IT Security News Daily Summary 2022-06-15

• Identity and Access: The Game is the Same – It Just Got Fiercer

• Defense topline funding could see a bump, panel chairman says

• ‘Hertzbleed’ Side-Channel Attack Threatens Cryptographic Keys for Servers

• 7 Ways to Bring AI to Cybersecurity

• What is WAAP? – A Quick Walk Through

• Pandemic response watchdogs urge agencies to focus on ID theft

• At Second Trial, Ex-CIA Employee Defends Himself in Big Leak

• Heineken says there’s no free beer, warns of phishing scam

• Elon Musk Appeals Court Refusal To End Tweet Oversight

• Small biz leaders urge Congress to address category management woes

• Microsoft takes months to fix critical Azure Synapse bug

• A critical flaw in Citrix Application Delivery Management allows resetting admin passwords

• Hands on with Pfizer Booster 4.0: My review of anti-malware for carbon-based systems

• Meta Fails To Overturn UK Order To Sell Giphy

• How to reframe the cybersecurity conversation for elected officials

• Legislation sets penalties for drone misuse

• New Bluetooth upgrade could provide a big audio assist for government

• Satellites zoom in on cities’ hottest neighborhoods to help combat the urban heat island effect

• NordPass password manager deal: Get two years for $29

• GreyNoise Attracts Major Investor Interest

• Cloud Native Application Protection Platform: A Utility Knife for Cloud Security Services

• This tiny, encrypted drive can fit on your keyring

• European Union Preparing To Crack Down On Facebook Deepfake Videos

• As Internet-Connected Medical Devices Multiply, So Do Challenges

• Simplify and centralize network security management with Azure Firewall Manager

• New Linux Malware Syslogk has a Clever Approach of Staying Undetected

• Kaiser Permanente Reveals Data Leak of Nearly 70,000 Medical Records

• Update on (ISC)² Entry-Level Cybersecurity Certification Pilot

• Can global recruitment solve the cybersecurity hiring problem?

• BeanVPN leaks 25 million user records

• Why strong security solutions are critical to privacy protection

• Process to remove personal data from the Google Search Engine

• SAP Patches Critical NetWeaver and ABAP Platform Vulnerabilities

• Imperva Introduces New Features to Help Prevent Online Fraud

• Stealthy Symbiote Linux malware is after financial institutions

• Qualcomm Victory After EU Court Annuls 997m Euros Antitrust Fine

• New Linux Rootkit Malware ‘Syslogk’ Triggers Backdoors With Magic Packets

• Complete Guide to Keylogging in Linux: Part 3

• Microsoft continues cyber security spending spree with Miburo buy

• Now LIVE: SecurityWeek Cloud Security Summit, Presented by Palo Alto Networks

• Jit Banks Massive $38.5 Seed Round Funding

• European Security Officials Double Down on Automated Moderation and Client-Side Scanning

• Record breaking HTTPS DDoS attack

• Earn Money with Bug Bounties

• Former DOD cyber official loses bid for Congress despite Trump’s backing

• Lessons for Better Fraud Decision-Making

• US Researchers Spot New Hertzbleed Flaw Affecting AMD and Intel CPUs

• Panchan Golang P2P botnet targeting Linux servers in cryptomining campaign

• Post-quantum cryptography, an introduction

• Threat Intelligence: Cyber and Electromagnetic Activities (CEMA) with Software-Defined Radio (SDR)

• IBM Ordered To Turn Over Ginny Rometty Emails In Age Discrimination Lawsuit

• Lottery scams: Don’t be fooled

• So Long, Internet Explorer. The Browser Retires Today

• Critical Code Execution Vulnerability Patched in Splunk Enterprise

• Critical Atlassian Confluence flaw remains under attack

• directory traversal

• Obrela sponsors open-source Commix project

• Firefox stops advertisers tracking you as you browse, calls itself the most “private and secure major browser”

• In Cybersecurity, What You Can’t See Can Hurt You

• Travel-related Cybercrime Takes Off as Industry Rebounds

• DragonForce Gang Unleash Hacks Against Govt. of India

• Small Botnet Launches Record-Breaking 26 Million RPS DDoS Attack

• Patch Tuesday And Experts Insight

• New Study: Australian Capital Territory Files No. 1 Most Complaints Amid Record $324 Million Online Scam Surge In Australia

• Does Zero Trust Mean Defence In Depth Is Dead?

