IT Security News Monthly Summary – August

• IT Security News Daily Summary 2021-07-31

• Threat actors leaked data stolen from EA, including FIFA code

• The Silver Bullet for Ransomware’s Golden Goose

• BSides Vancouver 2021 – Josh Sokol’s ‘Measuring Cybersecurity Maturity With The NIST CSF’

• SolarWinds hackers breached 27 state attorneys’ offices

• 3 Redefined Trends for Cyber Security Investing (2021)

• Top 10 Best Free Antivirus Download For PC 2021

• BSides Vancouver 2021 – Patience Mpofu’s ‘In-App Protection For Android: Selecting The Right Platform’

• XKCD ‘Universal Seatbelt’

• ‘Numberless’ bank cards could be the future: here’s why

• The Top 30 Vulnerabilities Include Plenty of Usual Suspects

• Bot that helps hackers write code

• Seven-Fold Surge in Dark Web Ads Providing Corporate Network Access

• Malwarebytes 4.4.4 adds RDP Brute Force Protection among other things

• The Top 30 Cybersecurity Bugs Include Plenty of Usual Suspects

• Aqua Security: 97% unaware of crucial cloud native security principles

• Top Stories: Face ID on Future Macs, Elon Musk Criticizes Apple, and More

• Following a Ransomware Cyberattack, D-BOX Stated it is Gradually Restarting Operations

• Two Belarusian Arrested in Black Box ATM Attack

• Wiper Malware Used in Attack Against Iranian Railway

• Zimbra Webmail Platform Vulnerabilities Discovered That Could Compromise Mail Servers

• ‘Build’ or ‘Buy’ your own antivirus product

• Wiper Malware Threat Looms Over Tokyo Olympics

• Bumper Telegram Update Enables Video Calls With Up to 1,000 Viewers

• Sysadmins: Why not simply verify there’s no backdoor in every program you install, and thus avoid any cyber-drama?

• Weekly Update 254

• Android Banking Trojan Vultur uses screen recording for credentials stealing

• Northern Virginia Talent Initiative Website Draws 483,000 Visitors and 72,000 Job Views

• CloudCover Announces Two New Appointments to Board of Directors

• New Harris Poll: Cybersecurity Fears May Stall COVID-19 Digital Vaccine Card Adoption in the United States and United Kingdom, Identity Theft and Fake Cards Top List of Concerns

• How can Digital First banking benefit financial institutions?

• Zerto 9 brings immutability and automation for ransomware resilience

• Watch out for these scams, targeting Amazon’s customers

• Week in security with Tony Anscombe

• GDPR: What Cloud Service Providers Should Know

• BehavioSec extends its behavioral biometrics platform into a SOC/ISO compliant SaaS version

• White House says agencies will pay for COVID tests as needed for feds

• Ransomware attempt volume sets record, reaches more than 300 million for first half of 2021: SonicWall

• Infosys implements its IaaS solution for SPS in collaboration with Hitachi Vantara

• Securitas acquires Protection One to enhance its protective services capabilities in Germany

• This ethical hacking course could give your cybersecurity career a boost

• LogicGate raises $113M to fuel innovation and accelerate growth

• OpenSSF adds new members from around the globe to improve OSS security

• Top Microsegmentation Software for 2021

• API Attack Traffic Grew 300+% In the Last Six Months

• Crooks using phony call centers to spread ransomware via BazaCall attacks

• IT Security News Daily Summary 2021-07-30

• Identity Governance 101: Popular User Stories

• 6 ways to protect your pharma company from cyberattacks

• NSA Warns Public Networks are Hacker Hotbeds

• Friday Squid Blogging: Squid Skin Is Naturally Anti-microbial

• What’s New With Find My in iOS 15: Tracking When iPhone is Off, Live Locations, Locate After Erase and More

• Create a VirtualBox virtual machine backup on a Linux host for security

• Commerce bots speed HR services delivery

• The SysAdmin Class for the World’s Greatest Role-Playing Game

• Senate-passed bill looks to modernize federal contracting, expand small business opportunities

• Ransomware risk management: How to start preparing for the future now

• Secure applications with Keycloak authentication tool

• Keycloak tutorial: How to secure different application types

• The New McAfee: A Bold New World of Protection Online

• 5 Ways to Increase Password Safety

• Indiana to test EV charging concrete

• Use ISO 22332 to improve business continuity plans

• Free Ransomware Decryption Site Celebrates Milestone as New Threats Emerge

• BSides Vancouver 2021 – June Jeremiah’s ‘Human Vulnerability Management And Assessment In the Age of Zero Trust’

• ‘Unicorn Hunters’ Show Starring Steve Wozniak and Lance Bass Seeks TV Distribution

• This Week in Security News – July 30, 2021

• What the evolution of AI/ML means for government IT

• MacRumors Giveaway: Win an Everyday Briefcase and Magnetic Sleeve for Mac From Harber London

• Algorithm could improve how self-driving cars take on narrow streets

• CVE-2021-3490 – Pwning Linux kernel eBPF on Ubuntu machines

• LemonDuck no longer settles for breadcrumbs

• Implementing a Forgot Password Flow With Pseudo-Code

• Cyber-physical attacks: Top 5 things to know

• Top 5 things to know about cyber-physical attacks

• Cryptomining scams target Android app users

• People of JumpCloud | Ryan Conway

• I Am Parting With My Crypto Library

• Elon Musk: Apple’s App Store Fees Are a ‘De Facto Global Tax on the Internet’

• Kais Saied’s Power Grab in Tunisia

• CISA debuts vulnerability disclosure platform

• DDoS attacks are down 38.8% in Q2 2021

• Estonian Hacker Steals 300,000 Government ID Photos

• Elon Musk Reportedly Demanded to Become Apple CEO as Part of Potential Tesla Acquisition [Update: Musk Denies]

• Apple Shipped More Tablets Than Samsung and Amazon Did Combined Last Quarter

• READY for What’s New at (ISC)² Security Congress in 2021?

• Fidelis Vulnerability and Trends Report – Q2 2021

• Why digital issuance is the perfect recipe for modern financial services

• Russian APT29 Used 30+ C&C Servers Uncovered Linked to “WellMess” Malware

• XAMPP Hosts are Employed to Distribute Agent Tesla

• Severe Shopify Flaw Exposed GitHub Access Token And Source Code Repositories

• Elon Musk Reportedly Demanded to Become Apple CEO as Part of Potential Tesla Acquisition

• Here’s 30 servers Russian intelligence uses to fling malware at the West, beams RiskIQ

• Amazon penalized 746m Euros over Data Security in UK

• BrandPost: Zero trust’s missing link: application whitelisting

• DOS (disk operating system)

• Russia’s APT29 Still Actively Delivering Malware Used in COVID-19 Vaccine Spying

• Android Banking Trojan ‘Vultur’ Abusing Accessibility Services

• Enterprises look to formalize WFH network architecture

• Javascript Scanning Now Supported In Jetbrains IDEs: Intellij IDEA, Webstorm, and More

• Spear-phishing now targets employees outside the finance and executive teams, report says

• CSO Global Intelligence Report: The State of Cybersecurity in 2021

• Securing the Software Supply Chain

• FCW Insider: July 30, 2021

• Globally connected data can safeguard the defense industrial and technology base

• Novel Meteor Wiper Used in Attack that Crippled Iranian Train System

• Statue of Liberty is a Monument to Abolition of Slavery

• Revamped Apple Maps Now Being Tested in Italy

• Deals: Shop the Best Tech-Related Back To School Sales From Twelve South, Nimble, Nomad, and More

• private key

• Iranian Hackers Posed as Aerobics Instructors to Target Aerospace Employees

• HTML Smuggling is a New Threat Targetting Browsers

• Eight New Games Came to Apple Arcade This Month, Including ‘Solitaire Stories,’ ‘Ultimate Rivals: The Court,’ and ‘Detonation Racing’

• Apple Patched Zero-Day Bug Under Attack For Mac and iOS Devices

• Critical Shopify Vulnerability Exposed GitHub Access Token And Shopify Repos

• Massive Cyberattack Led to Khaos in Iranian Train System

• Chinese Cybercriminals Implant PlugX Variant on Hacked Exchange Servers

• Window of Exposure is Expanding and Hackers Know Exactly Where to Strike

• New Chinese Threat Group ‘GhostEmperor’ Targets Governments, Telecom Firms

• Inside The Bitcoin Mine With Its Own Power Plant

• Security Team Finds Crimea Manifesto Buried In VBA Rat

• Cisco Researchers Spotlight Solarmarker Malware

• Vultur Bank Malware Infests Thousands Of Devices

• What is a VPN and why do you need one? Everything you need to know

• ProtonVPN gets serious speed boost with VPN Accelerator

• IBM: Average Cost of Data Breach Exceeds $4.2M

• Top 30 Critical Security Flaws Most Used by Cybercriminals

• “Beijing One Pass” Employee Benefits Software Exhibits Spyware Characteristics

• Cybercriminal Arrested For Stealing 286K ID Scans from Estonia Government Database

• Building Effective Business Cases to Cover Cybersecurity Costs

• CISA Announces Vulnerability Disclosure Policy (VDP) Platform

• How to Secure Your Wireless Devices?

