IT Security News Daily Summary 2022-06-21

• Biden signs bill creating federal cybersecurity rotational program

• President Biden nominates OSTP director

• Heimdal™ Security Researchers Discover Massive Surge in DDoS Attacks

• RIG Exploit Kit Replaces Raccoon Stealer Trojan With Dridex

• China-Linked ToddyCat APT Pioneers Novel Spyware

• Heimdal™ Security Researchers Discover Massive Surge in DDoS Attacks

• Info on 1.5m people stolen from US bank in cyberattack

• Securing serverless data from cryptomining malware like Denonia

• How IT investment will build the government agencies of tomorrow

• The Power and Pitfalls of AI for US Intelligence

• Heimdal™ Security Researchers Discover Massive Surge in DDoS Attacks

• Cyberint delivers focus to cybersecurity teams

• TMF announces $95 million in new funding focused on security and networks

• Cryptography safe for now, but urgent need to build quantum skills

• 15 Top Cybersecurity Certifications for 2022

• Heimdal™ Security Researchers Discover Massive Surge in DDoS Attacks

• Tapping workforce data to promote employment equity

• Heimdal™ Security Researchers Discover Massive Surge in DDoS Attacks

• President Putin’s Economic Forum Speech Delayed due to DDoS Attack

• Rise of LNK (Shortcut files) Malware

• Gartner: Regulation, Human Costs Will Create Stormy Cybersecurity Weather Ahead

• Heimdal™ Security Researchers Discover Massive Surge in DDoS Attacks

• CISA Alerts on Serious Flaws in Industrial Equipment & Infrastructure

• #InfosecurityEurope2022 Firms Face Emerging Threats as Bad Actors Evade Defenses

• Microsoft 365 Research Highlights Cloud Vulnerabilities

• Heimdal™ Security Researchers Discover Massive Surge in DDoS Attacks

• quantum

• #InfosecurityEurope2022 Cooperation Necessary to Strengthen Cyber Strategies

• Heimdal™ Security Researchers Discover Massive Surge in DDoS Attacks

• Pass the “My Body, My Data” Act

• Linus Torvalds: After 30 years, Linux is not a dead project

• Heimdal™ Security Researchers Discover Massive Surge in DDoS Attacks

• Daycare Apps Are Dangerously Insecure

• The Time has Come for a Radically Simple Secure Web Gateway (SWG)

• Yodel blames cyber incident for disruption and parcel tracking problems

• Why Financial Institutions Must Double Down on Open Source Investments

• Heimdal™ Security Researchers Discover Massive Surge in DDoS Attacks

• Don’t react, prevent

• The three core strengths of USM Anywhere

• OpenSSF details advancements in open-source security efforts

• New ToddyCat APT targets MS Exchange servers in Europe, Asia

• Just Say Yes – Why CISOs Must Now Embrace SD-WAN

• AI Governance Gap Will Strike Individuals And Organizations Alike

• Heimdal™ Security Researchers Discover Massive Surge in DDoS Attacks

• Game on! The 2022 Google CTF is here.

• Improving AI-based defenses to disrupt human-operated ransomware

• Google Chrome Extensions can be Employed to Track Your Online Activity

• Office 365 vulnerability opens OneDrive files to ransomware attacks

• SecZetta Delivers Strong First Quarter with Record Customer Wins and New Strategic Partnerships

• Flatiron School, Top Provider of In-Demand Tech Education, Marks 10th Year

• 5 Reasons Why Beginner Programmers Should Learn JavaScript

• Network Pentesting Checklist

• Acronis Cyber Protect Home Office: More than just a backup solution

• New DFSCoerce NTLM Relay Attack Enables Hackers to Perform Windows Domain Takeover

• Cloudflare Outage Knocks Hundreds of Websites Offline

• Heimdal™ Security Researchers Discover Massive Surge in DDoS Attacks

• DFSCoerce, a new NTLM relay attack, can take control over a Windows domain

• Yodel blames “cyber incident” for disruption

• Modern IT Security Teams’ Inevitable Need for Advanced Vulnerability Management

• Capital One identity theft hacker finally gets convicted

• #InfosecurityEurope2022 Defense Looks to Bring Cyber Into the Mainstream

• BRATA Android Malware Evolves Into an APT

• Evolving Beyond the Password: It’s Time to Up the Ante

• New ToddyCat APT targets high-profile entities in Europe and Asia

• Hidden Anti-Cryptography Provisions In Internet Anti-Trust Bills

• 1.5 Million Customers Impacted By Flagstar Bank Data Breach

• Expert Commentary: Flagstar Bank Data Breach

• Heimdal™ Security Researchers Discover Massive Surge in DDoS Attacks

• Russia’s APT28 uses fear of nuclear war to spread Follina docs in Ukraine

• The C-Suite Is Optimistic About Ransomware. Are They Right?

