IT Security News Daily Summary 2022-06-09

• UAS network expands operational drone testing

• Replacing lead pipes first depends on being able to find them

• Rob Joyce: China represents biggest long-term cyberthreat

• #RSAC: NSA Outlines Threats from Russia, China and Ransomware

• Lacework Blends Artificial Intelligence and Automation to Bolster Cloud Security

• #RSAC: How to Manage the Supply Chain in the Modern Age

• Prevent Breaches and Malware With Proactive Defenses

• Report: 75% of CISOs worry about vulnerabilities during app production

• DigiCert Acquires DNS Made Easy

• Hackers Can Steal Your Tesla by Creating Their Own Personal Keys

• West Risks Direct Military Clash Over Cyberattacks, Says Russia

• New MSDT 0-day Flaw ‘DogWalk’ Receives Free Unofficial Patches

• Mandiant: Cyberextortion schemes increasing pressure to pay

• CrowdStrike demonstrates dangers of container escape attacks

• #RSAC: Lessons Learned From the Solarwinds Sunburst Attack

• Identity-First Security Helps Reduce and Neutralize Enterprise Threats

• Friday Squid Blogging: Squid Changes Color from Black to Transparent

• The Bipartisan, Bicameral Privacy Proposal Is a Big Deal

• Symbiote, a nearly-impossible-to-detect Linux malware

• #RSAC: Funding Cyber Civil Defense to Help Improve the State of Security

• Twitter Set to Agree to Elon Musk Request For Data on Fake Accounts

• Emotet Banking Trojan Resurfaces, Skating Past Email Security

• Can Hackers steal data from an iPhone

• Feds Forced Travel Firms to Share Surveillance Data on Hacker

• New Linux Malware Symbiote is “Nearly Impossible to Detect”

• Facebook Whistleblower Accuses Company Of Failing To Remove Fake Account Network Run By Politician

• Cisco Makes Resilience a Cornerstone of Security Strategy

• Facebook phishing campaign nets millions in IDs and cash

• A cybercriminal stole 1 million Facebook account credentials over 4 months

• Sophos: Keeping Tabs on the Bad Guys Using Threat Research

• Cloud data breaches: 4 biggest threats to cloud storage security

• Tesla Proceeds With China Hiring Event, Despite Musk Job Warning

• iOS 16 cheat sheet: Complete guide for 2022

• Want Better Security? Up Your Collaboration Game

• How AI Is Useful — and Not Useful — for Cybersecurity

• New Privacy Framework for IoT Devices Gives Users Control Over Data Sharing

• Achieve seamless observability with Dynatrace for Azure

• 0patch Launched Unofficial Patches For ‘DogWalk’ Windows Zero-Day Bug

• Cubic Awarded DoDIN APL Certification for M3-SE and M3X Rugged Servers

• 5 ways to prevent Ransomware attacks

• Security frameworks / attestations and certifications: Which one is the right fit for your organization?

• AT&T Cybersecurity’s Partner Program and SentinelOne enter managed XDR market with robust alliance

• Suspicious behavior: OTX Indicator of Compromise – Detection & response

• CISA Adds Three Known Exploited Vulnerabilities to Catalog  

• New Tesla Hack Gives Thieves Their Own Personal Key

• Russia Says West Risks Direct Military Clash Over Cyber Attacks

• Optimism Crypto Project Hopes Hacker Will Give Back $15 Million

• Ministry Of Defence Acquires Government’s First Quantum Computer

• Expect Downtime Next Week For Packet Storm

• Medical Device Security Offers Proving Ground for Cybersecurity Action

• The Chatter Podcast: Private Sector Intelligence with Lewis Sage-Passant

• Learn what’s new in Azure Firewall

• Russian Evil Corp changes tactics to avoid sanctions

• HoloLens Creator Leaves Microsoft Amid Misconduct Allegations

• #RSAC: How to Fix IoT Security with Digital Twins

• Uptycs: Observability Is Key to Cloud Security

• CISA Adds Three Known Exploited Vulnerabilities to Catalog  

• “Legacy” cryptography in Fedora 36 and Red Hat Enterprise Linux 9

• Apple Launches Passkey Feature For Password-less Verification

• MyEasyDocs Exposed 30GB of Israeli and Indian Students PII Data

• Top GRC Tools & Software for 2022

• Why AIs Will Become Hackers

• Automox Adds Automation to Patching, Vuln Management

• China’s Attacks on Telecom Providers Were Exposed by US

• Effective Cybersecurity for eCommerce Sites

• One In Ten Staff Want To Leave Over Tech Frustrations, Says Freshworks

• 37 Major Companies and Organizations Pledge to Enhance Cyber Resiliency and Counter Evolving Global Threats

