IT Security News Monthly Summary – July

• IT Security News Daily Summary 2022-06-30

• Officers’ smart cards foster transparency, community trust

• EFF to File Amicus Brief in First U.S. Case Challenging Dragnet Keyword Warrant

• OpenSea phishing threat after rogue insider leaks customer email addresses

• NFT Marketplace OpenSea Suffers Data Breach- Users’ Email IDs Leaked

• Google: Hack-for-Hire Groups Present a Potent Threat

• ZuoRAT Malware Is Targeting Routers

• Jenkins warns of security holes in these 25 plugins

• Research shows data security tools fail against ransomware 60% of the time

• Pentagon’s classification system lacks consistency, IG finds

• Facebook Wrestles With Decision To Share User Data With Law Enforcement Following Roe V. Wade Decision

• 18 Zero-Days Exploited So Far in 2022

• State and local leaders call for overhaul of nation’s 911 system

• How cities and states track pandemic relief spending

• How traditional security tools fail to protect companies against ransomware

• Hacking Linux is Easy with PwnKit

• API Security Losses Total Billions, But It’s Complicated

• California state’s gun control websites expose 10 years of personal data

• 6 Reasons Cybersecurity Awareness Training is Important

• Verizon to improve internet connectivity at 80 Native American schools

• Oak9 Lands $8 Million in New Venture Investment

• Exchange Servers Backdoored Globally by SessionManager

• How to Find Extra Cybersecurity Budget

• Cyberattack Struck Norway, Pro-Russian Hacker Group Fingered

• Dark data: Managing the data you can’t see

• #StopRansomware: MedusaLocker

• #StopRansomware: MedusaLocker

• How to Spend Less Time on Web and API Security

• DOJ sues to block spy tech deal

• North Korea Lazarus Hackers Blamed for $100 Million Horizon Bridge Heist

• SANS Institute: Human error remains the top security issue

• #StopRansomware: MedusaLocker

• #StopRansomware: MedusaLocker

• Experts blame North Korea-linked Lazarus APT for the Harmony hack

• Can global recruitment solve the cybersecurity hiring problem?

• API attack types and mitigations

• Stories from the SOC – Detecting internal reconnaissance

• Malicious Facebook Messenger Chatbots Steal Facebook Pages User’s Credentials

• ZuoRAT Can Take Over Widely Used SOHO Routers

• Former Canadian Government IT Worker Pleads Guilty Over NetWalker Ransomware Attacks

• Digital Rights Updates with EFFector 34.4

• BT Disappointed As CWU Votes To Strike, Despite 5 To 8 Percent Pay Rise

• NXM Announces Platform That Protects Space Infrastructure and IoT Devices From Cyberattacks

• A Fintech Horror Story: How One Company Prioritizes Cybersecurity

• Study Reveals Traditional Data Security Tools Have a 60% Failure Rate Against Ransomware and Extortion

• Gateway Load Balancer now generally available in all regions

• Top 1 Million Analysis – June 2022

• It’s Social Media Day! Here’s How to Protect Yourself From Social Engineering Online

• CISA Urges Exchange Online Authentication Update

• Top of Mind Security Insights from In-Person Interactions

• Walmart targeted by Yanluowang Ransomware attack is false

• What is Pharming? Definition and Prevention

• Google announces big update to Password Manager

• CISA’s CIO talks about the cyber agency’s growth and expanding mission

• Google battles bots, puts Workspace admins on alert

• Have you ever found phishing emails confusing? You aren’t alone

• North Korea’s Lazarus Group Suspected of $100m Harmony Hack

• Google Blocks Dozens of Malicious Domains Operated by Hack-for-Hire Groups

• Microsoft Warns Malware That Targets Linux Just Got A Big Update

• The Supreme Court Just Fucked The Planet

• Leaky Access Tokens Exposed Amazon Photos Of Users

• China Lured Graduate Jobseekers Into Digital Espionage

• ZuoRAT is a sophisticated malware that mainly targets SOHO routers

• CISA Issues Warning Regarding Active Exploitation of ‘PwnKit’ Linux Security Bug