• These fake voicemail phishing emails want to steal your passwords

• #InfosecurityEurope2022 Ransomware: Payment Decisions Finely Balanced

• Can Business Cybersecurity Protection Outlay Offset Cybercrime Insurance?

• Heimdal™ Security Researchers Discover Massive Surge in DDoS Attacks

• Responding To High-Level Cyberattacks on A Mid-Level Budget

• Security Gotcha of Consumer and Industrial IoT Devices

• Researchers discover lack of confidence in state of open-source security

• Permiso launches new cloud detection and response service

• Slim.AI introduces beta software supply chain container security as a service

• New Android banking malware disguises as crypto app to spread

• Cyberint Scores $40 Million Late-Stage Investment

• #Infosec2022: Ransomware: Payment Decisions Finely Balanced

• 56 Vulnerabilities Discovered in OT Products From 10 Different Vendors

• Reducing Risk With Zero Trust

• Heimdal™ Security Researchers Discover Massive Surge in DDoS Attacks

• AI Is Not a Security Silver Bullet

• Heimdal™ Security Researchers Discover Massive Surge in DDoS Attacks

• Seven In 10 UK Businesses ‘Planning 5G Deployments’

• Microsoft: This out-of-band Windows security update fixes Microsoft 365 sign-in issues for Arm devices

• Microsoft wants to improve IoT security with Edge Secured-core devices

• Flagstar Bank Data Breach Affects 1.5 Million Customers

• RevealSecurity Raises $23M for Application Detection and Response

• How to address security risks in GPS-enabled devices

• New ToddyCat Hacker Group on Experts’ Radar After Targeting MS Exchange Servers

• Preparing National Security Officials for the Challenges of AI

• Infosecurity Europe 2022 video walkthrough

• Heimdal™ Security Researchers Discover Massive Surge in DDoS Attacks

• What Is a Full Stack Developer?

• How to Choose the Right VPN for You

• German Regulator Probes Google Maps Under New Rules

• Magecart attacks are still around. And they are becoming more stealthy

• Office 365 Config Loophole Opens OneDrive, SharePoint Data to Ransomware Attack

• Kazakh Govt. Used Spyware Against Protesters

• 1Password’s Insights tool to help admins monitor users’ security practices

• Heimdal™ Security Researchers Discover Massive Surge in DDoS Attacks

• From Basecamp to Icefall: Secure by Design OT Makes Little Headway

• Phishing Content Delivered Through Azure By Microsoft

• Heimdal™ Security Researchers Discover Massive Surge in DDoS Attacks

• How to Write a Successful Business and Management Essay?

• SECURE North America | Users Aren’t the Weakest Link, They’re Your Allies

• Permiso.io launches new cloud detection and response service

• How can I keep junk email out of my inbox without juggling two or more email accounts? [Ask ZDNet]

• Open Source Software Security Begins to Mature

• New DFSCoerce NTLM relay attack allows taking control over Windows domains

• Hidden Anti-Cryptography Provisions in Internet Anti-Trust Bills

• Photos: Infosecurity Europe 2022, part 1

• Heimdal™ Security Researchers Discover Massive Surge in DDOS Attacks

• A great day for non-robots: iOS 16 will bypass CAPTCHAs

• Musk Says Still ‘Unresolved Matters’ Over Twitter Buy

• Check Point Meets International Cybersecurity Standards for Governments and Enterprises around the world

• Voicemail Scam Steals Microsoft Credentials

• False Air Raid Sirens in Israel Possibly Triggered by Iranian Cyberattack

• Researchers Disclose 56 Vulnerabilities Impacting OT Devices from 10 Vendors

• UK Government Proposes New Post-Brexit Data Laws

• Heimdal™ Security Researchers Discover Massive Surge in DDOS Attacks

• Google: 5-year-old Apple Flaw Exploited

• Check Point Meets International Cybersecurity Standards for Governments and Enterprises around the world

• French Encryption Firm Cosmian Raises $4.4 Million

• Do Privacy and Data Protection Regulations Create as Many Problems as They Solve?

