IT Security News Daily Summary 2022-05-28

• ChromeLoader Malware Hijacks Chrome Browser via Malicious Extension

• Sophos MTR to Compete in 2022 ‘ASTORS’ Homeland Security Awards

• Threats in the shadows: Combatting RF attacks with geofencing

• Meet “ZTNA Anywhere,” Powered by Genians #1 Proven NAC, at RSAC 2022

• How to stay ahead of the Cybersecurity labor crisis and keep growing your business

• Experts believe that Russian Gamaredon APT could fuel a new round of DDoS attacks

• The strange link between Industrial Spy and the Cuba ransomware operation

• New York Man Sentenced to 4 Years in Transnational Cybercrime Scheme

• Critical OAS Bugs Open Industrial Systems to Takeover

• Reuters: Russia-linked APT behind Brexit leak website

• DuckDuckGo Isn’t as Private as You Think

• Million Times Downloaded Android Apps Exposed to High-severity Vulnerabilities

• GitHub: Nearly 100,000 NPM Users’ credentials stolen in the April OAuth token attack

• Suspected Phishing Email Fraudster Arrested in Nigeria

• Over 467 Apps Hit by the ERMAC 2.0 Android Banking Trojan

• Microsoft Finds Critical Bugs in Pre-Installed Apps on Millions of Android Devices

• Strategy to Implementation with the Zero Trust Advisory Service

• Sourcepass Names New Chief Information Security Officer

• Rapidly evolving IoT malware EnemyBot now targeting Content Management System servers and Android devices

• Cybersecurity: A global problem that requires a global answer

• Scams targeting NFT investors – Week in security with Tony Anscombe

• Laird Connectivity releases Summit Suite to simplify the process of protecting devices

• Microchip introduces Arm Cortex-M23 based microcontroller

• How to implement AWS Sustainability Pillar principles

• 10 Application Security Best Practices To Follow In 2022

• Optiv appoints Josh Locker as EVP of Sales

• Stolen university credentials up for sale by Russian crooks, FBI warns

• Kroll expands recovery service for clients to manage vulnerabilities in their security posture

• Android pre-installed apps are affected by high-severity vulnerabilities

• IT Security News Daily Summary 2022-05-27

• Zoom Flaws Can Be Exploited By Hackers by Sending Specially Crafted Messages

• Space Force Expands Cyber Defense Operations

• Exposed Kubernetes Clusters, Kubelet Ports Can Be Abused in Cyberattacks

• Massachusetts’ Highest Court Upholds Cell Tower Dump Warrant

• This Mental Health Awareness Month, take care of your cybersecurity staff

• DevSecOps glossary: 24 terms security professionals need to know

• New Open-source Security Initiative Aimed at Supply Chain Attacks

• From ITops to NoOps: Automox CEO on why organizations need to rethink the concept of automation

• DevSecOps glossary: 24 terms for security professionals

• Defense against file-based malware

• New York to battle senior loneliness with robot companions

• DevSecOps glossary: Important terms for security professionals

• Cloud security unicorn cuts 20% of staff after raising $1.3b

• What are the security risks of open sourcing the Twitter algorithm?

• Talos names eight deadly sins in widely used industrial software

• Exploitation of VMware Vulnerability Imminent Following Release of PoC

• Microsoft Finds Major Security Flaws in Pre-Installed Android Apps

• CISA Publishes 5G Security Evaluation Process Plan

• Scammer Behind $568M International Cybercrime Syndicate Gets 4 Years

• The Effects of Digital Transnational Repression and the Responsibility of Host States

• Patent Troll Uses Ridiculous “People Finder” Patent to Sue Small Dating Companies

• Roadside objects can trick driverless cars

• New Chaos Malware Variant Ditches Wiper for Encryption

• Personal Data of More than 142 million MGM Hotel Customers Leaked on Telegram

• Millions of Loan Applicant’s Data is Leaked via an Anonymous Server

• Members Worldwide Gather at 55th General Meeting of the Messaging, Malware and Mobile Anti-Abuse Working Group (M3AAWG) in London to Address Current and Emerging Issues in Messaging, Malware and Cybersecurity

• Microsoft is rolling out these security settings to protect millions of accounts. Here’s what’s changing

• 12 most in-demand cybersecurity jobs in 2022

• Twitter to Pay $150m Fine to Resolve Data Privacy Violations

• Experts Detail New RCE Vulnerability Affecting Google Chrome Dev Channel

• Android apps with millions of downloads exposed to high-severity vulnerabilities

• UK populace should know about Ofgem Phishing Attacks

• Russian Hackers Believed to Be Behind Leak of Hard Brexit Plans

• ChromeLoader Malware Hijacks Browsers With ISO Files

• Nearly 100,000 NPM Users’ Credentials Stolen in GitHub OAuth Breach

• Malware Uses PowerShell To Inject Malicious Extension Into Chrome

• GitHub Saved Plaintext Passwords Of npm Users In Log Files, Post Mortem Reveals

• Critical Flaws In Popular ICS Platform Can Trigger RCE

• Surveillance Tech Didn’t Stop The Uvalde Massacre

• Companies need to get rid of legacy security systems, says Zscaler CEO Jay Chaudhry

• Hottest cybersecurity jobs

• How Secure Is Video Conferencing?

• CISA adds 75 actively exploited bugs to its must-patch list in just a week

• GhostTouch: how to remotely control touchscreens with EMI

• Join Our #BetheResource Challenge

• AI and machine learning are improving weather forecasts, but they won’t replace human experts

• ‘Psychological and Emotional War’: The Effects of Digital Transnational Repression and the Responsibility of Host States

• Microsoft Executive Indicates Departmental Hiring Slowdown

• Physical Security Teams’ Impact Is Far-Reaching

• Toward error-free quantum computing

• There are systems ‘guarding’ your data in cyberspace – but who is guarding the guards?

