IT Security News Daily Summary 2022-06-11

• New Emotet Variant Capturing Users’ Credit Card Data from Google Chrome

• Carrier’s Industrial Access Control System has Critical Flaws

• Entrepreneur Struggles To Regain Access To Hacked Facebook Accounts

• Bluetooth Signals Can Be Abused To Detect and Track Smartphones

• Iran-linked Lyceum APT adds a new .NET DNS Backdoor to its arsenal

• New Confluence Remote Code Execution Flaw is Exploited by Cryptocurrency Miners

• Critical Flaws Identified in InfiRay Thermal Camera

• Cybersecurity Courses Ramp Up Amid Shortage of Professionals

• 5 Reasons Why Insider Threat Should Be a Security Priority

• PACMAN, a new attack technique against Apple M1 CPUs

• Hardware Bugs Provide Bluetooth Chipsets Unique Traceable Fingerprints

• How China Hacked US Phone Networks

• OMIGOD: Cloud providers still using secret middleware

• Kali Linux Team to Offer Free Access to Penetration Testing Course

• MIT Researchers Discover New Flaw in Apple M1 CPUs That Can’t Be Patched

• Build or Buy your own antivirus product

• RSA – APIs, your organization’s dedicated backdoors

• 3 takeaways from RSA Conference 2022 – Week in security with Tony Anscombe

• Adconion Execs Plead Guilty in Federal Anti-Spam Case

• Merkle and Tealium join forces to enable cookieless identity for marketers

• Snow Software collaborates with Anodot to address evolving issues associated with cloud cost management

• How To Secure WordPress Website From Cyber Attacks?

• Automation Anywhere appoints Rob Ferguson as CRO

• 2022-06-07 – obama186 distribution Qakbot with DarkVNC and spambot activity

• 2022-06-09 – TA578 Contact Forms campaign Bumblebee infection with Cobalt Strike

• Ransomware hits NJ school district

• IT Security News Daily Summary 2022-06-10

• Report: Over 1B Google Play downloads for financial apps targeted by malware

• In search of a more energy-efficient blockchain

• How CISOs can Find and Retain Security Staff During the Great Resignation

• World Economic Forum wants a global map of online crime

• Threat actors exploit recently disclosed Atlassian Confluence flaw in cryptomining campaign

• Remote work demands industrial businesses secure critical infrastructure

• Billion-Dollar Valuations Can’t Halt Layoffs at OneTrust, Cybereason

• CrowdStrike Introduces Humio for Falcon, Redefining Threat Hunting with Unparalleled Scale and Speed

• New Evidence on the Role of Subnational Diplomacy in China’s Pursuit of U.S. Technology

• Better public-private partnerships could prevent major ransomware attacks, crypto insiders say

• CrowdStrike Adds Strategic Partners to CrowdXDR Alliance and Expands Falcon XDR Capabilities

• CrowdStrike Introduces CrowdStrike Asset Graph to Help Organizations Proactively Identify and Eliminate Blind Spots

• Threat and risk specialists signal post-COVID conference season is back on

• CISOs think they aren’t getting enough cyber investment, survey says

• For mental crises, send a pro not the police?

• 3 types of PKI certificates and their use cases

• #RSAC: CISA Outlines Bad Practices Every Organization Should Avoid

• The January 6 Hearing Was a Warning

• The Tricky Business of Elon Musk Getting Twitter Fire-Hose Access

• Survey: Majority of CISOs aren’t getting the cyber investments they want

• Digital Corps launches with 41 fellows across 13 agencies

• Water sector leaders seek increased EPA cybersecurity collaboration and guidance

• How to Blunt the Virulence of the New Ransomware

• EU Debates AI Act to Protect Human Rights, Define High-Risk Uses

• Dark Web Selling Alleged Western Weapons Sent to Ukraine

• Instagram credentials Stealer: Disguised as Mod App

• Instagram credentials Stealers: Free Followers or Free Likes

• Southeast Asia and Australia Orgs Targeted by Aoqin Dragon Hackers for Ten Years

• How to Secure a High-Profile Event Like the Super Bowl

• The Eleventh Circuit’s Acceptance of a Consumer Protection Approach to Social Media Regulation

• #RSAC: The Privacy and Blockchain Paradox

• New Linux Malware ‘Nearly Impossible to Detect’

• Application Security Testing Is on the Mend With Automated Remediation

• How DNS filtering can help protect your business from Cybersecurity threats

• Digital Corps launches with 40 fellows across 13 agencies

• Vulnerabilities Targeting InfiRay Thermal Cameras May Result in Industrial Process Hacking

• Most Security Product Buyers Aren’t Getting Promised Results: RSA Panel

• Mitigating the Security Skills Shortage

• Symbiote: A Stealth Malware that Attacks Banking Institutions

• Malvertising Campaign Target Firefox Users via Fake Updates

• Millions of Facebook Users’ Credentials Were Stolen via Authentic App Services

• Twitter to take down fake accounts to please Elon Musk and his $44 billion offer

• A Few Simple Ways to Transform Your Cybersecurity Hiring

• Google Releases Security Updates for Chrome

• WhatsApp spam offers up “B&Q Father’s Day Contest 2022”

• How AI is driving IAM’s shift to digital identity

• Google Releases Security Updates for Chrome

• Kubernetes Operators: good security practices

• Researchers Find Bluetooth Signals Can be Fingerprinted to Track Smartphones

• Experts spotted a new variant of the Cuba Ransomware with optimized infection techniques

