Russia the silent cyber conflict

• Nearly 15 Million People Impacted by ElasticSearch Misconfiguration

• Praetorian Named to Inc. Magazine’s Best Workplaces List 2022

• How Education Decreases the Fear of Terrorism

• Security Affairs newsletter Round 365 by Pierluigi Paganini

• Ukraine CERT-UA warns of new attacks launched by Russia-linked Armageddon APT

• Sysrv-K, a new variant of the Sysrv botnet includes new exploits

• Does Best Buy tackle crime differently from Apple? I had to ask

• Why Access Control Is Critical in The Path to Cyber Insurance Readiness

• Week in review: F5 BIG-IP RCE exploitation, URL spoofing flaws in Zoom, Google Docs

• HP Fixes UEFI Flaws Affecting 200+ Computers

• Singapore launches safety rating scheme for e-commerce sites

• Ana Pinczuk Appointed to SentinelOne Board of Directors

• Weekly Update 295

Generated on 2022-05-16 23:55:21.283267