IT Security News Daily Summary 2022-06-04

• Anonymous Hacktivists Leak 1TB of Top Russian Law Firm Data

• LuoYu APT Delivers WinDealer Malware Via Man-on-the-side Attacks

• Android Trojans are After Financial Apps With Over a Billion Downloads

• Why hybrid work is leading to cybersecurity mistakes

• GigNet Chairman and CEO Paul Moore Named to Advisory Committee of Paladin Capital Group

• Artificial Intelligence: Main Weapon to Counter Cyber Attacks

• China’s Draft Cybersecurity Rules Pose Risks For Financial Firms

• Artificial Intelligence: The Main Weapon to Counter Cyber Attacks

• Anonymous: Operation Russia after 100 days of war

• Experts Find Malware Controlling Thousands of Websites in Parrot TDS Network

• Serious RCE Vulnerability In Horde Webmail Threatens User Security

• Researcher Shows How An Attacker Can Hack WhatsApp Via Call Forwarding

• Google May Owe You a Chunk of $100 Million

• Your Tim Hortons Coffee App Knew Where You Were at All Times

• Critical 0-Day Bug in Atlassian Confluence Widely Exploited by Hackers

• Microsoft Found Numerous Bugs Affecting Pre-Built Android Apps From Telcos

• How to Protect Your CRM from Hackers

• Atlassian Releases Patch for Confluence Zero-Day Flaw Exploited in the Wild

• GitLab addressed critical account take over via SCIM email change

• Weekly Update 298

• 6 Ways Modern Technology Is Improving Legal Processes & Legal Profession

• Feeling highly stressed about your job? You must be a CISO

• Build or Buy your own antivirus product

• Clipminer Botnet Made 1.7 Million Dollars From Crypto Mining

• That Job Your Co-Worker Emailed You About? Yeah … No.

• Insight Acquires Hanu Software Solutions, Expands Its Public Cloud Service Capabilities

• (ISC)2 Supports Members with Thoughtful Response to SEC Proposed Rule on Cybersecurity Reporting

• 100 days of war in Ukraine: How the conflict is playing out in cyberspace

• Key insights from ESET’s latest Threat Report – Week in security with Tony Anscombe

• Contrast Security launches free code scanning tool for developers

• CybelAngel adds contextualized inventory technology within its ADM solution

• Scoop: Australian Trading Giant ACY Securities Exposed 60GB of User Data

• LuoYu APT delivers WinDealer malware via man-on-the-side attacks

• SnapAttack partners with Mandiant to protect organizations against cyber threats

• Even Russia’s Evil Corp now favors software-as-a-service

• 6 ways technology can streamline public records requests

• Tutorial: How to Build Your First Node.js gRPC API

• Ransomware coming for IoT devices, researchers warn

• IT Security News Daily Summary 2022-06-03

• Friday Squid Blogging: More on the “Mind Boggling” Squid Genome

• Accessing Ethereum Archive Nodes With Infura

• How to Prevent Software Supply Chain Attacks

• An Actively Exploited Microsoft Zero-Day Flaw Still Has No Patch

• Atlassian Releases New Versions of Confluence Server and Data Center to Address CVE-2022-26134

• CISA Releases Security Advisory on Dominion Voting Systems Democracy Suite ImageCast X

• Adopting MLSecOps for secure machine learning at scale

• 1Password vs Dashlane: Password manager comparison

• FDA: Patch Illumina DNA Sequencing Instruments, Stat

• Atlassian Releases New Versions of Confluence Server and Data Center to Address CVE-2022-26134

• CISA Releases Security Advisory on Dominion Voting Systems Democracy Suite ImageCast X

• Reno pilots blockchain for historic registry

• Zero trust leaders avert 5 cyber disasters per year on average

• What Counts as “Good Faith Security Research?”

