IT Security News Daily Summary 2022-05-23

• $13.5M in new TMF awards to NARA, USDA

• Veeam data protection aids users with secure restores

• Malicious Python Repository Package Drops Cobalt Strike on Windows, macOS & Linux Systems

• Multiple Governments Buying Android Zero-Days for Spying: Google

• AdvIntel: Conti rebranding as several new ransomware groups

• USPS Plans to Close More Facilities and Repurpose Those That Remain

• RSA Conference 2022: Adjusting to ongoing transformation

• EFF to Court: California Law Does Not Bar Content Moderation on Social Media

• DOD isn’t meeting some of the cybersecurity standards it set for contractors

• Facebook Algorithm Reveals A Lot Of Spam In Top Shared Links

• EFF Opposes Anti-Fiber, Anti-Affordability Legislation in California That Will Raise Prices on Middle Income Users

• Common NFT scams and how to avoid them

• DDoS attacks decreased in 2021, still above pre-pandemic levels

• Linux Trojan XorDdos Attacks Surge, Targeting Cloud, IoT

• Anatomy of a DDoS amplification attack

• Anonymous Declares Cyber War Against Pro-Russia Hacker Group Killnet

• Recovering from ransomware attacks starts with better endpoint security

• Why the Employee Experience Is Cyber Resilience

• New DeadBolt Ransomware Attacks Have Been Reported by QNAP

• Labor Department wants to staff up worker protection agencies

• Russia-linked Fronton botnet could run disinformation campaigns

• How to improve risk management using Zero Trust architecture

• Nearly Half of Security Enterprises Store Passwords in Office Documents

• UK’s Most Innovative Cyber SME 2022 Finalists Announced

• Mark Zuckerberg Sued Over Cambridge Analytica Data Breach

• Russian Sberbank: Facing Massive Waves of DDoS Attacks

• How to stay ahead of the Cybersecurity labor crisis and keep growing your business

• Experts highlight how automated decision-making can violate GDPR

• CISA Adds 21 Known Exploited Vulnerabilities to Catalog

• Mozilla Releases Security Products for Multiple Firefox Products

• Is the United States Totalitarian?

• Does American Law Currently Authorize the President to Seize Sovereign Russian Assets?

• Military-made cyberweapons could soon become available on the dark web, Interpol warns

• I think there are more cyber attacks to come, says Palo Alto Networks CEO

• Beneath the surface: Uncovering the shift in web skimming

• Ransomware Attack Leads to a data breach at Chicago Public Schools

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of May 16, 2022

• CISA Adds 21 Known Exploited Vulnerabilities to Catalog

• Mozilla Releases Security Products for Multiple Firefox Products

• Become a Cybersecurity Hero: An Interview with a White Hat Hacker

• Yes, Containers Are Terrific, But Watch the Security Risks

• (ISC)2 certification counts – how many CSSLP are out there?

• Hunting down your data with Whitney Merrill: Lock and Code S03E11

• Report: 654 Cybersecurity Startups Raised VC Funding in 2020 and 2021, Only 22 Are Led by Women CEOs

• Valeo Networks Acquires Next I.T.

• This malware-spreading PDF uses a sneaky file name to trick the unwary

• New phishing technique lures users with fake chatbot

• Kingston Digital Releases Touch-Screen Hardware-Encrypted External SSD for Data Protection

• Automating firewall configuration with RHEL System Roles

• Navigating The Cyber Arms Race, Expert Weighs In

• Deep Fakes of Elon Musk Promote BitVex Fraud

• Rivian Eyes Profitability Amidst Market Pressure

• How to Respond to Non-Malicious Data Breaches

• Conti Ransomware Operation Shut Down After Brand Becomes Toxic

• After the Okta Breach, Diversify Your Sources of Truth

• A flaw in PayPal can allow attackers to steal money from users’ account

• On Increased Cyber Attack Risk

• The Shield Of Identity-first Security

• Chicago students lose data to ransomware attackers

• Multiple Vulnerabilities Found In Jupiter WordPress Theme

• Protection Tips: How to Prevent Phone Hacking

• My Instagram account was hacked and two-factor authentication didn’t help

• Facial Recognition Firm Clearview AI Fined $9.4 Million by UK Regulator

• Clearview AI face-matching service fined a lot less than expected

• Experts highlight how automated decision making can violate the GDPR

• Zero Trust for Data Helps Enterprises Detect, Respond and Recover from Breaches

• Snake Keylogger Spreads Through Malicious PDFs

• Journey Into Cybersecurity – Conversations with Cyber Newcomers, Part 1

• New York Comptroller Calls For Votes Against Twitter, Meta Directors

• Predator Spyware Using Zero-day to Target Android Devices

• Over $1.1 Million Awarded at Pwn2Own Vancouver 2022 for 25 Zero-Day Vulnerabilities