• Survey Finds IT Leaders Eager to Eliminate Passwords

• Ubuntu Core 22: The secure, application-centric IoT OS is now available

• How One “Crypto Drainer” Template Facilitates Tens Of Millions Of Dollars In Theft

• Panchan: A New Golang-based Peer-To-Peer Botnet Targeting Linux Servers

• Best New Apps in 2022 Useful for Students

• Update now!  Microsoft patches Follina, and many other security updates

• Report: 14.9 billion users have had personal data breached since 2004

• Don’t use these passwords: These are the most popular log-in details found for sale online

• Got hit by a cyber attack? Hackers will probably come after you again – within a year

• Security resilience: 4 ways to achieve company-wide buy-in

• How can mentorship help the cybersecurity workforce gap?

• Facebook Account Bruteforcer

• Microsoft’s Internet Explorer Retires Today, After 27 Years

• Ubuntu Core 22 brings real-time Linux options to IoT

• New ‘Hertzbleed’ Remote Side-Channel Attack Affects Intel, AMD Processors

• Let’s give a look at the Dark Web Price Index 2022

• Over 2 Million People Have Downloaded Android Malware from the Google Play Store

• Firefox: Our new cookie protection will stop companies tracking you across sites

• M1 Chip Vulnerability

• Ransomware Group Launches Search Site for Stolen Data

• It’s official, today you can say goodbye to Internet Explorer. Or can you?

• How cybersecurity readiness prevents small and medium businesses (SMBs) from fuelling supply chain attacks

• Attackers Can Exploit Critical Citrix ADM Vulnerability to Reset Admin Passwords

• Russia Is Taking Over Ukraine’s Internet

• New Iranian Spear-Phishing Campaign Hijacks Email Conversations

• PrivacyTests reveals how your web browser does privacy-wise

• Kubernetes users struggle with security, Red Hat survey says

• SAP Patches High-Severity NetWeaver Vulnerabilities

• FDNY Building Digital Firewall to Protect Emergency Workers From Cyber Attacks

• Ransomware gang publishes stolen victim data on the public Internet

• Email compromise leads to healthcare data breach at Kaiser Permanente

• Researcher Demonstrated How Tesla Key Card Feature Can be Exploited to Steal Cars

• NSO Group In Talks To Offload Pegasus Spyware – Report

• Tripwire Products: Quick Reference Guide

• BNPL Fraud Alert as Account Takeovers Surge

• Comprehensive, Easy Cybersecurity for Lean IT Security Teams Starts with XDR

• New Hertzbleed Side-Channel Attack Affects All Modern AMD and Intel CPUs

• How much does access to corporate infrastructure cost?

• Ransomware Gang Develops New Website That Allows Victims To Search For Their Data

• Avera Health Data Breach Affects 700 Patients

• The State of 3D Printing: TCT 3Sixty 2022

• A tiny botnet launched the largest DDoS attack on record

• Microsoft to Acquire Cyber Threat Analysis Company Miburo

• Privacy Watchdog Boosts Legal Funds by Keeping Millions in Fines

• New cybersecurity bill to require mandatory reporting of ransomware, other attacks

• ChromeLoader a simple vessel for more sinister threats

• Microsoft’s Final Patch Tuesday Fixes Follina Bug

• VERT Threat Alert: June 2022 Patch Tuesday Analysis

• 45% of infosec pros admit that they have considered quitting the industry

• Cyber Security Management System (CSMS) for the Automotive Industry

• Let’s give a look at the Dark Web Price Index 2021

• Cloudflare Saw Record-Breaking DDoS Attack Peaking at 26 Million Request Per Second

• Microsoft acquires cyber threat detecting firm Miburo

• Most of the cyber attacks in Canada are ransomware genre

• McAfee’s Digital Wellness Delivers Online Protection As An Employee Benefit

• Microsoft Patch Tuesday, June 2022 Edition

• Mind the gap: How to ensure your vulnerability detection methods are up to scratch

• A closer look at the SEC Cybersecurity Disclosure rule

• Malaysia-linked DragonForce hacktivists attack Indian targets

• PriSec Boot Camp Helps Privacy and Security Officers Prevent Information Losses and Cyberattacks

