IT Security News Daily Summary 2022-07-27

• With $11.5M In Funding, Naoris Protocol Will Use Blockchain & Decentralization To Plug Web3 Security Gaps

• Bill aims to create one disaster recovery assistance application

• Preventing wildfires could start with data from controlled burns

• Nuki Smart Lock Vulnerabilities Allow Hackers to Open Doors

• Victim of Private Spyware Warns It Can be Used Against US

• CISOs: Embrace a common business language to report on cybersecurity

• AWS re:Inforce details how to fortify enterprise security culture and tools

• Attackers increasingly abusing IIS extensions to establish covert backdoors

• Multiple Windows, Adobe Zero-Days Anchor Knotweed Commercial Spyware

• US puts $10 million bounty on North Korean cyber-crews

• Twitter Hacker Seeks $30,000 For Stolen Data On 5.4 Million Users

• City tests smart, low-cost traffic cameras

• Apple network traffic takes mysterious detour through Russia

• Alert! Check if you have these Android Malware Apps Installed With 10M+ Downloads

• Zero-Trust Architecture Is Incomplete Without Digital Signatures

• Major Challenges in Cybersecurity and How Seceon helping to Overcome those.

• Trends To Ensure Cybersecurity In 2022

• Chinese Hackers Deploy Malware in Firmware Images of Certain Motherboards

• SSH2 vs. SSH1 and why SSH versions still matter

• data breach

• TSP officials say they’re nearing ‘normalcy’ after a troublesome recordkeeper transition

• Cyber insurance price hike hits local governments hard

• Heat.gov offers real-time data, resources to combat extreme heat

• US Offers $10M Double-Reward for North Korea Cyberattacker Info

• Average Data Breach Costs Soar to $4.4M in 2022

• Time Between Vulnerability Disclosures To Exploits Is Shrinking

• Messaging Apps Tapped As Platform For Cybercriminal Activity

• Woman Tells Congress What It’s Liked To Be Hacked By NSO’s Pegasus

• Discovery Of New UEFI Rootkit Exposes An Ugly Truth: The Attacks Are Invisible To Us

• Quantum cryptography: Hacking is futile

• A key role for quantum entanglement

• Messaging Apps Tapped as Platform for Cybercriminal Activity

• AWS ups security for Elastic Block Store, Kubernetes service

• How to quickly deploy the Odoo ERP solution with Docker

• Mailing List Provider WordFly Scrambling to Recover Following Ransomware Attack

• HUMAN Security and PerimeterX Merge on Mission to Combat Bots

• Microsoft Catches Austrian Company Exploiting Windows, Adobe Zero-Days

• Cyber-Criminal Offers 5.4m Twitter Users’ Data

• Is Your Home or Small Business Built on Secure Foundations? Think Again…

• Knotweed Euro cyber mercenaries attacking private sector, says Microsoft

• Ducktail Spear-Phishing Campaign Targets Facebook Business Accounts Via LinkedIn

• Digital PIN – The Next Step in Digital First Banking

• AT&T Cybersecurity Insights Report: A Focus on Manufacturing

• DevSecOps monitor and decommission

• AwareGO Platform Reveals Even Seasoned Security Experts are Vulnerable to Common Security Risks

• CosmicStrand malware targets old Asus and Gigabyte motherboards

• Chip Revenues To Decline 2.5 Percent In 2023, Warns Gartner

• Top 7 data loss prevention tools for 2022

• First Cohort Graduates from PSM Cyber Stars Program at Liverpool FC

• HR Emails Dupe Employees The Most – KnowBe4 research reveals

• What roles do humans play in cyber breaches

• The lifecycle of a software vulnerability

• Microsoft to turn on ransomware protection on Windows 11 and 10 OS by default

• Samsung keeps its Galaxy devices safe from Pegasus Spying software

• Your Linux Firewall Cant Stop These 3 Attacks!

• Senators Introduce Quantum Encryption Preparedness Law

• These 28+ Android Apps with 10 Million Downloads from the Play Store Contain Malware

• Russia Fines Google $34m, After Last Week’s $358m Penalty

• Cybersecurity mesh adds decentralized security and swarm AI for remote-first enterprises

• GenCyber: NSA sets up summer camps to teach kids to hack

• Time from vulnerability disclosures to exploits is shrinking

• What the Titanic Can Teach Us About Fraud?

