IT Security News Monthly Summary – January

• IT Security News Daily Summary 2020-12-31

• SMBs: How to find the right MSP for your cybersecurity needs

• SolarWinds hackers gained access to Microsoft source code

• A Brief History of Adobe Flash Player: From Multimedia to Malware – Intego Mac Podcast Episode 168

• SolarWinds hackers accessed Microsoft source code

• XKCD ‘Flash Gatsby’

• DEF CON 28 Safe Mode Saturday – Michael Stay’s ‘How We Recovered Xxx,000 In Bitcoin From An Encrypted Zip File’

• Microsoft Says ‘SolarWinds’ Hackers Viewed Internal Code

• Microsoft Reveals That Russian Attackers Accessed Some of Its Source Code

• Adobe Flash Player Dies 01/01/2021

• Bill & Melinda Gates Charity “GetSchooled” Exposed Student Data

• T-Mobile Data Breach Exposes Customer Information

• Microsoft says Russians accessed account ‘used to view source code’ in Solorigate hack

• Data Breach: Stolen User Records from 26 Companies Being Sold Online

• Threat actor is selling 368.8 million records from 26 data breaches

• S3 Ep13: A chat with hacker Keren Elazari [Podcast]

• Crypto Trading App Voyager Hit By Cyberattack, Company Shuts Down Website

• SolarWinds/SUNBURST: Behavioral analytics and Collective Defense in action

• Fighting Abusive Patent Litigation During a Year of Health Crisis: 2020 Year In Review

• Microsoft Internal Solorigate Investigation Update

• Golang malware infecting Windows, Linux servers with XMRig miner

• The strangest cybersecurity events of 2020: a look back

• Ticketmaster to pay $10 million for fraudulently hacking competitor server

• Ticketmaster to Pay $10 Million Fine Over Hacking Charges

• The enterprise case for implementing live-fire cyber skilling

• 6 common types of cyber attacks and how to prevent them

• How to Build Cyber Resilience in a Dangerous Atmosphere

• Taking A Neighborhood Watch Approach To Retail Cybersecurity

• Two Foldable iPhone Prototypes Reportedly Pass Internal Durability Tests

• What to Expect From Apple in 2021: New Apple Silicon Macs, iPhone 13, AirTags and More

• Cyberbullying Monitoring in Online Learning

• New Golang-based Crypto worm infects Windows and Linux servers

• SamSam Ransomware 101: How It Works and How to Avoid It

• UK Operators Will Not Reinstate European Data Roaming Charges

• What’s Next for Ransomware in 2021?

• Get back into the cybersecurity groove for 2021

• Washington D.C. Attorney General Slams Facebook For Fueling Hate

• The Coolest Hacks of 2020

• Japanese Giant Kawasaki Admits Security Breach With Potential Data Leak

• Vulnerability In Google Docs Could Allow Hijacking Feedback Screenshots

• NSO Used Real Location Data Of People In Demo, Researchers Allege

• 20 for 2020: The Edge’s Top Articles of the Year

• Brexit Deal Mandates Old Insecure Crypto Algorithms

• Amazon Acquires Podcast Startup Wondery

• Apple Removes 39,000 Games From China App Store

• Coronavirus vaccine has created new opportunities for crime

• SolarWinds Compromise May Have Started Earlier Than First Thought

• Ticketmaster Pays $10m DoJ Fine For Accessing Rival’s Computer

• Apple Deletes 39,000 Games From Chinese App Store

• Gazelle’s Used Device Trade-In Program to End Next Year

• AESI Acumen Engineered Solutions International Inc./ AESI-US Inc. (‘AESI’) simplifies mission-critical security operations with Check Point Software

• Emotet campaign hits Lithuania’s National Public Health Center and several state institutions

• Want to add antivirus to your existing portfolio?

• Don’t Get Comfortable: More Change is Coming

• Best of 2020: BlueLeaks is Huge FAIL for Anonymous and DDoSecrets

• DHS Urges US govt agencies to Update SolarWinds Orion Software

• Google Chrome to Display Warnings for Weak Passwords

• TikTok dragged to court by 12-year-old girl for data misuse

• Ransomware attack leaks Pharmacy data of more than 137,000 patients

• New warning issued over COVID‑19 vaccine fraud, cyberattacks

• Worldwide VPN market to reach $75.59 billion by 2027

• 2020 set the stage for cybersecurity priorities in 2021

• Four ways to improve the relationship between security and IT

• Emotet Returns with Updated Modules and New Campaign

• Kaspersky has reported hacker attacks on COVID-19 researchers

• OAuth2 Bearer Token Usage

• Canon U.S.A. Honored with Two 2020 ‘ASTORS’ Homeland Security Awards

• Multi-Factor Authentication (MFA) Configuration for Mulesoft Anypoint Platform Users

• 5 Cybersecurity Tips to Protect Yourself While Shopping Online

• T-Mobile data breach: CPNI (Customer Proprietary Network Information) exposed

• QAnon and 8Chan Digital Footprint Analysis and Investigation Expansion

• Apple loses lawsuit against cyber security startup Corellium

• IT Security News Daily Summary 2020-12-30

• FBI Warn Hackers are Using Hijacked Home Security Devices for ‘Swatting’

• 15 benefits of outsourcing your cybersecurity operations

• Preparing for GIAC Certified Incident Handler certification

• Review 6 phases of incident response for GCIH exam prep

• Cloud Security Specialization Launched

• Hands-On With the AirPods Max Shield Case From WaterField Designs

• The Sunburst hack was massive and devastating – 5 observations from a cybersecurity expert

• 7 on-the-ground big data strategies for 2021

• Change your macOS power settings to prevent disconnecting from VPN/Wi-Fi when the computer is locked

• CISA demands US govt agencies to update SolarWinds Orion software

• Novel Points: Exploit the Heap Overflow Bug *CTF 2019 oob-v8

• The Joy of Tech® ‘The Evolution Of Internet Prayer’

• DEF CON 28 Safe Mode Saturday – Gal Zror’s ‘Don’t Ruck Us Again: The Exploit Returns’

• Israel, Cyberattacks and International Law

• Treasury Asks Financial Sector to Watch Out for COVID Vaccine Scams, Ransomware

• Pranksters Hijack Smart Devices to Live-Stream Swatting Incidents

• The Endgame for SolarWinds Attack Was Victim Cloud Data

• Italy’s Ho-Mobile database with 2.5m accounts allegedly stolen, sold

• CISA updates SolarWinds guidance, tells US govt agencies to update right away

• DEF CON 28 Safe Mode Saturday – James Pavur’s ‘Whispers Among The Stars’

• Apple and Prepear Negotiating a Settlement Over Disputed Pear Logo Trademark

• EFF’s Work in State Legislatures: Year In Review 2020

• Competitive Compatibility: Year in Review 2020

• Insider threat vs. insider risk: What’s the difference?

• Intel Urged to Take ‘Immediate Action’ Amid Threats From Apple Silicon and AMD

• Apple Removes App Promoting Parties During Pandemic

• AppSec Decoded: Threats to IoT devices and the role of government regulation

• Google Docs bug could have allowed hackers to hijack screenshots

• The most enticing cyberattacks of 2020

• Apple looses mobile security battle against Corellium

• Facial Recognition Blamed For False Arrest And Jail Time

• Hackers using smart home devices to live streaming swatting attacks

• Why stateful machine learning could help cybersecurity efforts

• Cybersecurity challenges in 2021 and how to address them

• Apple Loses In Lawsuit Against U.S. Security Bug Startup

• Bitcoin Surges To Record $28,500, Quadrupling In Value This Year

• A New Year, A New Administration: Doors Open In 2021 For Public-Private Cooperation

• FBI: Pranksters Are Hijacking Smart Devices To Live-Stream Swatting

• New Year’s Deals: Shop the Best Year-End Discounts on Apple Accessories From Twelve South, Mophie, Nomad, and More

• An Abridged History of America’s Terrorism Prevention Programs: Opposition Grows, Supporters Adapt

• 20 World’s Best Free Hacking Books For 2021 – Beginners to Advanced Level

• SolarWinds Hackers Aimed to Access Victim Cloud Assets after deploying the Solorigate Backdoor

• Taking a Neighborhood Watch Approach to Retail Cybersecurity

• Mobile Endpoint Security: Still the Crack in the Enterprise’s Cyber Armor

• SolarWinds Attribution: Are We Getting Ahead of Ourselves?

