IT Security News Daily Summary 2022-10-26

• Addressing Ransomware in Hospitals & Medical Devices

• Meta Shareholder Urges Job Cuts, Metaverse Spending Reduction

• Starlink Terminals Smuggled Into Iran – Report

• Single Chip Transmits All Internet Traffic In A Second

• Chrome Extensions Harboring Dormant Colors Malware Infect Over a Million PCs

• SUSE: 2022:3783-1 important: telnet

• SUSE: 2022:3784-1 critical: libtasn1

• Ubuntu 22.10 Gets First Kernel Security Update to Address Recent Wi-Fi Stack Vulnerabilities

• Open-source initiative Pyrsia fuels up to boost trust in software supply chain

• Drew Myklegard named permanent deputy federal CIO

• A national digital strategy for transforming government

• Massachusetts moves from data center ‘hodgepodge’ to cloud-driven model

• Digital twins need more than infrastructure data, expert says

• City’s custom-built app scores homeless encampment safety

• Top security-by-design frameworks

• Cisco, CISA warn 2 AnyConnect flaws are under attack

• Report: Gun Ads Still Common On Facebook Despite Ban On Promoting Weapons

• How to Recover From a Ransomware Attack

• Illusive’s Identity Threat Detection and Response (ITDR) Solution Protects Privileged Accounts

• Akamai Announces Next Generation DDoS Defense Platform

• Spyderbat Announces Open Source Program for Cloud Native Visibility and Security

• LinkedIn Phishing Spoof Bypasses Google Workspace Security

• The Hunt for the Kingpin Behind AlphaBay, Part 1: The Shadow

• Experts disclosed a 22-year-old bug in popular SQLite Database library

• Windows Mark of the Web Zero-Days Remain Patchless, Under Exploit

• PayPal ditches passwords, at least on Apple devices

• Proposed Bylaws Amendments – What They Mean

• USDA pushes out funds to modernize key nutrition benefit

• Street-level imagery makes data collection a snap

• Cisco AnyConnect Windows client under active attack

• New Cryptojacking Campaign Kiss-a-dog Targeting Docker and Kubernetes

• Apple Fixes New Kernel Zero-Day Bug That Attacks iPhones, iPads Remotely

• Debian LTS: DLA-3163-1: wordpress security update

• Ubuntu 5702-2: curl vulnerability

• CISA: Urgent Patching Needed for Actively Exploited Linux Kernel Flaw

• Linus Torvalds Wants to Drop i486 Support from the Linux Kernel Citing its Age

• Umbrella Infrastructure Network Resiliency Strategy

• Free digital signing service aims to bolster software supply chain security

• Report: 24 million U.S. households have fallen victim to account takeover fraud

• The rise of the enterprise browser and what’s next for secure browsing

• BlackBerry launches cyberthreat intelligence service to fortify enterprise defense

• FCW co-founder Anne Armstrong honored with ACT-IAC award

• After 5 full-throttle years, Kessel Run is settling in for the long haul

• APAC faces 2.1M shortage in cybersecurity professionals

• FTC Targets Drizly and Its CEO Over Cybersecurity Failures That Led to Data Breach

• Apple patches actively exploited zero-day iOS bug

• Data Breaches Rise By 70% Globally in Q3 2022

• Afghans Targeted By Facebook Visa And Immigration Scams

• US Employees Feel Little Concern for Data Theft at Work, New Research Reveals

• Dealers Report Dramatic Increase in Identity Fraud: Most Lack Effective Protection

• Study Finds Significant Correlation Between BitSight Analytics and Cybersecurity Incidents

• HR Departments Play a Key Role in Cybersecurity

• Threat Groups Repurpose Banking Trojans into Backdoors

• CISA Upgrades to Version 2.0 of Traffic Light Protocol in One Week – Join Us!

• CISA Releases Eight Industrial Control Systems Advisories

• CISA Has Added One Known Exploited Vulnerability to Catalog    

• Keeping Sensitive Data Out of Your Logs

• Maryland to build weather data network

• Why it’s time to expire mandatory password expiration policies

• Google Chrome Pays $57K (and Counting) in Bug Bounties for Latest Update

• Why Cyber-Attacks on The Cloud Are Rising and How to Prevent Them

• Why Throwing Money at Cybersecurity Doesn’t Work

• LV Ransomware Exploits ProxyShell in Attack on a Jordan-based Company

• Ubuntu 5702-1: curl vulnerabilities

• Ubuntu 5696-2: MySQL vulnerabilities

• Debian: DSA-5261-1: chromium security update

• Debian LTS: DLA-3161-1: tzdata new timezone database

• Debian LTS: DLA-3162-1: libdatetime-timezone-perl new timezone database

• MLsec could be the answer to adversarial AI and machine learning attacks

• Cloud training for all is critical to migration efforts, experts say

• Arnica Raises $7 Million to Protect Software Developers, Code

• CISA warns of ransomware attacks on healthcare providers

• POS Malware Used to Steal Details of Over 167,000 Credit Cards

• Apple Fixes Actively Exploited iOS and iPadOS Zero-Day Vulnerability

• Ransomware Group Bypasses Windows 10 Warnings

• SealPath Data Classification Powered by Getvisibility Applies Artificial Intelligence to Improve Accuracy and Efficiency of Data Labelling and Protection

• Security Leaders are Calling for Industry to Take Action and Programmatically Improve Secure Coding Education

• MSP Market Opportunity Report Finds Cybersecurity as Primary Growth Driver as SMBs Lack Resources to Develop Security Program In-House

• Spyderbat Raises Series A to Deliver Runtime Security Throughout Cloud Native Software Development Environments

• GitLab Adds Governance, Software Supply Chain Enhancements

• Hive Ransomware Hackers Begin Leaking Data Stolen from Tata Power Energy Company

• 22-Year-Old Vulnerability Reported in Widely Used SQLite Database Library

• Two PoS Malware used to steal data from more than 167,000 credit cards

• See Tickets discloses data breach, customers’ credit card data exposed

• Orange Cyberdefense and Palo Alto Networks Lead with Zero Trust

• Cyber Threats Happen — Prevention, Protection and Recovery Tips

• Thousands Of Fake PoC Exploits In GitHub Repositories Deliver Malware – Expert Comments

• DEV-0832 (Vice Society) opportunistic ransomware campaigns impacting US education sector

• How businesses are gaining integrated data protection with Microsoft Purview

• Chrome Extensions with 1M+ Installs Hijack Targets’ Browsers

• The TommyLeaks and SchoolBoys Ransomware Gangs Share a Common Enemy

• WhatsApp: Instant Messaging App Services Restored After a 2 Hour Outage

• Five Important Tips for Keeping Your Email Safe

• Upgraded Security Deal Among Japan and Australia Against Chinese Cybercrimes

• CrowdStrike Falcon Platform Achieves 100% Ransomware Prevention with Zero False Positives, Wins AAA Enterprise Advanced Security Award from SE Labs

