IT Security News Daily Summary 2022-09-14

• Report: Only 27% of orgs have observability over their full stack

• How integrated city data ensures social services delivery

• White House to tech world: Promise you’ll write secure code – or Feds won’t use it

• Microsoft Support Diagnostic Tool Vulnerability: What to Learn from It and How to Stay Safe

• Mitigate Risk by Securing Third Party Software And Environments

• Federal Progress On Zero Trust: A Report

• Agencies probe AI’s impact on the American workplace

• Protests hit CACI’s $5.7B Air Force win

• Prioritize equity analysis in agency planning, governor says

• Consumer data needs better protection by government

• White House Guidance Recommends SBOMs for Federal Agencies

• CISA added 2 more security flaws to its Known Exploited Vulnerabilities Catalog

• Alaska automates tax collection from out-of-state sales

• Data privacy concerns grow as legislation lags

• Biden issues cybersecurity guidance for software vendors

• Nearly one in two industry pros scaled back open source use over security fears

• The Twitter Whistleblower’s Testimony Has Senators Out for Blood

• How to Use SSH Keys and 1Password to Sign Git Commits

• Industry cautions on software security regs in the defense bill

• OMB: New acquisition rule coming for vendors to vouch for their software security

• How Little Rock is harnessing data to become a smarter city

• Dig Security Banks $34 Million for Cloud Data Security

• US Indicts Iranians Who Hacked Power Company, Women’s Shelter

• Whistleblower Tells Senate Twitter Prioritised Profit Over Security

• Top 3 data security risks facing businesses

• Fake Security App Found Abusing Japanese Payment System

• North Korean cyberespionage actor Lazarus targets energy providers with new malware

• SparklingGoblin Updates Linux Version of SideWalk Backdoor in Ongoing Cyber Campaign

• 5 ways to improve your cloud security posture

• Vulnerabilities Found in Airplane WiFi Devices, Passengers’ Data Exposed

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• Iranian Islamic Revolutionary Guard Corps Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations

• Iranian Islamic Revolutionary Guard Corps-Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• A Retrospective Post-Quantum Policy Problem

• Implementing a Zero Trust strategy after compromise recovery

• cPacket Networks Expands Its Data Center Observability Portfolio

• Become an (ISC)² Candidate – No Exam, Experience or Fees Required

• 8 blockchain security issues you are likely to encounter

• AutoRabit launches devsecops tool for Salesforce environments

• WordPress Sites Hacked via Zero-Day Vulnerability in WPGateway Plugin

• Bishop Fox Releases Open Source Cloud Hacking Tool ‘CloudFox’

• Dig Security Banks Another $34 Million for Cloud Data Security

• SparklingGoblin APT Targeted Hong Kong University With New Linux Backdoor

• Iranian Islamic Revolutionary Guard Corps Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations

• Iranian Islamic Revolutionary Guard Corps-Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations

• Documents For Sale on the Dark Web

• Crypto Scammers Hack Famous Youtube Channel ‘DALLMYD’ with 13 Million Subscribers

• Lorenz Ransomware: Network Breach via VoIP

• Google Spins Out Secret Telecom Project Aalyria

• What You Need to Know when Considering a VPN on Linux

• 2022 Threat Hunting Report: Falcon OverWatch Looks Back to Prepare Defenders for Tomorrow’s Adversaries

• Coming Soon to Las Vegas: Fal.Con 2022 Event Highlights and Special Guests

• Start Your Zero Trust Journey With Identity

• Your Account Takeover Prevention Checklist: 5 Steps to Minimise the Risk

• Goodbye Friction, Hello Flow: 6 Ways to Build Trust with Strong Customer Authentication

• SparklingGoblin APT adds a new Linux variant of SideWalk implant to its arsenal

• Why Cloud Fax Is Better For Secure Data Exchange Than Email

• #ISC2Congress: Empowering Partnerships

• What Are Checksums & Why Should You Be Using Them?