• ReliaQuest Bolsters Extended Detection With Threat Intelligence

• Previously undocumented Aoqin Dragon APT targets entities in Southeast Asia and Australia

• The cost of ransomware: Should you pay the ransom?

• Are you maximizing your digital transformation investments with modernized app onboarding?

• The Growing Risk in Cyber Risk Management

• Feds Take Down SSNDOB Marketplace for Selling Private Data of 24 Million US Citizens

• Twitter Used Two-Factor Login Details for Ad Targeting

• Summer holiday season fuels upswing of travel-themed spam

• Facebook users targeted in massive phishing campaign

• ASyncRat surpasses Dridex, TrickBot and Emotet to become dominant email threat

• Beware of Fake CCleaner Search Results that Deliver Information-stealing Malware

• One Size Does Not Fit All Organizations

• ‘Follina’ Vulnerability Exploited to Deliver Qbot, AsyncRAT, Other Malware

• How Poor Communication Opens the Door to Ransomware and Extortion

• Celebrate the Release of Our 100th PG-Practice Machine

• Why Smishing And Vishing Attempts Surged In 2021?

• Apple Will Be Launching Passwordless Logins, What Do You Think?

• BlackBasta is the latest ransomware to target ESXi virtual machines on Linux

• Twitter To Supply Elon Musk With Bot Data – Report

• US Details Chinese Attacks Against Telecoms Providers

• S3 Ep86: The crooks were in our network for HOW long?! [Podcast + Transcript]

• What Do Transparency and Data Sharing Really Mean?

• The Real Cost Of Cyber-Attacks: What Organizations Should Be Prepared For

• New Research Says Technobabble Needs To Be Stamped Out To Broaden Sector’s Appeal

• Whats The Problem With UK Govt Buying Quantum Computer

• What Do You Think Of CISA Latest Alert Warning Exploitation Of Network Providers And Devices By Chinese-backed Threat Actors?

• This new Linux malware is ‘almost impossible’ to detect

• Are 14-character minimum-length passwords secure enough?

• Update now! Patch against vulnerabilities in Meeting Owl Pro and Whiteboard Owl devices

• Symbiote: A Stealthy Linux Malware Targeting Latin American Financial Sector

• Lower costs with Cloud-delivered Firewall Management Center

• Apple’s passkeys attempt to solve the password problem

• Surfshark and ExpressVPN Exit India After Intrusive Law Implementation

• Symbiote Deep-Dive: Analysis of a New, Nearly-Impossible-to-Detect Linux Threat

• Summary of Symbiote Research (A New, Nearly-Impossible-to-Detect Linux Threat)

• Even the Most Advanced Threats Rely on Unpatched Systems

• Millions of Users Have Been Enticed to Phishing Pages in Massive Campaign Exploiting Facebook Messenger

• Symantec: More malware operators moving in to exploit Follina

• Cloud computing: Here’s the security threat you should be most worried about

• CISA warning: Hackers are exploiting these 36 “significant” cybersecurity vulnerabilities – so patch now

• RSA Conference 2022 – Announcements Summary (Day 3)

• Smartphones and Civilians in Wartime

• UK Government Acquires Its First Quantum Computer

• The most common exploit paths enterprises leave open for attackers

• New Emotet Variant Scrapes Google Chrome Credit Card Info

• May 2022’s Most Wanted Malware: Snake Keylogger returns to the index in eighth place following email campaigns delivering the malware via PDF files

• What role did a viral pandemic play in cyber security consolidation?

