IT Security News Daily Summary 2022-05-17

• Pentagon closing in on ‘ethical’ AI implementation

• How mainframes fit into hybrid environments

• What You Need to Know about the Sysrv-K Cryptomining Botnet in Less than a Minute>

• ISPs offering low-cost wireless broadband get free access to DC rooftops

• Vulnerabilities found in Bluetooth Low Energy gives hackers access to numerous devices

• Car owners warned of another theft-enabling relay attack

• Black Kite Achieves SOC 2 Type II Accreditation

• CCSP Exam – Many Changes on the Way!

• GuidePoint Security Announces Additional GPSEC Conference Dates and Cities

• Challenges that impact the Cybersecurity talent pipeline

• How to counter smart home device breaches

• New Sysrv-k Botnet Infecting Windows and Linux Systems with Cryptominer

• Update now! Apple patches zero-day vulnerability affecting Macs, Apple Watch, and Apple TV

• Security, employee compliance biggest challenges when supporting remote workers

• Cardiologist charged with creating Thanos, Jigsaw ransomware

• Gmail-linked Facebook accounts vulnerable to attack using a chain of bugs—now fixed

• Postal Service should ‘act swiftly’ to scale up identity services, IG says

• Australian Regulators Call For Stronger Ban On Fraudulent Facebook Advertisements

• Your iPhone Is Vulnerable to a Malware Attack Even When It’s Off

• Venezuelan cardiologist accused of operating and selling Thanos ransomware

• I/O 2022: Android 13 security and privacy (and more!)

• Visa breaks down $9 billion investment in security, fraud initiatives

• Chromebook data sanitization comes to Blancco Drive Eraser

• President Biden’s Policy Changes for Offensive Cyber Operations

• What Might a Congressional Counterpart to the Office of Legal Counsel Look Like?

• Alert! Scam Pixelmon NFT Website Hosts Password-stealing Malware

• Seclore accelerates focus to lead in enterprise data security

• Ask the experts: Mitigating risk in securing cloud environments

• Cybersecurity pros spend hours on issues that should have been prevented

• Cardiologist Charged for Developing Jigsaw v.2 and Thanos Ransomware

• Hackers Exploiting a Critical Vulnerability in Zyxel Firewall & VPN Devices

• Sevco Security delivers continuous asset IT inventory monitoring

• Learn to Use This First: Four Fundamental Tactics to Protect Email Ecosystems

• New Special Interest Group Aims to Enhance ICS/OT Cyber Defenses

• Security in Milliseconds: Visa Invests in Payment Security as E-Commerce Surges

• Easy authentication and authorization in Azure Active Directory with No-Code Datawiza

• Pentester pops open Tesla Model 3 using low-cost Bluetooth module

• Ransomware Hits American Healthcare Company Omnicell

• Apple Releases Security Updates for Multiple Products

• In hot pursuit of ‘cryware’: Defending hot wallets from attacks

• Doctor develops Thanos Ransomware Builder

• man in the browser (MitB)

• Pangea launches API-based cloud security services for application builders

• Google Cloud launches assured open source service and a new zero-trust offering for enterprises

• Personal information of 1.8 million Texans with Department of Insurance claims was exposed for years, audit says

• Google assuring open source code to secure software supply chains

• Apple Releases Security Updates for Multiple Products

• US Government Warns Firms to Avoid Hiring North Korean IT Workers

• Five Eyes Agencies Warn Managed Service Providers of Cyber Attacks

• Software Supply Chain: A Risky Time for Dependencies

• Long lost @ symbol gets new life obscuring malicious URLs

• Who is Responsible for Taking Action During a Site Cyber Attack?

• Access Orchestration Firm Pathlock Announces Several M&As and $200M Funding

• 5 steps to ensure a successful access management strategy

• Weak Security Controls and Practices Routinely Exploited for Initial Access

• Weak Security Controls and Practices Routinely Exploited for Initial Access

• Evaluation of cyber activities and the threat landscape in Ukraine

• AirTag stalking: What is it, and how can I avoid it?

• Uber Eats Offers Two Robo-Delivery Services In California

• SOC Level Up: Threat Hunting and Detection With Sigma

• How Dangerous Is the Cyber Attack Risk to Transportation?