• How zero trust can help battle identities under siege

• Secureworks reveals Azure Active Directory flaws

• FormBook Knocks Off Emotet As Most Used Malware in August

• Breach Of Software Maker Used To Backdoor As Many As 200,000 Servers

• California’s Newsom Signs Bill Requiring Social Media Firms’ Transparency

• Mudge: Lack Of Access, Data Controls Invite Twitter Exploitation

• Hacker Used Internal U-Haul Tool To Look Up Customer Information

• FBI: Legacy Medical Devices Pose Risk Of Exploit, Patient Safety Impacts

• Data Sovereignty Worries Drive Hybrid Cloud Adoption, Says Scality

• You never walk alone: The SideWalk backdoor gets a Linux variant

• Lorenz Ransomware Exploit Mitel VoIP Systems to Breach Business Networks

• Missouri Decision Foreshadows Outcomes of Remaining Coronavirus-Related Suits Against China

• New Security and Privacy Features in macOS Ventura, iOS 16, and iPadOS 16

• novoShield Emerges From Stealth With Mobile Phishing Protection App

• To Ease the Cybersecurity Worker Shortage, Broaden the Candidate Pipeline

• Cyberattacks Are Now Increasingly Hands-On, Break Out More Quickly

• Attackers mount Magento supply chain attack by compromising FishPig extensions

• Vulnerability management: Most orgs have a backlog of 100K vulnerabilities

• Space chief nominee worried about launchpad ‘traffic jams’

• TeamTNT Hits 150K Docker Containers via Malicious Cloud Images

• Montenegro Under Cyber Attack, Russia Blamed, All NATO States Would Be Prepared

• Ransomware Roulette with Consumer Trust – The Link Between Loyalty And Attacks

• 7 Ways Good Data Security Practices Drive Data Governance

• How Can You Tell if a Cryptocurrency is Legitimate? Read Our Guide To Find Out

• Major Cyberattack Hits English Company Eurocell

• Data protection’s biggest secret: 1 in 10 employees will leak IP data

• data masking

• Hackers Are Using WeTransfer Links To Spread Malware

• COMMENT: Biggest US Healthcare Ransomware Attack In 2022

• Canadian Solar Has Been Hacked By LockBit 3.0 Ransomware

• Google Partners US Government To Develop Open Source Chips

• Kaspersky report: malware attacks targeting gamers increase

• Malware Infects Magento-Powered Stores via FishPig Distribution Server

• Google Improves Chrome Protections Against Use-After-Free Bug Exploitation

• Microsoft Patch Tuesday, Expert Weighs In

• Twitter whistleblower cites major security flaws during testimony

• Beware! 0-Day Bug in WPGateway Actively Exploited in Wild & Targets 280,000 Sites

• What Kind of Data Costs Most in a Breach?

• Old Habits Die Hard: New Report Finds Businesses Still Introducing Security Risk into Cloud Environments

• How data detection and response are becoming cloud security essentials

• Passengers Exposed to Hacking via Vulnerabilities in Airplane Wi-Fi Devices

• How to Do Malware Analysis?

• SparklingGoblin APT Hackers Using New Linux Variant of SideWalk Backdoor

• Weird Fallout from Peiter Zatko’s Twitter Whistleblowing

• August’s Top Malware: Emotet Knocked off Top Spot by FormBook while GuLoader and Joker Disrupt the Index

• Ukraine’s Cyberwar Chief Sounds Like He’s Winning

• iOS 16 Launches With Advanced Cyber Protection

• Phishers take aim at Facebook page owners

• EU Court Upholds Antitrust Android Ruling Against Google

• Google and Meta fined over $70m for privacy violations in Korea

• Samsung was hacked… again

• A Post-exploitation Look at Coinminers Abusing WebLogic Vulnerabilities

• Twitter Shareholders Approve Musk’s $44bn Takeover

• Bitwarden password manager adds Fastmail email forwarding support

• Four-Fifths of Firms Hit by Critical Cloud Security Incident

• More and More Companies Are Getting Hit with Ransomware [2021-2022]

• Group of Hackers Attack Asian Governments Using ShadowPad RAT Malware

• Microsoft Fixes Two Zero-Days This Patch Tuesday

• DDoS Attacks on UK Firms Surge During Ukraine War

• Researchers Detail OriginLogger RAT — Successor to Agent Tesla Malware

• How Has Technology Changed the Visa Processing Procedure in Today’s Time?

• Cyberspies Drop New Infostealer Malware on Govt Networks in Asia

• Cyber Security Management System (CSMS) for the Automotive Industry

• iOS 16 Launches With Lockdown Mode, Spyware Protection, Safety Check

• Twitter former head of security told the Senate of severe security failings by the company

• Google Cloud completes Mandiant acquisition for $5.4 billion

• Ransomware news headlines trending on Google

• Cyber attack trends vs. growing IT complexity

• Thwarting attackers in their favorite new playground: Social media

• Microsoft’s Latest Security Update Fixes 64 New Flaws, Including a Zero-Day

• Microsoft September 2022 Patch Tuesday fixed actively exploited zero-day

• Threat actors are actively exploiting a zero-day in WPGateway WordPress plugin

• Cybersecurity Threats to the US Water Industry

• novoShield launches iPhone phishing protection app on the App Store

• Kingston Digital releases IronKey Keypad 200 to deliver FIPS 140-3 Level 3 security for data

• CIS Critical Security Controls v8

• CFOs’ overconfidence in cybersecurity can cost millions

• What’s challenging development teams amid their race to the cloud?