• Intelligent Waves Promotes Amy Wood to Chief Financial Officer

• Hexnode recognized as a Leader in the IDC MarketScape: Worldwide Unified Endpoint Management Software for Apple Devices 2022 Vendor Assessment

• Snowflake Launches New Unistore Workload to Drive Next Phase of Innovation With Transactional and Analytical Data Together in the Data Cloud

• Journey Into Cybersecurity – Conversations with Cyber Newcomers, Part 1

• GALLIUM APT Hackers Using New Hacking Tool “PingPull” To Attack on Telecom & Government Sectors

• Cloud computing top concerns: The focus is shifting

• Patch Tuesday: Microsoft Issues Fix for Actively Exploited ‘Follina’ Vulnerability

• How confident are IT pros in the security of their organization’s supply chain?

• Unpatched Exchange server, stolen RDP logins… How miscreants get BlackCat ransomware on your network

• Phishing reaches all-time high in early 2022

• Microsoft fixes under-attack Windows zero-day Follina

• How 3D Printing Has Become a Global Trend With Time

• Black Kite FocusTags allows users to track high-profile cyber events

• Koverse Data Platform 4.0 empowers organizations to enforce zero trust for data management

• Splunk announces platform updates to address the complexities of multi-cloud and hybrid environments

• Trend Micro VicOne strengthens connected vehicle cybersecurity

• Adobe Releases Security Updates for Multiple Products

• Follina gets fixed – but it’s not listed in the Patch Tuesday patches!

• Adobe Releases Security Updates for Multiple Products

• Former US state agency CIO, IT exec plead guilty to bribery and extortion scheme

• SAP Releases June 2022 Security Updates

• Some Cybersecurity Startups Still Attract Funding Despite Headwinds

• SAP Releases June 2022 Security Updates

• QuSecure partners with DataBridge Sites to help organizations protect against quantum attacks

• Alert Logic and TD SYNNEX join forces to improve security posture for their customers

• Cloudflare says it thwarted record-breaking HTTPS DDoS flood

• A flaw in Zimbra email suite allows stealing login credentials of the users

• C3 AI collaborates with Google Cloud to optimize supply chains for improved resiliency

• Hackers Using Web3 Backdoor Wallets to Steal Seed Phrases from iOS/Android Users

• Brazil’s data protection authority to gain independence from presidential office

• Codefresh names Christian Hernandez to lead Developer Experience program

• Senator Declares Amazon Ring’s Audio Surveillance Capabilities “Threaten the Public”

• Victory! New York’s Vaccine Privacy Bill Heads to Governor’s Desk

• CISA Adds One Known Exploited Vulnerability to Catalog 

• Matthew Moynahan joins OneSpan Board of Directors

• 2022-06-13 – TA578 thread-hijacked email –> Bumblebee –> Cobalt Strike

• Cloud adopters are the ‘weak link’ in security

• County to build fiber ring and data center for local governments

• DDoS Subscription Service Operator Gets 2 Years in Prison

• Microsoft Patches ‘Follina’ Zero-Day Flaw in Monthly Security Update

• Veterans Explain How Military Service Prepared Them for Cybersecurity Careers

• CISA Adds One Known Exploited Vulnerability to Catalog 

• IT Security News Daily Summary 2022-06-14

• Citrix Releases Security Updates for Application Delivery Management

• WiFiDuck BadUSB Tester

• Infrastructure investments should focus on ‘cyber smart’ projects

• 3 ways governments can regain citizens’ trust

• Citrix Releases Security Updates for Application Delivery Management

• Ransomware Group Debuts Searchable Victim Data

• New botnet and cryptominer Panchan attacking Linux servers

• Man gets two years in prison for selling 200,000 DDoS hits

• How Russian sanctions may be helping US cybersecurity

• Microsoft Releases June 2022 Security Updates

• IRS launched tax credit website without authority to operate, watchdog reports

• Windows Updates Patch Actively Exploited ‘Follina’ Vulnerability

• Microsoft Releases June 2022 Security Updates

• JFK’s Argument Against Imperialism

• Is Russia Exploiting a Gap in the Montreux Convention?