• Threat Actors Start Exploiting Meeting Owl Pro Vulnerability Days After Disclosure

• A Decade-Long Chinese Espionage Campaign Targets Southeast Asia and Australia

• New Emotet variant uses a module to steal data from Google Chrome

• Five Eyes alliance’s top cop says techies are the future of law enforcement

• MoD Acquires Government’s First Quantum Computer – Report

• Reports: Twitter to Provide Musk With Raw Daily Tweet Data

• Man Arrested for Sharing Info on 3D-Printed Weapons

• UK Joins Quantum Arms Race with First Computer

• Hacked Instagram accounts are scamming users

• DefenseStorm Raises $15 Million for Banking Security and Compliance Platform

• Over Half of CISOs Struggling for Board Investment

• Large Scale Phishing Campaign on Facebook Messenger Generates Millions in Ad Revenue

• Would you watch TV on the road?

• Unofficial Security Patch Released For Microsoft Zero-Day Vulnerability

• Tainted CCleaner Pro Cracker spreads via Black Seo campaign

• Apple’s New Operating Systems: macOS Ventura, iOS 16, & iPadOS 16 – Intego Mac Podcast Episode 243

• Avast Ultimate Business Security upgrade for existing customers

• RSA – Digital healthcare meets security, but does it really want to?

• Ransomware attacks have increased by 80% year-over-year

• Photos: RSA Conference 2022 Early Stage Expo

• Code42 adds watchlists functionality to its Incydr product to help teams manage insider risk events

• Do you know what your supply chain is and if it is secure?

• Malwarebytes DNS Filtering helps IT and security teams block access to malicious websites

• New Emotet Variant Stealing Users’ Credit Card Information from Google Chrome

• Photos: RSA Conference 2022, part 2

• How to build security for the metaverse

• Five Eyes alliance’s top Cop says techies are the future of law enforcement

• Lockbit 2.0 Ransomware targets Cybersecurity firm Mandiant

• CISA issues advisory on Chinese Cyber Threat to US Telecoms and ISPs

• Getting to grips with SaaS security

• Epoch Concepts Supports the USSF on a Massive Multi-Year Project by Providing IT Enabling Infrastructure

• Intelligent Waves’ Phantom, Cybersecurity Solution for Cloud Workload Protection, Named Editor’s Choice By Cyber Defense Magazine at the 2022 Global InfoSec Awards

• Exabeam Partners with Google Cloud to Create Hyperscale Cloud-native SIEM and Cybersecurity Analytics Offerings

• Building trust in a Zero-Trust security environment

• Healthcare is most likely to pay the ransom

• Top three most critical areas of web security

• What Is ISO/IEC 27017?

• Only 13.5% of IT pros have mastered security in the cloud native space

• Prometheus Ransomware’s Bugs Inspired Researchers to Try to Build a Near-universal Decryption Tool

• Supply chain attacks will get worse: Microsoft Security Response Center boss

• NetApp announces new innovations to simplify hybrid cloud operations

• Swimlane Turbine extends visibility and response for security teams

• Living Security Unify Insights allows organizations to identify human behavior risks

• #RSAC: Current Nation-State and Ransomware Gang Threat Trends

• Getting Started with Rapid7 InsightIDR: A SIEM Tutorial

• Testing & Evaluating SIEM Systems: A Review of Rapid7 InsightIDR

• Phishing Campaigns featuring Ursnif Trojan on the Rise

• How to Recognize an Online Scammer

• Wedding Planning App Users Hacked Before the Big Day

• 8 Ways to Know If Online Stores Are Safe and Legit

• How to Know If Your Mobile Finance Apps Are Safe

• Now Windows Follina zero-day exploited to infect PCs with Qbot

• Anjuna Security: Tapping ‘Confidential Computing’ to Secure Data, Users, and Organizations

• Security & Productivity: The New Power Couple

• SSNDOB Cybercrime Marketplace Seized in Intl. Coordinated Operation

• Why you need your boss’s boss to embrace agile

• Kovrr partners with Microsoft to help enterprises mitigate their cyber risk exposure

• Immuta raises $100 million to meet accelerated global demand for data security

• Schneider Electric collaborates with Claroty to enhance industrial cybersecurity