• Davos Forum Sees Major Influx Of Crypto Firms

• How GDPR Is Failing

• 500,000 Chicago Students’ Data Exposed in Ransomware Attack

• Update now! Nvidia released fixes for 10 flaws in Windows GPU drivers

• New Unpatched Bug Could Let Attackers Steal Money from PayPal Users

• Fronton: Russian IoT Botnet Designed to Run Social Media Disinformation Campaigns

• ISaPWN – research on the security of ISaGRAF Runtime

• Top 5 Data Integration Challenges and Ways to Navigate them

• Top financial scams: Imposter scams, romance scams, and prizes

• Cisco Warns of Exploitation Attempts Targeting New IOS XR Vulnerability

• A week in security (May 16 – 22)

• Has the UK government been hacked

• Ericsson, Deutsche Telekom Test Wind Power For 5G Site

• Ransomware Hackers Steal Personal Data of 500,000 Students and Staff in Chicago

• Chinese hackers caught spying on Russian defence institutes

• Cloudflare joins EU Cloud Code of Conduct, the path to trusted cloud services

• Broadcom ‘In Talks’ To Acquire VMware

• IBM Dives Into TrickBot Gang’s Malware Crypting Operation

• PayPal Pays a Hacker $200,000 for Discovering ‘One-Click-Hack’ Vulnerability

• Cytrox’s Predator spyware used zero-day exploits in 3 campaigns

• Cryptocurrency scammers use Elon Musk deep fake

• Hackers Distribute Vidar Malware By Tricking Users with Fake Windows 11 Downloads

• Anonymous Declares Cyber-War on Pro-Russian Hacker Gang Killnet

• WhatsApp Adds Customised Business Chats

• 8 Reasons Manpower Tracking Is Important In Construction

• Top Tips for Businesses to Increase Operational Efficiency

• Should the FDA have done more months ago about an impending baby formula shortage?

• Regulatory Compliance in the Cloud: What you Need to Know

• How to find NPM dependencies vulnerable to account hijacking

• Threat actors target the infoSec community with fake PoC exploits

• Microsoft sounds the alarm on — wait for it — a Linux botnet

• Chinese “Twisted Panda” Hackers Caught Spying on Russian Defense Institutes

• You should be able to trust organizations that handle your personal data

• South Korean and US presidents gang up on North Korea’s cyber-offensives

• Kaspersky confirms SMBs are sureshot targets for Hackers

• Goodwill Ransomware making victims donate to poor

• 3 key elements to protect a Kubernetes cluster

• Ransomware still winning: Average ransom demand jumped by 45%

• The Best Cyber Security Jobs in The UK According to Data

• Why And How to Eliminate Security’s Biggest Blind Spot: Transport Layer Security (TLS)

• By streamlining compliance, companies can focus more on security

• Why the Cybersecurity Industry Needs to Change Its Siloed Perception

• #TripwireBookClub – Go H*ck Yourself

• Security has become more difficult, IT leaders say

• Breach Exposed Data of Half-Million Chicago Students, Staff

• Misinformation needs tackling and it would help if politicians stopped muddying the water

• IT Security News Weekly Summary – Week 20

• IT Security News Daily Summary 2022-05-22

• Web Tracker Caught Intercepting Online Forms Even Before Users Hit Submit

• New MITRE Framework For Supply Chain Security

• Global Food Supply Chain Threatened By Hackers

• Evasive Bots Driving Online Fraud: 2022 Report

• Conti Ransomware Shuts Down Operation, Rebrands Into Smaller Units

• Ubuntu Desktop & Windows 11 Hacked – Pwn2Own Day 3

• Security Affairs newsletter Round 366 by Pierluigi Paganini

• Dragos CEO Robert M. Lee to Address Global Audience on Criticality of Industrial Cybersecurity at the World Economic Forum Annual Meeting in Davos, Switzerland

• Evolv Technology Appoints New Chief Financial Officer

• Socure Reports Hypergrowth with 236% Increase in Customers, Rapid Scale Across web3, Online Gaming, FinTech, Marketplaces, and Public Sector

• NATO Must Get Resilience Right to Withstand Russia and China

• North Korea-linked Lazarus APT uses Log4J to target VMware servers

• Even When Switched Off, iPhones are Vulnerable to Attack

• Microsoft Reveals Massive Surge in XorDdos Attacks on Linux Devices

• How to Limit Who Can Contact You on Facebook

• Media giant Nikkei Suffers Ransomware Attack

• Mozilla Releases Firefox 100.0.2 With Critical Security Fixes

• The Pwn2Own Vancouver 2022: Trend Micro and ZDI awarded $1,155,000

• Week in review: VMware critical fixes, Bluetooth LE flaw unlocks cars, Kali Linux 2022.2

Generated on 2022-05-23 23:55:20.753629