• Microsoft fixes Follina and 55 other CVEs

• Admin of DDoS-For-Hire Service “DownThem” Gets 2 Years Prison Sentence

• Microsoft to acquire foreign cyberthreat analysis vendor Miburo

• Microsoft June 2022 Patch Tuesday: 55 fixes, remote code execution in abundance

• Koverse Launches Zero Trust Data Platform

• Google: SBOMs Effective Only If They Map to Known Vulns

• Incognia Introduces Location-Based Liveness Spoofing Detection Solution

• Admin of DDoS-For-Hire Service “Downthem” Gets 2 Years Prison Sentence

• Chinese Threat Actor Employs Fake Removable Devices as Lures in Cyber Espionage Campaign

• More reality checks could help keep DOD programs on time and on budget, GAO says

• Murder suspect admits she tracked cheating partner with hidden AirTag

• Upcoming Speaking Engagements

• EFF Urges Congress to Strengthen the American Data Privacy and Protection Act

• ICS Patch Tuesday: Siemens, Schneider Electric Address Over 80 Vulnerabilities

• Adobe Plugs 46 Security Flaws on Patch Tuesday

• Creating a patch management policy: Step-by-step guide

• New Syslogk Linux Kernel Rootkit Uses “Magic Packets” to Trigger Remote Backdoor Access

• How Can Security Partnerships Help to Mitigate the Increasing Cyber Threat?

• Gone Ape? How to Protect NFTs from Theft

• Info Stealer Identified in a PyPI Package

• GALLIUM APT Deployed a New PingPull RAT

• New Dashlane Report: The Future of Secure Work

• Journey Into Cybersecurity – Conversations with Cyber Newcomers, Part 2

• The United States Department of Justice Will no Longer Prosecute Ethical Hackers

• (ISC)² Entry-Level Cybersecurity Certification Pilot Exam Reaches 1,000 Exam Milestone

• API Security Tools: What to look For

• New bill sets federal penalties for drone misuse

• Report: L3 Emerges as Suitor for Embattled NSO Group

• ClubCiso Report Shows Material Security Incidents Reduced by 54% Compared to Last Year

• Beware the ‘Secret Agent’ Cloud Middleware

• Optiv MXDR Enhances Detection Coverage With Expanded Cloud Integration

• Researchers: Wi-Fi Probe Requests Leak User Data

• Kaiser Permanente employees targeted by cyber attack and info of 70k staff breached

• Karakurt extortion group: Threat profile

• Bitwarden vs 1Password: Password manager comparison

• Avast: New Linux Rootkit and Backdoor Align Perfectly

• SBOM in Action: finding vulnerabilities with a Software Bill of Materials

• Instagram scam steals your selfies to trick your friends

• The Three Best Tools You Need to Scan Your Linux System for Malware

• Cloud computing means big opportunities – and big threats

• The unrelenting threat of ransomware is pushing cybersecurity workers to quit

• Microsoft: Ransomware gangs are using unpatched Exchange servers to gain access, so get updating

• New Zimbra Email Vulnerability Could Let Attackers Steal Your Login Credentials

• Chinese Hackers Install Backdoors in iOS/Android Web3 Wallets

• HelloXD Ransomware Variants Found Installing Backdoor on Windows and Linux Machines

• What is the Essential Eight (And Why Non-Aussies Should Care)

• Save time and money with Red Hat Insights Compliance reporting

• MLOps Blog Series Part 1: The art of testing machine learning systems using MLOps

• Is Cybersecurity a Top Priority for Politicians? World Politics and Cybersecurity

• Patch Tuesday June 2022 – Microsoft Releases Several Chromium Security Updates

• German Regulator Probes Apple Ad-Tracking Rules

• How to Become World Class at Cyber Hygiene

• Understanding and Mitigating Single Sign-on Risk

• What Expert Thinks Of UK Digital Strategy?

• IRS “Dirty Dozen” Warns Tax Pros And Businesses Of Spear Phishing

• Azure issues not adequately fixed for months, complain bug hunters

• Half of IT leaders say passwords too weak for security purposes

• Operator of ‘DownThem’ DDoS Service Sentenced to 24 Months in Prison

• SecurityWeek to Host Cloud Security Summit, Presented by Palo Alto Networks, on June 15th

• Technical Details Released for ‘SynLapse’ RCE Vulnerability Reported in Microsoft Azure

• Why Log4j Is Still The Problem When The Patch Is Released 6 Months Ago?