• IBM Security: Cost of Data Breach Hitting All-Time Highs

• Criminals Use Malware as Messaging Bots to Steal Data

• DUCKTAIL operation targets Facebook’s Business and Ad accounts

• Heimdal™ Threat Hunting Journal July 2022 Edition

• Arts Organizations’ Email Lists Compromised by Ransomware Attack

• New quantum hardware could allow computers to process information more naturally

• Infostealer malware targets Facebook business accounts to capture sensitive data

• Advocating for Passion, Kindness and Women in STEM

• Heimdal™ Threat Hunting Journal July 2022 Edition

• Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits

• Microsoft Q4 Profits From Cloud Growth, But Misses Forecasts

• No More Ransom Helped More Than 1.5 Million People Decrypt Their Devices

• The Great BizApp Hack: Cyber-Risks in Your Everyday Business Applications

• Heimdal™ Threat Hunting Journal July 2022 Edition

• IIS extensions are on the rise as backdoors to servers

• LibreOffice security update fixes macro execution bypass and potential password leaking

• Biden administration unveils website to help combat extreme heat conditions

• Microsoft warns of stealthy backdoors used to target Exchange Servers

• These ransomware hackers gave up when they hit multi-factor authentication

• Race against time: Hackers start hunting for victims just 15 minutes after a bug is disclosed

• AWS Announces Enhancements to Cloud Security, Privacy, Compliance

• Dozens of ‘Luca Stealer’ Malware Samples Emerge After Source Code Made Public

• US Offers $10 Million for Information on North Korean Hackers

• 8 Hot Summer Fiction Reads for Cybersecurity Pros

• Constitutional Citizenship in the U.S. Territories

• Anti-Censorship Legislation: A Flawed Attempt to Address a Legitimate Problem

• Heimdal™ Threat Hunting Journal July 2022 Edition

• Running a Sustainable Business in 2022

• Anti-vaxxer dating site exposes user data

• Azure Gateway Load Balancer is now available—and Check Point supports it today!

• Digital Hands and SentinelOne join forces to automate the SOC

• Teleport introduces passwordless authentication to access management

• In post-Roe US, experts share how to keep your data private

• Securing Open-Source Software

• Online Dating Made Better – Enter Smart Technology

• PrestaShop warns of vulnerability: Update your stores now!

• API security firm Impart Security promises solutions, not more alarms, for overwhelmed security staff

• Microsoft warns of stealthy backdoors used to target Exchange Servers, email

• Why you really need multi-factor authentication: These ransomware hackers gave up when they saw it

• Twitter Data Breach From Former Gartner Cybersecurity Analyst

• LockBit Ransomware Gang Claims It Ransacked Italy’s Tax Agency

• A ‘Top Tier’ Hacking Gang Is Likely To Be Behind Entrust Ransomware Attack

• Simplifying the fight against ransomware: An expert explains

• Don’t Call the New Federal Gun Law a Gun Law

• Taking the Risk-Based Approach to Vulnerability Patching

• New Ducktail Infostealer Malware Targeting Facebook Business and Ad Accounts

• More than a VPN: Announcing Cisco Secure Client (formerly AnyConnect)

• The strange similarities between Lockbit 3.0 and Blackmatter ransomware

• Major Security Vulnerability In Prestashop Platform

• Weak data protection helped China attack US Federal Reserve, report says

• Amazon UK To Raise Cost Of Prime Service

• T-Mobile agrees to pay customers $350 million in settlement over data breach

• Build SBOMs with Microsoft’s internal tool

• Data breach costs record $4.3M with firms passing buck to customers

• Organizations need to change their strategy to reduce cyber risk

• OneWeb Confirms Merger With Eutelsat

• US Doubles Reward for Info on North Korean Hackers

• Cost of Data Breach Reaches $4.35m on Average Globally

• Lockbit Ransomware Gang Have Claimed Responsibility For Recent Public Attacks

• Malicious IIS Extensions Gaining Popularity Among Cyber Criminals for Persistent Access

• NFT Hacking Group Attacks On The Rise, Report Finds

• No More Ransom Has Helped Over 1.5m Victims

• Serious OAuth vulnerability In Grafana Could Allow Account Takeover

• Data Breach Costs Reach New Record High

• The global average cost of a data breach reaches an all-time high of $4.35 million

• Black Hat USA 2022: Schedule for Las Vegas hybrid event

• Cyber Security Management System (CSMS) for the Automotive Industry

• IBM puts NIST’s quantum-resistant crypto to work in Z16 mainframe

• What’s New in the 2022 Cost of a Data Breach Report

• Cybercrime goods and services are cheap and plentiful

• How SMBs are evolving their cybersecurity operations practices

• Organizations are struggling with SaaS security. Why?