• Study Finds More Than $100 Billion Spent on App Stores in 2020

• Apple Loses Corellium Lawsuit

• Alibaba Faces Antitrust Probe By Chinese Authorities

• Scalable remote access with VMSS enhances Azure security, while working from home

• Shields Up: How to Tackle Supply Chain Risk Hazards

• FBI: Home Surveillance Devices Hacked to Record Swatting Attacks

• DDoS Attacks Spiked, Became More Complex in 2020

• On-Demand, Always-On or Hybrid? Well, It Depends on the Use Case.

• Cloud-Native Threats in 2020

• How to Prove Your Organization’s Cybersecurity Investment is Paying Off

• Facebook Ads Phishing Campaign Stole Facebook Credentials Of 615K Users

• Appliances Giant Whirlpool Suffered Ransomware Attack

• Intel Urged To Consider Strategic Options

• Someone Is Spying On You | Avast

• U.S. Treasury Warns Financial Institutions of COVID-19 Vaccine-Related Cyberattacks, Scams

• The Most Dangerous People on the Internet in 2020

• On the Evolution of Ransomware

• TLS 1.3 is now supported by about 1 in every 5 HTTPS servers, (Wed, Dec 30th)

• AirPods Max Switching to ANC in Only One Cup? Here’s How to Fix It

• How to block malicious JavaScript files in Windows environments

• Apple Pulls App That Promoted Secret Parties During Ongoing Pandemic

• Using Cybersecurity Analytics to Make a Case for Risk Management

• Apple loses copyright infringement claims against security startup Corellium

• Acceso Remoto Seguro: Por que es importante y por que hay que hacerlo bien

• Lessons from Teaching Cybersecurity: Week 13

• The curse of knowing a bit about IT: ‘Could you just…?’ and ‘No I haven’t changed anything‘

• Privacy is at risk when security fails – especially for surveillance cameras

• Looking for adding new detection technologies in your security products?

• Best of 2020: Was This Huawei’s Failed Attempt at a Linux Backdoor?

• The Advantages and Risks of Serverless Computing

• US Treasury warns of ransomware attacks on COVID-19 vaccine research

• 2021 will overburden already stressed infosec teams

• Russian businesses lose $49 billion to Cyber Attacks

• Ransomware Attack on Whirlpool and the Funke Media Group of Germany

• 21 arrested after allegedly using stolen logins to commit fraud

• The head of Group-IB Mr. Sachkov described the portrait of a typical Russian hacker

• Declaring War Against Cyber Negligence

• Server market revenue reached $22.6 billion in 3Q20

• Microsoft Issued a Fix for Zero-Day Six Months Ago but It Didn’t Work

• ISC Stormcast For Wednesday, December 30th 2020 https://isc.sans.edu/podcastdetail.html?id=7310, (Wed, Dec 30th)

• Time is running out for Federal 100 nominations

• ‘Bullet has left the chamber’: Biden will not likely roll back Trump campaign against China tech

• Deadline extended for Federal 100 nominations!

• Happy 11th Birthday, KrebsOnSecurity!

• Zero-Day Spear Phishing Attack Targeting Covid-19 Pharmaceuticals—Likely Nation-State Threat Actors

• Are Trump’s Pardons a Blessing in Disguise?

• Apple Pay Promo Offers 20% Off Grubhub Purchase of $10 or More

• FBI: Pranksters are hijacking smart devices to live-stream swatting incidents

• How to use IoT authentication and authorization for security

• Golden SAML Revisited: The Solorigate Connection

• IT Security News Daily Summary 2020-12-29

• Lawsuit Claims Flawed Facial Recognition Led to Man’s Wrongful Arrest

• Court Sides With Facebook, Finds That It Did Not Violate User Privacy By Collecting Location Data

• Deepfakes are Literally Security Theater

• SolarWinds hackers aimed at access to victims’ cloud assets

• Congress: Don’t Grant Austin a Waiver, but If You Do, Reform the Process

• Trump’s Circumvention of the Justice Department Clemency Process

• Op-ed: What nobody else will say about the new cybersecurity crisis

• 2020-12-29 (Tuesday) – Quick post: Emotet infection with Trickbot and spambot traffic

• How to identify bloatware, then uninstall it

• How to Build a Better Cyber Intelligence Team

• Apple Loses Copyright Suit Against Security Startup

• Top Five Apple Products of 2020

• Editor’s picks: Top cybersecurity articles of 2020

• Reducing the Risk of Third-Party SaaS Apps to Your Organization

• Spanning Blog: The Best of 2020

• DEF CON 28 Safe Mode Demo Labs – Ajin Abraham’s ‘Mobile App Security Testing With MobSF’

• XKCD ‘First Thing’

• DEF CON 28 Safe Mode Saturday – Peleg Hadar’s And Tomer Bar’s ‘After Stuxnet Printing Still The Stairway To Heaven’

• Apple Loses Copyright Claims in Lawsuit Against Corellium

• Detect SolarWinds Orion breach

• Whirlpool Hit with Nefilm Ransomware Attack

• Facebook Scam Ads Led to Phishing, Stealing Over 600,000 Passwords

• New Magecart Attack Affects Multiple Ecommerce Sites

• Multiple Smart Doorbells Found Vulnerable To Cyber Attacks

• CISA’s Sparrow.ps1 tool detects malicious activity on Azure, Microsoft 365

• 2020 Had Its Share Of Memorable Hacks And Breaches

• The History of Adobe Flash Player: From Multimedia to Malware

• Usenet indexer NZBGeek hacked; database stolen

• Apple Researching Keyboards With Adaptive Displays on Each Key

• AirPods Pro 2 Could Come in Two Sizes

• Section 215 Expired: Year in Review 2020

• Student Privacy and the Fight to Keep Spying Out of Schools: Year in Review 2020

• How to Uninstall WebDiscover Browser

• What is Spoofing and How to Prevent a Spoofing Attack

• Vodafone Ends Shareholder Tussle Over 2013 Kabel Acquisition

• 6 Questions Attackers Ask Before Choosing an Asset to Exploit

• Bike Maker Kawasaki Confirms Security Breach, Says Hackers Used Advanced Tech to Erase Their Tracks

• Lifting the Fog of War Around Cyber Coverage

• Japanese Kawasaki Heavy Industries discloses security breach

• An Abridged History of America’s Terrorism Prevention Programs: Fits and Starts

• SearchDimension search hijackers: An overview of developments

• CafePress to pay $2 million settlement for 2019 Data Breach

• Looking beyond the year from Dell…to a bright future in 2021 with NetApp

• US To Permit Drone Operations Over Homes, Plus Night Flights

• Japanese Aerospace Firm Kawasaki Warns of Data Breach

• India: A Growing Cybersecurity Threat

• Akamai Prolexic and Equinix Cloud Exchange Unite, Bringing DDoS Defense Closer to the Customer Origin

• Want to know what’s in a folder you don’t have a permission to access? Try asking your AV solution…, (Tue, Dec 29th)

• 9 of Top 10 U.S. Smartphone Activations on Christmas Day 2020 Were iPhones

• AAPL Opened at All-Time High, Shares Have Risen Nearly 150% Since Late March

• Self-Healing Mobile Phone Screens Invented By Scientists

• Early Bird Catches the Worm: New Golang Worm Drops XMRig Miner on Servers

• Attivo Offers Limited-Time Software Use to Combat Privilege Escalation & Lateral Movement

• How companies can use automation to secure cloud data

• Kawasaki Says Data Possibly Stolen in Security Breach

• How to safely add custom code to WordPress websites

• Deals: Get the 64GB iPad Air for $559 on Amazon ($40 Off, Lowest Price)

• Trends in IT-Security and IAM in 2021, the “New Normal” and beyond

• Top Webinars of 2020

• Samsung Display Extends LCD Production In South Korea

• 2020 Work-for-Home Shift: What We Learned

• Top 2020 data backup tips target remote protection, cloud

• Security Pros Reflect on 2020

• Mac Attackers Remain Focused Mainly on Adware, Fooling Users

• Ransomware Is Headed Down a Dire Path

• Hotels, Hookups, Video Conferencing: Top 10 Data Breaches of 2020

• The 10 Most Popular Blogs of 2020

• Security Book Review | Avast

• Apple Reportedly in Talks With Mariah Carey to Make ‘Magical Christmas Special’ Follow-Up

• White House Appeals Judge’s TikTok Ruling

• A Google Docs Bug Could Have Allowed Hackers See Your Private Documents

• CISA releases a PowerShell-based tool to detect malicious activity in Azure, Microsoft 365

• Trump Administration Appeals Latest Court Order Blocking TikTok Ban

• How to choose a CRM software for a real estate company?