• Microsoft Out-of-Band Update Fixes Arm Device Issues

• Former Amazon Employee Found Guilty in 2019 Capital One Data Breach

• Google Chrome Extentions Can Be Fingerprinted to Track Users Digitally

• Cato SASE Cloud Updated to Allow for Network-based Security

• You can be tracked online using your Chrome browser extensions

• Facial recognition firm fined by UK regulators

• Mozilla Rolls Out Total Cookie Protection On Firefox By Default

• How You Can Protect Yourself from Cyber Attacks in Online Gaming

• Tesla Sued By Former Employees Over Mass Layoffs

• Legacy systems are the new attack vectors for hackers

• 16-31 May 2022 Cyber Attacks Timeline

• Security vulnerabilities: 5 times that organizations got hacked

• Ericsson Hits Apple With 5G Patent Claims In UK High Court

• Chinese-linked APT Hackers Spying Orgs Over 10 Years Using DNS Tunneling To Evade Detection

• Researchers discover lack of confidence in state of open source security

• 1.5 million customers impacted by Flagstar Bank data breach

• US Bank Data Breach Impacts Over 1.5 Million Customers

• APT ToddyCat

• Security Breach at Flagstar Bank Affects 1.5 Million Clients

• Ericsson Predicts 5G Subscriptions Will Hit 1 Billion This Year

• Researchers Reveal 56 OT Bugs in “Icefall” Report

• New NTLM Relay Attack Lets Attackers Take Control Over Windows Domain

• Lookout Discovers Android Spyware Deployed in Kazakhstan

• How refactoring code in Safari’s WebKit resurrected ‘zombie’ security bug

• IT pros are not very confident in their organization’s supply chain security

• Fake voicemail notifications are after Office365, Outlook credentials

• Voicemail-themed Phishing Attacks Resurface in the US, Focus on Key Industry Verticals

• Ericsson, Oppo Demonstrate 5G Network Slicing Tech

• Looking for adding new detection technologies in your security products?

• Cybercriminals Use Azure Front Door in Phishing Attacks

• API Security Weekly: Issue 165

• Securing your IoT with Edge Secured-core devices

• Over 4 million people hack neighbors Wi-Fi in the UK

• Google stops its password use on third-party apps

• Azure IoT increases enterprise-level intelligent edge and cloud capabilities

• Researchers disclose 56 vulnerabilities impacting thousands of OT devices

• How TMF is managing its commitment to customer experience projects

• How the blurring of the “supply chain” opens your doors to attackers—and how you can close them

• CISA and friends raise alarm on critical flaws in industrial equipment, infrastructure

• Forescout discloses ‘OT:ICEFALL,’ 56 flaws from 10 vendors

• After being breached once, many companies are likely to be hit again

• Solution to cybersecurity skills gap largely sits with hiring practices

• Q1 2022 Phishing Threat Trends and Intelligence Report

• The actual cost of a breach – reputation, loss of customers, fines, suspension of business

• Vulnerability Summary for the Week of June 13, 2022

• Cloudflare One enhancements strengthen zero trust security for organizations

• Vulnerability Summary for the Week of June 13, 2022

• Windows 11 Tests New Privacy Features to See Which Apps Were Spying On You

• Voicemail phishing emails steal Microsoft credentials

• What is Cloudastructure Smart Surveillance? Rick Bentley, CEO

• Cosmian raises €4.2 million to accelerate the distribution of its products

• Internet Society adds four new members to its Board of Trustees

• Why 93% Of Kubernetes Users Struggle With Security

• How To Minimise Your OT Blind Spots

• Computer security experts gather to participate at the 34th Annual FIRST Conference

• SilverSky appoints Mike Viruso as VP of Sales

• Feds Dismantle Russian Rsocks Botnet Powered by Millions of IoT Devices

• Russian APT28 hacker accused of the NATO think tank hack in Germany

• Millions Seized In Global INTERPOL Scammer Investigation

• Why Fraud On Linkedin A ‘Significant Threat’ To Platform And Consumer

• Russian Botnet Disrupted In International Cyber Operation – Expert Comments

• IT Security News Daily Summary 2022-06-20

• Report: Orgs with zero-trust segmentation avoid 5 major cyberattacks annually

• Capital One Attacker Exploited Misconfigured AWS Databases

• Google Stops Allowing Username And Passwords On Third-party Email Apps

• Client-side Magecart attacks still around, but more covert

• What is the American Data Privacy and Protection Act (ADPPA) and what it means to enterprises