• Google Explains New Safety and Privacy Guidelines for Android Apps

• BrandPost: Lessons in Security: School District Shares Pandemic Experiences

• Crippling attack on Iranian trains linked to Meteor file wiper malware

• Remote Code Execution Flaws Patched in WordPress Download Manager Plugin

• S3 Ep43: Apple 0-day, pygmy hippos, hive nightmares and Twitter hacker bust [Podcast]

• Google Workspace vs. G Suite: Demystifying Google Workspace

• iPhone 13 and Redesigned MacBook Pro Chip Production Hit With Gas Contamination

• Connectedness and Culture: My Summer as an Employee Programs Intern

• TSMC Warns Of Gas Contamination At Key Chip Factory

• Microsoft: This unusual Windows and Linux malware does everything it can to stay on your network

• Microsoft Shares More Information on Protecting Systems Against PetitPotam Attacks

• Why I Joined Cisco Security and Its Culture of Innovation and Inclusion

• Amazon Online Sales Growth Slows Amid Lockdown Easing

• VPN deal: Save 30% on the highest-rated VPN services

• The Privacy Battle That Apple Isn’t Fighting

• Storing Encrypted Photos in Google’s Cloud

• New PayPal Credential Phishing Scam Conducted Via Live Chat Service

• Cybercriminals Use Chipotle’s Marketing Account for Phishing Attacks

• Stellar Converter for EDB Review – Advanced Tool to Convert EDB Files to PST

• Microsoft Alerts Users About PetiPotam NTLM Relay Attack

• UC San Diego Health Discloses Data Breach Exposing Personal Information

• Biden memo, infrastructure deal deliver cybersecurity performance goals and money

• 21-Year-Old Woman Pleads Guilty to Sending Phishing Emails to Political Candidates

• Google To Tempt iOS Users With Android Switch App

• Check Point Software Wins Microsoft US Award for Energy, Emphasizing Commitment to Customers

• Microsoft warns: These attackers can go from first contact to launching ransomware in just 48 hours

• HTML smuggling is the latest cybercrime tactic you need to worry about

• S.Africa’s Port Terminals Restored Following Cyber-Attack

• UBEL is the Android Malware Successor to Oscorp

• Malicious Linux Shell Scripts Used to Evade Defenses

• MeteorExpress Wiper Responsible for the Iranian Railway Attack

• 18 arrested for smuggling more than 490 migrants across the Balkan route

• Experts Uncover Several C&C Servers Linked to WellMess Malware

• Security Recruiter Directory

• CSO’s guide to the worst and most notable ransomware

• DevSecOps Training – Data Center Attack: The Game

• Belarusian Nationals Arrested for Hacking ATMs Across Europe

• 5 Encrypted Messaging Apps for Mac, iPhone, and iPad

• 8 arrests following the seizure at sea of 15 tonnes of hashish by Spanish authorities

• Several Malicious Typosquatted Python Libraries Found On PyPI Repository

• Tech Mahindra CEO on using blockchain for financial services and healthcare solutions

• New Aussie legislation to target use of personal information by social media

• A New Wiper Malware Was Behind Recent Cyberattack On Iranian Train System

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• Malware and Trojans, but there’s only one horse the boss man wants to hear about

• Cyberresilience: Your Data Insurance Policy

• Apple Now Accepting UPI, Rupay Cards and Net Banking for App Store Payments in India

• New infosec products of the week: July 30, 2021

• Phony Call Centers Tricking Users Into Installing Ransomware and Data-Stealers

• Why RaaS Has Become Easier to Launch

• Meteor was the wiper used against Iran’s national railway system

• Estonia ‘s police arrested a Tallin resident who stole 286K ID scans from a government DB

• Why isn’t cloud backup part of common security practices?

• We can’t believe people use browsers to manage their passwords, says maker of password management tools

• Pourquoi le concept de Confiance Zéro est-il plus important que jamais?

• Engaging with governments is a data security priority

• How to thwart phone hackers

• DarkTrace Cyber Protects Fashion retailer Ted Baker

• How to Protect Yourself from Gift Card Scams

• What should IT leaders look for in an SD-WAN solution?

• Clubhouse Ditches Exclusivity with General Release | Avast

• Google claims no instances of foreign interference campaigns targeting Australia

• Curious to see how healthcare cybersecurity fared this year?

• Cybersecurity Professionals to Newcomers: Focus on Vendor-Neutral Certifications

• Six existential threats posed by the future of 5G (Part Two)

• Most marketers support federal consumer privacy protections

• Cloud and security are top priorities for MSPs

• Disinformation for hire: PR firms are the new battleground for Facebook

• Employees want more AI in the workplace to improve productivity and decision making

• WhiteSource Cure accelerates the delivery of secure software at scale

• ZeroFox’s external threat hunting capabilities give analysts complete access to raw threat intelligence

• Hikvision records 40% net profit uplift for 1H21 despite of COVID-19 and political conflict

• Tackling the insider threat to the new hybrid workplace

• Leading cybersecurity agencies reveal list of most exploited vulnerabilities of the past 2 years

• Threat Stack provides full-stack observability into Amazon EKS on AWS Fargate

• TrapX DeceptionGrid 7.2 protects containers against cryptojacking and other malicious attacks

• Be The Strongest Link In Your Organization’s Supply Chain

• How Digital ID can help citizens access government services from anywhere

• Inmarsat ORCHESTRA integrates GEO, LEO and terrestrial 5G into one solution

• Entrust nShield HSMs brings cryptographic services to VMware Tanzu Kubernetes Grid

• DVL services from Windstream Enterprise modernize existing telephony environment

• D-Link EAGLE PRO AI series optimizes the performance of home networks

• Bosch enhances Praesensa portfolio with new ambient noise sensor

• Home Affairs asks for a rush on Critical Infrastructure Bill to allow ASD to act lawfully

• Cisco researchers spotlight Solarmarker malware

• Ransomware attacks: How to protect against real-life data hostage threats

• A Zero Trust Model for Securing Communications and Collaboration

• CIS Secure expands portfolio of TSG devices with Poly 8300 conference phone

• UfiSpace releases S9600 series open aggregation routers for broadband and mobile operator networks

• Extreme Networks AP4000 platform delivers Wi-Fi 6E technology for high-density environments

• China Cracks Down On Its Tech Giants. Sound Familiar?

• Russian module suddenly fires thrusters after docking with space station

• Blizzard confirms developer named in lawsuit was removed for “misconduct”

• Feds list the top 30 most exploited vulnerabilities. Many are years old

• U.S. in Crisis with Massive Shortfall of 500,000 Cyber Workforce Jobs

• Terranova Security partners with Security Innovation to provide cyber security training for organizations

• Deloitte collaborates with Palo Alto Networks to offer zero trust and multi-cloud cybersecurity solutions

• Security team finds Crimea manifesto buried in VBA Rat using double attack vectors

• Apple Pay Promo Offers Discounts for SONIC, HotelTonight, and ParkWhiz

• McAfee and FCN secure $281M contract from the U.S. Department of Veterans Affairs

• Fusion Risk Management appoints Katie Burgoon as CHRO

• Treeverse raises $23M to improve lifecycle management of data lakes

• DHS’s Flawed Plan for Mobile Driver’s Licenses

• Raffle House Breach Exposed Hun-dreds of Thousands of User Details

• 2 new ransomware gangs Haron, BlackMatter appear after REvil, DarkSide

• How to Maintain Cybersecurity in the Remote Work Era

• The Bipartisan Broadband Bill: Good, But It Won’t End the Digital Divide

• IT Security News Daily Summary 2021-07-29

• Building a resilience framework from phone location data

• Driving a more intelligent, integrated travel experience

• NYC’s early warning system for infectious diseases

• Fortinet beats Wall Street expectations for Q2 thanks to sales in the Americas

• July 2021 Security Intelligence Roundup: Ransomware, Security by Design and How to Analyze in Windows With Frida

• security token

• Biden tells civilian feds to get vaccinated or take regular COVID tests

• As Legged Mobility Improves Efficiency, Wheeled Transit Appears Toxic to Environment

• El impacto del trabajo remoto en la nueva TI: la encuesta global de ManageEngine

• IT leaders put growth over security, survey finds

• BrandPost: Securing Hybrid Data Centers and Preventing Ransomware

• BrandPost: Securing the Digital Infrastructure with Integrated Security Services

• DHS recent hiring sprint shows promise, but lawmakers still see gaps in the federal cybersecurity workforce

• UC San Diego Health Breach Tied to Phishing Attack

• BSides Vancouver 2021 – Tanya Janca’s ‘Building Security Champions’

• Why a Cyber Pearl Harbor Will Never Happen

• When coin miners evolve, Part 2: Hunting down LemonDuck and LemonCat attacks

• API Security Weekly: Issue #144

• CISA’s Top 30 Bugs: One’s Old Enough to Buy Beer

• How to ensure your vendors are cybersecure to protect you from supply chain attacks

• The evolution of spear phishing and who criminals are targeting

• How to remove or update a single entry from the SSH known_hosts file

• How to Simplify Access to S3 and Stop Spillage

• Badmouthing of federal gov hurts cybersecurity recruiting

• What are Common Types of Social Engineering Attacks?