• Google Faces Fresh Privacy Complaints From EU Consumer Groups

• LockBit ransomware gang promises bounty payment for personal data

• Token Raises $13 Million for Its Biometric Authentication Ring

• DragonForce Malaysia Group Releases Windows LPE Exploit and Turns to Ransomware Tactics

• Critical ManageEngine ADAudit Plus Vulnerability Allows Network Takeover, Mass Data Exfiltration

• The Chatter Podcast: Secret Service Dilemmas and Training with Jon Wackrow

• It’s Time to Designate Wagner Group as a Foreign Terrorist Organization

• Keeping Your Smart Home Secure & Private

• Amazon Photos vulnerability could have given attackers access to user files and data

• ESG’s Report on the Role of XDR in SOC Modernization

• Criminals are applying for remote work using deepfake and stolen identities, says FBI

• Facebook Users Phished by a Chatbot Campaign

• June 2022 Web Server Survey

• Ex-Canadian government employee admits to being a member of the Russian cybercrime gang NetWalker

• Immigration organisations targeted by APT group Evilnum

• Is 2022 the Year of Secure Access Service Edge?

• Update now! Mozilla fixes security vulnerabilities and introduces a new privacy feature for Firefox

• Black Basta ransomware – what you need to know

• SOHO routers used as initial point of compromise in stealth attack campaign

• Google Workspace Now Warns Admins of Sensitive Changes

• Zero-Days Aren’t Going Away Anytime Soon & What Leaders Need to Know

• Using process creation properties to catch evasion techniques

• Toll fraud malware: How an Android application can drain your wallet

• Google To Shut Down Hangouts Later This Year

• Raccoon Stealer returns with a new bag of tricks

• Report: Only 8 ransomware groups have attacked over 500 organizations

• Get 15 hours of basic cybersecurity education online for just $29

• S3 Ep89: Sextortion, blockchain blunder, and an OpenSSL bugfix [Podcast + Transcript]

• The ever-evolving role of the CISO: Cybersecurity leadership skills needed in the future of work

• Weaponizing and Abusing Hidden Functionalities Contained in Office Document Properties

• Water Wars: ‘We’ve Seen This Movie Before’: U.S. Suspicious of Beijing’s Motives in Solomon Islands

• YouTube Creators Have Their Accounts Stolen by the New YTStealer Malware

• Xerox CEO John Visentin Dies, Aged 59

• Burp Suite 2022.5.1 Released – What’s New !!

• SOHO Routers in North America and Europe Targeted With ‘ZuoRAT’ Malware

• A New, Remarkably Sophisticated Malware Is Attacking Routers

• U.S. FCC Commissioner Asks Apple and Google to Remove TikTok from App Stores

• RansomHouse claims to have stolen at least 450GB of AMD’s data

• Evaluating the use of encryption across the world’s top one million sites

• How can you find and retain new cybersecurity talent?

• Cyber threat analyst: Key job skills and expected salary

• A Guide to Surviving a Ransomware Attack

• Brocade Vulnerabilities Could Impact Storage Solutions of Several Major Companies

• Feature: Securing the Metaverse and Web3

• What is Shadow IT and why is it so risky?

• Microsoft warning: This malware that targets Linux just got a big update

• Costco 40th anniversary scam targets WhatsApp users

• Protect your browsing for life with this innovative hardware

• Vulnerability in Amazon Photos Android App Exposed User Information

• You Need to Update Windows and Chrome Right Now

• ZuoRAT Exploits Weaknesses in SOHO Routers to Target Remote Employees

• Samsung Starts 3-nanometre Chip Production

• RSAC22 and Infosecurity Europe, Three Weeks, Two Events

• North Korea-Backed Hacking Collective Lazarus Group Suspected to be Behind Recent Harmony Bridge Attack

• This Phishing Campaign Used Malicious Chatbots To Steal Facebook Logins

• Black Basta Ransomware Operators Expand Their Attack Arsenal With QakBot Trojan and PrintNightmare Exploit