• Online ticketing company “See” pwned for 2.5 years by attackers

• Microsoft plugs 3-year-old hole in cracked driver blocklist

• WhatsApp Down For Users Around The World

• US Charges Two Chinese Intelligence Officers In Huawei Case

• Apple Cuts iPhone 14 Plus Production – Report

• UKCloud Placed Into ‘Compulsory Liquidation’

• Tools for Testing Your Proxy Servers

• Hackers Exploit Critical VMware Flaw to Drop Ransomware & Miners

• Fedora 35: dbus 2022-7a963a79d1

• Fedora 35: dhcp 2022-c4f274a54f

• Fedora 35: jhead 2022-1d9133bc8e

• Fedora 35: dotnet3.1 2022-7f5f9ede26

• SUSE: 2022:3779-1 important: the Linux Kernel

• Suse enhances edge platform with container control and zero trust security

• How Arnica’s tool keeps supply chain and developers flowing by repelling attacks

• Perygee Scores Seed Funding to Tackle IoT Security

• Researchers criticize HackerOne over triage, mediation woes

• Serious Security: How randomly (or not) can you shuffle cards?

• Palo Alto Networks NextWave Program Provides the Threat Response Community With XDR for Incident Response Fueled by MSSP Demand

• Financial Services Firms Operating Under False Sense of Security

• Duality Launches First Ever Enterprise-Ready Privacy-Enhanced Data Collaboration Platform

• As Vulnerabilities Soar, Slim.AI Launches ‘Container Intelligence’ to Give In-Depth Analysis on Hundreds of Popular Container Images

• Cybersecurity Risks & Stats This Spooky Season

• Researchers Detail Windows Event Log Vulnerabilities: LogCrusher and OverLog

• Talking IoT Security at the White House

• Service Preview of Red Hat Advanced Cluster Security Cloud Service

• Commitment to Balance Is Vitally Important for Successful Implementation of CHMR-AP

• Thinking Through the Jan. 6 Committee’s Trump Subpoena

• Why Cybersecurity Awareness Month is Every Month

• How Imperva Mitigates Security Threats in Oracle Cloud Infrastructures

• Automotive Retailer Pendragon Refuses to Pay $60 Million Ransom

• Why is HPC in the Cloud?

• World Economy Is Facing Inflation: Is Crypto a Good Investment?

• Uncle Sam says Chinese agents tried to interfere with Huawei criminal case in US

• The safety of numbers

• #CybersecurityAwarenessMonth Mentorship Interview Series: Part 2 – Mentees

• See Tickets data breach went undetected for 2.5 years

• States opting out of a federal program that tracks teen behavior as youth mental health worsens

• Here’s how you can become a highly paid ethical hacker

• Apple Releases Security Updates for Multiple Products 

• WhatsApp back up and running after two hours down

• 5 Best Tools for Remote Patient Monitoring in 2022

• Cybersecurity 2022: 5 Top Considerations Every User Must Be Aware Of

• See Tickets discloses 2.5 year long web skimmer data breach

• Oracle9: ELSA-2022-7185: device-mapper-multipath Important Security Update

• Australia seeks stiffer penalty for data breaches amidst spate of security incidents

• How to set up two-factor authentication for your Facebook account

• Cybersecurity teams are reaching their breaking point. We should all be worried

• Get practice materials for 14 top certification exams for just $20

• Jira Align Vulnerabilities Exposed Atlassian Infrastructure to Attacks

• Medibank Confirms Broader Cyberattack Impact After Hackers Threaten to Target Celebs

• CISA Warns of Attacks Exploiting Cisco, Gigabyte Vulnerabilities

• Apple Patches Over 100 Vulnerabilities With Release of macOS Ventura 13

• VMware Patches Critical Vulnerability in End-of-Life Product

• Ukraine Warns of Cuba Ransomware Campaign

• Embracing the Next Generation of Business Developers

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• Ransomware Gangs Ramp Up Industrial Attacks in US

• Apple Releases Security Updates for Multiple Products 

• Cybercriminals Used Two PoS Malware to Steal Details of Over 167,000 Credit Cards

• How the Software Supply Chain Security is Threatened by Hackers

• Hive ransomware gang starts leaking data allegedly stolen from Tata Power

• US Charges Alleged Chinese Spies In Telecoms Probe Case

• FBI Warns Ransomware Group Targeting Poorly Protected VPN Servers

• Senator Pushes Zuckerberg On How Facebook Collects Health Information

• Payment Terminal Malware Steals $3.3m Worth Of Credit Card Numbers

• DHL Named Most-Spoofed Brand In Phishing

• Armis Now Available in AWS Marketplace

• What Is A Keylogger? Definition, Types, Examples and Prevention

• Ukrainian Governmental Agencies Targeted by Ransomware Attacks

• Emotet Botnet Drops Malware via Self-Unlocking Password-Protected RAR Files

• WhatsApp Down: Users Can’t Send or Receive Messages

• The Interpol Metaverse Was Launched to Help the Fight against Cybercrime

• Best Linux Games for Free 2022 – Great Ubuntu Games

• How to Make a Shield in Minecraft 2022

• The Best Bank Mortgage Loans in Singapore

• How to tame a horse in Minecraft 2022

• Gone phishing: UK data watchdog fines construction biz £4.4m for poor infosec hygiene

• After hackers threatened to target celebrities, Medibank confirmed the impact of a larger cyberattack

• Why you’re getting cloud security wrong

• Vice Society Ransomware Campaigns Continue to Impact US Education Sector

• Why Retail Stores Are More Vulnerable Than Ever to Cybercrime

• Samba Releases Security Updates 

• An In-Depth Exploration Of Cloud Hacking And Its Methods

• ioXt Alliance participated in White House strategic discussion on IoT security labeling

• Code42 Appoints Key Leadership to Drive the Next Phase of Partner Growth

• Hexnode listed as a Notable Vendor in Gartner ® Midmarket Context: Magic QuadrantTM for Unified Endpoint Management Tools

• CSI Hosts TechX Virtual Product Showcase, Highlights Open Banking’s Impact on Industry

• Risks that third-party vendors pose to outsourcing banks

• Top Cloud Security Challenges & How to Beat Them

• SUSE: 2022:3772-1 important: curl

• SUSE: 2022:3747-1 moderate: SUSE Manager Client Tools

• SUSE: 2022:3768-1 important: qemu

• SUSE: 2022:3775-1 important: the Linux Kernel

• SUSE: 2022:3760-1 important: netty

• Internal Security

• Prioritizing Cybersecurity in Hybrid Environments | Avast

• Google Cloud improves security, adds CNAPP integration with Lacework

• How is the Air Force doing at cyber?