• BlackMatter and Haron, two new ransomware gangs in the threat landscape

• It’s Time for Police to Stop Using ShotSpotter

• Google, Facebook To Require Covid Vaccinations For Office Return

• Veracode CEO Sam King Named a Winner in the EY Entrepreneur Of The Year® New England Award

• XKCD ‘Flawed Data’

• Evaluating the Accessibility of Different MFA Factors

• A new chapter for Google’s Vulnerability Reward Program

• Researchers Publish Details on Recent Critical Hyper-V Vulnerability

• ‘Playdate’ Handheld Game System Now Available for Pre-Order

• Apple Releases watchOS 7.6.1 With Security Updates

• U.S. Leads Coalition Accusing China of Hacking

• New Android Banking Malware Recording Screen, Keylogging & Spy Android Users Via VNC

• The Life Cycle of a Breached Database

• Israeli Government Agencies Visit NSO Group Offices

• BlackMatter & Haron Targeting Firms with Revenue of $100 Million and More

• The Russian Federation submitted to the United Nations the world’s first draft convention against cybercrime

• I Am Excited About the Social Impact of Arkose Labs

• Deals: New Discounts Arrive for Apple’s MagSafe and MagSafe Duo Chargers (Save Up to $27)

• Apple Preparing to Occupy 200,000 Square Feet of Temporary Space Ahead of New $1 Billion North Carolina Campus

• Microsoft at Black Hat 2021: Sessions, bug bounty updates, product news, and more

• Attack AI systems in Machine Learning Evasion Competition

• 4 Tips for Reducing Your Company’s Cyber Exposure

• Microsoft provides more mitigation instructions for the PetitPotam attack

• Death Kitty Ransomware and BlackMatter Ransomware details

• Israeli Government Officials ‘Visit’ NSO Offices

• Managed cybersecurity startup SolCyber emerges from stealth with $20M

• BlackMatter rises from the ashes of notorious cybercrime gangs to pose new ransomware threat

• Spam is Chipotle’s secret ingredient: Marketing email hijacked to dish up malware

• How Low-level Hackers Access High-end Malware

• CISA unveils list of most targeted vulnerabilities in 2020

• Raven Hengelsport Data Breach Exposes 18GB of Customer Data

• Critical Capabilities for Cloud Workload Protection Platforms

• 2021 CyberMarket Movements

• Introducing MVISION Cloud Firewall – Delivering Protection Across All Ports and Protocols

• Check Point CloudGuard Improves Google Cloud Security with Exciting New Capabilities for Managed Instance Groups

• Agencies have proposed more than $2B in TMF projects since new funding was approved

• Upcoming Android privacy changes include ability to blank advertising ID, and ‘safety section’ in Play store

• BlackCloak Raises $11 Million for Its Executive Protection Platform

• Hackers Exploit Microsoft Browser Bug to Deploy VBA Malware on Targeted PCs

• GarageBand for iPhone and iPad Gets All-New Sound Packs From Top Artists Like Dua Lipa and Lady Gaga

• BazaCall: Phony call centers lead to exfiltration and ransomware

• Crimea “manifesto” deploys VBA Rat using double attack vectors

• Facebook Warns Of ‘Significant’ Slowdown In Growth

• Crypto Exchange Scams | Avast

• Reviewing An Ugly Truth | Avast

• Leaked Files From Offensive Cyber Unit Show Iran’s Interest in Targeting ICS

• Browser Hijacking: Definition, Removal and Prevention Guide

• Cyberattacks Could Cause ‘Real Shooting War’, Biden Warns

• Organizations are Making Incremental Investments on Modifying Web Application Firewall to Stay Ahead of Cybersecurity Threats

• Apple Fixed The Nasty iOS WiFi Bug With The Latest iOS 14.7

• Be Wary Of Fake Windows 11 Installers Bundled With Malware

• BrandPost: Defend Against Ransomware With Relationship-Driven Incident Response

• How to attend Black Hat USA 2021 and DEF CON 29 virtually

• Turn Off, Turn On: Simple Step Can Thwart Top Phone Hackers

• Veracode CEO Sam King Crowned a Winner in the EY Entrepreneur of the Year® New England Award

• Apple Releases Trailer for Season Two of ‘See’ Ahead of August 27 Premiere

• Risks in Telecommunications IT

• New Android Malware Spying its Victims and Stealing Passwords via VNC

• Biden: Major Cyberattack Could Trigger a “Real Shooting War”

• Uber Breached Australians’ Privacy Following 2016 Attack

• Protect: The Second Pillar in Your Journey to Improve Industrial Cybersecurity Posture

• MSSP SolCyber Emerges From Stealth With $20 Million Series A Funding

• Why Fight Uphill? Level the Playing Field with SaaS OT Security.

• How to use a keystrokes per hour test to understand when you focus best

• Cybereason Offers Comprehensive Visibility and Protection for Diverse Systems

• Apple Warned Leakers About Misleading Third-Party Accessory Makers

• U.S. Policy Can Reduce the Spread of Russia-Based Ransomware

• Researchers Link Mysterious ‘MeteorExpress’ Wiper to Iranian Train Cyberattack

• Feds List The Top 30 Most Exploited Vulnerabilities

• Reboot Of PunkSpider Tool At DEF CON Stirs Debate

• Call For Hungarian Ministers To Resign In Wake Of Pegasus Revelations

• Israeli Authorities Inspect NSO Offices After Damning Investigation

• DoppelPaymer Gets a Rebranding

• Apple Patent For Embedded In-screen Touch ID, Face ID

• Six Malicious Linux Shell Scripts Used to Evade Defenses and How to Stop Them

• “Real Estate for a Purpose”: Cisco unveils hybrid work plans and tech to support distributed teams

• LogicGate Raises $113 Million in Series C Funding

• Administrator’s Guide, Part 4: Phases of a Passwordless Rollout

• The Modern Security Operation Center

• Integrating Acunetix with Azure DevOps services for CI/CD

• Google Shares Additional Information on Play Store Privacy Labels Launching Next Year

• Could the LGBTQ Community Be a Target of Internet Threat Actors?

• Hackers used never-before-seen wiper in recent attack on Iranian train system: report

• Dump Google Chrome and keep (almost) all the benefits

• Ransomware: These are the two most common ways hackers get inside your network

• AirDropped Gun Photo Causes Terrorist Scare

• Synopsys Rapid Scan helps developers build secure apps with faster, accurate application security testing

• Google Details New Privacy and Security Policies for Android Apps

• Phantom Warships Are Courting Chaos in Conflict Zones

• Of course you can’t trust scientists on politics

• Neuralink Rival Synchron Wins FDA Approval For Brain Interface Trial

• McAfee: Babuk ransomware decryptor causes encryption ‘beyond repair’

• Mozilla adds new features to its VPN service, raises prices for some users

• Fake clothes and luxury items worth € 16.5 million seized in Spain

• LockBit 2.0, the first ransomware that uses group policies to encrypt Windows domains

• Microsoft: Zero Trust security just hit the mainstream

• eCommerce Fraud Prevention Firm Riskified Prices IPO at $21 Per Share

• New Ransomware Gangs — Haron and BlackMatter — Emerge on Cybercrime Forums

• APT trends report Q2 2021

• LG To Sell Apple iPhones In Stores, After Phone Exit

• CERT-In and Its Role in Securing India’s Cyber Space

• Facebook Reports Record Ad Revenue for Q2 2021, Despite Apple’s iOS Privacy Changes

• Buying and Selling Computer Vulnerabilities – Intego Mac Podcast Episode 198

• New US CISO appointments, July 2021

• 10 security tools all remote employees should have

• Quick Hits

• FCW Insider: July 29, 2021

• Best Practices to Thwart Business Email Compromise (BEC) Attacks

• Three Free Secure Email Hosts That Protect Your Data

• Serious Vulnerabilities Found in Firmware Used by Many IP Camera Vendors

• Russian-speaking hackers arrested in Poland over ATM jackpotting attacks

• Bugs in the Zimbra Server Could Lead to Unrestricted Email Access

• Data of 100 Million JustDial Customers Left Unsecured for Over a Year

• New Android Malware Uses VNC to Spy and Steal Passwords from Victims

• Cybercrime Explained – A Brief Guide to the Dangers of the Online World

• Tech Support Scammer Language | Avast

• Top 30 Critical Security Vulnerabilities Most Exploited by Hackers

• ManageEngine reconnu dans le Magic Quadrant Gartner 2021 pour la gestion des informations et événements de sécurité pour la cinquième fois!