• Symbiote Linux malware spotted, and infections are ‘very hard to detect’

• EU Parliament Approves Ban On Combustion Cars By 2035

• Karakurt data extortion group: CISA issues alert

• Ease your kids into a hybrid play model with these tips

• Phishing, fake landing pages and emails from your boss: How crooks are targeting your crypto

• Bitwarden vs LastPass: Compare top password managers

• 38 Tech Leaders Sign Cyber Resilience Pledge

• How 4 Young Musicians Hacked Sheet Music to Help Fight the Cold War

• Artificial Intelligence and Security: What You Should Know

• U.S. Water Utilities Prime Cyberattack Target, Experts

• Vulnerabilities in HID Mercury Access Controllers Allow Hackers to Unlock Doors

• In a Quickly Evolving Landscape, CISOs Shift Their 2022 Priorities

• What A 650% Rise In Open-Source Software Targeted Hacks Is Teaching Us

• Owl Labs Patches Awful Exposure in Video Conferencing Applications

• Kinsta vs WP Engine: Managed WordPress hosting comparison

• What & Who You Know: How to get a job in cybersecurity with no experience

• What Is Cloud Email?

• MIT researchers discover Apple M1 chip vulnerability

• Google: We’re making the Chrome browser ‘more helpful’ by using machine learning

• How do I keep two PCs in sync when they’re in different locations? [Ask ZDNet]

• This hacking group quietly spied on their targets for 10 years

• Chinese Cyberspy Group ‘Aoqin Dragon’ Targeting Southeast Asia, Australia Since 2013

• Ericsson Confirms SEC Investigation Over Iraq Conduct

• Potent Emotet Variant Spreads Via Stolen Email Credentials

• Chrome 102 Update Patches High-Severity Vulnerabilities

• #RSAC: “Users Are Not Stupid, So Don’t Treat Them Like They Are”

• Design Weakness Discovered in Apple M1 Kernel Protections

• New Linux Malware Dubbed “Almost Impossible” To Detect Found

• Researchers unearth highly evasive “parasitic” Linux malware

• Apple M1 chip contains hardware vulnerability that bypasses memory defense

• InfiRay Thermal Camera Flaws Can Allow Hackers to Tamper With Industrial Processes

• Dark Web Vendors Allegedly Selling Western Weapons in Ukraine

• US Agency Deepens Tesla Autopilot Investigation

• Highly-Evasive Linux Malware ‘Symbiote’ Infects All Running Processes

• Researchers Block Two Million Extortion Emails Daily

• Russia: Cyber-Attacks Could Escalate Military Conflict

• New Emotet Malware Targets Chrome Users Card Information

• Phishing Hits All-Time High in Q1 2022

• Gamers Targeted On Roblox By Ransomware Selling Decryptors On Game Pass Store

• RedSeal Stratus allows organizations to monitor and secure their multi cloud environments

• Researchers Detail How Cyber Criminals Targeting Cryptocurrency Users

• Italian City Palermo Impacted by Cyberattack, Vice Society Ransomware Claims Responsibility

• Vice Society ransomware gang adds the Italian City of Palermo to its data leak site

• The Must-Attend Cybersecurity Event: International Cyber Expo

• Prioritizing segmentation leads to better business and security outcomes

• International Cyber Expo Invites Esteemed Advisory Council to Shape Event Agenda

• Morphisec Knight for Linux proactively prevents advanced evasive attacks

• Emotet malware gang re-emerges with Chrome-based credit card heistware

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Researchers Disclose Critical Flaws in Industrial Access Control System from Carrier

• Lacework expands security capabilities to improve visibility across dynamic cloud workloads

• Noname API Security Platform 3.0 empowers users to identify problems in different regions

• A new Linux Malware named Symbiote is hard to detect

• Russia warned the West against cyber attacks and threatened direct military warfare

• June 2022 Patch Tuesday forecast: Internet Explorer fades into the sunset

• Photos: RSA Conference 2022, part 3

• New infosec products of the week: June 10, 2022

• Chinese ‘Aoqin Dragon’ gang runs undetected ten-year espionage spree

• TranSigma Delivers More Than $7M in Annualized Free-cash-flow Savings for Our Client in First of Many Celonis-supported Use Cases

• How to stay ahead of the Cybersecurity labor crisis and keep growing your business

• Rapidly evolving IoT malware EnemyBot now targeting Content Management System servers and Android devices

• What cybersecurity investors should be aware of in 2022

• Hardware flaws give Bluetooth chipsets unique fingerprints that can be tracked

• Only 43% of security pros can respond to critical alerts in less than an hour

• New Emotet Variant Capturing Users’ Credit Card Data from Google Chrome

• RSA – Creepy real‑world edition

• Navigating Cybersecurity with NERC CIP as the North Star

• Using the random motion of electrons to improve cybersecurity

• Russia, China, warn US its cyber support of Ukraine has consequences

• ADVA Ensemble SaaS MANO accelerates rollout of virtualized services

• Livestream: Jan. 6 Select Committee Hearing Day One

• Test Post

• Test Test 2

• Hyperconverged Infrastructure (HCI) is Changing Data Centers

• White House developing national strategy to increase data collection as privacy tech improves

• Q1 2022 Global DDoS Threat Landscape Report Findings Summary

• Ping Identity, Yubico, and EntryPoint bring zero trust to FIDO2 authenticators for the US Federal Government

Generated on 2022-06-11 23:55:25.731886