• CISA seeks feedback on baseline measures to secure cloud configuration

• How government might work up to 3D-printed buildings

• Does disk encryption slow down your PC?

• Here’s how you can become a highly-paid ethical hacker

• Apple megaupdate: Ventura out, iOS and iPad kernel zero-day – act now!

• Scribe Security Launches Evidence-Based Security Trust Hub

• Ransomware Barrage Aimed at US Healthcare Sector, Feds Warn

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• Cisco Warns AnyConnect VPNs Under Active Cyberattack

• 4 Reasons Open Source Matters for Cloud Security

• Samba Releases Security Updates 

• Apple Releases Patch for New Actively Exploited iOS and iPadOS Zero-Day Vulnerability

• Unknown Actors are Deploying RomCom RAT to Target Ukrainian Military

• Kimsuky Hackers Spotted Using 3 New Android Malware to Target South Koreans

• This 9-Course Bundle Can Take Your Cybersecurity Skills to the Next Level

• U.S. Charges Ukrainian Hacker Over Role in Raccoon Stealer Malware Service

• Dormant Colors campaign operates over 1M malicious Chrome extensions

• DNS Best Practices: A Quick Guide for Organizations

• How to prevent lateral movement attacks using Microsoft 365 Defender

• A week in security (October 17 – 23)

• Healthcare site leaks personal health information via Google and Meta tracking pixels

• An odd kind of cybercrime: Gift vouchers, medical records, and…food

• A gym heist in London goes cyber

• Cisco warns of ISE vulnerability with no fixed release or workaround

• Alert: This ransomware preys on healthcare orgs via weak-ass VPN servers

• Uncle Sam says these Chinese nationals are Beijing agents breaking the law on US soil

• Iran’s Atomic Energy Organization Confirms E-mail Hack

• UK Penalizes Interserve £4.4 Million for Security Breach

• DHL: Most-Spoofed Brand in Phishing

• London sets up resilience centre to fight Cyber Crime

• Apple Confirms iPhones Will Get USB-C Charging

• Protect yourself from scams this Diwali

• Ransomware Masquerading as Microsoft Update Targets Home Computers

• Typosquat Campaign Targeting Android, Windows Users Now Counts 600+ Domains

• Content Security Market Worth $2.2 Million by 2027 – Exclusive Study by MarketsandMarkets(TM)

• See Tickets Notifies Customers of Major Card Data Breach

• Hive Group Admits to Leaking Data in Tata Power Ransomware Attack

• CentOS: CESA-2022-7088: Important CentOS 7 libksba

• CentOS: CESA-2022-7008: Moderate CentOS 7 java-11-openjdk

• CentOS: CESA-2022-7002: Moderate CentOS 7 java-1.8.0-openjdk

• SUSE: 2022:3735-1 important: telnet

• Prevent financial fraud, increase trust and make open banking a reality with account tokens

• Report: 93% of Americans prefer greater data transparency from law enforcement

• CISA to focus on water, education and health sectors over the next year

• Federal CIO charts path to streamlining government services

• OMB to extend digital records deadlines by 18 months

• New York City Council staff won’t give up hybrid work without a fight

• Is the metaverse really the future of work?

• How one state bolsters its employees’ cyber hygiene

• States face more nuanced cloud security challenges

• How to set up SSH key authentication in Linux for more secure logins

• 5 reasons to keep your software and devices up to date

• Apple Fixes Exploited Zero-Day With iOS 16.1 Patch

• Drizly Agrees to Tighten Data Security After Alleged Breach

• Lawmaker Presses Facebook To Explain Sensitive Health Data Collection

• Vulnerability Management as a Service: Top VMaaS Providers

• Atlassian Vulnerabilities Highlight Criticality of Cloud Services

• Stress Is Driving Cybersecurity Professionals to Rethink Roles

• IoT Fingerprinting Helps Authenticate and Secure All Those Devices

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• Google Enters Into Stipulated Agreement to Improve Legal Process Compliance Program

• Vulnerability Summary for the Week of October 17, 2022

• CISA Adds Six Known Exploited Vulnerabilities to Catalog

• Download eBook: Top virtual CISOs share 7 tips for vCISO service providers

• Cuba ransomware affiliate targets Ukraine, CERT-UA warns

• Apple fixed the ninth actively exploited zero-day this year

• The Case for Designating the Donetsk and Luhansk People’s Militias as Foreign Terrorist Organizations

• Most Dangerous Ransomware Groups in 2022 You Should Know About

• DHL named most-spoofed brand in phishing

• Payment terminal malware steals $3.3m worth of credit card numbers – so far

• Spidark Stole Ed Sheeran’s Unreleased Songs, Sentenced To 18 Months In Prison

• Battling the Russian Disinformation War

• Threat Actors Target AWS EC2 Workloads to Steal Credentials

• Twitter Losing Most Active Users – Report

• Hackers Actively Exploiting Cisco AnyConnect Secure Flaw to Perform DLL Hijacking

• Why are there so many tributes to Ash Carter on my Facebook page?

• Hive Ransomware Group Leaks Data Stolen in Tata Power Cyber-Attack

• Valence Security Announces $25M Series A to Scale Delivery of Collaborative SaaS Security Remediation Solutions to Customers

• 54% of Staff Would Reconsider Working for a Firm That Had Experienced a Cyber Breach, Research Finds

• Cryptographic signatures for zip distributions

• What is Zero Trust?

• Apple Begins Selling Door Lock Unlocked By Tapping iPhone

• Hackers Breach Iranian Atomic Energy Network

• Black Reward Hackers Steal Trove of Emails from Iran’s Atomic Energy Agency

• Oracle8: ELSA-2022-7192: device-mapper-multipath Important Security Update

• Oracle8: ELSA-2022-7129: git-lfs security and bug fix Moderate Security Update

• Debian LTS: DLA-3160-1: tomcat9 security update

• SciLinux: SLSA-2022-7184-1 Important: thunderbird on SL7.x x86_64

• SciLinux: SLSA-2022-7186-1 Important: device-mapper-multipath on SL7.x x86_64

• How self-healing endpoints are a solution to identities under siege

• Report: 97% of C-level executives worry about videoconference security

• PayPal enables passwordless authentication with Apple Face ID and Touch ID passkeys