• The Perils of Cyber Insurance

• Bang & Olufsen Announces First Noise-Canceling True Wireless Earbuds

• More than 1 in 5 exploits sold on the Dark Web are over three years old

• Hacking group targets American defence contractors with aerobics instructor persona

• Elevating Web App Security to a National Priority

• Critical flaw in Microsoft Hyper-V could allow RCE and DoS

• Biden signs national security directive to boost critical infrastructure cyber defences

• Want to add antivirus to your existing portfolio?

• Phishing Attacks Often Target Small Businesses – Here’s What to Watch for

• Pushing the Limits of IDaaS with AMaaS

• Israeli authorities investigate NSO Group over Pegasus spyware abuse claims

• Zens Debuts New 4-in-1 Wireless Charger for iPhone 12

• As Time to Fix Flaws Ticks Up, Mitigation Efforts Fall Short

• How can secure KVM technology help eliminate security risks?

• ‘Woefully insufficient’: Biden administration’s assessment of critical infrastructure infosec protection

• Here’s a list of the flaws Russia, China, Iran and pals exploit most often, say Five Eyes infosec agencies

• Average total cost of a data breach increased by nearly 10% year over year

• Upgrade to BIG Iron for better Cloud, AI and security support on IBM

• Hackers Cyber Attack UK Aerospace Company by posing a beautiful Aerobics instructor

• Ransomware can penetrate quickly, significantly damaging an organization

• ‘Woefully insufficient’: Biden administration’s assessment of critical infrastructure protection

• Competition main force behind increased cloud migration

• Over 100 Taiwanese political figures’ messages leaked outta LINE app

• Trending: 4,500+ Cyber Pros Enroll in Free (ISC)2 Ransomware Course in Less Than a Month in Order to Fortify Their Preparedness and Response Skills

• Implementing Controls Without Breaking Everything (Including the Bank)

• The Bitglass Blog

• Dark web ads offering corporate network access increase seven-fold

• Babuk: Biting off More than they Could Chew by Aiming to Encrypt VM and *nix Systems?

• Lack of email validation and opt-in processes hinder organizations from achieving compliance

• TA456 – Iranian Hackers Attack Defense Contractors with Malware To Exfiltrate Sensitive Data

• IT employment rose for the 11th consecutive month

• New Relic releases HIPAA-compliant observability platform with access to all telemetry data

• LexisNexis Fraud Intelligence Synthetic Score improves synthetic identity fraud detection

• SpecterOps BloodHound Enterprise enables organizations to eliminate critical AD attack paths

• Acronis Cyber Protect Cloud’s protection pack boosts cybersecurity for MSPs

• Trifacta’s pre-built cloud data engineering templates accelerate modern data management

• Optiv Security Zero Trust Readiness Assessment strengthens network infrastructures

• Aqua Platform helps security teams to secure cloud native environments

• Apple releases patch for zero‑day flaw in iOS, iPadOS and macOS

• Booking your next holiday? Watch out for these Airbnb scams

• Most Twitter users haven’t enabled 2FA yet, report reveals

• Datadobi unveils unstructured data mobility engine for unstructured data management market

• Lawmakers propose mandatory legacy IT audit in NDAA

• Microsoft researcher found Apple 0-day in March, didn’t report it

• Nintex Workflow Cloud enhancements optimize business processes and workflows

• BrandPost: Cloud Workload Security: The Importance of Network Data

• How voice biometrics can protect your customers from fraud

• Hackers breach UC San Diego hospital, gaining access to SSNs and medical info of patients, employees, and students

• At-Bay raises $185M to launch new products and expand into new markets

• NS1 integrates with OpenStack Designate to improve application delivery and connectivity

• Enveil partners with Sayari to expand secure and private usage and access

• Digital Guardian DLP for Microsoft Teams reduces the risk of sensitive data loss

• Disentangling Disinformation: Not as Easy as it Looks

• The real cost of data breaches and cyberattacks

• Mavenir appoints Bejoy Pankajakshan as CTSO

• Accenture Federal Services gets $729M contract to help the U.S. Army CECOM transform its ERP system

• NIST seeks input on AI risk management framework

• Aumentando o desempenho com soluções de monitoramento de rede

• Enhance everyday transactions: How contactless is an upgrade to EMV

• Por que ManageEngine PAM360 é a solução definitiva de gerenciamento de acesso privilegiado

• Segurança de TI sob ataque: por que a participação em grupos é tão importante?

• Mastercard Start Path program accelerates innovation around digital asset technology

• Kevin Thompson joins Brinqa as Executive Chairman of the Board

• FBI, CISA Reveal Most Exploited Vulnerabilities

• Everything New With Siri in iOS 15: On-Device Processing, Offline Support, Sharing, Improved Context and More

• IT Security News Daily Summary 2021-07-28

• Defending IT infrastructure with analytics

• ARPA and the infrastructure bill don’t look like calls for advanced analytics – but they are

• Florida taps education analytics platform to boost employment

• Former Facebook Insider Says The Company Profits Too Much From Misinformation To Change

• BlackMatter, a new ransomware group, claims link to DarkSide, REvil

• Biden orders CISA and NIST to develop cybersecurity performance goals for critical infrastructure

• New ‘BlackMatter’ ransomware gang has echoes of REvil

• Ministerio de Educación de Costa Rica obtiene una mejor visibilidad de su infraestructura

• Why You Need to Get Serious About Multi-Factor Authentication

• Cybersecurity in Supply Chain Management, Risks to Consider

• Lawmakers Seek To Hold Facebook Accountable For Harmful Content

• US, UK, and Australian agencies warn of top routinely exploited issues

• Hushpuppi Pleads Guilty: Sentence Estimate? 11-14 Years

• Biden signs memo ordering CISA and NIST to develop cybersecurity performance goals for critical infrastructure

• Many U.S. Apple Retail Stores Again Require Customers to Wear Masks

• Should Congress Close the FBI’s Backdoor for Spying on American Communications? Yes.

• Security breaches where working from home is involved are costlier, claims IBM report

• 8 Security Tools to be Unveiled at Black Hat USA

• A vaccine requirement for feds could get complicated

• BlackMatter & Haron: Evil Ransomware Newborns or Rebirths

• Best practices for user access review

• XKCD ‘Dual USB-C’

• BSides Vancouver 2021 – Rob Slade’s ‘Presenting Technical Evidence In Court’

• Nintendo Discontinuing Dr. Mario World iOS Game

• Payment Security: Understanding the Four Corner Model

• TSA ramps up fuel pipeline cyber strategy

• Apple Says Don’t Buy AirTag Replacement Batteries With Bitter Coating

• Google Reveals ‘New Chapter’ For Bug Bounty Program

• Average organization targeted by over 700 social engineering attacks each year: report

• Reboot of PunkSpider Tool at DEF CON Stirs Debate

• Data breach costs hit record high due to pandemic

• US Acting to Better Protect Infrastructure From Cyberthreats

• Unhacked: 121 tools against ransomware on a single website

• Good catch in joint actions targeting illegal fishing

• Stylish Magento Card Stealer loads Without Script Tags

• Apple Considering Vaccination Requirement for Employees Returning to Offices

• EFF at 30: Freeing the Internet, with Net Neutrality Pioneer Gigi Sohn

• macOS Malware Now Steals Account Logins Of Telegram, Chrome, And More

• Apple Releases New Public Betas of iOS 15, iPadOS 15, watchOS 8, and tvOS 15

• Apple Releases New macOS 12 Monterey Public Beta

• Lawfare Live: What’s Going on With Jan. 6 Congressional Investigations and Civil Litigation?

• The Olympics: a timeline of scams, hacks, and malware

• July 2021 Web Server Survey

• The State of Blockchain Applications in Cybersecurity

• BSides Vancouver 2021 – Michael Cavallin’s ‘Attacking Zero Trust Designs In 2021’

• Google Maps Gains Home Screen Widgets on iPhone

• Iranian state-backed hackers posed as flirty Scouser called Marcy to target workers in defence and aerospace

• Four Questions about SASEDay 21 with Bitglass’ Kevin Sheu

• Bitglass Security Spotlight: Misconfigured, Unsecured Cloud Platforms and Averted Attacks

• Now is the Time To Rethink Your BYOD Security Strategy: Q&A with Cybersecurity Insiders Founder, Holger Schulze

• The Future of Work is Hybrid – Is Your Security Ready?