• Report Reveals $1.7 Billion Hacked From Top 10 Centralised Crypto Exchanges Over The Last Decade

• Searchlight Security appoints Cylance and Blackberry’s Eric Milam to lead its dark web intelligence product strategy

• Amazon To Begin Drone Deliveries In Californian Town

• Introducing Malwarebytes Vulnerability Assessment for OneView: How to check for Common Vulnerabilities and Exposures (CVEs)

• “Multiple adversaries” exploiting Confluence vulnerability, warns Microsoft

• Cloud computing rush means big opportunities and big threats ahead

• Chinese Cyberespionage Group Starts Using New ‘PingPull’ Malware

• U.S. State and Federal Funding for Cybersecurity is on the Rise

• cSploit – A Network Analyzer on Android

• (IN)SECURE Magazine: RSAC 2022 special issue released

• Instagram Brings Parental Controls To UK

• Kaiser Permanente Exposes Nearly 70K Medical Records in Data Breach

• Malware’s Destruction Trajectory and How to Defeat It

• Schneider Electric, Claroty Launch Cybersecurity Solution for Buildings

• Atos Shares Plunge Amidst Reorganisation, CEO Exit

• Can I transfer my Windows upgrade license from an old PC to a new one? [Ask ZDNet]

• This new Linux malware has a sneaky way of staying hidden

• Linux Malware Deemed ‘Nearly Impossible’ to Detect

• Poll Shows That More Than 40 Million UK Consumers Have Been Targeted by Digital Fraudsters So Far This Year

• Apple’s Planned Obsolescence

• Detect cloud native security threats with Tracee

• Kaiser Permanente Discloses Data Breach at WA Health Plan, 69K Impacted

• Is your organization ready for Internet Explorer retirement?

• An In-Depth Look at Software-Defined Perimeters

• UK health privacy watchdog still in talks over who is accessing country’s COVID data store

• Iranian Spear Phishing Operation Targets Former Israeli Foreign Minister, Former US Ambassador to Israel, Former Israeli Army General and Three other High-Profile Executives

• Iran Spear-Phishers Hijack Email Conversations in New Campaign

• Don’t panic! “Unpatchable” Mac vulnerability discovered

• Elon Musk To Meet With Twitter Staff

• Over Three-Quarters of UK Adults Hit by Online Scams

• Unpatched Travis CI API Bug Exposes Thousands of Secret User Access Tokens

• Two Convicted in Major Drugs Bust Discovered by Police on EncroChat

• Google Engineer Claims AI Has ‘Feelings’

• New Syslogk Linux Rootkit Lets Attackers Remotely Command It Using “Magic Packets”

• Google Engineer Suspended After Claiming AI Became Sentient

• Once is never enough: The need for continuous penetration testing

• Attack on Kaiser Permanente Exposes Data on 70,000 Customers

• Researchers Detail PureCrypter Loader Cyber Criminals Using to Distribute Malware

• Stronger detection and automation pave the way for real-time response

• UK Digital Strategy Takes Aim At Cyber-Security, Skills Gap

• What you need to know about PCI 4.0: Requirements 1, 2, 3 and 4.

• Looking for adding new detection technologies in your security products?

• Inside the RSAC expo: Buzzword bingo and the bear in the room

• SeaFlower campaign distributes backdoored versions of Web3 wallets to steal seed phrases

• API Security Best Practices

• Chinese-sponsored gang Gallium upgrades to sneaky PingPull RAT

• BlackCat Ransomware is being induced into Microsoft Exchange Servers

• Cybersecurity for the FIFA World Cup in Qatar bolstered

• Using compliance to create value for your organization

• Saas security: How to avoid “death by 1000 apps”

• Only 10% of vulnerabilities are remediated each month

• Why do organizations need to prioritize ransomware preparedness?

• Strong passwords still a priority strategy for enterprises

• 2022-06-13 – TA578 thread-hijacked emails push Bumblebee or IcedID

• Experts spotted Syslogk, a Linux rootkit under development

• DivX SubTitles – 783,058 breached accounts

• HelloXD Ransomware Targeting Multiple Windows and Linux Systems

• “Downthem” DDoS-for-Hire Boss Gets 2 Years in Prison

• Zyxel WiFi 6E APs enable organizations to reduce network interference

• Say goodbye to browser ads and malware with this $30 tool

• Getting Started With the Metasploit Framework: A Pentesting Tutorial

Generated on 2022-06-15 23:55:34.537369