• Announcing the winners of the 2021 GCP VRP Prize

• Critical Atlassian Confluence flaw exploited in the wild

• The Land of Data-Centric Security: Before and After

• Non-human Resources

• Italy Alerts Organizations of Incoming DDoS Attacks

• Tech trade group seeks bumps to TMF, agency-based IT funds

• Data gap poses risks for launch site of VA’s new health record

• FEMA leans into data science to ensure equitable disaster aid distribution

• Foxconn Confirms Ransomware Hit Factory in Mexico

• EFF to Inter-American Court of Human Rights: Colombia’s Surveillance of Human Rights-Defending Lawyers Group Violated International Law

• To cut off all nearby phones with these Chinese chips, this is the bug to exploit

• Digital twins are moving into the mainstream

• Actively Exploited Atlassian Zero-Day Bug Allows Full System Takeover

• Microsoft Disables Iran-Linked Lebanese Hacking Group Polonium

• Iconium Software Releases DataLenz v1.3 for IBM zSystems

• YourCyanide Ransomware Propagates With PasteBin, Discord, Microsoft Links

• The best privacy and security apps for Android

• Behind WhatsApp’s splashy privacy push

• Keeper vs LastPass: Which password manager is better for your business?

• Atlassian announces 0-day hole in Confluence Server – update soon!

• Karakurt Team hits North America and Europe with data theft and extortion

• Ten Eleven Ventures Raises $600M Fund for Cybersecurity Investments

• Ransomware: May 2022 review

• Five Steps to a Secure Cloud Architecture

• Kasada Fortifies Anti-Bot Platform to Disrupt “Solver Service” Supply Chain, Defending Organizations Against the Latest and Stealthiest Automated Threats

• Spirent Federal Presents Multiple Technical Papers at Joint Navigation Conference 2022

• Cyware Grows Sales Channel Leadership in North America by Bringing Aboard Industry Veterans Matt Courchesne and Shashi Nair

• How to Prevent Burnout Among Cybersecurity Professionals Before, During and After a Breach

• New ERMAC 2.0 Trojan Variant Actively Targeting Android Users

• Fake Updates Continue To Be A Digital Risk: What To Do?

• Digital Experience Monitoring: More Important Than Ever

• Attackers are leveraging Follina. What can you do?

• Healthcare providers prefer paying ransom in ransomware attacks

• Conti reforms into several smaller groups, are they now more dangerous than ever?

• Authorities Take Down SMS-based FluBot Android Spyware

• Linux Cybersecurity Education & Training is Integral to Growing Your Career

• Zero-Day Exploitation Of Atlassian Confluence

• Evil Corp Pivots LockBit To Dodge U.S. Sanctions

• Clipminer Rakes In $1.7m In Crypto Hijacking Scam

• FDA Urges Patch Of Illumina Devices

• U.S. Sanctions Curb Chinese Technology Exports to Russia

• Return of the Angry Political Man

• Deadly Secret: Electronic Warfare Shapes Russia-Ukraine War

• Chainguard Bags Massive $50M Series A for Supply Chain Security

• GitLab Issues Security Patch for Critical Account Takeover Vulnerability

• Clipminer Botnet already allowed operators to make at least $1.7 Million

• Unpatched Atlassian Confluence vulnerability is actively exploited

• Software developers, how secure is your software ?

• Why Network Object Management Is Critical for Managing Multicloud Network Security

• Actively Exploited Microsoft Zero-Day Still Doesn’t Have a Patch

• Chinese LuoYu Hackers Using Man-on-the-Side Attacks to Deploy WinDealer Backdoor

• LockBit Malware Is Now Used by Evil Corp

• Parental controls: What they can and can’t do for you

• Internet Safety Month: Avoiding the consequences of unsafe Internet practices

• Expert Posts About Blogger’s CSP Flaw

• IoT and OT Impacted by Forescout Proof-of-Concept Ransomware Attack

• CVE-2021-26084: Critical Atlassian Confluence Flaw Exploited in the Wild

• Old Hacks Die Hard: Ransomware, Social Engineering Top Verizon DBIR Threats – Again

• CISA Warns of Critical Vulnerabilities in Illumina Genetic Analysis Devices

• Meta Sees Huge Rise In Hate Speech And Violent Content Across Its Platforms In April

• Over 3.6M MySQL Servers Found Unguarded Online

• For Ransomware, Speed Matters

• GM’s Cruise Granted San Francisco Permit For Self-Driving Taxis

• Laminar doubles funding for cloud data security to $67M

• Evil Corp Pivots LockBit to Dodge U.S. Sanctions

• Malwarebyes vs Norton: Compare top antivirus software solutions

• Zero-day Exploited to Target Atlassian Confluence

• Clipminer rakes in $1.7m in crypto hijacking scam

• Lebanese Threat Actor ‘Polonium’ Targets Israeli Organizations

• Industrial Spy Is Now Targeting Corporate Websites to Display Ransom Notes

• The Impact of Technology on Legal Processes for Personal Injury

• The Fight Against Robocall Spam and Scams Heats Up in India

• Healthcare organizations face rising ransomware attacks – and are paying up

• New York Signs Bill To Ban Certain Crypto Mining Operations

• TXOne Unveils New OT Network Security Appliance for SMB Manufacturers

• Researchers Uncover Malware Controlling Thousands of Sites in Parrot TDS Network

• Build an Effective Network Defence by Using NDR

• How to Prevent Cyber Theft?