• Native Security: Cure or Disease?

• How to be safely connected while travelling?

• Facebook Pauses Sales Of Oculus Quest 2 VR Headset Over Skin Complaints

• Hackers posed as aerobics instructors in malware attack on defense contractors

• Open Source is Revolutionizing Careers in Cybersecurity – What You Need to Know>

• How the Dark Web enables access to corporate networks

• Several Security Flaws Found in 3 Open-Source Software

• No More Ransom Saves Victims Almost €1B Over 5 Years

• Signal Patches Zero-Day Bug in its Android App

• Chinese cyberspies used a new PlugX variant, dubbed THOR, in attacks against MS Exchange Servers

• Think twice before using Olympics sports in your password

• Zero Trust Adoption Report: How does your organization compare?

• Microsoft Windows and Linux machines are vulnerable to LemonDuck Malware

• In the First Half of 2021, HP Found that 75% of Threats Came via Email

• LockBit Now Encrypts Windows Domains Using Group Policies

• US Gov Warning: VPN, Network Perimeter Product Flaws Under Constant Attack

• Foxit Plugs Multiple Security Holes in PDF Reader, Editor

• Anitian Recognized as a Vendor in Three Gartner Hype Cycle Reports

• How to cyber security: Addressing security fatigue

• Apple Supplier TSMC Readies 2nm Chips for 2024

• New cybersecurity technique keeps hackers guessing

• Microsoft Thrives Thanks To Azure Growth

• Cyber Shield 21 | Avast

• The Hacker Mind Podcast: Hacking Charity

• Hands-On With Sonnet’s DuoModo Modular Desktop Enclosures and eGPU

• buffer overflow

• Cyber Asset Management Platform Noetic Launches With $20 Million in Funding

• World-Class OTT Streaming from MwareTV with Akamai

• Software-Defined Networking Concept Adoption at Akamai

• Apple Posts Record Breaking Profit, But Warns Of Chip Shortage

• 5 must-try user flow diagramming tools for UX designing 2021

• It’s All About You: McAfee’s New All-Consumer Focus

• AST New 100% Mobile Friendly Magazine Now Live (Multi-Video)

• Leveraging People in the Email Security Battle

• Hospital Network Reveals Cause of 2020 Cyberattack

• IBM Cost of a Data Breach study: average Cost of Data Breach exceeds $4.2M

• Deals: Amazon Taking Up to $100 Off 2021 iPad Pro Models

• ‘Today at Apple’ Session Explores How to Shoot and Edit ‘Otherworldly’ Photos in Night Mode on iPhone

• Cybersecurity for Small Businesses. What Can You Do to Protect Your Business from Cyber Threats?

• Survey Shows Reasons for Cloud Misconfigurations are Many and Complex

• Fake Windows 11 Installers are Being Used to Spread Malware

• Hackers Applying HTML Smuggling To Distribute Malware

• Cyberattacks Zero in Tokyo Olympics as Games Begin

• Boosting performance with network monitoring solutions

• Ermetic Joins AWS ISV Accelerate Program to Streamline Customer Experience

• Put Your AppSec Program in the Fast Lanes with the New NIST Standards for Security Testing.

• CISO Stories Podcast: Developing Secure Agile Code Quickly is Very Achievable

• What is Malware? How to Prevent & the Different Types

• Apple Demands Leaker Reveals Sources Under Threat of Being Reported to Police

• Latest Top 5 Dark Web Search Engines for 2021

• Get patching: US, UK, and Australia issue joint advisory on top 30 exploited vulnerabilities

• One third of cybersecurity workers have faced harassment at work or online – this initiative aims to stamp it out

• Will Washington Face a Reckoning Over Taiwan?

• UDP Technology IP Camera firmware vulnerabilities allow for attacker to achieve root

• Intel Warns Chip Shortage Could Last Until 2023

• Noetic Cyber raises $20M to automate cybersecurity remediation

• Studies show cybersecurity skills gap is widening as the cost of breaches rises

• University of San Diego Health Says Personal Information Stolen in Data Breach

• UBEL is the New Oscorp — Android Credential Stealing Malware Active in the Wild

• Let’s Duo It Again: Why I Returned to Duo for a Second Internship

• Biden Warns Cyberattacks Could Lead To ‘Shooting War’

• Cybersecurity for Small Businesses. What Can You Do to Protect Your Business from Cyberthreats?

• Cyolo raises $21M for zero trust networking tech

• Iranian Spies Maintained Social Media Persona for Years Before Targeting Defense Contractor

• Top Routinely Exploited Vulnerabilities

• Top Routinely Exploited Vulnerabilities

• Hybrid work is here to stay – but what does that mean for cybersecurity?

• Making Authentication Safer and Simpler for Customers

• Signal Zero-Day Bug Allows for Sending Unintended Images To Contacts

• Numerous Vulnerabilities Discovered In Telegram Encryption Protocol

• Numerous web apps found vulnerable to DNS cache poisoning via ‘forgot password’ feature

• IBM: Average Cost of Data Breach Exceeds $4.2 Million

• Top 5 Benefits of Cloud Infrastructure Security

• LogRhythm NextGen SIEM for Electricity Utility

• What Does It Take to Be Secure with Multi-Factor Authentication?

• Telegram Zeek, you’re my main notice

• De-anonymization Story

• China’s Digital Colonialism: Espionage and Repression Along the Digital Silk Road

• BlackMatter Ransomware Emerges As Successor to DarkSide, REvil

• Data Breach Costs at Record High, Zero Trust, AI and Automation Help Reduce Costs

• Podcast: Why Securing Active Directory Is a Nightmare

• In 1st Visit to Intel Agency, Biden Warns of Cyber Conflict

• Chinese Hackers Implant PlugX Variant on Compromised MS Exchange Servers

• DDoS attacks in Q2 2021

• iOS 15 to Limit Siri Functionality With Third-Party Apps

• LockBit Ransomware Is Now Encrypting Windows Domains

• UC San Diego Health Discloses Data Breach

• These hackers posed as an aerobics instructor online to trick their targets into downloading malware

• Biden: Major cyber attack could lead to a ‘real shooting war’

• Hackers Posed as Aerobics Instructors for Years to Target Aerospace Employees

• Microsoft Teams Users Get Extra Phishing Protection

• READY for What’s New at (ISC)² Security Congress in 2021?

• Security Risk Scores: Fast, Slow, And Adaptive

• Cyber Insurance Firm At-Bay Raises $185 Million at $1.35 Billion Valuation

• Mitre D3FEND explained: A new knowledge graph for cybersecurity defenders

• How to review password quality in Active Directory

• Microsoft adds Safe Links phishing protection to Microsoft Teams

• Why you need to urgently update all your iPhones, iPads, and Macs – NOW!

• (ISC)² announces keynote speakers for Security Congress 2021

• ‘For All Mankind’ Season 4 May Have Already Been Signed Off By Apple, Writers Guild Suggests

• Praying Mantis hacker group strikes IIS web servers

• Cost of a data breach hits record high during the pandemic

• Mimecast Makes Security Training a Laughing Matter

• Racing car dealership says PwC failed to spot fraud

• Looking for adding new detection technologies in your security products?

• The Next Disruptive ICS Attack: 3 Likely Sources for Major Disruptions

• Cloud Compliance Best Practices: A Quick Overview

• No More Ransom Saves Victims Nearly €1 billion Over 5 Years

• UK’s National Cyber Security Centre needs its posh Westminster digs, says Cabinet Office, because of WannaCry

• Colonial Pipeline Hinted at Critical Infrastructure Threat

• BlackMatter ransomware group claims to be Darkside and REvil succesor

• What’s New in the 2021 Cost of a Data Breach Report

• Phishers targeting everyone, from sales staff to C-suite execs

• Google revamps bug bounty program

• 10 Best Free Password Manager to Secure Your Password For 2021

• A New Remote Zero-Trust Platform is Needed

• Critical infrastructure pain points: The toughest challenges

• Over 100 active ransomware groups are on FBI Tracking Radar

• Joe Biden says cyber attacks could easily trigger a shooting war

• How security leaders can build emotionally intelligent cybersecurity teams

• Trending cybercrimes and the big impact of lesser-known breaches

• Where does the SME fit into a supply chain attack?