• Israel’s new cyber-kinetic lab will boost the resilience of critical infrastructure

• Vietnamese attacker circumvents Facebook security with ‘DUCKTAIL’ malware

• Average cost of data breach surpasses $4 million for many organizations

• North Korean APT37 Hackers Attack EU Countries with Konni RAT Malware

• 2022-07-26 – Files for an ISC diary (IcedID with DarkVNC and Cobalt Strike)

• IBM’s Cost of a Data Breach Report finds invisible ‘cyber tax’

• Is any organisation risk and data breach free?

• Aruba announces AIOps solutions to simplify network operations for IT teams

• AlertMedia Analyst Access offers direct interaction with threat intelligence experts during critical events

• Runecast adds CNAPP capabilities to secure workloads across three cloud service providers

• NetApp Spot Security identifies and assesses cloud security posture risks

• Find out why developers love Pentest as a Service (PtaaS)

• 2022-07-25 – IcedID (Bokbot) infection with Cobalt Strike

• Wawa Agrees to Payment, Security Changes for ’19 Data Breach

• Mild monthly security update from Firefox – but update anyway

• A Retrospective on the 2015 Ashley Madison Breach

• General Sir Chris Deverell joins Conceal Board of Advisors

• Resecurity acquires Cybit Sec to expand its threat intelligence capabilities in the Middle East

• Infobip partners with Microsoft to enhance digital communications

• GoTrust Idem Key uses FIDO standards to access EU eIDAS digital services

• Stairwell collaborates with Cyderes to expand visibility into malicious activity for customers

• Paytm – 3,395,101 breached accounts

• Charter told to pay $7.3b in damages after cable installer murders grandmother

• Rods and Cones, and EDR “blindness”

• Craig Newmark Gives UC Berkeley $2 Million for University Cybersecurity Clinics

• Crypto exchange Kraken reportedly hunted by the Feds for alleged sanctions busting

• AWS issues MFA call to action at re:Inforce 2022

• Norton Consumer Cyber Safety Pulse Report: Phishing for New Bait on Social Media

• Securing Cloud is Everyone’s Responsibility

• Trend Micro Joins AWS Marketplace Vendor Insights

• IT Security News Daily Summary 2022-07-26

• Pass the CHIPS Act

• Vulnerability Summary for the Week of July 18, 2022

• Culture shock: Ransomware gang sacks arts orgs’ email lists

• (ISC)² and Others Commit to Closing the Cybersecurity Workforce Gap While at the White House

• Digital hub finds new careers, available benefits for jobseekers

• European Lawmaker Targeted With Cytrox Predator Surveillance Spyware

• Economic Downturn Raises Risk of Insiders Going Rogue

• Microsoft Tops Brands Phishers Prefer

• LockBit 3.0: Significantly Improved Ransomware Helps the Gang Stay on Top

• Vulnerability Summary for the Week of July 18, 2022

• Ducktail Malware Exploits LinkedIn to Hack Facebook Business Accounts

• Small business contract awards hit record $154B

• Discord, Telegram Services Hijacked to Launch Array of Cyberattacks

• AI Can Help Fintechs Fight Fraud-as-a-Service

• Why emergency calls sometimes can’t get through

• New Malware Threat Hacks Facebook Business Accounts

• Amazon Web Services’ cybersecurity chief Steve Schmidt lays out his outlook for the rest of 2022

• Critical Vulnerabilities Exposed Nuki Smart Locks to a Plethora of Attack Options

• U.S. increased rewards for info on North Korea-linked threat actors to $10 million

• PrestaShop Sites Hit by Severe Security Flaw

• Uber Admits Covering up Data Breach Involving 57M Users

• Understanding NIST’s post-quantum encryption standardization and next steps for CISOs