• What is malvertising? And how to protect against it

• Hacking Christmas Gifts: Remote Control Cars

• CISA Releases Free Azure, Microsoft 365 Malicious Activity Detection Tool

• FAA approves small drones in the U.S. to fly over people and at night

• A Review of Ransomware in 2020

• Developing Like A Pentester – (And How To Reproduce Any Vulnerability)

• Digital Footprint Intelligence Report

• AutoHotkey-Based Password Stealer Targeting US, Canadian Banking Users

• Application security testing is not just buzzwords

• SharePoint Online: Everything You Should Know

• Best of 2020: ‘TikTok is Spyware,’ Warns Reddit CEO. ‘We Don’t Care,’ Say Users

• FTC Warns of text-messaging scam claiming to be from UPS, FedEx

• Transitioning from vulnerability management to vulnerability remediation

• Cyber Attack on Email Accounts of Finland Politicians

• Top Ransomware attacks of 2020

• Data security vs data privacy – they’re not the same thing

• Freedom Finance’s customer data got leaked after employee fell for phishing attack

• Organizations further along the digital transformation maturity spectrum have an advantage

• The need for zero trust security a certainty for an uncertain 2021

• CyberArk Announces Free Breach Assessment for SolarWinds Customers

• White Ops Announces Acquisition by Goldman Sachs Merchant Banking, ClearSky Security, and NightDragon

• SentinelOne Recognized for Outstanding Workplace and Leadership

• TrueFort Named One of the Top 25 Cybersecurity Companies of 2020

• 2020-12-28 (Monday) – Quick post: Emotet activity resumes after Christmas break

• ISC Stormcast For Tuesday, December 29th 2020 https://isc.sans.edu/podcastdetail.html?id=7308, (Tue, Dec 29th)

• Brazilians mostly unaware of data protection regulations

• House votes to override Trump’s NDAA veto

• Dedicated Server Security Tips You Must Know to Protect Your Server

• Threat actor is selling a dump allegedly including 2,5M customers of service provider Ho Mobile

• Finland confirms that hackers breached MPs’ emails accounts

• IT Security News Daily Summary 2020-12-28

• Prepare for IoT’s role in U.S. CMMC compliance

• Uma lista de 8 pontos para acertar no gerenciamento Cisco

• Security by Design y UEM: el enfoque de la ciberseguridad en 2021

• Scanner de Porta: O que é e por que você deveria utilizá-lo

• Conceitos de ITOM: Monitoramento de processos

• As tendências tecnológicas para 2021

• Zix acquires CloudAlly backup for SaaS data protection

• Apple Hearing Study Bug Results in Accidental Historical Data Collection From Participants

• Defending the COVID-19 Vaccine Supply Chain

• Best of 2020: The SolarWinds supply chain hack: What you need to know

• CMMC Level 1 requirements?

• Did Shannon Alone Invent Our Future?

• The Joy of Tech® ‘Have A Merry Zoom-mas!’ (Belated)

• DEF CON 28 Safe Mode Demo Labs – Chris Nevin’s ‘Carnivore’

• Nefilim ransomware operators leak data stolen from Whirlpool

• Los Angeles Residents Able to Add COVID Vaccination Proof to Apple Wallet

• Github-Hosted Malware Decodes Cobalt Strike Beacon From Imgur Picture

• US CERT Warns of Another Solar Winds Vulnerability

• Finland says hackers accessed MPs’ emails accounts

• Experts Slam Facebook For “Laughable” Privacy Criticisms Of Apple

• Apple Launches First-Generation College Student Mentorship Program

• Security Vulnerability Detection with Vulnture

• Hackers phish 615,000 login credentials by using Facebook ads

• How Reverse Engineering Can Help Secure Your Linux Systems Against Malware>

• Hackers Amp Up COVID-19 IP Theft Attacks

• Privacy Management Firm OneTrust Secures $300M at $5.1B Valuation

• Goldman Sachs Buys Anti-Bot Startup White Ops

• Smart DNS for the New Network Edge: Emerging Requirements for DNS Encryption

• DevSecOps: The good, the bad, and the ugly

• DEF CON 28 Safe Mode Demo Labs – Matthew Creel’s ‘Redlure’

• Multi-platform card skimmer targets Shopify, BigCommerce, Zencart, and Woocommerce stores

• Caviar Introduces Custom ‘Pure Gold’ AirPods Max for $108,000

• Third-Party AirPods Max Solutions Seek to Address Smart Case Criticisms

• Morocco’s Partial Normalization with Israel Comes with Risks and Gains

• In 2020, Congress Threatened Our Speech and Security With the “EARN IT” Act

• EFF Members Rise Up: 2020 in Review

• Using Microsoft 365 Defender to protect against Solorigate

• A week in security (December 21- December 27)

• Hackers steal Defense Information from servers of Kawasaki Heavy

• GoDaddy Apologized For The Insensitive Phishing Test Of Its Staff

• A match made in heaven: best practices for StorageGRID and FabricPool

• Top 5 ways to protect MFA codes

• 10 Benefits of Running Cybersecurity Exercises

• Vulnerability Summary for the Week of December 21, 2020

• AI Enables Predictability and Better Business

• Protected: Rebranding Perception Point

• LG Begins Rolling Out AirPlay 2 and HomeKit to 2018 Smart TVs

• HomePod Mini Now Works With Select 18W Chargers Following 14.3 Software Update

• 7 Cybersecurity Frameworks To Reduce Cyber Risk

• Apple Holding Shopping Event in Japan on January 2-3, Offering Free Apple Store Gift Card With Select Products

• Tesla Software Update Hints at Support for Apple Music

• 1-15 December 2020 Cyber Attacks Timeline

• Twitter Download To Your Computer For Free

• Main areas to consider before implementing a new virtualized SQL server

• Voice Assistants Can Store And Leak Texts Typed On Smartphones In Proximity

• REvil hackers to leak photos of plastic surgery patients after massive hack

• Ransomware in 2020: A Banner Year for Extortion

• Google: Microsoft Improperly Patched Exploited Windows Vulnerability

• Russia’s SolarWinds Attack

• Preventing Developer Burnout in the Age of Rapid Software Delivery

• Security Predictions for 2021from the (ISC)² Community of Security Professionals (PART 1)

• New Zero-Day, Malware Indicate Second Group May Have Targeted SolarWinds

• Homomorphic Encryption: The ‘Golden Age’ of Cryptography

• Remote Desktop Bugs: Patches That Took Priority in a Pandemic Year

• How Your Digital Trails Wind Up in the Police’s Hands

• SolarWinds SUNBRUST backdoor investigation using ShiftLeft’s Code Property Graph

• A Month of Reckoning for SaaS software creators and consumers

• Ten Ways to Ensure Web Application Security

• Six Steps To Mobile Device Safety | Avast

• Sangoma Technologies Confirms Data Breach as Result of Ransomware Attack

• Beyond the Technical – Advise for those starting in Infosec

• 12 new state privacy and security laws explained: Is your business ready?

• Ransomware Group Threatens To Release Hospital Patient Photos

• California Authorises First Commercial Robo-Delivery Service

• SolarWinds Issues Fix After Massive Hacking Campaign

• Don’t Let Your Stored Procedures Lack Integrity

• Privacy in 2020 and What to Expect for the Year Ahead

• E-commerce app 21 Buttons exposes millions of users’ data

• What Comes Next for the Santa Clara Principles: 2020 in Review

• Trying to register your antivirus in Windows Security Center?