• Testing out new transportation options in the nation’s capital

• How to navigate the current 5G and IoT threat landscape

• Optimize and secure your team’s Apple devices with Jamf Now

• This highly rated password manager is currently 93% off

• Australia Flags New Corporate Penalties for Privacy Breaches

• CNC Machines Vulnerable to Hijacking, Data Theft, Damaging Cyberattacks

• Google Pays Out Over $50,000 for Vulnerabilities Patched by Chrome 107

• Spyderbat Raises $10 Million for Cloud and Container Security Platform

• Leveraging Managed Services to Optimize Your Threat Intelligence Program During an Economic Downturn

• 6 ways to prevent privilege escalation attacks

• CISA Warns Against Ransomware Group Daixin Team Targeting Health Organizations

• Time-Consuming Remediation: Assessing the Impact of Text4Shell

• Hornetsecurity Launches Next-Generation Security Awareness Training to Help Organizations Strengthen Their Human Firewall

• Uptycs Introduces Detections that Correlate Threat Activity from the Kubernetes Control Plane and Container Runtime

• Godspeed Capital-Backed SilverEdge Partners with Counter Threat Solutions

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• Rezilion Vulnerability Scanner Benchmark Report Finds Top Scanners Only 73% Accurate

• A Pro-China Disinfo Campaign Is Targeting US Elections—Badly

• Norway PM warns of Russia cyber threat to oil and gas industry

• Let’s Not Kid Ourselves: Afghanistan’s Taliban Regime Will Not Become More Inclusive

• CISA Warns Health Organisations of Targeted Ransomware Attack by Daixin Hackers

• Android-Clicker Malware Garners Reaches 20 Million Downloads

• What Is Cyberespionage? Tactics, Targets, and Prevention Tips

• How Technology Has Changed the Way We Gamble

• The Technology Behind Vaping Devices

• Congratulations to the Top MSRC 2022 Q3 Security Researchers!

• Secure your endpoints with Transparity and Microsoft

• Security Experts Raise Concern Regarding Fairness of Conservative Leadership Contest

• What Should Be on My Resume as a Linux Administrator?

• PayPal Officially Announces Support for Passkeys

• London’s New Cyber Resilience Centre Set to Fight Cybercrime in the Capital

• BlackBerry Launches Cyber Threat Intelligence Service to Strengthen Cyber Defenses

• Open Source Is Just the Tip of the Iceberg in Software Supply Chain Security

• ThreatWise TV: Exploring Recent Incident Response Trends

• Military Foraging: Historical Practice and Contemporary Advice

• What is Quantum Computing, and Why Should Security Professionals Care?

• Uncovering Security Blind Spots in CNC Machines

• Shetland Isles Reconnected After Subsea Cables Repaired

• IT Spending To Grow 5.1 Percent In 2023, Says Gartner

• Apple Hikes Price Of Apple Music, Apple TV+

• Why IoT Security in Healthcare is Crucial

• SUSE: 2022:2727-1 suse/manager/4.3/proxy-httpd Security Update

• SUSE: 2022:2728-1 suse/manager/4.3/proxy-salt-broker Security Update

• SUSE: 2022:2729-1 suse/manager/4.3/proxy-squid Security Update

• SUSE: 2022:2730-1 suse/manager/4.3/proxy-ssh Security Update

• SUSE: 2022:2731-1 suse/manager/4.3/proxy-tftpd Security Update

• Oasis Labs and Equifax turn to blockchain to verify Web3 user identities

• Criminals are starting to exploit the metaverse, says Interpol. So police are heading there too

• Fighting cybersecurity risks for law enforcement: On-premises vs. cloud native systems

• Cisco Users Informed of Vulnerabilities in Identity Services Engine

• US Healthcare Organizations Warned of ‘Daixin Team’ Ransomware Attacks

• Critical Flaws in Abode Home Security Kit Allow Hackers to Hijack, Disable Cameras

• Cyberattack Causes Disruptions at Wholesale Giant Metro

• In Israel, Albanian PM to Meet Cyber Chief After Iran Hack

• Nok Nok, a Global Leader in Customer Passwordless Authentication, Releases Full Support for Passkeys

• Cybersecurity’s Role in Combating Midterm Election Disinformation

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• Baltimore/Washington International Thurgood Marshall Airport Selects Telos to Process Background Checks for Aviation Workers

• Top 10 Kubernetes Security Risks Every DevSecOps Pro Should Know

• Ensuring Security in M&A: An Evolution, Not Revolution

• US charges Ukrainian man with Raccoon Infostealer operation

• On the Randomness of Automatic Card Shufflers

• VMware Bug With 9.8 Severity Rating Exploited To Install Witch’s Brew Of Malware

• Hacktivists Steal 100,000 Emails From Iran’s Nuclear Energy Agency

• BlackByte Ransomware Slinger Twists The Knife With Data Stealer

• Google Says Slap Some GUAC On Your Software Supply Chain

• METRO Confirms Cyberattack Caused IT Outage

• New Windows Zero-Day Vulnerability Lets JavaScript Files Bypass Security Warnings

• Best Food In Minecraft 2022 – Ultimate List [Bonus: Worst Items to Eat]

• Google says slap some GUAC on your software supply chain

• (ISC)² Certified in Cybersecurity and ISACA Cybersecurity Fundamentals: How Do They Compare?

• Cloud Security and The Portable Career

• Cybercriminals Target Citizen Journalists; Here’s How to Mitigate

• Australia Imposes Corporate Fines on Cybercriminals

• How to Use Your iPhone as a Webcam with Continuity Camera in macOS Ventura

• VirusTotal += Bkav Pro

• Google Cloud adds a new CNAPP integration with Lacework

• Microsoft M12 Leads $25 Million Valence Security Series A

• Dark Reading Launches New Section Dedicated to ICS/OT Security

• Apple Releases Patch For iPhone And iPad Zero Day

• Medibank’s Data Breach Diagnosis Keeps Getting Worse

• Researchers Uncover Cryptojacking Campaign Targeting Docker, Kubernetes Cloud Servers

• PayPal Ditches Passwords, At Least On Apple Devices

• Incoming OpenSSL critical fix: Organizations, users, get ready!