• Sysrv-K Botnet Targets Windows, Linux

• SecurityWeek to Host Threat Intelligence Summit Virtual Event on May 18th

• US Accuses Venezuelan Doctor of Creating and Selling Ransomware

• Weak Security Controls and Practices Routinely Exploited for Initial Access

• Weak Security Controls and Practices Routinely Exploited for Initial Access

• UpdateAgent Returns with New macOS Malware Dropper Written in Swift

• FBI: Hackers used malicious PHP code to grab credit card data

• iPhones Vulnerable to Attack Even When Turned Off

• Are You Investing in Securing Your Data in the Cloud?

• Armis Launches new ‘Critical Infrastructure Protection Program’

• BLE vulnerability may be exploited to unlock cars, smart locks, building doors, smartphones

• Russia ‘Not Planning To Block YouTube’ Says Minister

• Pathlock raises $200M to create a unified GRC platform

• Cornami raises $68M to support quantum encryption

• Pangea Lands $25 Million Investment for API Security Services

• Musk: Doubt About Spam Accounts Could Scuttle Twitter Deal

• Securing Your Migration to the Cloud

• NerbianRAT Trojan Spreads via Emails

• ‘Thanos’ Ransomware Builder Was Designed by a Physician

• (ISC)² Advocates for Membership – Shares Opinions on Proposed UK Standards and Pathway

• US warning: North Korea’s tech workers posing as freelance developers

• Apple Finally Patches Exploited Vulnerabilities in macOS Big Sur, Catalina

• Over 200 Apps on Play Store were distributing Facestealer info-stealer

• Phishing Threat Actors Still Fond of HTML Attachments

• Attacks on Managed Service Providers Expected to Increase

• The State of Kubernetes Security in 2022

• Red Hat releases open source StackRox to the community

• Twitter Fights Back Over Musk Bot Allegations

• Singapore firms see high rate of security incidents, but struggle to respond promptly

• Cybersecurity M&A Roundup for May 1-15, 2022

• (ISC)2 Offers 100,000 Free Entry-Level Certification Places

• Lincoln College To Close Permanently After Cyberattack – 5 Cyber Experts Comment

• “Look what I found here” phish targets Facebook users

• Government App Targets Fake Profiles Used By Foreign Spies

• Facebook to Terminate some Location Tracking Services and Features

• Only DevSecOps can save the metaverse

• Arctic Wolf: No. 17 on this year’s CNBC Disruptor 50 list

• Lacework: No. 25 on this year’s CNBC Disruptor 50 list

• How To Establish SAP Security

• Preventing Ransomware Attacks On Industrial Networks

• Trackers may collect data that you type even before hitting submit

• UK Web Users’ Data ‘Shared 987 Times Per Day’

• Apple patches zero-day kernel hole and much more – update now!

• New Sysrv Botnet Variant Hijacking Windows and Linux with Crypto Miners

• U.S. Charges Venezuelan Doctor for Using and Selling Thanos Ransomware

• Italian police thwart Eurovision cyberattack

• Thanos and Jigsaw ransomware linked to 55 year old doctor

• Is your Internet too slow?

• Half of global CISOs feel their organization is unprepared to deal with cyberattacks

• Fifth of Businesses Say Cyber-Attack Nearly Broke Them

• Over 200 Apps on Play Store Caught Spying on Android Users Using Facestealer

• The Ultimate Outsourcing VS Insourcing Guide for Small Businesses

• US Warns Against Hiring North Korean Hackers

• Doctor Accused of Being Prolific Ransomware Developer

• US and EU Move Closer on Cyber in New Trade Pact

• Tech Jobs Face Pressure Amidst UK Hiring Crunch

• Kali Linux 2022.2 released: Desktop enhancements, tweaks for the terminal, new tools, and more!

• Clop Ransomware: Overview, Operating Mode, Prevention and Removal

• Cardiologist charged for use and sale of ransomware

• Facebook rated least safe e-commerce option in government rankings

• US prosecutors allege Venezuelan doctor is ransomware mastermind

• CISA adds CVE-2022-30525 flaw in Zyxel Firewalls to its Known Exploited Vulnerabilities Catalog

• Europe moves closer to stricter cybersecurity standards, reporting regs

• Making a successful transition to a hybrid work schedule

• Iranian Hackers Launch Cyberattack Against US and the UK

• Nvidia releases security update for out-of-support GPUs

• Podcast Episode: An AI Hammer in Search of a Nail

• A custom PowerShell RAT uses to target German users using Ukraine crisis as bait