• Confidence redefined: The cybersecurity industry needs a reboot

• Biden warns ‘real shooting war’ will be sparked by severe cyber attack

• The Role of Culture in Compliance

• How Digital First will revolutionise the customer EMV card issuance journey

• Enterprise data breach cost reached record high during COVID-19 pandemic

• Exposing the latest cloud threats affecting enterprises

• Consumers are increasingly concerned about online security and imminent attacks

• Executives have increased business analytics usage

• Neustar UltraBot Protect provides more visibility into application layer traffic

• Stellar Cyber’s AI-driven incident correlation increases attack detection efficiency

• Ivanti Neurons for Zero Trust Access enhances cybersecurity in the everywhere workplace

• Move of BLM headquarters to Colorado still under review

• Box Sign delivers unlimited signatures to customers at no additional cost

• NETSCOUT Smart Edge Monitoring gives IT teams visibility into any network or application from anywhere

• Katalon TestOps enhances collaboration between development and QA teams

• Infinipoint DIaaS solution offers zero trust security posture for devices

• Axie Infinity Player Wallets Targeted by Poisoned Google Ads Content

• Apple releases patch for zero‑day flaw in iOS,iPadOS and macOS

• Corero Network Security expands DDoS protection portfolio with ETD capability

• Tencent suspends signups to WeChat, citing ‘security upgrade’ and need to comply with Chinese laws

• EMQ X Cloud now available on Microsoft Azure to help users carry out their IoT projects with MQTT

• Hunting IcedID and unpacking automation with Qiling Framework

• Owl Labs collaborates with Bechtle to expand its presence within key European markets

• RtBrick adds new open hardware support to increase broadband performance

• Biden: If U.S. has ‘real shooting war’ it could be result of cyber attacks

• Clubhouse Opens Its Doors. Is Anyone Rushing to Get In?

• Pegasus spyware is just the latest tool autocrats are using to stay in power

• Microsoft introduces new phishing protections in Teams

• TikTok to open cyber-security centre in Ireland

• Top cyber officials testify on growing ransomware threat

• eBay ex-security boss sent down for 18 months for cyber-stalking, witness tampering

• New AI tools aim to improve live-stream content moderation

• Cryptomathic and UTIMACO deliver QES solution for banks, governments and trust service providers

• Elliptic Labs partners with Maxim Integrated to offer touchless sensing solutions to PC and TV developers

• LemonDuck Shows Malware Can Evolve, Putting Linux and Microsoft at Risk

• The Security Digest: #71

• Deloitte acquires TransientX to expand its zero trust solutions

• Radiant Logic participates in NIST’s NCCoE Zero Trust Architecture project

• NIST selects Ivanti on Implementing A Zero Trust Architecture project

• Anna Convery joins Jumio as CMO

• Elizabeth Rafael joins Informatica Board of Directors

• Cloudflare’s Project Pangea helps underserved communities expand access to the internet for free

• Spectro Cloud raises $20M to improve its product and services for customers

• Wiliot raises $200M to grow its team and create new IoT products

• Google announces new bug bounty platform

• Tim Cook on Apple Deciding to Manufacture Components: ‘We Ask Ourselves If We Can Do Something Better’

• Apple Expecting iPhone and iPad Supply Constraints in September Quarter

• Apple Saw Double Digit Growth in iPhone Upgraders and Switchers in Q3 2021

• IT Security News Daily Summary 2021-07-27

• NASA ships satellite mission data to the cloud

• US needs combat cloud to bolster warfighting collaboration

• COVID cloud data fuels virus studies

• No More Ransom Saves Victims Nearly €1 Over 5 Years

• Frequently asked questions on Extended Detection and Response

• Apple’s Services Revenue Reaches $17.5 Billion in Q3 2021, Setting New All-Time Record

• Apple’s Wearables, Home and Accessories Category Sets New June Quarter Revenue Record of $8.8 Billion

• Flaws in Zimbra could allow to takeover webmail server of a targeted organization

• Apple Reports 3Q 2021 Results: $21.7B Profit on $81.4B Revenue, New June Quarter Records

• Apple’s Mac and iPad Sales Continue to Surge in Q3 2021

• Misconfigured Azure Blob at Raven Hengelsport exposed records of 246,000 anglers – and took months to tackle, claim infosec researchers

• Trust Not in Third-Parties

• Scam-baiting YouTube channel Tech Support Scams taken offline by tech support scam

• Microsoft warns of PetitPotam attack taking over Windows domains

• Box unveils unlimited e-signature capabilities

• Average time to fix high severity vulnerabilities grows from 197 days to 246 days in 6 months: report

• A importância da análise de comportamento na segurança cibernética da sua organização

• The Joy of Tech® ‘How Stupid Can It Get?’

• In Case You Missed It: 2 Cyber Expert Webinars Now Available On-Demand

• BSides Vancouver 2021 – Amiran Alavidze’s ‘Securing Kubernetes In The Cloud’

• COVID-19 2021 Wave Mapped to 1854 Kansas-Nebraska Act Votes

• EFF Sues U.S. Postal Service For Records About Covert Social Media Spying Program

• CODESYS Patches Dozen Vulnerabilities in Industrial Automation Products

• Everything New in iOS 15 Beta 4: Safari Tweaks, MagSafe Battery Pack Support, Notification Updates and More

• Transnet Suffers Ransomware Attack, Halts Port Operations

• Mac Otakara: iPad Air 5 to Feature iPad Pro-Like Design, No Design Changes Coming to iPad Mini 6 or iPad 9

• Machine Learning Testing for Data Scientists

• Tech biz must tell us about more security breaches, says UK.gov as it ponders lowering report thresholds

• Use a decentralized identity framework to reduce enterprise risk

• iPadOS 15 Gains macOS Monterey’s Redesigned Safari Tab Interface

• macOS Monterey Beta 4 Brings Live Text to Intel-Based Macs

• EvilModel – New Method to Secretly Deliver Malware Via Neural Networks To Evading Antivirus Engines

• ‘Praying Mantis’ threat actor targeting Windows internet-facing servers with malware

• Zimbra Server Bugs Could Lead to Email Plundering

• Two New Games Coming to Apple Arcade, Including Gameloft’s Racing Classic ‘Asphalt 8: Airborne’

• Apple Seeds Fourth Beta of tvOS 15 to Developers

• Apple Seeds Fourth Beta of watchOS 8 to Developers

• Apple Seeds Fourth Betas of iOS and iPadOS 15 to Developers

• Apple Seeds Fourth Beta of macOS 12 Monterey to Developers

• House Select Committee Investigating Jan. 6 Holds Its First Hearing

• Open source web app projects hailed for quickly patching bugs

• Kaseya Unitrends has unpatched vulnerabilities that could help attackers expand a breach

• How Digital ID can help citizens access government services from anywhere

• Newark Releases Latest Global IoT Trends Report

• Google Paid Over $29 Million in Bug Bounty Rewards in 10 Years

• A Controversial Tool Calls Out Vulnerabilities Across the Web

• CISA Releases Security Advisory for Geutebruck Devices

• The Evolution of Security Testing

• BSides Vancouver 2021 – Rose’s ‘The Overlooked Security Risk: 3rd Party Risk Management’

• What is a DDoS Extortion Attack and How do you Respond to it?

• Combing through the fuzz: Using fuzzy hashing and deep learning to counter malware detection evasion techniques

• The Clubhouse database “breach” is likely a non-breach. Here’s why.

• TikTok Cybersecurity Hub in Dublin

• Three Zero-Day Bugs Plague Kaseya Unitrends Backup Servers

• How to create a positive and effective cybersecurity environment instead of a shame culture

• Microsoft Rushes Fix for PetitPotam Attack PoC

• New Bug Could Let Attackers Hijack Zimbra Server by Sending Malicious Email

• AWS Hires Investigators After Gender Discrimination Petition

• Old crypto malware makes come back, hits Windows, Linux devices

• biometric verification

• Hyten: Combat cloud would bolster collaboration with allies, partners

• TMF could help solve records request backlog for veterans, lawmakers say

• HASC cyber subcommittee pushes mandatory legacy IT audit in defense bill

• Brazil Establishes Cyberattack Response Network

• Fake Windows 11 Installers are Used by Scammers to Distribute Malware

• Persistent Cyberattacks Put Hospitals’ Finances at Risk

• Apple Patches Zero-Day Vulnerability in macOS, iOS, and iPadOS

• Vulnerabilities Allow Hacking of Zimbra Webmail Servers With Single Email

• Mobile County Officials Informs County Employees of Data Breach

• Threat Intelligence in SecureX: Fast, Free, or Easy (pick any three)

• DevSecOps Best Practices in Identity and Data Security

• New Collaboration with Adobe and MAPP

• TSMC: Too Early To Consider German Chip Factory

• Army tests climate model in Azure cloud

• Best VPN 2021: Top VPN services reviewed

• HP finds 75% of threats were delivered by email in first six months of 2021

• Microsoft warns of credential-stealing NTLM relay attacks against Windows domain controllers

• Ukrainian Authorities Confiscated Unencrypted VPN Servers

• Microsoft Reveals Enhanced LemonDuck Malware Targeting Windows and Linux

• Build developer trust with faster, accurate AppSec testing from Rapid Scan

• South Africa’s logistics company Transnet SOC hit by a ransomware attack

• Nothing ‘Ear (1)’ True Wireless Earbuds Launch to Take on AirPods Pro With ANC and Unusual Design for $99

• Jeff Bezos Offers NASA $2 Billion For Lunar Contract

• 1Password Raises $100 Million at $2 Billion Valuation

• Olympics Broadcaster Announces His Password On Live TV

• VPN Servers Seized By Ukrainian Authorities Weren’t Encrypted

• Microsoft Rushes Fix For PetitPotam Attack PoC

• Babuk Ransomware Gang Ransomed

• Researchers Struggle to Use Apple Watch in Studies Due to Sudden Algorithm Changes

• What is a Security Theatre and How Is It Impacting the Organisations

• Apple Patches Actively Exploited Zero-Day in iOS, MacOS

• Apple emergency zero-day fix for iPhones and Macs – get it now!