• What’s New in macOS Ventura

• FIFA 23: In the crosshairs of hackers

• Massive Fake Website Campaign Spreading Malware detected

• TikTok Denies Report It Can ‘Track’ US Citizens

• Jony Ive Successor Evans Hankey To Leave Apple

• 22-Yrs-Old SQLite Bug Let Hackers Perform Code Execution & DOS Attack On Control Programs

• Navigating online safety at any age

• Most reported CVEs for Docker Hub images are harmless

• Introducing Check Point Software’s new Autonomous IoT Threat Prevention Solution “Quantum IoT Protect”

• Online Shoppers Beware: Scammers Most Likely to Impersonate DHL

• FBI warning: This ransomware group is targeting poorly protected VPN servers

• Network Security Company Corsa Security Raises $10 Million

• Adobe Illustrator Vulnerabilities Rated Critical, But Exploitation Not Easy

• OpenSSL to Patch First Critical Vulnerability Since 2016

• Data Breach at Australian Health Insurer Impacts 4 Million Customers; Could Cost $35M

• Data Breach Victims Sue Rhode Island Transit Agency, Insurer

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• Hot on the Trail of a Mass-School-Shooting Hoaxer

• Malicious Clicker apps in Google Play have 20M+ installs

• Cyber Certification Skills Are For Life, Not Just For Linkedin

• Thousands Of Publicly Exposed API Tokens Could Threaten Software Integrity

• CybSafe launches SebDB 2.0 Behavioural Risk Platform

• MyOpenVDP: Open-source web application to securely disclose vulnerabilities

• ISARA makes four digital certificate patents publicly available to boost quantum security

• IRISSCERT brings eminent cybersecurity experts to its conference in Dublin

• 26-Year-Old Charged for Involvement in Raccoon Infostealer Malware Service

• Charles Henderson’s Cybersecurity Awareness Month Content Roundup

• Forget about SaaS security at your peril, Valence Security raises $25M

• Report: Phishing attacks jump 61% in 2022, with 255M attacks detected

• These ransomware victims are making the highest ransom payments

• Parcel delivery scams are on the rise: Do you know what to watch out for?

• Supply Chain Attacks or Vulnerabilities Experienced by 80% of Orgs, BlackBerry Finds

• Ukrainian Authorities Warn of Cuba Ransomware Campaign Threat

• Apple Patch For New Exploitable Flaw In iOS

• Binance is ‘narrowing down’ identity of hacker behind $570 million crypto attack, CEO says

• Get to Know the System Settings App on macOS Ventura

• New Features in Mail and Messages in macOS Ventura, iOS 16, and iPadOS 16

• Cryptocurrency, a new haven for money laundering

• Microsoft Rolls Out Windows PC Manager App In Beta

• SUSE: 2022:2721-1 bci/nodejs Security Update

• Facebook Account After Death | Avast

• Cisco Confirms In-the-Wild Exploitation of Two VPN Vulnerabilities

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• CISA Warns of Daixin Team Hackers Targeting Health Organizations With Ransomware

• SideWinder APT Using New WarHawk Backdoor to Target Entities in Pakistan

• Australia Increases Fines for Massive Data Breaches

• Hive Group Admits to Tata Power Ransomware Attack

• Cybersecurity Costs – 54% Would Re-consider Place Of Employment After Cyberattack – Approov Comments

• How Do Biometric Safes Work?

• Could you not? BlackByte ransomware slinger twists the knife with data stealer

• A year of SANS security summits

• Alphabet To Cut Hiring By Half, As YouTube Declines

• Beware Of SCAMS As Cost Of Living Bites Finances, Expert Comments

• Silicon UK In Focus Podcast: The Infrastructure of the Metaverse

• Best Malware Analysis Tools List For Security Researchers & Malware Analyst 2022

• SUSE: 2022:2722-1 bci/openjdk-devel Security Update

• SUSE: 2022:2723-1 bci/openjdk Security Update

• SUSE: 2022:2724-1 bci/python Security Update

• SUSE: 2022:2725-1 bci/python Security Update

• SUSE: 2022:2726-1 bci/ruby Security Update

• The largest law enforcement agency in the nation pledges to hire a lot more women

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• Why Ransomware in Education on the Rise and What That Means for 2023

• COMMENT: CISA Warns Health Organisations Of Targeted Ransomware Attack by Daixin Hackers

• £4.4 Million ICO Fine Received By Interserve

• E-Pal – 108,887 breached accounts

• Doomworld – 34,478 breached accounts

• Check Point Research: Third quarter of 2022 reveals increase in cyberattacks and unexpected developments in global trends

• Ransomware Threat Shifts from US to EMEA and APAC

• Two flaws in Cisco AnyConnect Secure Mobility client for Windows actively exploited

• Two POS Malware Used by Hackers to Steal Card Details

• Hive Ransomware Claims Cyberattack on Tata Power’s IT Infrastructure [Updated]

• A 2.5 Years-Long Data Breach Discovered on See Tickets Website

• Microsoft Shares Sink After Weak Forecast

• Ubuntu 5700-1: Linux kernel vulnerabilities

• SUSE: 2022:2687-1 ses/7.1/ceph/ceph Security Update

• SUSE: 2022:2693-1 ses/7.1/cephcsi/csi-node-driver-registrar Security Update

• SUSE: 2022:2699-1 ses/7.1/cephcsi/csi-snapshotter Security Update

• SUSE: 2022:2701-1 ses/7.1/ceph/prometheus-alertmanager Security Update

• See Tickets Discloses Major Card Data Breach

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• Hacktivists say they stole 100,000 emails from Iran’s nuclear energy agency

• New Year, new cyber security career

• ICO Warns of “Immature” Biometric Tech

• Hackers Actively Exploiting Cisco AnyConnect and GIGABYTE Drivers Vulnerabilities

• Vice Society Hackers Are Behind Several Ransomware Attacks Against Education Sector

• Fill the cybersecurity talent gap with inquisitive job candidates

• Iran’s Atomic Energy Agency Confirms Hack

• Ubuntu 5688-2: Libksba vulnerability

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• What Should You Look For in a Great VoIP Phone System?

• VMware fixes critical RCE in VMware Cloud Foundation

• Cyber Security Management System (CSMS) for the Automotive Industry

• (ISC)² and the UK Cyber Security Council Professional Standards Pilot Program – What It Means for Members

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• #CybersecurityAwarenessMonth Mentorship Interview Series: Part 1 – Mentors

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• SecurityScorecard launches two cyber threat intelligence solutions to counter threat actors

• Uptycs enhances threat detection capabilities to protect container-based applications

• Scribe Security’s evidence-based security trust hub validates software integrity

• Votiro RetroScan reviews all sanitized files for any previously unknown threats

• Akamai Prolexic enhancements increase protection against rising DDoS threats

• Samsung releases new privacy tool for its Galaxy phones

• FBI alerts students against loan forgiving scams

• The RISC Deprogrammer

• Ransomware down this year – but there’s a catch

• Clearview AI image-scraping face recognition service hit with €20m fine in France

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• VMware Releases Patch for Critical RCE Flaw in Cloud Foundation Platform

• SkyKick Security Manager enables ITSPs to manage Microsoft 365 security

• A quick guide for small cybersecurity teams looking to invest in cyber insurance

• How cybersecurity VCs find visionary companies in emerging sectors

• Protecting organizations by understanding end-of-life software risks

• What consumers expect from organizations that handle their personal data

• Media Alert: Anomali to Participate in the Goldman Sachs Private Innovative Company Conference

• NCR Announces Third Quarter 2022 Results

• F5 Reports 4% GAAP and 3% Non-GAAP Revenue Growth for Fiscal Year 2022; Expects 9% to 11% Revenue Growth and Double-Digit Non-GAAP EPS Growth in Fiscal Year 2023

• Shakeup in Work Modes Pushes Firms to New Solutions

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• If someone tries ransacking your Windows network, it’s a bit easier now to grok in Microsoft 365 Defender

• Health insurer Medibank’s data breach diagnosis keeps getting worse

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• What Is a Distributed Denial of Service (DDoS) Attack?