• #RSAC: How To Deal With a Panicked C-Suite During a Ransomware Event

• Cracking the Email Security Code: 12 Best Practices for Small and Midsize Businesses

• Concentric: How To Maximize Your AI Returns, In and Out of the SOC

• DeepSurface Security: Risk-Based Prioritization Adds New Depth to Vulnerability Management

• Connected vehicle, infrastructure data drives roadway safety

• NIST offers $1 million for next-gen incident command dashboards

• Work smarter and safer from anywhere with Getflix VPN

• #RSAC: The Most Dangerous Attacks of 2022

• Lookout: Getting It Right at the Secure Service Edge

• How a Saxophonist Tricked the KGB by Encrypting Secrets in Music

• Dragos OT-CERT improves security posture for industrial asset owners and operators

• OwnBackup hires Courtnee LeClaire as CMO and Alyssa Lahar as CPO

• IT Security News Daily Summary 2022-06-08

• MakeMoney malvertising campaign adds fake update template

• States try incentive-based cybersecurity

• 0Patch released unofficial security patch for new DogWalk Windows zero-day

• Radio waves for the detection of hardware tampering

• CISA director promotes collaboration and trust at RSAC 2022

• TSP participants bemoan bumpy recordkeeper transition

• Facebook Faces Massive Suit Alleging It Put Users’ Profiles In Sponsored Advertising

• The White House just pulled its nominee to fill the still-vacant job of federal procurement chief

• How one paper just blew up Bitcoin’s claim to anonymity

• Talon Grasps Victory at a Jubilant RSAC Innovation Sandbox

• Momentum and money

• SSNDOB Market domains seized, identity theft “brokerage” shut down

• Black Basta Ransomware Targets ESXi Servers in Active Campaign

• Platform Liability Trends Around the Globe: Moving Forward

• Google has more reasons why it doesn’t like antitrust law that affects Google

• Microsoft Slashes Russia Operations, Axes 400 Staff

• Vendor Security Network Boosted With Whistic Announcing $35m Funding Round

• What TrickBot Tells Us About The Future of Malware

• SideWinder Hackers Have Planted a Bogus Android VPN Program

• Welcoming the Indonesian Government to Have I Been Pwned

• Bitwarden vs 1Password: Password manager comparison

• Snowflake Launches Cybersecurity Workload to Find Threats Across Massive Data Sets

• CISA Reveal Chinese Hackers Tactics Targeting US Telecoms and Network Service Providers

• Summit of the Americas: An Opportunity to Address China’s Growing Influence over Latin America’s Mineral Resources

• ASC X9 Launches Effort To Develop New Standard That Will Enhance QR Code Security Via Cryptography

• Ridge Security Announces Security Validation Hyperautomation Solution at RSAC 2022

• CyberSheath Opens Registration For CMMC CON 2022

• How to create a continuous lifecycle for your IT Policy Management

• Challenges that impact the Cybersecurity talent pipeline

• Google Fixes Critical Vulnerabilities Affecting Android Devices

• Ten Percent Of Twitter Accounts Posting Spam, Says GlobalData

• It Doesn’t Pay to Pay: Study Finds Eighty Percent of Ransomware Victims Attacked Again

• CISA Adds 36 Known Exploited Vulnerabilities to Catalog 

• Feds Raid Dark Web Market Selling Data On 24 Million Americans

• Data For 2 Million Patients Stolen In Largest Healthcare Breach So Far In 2022

• Osmosis Blockchain Taken Offline After Hacker Steals $5m

• Maiar Exchange Taken Offline After Hacker Steals $113m

• Black Basta Ransomware Teams Up With Malware Stalwart Qbot

• Awful 4chan chat bot spouts racial slurs and antisemitic abuse

• Reverse Tunnels and URL Shorteners Employed by Attackers to Launch Phishing Campaign