• Novel Malware Hijacks Facebook Business Accounts

• Flying Blind in Security Operations

• API Security Weekly: Issue 171

• How rural communities can receive the digital infrastructure support they need

• Serious Privilege Escalation Vulnerability Found In Zyxel Firewall

• Malicious IIS extensions quietly open persistent backdoors into servers

• Check Point Attains Infrastructure Distinction in AWS Security Competency

• Cross-pollination among neuroscience, psychology and AI research yields a foundational understanding of thinking

• Hackers use more sophisticated scams to drive costly data breaches, analysis finds

• What Is the Log4j Vulnerability and Why It’s NOT an Easy Fix

• Luca Stealer malware spreads rapidly after code handily appears on GitHub

• Phishers Targeted Financial Services Most During H1 2022

• Ducktail Spear-Phishing Campaign Uses LinkedIn to Hijack Facebook Business Accounts

• How Risk-Based Vulnerability Management Has Made Security Easier

• 4 Steps Financial Industry Can Take to Cope With Their Growing Attack Surface

• Experts Find Similarities Between New LockBit 3.0 and BlackMatter Ransomware

• With ransomware, the road to recovery starts well before you’re attacked

• Cyber-attacks on Port of Los Angeles Doubled Since Pandemic

• Observe.AI Adds Enterprise-Grade Security Certifications for Protecting Customer Data in Contact Centers

• SentinelOne for AWS Elastic Disaster Recovery Protects Organizations from Ransomware

• Imperva Extends its Data Security Fabric to Include Enterprise Data Lakes Built on AWS

• Kasada Named Amazon CloudFront Ready Partner

• Allbound Inc. Raises $43 Million from Invictus Growth Partners

• What identity threat detection and response (ITDR) means in a zero-trust world

• Guide to the latest Black Hat 2022 Conference news

• Poor Training and Communications Hindering Cybersecurity Efforts

• Threat actors leverages DLL-SideLoading to spread Qakbot malware

• How one Microsoft product manager acts as champion for identity security

• LockBit Ransomware Gang Targets Italian Tax Agency

• No More Ransom helping ransomware victims

• Cybersecurity Needs to Work Even When Employees Aren’t on Board

• Microsoft clamps down on RDP brute-force attacks in Windows 11

• SonicWall urges customers to patch critical SQL injection bug ASAP

• Windows 11: Account Lockout Policy Set Against Brute Force Attacks

• Beware!! Hackers Distribute Amadey Malware Pushed via Software Cracks & Keygen Sites

• The federal government plans to ‘step up our work’ on monkeypox after WHO declaration

• Uber Settles 2016 Hacking Case With DoJ

• T-Mobile To Pay $500 Million For One Of The Largest Data Breaches In US History

• Imperva Earns Three Cyber Defense Global InfoSec Awards for 2022

• CrowdStrike enhances container visibility and threat hunting capabilities

• Exfiltration Can Be Stopped With Data-in-Use Encryption, Company Says

• Hackers Increasingly Using WebAssembly Coded Cryptominers to Evade Detection

• Orchestrating deployment of @myexploit2600’s hacklab with Ansible and Vagrant [REDUX]

• State election officials struggle with paper shortages, harassment, insider threats

• I need a new iPhone. Is last year’s model good enough? [Ask ZDNet]

• Moving Toward Blanket Immunity: Israeli Supreme Court Blocks Gaza Tort Cases

• Limits in the Seas No. 150 and the U.S.’s Misinterpretation of ‘Historic Rights’

• FileWave MDM Vulnerabilities Leave 1000+ Organizations Exposed to Remote Cyberattacks

• Cyber security training to fit your summer plans

• Ransomware less popular this year, but malware up: SonicWall cyber threat report

• The Beautiful Lies of Machine Learning in Security

• VA’s new master record aims to be a ‘single source of truth’ for veteran data

• Phishing Attacks Skyrocket with Microsoft and Facebook as Most Abused Brands

• New Ducktail Infostealer Targets Facebook Business Accounts via LinkedIn

• Data Security Firm Sotero Raises $8 Million in Seed Funding

• AWS re:Inforce: BigID looks to reduce risk and automate policies for AWS cloud

• guardDog.ai Automated Cyber Threat Response Sponsors 2022 ‘ASTORS’

• IoT Botnets Fuels DDoS Attacks – Are You Prepared?