• Data Exfiltration: Symantec Warns of Exbyte Threat as Hive Group Leaks Tata Data

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• With shots and infections, the most common COVID symptoms have shifted

• Ubuntu 5699-1: GNU C Library vulnerabilities

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• macOS 13 Ventura: The Ars Technica review

• Apple releases patch for iPhone and iPad 0-day reported by anonymous source

• We were not wowed by our first Meta Quest Pro experience

• Alpha02 – The Hunt for the Dark Web’s Biggest Kingpin

• European Parliament Pegasus Investigation Faces Resistance

• FTC slaps down Drizly CEO after 2.4m user records stolen from ‘careless’ booze app biz

• An interview with cyber threat hunter Hiep Hinh

• Loft Labs integrates with Argo CD to automate deployments with virtual clusters

• GoSecure expands partnership with Check Point to improve clients’ cybersecurity defenses

• Cost-Effective Steps the Healthcare Industry Can Take To Mitigate Damaging Ransomware Attacks

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• OPM’s Ahuja gets an earful from agencies over enhanced pay for cyber talent

• The most dangerous and destructive ransomware groups of 2022

• Cryptomining campaign abused free GitHub account trials

• SUSE: 2022:3729-1 important: bind

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• Equifax’s Lessons Are Still Relevant, 5 Years Later

• Cloud-based property assessments speed hurricane recovery

• US Charges Ukrainian ‘Raccoon Infostealer’ With Cybercrimes

• IT Security News Daily Summary 2022-10-25

• Slackware: 2022-298-02: samba Security Update

• SUSE: 2022:3727-1 moderate: xen

• SUSE: 2022:3731-1 important: python-waitress

• SUSE: 2022:3730-1 important: python-paramiko

• SUSE: 2022:3728-1 important: xen

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• 167,000 stolen credit card numbers Exposed via PoS Malware

• Secure corporate emails with intent-based BEC detection

• The Hunt for the Kingpin Behind AlphaBay, Part 1: The Shadow

• Proposed Bylaws Amendments – What They Mean

• Digital twins need more than infrastructure data, expert says

• Top security-by-design frameworks

• How to Recover From a Ransomware Attack

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• Experts disclosed a 22-year-old bug in popular SQLite Database library

• Reminder – (ISC)² Bylaw Voting is Open

• Irresponsibile Malware Operators Squandered an “Undetectable” Windows Backdoor

• Open-source initiative Pyrsia fuels up to boost trust in software supply chain

• Massachusetts moves from data center ‘hodgepodge’ to cloud-driven model

• Windows Mark of the Web Zero-Days Remain Patchless, Under Exploit

• Weekly Update 318

• RedHat: RHSA-2022-7184:01 Important: thunderbird security update

• RedHat: RHSA-2022-7181:01 Important: thunderbird security update

• RedHat: RHSA-2022-7178:01 Important: thunderbird security update

• RedHat: RHSA-2022-7173:01 Important: kpatch-patch security update

• PayPal ditches passwords, at least on Apple devices

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• A national digital strategy for transforming government

• LinkedIn Phishing Spoof Bypasses Google Workspace Security

• CISA Has Added One Known Exploited Vulnerability to Catalog    

• RedHat: RHSA-2022-7187:01 Important: device-mapper-multipath security update

• RedHat: RHSA-2022-7186:01 Important: device-mapper-multipath security update

• SUSE: 2022:3725-1 important: icinga2

• RedHat: RHSA-2022-7185:01 Important: device-mapper-multipath security update

• SUSE: 2022:3726-1 important: MozillaFirefox

• Drew Myklegard named permanent deputy federal CIO

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• CISA Upgrades to Version 2.0 of Traffic Light Protocol in One Week – Join Us!

• CISA Has Added One Known Exploited Vulnerability to Catalog    

• New Cryptojacking Campaign Kiss-a-dog Targeting Docker and Kubernetes

• Umbrella Infrastructure Network Resiliency Strategy

• Afghans Targeted By Facebook Visa And Immigration Scams

• What to do if an email account gets hacked

• Flatiron School Launches 5-Day Enterprise Cybersecurity Program

• TuxCare President to Moderate ManuSec USA Roundtable on Automating Security for Critical Infrastructure

• Envistacom Achieves Capability Maturity Model Integration (CMMI) Level 3 Certification for Products and Services

• Single Chip Transmits All Internet Traffic In A Second

• Apple Fixes New Kernel Zero-Day Bug That Attacks iPhones, iPads Remotely

• CISA: Urgent Patching Needed for Actively Exploited Linux Kernel Flaw

• Linus Torvalds Wants to Drop i486 Support from the Linux Kernel Citing its Age

• Report: 24 million U.S. households have fallen victim to account takeover fraud

• APAC faces 2.1M shortage in cybersecurity professionals

• FTC Targets Drizly and Its CEO Over Cybersecurity Failures That Led to Data Breach

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• Threat Groups Repurpose Banking Trojans into Backdoors

• CISA Releases Eight Industrial Control Systems Advisories

• Why Cyber-Attacks on The Cloud Are Rising and How to Prevent Them

• Why Throwing Money at Cybersecurity Doesn’t Work

• After 5 full-throttle years, Kessel Run is settling in for the long haul

• Apple patches actively exploited zero-day iOS bug

• Data Breaches Rise By 70% Globally in Q3 2022

• HR Departments Play a Key Role in Cybersecurity

• CISA Releases Eight Industrial Control Systems Advisories

• Orange Cyber Defense and Palo Alto Networks Lead with Zero Trust

• New Survey Shows a Strong Start for Passwordless Technology, with Nearly Half of Enterprises Using it in Some Capacity

• Perygee Raises $4.75M Seed Round to Secure the Supply Chain’s Most Vulnerable IoT and OT Devices

• The Cybersecurity Assessor and Instructor Certification Organization Launches Certified CMMC Professional Exam