• Best of 2020: Signal App Crypto Cracked, Claims Cellebrite

• Vietnam targeted in complex supply chain attack

• Hackers now indulge in donations to Charity

• Most tragic Cyber Attacks of 2020

• DEF CON 28 Safe Mode Demo Labs – Vincent Rose’s ‘Starkiller’

• Robert M. Lee’s & Jeff Haas’ Little Bobby Comics – ‘WEEK 309’

• DEF CON 28 Safe Mode Demo Labs – Tamoaki Tani’s ‘Malconfscan With Cuckoo’

• Phishing Will Continue Wreak Havoc in 2021—Make Sure You’re Ready

• SaaS security in 2021

• Working together to suppress complex and organized fraud

• 12.9-Inch iPad Pro With Mini-LED Display Rumored to Launch in First Quarter of 2021

• CFOs taking strategic roles after overcoming COVID-19 challenges

• Data Mapping and Data Planning Are Essential for an Organization

• ISC Stormcast For Monday, December 28th 2020 https://isc.sans.edu/podcastdetail.html?id=7306, (Mon, Dec 28th)

• Trump signs 2021 funding bill, averting Tuesday shutdown

• Apple Looks to 2021 With Japanese New Year Ad Highlighting the App Store

• 2020-12-24 (Thursday) – Dridex infection example

• Critical Vulnerability In Nintendo 3DS Console Could Allow MiTM Attacks

• SolarWinds Attack Gives Rise to New Runtime Security Models

• Quickie: Bit Shifting With translate.py, (Sun, Dec 27th)

• IT Security News Weekly Summary – Week 52

• IT Security News Daily Summary 2020-12-27

• Samsung and Xiaomi Plan to Ship Upcoming Smartphones Without Charger After Mocking Apple Over Same Move

• Livecoin Cryptocurrency Exchange Hacked Losing Control Of All Servers

• Surveillance Self-Defense and Security Education: Year in Review 2020

• Book Promotion Site NetGalley Disclosed Data Breach Following Website Defacement

• Here are 7 VPN Reviews on Reddit You Need to Check Out If You’re Looking for a VPN

• The Most Dangerous Online Threats Businesses Should Prepare For

• Sangoma Technologies Disclose Ransomware Attack – Conti Ransomware Gang Involved

• New Top 10 Best Antivirus for Android in 2021 -100 % Mobile Protection

• Vermont Hospital confirmed the ransomware attack

• Kuo: Apple Car Still in Early Stages, Unlikely to Launch Until 2025-2027 at Earliest

• Apple iCloud Outage Caused Setup Issues and Account Activation Failures

• Evaluating My 2020 VDI and DaaS Predictions

• Security Affairs newsletter Round 294

• Cellebrite Claims To Decrypt Signal App On Android Devices

• The Worst Hacks of 2020, a Surreal Pandemic Year

• Teenspire Global: Innovative Training for the Next Generation

• HackerOne announces first bug hunter to earn more than $2M in bug bounties

• Rebranding Perception Point

• SolarWinds releases updated advisory for SUPERNOVA backdoor

• UK Police Arrested Online Criminal Marketplace That Advertised Stolen Personal Credentials

• Penetration testing

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Halo Cloud Secure Now Supports Google Cloud Platform

• CYBERSECURITY CONSULTANT: ARE MORE CISSPS EMBRACING THE GIG ECONOMY?

• A New SolarWinds Flaw Likely Had Let Hackers Install SUPERNOVA Malware

• The Bitglass Blog

• OWASP Mobile Top 10 Vulnerabilities and Mitigation Strategies

• Weekly Update 223

• Biggest Security Takeaway of 2020: Don’t Leak Secrets on GitHub

• Eliminating API Authentication and Access Control Security Gaps

• The U.S. Internet Is Being Starved of Its Potential: 2020 in Review

• Configuring SSL/TLS Connection Made Easy

• IT Security News Daily Summary 2020-12-26

• Kaspersky Lab and Yandex have detected malicious browser extensions

• DEF CON 28 Safe Mode Demo Labs – Olivier Bilodeau’s ‘PyRDP’

• XKCD ‘Wrapping Paper’

• DEF CON 28 Safe Mode Demo Labs – Viral Maniar’s ‘Phirautee’

• EU and the Digital Services Act: Year in Review

• Joint LEA Operation Took Down Three Bulletproof VPN Services

• GoDaddy apologized for insensitive phishing email sent to its employees offering a fake bonus

• TruKno TTP based Threat Intelligence Platform

• Snowden: “We Can Fix a Broken System”

• New Gurucul XDR for Real-Time Threat Detection & Incident Response

• Security Perspective: Why Do 90% of Traders Fail?

• ‘Tis the Season for Nonprofit Cybersecurity Risks to Reach New Heights

• A ‘Bulletproof’ Criminal VPN Was Taken Down in a Global Sting

• The Emotet botnet is back and hits 100K recipients per day

• Top Stories: Apple Car Rumors, Windows on an M1 Mac, AirPods Max Compared

• Dell Wyse Thin Client Vulnerabilities Could Allow Device Takeover

• Flavor And Fragrance Giant Symrise AG Hit By Clop Ransomware

• TaskRabbit Reset Passwords After Credential Stuffing Attack

• Agent vs Agentless Monitoring: Why We Chose Agentless

• REvil gang threatens to release intimate pictures of celebs who are customers of The Hospital Group

• 
Quickie: String Analysis & Maldocs, (Fri, Dec 25th)

• base64dump.py Supported Encodings, (Sat, Dec 26th)

• ‘Build’ or ‘Buy’ your own antivirus product

• Smart tech gifts: How to keep your kids and family safe

• Police Arrest 21 WeLeakInfo Customers Who Bought Breached Personal Data

• SUNBURST SolarWinds BackDoor : Crime Scene Forensics Part 2 (continued)

• CrowdStrike releases free Azure tool to review assigned privileges

• Apple Setup Issues: Apple Watch Verification Failed, HomePod Stuck on Configuring

• DEF CON 28 Safe Mode Demo Labs – Jakub Botwicz’ ‘Cotopaxi’

• IT Security News Daily Summary 2020-12-25

• Quickie: String Analysis & Maldocs, (Fri, Dec 25th)

• DEF CON 28 Safe Mode Blockchain Village – Josh McIntyre’s ‘Chaintuts – Bitcoin Address Generator’

• MacRumors Giveaway: Win a Leather Apple Watch Band From Southern Straps

• North Korea-linked Lazarus APT targets the COVID-19 research

• High Tech Police Surveillance of Protests and Activism: Year in Review 2020

• Data Breach at Sangoma Technologies because of Ransomware Attack

• Get a New Apple Device for Christmas? Check Out Our Apple Product Guides

• The software-defined home: IoT sensors can help build healthier and greener housing

• The Russian cryptocurrency exchange Livecoin hacked on Christmas Eve

• Why cybersecurity tools fail when it comes to ambiguity

• URL Spoofing: Interview With Bug Bounty Hunter Narendra Bhati

• Microsoft Warns CrowdStrike of Hackers Targeting Azure Cloud Customers

• The CSO guide to top security conferences, 2020

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• Lazarus launches malware attack on Corona Virus vaccine research

• Data Security platform Vera Security acquired by HelpSystems LLC

• Happy Holidays From MediaOps

• Attackers Abusing Citrix NetScaler Devices to Launch Amplified DDoS Attacks

• CISA Releases Free Detection Tool for Azure/M365 Environment

• DDoS amplify attack targets Citrix Application Delivery Controllers (ADC)

• Apple Begins Lowering App Store Commission to 15% for Eligible Developers

• SUNBURST Additional Technical Details

• Looking Back on the Year in Apple Security – Intego Mac Podcast Episode 167

• Russian crypto-exchange Livecoin hacked after it lost control of its servers

• DEF CON 28 Safe Mode Blockchain Village – Martin Abbatemarco’s ‘7 Phases Of Smart Contract Hacking’

• IT Security News Daily Summary 2020-12-24

• The Importance of Cybersecurity in Biological Research

• Millions of devices could be hacked exploiting flaws targeted by tools stolen from FireEye

• Citrix ADC Servers Targeted in DDoS Attacks

• Active Chase Phishing Scam Disguised as Fraud Alerts

• Emotet Updates Prompt New Detection Strategies for Defenders

• Why AI and security pros need to work together to fight cybercrime

• Hacker Earns $2m in Bug Bounties

• DOJ Officials Shut Down Spoofed Domains of Moderna and Regeneron

• Amazon Gift Card Scam Delivers Dridex This Holiday Season

• DEF CON 28 Safe Mode Blockchain Village – Peiyu Wang’s Exploit Insecure Crypto Wallet’

• XKCD ‘Into My Veins’

• COVID-19 and Surveillance Tech: Year in Review 2020

• How COVID Changed Content Moderation: Year in Review 2020

• Merry Christmas Silicon UK Readers

• IRS IG: No taxpayer data exposed by hack

• Citrix devices are being abused as DDoS attack vectors

• White Ops Acquired by Goldman Sachs

• OWASP API Security Top 10: A Framework for Improving Your API Security Efforts

• Happy Holidays from Morphisec

• Lazarus Group Hits COVID-19 Vaccine Maker In Espionage Attack

• ‘Shark Tank’ host Robert Herjavec on the SolarWinds cyber hack

• A Christmas Miracle: How the IoT saved Christmas

• Smart Tachographs: Innovation out of necessity

• Why application-layer encryption is essential for securing confidential data

• Google not to use Fitbit data for advertising purposes

• Trump Vetoes $740bn Defense Bill Over Section 230

• Zoom To Deploy Email Service, Calendar App

• Windows Zero-Day Still Circulating After Faulty Fix

• SolarWinds Hackers “Impacting” State and Local Governments

• VideoBytes: Offensive security tools and the bad guys that use them

• Google reveals unpatched 0day vulnerability in Microsoft’s API

• Quarterbacking Vulnerability Remediation

• Google Asked AI Researchers To Strike Positive Tone – Report

• Google reveals unpatched zero day vulnerability in Microsoft’s API

• Vermont Hospital Says Cyberattack Was Ransomware

• HelpSystems Acquires Data Protection Firm Vera

• Credential Phishing Attack Impersonating USPS Targets Consumers Over the Holidays