• Cyberattack Hits Norway, Pro-Russian Hacker Group Fingered

• Canadian NetWalker Ransomware Affiliate Pleads Guilty in US

• Walmart Denies Being Hit by Yanlouwang Ransomware Attack

• A conversation with Andrew Clarke, Global Head of Channel and Strategic Alliances at One Identity

• Most Brits Concerned About Their Search History Data, ExpressVPN Finds

• CISA: Switch to Microsoft Exchange Online ‘Modern Auth’ before October

• Ex-Canadian Government Employee Pleads Guilty Over NetWalker Ransomware Attacks

• YTStealer Malware Found to Steal Accounts From Creators

• North Korea is likely culprit behind $100 million crypto heist, researchers say

• Info-Stealing Campaign Targeted Home Workers for Two Years

• Cybersecurity leaders are anticipating mass resignations within the year

• How to Run Windows 11 for Free on an M1 or M2 Mac

• Ukrainian Cops Bust Multimillion-Dollar Phishing Gang

• Nevadan Arrested for Alleged $45m Metaverse Investment Fraud

• The SessionManager IIS backdoor

• The iPhone at 15 – Intego Mac Podcast Episode 246

• AI ethics should be hardcoded like security by design

• The SessionManager IIS backdoor: a possibly overlooked GELSEMIUM artefact

• Cyber Week 2022 video walkthrough

• 10 Must-Have Streaming Services and Apps in 2022

• Do you know what your supply chain is and if it is secure?

• Understanding Have I Been Pwned’s Use of SHA-1 and k-Anonymity

• If you were a queer girl in the 2000s, you were on LiveJournal

• North Korean Hackers Suspected to be Behind $100M Horizon Bridge Hack

• YTStealer info-stealing malware targets YouTube content creators

• Palo Alto Networks Products Added to the DoD ESI Portfolio

• Uncovering FabricScape

• New Hertzbleed vulnerability affects modern AMD and Intel Processors

• UK to save Lithuania and Georgia from Russian Cyber Attacks

• Evolving online habits have paved the way for fraud. What can we do about it?

• DevSecOps deploy and operate processes

• How businesses are prioritizing data privacy

• Key takeaways from RSA Conference 2022

• EMEA continues to be a hotspot for malware threats

• Raccoon Stealer is Back with a New Version

• What you need to know about PCI 4.0: Requirements 10, 11 and 12

• Rafay Systems Paralus helps users achieve secure access to Kubernetes clusters

• G-Core Labs’ stand-alone solution offers protection against SYN Flood DDoS attacks

• Israel plans ‘Cyber-Dome’ to defeat digital attacks from Iran and others

• TBH Meaning + Online Slang Parents Should Know

• Impinj releases E910 RAIN RFID reader chip for next-generation enterprise IoT

• Immue discovers new vulnerability in Apple’s private relay

• Immuta and Databricks address the management challenges associated with data policies

• Cisco collaborates with GDIT to deliver private 5G solutions for the government sector

• PCI Pal partners with Teleperformance to protect expanding payment methods for customers

• Commvault expands its partnership with Oracle to accelerate enterprise hybrid cloud adoption

• FiveBy and Microsoft join forces to defend organizations against fraud related attacks

• Normalyze emerges from stealth and raises $22.2 million to help organizations manage sensitive data

• Cloud Security Alliance and Cyber Risk Institute develop CCM addendum for the financial sector

• Start using Modern Auth now for Exchange Online

• Agam Upadhyay joins Data Dynamics Board of Directors

• Trinsic raises $8.5 million to build user-controlled identity products

• Red River appoints Dan Kent as CTO

• The Journalism Competition and Preservation Act Will Produce Neither Competition Nor Preservation

• Biosurveillance network crucial to public health preparedness, GAO says

• IT Security News Daily Summary 2022-06-29

• Facebook Phishing Scam: Crooks Using Messenger Chatbots to Steal Login Data

• Dashboard tracks city’s mental health crisis response

• How to Present Cloud Risk to the Board

• Updated digital forensics database speeds criminal investigations

• Buy now, pay later: How nextgen financing platforms can survive the new frontier of fraud