• TD SYNNEX Launches Data-IoTSolv with Focus on New Data and IoT Solutions

• LATEST CYBERTHREATS AND ADVISORIES – OCTOBER 21, 2022

• Starlink Terminals Smuggled Into Iran – Report

• SUSE: 2022:3717-1 important: libxml2

• SUSE: 2022:3719-1 important: MozillaFirefox

• Keeping Sensitive Data Out of Your Logs

• Free digital signing service aims to bolster software supply chain security

• FCW co-founder Anne Armstrong honored with ACT-IAC award

• Arnica Raises $7 Million to Protect Software Developers, Code

• CISA warns of ransomware attacks on healthcare providers

• Apple Fixes Actively Exploited iOS and iPadOS Zero-Day Vulnerability

• Ransomware Group Bypasses Windows 10 Warnings

• PayPal Introduces More Secure Payments with Passkeys

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• Spyderbat Raises Series A to Deliver Runtime Security Throughout Cloud Native Software Development Environments

• DEV-0832 (Vice Society) opportunistic ransomware campaigns impacting US education sector

• How businesses are gaining integrated data protection with Microsoft Purview

• The TommyLeaks and SchoolBoys Ransomware Gangs Share a Common Enemy

• WhatsApp: Instant Messaging App Services Restored After a 2 Hour Outage

• Five Important Tips for Keeping Your Email Safe

• Upgraded Security Deal Among Japan and Australia Against Chinese Cybercrimes

• LV Ransomware Exploits ProxyShell in Attack on a Jordan-based Company

• Meta Shareholder Urges Job Cuts, Metaverse Spending Reduction

• Oracle8: ELSA-2022-9930: kernel Important Security Update

• Oracle8: ELSA-2022-9931: kernel-container Important Security Update

• SUSE: 2022:3547-1 important: jdom

• SUSE: 2022:3718-1 important: bluez

• SUSE: 2022:3724-1 important: libosip2

• MLsec could be the answer to adversarial AI and machine learning attacks

• Akamai Announces Next Generation DDoS Defense Platform

• US Employees Feel Little Concern for Data Theft at Work, New Research Reveals

• Dealers Report Dramatic Increase in Identity Fraud: Most Lack Effective Protection

• Study Finds Significant Correlation Between BitSight Analytics and Cybersecurity Incidents

• SealPath Data Classification Powered by Getvisibility Applies Artificial Intelligence to Improve Accuracy and Efficiency of Data Labelling and Protection

• Across-The-Board Information Security is Critical for Modern Businesses Long Term Success

• CrowdStrike Falcon Platform Achieves 100% Ransomware Prevention with Zero False Positives, Wins AAA Enterprise Advanced Security Award from SE Labs

• Cloud training for all is critical to migration efforts, experts say

• POS Malware Used to Steal Details of Over 167,000 Credit Cards

• Two PoS Malware used to steal data from more than 167,000 credit cards

• Chrome Extensions with 1M+ Installs Hijack Targets’ Browsers

• Security Leaders are Calling for Industry to Take Action and Programmatically Improve Secure Coding Education

• MSP Market Opportunity Report Finds Cybersecurity as Primary Growth Driver as SMBs Lack Resources to Develop Security Program In-House

• Hive Ransomware Hackers Begin Leaking Data Stolen from Tata Power Energy Company

• 22-Year-Old Vulnerability Reported in Widely Used SQLite Database Library

• Thousands Of Fake PoC Exploits In GitHub Repositories Deliver Malware – Expert Comments

• What Are the Main Attack Vectors in Cybersecurity?

• Apple Cuts iPhone 14 Plus Production – Report

• Palo Alto Networks NextWave Program Provides the Threat Response Community With XDR for Incident Response Fueled by MSSP Demand

• Financial Services Firms Operating Under False Sense of Security

• Duality Launches First Ever Enterprise-Ready Privacy-Enhanced Data Collaboration Platform

• As Vulnerabilities Soar, Slim.AI Launches ‘Container Intelligence’ to Give In-Depth Analysis on Hundreds of Popular Container Images

• Cybersecurity Risks & Stats This Spooky Season

• Researchers Detail Windows Event Log Vulnerabilities: LogCrusher and OverLog

• Commitment to Balance Is Vitally Important for Successful Implementation of CHMR-AP

• Thinking Through the Jan. 6 Committee’s Trump Subpoena

• Payment Card Attack Could Be Worth $3.3M

• WhatsApp Down, Experts Weigh In

• Why Cybersecurity Awareness Month is Every Month

• How Imperva Mitigates Security Threats in Oracle Cloud Infrastructures

• Automotive Retailer Pendragon Refuses to Pay $60 Million Ransom

• World Economy Is Facing Inflation: Is Crypto a Good Investment?

• Fedora 36: libksba 2022-3ef41c3410

• Fedora 36: qemu 2022-8dcdfe7297

• Fedora 36: libxml2 2022-aeafd24818

• Fedora 36: xmlsec1 2022-aeafd24818

• Fedora 36: firefox 2022-a648a9484f

• Serious Security: How randomly (or not) can you shuffle cards?

• AwareID™ Offers Lightning-Fast Identity Verification, Multi-Factor Authentication and Multi-Modal Biometrics in a Single Low-Code platform

• Illusive’s Identity Threat Detection and Response (ITDR) Solution Protects Privileged Accounts

• Akamai Announces Next Generation DDoS Defense P

• Spyderbat Announces Open Source Program for Cloud Native Visibility and Security

• U.S. Employees Feel Little Concern for Data Theft at Work, New Research Reveals

• Service Preview of Red Hat Advanced Cluster Security Cloud Service

• Typosquat Campaign Mimics 27 Brands To Push Windows, Android Malware

• Hackers Exploit Critical VMware Flaw to Drop Ransomware & Miners

• MLSec could be the answer to adversarial AI and machine learning attacks

• Suse enhances edge platform with container control and zero trust security

• How Arnica’s tool keeps supply chain and developers flowing by repelling attacks

• Talking IoT Security at the White House

• Why is HPC in the Cloud?