• US Treasury officials’ Email Accounts Hacked by the Threat Actors Behind SolarWinds Attack

• Delivering Santa from Third-Party Risk

• HelpSystems Acquires Data Security Firm Vera

• Google reported that Microsoft failed to fix a Windows zero-day flaw

• Twitter To Remove All Followers From Potus Accounts

• S3 Ep12: A chat with social engineering hacker Rachel Tobac [Podcast]

• HelpSystems Acquires Vera to Expand Data Security Offerings

• Nintendo Went Mission-Impossible on Homebrew Hacker in 2013, Alleged Leaked Documents Show

• Cartoon: The Message Is Loud and Clear

• China cyber attacks: the current threat landscape

• Monitoring Microservices on AWS with Thundra: Part II

• How China Uses Stolen US Personnel Data

• Amazon Faces Union Challenge In Alabama

• Why You Should Update Your Software | Avast

• Goldman Sachs leads acquisition of bot mitigation company White Ops

• Government Security Experts Issue Farmers with New Advice

• ‘Ransomware Task Force’: Microsoft, McAfee and Rapid7 Coalition

• Hands-On: Kali Linux on the Raspberry Pi 4

• Misconfigured AWS Bucket Exposes Hundreds of Social Influencers

• ‘Ransomware Task Force’, Microsoft, McAfee and Rapid7 Coalition

• SolarWinds hackers are ‘impacting’ U.S. federal, state, and local governments

• US Teen Accused of Deadly Cyber-Stalking Campaign

• New Lawsuit Takes Aim at Ring After Smart Doorbell Hijacking

• Google Discloses Poorly-Patched, Now Unpatched, Windows 0-Day Bug

• Cyber Attacks are grave risks to National Security, says US President Joe Biden

• Ransomware attack confirmed on Vermont Hospital

• Payment Card Information leaked of Proliance Surgeons

• Malicious Word Document Delivering an Octopus Backdoor, (Thu, Dec 24th)

• Want to add antivirus to your existing portfolio?

• North Korean Hackers Trying to Steal COVID-19 Vaccine Research

• Best of 2020: The SolarWinds Supply Chain Hack: What You Need to Know

• U.S. cybersecurity: Preparing for the challenges of 2021

• 7 ways malware can get into your device

• Network operator spend on multi-access edge computing to reach $8.3B by 2025

• Securing the future of IoT devices

• Three Strikes & You’re in!

• Bitglass Security Spotlight: Popular Messaging App Exposes Users’ Private Data.

• 2021 Cybersecurity in healthcare

• New SUPERNOVA Backdoor Found in SolarWinds Cyberattack Analysis

• Building a Better U.S. Approach to TikTok and Beyond

• Geoverse announces successful 5G data session using its GeoCore intelligent service platform

• Daimler and Infosys partner to drive IT infrastructure transformation

• FaaS: Security Considerations to Know Before Going Serverless

• Minimice las pérdidas corporativas al monitorear el desempeño de sus aplicaciones

• Stack8 to offer RingCentral’s UCaaS platform to its enterprise customers

• 2020-12-23 (Wednesday) – Quick post: Qakbot infection with spambot activity

• FireEye shares jump back to pre-hack levels

• Attack Surface Discovery: A Review of FINRA-lookalike Domain and Linked IoCs

• 2020-12-23 (Wednesday) – Quick post: recent Emotet activity

• Android security: The last piece of advice you’ll need for 2020

• Apple’s New Privacy-Focused Tracking Prompt Begins Appearing for iOS 14 Users [Updated]

• Five Reasons Why You Might Want to Consider AirPods Max

• The White House Counsel and Trump’s Attack on the 2020 Election

• Lawfare Live: All the President’s Pardons

• SolarWinds: The Need for Persistent Engagement

• IT Security News Daily Summary 2020-12-23

• Endpoint security quiz: Test your knowledge

• Trump threatens yet another shutdown

• The Joy of Tech® ‘Russian Hack!’

• Lions and Tigers and a December Full of Adversary Activity – Oh My!

• Garry on Lockdown: The Queen’s Gambit

• DEF CON 28 Safe Mode Blockchain Village – Peter Kacherginsky’s ‘Attacking & Defending Blockchain Nodes’

• Apple’s New Privacy-Focused Tracking Prompt Begins Appearing in iOS 14.4 Beta

• Why DOD needs DevOps to accelerate IT service delivery

• Trump vetoes 2021 defense bill

• Cloud, off-the-shelf gaming equipment expands flight training options

• 6 persuasion tactics used in social engineering attacks

• Microsoft, McAfee, Rapid7, and Others Form New Ransomware Task Force

• Lazarus Group Hits COVID-19 Vaccine-Maker in Espionage Attack

• US Teen Accused of Deadly Cyber-stalking Campaign

• White Ops Announces Its Acquisition

• Forward Air Trucking Victim of New Hades Ransomware Gang

• Joker’s Stash Carding Website Temporarily Disrupted

• Roanoke College Forced to Delay Spring Semester After Cyber-Attack

• Fashion marketplace giant 21 Buttons exposes millions of users’ data

• Garry on Lockdown: The Queen’s Gambit

• Cyber-Attack on European Court of Human Rights

• Lazarus Attacks Vaccine Research

• Lazarus Group Seeks Intelligence Related to COVID-19

• CISA Releases CISA Insights and Creates Webpage on Ongoing APT Cyber Activity

• Analysis Dridex Dropper, IoC extraction (guest diary), (Wed, Dec 23rd)

• SolarWinds: What the Intelligence Tells Us

• Building a Better U.S. Approach to TikTok—and Beyond

• Water Wars: Flirting in the Taiwan Strait

• Third-Party APIs: How to Prevent Enumeration Attacks

• Security measures critical for COVID-19 vaccine distribution

• Attackers Use Mobile Emulators on an Unprecedented Scale to Steal Millions of Dollars in a Few Days

• Fact vs. Fiction: Film Industry’s Portrayal of Cybersecurity

• Implementing a Common Controls Framework using Hyperproof

• 2020 in Review

• How We Saved .ORG: 2020 in Review

• McAfee’s Steve Grobman on massive SolarWinds cyber hack

• Signal Founder Dismisses Cellebrite Encryption Crack Claim

• US COVID-19 relief bill to make copyrighted content streaming a felony

• CISA warns that SolarWinds software may not be only entry point in latest breaches

• DOD announces first CMMC pilot contract nominees

• GAO tracks diversity in the intelligence community

• Navy’s aquatic drone plan faces operational hurdles

• Critical Flaws in Kepware Products Can Facilitate Attacks on Industrial Firms

• North Korean Hackers Target COVID-19 Research

• Semperis Appoints Igor Baikalov as Chief Scientist

• Europol and Eurojust sign new contribution agreement expanding cooperation on the SIRIUS project

• Emotet Returns To Hit 100K Mailboxes Per Day

• New York Temporarily Bans Facial Recognition In Schools

• DHS Warns Against Using Chinese Hardware And Digital Services

• US Regulator Charges Ripple Over Its XRP Asset

• Amid Apple Car Rumors, Volkswagen CEO Welcomes Competitors to Accelerate Transformation of the Auto Industry

• The IT skills gap: flexible resourcing is the solution

• A discount isn’t just for Christmas – why data can hold the key to relationships that go beyond the festive season

• No emails have leaked from the 2020 election campaigns yet — tiny USB sticks may be one reason why

• A RECIPE FOR AVOIDING SOFTWARE FAILURES

• Bitglass Security Spotlight: Popular Messaging App Exposes Users’ Private Data.

• Power in a Small Package: EF300 Entry Tier NVMe System is Newest Member of the E-Series Family

• Emotet Returns to Hit 100K Mailboxes Per Day

• Hey Alexa, Who Am I Messaging?