• Apple Releases Security Updates

• The XDR Advantage: Eliminate Dwell Time and Gain Visibility

• Deals: Apple’s 11-Inch iPad Pro Magic Keyboard Drops to $239.19 on Verizon ($60 Off)

• Instagram to Begin Defaulting Accounts for New Users Under the Age of 16 to Private

• How To Build Privacy Into Your Company’s Core Values

• Critical Vulnerability Found in Sunhillo Aerial Surveillance Product

• Cybersecurity investments surge in 2021 as VCs go all in

• The Shapeshifting Cam Girl Rewriting the Rules of Porn

• Meet Thundra Foresight: Your CI Observability Tool!

• The Biden Administration Joins the Military Justice Reform Debate as It Heats Up in the Senate

• 36% of Organizations Experienced Cloud Misconfigurations in the Past Year

• A new chapter for Google’s Vulnerability Reward Program

• Threat Actors Exploit Misconfigured Apache Hadoop YARN

• New LemonDuck Malware Attack Windows & Linux Systems for Mining & Stealing Activities

• Best Mac VPN 2021: VPN services for Apple devices

• Kaseya Denies Paying Cybercriminals Who Launched Ransomware Attack

• Hackers Turning to ‘Exotic’ Programming Languages for Malware Development

• Several Bugs Found in 3 Open-Source Software Used by Several Businesses

• DIVD discloses three new unpatched Kaseya Unitrends zero-days

• Unpatched Kaseya Unitrends Backup Vulnerabilities Could Be Dangerous

• Israeli Pegasus spyware saga could sow diplomatic rifts in Africa

• Compsci student walks off with $50,000 after bug bounty report blows gaping hole in Shopify software repos

• APT group hits IIS web servers with deserialization flaws and memory-resident malware

• What is a VPN and Can it Hide My IP Address?

• Vulnerability in Popular Survey Tool Exploited in Possible Chinese Attacks on U.S.

• ThreatX: Great Place to work-certified!

• Apple Releases Safari 15 Beta for macOS Catalina

• 4 Tips for Reducing Your Company’s Cyber Exposure

• Compsci student walks off with $50,000 after bug bounty report blows gaping hole in Shopfiy software repos

• Relevance Requires More than Just Paying Attention

• Half of vulnerabilities Singapore government finds via bounties, disclosures are valid

• Time to update your iPhone as Apple fixes ‘actively exploited’ zero day flaw

• S.Africa’s Port Terminals Still Disrupted Days After Cyber-Attack

• 3.8 Billion Phone Numbers of Clubhouse Users up for Sale on Dark Web

• WhatsApp CEO: US Allies’ National Security Officials Targeted with NSO Malware

• Q2 2021 Report by Digital Shadow, Abridged

• Maps in iOS 15 Now Factors Weather Warnings into Suggested Routes

• The Pegasus spyware saga could sow diplomatic rifts in Africa

• Microsoft Predicts 40 Percent May Quit Their Jobs

• Password management platform 1Password raises $100M as business booms

• Why Are Users Ignoring Multi-Factor Authentication?

• Hiding Malware in ML Models

• Israeli companies get $2.3B of VC funding in the first half of 2021, surpassing the 2020 total by 28%

• Zero-Day Vulnerability Impacting iOS, iPadOS, and macOS Fixed by Apple

• Kaseya Denies Paying REvil Hackers For Decryption Tool

• Check Point CloudGuard Improves Google Cloud Security with Exciting New Capabilities for Managed Instance Groups

• Creating an Effective Threat Hunting Program with Limited Resources

• Microsoft Teams just got this new protection against phishing attacks

• Malware developers turn to ‘exotic’ programming languages to thwart researchers

• 7 tenets of zero trust explained

• 18 new cybersecurity bills introduced as US congressional interest heats up

• FCW Insider: July 27, 2021

• Hackers flooded the Babuk ransomware gang’s forum with gay porn images

• South Africa port operations halted and workers reportedly put on leave after major cyberattack

• Malicious npm Packages Steal Chrome Browser Passwords

• Apple Hide My Email | Avast

• ANAO: Auditing not driving improvements in Commonwealth cybersecurity adherence

• Major Australian Healthcare Insurance Companies Now Support Apple Wallet

• IBM z/OS V2.5 strengthens security and drives app modernization projects

• Chrome Ditched Redesign That Was Similar to Safari in iOS 15, Says Former Google Employee

• NHS COVID passes targeted by scammers

• Want to add antivirus to your existing portfolio?

• How Network Segmentation Can Protect Supply Chains from Ransomware Attacks

• CTCI a Game-Changer for Threat Intel

• Realme Planning to Launch ‘MagDart’ Magnetic Charger As Android Equivalent to Apple’s MagSafe

• Discord targeted to spread malware

• TikTok to open new cybersecurity centre in Dublin

• Application security testing is not just buzzwords

• Ghidra 101: Loading Windows Symbols (PDB files) in Ghidra 10.x

• Apple Releases Urgent 0-Day Bug Patch for Mac, iPhone and iPad Devices

• Enterprise Security Essentials

• It takes intuition and skill to find hidden evidence and hunt for elusive threats

• DevilsTongue Malware matches Pegasus Spying Software

• Airlines under constant threat of Cyber Attacks says Eurocontrol Data

• Phishing Used to Get PII, not Just Ransomware

• 36% of organizations suffered a serious cloud security data leak or a breach in the past year

• How to prevent corporate credentials ending up on the dark web

• IT expert: How To Avoid being Tracked by Photos

• Product showcase: ManageEngine Vulnerability Manager Plus

• Turning the tide on surging account takeovers in the media industry

• Apple Patches for CVE-2021-30807, (Tue, Jul 27th)

• CISOs operating blind, with limited visibility and control

• Consumer attitudes towards various digital identity authentication methods

• SSD belonging to Euro-cloud Scaleway was stolen from back of a truck, then turned up on YouTube

• Cybersecurity Insurers Are Putting an End to the ‘Pass the Buck’ Era

• Consumer expectations of digital services increased since early 2020

• Black Hat USA & DEFCON 2021 Coverage on LinuxSecurity: What You Need to Know>

• Of course you can’t trust scientists on politics

• It’s Time to Rethink Outage Reports

• Could the LGBTQ Community Be a Target of Internet Threat Actors?

• ISC Stormcast For Tuesday, July 27th, 2021 https://isc.sans.edu/podcastdetail.html?id=7602, (Tue, Jul 27th)

• Judge: Ex-CIA Worker Can Represent Himself in Espionage Case

• Bosch provides conferencing and interpretation equipment for high-profile meetings

• VPN servers seized by Ukrainian authorities weren’t encrypted

• Of course you can’t trust scientists on politics

• Apple patches zero-day vulnerability in iOS, iPadOS, macOS under active attack

• Tesla CEO Elon Musk Takes Shots at Apple During Earnings Call

• Blue Hexagon integrates with AWS Network Firewall to offer protection against unknown cloud threats

• Dan Kaminsky’s death leaves vacancy among holders of ‘keys to the internet’

• Brazil creates cyberattack response network

• Facebook Considering Apple Health Integration for Oculus Workouts

• Clearview AI raises $30M to accelerate growth in image-search technology

• Sage selects Cloud at Work as an approved Strategic Hosting Provider

• #LetsTalkSecurity: The New Digital Normal

• Podcast: IoT Piranhas Are Swarming Industrial Controls

• As 5 principais causas de perda de pacotes de rede e como resolvê-las com o OpManager

• 5 buenas prácticas para Active Directory

• What Security Lessons Can Come From the Kaseya Ransomware Attack?