• The safety of numbers

• #CybersecurityAwarenessMonth Mentorship Interview Series: Part 2 – Mentees

• Tools for Testing Your Proxy Servers

• RedHat: RHSA-2022-7129:01 Moderate: git-lfs security and bug fix update

• RedHat: RHSA-2022-7128:01 Moderate: postgresql:12 security update

• RedHat: RHSA-2022-7119:01 Moderate: mysql:8.0 security, bug fix,

• RedHat: RHSA-2022-7108:01 Moderate: sqlite security update

• RedHat: RHSA-2022-6735:01 Moderate: java-1.8.0-ibm security update

• CISA Warns of Attacks Exploiting Cisco, Gigabyte Vulnerabilities

• Apple Patches Over 100 Vulnerabilities With Release of macOS Ventura 13

• Cybercriminals Used Two PoS Malware to Steal Details of Over 167,000 Credit Cards

• How the Software Supply Chain Security is Threatened by Hackers

• US Charges Alleged Chinese Spies In Telecoms Probe Case

• FBI Warns Ransomware Group Targeting Poorly Protected VPN Servers

• Senator Pushes Zuckerberg On How Facebook Collects Health Information

• Payment Terminal Malware Steals $3.3m Worth Of Credit Card Numbers

• DHL Named Most-Spoofed Brand In Phishing

• Armis Now Available in AWS Marketplace

• How to Make a Shield in Minecraft 2022

• After hackers threatened to target celebrities, Medibank confirmed the impact of a larger cyberattack

• WhatsApp back up and running after two hours down

• A Day in the Life: Working in Cyber Incident Response

• Hive ransomware gang starts leaking data allegedly stolen from Tata Power

• Medibank data breach: More customers affected, attacker got in via stolen credentials

• How to tame a horse in Minecraft 2022

• 5 Best Tools for Remote Patient Monitoring in 2022

• Cybersecurity 2022: 5 Top Considerations Every User Must Be Aware Of

• US Charges Two Chinese Intelligence Officers In Huawei Case

• How to set up two-factor authentication for your Facebook account

• Cybersecurity teams are reaching their breaking point. We should all be worried

• Perygee Scores Seed Funding to Tackle IoT Security

• Jira Align Vulnerabilities Exposed Atlassian Infrastructure to Attacks

• Medibank Confirms Broader Cyberattack Impact After Hackers Threaten to Target Celebs

• WhatsApp Down For Users Around The World

• Debian LTS: DLA-3159-1: libbluray bugfix update

• Why you’re getting cloud security wrong

• Australia seeks stiffer penalty for data breaches amidst spate of security incidents

• Get practice materials for 14 top certification exams for just $20

• Iranian Atomic Energy Agency Admits Email Hack

• Ukraine Warns of Cuba Ransomware Campaign

• The Hunt for the Dark Web’s Biggest Kingpin, Part 1: The Shadow

• Apple fixes exploited iOS, iPadOS zero-day (CVE-2022-42827)

• Ukrainian Governmental Agencies Targeted by Ransomware Attacks

• Emotet Botnet Drops Malware via Self-Unlocking Password-Protected RAR Files

• WhatsApp Down: Users Can’t Send or Receive Messages

• The Interpol Metaverse Was Launched to Help the Fight against Cybercrime

• The Best Bank Mortgage Loans in Singapore

• SUSE: 2022:2663-1 ses/7.1/cephcsi/csi-provisioner Security Update

• SUSE: 2022:2664-1 ses/7.1/cephcsi/csi-resizer Security Update

• SUSE: 2022:2665-1 ses/7.1/ceph/prometheus-node-exporter Security Update

• SUSE: 2022:2666-1 ses/7.1/ceph/prometheus-server Security Update

• SUSE: 2022:2667-1 ses/7.1/rook/ceph Security Update

• US Charges Two Chinese Agents in Huawei Obstruction Case

• What Is A Keylogger? Definition, Types, Examples and Prevention

• 10 Best 3 Point Slingers for Cameras in 2022 – Best Strap to Carry Your Camera

• Best Linux Games for Free 2022 – Great Ubuntu Games

• Gone phishing: UK data watchdog fines construction biz £4.4m for poor infosec hygiene

• Looking for adding new detection technologies in your security products?

• Prioritizing Cybersecurity in Hybrid Environments | Avast

• Dormant Colors campaign operates over 1M malicious Chrome extensions

• DNS Best Practices: A Quick Guide for Organizations

• Intelligent Waves Named 2022 Cybersecurity Government Contractor of the Year by NVTC’s Capital Cyber Awards

• SecurityScorecard Unveils Sophisticated Cyber Intelligence Powering New Solutions to Counter Threat Actors

• Trustwave Launches Enhanced Co-Managed SOC Capabilities to Maximize Value from SIEM Investments

• Employees leaving jobs because of Cyber Attacks

• CISA says hospitals should be wary of new Daixin Team Ransomware

• 3 Ways to Help Customers Defend against Linux-Based Cyberattacks

• Key observations on DDoS attacks in H1 2022

• What closed-source software developers can learn from their open-source counterparts

• Don’t wait for medical device cybersecurity legislation: Act now to save patients’ lives

• Top Cloud Security Challenges & How to Beat Them

• Open Systems Recognized with Microsoft Verified Managed XDR Solution Status

• David LaFalce Joins Business Resilience Council as Chairman

• IDShield Reveals the Top Digital Mistakes that Lead to Identity Theft

• (ISC)² Certified in Cybersecurity and CompTIA Security+: How Do They Create a Path to a Career in Cybersecurity?

• Stories from the SOC:  Feeling so foolish – SocGholish drive by compromise

• How is the Air Force doing at cyber?

• Apple Releases Patch for New Actively Exploited iOS and iPadOS Zero-Day Vulnerability

• The long-term psychological effects of ransomware attacks

• To retain cybersecurity professionals, keep remote work as an option

• ServiceNow releases Lightstep UQL to extend visibility across Kubernetes applications

• Alert: This ransomware preys on healthcare orgs via weak-ass VPN servers

• GoCardless Protect+ enables merchants to identify fraudulent activity

• CyberCube unveils Exposure Databases to allow (re)insurance and broker clients to quantify cyber risk

• Jumio enhances KYX Platform to help businesses combat online identity fraud

• AwareID improves identity authentication processes for enterprises

• Prove Auth empowers companies to reduce reliance on passwords and one-time passcodes

• Protect yourself from scams this Diwali

• Ransomware Masquerading as Microsoft Update Targets Home Computers

• Internal Security

• RedHat: RHSA-2022-7089:01 Important: libksba security update

• RedHat: RHSA-2022-7090:01 Important: libksba security update

• Scale Computing and Mako Networks deliver edge networking solutions for multi-site operators

• A week in security (October 17 – 23)

• Healthcare site leaks personal health information via Google and Meta tracking pixels

• An odd kind of cybercrime: Gift vouchers, medical records, and…food

• A gym heist in London goes cyber

• Cisco warns of ISE vulnerability with no fixed release or workaround

• Apple megaupdate: Ventura out, iOS and iPad kernel zero-day – act now!

• Uncle Sam says these Chinese nationals are Beijing agents breaking the law on US soil

Generated on 2022-10-26 23:55:53.522924