• Enterprise IoT Security Is a Supply Chain Problem

• Launching a New Game Studio and Planning for Growth

• Cybereason vs. Clop Ransomware

• Deals: Christmas Week Sales Include Lowest-Ever Prices on M1 MacBook Pro, iMac, and More

• I played the free online games your kids are playing and here’s what happened

• WORKFORCE STUDY: REVIEWING CYBERSECURITY’S PANDEMIC RESPONSE

• Let’s Encrypt comes up with workaround for abandonware Android devices

• Elon Musk Offered Tesla To Apple’s Tim Cook

• How to make a QR code to accept Bitcoin while keeping it secure

• How to address security fatigue and stop cybercriminals from winning

• Police bring down “bulletproof” VPN services beloved by cybercriminals

• Cellebrite claims to be able to access Signal messages

• Forums, Marketplaces, and Shops Remain Essential Venues for the Criminal Economy

• Apple to Fix Resolution Issue With Ultrawide Displays on M1 Macs in Future macOS Update

• Fact vs. Fiction: Film Industry’s Portrayal of Cybersecurity

• Lessons from Teaching: Week 12

• Hacking Christmas Gifts: Artie Drawing Robot

• Biden Says Huge Cyberattack Cannot Go Unanswered

• ACLU Sues FBI to Learn How It Obtains Data From Encrypted Devices

• DHS Warns that Businesses Sourcing Data Services and Equipment from China May Face Legal Repercussions

• Apple Starts Accepting Developers Into Small Business Program

• The International Legal Implications of “Havana Syndrome”

• China and the U.S. Make Antitrust Moves Against Domestic Tech Giants

• 5 Core Elements of a Risk-Based Cybersecurity Dashboard

• Holiday Message from Clar Rosso, (ISC)² CEO

• Multiple government agencies hacked by Russia-backed actors

• Millions of Devices Affected by Vulnerabilities Used in Stolen FireEye Tools

• DHS Details Risks of Using Chinese Data Services, Equipment

• Cyber Insurance Market Expected to Surge in 2021

• Investigating the Navalny Poisoning

• Opportunities and Threats – IoT and the Rise of 5G

• Data Privacy – Now’s the Time for the US to Catch Up

• November 2020 Cyber Attacks Statistics

• Facebook To Allow Physical Security Keys Next Year

• 5 IoT Threats To Look Out for in 2021

• How to bring zero-trust security to microservices

• Ransomware: Attacks could be about to get even more dangerous and disruptive

• 2020 Shows the Danger of a Decapitated Cyber Regime

• How we protect our users against the Sunburst backdoor

• Facebook Employees Criticize Campaign Against Apple in Leaked Comments

• Securing Crypto Exchanges To Prevent Over-regulation

• How to avoid subdomain takeover in Azure environments

• Bath Council Refuses To Allow 5G Mast

• Web Page Layout Can Trick Users into Divulging More Info

• Leaky Server Exposes 12 Million Medical Records to Meow Attacker

• SolarWinds: Dozens Of US Treasury Email Accounts Hacked

• US: Buying Chinese Tech is a “Grave Threat” to Your Data Security

• Lazarus covets COVID-19-related intelligence

• How to Defend Against Malware, Phishing, and Scams During COVID-19 Crisis

• Biometrics Don’t Replace Mobile Password Security

• Looking for adding new detection technologies in your security products?

• Law Enforcement Seizes Joker’s Stash — Stolen Credit Card Marketplace

• Does the U.S. Need a National Cyber Strategy?

• New Critical Flaws in Treck TCP/IP Stack Affect Millions of IoT Devices

• Research: nearly all of your messaging apps are secure

• As technology develops in education so does the need for cybersecurity

• US Department of Homeland Security warns American business not to use Chinese tech or let data behind the Great Firewall

• Only 30% prepared to secure a complete shift to remote work

• Tech’s bigger role in pharma industry demands stronger security measures

• How to enhance onboarding for digital banking services using risk management

• ‘Twas the night before InfoSec

• Card-Not-Present Fraud: 4 Security Considerations for Point of Sale Businesses

• U.S. Government Warns of Phishing, Fraud Schemes Using COVID-19 Vaccine Lures

• Experts listed the possible goals of cyber criminals who hack websites

• New NIST guide helps healthcare orgs securely deploy PACS

• Comms Alliance argues TSSR duplicates obligations within Critical Infrastructure Bill

• New Paper: “Future of the SOC: SOC People — Skills, Not Tiers”

• DHS warns against using Chinese hardware and digital services

• ISC Stormcast For Wednesday, December 23rd 2020 https://isc.sans.edu/podcastdetail.html?id=7304, (Wed, Dec 23rd)

• Arista Networks Attack Surface Assessment: AI-driven threat hunting and incident response expertise

• Rapid website-blocking power for violent material proposed for eSafety Commissioner

• Sysdig meets the SOC 2 standards for security and availability

• Cybereason vs. SolarWinds Supply Chain Attack

• Apple Sending Special iPhones to First Participants in Security Research Device Program

• Cybersecurity breach is worrying considering years of security efforts: Expert

• Solorigate Resource Center – updated December 22nd, 2020

• How to Avoid Identity Theft and Other Online Scams

• How to Protect Yourself With a VPN

• SolarWinds Cyber Attack – What We Know About It, So Far

• Don’t let a data breach sink your business: Here’s what you need to know

• SolarWinds Campaign Focuses Attention on ‘Golden SAML’ Attack Vector

• Highly Evasive Attacker Leverages SolarWinds Supply Chain to Compromise
  Multiple Global Victims With SUNBURST Backdoor

• Todd Cione joins Teradata as Chief Revenue Officer

• Enterprise EDR Expands New Linux Coverage to SUSE, OpenSUSE, Ubuntu, Oracle & Amazon Linux

• Quiz: Web application security threats and vulnerabilities

• FITARA grades mostly stable

• Emotet Campaign Restarts After Seven-Week Hiatus

• Microsoft Ups Security of Azure AD, Identity

• Firefox continues cracking down on tracking with cache partitioning

• Facebook to introduce hardware keys to bolster security

• Signal app’s on-device encryption can be decrypted, claims hacking firm Cellebrite

• IT Security News Daily Summary 2020-12-22

• iPhone Calendar Events spam is back: Here’s how to get rid of it

• Announcing the General Availability of Container Security in the VMware Carbon Black Cloud

• Biden promises ‘overwhelming focus’ on hack recovery

• Making population data count: The Census Data Lake

• 50 orgs ‘genuinely impacted’ by SolarWinds hack, FireEye chief says

• Robots for kids: STEM kits and more tech gifts for hackers of all ages

• Facebook Will Offer Improved Account Security In 2021

• Building a Non-Functional Requirements Framework – Overview

• Researchers shared the lists of victims of SolarWinds hack

• Elon Musk Claims He Once Reached Out to Tim Cook About Tesla Purchase But Was Refused Meeting

• Video: Testing Windows on an M1 Mac With Parallels 16

• Cybersecurity Trends: Keeping Up With 2020’s ‘New Normal’

• Union lawsuit looks to block Schedule F

• A quiet, steady communications revolution has radically improved response in public safety

• Holiday Puppy Swindle Has Consumers Howling

• Qualys Researchers Identify 7+ Million Vulnerabilities Associated with SolarWinds/FireEye Breach by Analyzing Anonymized Vulnerabilities across Worldwide Customer Base

• Rumors Persist of New Apple TV With Stronger Gaming Focus, Updated Remote, and Faster Chip Next Year

• The New IOT Security Act Shows the Limits of Congressional Policymaking for Cybersecurity

• Does Biden believe the Russia hack is an act of war?

• Two groups might have breached SolarWinds Orion software- Microsoft

• 7 Cybersecurity Tools On Our Holiday Wish List

• UK lawmakers propose law banning retail bots after PS5 fiasco

• UN Rights Expert Urges Trump to Pardon Assange

• Prepare to Fight Upcoming Cyber-Threat Innovations

• 5 Email Threat Predictions for 2021

• Risk Journeys with Lisa Young | Part 2

• The CASE Act Is Just the Beginning of the Next Copyright Battle

• Emotet returns just in time for Christmas

• NCSC Issues Cyber Security Guidance For Farmers

• Phishing Campaign Impersonates New York Department of Labor to Steal Private Information

• U.S. Seizes Domains Used for COVID-19 Vaccine Phishing Attacks

• cybercrime

• IoT cyber law signed amid growing vulnerabilities

• The best gifts for hackers

• Phishers Spoof New York Department of Labor

• New marketing campaign against UK subway by using TrickBot malware

• XKCD ‘Conjunction’

• Developer Successfully Emulates Nintendo Switch Games on M1 Mac

• The CASE Act, Hidden in the Coronavirus Relief Bill, Is Just the Beginning of the Next Copyright Battle

• Israel targets Al Jazeera journalists with spying Malware

• Microsoft and others set up Ransomware Task Force

• US Bill against foreign firms that are Spying

• Facebook to focus more on Mobile Security in 2021

• Dubber acquires Speik to expand its AI call-recording service

• Attesting to the Security of Data-in-Use

• Does a friend “need money urgently”? Check your facts before paying out…

• Shabang Banged to Rights

• NSO ‘Pegasus’ Hacking Tool Targets Journalists Again

• Deals: Apple Updates iTunes Movies With Sales on Holiday Classics, Recent Releases, Franchise Bundles, and More

• This Disastrous Copyright Proposal Goes Straight to Our Naughty List

• Year-End Challenge for Online Rights

• OneTrust’s Alan Dabbiere on government agency cyber attacks

• How to achieve cost savings with cloud management optimisation

• Why do bank account scammers fear icebergs?