• CTOs n CISOs quitting jobs because of ransomware fear

• Ofcom Updates Law To Protect Last Remaining Phone Boxes

• Telegram Shared Personal User Data With German Authorities

• MongoDB: From jokes to juggernaut

• CISA Adds 36 Known Exploited Vulnerabilities to Catalog 

• Containers vulnerability risk assessment

• The EU’s New Message-Scanning Regulation Must Be Stopped

• Minimalistic OffSec Scanner – A Powerful TCP and UDP Scanner

• Four Best Practices For Ransomware Protection

• Access Management Firm Opal Launches With $10 Million Series A Investment

• SSNDOB Market servers seized, identity theft “brokerage”” shut down

• Five Ways Cyber Attackers Leverage Bad Bots to Commit Automated Fraud

• Phishing: use of reverse tunnel services to avoid detection and shutdown increases

• Feds raid dark web market selling data on 24 million Americans

• Researchers Warn of Unpatched “DogWalk” Microsoft Windows Vulnerability

• Reinventing Cambridge Analytica One Good Intention at a Time

• Photos: RSA Conference 2022, part 1

• Your Resistance Pauses Axon’s Dangerous Drone Tasers

• IBM Closes Down Russian Operation, Lays Off Staff

• Taming the Digital Asset Tsunami

• Cybercriminals use automated bot to bypass 2FA authentication at wide scale

• CISA Clarifies Criteria for Adding Vulnerabilities to ‘Must Patch’ List

• #RSAC: How the US Government and Industry Work Together to Stop Cyber-Attacks

• How Do We Secure Our Cities From Attack?

• US dismantled and seized SSNDOB cybercrime marketplace

• Router security in 2021

• 5 Linux malware families SMBs should protect themselves against

• Intel offers ‘server on a card’ reference design for network security

• New Security and Privacy Features in macOS Ventura, iOS 16, and iPadOS 16

• Paying Ransomware Paints Bigger Bullseye on Target’s Back

• Data Breach at Shields Health Care Group Impacts 2 Million Patients

• SSNDOB stolen data marketplace shut down by global law enforcement operation

• TSMC Rules Out European Chip Factory For Now

• Fronton Botnet Attacks: Why Enterprises Should Worry

• NSA, FBI warning: Hackers are using these flaws to target VPNs and network devices

• OSINT Authentication Firm 443ID Emerges From Stealth with $8 Million Seed Funding

• Google Ordered To Pay Australian Politician Over Defamatory Youtube Videos

• RSA Conference 2022 video walkthrough

• Tried And Tested Ways To Protect Your Mac Device

• Android security: Google updates fix these five critical vulnerabilities

• Cloud Data Access Firm Immuta Raises $100 Million

• Owl Labs Patches Severe Vulnerability in Video Conferencing Devices

• OffSec Live

• High-Stakes Heists: 7 Films That Do It Right

• Apple’s ‘Passkeys’ Could Lead To Passwordless Future

• Why Shields Health Care Group Suffers Data Breach? Expert Weighs In

• Rogue Actors Slipping Through The Cracks Into Business’ Internal Networks

• Italian City Of Palermo Shuts Down All Systems To Fend Off Cyberattack

• Chinese State-backed Actors Hack Telecom Firms to Steal Data

• How to Recover From a Ransomware Attack

• Black Basta Ransomware Teams Up with Malware Stalwart Qbot

• RSA Conference 2022 – Announcements Summary (Day 2)

• Leaking Military Secrets on Gaming Discussion Boards

• New NHS Digital Materials Aim to Boost Cybersecurity Awareness in Social Care Organisations

• Privilege Escalation in Azure: Keep your enemies close, and your permissions closer

• 443ID launches with OSINT-driven identity and access management solution

• SSNDOB Cybercrime Marketplace Taken Down by Law Enforcement

• Ransomware Pressure Forces UK CISOs to Consider Quitting

• New Report Shows That Smishing Attempts Soared in 2021

• Qrypt collaborates with Vaultree to offer encrypted data processing technology for customers

• Qbot – known channel for ransomware – delivered via phishing and Follina exploit

• Deadbolt Ransomware Uses Multi-Tiered Extortion

• MongoDB grows up

• Whistic Raises $35 Million in Series B Funding for Vendor Security Network

• US and Euro Police Smash Cybercrime Marketplace

• Is Streaming Too Much Harmful or Beneficial to Your Health?