• XDR Alliance Welcomes New MSSP and MDR Members Committed to Open XDR Framework in Cybersecurity

• Veteran Cybersecurity Executive May Mitchell Joins Open Systems as Chief Marketing Officer

• CrowdStrike to Webcast Investor Briefing

• Latest Cyberthreats and Advisories – September 2, 2022

• Credential theft food chain—What is Ransomware-as-a-Service

• Over 280,000 WordPress Sites Attacked Using WPGateway Plugin Zero-Day Vulnerability

• Asigra Tigris Data Protection now incorporates CDR for protection against deeply embedded malware

• Keysight unveils automotive test solution for mobile industry processor interface

• Motorola Solutions innovates its integrated video security and access control portfolio

• The Feeling of Safety with McAfee+

• Microsoft Patch Tuesday: 64 new vulnerabilities, including five critical ones

• Wormable Flaw, 0days Lead Sept. 2022 Patch Tuesday

• Key Takeaways From the Twitter Whistleblower’s Testimony

• Linux Foundation to form the OpenWallet Foundation to push for a universal digital wallet infrastructure

• Daon IdentityX voice biometrics now available on Genesys’ Cloud CX platform

• Oracle launches MySQL HeatWave on AWS

• Hitachi Zosen Inova selects IFS Cloud to support its ERP processes

• Salesforce expands its use of Workday to support continued global growth

• Ransomware gang threatens 1m-plus medical record leak

• VERT Threat Alert: September 2022 Patch Tuesday Analysis

• Adobe Releases Security Updates for Multiple Products

• Twitter whistleblower Zatko disses bird site as dysfunctional data dump

• Apple puts the password on life support with passkey

• BackupBuddy WordPress plugin vulnerable to exploitation, update now!

• Update now! Google patches vulnerabilities for Pixel mobile phones

• Important update! iPhones, Macs, and more vulnerable to zero-day bug

• Steam account credentials phished in browser-in-a-browser attack

• Adobe Releases Security Updates for Multiple Products

• Google acquires Mandiant to deliver an end-to-end security operations suite

• U.S. trails China in key tech areas, new report warns

• New Relic expands leadership team with Siva Padisetty as SVP and GM and Tia Williams as GVP

• Eric Schwartz joins CyrusOne as CEO

• Ridge Security and Stellar Cyber partner to deliver a single platform for SecOps teams

• CellTrust and Xillio join forces to offer secure and compliant content migration

• Westcon-Comstor signs EMEA distribution agreement with Proofpoint

• Bishop Fox Releases Cloud Enumeration Tool CloudFox

• Microsoft fixes Windows security hole likely widely exploited by miscreants

• DOD’s game plan for inflation relief

• Umbrella Extends Protection to Unmanaged iOS and Android Devices

• Is confidential computing the future of cybersecurity? Edgeless Systems is counting on it

• Private LTE fills coverage gaps for communication emergencies

• Digital divide: Tribal communities undercounted, underserved

• Serious Security: Browser-in-the-browser attacks – watch out for windows that aren’t!

• Microsoft Quashes Actively Exploited Zero-Day, Wormable Critical Bugs

• IT Security News Daily Summary 2022-09-13

• AutoRABIT unveils security tools for Salesforce ecosystems

• GPS jammers are being used to hijack trucks and down drones: How to stop them

• Microsoft Releases September 2022 Security Updates

• State pulls in $9M to improve public safety, justice IT systems

• Rethinking smart cities

• Whistleblower: China, India Had Agents Working for Twitter

• Microsoft Releases September 2022 Security Updates

• Conservative Lawmakers Demand The White House Hand Over Facebook “Misinformation” Records

• Microsoft Raises Alert for Under-Attack Windows Flaw

• ShadowPad Threat Actors Return With Fresh Government Strikes, Updated Tools

• U-Haul Customer Contract Search Tool Compromised

• Cyber criminals increasingly relying on ransomware-as-a-service, report says

• Cyberattackers Abuse Facebook Ad Manager in Savvy Credential-Harvesting Campaign

• Microsoft fixes exploited zero-day in the Windows CLFS Driver (CVE-2022-37969)