• How to enhance access to digital banking with risk management

• ‘Tis the season for session hijacking – Here’s how to stop it

• Microsoft Developing Own ARM-Based Server Chips

• Feds seize VPN service used by hackers in cyber attacks

• Joker’s Stash Carding Site Taken Down

• Tech Giants Lend WhatsApp Support in Spyware Case Against NSO Group

• Tech Giants Show Support for WhatsApp in Lawsuit Against Spyware Firm

• What is SecOps? Everything you need to know

• Police Seize VPN Service Beloved by Cyber-criminals

• Law Enforcement Disrupts VPN Services Enabling Cybercrime

• Cybercriminals’ Favorite Bulletproof VPN Service Shuts Down In Global Action

• Eavesdropping on Phone Taps from Voice Assistants

• Joker’s Stash Carding Site Taken Down, For Now

• Signal: Firm Claims To Have Cracked Chat App’s Encryption

• Law Enforcement Take Down Three Bulletproof VPN Providers

• U.S. House Intel Chair Wants Briefing On Recent Hacking Campaign

• Trump Administration Says Russia Behind SolarWinds Hack. Trump Himself Begs To Differ

• Apple TV+ Show ‘Ted Lasso’ Likely to End After Season 3

• Expert Reaction On Microsoft Says It Identified 40+ Victims Of The SolarWinds Hack

• Experts Reacted On Microsoft Confirming Breached In Recent SolarWinds Supply Chain Hack

• UK firm NOW: Pensions tells some customers a ‘service partner’ leaked their data all over ‘public software forum’

• Trucking And Freight Company Forward Air Suffered Ransomware Attack

• How to secure your business from cyberattacks

• What Is the Safest Backup Option Available to Regular Users

• Is your app modernization strategy ready for the future?

• VPN Service Used by Cybercriminals Disrupted in Global Law Enforcement Operation

• Top 10 cybersecurity online courses for 2021

• Firefox 85 to Bring Full Network Partitioning to Block Most User Tracking Efforts

• The Ministry of Internal Affairs of Russia is creating a cyber police

• Security as Code: How Repeatable Policy-Driven Deployment Improves Security

• Wake on LAN with IP address manager: A holistic approach to remote booting

• 2021 Security Crystal Ball: Trends and Predictions for the Year Ahead

• How the Edge Improves Microservices

• WFCM 1.7.0: new file integrity checks & detailed email notifications

• Bulletproof VPN services took down in a global police operation

• Netatmo Video Doorbell With HomeKit Now Available to Order in U.S. and Canada, Ships Early January

• Reflections on the SolarWinds Breach

• Ask Lawfare: A Special Year-End Edition of the Lawfare Podcast

• The Military Waiver Requirement for Secretary of Defense Shouldn’t Substitute Individuation

• Six Trends Shaping the 2021 Cybersecurity Outlook

• Patching alternative to Solarwinds Orion

• Sen. Wyden: Dozens of Treasury Department email accounts were hacked during cyberattack

• Apple Sets 2024 Deadline For Passenger Vehicle – Report

• How to combat future cyberattacks following the SolarWinds breach

• Crypto Exchange EXMO Says Funds Stolen in Security Incident

• Ministry of Justice Suffers 17 Serious Data Breaches Last Year

• Security Intelligence Handbook Chapter 5: How Security Intelligence Drives Proactive Response

• Beware: not so festive social media scams

• Patrick Wardle on Hackers Leveraging ‘Powerful’ iOS Bugs in High-Level Attacks

• CISA Issues ICS Advisory for New Vulnerabilities in Treck TCP/IP Stack

• Gartner Ranks Radware #1 for API & High Security Use Cases in 2020 Critical Capabilities Report

• Expert Commentary On Crypto Exchange EXMO Hacked

• UK firm NOW: Pensions tells 1.7 million customers a ‘service partner’ leaked their data all over ‘public software forum’

• Cybersecurity Consultant: Are More CISSPs Embracing the Gig Economy?

• Android security: Analysis, advice, and next-level knowledge

• Google, Facebook Team Up To Tackle Antitrust Lawsuit – Report

• Critical Dell Wyse Bugs Let Attackers to Execute Code and Access Files and Credentials

• Farmers get their own security advice as cyberattacks increase

• Law enforcement take down three bulletproof VPN providers

• SolarWinds Claims Execs Unaware of Breach When They Sold Stock

• Cybereason Adopts Oracle Cloud Infrastructure to Enhance its Platform Security

• iPhones of Al Jazeera Journalists Being Snooped On Via Israeli Firm’s Spyware

• How to Build Successful Security Awareness Training Programs in 2021 and Beyond

• $10 Credit Cards, $2 PayPal Accounts + More Findings From VMware Carbon Black – Expert Insight

• UK Unlikely To Hit 5G And Broadband Target

• Google, Facebook Team Up To Tackle Antitrust Lawsuits – Report

• Servers of Carding Site “Joker’s Stash” Seized by Law Enforcement

• Cyberattack Hit Key US Treasury Systems: Senator

• Tech Giants Support Facebook in Case Against Spyware Maker

• Cybercriminals’ favourite VPN taken down in global action

• What can we learn from the SolarWinds Breach?

• Monitoring Microservices on AWS with Thundra: Part I

• Malware Victim Selection Through WiFi Identification, (Tue, Dec 22nd)

• Expert Says SolarWinds Cyber-Attack Serves Important Password Security Reminder

• The 4 Key Security Gaps Every Security Team Needs To Close In 2021

• Expert Insight On Flavors Designer Symrise Ransomware Attack

• 16-30 November 2020 Cyber Attacks Timeline

• How have digital transactions become safer?

• What is Security Orchestration Automation and Response?

• 6 Information security predictions for 2021

• Just released! AT&T Cybersecurity Insights™ Report: 5G and the Journey to the Edge

• What is a managed firewall? Benefits, offerings explained

• 6 board of directors security concerns every CISO should be prepared to address

• STEM Activities For Kids | Avast

• Mobile Disinformation Campaigns | Avast

• Just 8% of Firms Offer Regular Security Training

• NSO Group Spyware Used To ‘Hack’ Al Jazeera Journalists

• December 2020 Web Server Survey

• Microsoft and Google join Facebook’s legal battle against hacking company NSO

• Threat Actors Increasingly Using VBA Purging in Attacks

• Big Tech Joins Up to Ransomware Task Force

• A Second Hacker Group May Have Also Breached SolarWinds, Microsoft Says

• Zero Trust: Not Just for Humans, but Also Machines

• Application security testing is not just buzzwords

• Report: 2020 Sees Spikes in Mobility, Fintech Fraud

• VMware and Cisco also impacted by the SolarWinds hack

• Objectives of Nation State Cyber Attackers

• Microsoft and McAfee headline newly-formed ‘Ransomware Task Force’

• Steps IT pros can take to prioritize interpersonal needs

• Cybersecurity Advent calendar: Stay aware, stay safe!

• Trukno: “On A Mission To Deliver Cyber Intelligence, Not Cyber News”

• Worldwide new account fraud declined 23.2% in 2020

• Three reasons why context is key to narrowing your attack surface

• EFF to Ninth Circuit: Don’t Grant Immunity to Notorious Spyware Company

• Three Strikes & You’re in!

• Detecting SUNBURST/Solarigate activity in retrospect with Zeek – a practical example

• CFOs optimistic, expect the economy to improve in 2021

• Operational planning simulation for defense against an attacking drone swarm

• How A Device to Cloud Architecture Defends Against the SolarWinds Supply Chain Compromise

• ISC Stormcast For Tuesday, December 22nd 2020 https://isc.sans.edu/podcastdetail.html?id=7302, (Tue, Dec 22nd)

• You Think You’re Prepared for the Next SolarWinds. You Are Not.