• 7 enterprise patch management best practices

• The American Data Privacy and Protection Act (ADPPA): what to expect

• Feds Take Down Russian ‘RSOCKS’ Botnet

• Cybersecurity landscape: The state of managed security services, 2022

• Healthcare breaches on the rise in 2022

• QNAP NAS Devices Struck by eCh0raix Ransomware Attacks

• SSH Tutorial: Nice and Easy [Video]

• Interpol busts 2000 suspects in phone scamming takedown

• Report: Hospital Websites Are Sending Sensitive Data To Facebook

• Roe v. Wade leak heightens data privacy concerns

• Why Paper Receipts are Money at the Drive-Thru

• Former Amazon Worker Convicted of Capital One Data Breach

• Google Chrome Extensions Could Be Used to Track Users Online

• Name That Toon: Cuter Than a June Bug

• Hackers Target Inverse Finance in a Flash Loan Oracle Attack

• BRATA – Banking Trojan With Advanced Information-stealing Capabilities

• DDoS Attacks Delay Putin Speech at Russian Economic Forum

• How one Microsoft software engineer works to improve access management

• Cyber Attack news headlines trending on Google

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Ubuntu Core 22 Wants to Power the Next Generation of IoT Devices

• Email Security FAQs Answered by Guardian Digital

• Interview with Guardian Digital CEO Dave Wreski: Open Source Utilization in Email Security Solutions & More

• AutomationDirect Patches Vulnerabilities in PLC, HMI Products

• BRATA Android Malware Group Now Classified As Advanced Persistent Threat

• Security Lessons From Protecting Live Events

• US disrupts Russian botnet that ‘hacked millions of devices’

• Google expert detailed a 5-Year-Old flaw in Apple Safari exploited in the wild

• Capital One: Convicted Techie Got In Via Misconfigured AWS Buckets

• This Phone-Wiping Android Banking Trojan Is Getting Nastier

• There Are 24.6 Billion Sets Of Credentials Up For Sale On The Dark Web

• Mark Wrighton Appointed as Chief Revenue Officer for Heimdal™ Security

• DeadBolt and Ech0raix Ransomware Are Attacking QNAP Devices

• Internet Safety Month: 7 tips for staying safe online while on vacation

• CMA Boss Warns UK ‘Falling Behind EU’ On Tech Regulation

• Mark Wrighton Appointed as Chief Revenue Officer for Heimdal™ Security

• Sophos Firewall Zero-Day Flaw Exploited by Hackers

• ABB Delays IPO Of Electric Vehicle Charging Unit

• Who Is Legally Responsible for a Cyber Incident?

• 8 WSUS alternatives for patch management

• Credential Sharing as a Service: The Hidden Risk of Low-Code/No-Code

• The Cybersecurity Diversity Gap: Advice for Organizations Looking to Thrive

• Do You Have Ransomware Insurance? Look at the Fine Print

• Mark Wrighton Appointed as Chief Revenue Officer for Heimdal™ Security

• LinkedIn scams are a “significant threat”, warns FBI

• DDoS-for-hire service provider jailed

• Capital One: Convicted techie got in via ‘misconfigured’ AWS buckets

• Ransomware attacks: This is the data that cyber criminals really want to steal

• This phone-wiping Android banking trojan is getting nastier

• Mark Wrighton Appointed as Chief Revenue Officer for Heimdal™ Security

• Explaining Data Monitoring with vSOC – Why You Should Consider Using a vSOC Provider: Intro

• Crypto mixers: What are they and how are they used?

• Germany’s Green Party Says Email System Hit by Cyberattack

• Mark Wrighton Appointed as Chief Revenue Officer for Heimdal™ Security

• QNAP Appliances Targeted in New DeadBolt, eCh0raix Ransomware Campaigns

• Security Affairs newsletter Round 370 by Pierluigi Paganini

• Mark Wrighton Appointed as Chief Revenue Officer for Heimdal™ Security

• There are 24.6 billion sets of credentials up for sale on the dark web

• How can your organization find and develop the next generation of cybersecurity?