• Cuba Ransomware Group’s New Variant Found Using Optimized Infection Techniques

• Attacker Dwell Time Surges 36% in 2021

• China-linked threat actors have breached telcos and network service providers

• Italian Municipality of Palermo Suffers Cyberattack

• Onapsis’ product updates strengthen business application security

• NetWitness XDR helps analysts detect known and unknown attacks

• Coffee app in hot water for constant tracking of user location

• Taiwan Bans Most Chip Exports To Russia, Belarus

• Evil Corp Hacker Group Changes Ransomware Tactics After U.S. Sanctions

• Intruder dwell time jumps 36%

• SafeBreach Studio enables security teams to automate and scale red-team exercises

• Best Construction Workforce Management Solutions

• Forcepoint unveils new solutions to simplify connectivity and network security for enterprises

• U.S. Agencies Warn About Chinese Hackers Targeting Telecoms and Network Service Providers

• Acronis Advanced DLP protects businesses and MSPs from data leakage

• 82% of CIOs believe their software supply chains are vulnerable

• Black Basta ransomware now supports encrypting VMware ESXi servers

• Arctic Wolf announces cyber insurance readiness tool to help organizations manage their security posture

• Beijing-backed baddies target unpatched networking kit to attack telcos

• Cyber Security Management System (CSMS) for the Automotive Industry

• FakeCrack: Crypto stealing campaign spread via fake cracked software

• US cyber chiefs: Moving to Shields Down isn’t gonna happen

• FBI Seizes ‘SSNDOB’ ID Theft Service for Selling Personal Info of 24 Million People

• Ransomware attacks keeping the educational sector on its toes

• Ukraine’s secret cyber-defense that blunts Russian attacks: excellent backups

• NVIDIA offers Medical Computing Platform with Artificial Intelligence

• Black Basta Ransomware gang partners with QBot malware

• LastPass introduces passwordless Vault access

• Recovery and resilience: CISO insights into the 2022 cybersecurity landscape

• Trellix Partners with Hispanic Alliance for Career Enhancement to Boost Cybersecurity Workforce

• MetricStream and OCEG Survey Shows Businesses are Seeking Connected GRC Systems to Ensure Risk Readiness and Resiliency

• PIXM Named Winner of the Coveted Global InfoSec Awards during RSA Conference 2022

• Spin Technology Named Winner of the Coveted Global InfoSec Awards during RSA Conference 2022

• CMMC 2.0: key changes

• Barely one-third of IT pros can vet code for tampering

• Ransomware: A Beginner’s Guide to Threat Detection

• Pandemic-related identity fraud: How serious is it?

• Bridging the IT/OT gap with Tripwire’s Industrial Solutions

• Now Is the Time to Plan for Post-Quantum Cryptography

• Zero trust segmentation eliminates 5 cyber disasters per year and saves $20+ million annually

• RSA – Spot the real fake

• Elastic Security for Cloud expands visibility and protection of cloud-native environments

• Cyware CTIX 3.0 improves risk planning and defensive posture for security teams

• Trulioo platform update provides enhanced proof of address and anti-money laundering offerings

• Why Phishing Is Still the Top Attack Method

• What TrickBot tells us about the future of

• LastPass allows customers to access their vault with a passwordless login

• Cyber Security Giant Mandiant Denies Hacking Claims By LockBit Ransomware

• How to Quickly Remove Malware in 2022

• Disinfo and Hate Speech Flood TikTok Ahead of Kenya’s Elections

• #RSAC: Schneier Declares AI Hacking Will Favor Defense

• #RSAC: Collective Effort Required to Strengthen National Cybersecurity

• Deepfence partners with Lightstream to enhance security posture for enterprises

• Data for 2 million patients stolen in largest healthcare breach so far of 2022

• Linux version of Black Basta ransomware targets VMware ESXi servers

• Apple’s New MacBook Air Brings Back MagSafe for All

• Apple’s “next generation” of CarPlay plans to take over every screen in your car

• #RSAC: Cryptographers Panel Outlines Perils of Adversarial AI and Blockchain

• Relativity integrates with Box to enable direct data collection for e-discovery

• GoSecure and TPx launch Managed IDR service to protect organizations from advanced email threats

• Expel collaborates with Armis to provide critical coverage of customers’ ecosystems

Generated on 2022-06-09 23:55:35.311591