• VA enables Login.gov for three major veteran portals

• Roe v. Wade fallout: How tech giants and big banks are changing employee policies to adapt

• Leaky Access Tokens Exposed Amazon Photos of Users

• Patch Now: Linux Container-Escape Flaw in Azure Service Fabric

• Sysdig Secure update adds ability to stop container attacks at runtime

• Patchable And Preventable Security Issues Lead Causes Of Q1 Attacks

• Canadian Admits To Hacking Spree With Russian Cyber-Gang

• FBI Warns Crooks Are Using Deep Fake Videos In Interviews For Remote Gigs

• Bumblebee Fast Becoming Favorite For Ransomware Gangs

• ‘Prolific’ NetWalker extortionist pleads guilty to ransomware charges

• ZuoRAT Hijacks SOHO Routers from Cisco, Netgear

• Adapting industrial control system (ICS) security to the new normal

• Can iPhones Get Viruses?

• 450GB of Suspected AMD Data Stolen by RansomHouse Gang

• Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

• Offensive Security Welcomes Cybersecurity Bills Signed into Law

• ATO Attacks Targeting Financial Services Increased 58 Percent in May. Who Else Needs to Worry?

• Broken Authentication Vuln Threatens Amazon Photos Android App

• Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

• A Cyber Persistence Way to Norms

• Flubot: the evolution of a notorious Android Banking Malware

• 4 Ways AI Capabilities Transform Security

• Marine Corps shares new information warfare doctrine

• Lawmakers debate ROI on cyber insurance

• Early warning system pinpoints flooded roads in some states

• Police are looking to algorithms to predict domestic violence

• Do back offices mean backdoors?

• Firefox 102 fixes address bar spoofing security hole (and helps with Follina!)

• Cybersecurity Researchers Launch New Malware Hunting Tool YARAify

• Nearly a Million Kubernetes Instances Exposed on Internet

• How to Master the Kill Chain Before Your Attackers Do

• Russian Hacker Group Says Cyber Attacks Continue On Lithuania

• How Dangerous Is BlackBasta Ransomware?

• A guide to teaching cybersecurity skills to special needs students

• All you need to know about data security and its benefits for small businesses

• New in Cybersecurity – Insights, threat trends, & RSA learnings

• SolarWinds hack explained: Everything you need to know

• New UnRAR Vulnerability Could Lead to Zimbra Webmail Hack

• Expert Insight On RansomHouse Attacking AMD

• 82% Cyber Breaches In Verizon’s Report Preventable, Says MyCena

• Kubernetes API: Over 900,000 Exposures Found Across The Internet

• Minors Use Discord Servers To Earn Extra Pocket Money Through Spreading Malware

• Cybercriminals Use Azure Front Door in Phishing Attacks

• More Than A “You’ve Been Breached Mentality” – Zero Trust, Quantum Computers, And the Future of Cyber

• It’s time for Internet Providers to Become Primary Security Providers

• Microsoft at RSA 2022: Envisioning the future of security

• Cisco Talos discovers techniques to uncover ransomware groups

• Deepfake video call: New effort discovered

• Period tracking apps are no longer safe. Delete them

• Amazon Fixes High Severity Vulnerability in Amazon Photos Android App

• What do customers really want (and need) from security?