• Use-after-freedom: MiraclePtr

• Adobe Patches 63 Security Flaws in Patch Tuesday Bundle

• CISA Releases Five Industrial Control Systems Advisories

• Patch your Mitel VoIP systems, Lorenz ransomware gang is back on the prowl

• CISA Releases Five Industrial Control Systems Advisories

• Lorenz Ransomware Intrusion: How a VoIP Vulnerability Was Leveraged for Initial Access

• GSA’s Login.gov has a new director

• The Scammers’ Playbook: How Cybercriminals Get Ahold of Your Data

• Apple Releases Security Updates for Multiple Products

• How to ensure the security of bank contact centers?

• Opus Security Emerges from Stealth with $10M in Funding for Cloud SecOps and Remediation Processes

• Name That Toon: Shiver Me Timbers!

• Apple Releases Security Updates for Multiple Products

• computer worm

• Senate Dems call on ICE to halt facial recognition and buying from data brokers

• Twitter Ex-Security Chief Tells US Congress of Security Concerns

• 3 Considerations When Aligning Organizational Structure to IT/OT Governance

• Ransomware Exposed Stolen Data From Cisco on Dark Web

• Documents of Indonesian President Allegedly Leaked on the BreachForums Page

• Introducing Q-Scout, a Mobile Security Solution for the Modern World

• Arcserve Independent Global Study Finds Businesses Still Losing Mission-Critical Company Data

• We are not seeing the macro impact in cyber security, says Palo Alto Networks CEO, Nikesh Arora

• ShadowPad-Associated Hackers Targeted Asian Governments

• Why is my Wi‑Fi slow and how do I make it faster?

• How to become a CISO

• Cyber espionage campaign targets Asian countries since 2021

• AI is playing a bigger role in cybersecurity, but hackers may benefit the most

• Secure your endpoints with Transparity and Microsoft

• ICS Patch Tuesday: Siemens, Schneider Electric Fix High-Severity Vulnerabilities

• Cloud Data Security Startup Theom Emerges From Stealth With $16 Million in Funding

• Opus Security Scores $10M for Cloud Security Orchestration

• Twitter Whistleblower Reveals Employees Concerned China Could Collect User Data

• Lawsuit After KeyBank Breach Heralds Changes In Liability

• One Month After Black Hat Exposure HP Enterprise Kit Still Unpatched

• Apple Patches iPhone And macOS Flaws Under Active Attack

• Watch Mudge Testify Today

• How to get inside the mind of hackers

• Attackers Compromise Employee Data at PVC-Maker Eurocell

• FBI Warns of Drastic Implication of Unpatched/Outdated Medical Devices

• Hackers Steal Steam Credentials With ‘Browser-in-the-Browser’ Technique

• Lorenz Ransomware Goes After SMBs via Mitel VoIP Phone Systems

• Twitter prioritizes profits over security, says whistleblower Peiter ‘Mudge’ Zatko

• Secure Access Service Edge: Trends and SASE companies to watch

• Trend Micro Patches Another Apex One Vulnerability Exploited in Attacks

• Lorenz Ransomware Gang Exploits Mitel VoIP Appliance Vulnerability in Attacks

• Trend Micro addresses actively exploited Apex One zero-day

• Patch Tuesday September 2022 – Microsoft Releases Fixes for 16 Vulnerabilities, Including a Zero-Day Bug

• We’re Entering the Age of Unethical Voice Tech

• The scary future of the internet: How the tech of tomorrow will pose even bigger cybersecurity threats

• The Future of the Web: The good, the bad and the very weird

• Gartner Survey Shows 75% of Organizations Are Pursuing Security Vendor Consolidation in 2022

• Business Security Starts With Identity

• How GRC protects the value of organizations — A simple guide to data quality and integrity

• Attackers Can Compromise Most Cloud Data in Just 3 Steps

• Endpoint Security: 7 Best Practices For Mitigating Data Breaches

• Introducing Check Point Horizon – the prevention-first SOC management platform

• AutoRabit unveils security tools for Salesforce ecosystems

• Comment: New Approach To Ransomware Encryption Threatens To Undermine Cyber Security Strategies

• National Security Creep in Cross-Border Investments

• Further Attacks On Albania, Expert Weighs In

• Yanluowang Ransomware Gang Leaked Cisco Stolen Data

• Lawmakers are concerned about the security and privacy of Twitter users, says Sen. Durbin