• Attackers Can Exploit Critical Citrix ADM Vulnerability to Reset Admin Passwords

• Japan ‘Seeking Fines’ On Tech Giants Over Local Registration

• 5 Reasons You Should Learn About Cyber Security

• This new Windows 11 privacy feature shows when apps access your microphone, camera or location

• Many OT Security Incidents Result in Outages Posing Physical Safety Risk: Fortinet

• Governance Gap Raises AI Security Concerns

• Cisco will not address critical RCE in end-of-life Small Business RV routers

• Four Key Findings from the 2022 Cyberthreat Defense Report

• Mark Wrighton Appointed as Chief Revenue Officer for Heimdal™ Security

• How to choose the right Mac for your use case in 2022

• NetEase Delays Game After China Censor Uproar

• Jury Convicts Seattle Woman in Massive Capital One Hack

• ALPHV Ransomware Operators Pressure Victim With Dedicated Leak Site

• QNAP Customers Hit by Double Ransomware Blitz

• Hartzbleed: A New Side-Channel Attack

• Mark Wrighton Appointed as Chief Revenue Officer for Heimdal™ Security

• Investigators Disrupt Giant RSocks Botnet

• The Ghost of Internet Explorer Will Haunt the Web for Years

• Mark Wrighton Appointed as Chief Revenue Officer for Heimdal™ Security

• JD.com 618 Mega-Sale Sees Slowest Growth In Years

• Are you ready to automate continuous deployment in CI/CD?

• Breach at Eye Care Software Vendor Hits Millions of Patients

• Google Researchers Detail 5-Year-Old Apple Safari Vulnerability Exploited in the Wild

• ‘Unpacking’ technical attribution and challenges for ensuring stability in cyberspace

• German Green Party’s Emails Compromised by Hackers

• Mark Wrighton Appointed as Chief Revenue Officer for Heimdal™ Security

• QNAP NAS devices hit by DeadBolt and ech0raix ransomware

• Mark Wrighton Appointed as Chief Revenue Officer for Heimdal™ Security

• BRATA Android Malware evolves and targets the UK, Spain, and Italy

• WordPress Update Millions of Sites to patch a Critical Vulnerability Affecting the Ninja Forms Plugin

• Mark Wrighton Appointed as Chief Revenue Officer for Heimdal™ Security

• A week in security (June 13 – June 19)

• Bitcoin Recovers After Sinking Below $20,000

• Mark Wrighton Appointed as Chief Revenue Officer for Heimdal™ Security

• You don’t need another hero…you need an automated incident response process

• US Man Sentenced to Nine Years in Prison After Hacking Thousands of iCloud Accounts

• Schneider Electric and Claroty launch a solution that protects smart buildings from cyber risks

• Mark Wrighton Appointed as Chief Revenue Officer for Heimdal™ Security

• Apple Store Staff Vote To Form Company’s First US Retail Union

• Most enterprises are maintaining or increasing their password management budgets

• Mark Wrighton Appointed as Chief Revenue Officer for Heimdal™ Security

• Mark Wrighton Appointed as Chief Revenue Officer for Heimdal™ Security

• Software developers, how secure is your software ?

• Mark Wrighton Appointed as Chief Revenue Officer for Heimdal™ Security

• Money20/20: Talking digital identity and the rise of embedded finance

• BRATA Android Malware Gains Advanced Mobile Threat Capabilities

• Securing the software supply chain, with Kim Lewandowski: Lock and Code S03E13

• Nupur Sharma comments on Prophet Mohammad leads to data leak of millions of Indian Citizens

• Mobile Security Threat for Android users through BRATA Malware

• Russian Botnet that Hacked Millions of Computers Seized by Authorities

• How to properly adopt and manage Kubernetes in production

• Board members and the C-suite need secure communication tools

• This Android-wiping Malware is Evolving into a Constant Threat

• How tool sprawl is becoming a common issue for SMEs

• Data recovery depends on how good your backup strategy is

• Indian government issues confidential infosec guidance to staff – who leak it

• Reexamining the “5 Laws of Cybersecurity”

• Increased security driving investments in cloud computing

• Cyberthreat Defense Report 2022: Key Points You Should Know

• 9 Years Jail for iCloud Phishing Scam Hacker Who Stole Nude Photos

Generated on 2022-06-21 23:55:36.799276