• Mastering microsegmentation for enterprise applications

• Venezuelan cardiologist charged with designing and selling ransomware

• Malware threat to Low-Power Mode (LPM) in Apple iPhones

• Cyber Attack and Ransomware news headlines trending on Google

• Why cyber security can’t just say “no“

• CynergisTek Files First Quarter 2022 Financial Results

• Esker Proposes New Supervisory Board Member

• Tina Gravel, Jean O’Neill, Tamara Prazak, Jackie Funk and Tara Tomei Named to CRN’s 2022 Women of the Channel List

• Quantum Cybersecurity: Addressing the Boogeyman in the Room

• Cybersecurity and resilience: board-level issues

• Emotet is the most common malware

• Remote work hazards: Attackers exploit weak WiFi, endpoints, and the cloud

• China reveals its top five sources of online fraud

• Adding visibility to the invisible: securing your automated systems

• Watch Out! Hackers Begin Exploiting Recent Zyxel Firewalls RCE Vulnerability

• Best practices for healthcare delivery organizations to manage supply chain cybersecurity risks

• Kasten by Veeam K10 V5.0 provides secure backup and recovery for Kubernetes data and applications

• Satori unveils two new features to help companies boost productivity and secure data

• Datadog’s new offerings enhance monitoring and security for Kubernetes users

• Tour the RSA Conference 2022 Security Operations Center

• Researchers devise iPhone malware that runs even when device is turned off

• ONE ZERO Digital Bank selects AU10TIX to power its customer verification system and KYC process

• Zyston adopts Stellar Cyber Open XDR platform to accelerate analyst productivity

• Apple emergency update fixes zero-day used to hack Macs, Watches

• Russian hackers declare war on 10 countries after failed Eurovision DDoS attack

• NSA Swears On The Body Of Ed Snowden It Will Not Backdoor New Encryption Standard

• The Bad Times Are Coming for Startups

• Axellio names Scott Aken as CEO

• US brings first-of-its-kind criminal charges of Bitcoin-based sanctions-busting

• Coast Guard graduates first class of cyber majors

• Building a solid foundation for digital identity

• Kaspersky report identifies new ransomware trends for 2022

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• Petra Jenner joins Splunk as SVP and GM for EMEA

• Some defense-vetted prototypes could be fast-tracked to civilian agencies under new agreement

• RF Technologies Releases Safe Place Staff Protection for Healthcare Settings

• TorchLight Expands Cybersecurity Services With MDR Sentinel in Partnership With Microsoft

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• IT Security News Daily Summary 2022-05-16

• Maryland ramps up cybersecurity

• 50% of Orgs Rely on Email to Manage Security

• How cryptocurrencies enable attackers and defenders

• iPhones Open to Attack Even When Off, Researchers Say

• Critical bug in Zyxel firewalls, VPNs exploited in the wild

• Apple fixes the sixth zero-day since the beginning of 2022

• 8 Ways to Avoid CISO Burnout

• Password Authentication. How to Correctly Do It.

• Red Hat Enterprise Linux 8.6: Better security, more options

• New Facebook Photo App Raises Privacy Suspicions

• Good decision, bad outcome

• Open Source Security Gets $150M Boost From Industry Heavy Hitters

• British Citizen Alaa Abd El Fattah Demands An End to Mistreatment in Egyptian Prison

• AV camera footage can aid police investigations

• You Can’t Opt Out of Citizen Development

• SaaS App Vanity URLs Can Be Spoofed for Phishing & Social Engineering

• Attackers can Install Malware on iPhone When it is Powered Off – Research

• The plan to secure open source software

• Hacking the Army’s tech talent problem

• Bitdefender vs McAfee: Compare EDR software

• What to Make of the Subpoenas to House Republicans?

• Introducing Allies: A Podcast Series from Lawfare and Goat Rodeo

• The Ukraine Genocide Debate Reveals the Limits of International Law

• ManTech agrees on $4.2B sale to Carlyle Group

• Microsoft Defender vs CrowdStrike: Compare EDR software

• Delve into cybersecurity with this two-part training bundle

• Researchers Devise New Type of Bluetooth LE Relay Attacks

• Name That Toon: Knives Out

• NSA Cyber Chief Vows ‘No Backdoors’ in Quantum Encryption Standards

• Apache Releases Security Advisory for Tomcat

• EFF, Al Sur Launch Guide to Raise Awareness About Deficiencies in Cross-Border Surveillance Treaty and Strategies to Mitigate Human Rights Risks

• Hackers are after your data. So why are you making it so easy for them?