• Criminals Are Using Deepfakes To Apply To Remote Jobs, Expert Response

• Chinese Hackers Deploy Shadowpad Backdoor to Target Industrial Control Systems in Asia

• Norway Hit By DDoS Cyber Attacks From Pro Russian Group

• Revive – An Android Malware Intercepting All SMS To Steal 2FA/OTP

• Google Analytics Continues to Lose SEO Visibility as Bans Continue

• Facebook Business Pages Targeted via Chatbot in Data-Harvesting Campaign

• Kaspersky Reveals Phishing Emails That Employees Find Most Confusing

• 5 Surprising Cyberattacks AI Stopped This Year

• Shifting the Cybersecurity Paradigm From Severity-Focused to Risk-Centric

• LockBit 3.0: Launch of Ransomware Bug Bounty Program

• 10 best antivirus software solutions for your business

• Path Traversal flaw in UnRAR utility can allow hacking Zimbra Mail servers

• ICE Enacts New Policy Protecting Media From Legal Demands

• This Banking Trojan is Targeting Users of Spanish Financial Services

• Google Tells Staff They Can Relocate After Roe v Wade Ending

• Vulnerability management: All you need to know

• This new malware is at the heart of the ransomware ecosystem

• Cybersecurity leaders are anticipating mass resignations within the year – here’s why

• Introduction to JWT (Also JWS, JWE, JWA, JWK)

• 8 enterprise password managers and the companies that will love them

• How to de-anonymize fraudulent Tor web servers

• Securing the Metaverse and Web3

• Azure Service Fabric Vulnerability Can Lead to Cluster Takeover

• ICE enacts new policy protecting media from legal demands

• Heimdal™ Security Featured in G2 Summer Reports Niche Quadrant 2022

• Threat Hunting Journal – June 2022 Edition

• Hundreds of Websites and Piracy Apps Seized in US-Brazil’s Operation 404.4

• How to Protect Your Social Media Accounts

• Patchable and Preventable Security Issues Lead Causes of Q1 Attacks

• Firefox 102 Patches 19 Vulnerabilities, Improves Privacy

• European Cybersecurity Blogger Awards 2022 Winners Announced

• Heimdal™ Security Featured in G2 Summer Reports Niche Quadrant 2022

• Taiwan Developing Own Digital Currency – Report

• 3 Ways an Employee Scheduling App Can Streamline Your Business

• This sophisticated malware is targeting routers to break into networks

• These are the 25 most dangerous software bugs of 2022

• This new malware is now at the heart of the ransomware ecosystem

• New YTStealer Malware Aims to Hijack Accounts of YouTube Content Creators

• Heimdal™ Security Featured in G2 Summer Reports Niche Quadrant 2022

• YTStealer Malware: “YouTube Cookies! Om Nom Nom Nom”

• Top 20 cybersecurity interview questions to know in 2022

• The Top Mobile Security Threats of 2022

• Zero-trust network access provider, Cyolo, strengthens authentication offerings

• CISA Calls for Expedited Adoption of Modern Authentication Ahead of Deadline

• Cloud Security Resources and Guidance

• Four Steps to Using Metrics to Defend Your Security Budget

• Tesla Cuts 200 Autopilot Jobs, Closes San Mateo Office – Report

• FBI warning: Crooks are using deepfakes to apply for remote tech jobs

• MITRE Publishes 2022 List of 25 Most Dangerous Vulnerabilities

• Evilnum Hackers Return

• Best Sites to Watch Football Highlights if You Missed the Game

• Are you eligible to get a cut out of the $90 million class action lawsuit against Facebook?

• Mitre shared 2022 CWE Top 25 most dangerous software weaknesses

• Evilnum Hackers Return With New Activity Targeting International Migration Campaigns

• Forced Chrome extensions get removed, keep reappearing

• 7-Zip Now Includes Mark-of-the-Web Security Feature Support

• CafePress Slapped With $500K Fine For The Data Breach Affecting 23M Customers

• Blockchain Firm Harmony Lost $100 Million In Cyber Theft

• Keona Clipper Malware Replaces Crypto Wallet Addresses In Clipboard

• LockBit 3.0 Ransomware Launches ‘Bug Bounty Program’

• US FCC Commissioner Urges Apple, Google To Remove TikTok

• CISA-Funded Project Enables Students With Disabilities to Learn Cybersecurity

• Enveil ZeroReveal ML Encrypted Training enables secure usage of cross-silo data sources

• Internet Safety Month: Everything you need to know about Omegle

• Airbnb Permanently Bans Parties, With Few Exceptions

• Hermit spyware is deployed with the help of a victim’s ISP

• TSP officials promise service will improve after a difficult transition to the new recordkeeping system