• ColorTokens Partner Program: Content, tools, and training in ColorTokens’ Zero Trust approach

• December 21st, 2020 – Solorigate Resource Center

• NSA Warns of Cloud Attacks on Authentication Mechanisms

• D-Link Layer 3 Stackable 10G Managed Switches offer high scalability, availability, and redundancy

• Tufin Orchestration Suite R20-2: Users can evaluate network access risks and minimize attack surface

• Microsoft, Google, Cisco, and others file amicus brief in support of Facebook’s NSO lawsuit

• Cognizant acquires Inawisdom to help businesses improve business outcomes

• uCloudlink and Vodafone extend partnership on data procurement

• Software factories are new ‘crown jewels,’ Air Force official says

• 5 recommendations for cyber maturity

• OneLogin expands leadership team with the appointment of two new members

• May Mitchell joins iboss as Senior Vice President of Marketing

• Microsoft has discovered yet more SolarWinds malware

• Zero-click iMessage zero-day used to hack the iPhones of 36 journalists

• Security experts warn of long-term risk tied to Energy Department breach

• Apple is allegedly working on a passenger car, breakthrough battery tech

• What we know about the new SARS strain that’s shutting down the UK

• The U.S. Government Is Targeting Cryptocurrency to Expand the Reach of Its Financial Surveillance

• Cybersecurity pros: Are humans really the weakest link?

• Test your network threats and attacks expertise in this quiz

• SolarWinds backdoor infected tech giants, impact unclear

• Advice for an effective network security strategy

• Top network attacks of 2020 that will influence the decade

• Cisco, Intel, Deloitte Among Victims of SolarWinds Breach: Report

• Talos Vulnerability Discovery Year in Review — 2020

• Epic Games and Samsung Send ‘Free Fortnite’ Swag to Influencers With Galaxy Tab S7

• A Massive Fraud Operation Stole Millions From Online Bank Accounts

• The Slow-Motion Tragedy of Ola Bini’s Trial

• Advice for incident responders on recovery from systemic identity compromises

• IT Security News Daily Summary 2020-12-21

• Syrmise Flavor Developer Affected by Clop Ransomware Group

• Magecart Group Makes Mistake That Leaks Victims in RAT Code

• Cyberpunk 2077 Fake Android App Download Leads to Ransomware

• Partial lists of organizations infected with Sunburst malware released online

• Smart Doorbell Disaster: Many Brands Vulnerable to Attack

• Nosy Ex-Partners Armed with Instagram Passwords Pose a Serious Threat

• NSA, CISA Warn of Attacks on Federated Authentication

• SolarWinds/SUNBURST: DGA or DNS Tunneling?

• Dell Wyse ThinOS flaws allow hacking think clients

• Schedule F workforce plan survives funding bill

• Cryptocurrency 101: What every business needs to know

• Defending Against State and State-Sponsored Threat Actors

• Russia Officially Denies Large-scale US Hack

• Look-alike Domain Mitigation: Breaking Down the Steps

• Samsung’s Upcoming Galaxy Buds Pro Copy Apple’s ‘Spatial Audio’ Feature

• Apple Car Production Slated for 2024 With ‘Next Level’ Battery Technology

• Best Practice: Identifying And Mitigating The Impact Of Sunburst

• Zero-Click Apple Zero-Day Uncovered in Pegasus Spy Attack

• The 5 tech skills should you master in 2021

• Top 5 tech skills to master in 2021

• The Best New Antivirus for Android

• Critical Vulnerabilities Expose Dell Wyse Thin Client Devices to Attacks

• Report: Facebook Shopping Scams Are On The Rise

• 7 Infamous Moments in Adobe Flash’s Security History

• Zoom Exec Charged With Tiananmen Square Massacre Censorship

• Predicated Data Classification Trends for 2021

• Zero-Click iOS Zero-Day Vulnerability Found Targeting Al-Jazeera Journalists

• IMF could track your browsing history to determine credit score

• Security vendors: It’s time to come clean about intrusions

• Breakup Plan for Cyber Command and NSA

• BlueHalo Acquires Base2 and Fortego

• JumpCloud Adds Conditional Access Policy Support

• Continue Clean-up of Compromised SolarWinds Software

• SUPERNOVA, a backdoor found while investigating SolarWinds hack

• Include Lawfare in Your End-of-Year Giving

• How to Fix the Vulnerabilities Targeted in the SolarWinds and FireEye Hack

• Grand unification theory of cloud

• Cyber exec: 50 orgs ‘genuinely impacted’ by SolarWinds hack

• Dark Web Pricing Skyrockets for Microsoft RDP Servers, Payment-Card Data

• Simplifying Proactive Defense With Threat Playbooks

• Phishing Campaign Uses New York Department of Labor Logo and Pandemic Aid Info to Steal Private Information

• DEF CON 28 Safe Mode Blockchain Village – Suhyeon Lee’s ‘Blockchain For Cyber Defense’

• Threat Hunting Offsets the Technology Gaps

• UK Energy firm suffers serious data breach

• iVerify: Added security for iPhone and iPad users

• This app will tell you if your iPhone has been hacked

• Hacker Dumps Crypto Wallet Customer Data; Active Attacks Follow

• Critical Bugs in Dell Wyse Thin Clients Allow Code Execution, Client Takeovers

• Dell Wyse Thin Client scores two perfect 10 security flaws

• Email Address of Instagram Users Exposed via Facebook Business Suite

• Differences among WEP, WPA, WPA2 and WPA3 wireless security protocols

• Two Critical Flaws — CVSS Score 10 — Affect Dell Wyse Thin Client Devices

• ColorTokens Launches Global Partner Program

• What’s the deal with openportstats.com?, (Mon, Dec 21st)

• Some Of 2020’s More Interesting Security Stories

• Kazakhstan Spies On Citizens’ HTTPS Traffic

• Al Jazeera Journalists Hacked Via NSO Group Spyware

• A Second Hacking Group Has Targeted SolarWinds Systems

• iPhone 12 Became the World’s Top 5G Smartphone Within Two Weeks of Launch

• The cloud polyglot

• iPhones of 36 Al Jazeera journalists hacked with NSO’s zero-click spyware

• 6 modern data stack trends to look for in 2021

• Google Issues Post Mortem on Gmail, YouTube Outage

• Ransomware Attacks Surge in Q3 as Cyber-Criminals Shift Tactics

• Hacker publishes stolen email and mailing addresses of 270,000 Ledger cryptocurrency wallet users

• We Have a National Cybersecurity Emergency — Here’s How We Can Respond

• Vulnerability Summary for the Week of December 14, 2020

• Secure Network Analytics (Stealthwatch) Then, Now and Beyond – Part 3: Into the Future

• Deals: Get the 256GB 12.9-Inch iPad Pro for $949 ($150 Off, Lowest Price)

• Cramer: Massive cyber attack suggests security systems may be out-of-date

• BrandPost: Your Guide for Digital Safety: Holiday Edition

• Your online search history could make for a better credit score says the IMF

• A second hacking group has targeted SolarWinds systems

• Journalists’ Phones Hacked via iMessage Zero-Day Exploit

• Gallagher Appoints Three New Cybersecurity Specialists

• US Cyberattack: More than 50 Companies Suffer A Massive Breach

• StrikeForce Unveils SafeVchat Delivering First Fully Secure Video Conferencing Platform

• European Commission Proposes Bold Steps on Cybersecurity

• Philips Hue to Introduce Updated Dimmer Switch and ‘Wave Linear’ Outdoor Lighting

• A response to Security Ratings – Love, Loathe or Live With Them

• Modernize Your Intrusion Detection Strategy with an AI-Powered, Open-Source NIDS>

• Top Linux Cloud Threats of 2020

• Deals: Save Up to $60 on Apple Watch Series 6 and Apple Watch SE

• Why Schrems II Might Not Be a Problem for EU-U.S. Data Transfers

• Qualified Immunity and the Plea for Accountability

• Script for detecting vulnerable TCP/IP stacks released

• SolarWinds is the tip of the iceberg

• Cybersecurity Things to Celebrate in 2020

• SolarWinds releases known attack timeline but new data suggests hackers may have done a dummy run last year

• Can I Ask You A Question?

• Ofcom Urges Telecoms Provider Aid For Vulnerable Households

• NCSC Probes UK Fallout Of Massive Hacking Campaign

• Judge Proposes 2023 Trial Date For Google Antitrust Case

• Apple Closes Los Angeles Stores As Covid Cases Spike

• Tech Trends and Predictions 2021

• TAU Threat Analysis: Insights on the SolarWinds Breach

Generated on 2021-01-01 00:01:27.675094