• Beyond Awareness: How to Cultivate the Human Side of Security

• Crippling AI cyberattacks are inevitable: 4 ways companies can prepare

• Brazilian e-commerce firm Americanas reports multimillion-dollar loss following cyberattack

• Microsoft Defender vs CrowdStrike: EDR software comparison

• Compare zero trust vs. the principle of least privilege

• Critical Zyxel Firewall Bug Under Active Attack After PoC Exploit Debut

• Apache Releases Security Advisory for Tomcat

• Stories from the SOC – Persistent malware

• The front lines of government cybersecurity defense

• Biden administration releases $45B for broadband to states

• Ransomware Gang Threatens to Overthrow Costa Rica Government

• Google offers Open Source Security Maintenance Crew

• Secure Software Supply Chain: Why Every Link Matters

• US Manufacturing Giant Parker Hit by Conti Ransomware Gang

• US Cyber Director: Forging a Cybersecurity Social Contract Is Not Optional

• US Courts Are Coming After Crypto Exchanges That Skirt Sanctions

• Microsoft showcases the future of comprehensive security at RSA 2022

• New Version of ‘Sysrv’ Botnet is Targeting Windows and Linux Servers

• Frustrated IT Admin Gets 7 Years in Prison for Wiping Employer’s Databases

• Hackers Can Abuse Low-Power Mode to Run Malware on Powered-Off iPhones

• Eavesdroppers can hack 6G frequency with DIY metasurface

• Experts show how to run malware on chips of a turned-off iPhone

• Defending the Healthcare Security Landscape in the Age of Connected Devices

• US, EU to Ramp Up Chip Making and Raise Pressure on Russia

• Microsoft Identifies Botnet Variant Targeting Windows and Linux Systems

• Avoiding the Unintended Consequences of Strict Cybersecurity Policies

• Report: Devs say the current model of data observability is broken

• Crippling AI cyberattacks are inevitable: 4 ways security pros can prepare

• Me, My Digital Self, and I: Why Identity Is the Foundation of a Decentralized Future

• San Francisco Police Use Driverless Cars For Surveillance

• Ex-eBay Exec Admits Cyberstalking Critics

• Twitter Turns Its Privacy Policy Into An Old School Video Game

• Microsoft’s May Patch Tuesday Updates Cause Windows AD Authentication Errors

• Zyxel Remote Execution Bug Is Being Exploited

• Crypto Executive Says Bitcoin Has ‘No Future’ As Payments Network

• Secure Email Gateway Vs. Integrated Cloud Email Security (SEG Vs. ICES) – What’s the difference, and which should my business use?

• SIMS Software Named a Premier Sponsor in the 2022 ‘ASTORS’ Awards

• CISA ‘temporarily’ removes Windows vulnerability from its must-patch list

• Are period tracking apps safe?

• The downside of ‘debugging’ ransomware

• Fake Clickjacking Bug Bounty Reports: The Key Facts

• Researchers Find Potential Way to Run Malware on iPhone Even When it’s OFF

• Everything You Need to Know About HIPAA

• Why MRG-Effitas matters to SMBs

• Fake Mobile Apps Steal Facebook Credentials, Cryptocurrency-Related Keys

• TerraUSD Organisers ‘Spent $2bn’ In Bitcoin To Maintain Value

• ‘Sysrv’ Botnet Targeting Recent Spring Cloud Gateway Vulnerability

• 4 Tips to Implement Online Cybersecurity Training for Your Information Technology and Security Teams

• EU’s NIS 2 Directive to strengthen cybersecurity requirements for companies

• Palo Alto Networks and Deloitte announce joint managed security service

• This phishing attack delivers three forms of malware. And they all want to steal your data

• SonicWall Patches Unauthorized Access Vulnerability in SMA Appliances

• Global Snack Manufacturer Becomes Cyber Resilient While Cutting Production Costs

• How COVID-19 fuelled a surge in malware

• Report: Cybersecurity Skills Gap Creates Vulnerabilities

• High-Severity BIOS Vulnerability Found In Multiple HP Product Models

• Microsoft Patch Tuesday May Fixed 75 Bugs Including Three Zero-Day Flaws

• Multiple Vulnerabilities Found In Icinga IT Monitoring System

• Researchers Explain How Exploit Vanity URLs Could Allow Phishing Attacks

• Google: Here comes our ‘Open Source Maintenance Crew’