• Atlassian Confluence Servers Hacked via Zero-Day Vulnerability

• Alert! Unpatched critical Atlassian Confluence Zero-Day RCE flaw actively exploited

• Unpatched Atlassian Confluence zero-day exploited, fix expected today (CVE-2022-26134)

• Musk ‘Super Bad’ Feeling About Economy, Wants To Axe 10,000 Tesla Staff

• Microsoft Blocks Iran-linked Lebanese Hackers Targeting Israeli Companies

• How to Troubleshoot Home Internet

• Interior issues draft cloud RFP valued at up to $1B

• DDoS attackers continue to innovate, devising new threats and altering attack strategies

• Singapore officially launches digital platform to ease supply chain data flow

• Atlassian: Unpatched critical flaw under attack right now to hijack Confluence – and it’s been there since 2013

• Microsoft blocked Polonium attacks against Israeli organizations

• Twitter fined $150M for selling user data

• White House internships will soon be paid

• Vulnerabilities on UNISOC Processors loaded Android Phones

• Russia to the cyber-attack United States with the help of its Ransomware gangs

• Why You Should Care About Fitness Tracker Security

• Seniors: How to Keep Your Retirement Safe from Online Scams

• New infosec products of the week: June 3, 2022

• Why are many businesses still not using a password manager?

• 5 ways to prevent Ransomware attacks

• Suspicious behavior: OTX Indicator of Compromise – Detection & response

• Vishing attacks: What they are and how organizations can protect themselves

• Hackers Exploiting Unpatched Critical Atlassian Confluence Zero-Day Vulnerability

• 40% of enterprises don’t include business-critical systems in their cybersecurity monitoring

• Intelligence is key to strategic business decisions

• Armis Asset Vulnerability Management enables organizations to prioritize their mitigation efforts

• Atlassian Releases Security Advisory for Confluence Server and Data Center, CVE-2022-26134

• Traceable AI introduces API Catalog solution to help organizations manage API-related security threats

• SecurityScorecard platform enhancements empower customers to manage and reduce cyber risks

• F5 adds new capabilities to provide customers with more control over modern application architectures

• Parallels RAS 19 improves deployment flexibility for workloads and optimizes data security

• Appgate SDP 6.0 accelerates zero trust implementations for enterprises

• Atlassian Releases Security Advisory for Confluence Server and Data Center, CVE-2022-26134

• VMware Workspace ONE updates enable proactive security for all employee devices

• DarkOwl Ransomware API offers insight into content from ransomware websites hosted on the darknet

• Atlassian Releases Security Advisory for Confluence Server and Data Center, CVE-2022-26134

• Swissbit launches CFexpress 2.0 Type B cards for industrial use

• Arcserve OneXafe 4500 Series delivers increased data security with larger data store

• ESET Threat Report T 1 2022

• Arista Networks announces next generation 7130 Series systems designed for demanding in-network apps

• Solarium successor wants the White House to lead on cyber workforce strategy

• Atlassian: Unpatched critical flaw under attack right now to hijack Confluence

• FBI, CISA: Don’t get caught in Karakurt’s extortion web

• Space Force preps to take on Army, Navy SATCOM this year, official said

• CISA Adds One Known Exploited Vulnerability (CVE-2022-26134) to Catalog  

• Atlassian Releases Security Updates for Confluence Server and Data Center, CVE-2022-26134

• Asimily collaborates with Extreme Networks to secure IoT devices for healthcare providers

• Okta and Secure Code Warrior join forces to reduce the risk of developers committing insecure code

• Spirion partners with Spire Solutions to address enterprise data privacy needs in the MEA region

Generated on 2022-06-04 23:55:21.657291