• A new player enters the cloud security and remediation market

• Cloud security should be data-centric, says data protection provider Theom

• Spyware, Ransomware, Cryptojacking Malware Increasingly Detected on ICS Devices

• FBI Warns of Unpatched and Outdated Medical Device Risks

• iOS 16 Rolls Out With Passwordless Authentication, Spyware Protection

• Today: 2022 CISO Forum Virtual Event

• FBI Seizes Stolen Cryptocurrencies

• PCI DSS Tackles Client-Side Attacks: Everything You Need to Know About Complying With PCI 6.4.3

• Three Keys to Securing Shadow Data

• U-Haul reports data breach, customers’ info exposed

• 5 Work-From-Home Office Set Up Secrets a Self-Employed Should Know

• Asian Governments and Organizations Targeted in Latest Cyber Espionage Attacks

• Edinburgh’s Adarma partners with The Princes Trust to support inclusivity in cybersecurity

• iOS 15.7: Apple patches new iPhone security flaw, so it’s time to update

• How Whistleblowers Navigate a Security Minefield

• Iran-linked TA453 used new Multi-Persona Impersonation technique in recent attacks

• Ethereum Power-Saving Upgrade Set For This Week

• Zoom Renames Team Chat Amidst Tough Competition

• Zero-Day Vulnerability Found In WordPress Plugin Backup Buddy

• How Zero Trust Security Can Protect Your Organization from Ransomware Attacks?

• U-Haul Says Customer Data Accessed Using Compromised Credentials

• Ransomware Gang Hacks VoIP for Initial Access

• Iranian Hackers Target High-Value Targets in Nuclear Security and Genomic Research

• A closer look at ransomware attack patterns

• Apple fixes actively exploited zero-day in macOS, iOS (CVE-2022-32917)

• US ‘To Implement’ China Chip Export Restrictions

• NGOs Call Amazon EU Antitrust Proposals ‘Vague’

• China says NSA used multiple cybersecurity tools in attacks against Chinese university

• Iranian Hackers Launch Renewed Attack on Albania

• Researchers Warn of 674% Surge in Deadbolt Ransomware

• One month after Black Hat exposure HP enterprise kit still unpatched

• Micron Breaks Ground For $15bn US Memory Chip Plant

• Twitter Says Latest Musk Termination Attempt ‘Wrongful’

• Rust programming language gains dedicated security team

• Looking for adding new detection technologies in your security products?

• Self-Driving Cars ‘May Require Human Element In Long Term’

• Misinformation and propaganda in the authoritarian internet

• Cisco: Yes, Yanluowang leaked our data. No, it’s not serious

• Montenegro and its allies are working to recover from the massive cyber attack

• CrowdStrike threat report: Intrusions up, breakout time down

• LinkedIn fake job offers and emails leading to Cyber Frauds

• Ransomware hackers adopting Intermittent Encryption

• Spending time with the Girl Scouts of Greater Chicago at Northwest Indiana’s CampCEO

• Modernizing data security with a zero trust approach to data access

• Chinese-linked cyber crims nab $529 million from Indian nationals

• Apple Releases iOS and macOS Updates to Patch Actively Exploited Zero-Day Flaw

• Pro-Palestinian group GhostSec hacked Berghof PLCs in Israel

• Apple releases macOS Monterey 12.6, iOS 15.7, and more; fixes zero-day vulns

• Organizations should fear misconfigurations more than vulnerabilities

• 5 Kali Linux books you should read this year

• Reimagining the approach to incident response

• Commerce names desired winners for $1.5B enterprise IT vehicle

• Peiter ‘Mudge’ Zatko: The Wild Card in Musk’s Clash With Twitter

• Pros and Cons of 5G

• INFINIQ launches Wellid to anonymize personal information in real-time

• D3 Security launches D3 Chronos to help MSSPs with SOAR implementation

• How prepared are organizations to tackle ransomware attacks?

• GSA plans to scale up e-commerce program

• Senate bill looks to software licensing for cost savings

• NTT DATA UK&I Teams with SecurityScorecard to Transform Cyber Risk Monitoring Across the UK and Ireland

• How to unite security and compliance in 5 simple ways

• Guide to the best data privacy certifications for 2022

• Apple patches zero-day holes – even in the brand new iOS 16

• A week in security (September 5 – 11)

• The North Face hit by credential stuffing attack

• Facebook engineers aren’t sure where all user data is kept

• 6 patch management best practices for businesses

• The MSP playbook on deciphering tech promises and shaping security culture

• New GIFShell Attack Targets Microsoft Teams

Generated on 2022-09-14 23:55:31.406675