• Microsoft warns: This botnet has new tricks to target Linux and Windows systems

• Microsoft’s May Patch Tuesday Updates Cause Windows AD Authentication Errors

• The NSA Says that There are No Known Flaws in NIST’s Quantum-Resistant Algorithms

• Serious Flaw in Firewalls and VPNs Manufactured by Zyxel Exploited

• Fake reCAPTCHA forms dupe users via compromised WordPress sites

• Iran’s COBALT MIRAGE Threat Group Behind Ransomware Attacks in US

• CISA Removes Windows Vulnerability From ‘Must-Patch’ List Due to Buggy Update

• New Cybersecurity Directive Agreed between the European Parliament and EU Member States

• Bitcoin Slide Continues As Regulators Weigh In

• ‘The People Hacker’ Jenny Radcliffe Inducted into Infosecurity Europe’s Hall of Fame

• Researchers Find Way to Run Malware on iPhone Even When It’s OFF

• Ukrainian national sentenced to 4 years in prison for selling access to hacked servers

• San Francisco police use driverless cars for surveillance

• Shanghai Plans To Ease Lockdown Amidst Supply Chain Disruption

• More money for open source security won’t work

• Researchers warn of APTs, data leaks as serious threats against UK financial sector

• Zyxel Firewall Vulnerability Exploitation Attempts Seen One Day After Disclosure

• Kaspersky: 9 Of 10 Orgs Previously Hit With Ransomware Would Pay If Targeted Again

• Cornwall Council Data Breach

• UK announces nuclear cybersecurity strategy

• Tesla Recalls China Vehicles Over Touchscreen Issue

• A week in security (May 9 – 15)

• Italian Police Foil Pro-Russia Attacks on Eurovision

• Researchers Warn of “Eternity Project” Malware Service Being Sold via Telegram

• Custom PowerShell RAT targets Germans seeking information about the Ukraine crisis

• Musk Criticises Twitter Feed Algorithm, Checks For Bots

• UK Sets Out Nuclear Cybersecurity Strategy

• EU announces provisional cybersecurity directive

• Users’ Crypto Wallets are Stolen by Fake Binance NFT Mystery Box Bots

• Over 20,000 Zyxel Firewalls Still Exposed to Critical Bug

• Read Novel (unverified) – 22,424,472 breached accounts

• EU, US Look To Avoid Semiconductor ‘Subsidy Race’

• 2022 Q1 Privacy Update — A new year sparks new initiatives

• HTML attachments in phishing e-mails

• Wannacry – 5 Years On, 68% Of Enterprises Are Still At Risk

• Kasten by Veeam releases new Kubernetes data management platform

• Sysdig releases new Kubernetes troubleshooting tool

• How to Know If Your Computer Has Virus? How to Protect Your PC?

• Google announces new security and privacy improvements at Google I/O

• SonicWall Urges Admins to Fix SSLVPN SMA1000 Flaws

• Eternity Project: You can pay $260 for a stealer and $490 for a ransomware

• Google to use Apple iPhones and Android devices to block Phishing Attacks

• Russia launched multiple cyber attacks on Eurovision Song Contest

• Iranian Hackers Using BitLocker & DiskCryptor to Conduct Ransomware Attacks in U.S.

• Adlumin Announces New U.S. Distribution Relationship with Ingram Micro’s Emerging Business Group

• Recovering from a cybersecurity earthquake: The lessons organizations must learn

• The most insecure and easily hackable passwords

• Nasty Zyxel remote execution bug is being exploited

• Ukrainian Hacker Jailed for 4-Years in U.S. for Selling Access to Hacked Servers

• Europe Agrees to Adopt New NIS2 Directive Aimed at Hardening Cybersecurity

• Where do federal agencies stand with zero trust implementation?

• 79% of organizations have activated a disaster recovery response within the past 12 months

• Progress MOVEit 2022 allows users to secure and control all file transfer activity

• BlackBerry Fans – 174,168 breached accounts

• OGUsers (2021 breach) – 348,302 breached accounts

• China has been quietly building a blockchain platform. Here’s what we know

• Some top 100,000 websites collect everything you type—before you hit submit

• Musk says Twitter deal “on hold” over concern about number of spam accounts

• Bill Gates Is So Over This Pandemic

• Italy prevents pro-Russian hacker attacks during Eurovision contest

Generated on 2022-05-17 23:55:34.553123