• Apple fixes CVE-2021-30807 flaw, the 13th zero-day this year

• Intel Plans to Make Chips for Qualcomm in the Future

• Hunter Strategy enters Google Cloud Partner Advantage Program

• OwlGaze raises $1.5M to offer companies an end-to-end predictive threat detection solution

• BEP seeks machine-readable counterfeit detection

• Lawmakers advance cyber legislation

• How a workplace experience app can solve back-to-work challenges

• Babuk Ransomware Gang Ransomed, New Forum Stuffed With Porn

• Breaking the Perimeter: Building a Zero Trust Security Model with JumpCloud

• Season Two of Popular Apple TV+ Show ‘Ted Lasso’ Sets Opening Weekend Record

• Apple Stops Signing iOS 14.6 Following iOS 14.7 Release

• Outdated Ethics Rules May Be Stymieing the Federal Trade Commission’s Efforts to Keep Up with Big Tech

• The Trump Lawsuits, the Biden Administration’s Misinformation Advisory and the Thorny First Amendment Problem of Jawboning

• New OPM guidance addresses locality pay and travel costs for remote workers

• How unemployment insurance fraud exploded during the pandemic

• Kaseya denies paying ransom for decryptor, refuses comment on NDA

• 3 razões para usar um software de diagrama de rede

• Microsoft Patch Tuesday July 2021 corrige 117 vulnerabilidades, incluindo 9 zero day

• Tesla records $23 million in bitcoin-related impairments after crypto’s second-quarter plunge

• BrandPost: Remote Working Changes Are Here to Stay. Are Your Networking Vulnerabilities?

• Hyten: Combat cloud needed to bolster collaboration with allies, partners

• You, too, can be a Windows domain controller and do whatever you like, with this one weird WONTFIX trick

• Why NPATH is a Terrible Code Metric

• You’re Not Really Ready for Ransomware

• The Business of Fraud: Online Retail Fraud in the Criminal Underground

• Kali Linux vs Parrot OS: Which One Is the Best?

• Microsoft Rushes Fix for ‘PetitPotam’ Attack PoC

• Apple Patches ‘Actively Exploited’ Mac, iOS Security Flaw

• cyberterrorism

• VA mandates vaccines for clinical staff

• Coveware: Median ransomware payment down 40% in Q2 2021

• No More Ransom helped ransomware victims to save almost €1B

• Apple Shares 11 Reasons Why Business Users Should Choose Macs

• iOS 14.7.1 and macOS Big Sur 11.5.1 Patch Security Vulnerability That May Have Been Actively Exploited

• iPad Mini 6 to Feature 8.3-Inch Display With No Home Button and Narrower Bezels

• OSX.XLoader hides little except its main purpose: What we learned in the installation process

• Deepfakes: Microsoft and others in big tech are working to bring authenticity to videos, photos

• PlugwalkJoe Does the Perp Walk

• Kanye West’s ‘Donda’ Album Debut Breaks Apple Music Livestream Record

• XKCD ‘Commonly Mispronounced Equations’

• Security for Startups in a DevOps World: Maintenance and Management

• How Cobwebs Technologies’ Webint Platform Helps Enterprises To Face The Rising Tide Of Security Risks Emerging From The Dark Web

• Takeaways from The Oldsmar Water Attack & What Security Leaders Can Do About It

• The Preventable Aspects of the APT40 Microsoft Hack

• Why VA’s electronic health record mega-project is failing

• Deepfakes: Microsoft and others in Big Tech are working to bring authenticity to videos, photos

• Gartner: ‘Weaponized’ operational tech poses grave danger

• Failed Malspam: Recovering The Password, (Mon, Jul 26th)

• Apple Releases iOS and iPadOS 14.7.1 With Fix for Touch ID Apple Watch Bug

• Apple Releases macOS Big Sur 11.5.1 With Security Updates

• Are you READY for (ISC)² Security Congress?

• 5GAA & Global Certification Forum Connect on New Cert.

• Hackers Attack Kubernetes Cluster to Deploy Crypto-Miners

• Deloitte acquires Sentek and TransientX to beef up cybersecurity

• Kaseya Obtains a Universal Decryptor to Support REvil Ransomware Victims

• New Zealand Accuses China of Sponsoring Cyberattacks

• Dutch Police Arrest Two Hackers Tied to Fraud Family Cybercriminal Gang

• Bio-Laboratory Petition Website Hit by Cyberattack

• Firefox 90 Drops Support for FTP Protocol

• Surprise! Surprises Often Are Wrong.

• BSides Vancouver 2021 – Magno Logan’s ‘Kubernetes Security: Attacking And Defending K8s Clusters’

• Anti-Vax Lies Spread on YouTube—Paid for ‘by Russian PR Company’

• Why It’s Critical For the Healthcare Sector to Reassess their Cybersecurity Posture

• Shadow IT, Cloud-Based Malware Increase AppSec Risks

• Apple Demos Filmmaking Techniques in New Shot on iPhone Video

• 2022 Mac Pro Rumored to Use Intel’s Ice Lake Xeon W-3300 Chips

• Apple Releases iOS and iPadOS 14.7.1

• A week in security (July 19 – July 25)

• Cyber Attacks as Hybrid Warfare

• Double Encryption: When Ransomware Recovery Gets Complicated

• biometrics

• Tokyo 2020 Olympic Games Hit by Data Breach

• UK Guns Sales Website Hacked, Exposing 111,000 Customers’ Details

• Dangerous macOS Malware XCSSET Targeting Chrome and Telegram

• Vulnerability Summary for the Week of July 19, 2021

• Apple Maps Vehicles Collecting ‘Look Around’ Imagery in Several More Countries

• What To Do With Dead Mac Internal SSD To Protect Your Privacy

• FCW Insider: July 26, 2021

• Cloud-Delivered Malware Increased 68% in Q2, Netskope Reports

• Data controls in the DevSecOps life cycle

• Emmanuel Macron Pushes For Israel Inquiry Into NSO Spyware Concerns

• An Explosive Spyware Report Shows Limits Of iOS, Android Security

• Microsoft Outlines How To Protect Against PetitPotam

• Mitre Releases 2021 Top 25 Most Dangerous Software Weaknesses

• Kaseya Obtained a Working Decryptor For REvil Ransomware

• Malware Makers Using ‘Exotic’ Programming Languages

• No More Ransom: We Prevented Ransomware Operators From Earning $1 Billion

• GitHub Brings Suite of Supply Chain Security Features to Go

• Deals: Anker’s New Sale Includes Savings on Wireless Charging Stands, USB-C Accessories, and More

• Apple Museum With 1,500 Exhibits to Open in Poland

• Best cheap VPN 2021: VPN services under $2 a month

• Amnesty Urges Moratorium on Surveillance Technology in Pegasus Scandal

• Lawmakers Seek To Hold Facebook Accountable For Harmful Content

• Malicious Life Podcast: The Life and Exploits of Albert Gonzales Part 3

• 7 Cybersecurity Tips for Remote Working

• Hiding Malware inside a model of a neural network

• Spotify Rolling Out New Notification Tab for New Releases From Artists, Creators, and More

• FCW Insider: july 26, 2021

• Quick Hits

• What We Learn from MITRE’s Most Dangerous Software Weaknesses List

• Phil Schiller Reflects on iPod, Timeless Design, Electric Cars, and More in Interview With Lamborghini

• Twitter handle swatter jailed after victim dies following home raid

• Want lifetime VPN protection and a Hushed private phone line? Now you can for just $30

• Microsoft: Here’s how to shield your Windows servers against this credential stealing attack

• Ransomware: Here’s how much victims have saved in ransom payments by using these free decryption tools

• The True Impact of Ransomware Attacks

• ‘Holy Moly!’: Inside Texas’ Fight Against a Ransomware Hack

• Australia Considers Case for Opening iPhone NFC Chip to Third Party Payment Systems

• This is Remote Life: Embracing the Suite Life of Interning from Home

• 9 Tips to Help Kids Avoid Popular App Scams

• GitLab Releases Open Source Tool for Hunting Malicious Code in Dependencies

• Leading Threat to Industrial Security is Not What You Think

• Windows “PetitPotam” network attack – how to protect against it

• Save time with Dynamic Attributes for Cisco Secure Firewall

• Paramount+ and Showtime Bundle for Apple TV+ Subscribers Seemingly Ending

• Web Security Testing For Beginners

• WhatsApp chief says government officials, US allies targeted by Pegasus spyware

• Good catch in joint actions targeting illegal fishing

• Enterprises Warned of New PetitPotam Attack Exposing Windows Domains

• How to Mitigate Microsoft Windows 10, 11 SeriousSAM Vulnerability

• BIMI: A Visual Take on Email Authentication and Security

• Specops Secure Service Desk Product Review

• Defi protocol THORChain loses $8 million in “seemingly whitehat” attack

• Apple Reportedly Orders 100 Million A15 Chips for Upcoming iPhone 13

• Larger Redesigned High-End iMac Rumored to Launch Next Year

• PetitPotam Vulnerability Lets Hackers Fully Take Over Windows Domains

• Cloud-delivered Malware Increased 68% in Q2, New Report Finds

• A MacOS Malware Is Stealing Telegram Accounts and Google Chrome Data

• DeepMind Uses AI To Predict Human Protein Shapes

Generated on 2021-08-01 00:02:25.502751