• Cisco and AWS: Securing your resilience in a hybrid cloud world

• Apple’s Lockdown Mode

• Targeted campaign uses infostealer to hijack Facebook Business accounts

• 1Password password manager: How it works with apps

• Critical FileWave MDM Flaws Open Organization-Managed Devices to Remote Hackers

• ‘Cancer Girl’ scam has stolen more than half a million dollars

• CrowdStrike introduces a new cloud threat hunting service

• AWS re:Inforce: BigID unveils intelligent access for AWS cloud

• ESG Cyber Resiliency Research Server Cut

• CrowdStrike launches cloud threat hunting service

• Uber Admits Covering Up 2016 Data Breach That Exposed 57M Users’ Data

• Passwordless Authentication Does Not Equate To Biometrics In The Workplace

• Top 5 Web Application Security Practices That Can Save You from Attacks In 2022

• Check Point Research: Weekly Cyber Attacks increased by 32% Year-Over-Year; 1 out of 40 organizations impacted by Ransomware

• Ransomware: 1.5 million people have got their files back without paying the gangs. Here’s how

• Tech media giants pledge to maintain online safety in NZ pact

• 6 Ways Technology is Improving the Way Vacuum Cleaners Work

• Chinese UEFI Rootkit Found on Gigabyte and Asus Motherboards

• Data Stolen in Breach at Security Company Entrust

• Inadequate password and authentication requirements found in popular business web apps

• Tesla Shows Giant ‘Giga Press’ In Action

• Canada To Examine Network Resiliency In Rogers-Shaw Merger

• 7 biggest Kubernetes security mistakes

• 75% of IT security professionals say they don’t get the support they need

• Global Malware Volumes Increase for First Time in Three Years

• Teenager Jailed for Snapchat Blackmail Cybercrimes

• T-Mobile-US Agree To Pay $350m Settlement Over 2021 Cyberattack

• Instagram introduces parental controls for UK users

• Chess-Playing Robot Breaks Boy’s Finger

• SEC Subpoenas Tesla Over ‘Funding Secured’ Settlement

• The UK’s National Crime Agency Seized Millions of Pounds Worth of Cryptocurrency Last year

• Lockbit Ramps Up Attacks on Public Sector

• Eutelsat In Talks To Acquire OneWeb

• Stealthy CosmicStrand Rootkit Infects PC Firmware

• SmokeLoader Infecting Targeted Systems with Amadey Info-Stealing Malware

• Report shows a third of employees don’t understand importance of cybersecurity

• T-Mobile to Pay $350m Settlement in Breach Case

• Looking for adding new detection technologies in your security products?

• Elon Musk Denies Reported Affair With Wife Of Sergey Brin

• Most Important Network Penetration Testing Tools for Hackers & Security Professionals

• New Magecart campaigns target online ordering sites

• LockBit ransomware gang claims it ransacked Italy’s tax agency

• 3 Actions Enterprises Must Take After Suffering a Data Breach

• Zero Day attacks target online stores using PrestaShop

• Infosec pros want more industry cooperation and support for open standards

• Product showcase: The Cynomi Virtual CISO (vCISO) platform

• Benefits of modern PAM: Efficiency, security, compliance

• Major shifts and the growing risk of identity fraud

• The infosec investment landscape: Which tech gets the most bucks?

• Spain flight delayed because of hacking of Apple’s AirDrop

• Cyber Attack news headlines trending on Google

• Hackers Exploit PrestaShop Zero-Day to Steal Payment Data from Online Stores

• 5 Common blind spots that make you vulnerable to supply chain attacks

• The State of Data Security in 2022: The CISOs Perspective

• AU10TIX expands its INSTINCT platform to stop deepfakes and swarm attacks

• Runecast announces new capabilities to simplify Kubernetes security and speed up operations

• Approaches to Get You Started with Your Digital Transformation Journey

• OpenFHE Brings New Encryption Tools to Developers

• Intel partners with MediaTek to manufacture new chips for a range of smart edge devices

Generated on 2022-07-27 23:55:37.404308