• Critical Microsoft vulnerabilities decreased 47% in 2021

• The Myths of Ransomware Attacks and How To Mitigate Risk

• FBI: Compromised US academic credentials available on various cybercrime forums

• Threat Hunting Journal May 2022 Edition

• Shareholders Sue Twitter, Elon Musk For Stock ‘Manipulation’

• Ownership Of The API Security Lifecycle

• Microsoft is rolling out these security settings to protect millions of accounts. Here’s what’s changing

• What Do Those Pesky ‘Cookie Preferences’ Pop-Ups Really Mean?

• Attackers Can Use Electromagnetic Signals to Control Touchscreens Remotely

• What & Who You Know: How to get a job in cybersecurity with no experience

• Black Hat Asia 2022 Continued: Cisco Secure Integrations

• Zyxel Issued a Security Warning

• Twitter fined $150M after using 2FA phone numbers for marketing

• GitHub saved plaintext passwords of npm users in log files, post mortem reveals

• Programming languages: How Google is improving C++ memory safety

• S3 Ep84: Government demand, Mozilla velocity, and Clearview fine [Podcast]

• Survey Evidences Leaders Lack Confidence in Cyber-Risk Management

• UK Government Seeks Views to Bolster the Nation’s Data Security

• Google Announces New Chrome and Chrome OS Security Features for Enterprises

• FBI: Higher Education Credentials Sold on Cybercrime Forums

• Taking the Danger Out of IT/OT Convergence

• Firefox, Thunderbird, receive patches for critical security issues

• This Windows malware uses PowerShell to inject malicious extension into Chrome

• The IaC Showdown: Terraform vs. Ansible

• Trofi Security Defends U.S. Memorial Museum’s Priceless Assets with Check Point

• Critical Flaws in Popular ICS Platform Can Trigger RCE

• Hundreds Stranded After Ransomware Attack on Indian Airline

• Google Faces Second UK Probe Over Ad Practices

• Zyxel Issues Patches for 4 New Flaws Affecting AP, API Controller, and Firewall Devices

• Drones And the Battlefield

• Privileged Access Management as a Key Technology for Critical Environments

• NCSC Report Reveals Phishing Lures Increasingly Disguised as Vaccine Appointments

• ERMAC 2.0 Android Banking Trojan targets over 400 apps

• Ed tech illegally tracked school children during pandemic

• Oil and gas companies take cyber resilience pledge

• TSP preps for its transition to a new service provider

• IT threat evolution in Q1 2022. Non-mobile statistics

• IT threat evolution Q1 2022

• IT threat evolution in Q1 2022. Mobile statistics

• Let’s play everyone’s favorite game: REvil? Or Not REvil?

• Pre-Hijacking Attacks on Social Media Accounts | Avast

• Zyxel Issues Patches for 4 New Flaws Affecting AP, API Controller and Firewall Devices

• Singapore touts need for AI transparency in launch of test toolkit

• Ransomware news headlines trending on Google

• Twitter to pay $150m penalty for user data protection failure

• NRO finalizes imagery contract worth ‘billions of dollars’

• Experts released PoC exploit code for critical VMware CVE-2022-22972 flaw

• Ed tech wrongfully tracked school children during pandemic: Human Rights Watch

• ESET Research Podcast: UEFI in crosshairs of ESPecter bootkit

• Popular Python and PHP LIbraries Hijacked to Steal AWS Keys

• HHS establishes Advanced Research Projects Agency for Health

• New infosec products of the week: May 27, 2022

• SentinelOne Global Culture Named To Leading Workplaces Lists

• MDT Credit Unions Live with DeepTarget Integration into Jack Henry’s Banno Digital Platform

• Security Compass Releases Report: 2022 Application Security in the Mid-Market

• SCYTHE Names Webster as Director of Federal Research & Development

• OT Network Defenders Experience SynSaber’s ICS Visibility & Detection Software at RSAC

• Meta updates privacy policy with more detail about what data it collects

• How to eliminate the weak link in public cloud-based multi-party computation

• What is keeping automotive software developers up at night?

• China offering ten nations help to run their cyber-defenses and networks

• 80% of consumers prefer ID verification when selecting online brands

• Sungard AS Cyber Incident Recovery strengthens customers’ ability to recover data after a cyberattack

• LiveAction announces long-term behavioral analytics capabilities in its ThreatEye NV platform

• Hunters SOC Platform enhancements enable users to prioritize incidents based on their urgency

• Entrust CloudControl 6.5 improves enterprise security and control for multi-cloud deployments

• Corelight Investigator allows security teams to accelerate their threat hunting and investigations

• Alteryx Designer-FIPS automates analytic insights and operational processes for government agencies

• Uptycs enhances container and Kubernetes capabilities to minimize risk for security teams

• USB Device Redux, with Timelines

• How to reprogram Apple AirTags, play custom sounds

• CyberPeace Institute and Partisia Blockchain protect humanitarian organizations against cyber threats

• Linksys announces new series of WiFi 6 mesh solutions for all at-home needs

• Samsung partners with Red Hat to develop next-generation memory-related software

• Weaveworks integrates with Microsoft to increase developer productivity

• SOOS collaborates with CircleCI to help developers identify and remediate open source vulnerabilities

Generated on 2022-05-28 23:55:24.930201