• Chinese Influence Op Tries to Undermine Western Rare Earth Firms

• New UnRAR Vulnerability Could Let Attackers Hack Zimbra Webmail Servers

• RansomHouse gang claims to have stolen 450GB of data from chip maker giant AMD

• Pro-PRC Influence Operation Dragonbridge Targets Rare Earth Mining Companies

• Codenotary SBOM Operator for Kubernetes provides continuously updated info on software supply chain

• FBI: Beware Deepfakes Used to Apply for Remote Jobs

• The Human Side of Cybersecurity – KnowBe4

• Penetration Testing in 2022: Key Trends and Challenges

• Ransomware Suspected in Wiltshire Farm Foods Attack

• New ‘FabricScape’ Bug in Microsoft Azure Service Fabric Impacts Linux Workloads

• Photos: Cyber Week 2022

• Top 5 Adobe Acrobat Alternatives 2022

• Nearly One Million Misconfigured Kubernetes Instances Exposed That Could Cause Data Breaches

• Cyber Security Management System (CSMS) for the Automotive Industry

• How to Perform a Penetration Test on Your Website

• Microsoft postpones shift to New Commerce Experience subscriptions

• FBI warning: crooks are using deepfake videos in interviews for remote gigs

• ShadowPad malware on Industrial Control Systems of Asia

• Kubernetes misconfiguration may lead to data hacks

• How parents can talk about online safety and personal info protection with their kids

• Open Systems Recognized as the Winner of 2022 Microsoft Swiss Partner of the Year

• Red River Names Dan Kent as Chief Technology Officer

• Industry Leader, Cyber Defense Magazine, Awards Calix ProtectIQ for Best in Anti-Phishing, Network Security, and Management for Helping Broadband Providers Protect Subscribers From Millions of Digital Threats

• ENTRY-LEVEL CYBERSECURITY JOBS KEY TO SOLVING WORKFORCE GAP

• The three core strengths of USM Anywhere

• Destructive firmware attacks pose a significant threat to businesses

• Guide to Web Application Penetration Testing

• CISA Warns of Active Exploitation of ‘PwnKit’ Linux Vulnerability in the Wild

• Why digital trust needs to be a strategic imperative for your company

• Trio accused of selling $88m of pirated Avaya licenses

• Teams that shift security left and focus on attackability ship more secure code

• The Role of IAM in Maintaining Cloud Security

• Fusion Risk Management announces new capabilities to improve incident response for organizations

• RangeForce platform updates enable users to conduct offensive and defensive attack scenarios

• 2022-06-27 – TA578 IcedID (Bokbot) with DarkVNC and Cobalt Strike

• Colt SASE Gateway protects hybrid workforce from malware and threats

• Airiam releases AirProducts to defend small and mid-sized enterprises against cyberattacks

• Cisco Routed Optical Networking enhancements help customers meet their sustainability goals

• 2022-06-27 – obama194 Qakbot with DarkVNC and Cobalt Strike

• Walmart accused of turning blind eye to transfer fraud totaling millions of dollars

• Phison and Cigent join forces to combat sophisticated threats and safeguard storage products

• Service Fabric Privilege Escalation from Containerized Workloads on Linux

• Digital Realty partners with HPE to accelerate digital transformation for enterprises

• SecureAuth appoints Dennis Dowd as VP of Worldwide Sales and promotes Karan Dua to CFO

• Pentagon finds concerning vulnerabilities on blockchain

• Crossword Cybersecurity Supply Chain Cyber practice improves supply chain resilience for organizations

• John Ferraro joins Keyavi Data as VP of Sales

• Pro-Russia Killnet Group Hit Top Lithuanian websites with Massive DDoS Attacks

• Improving digital employee experiences must start with cybersecurity

• How one city integrated mental health response into 911 dispatch systems

• EFF to European Court: Keep Encryption Alive

• IT Security News Daily Summary 2022-06-28

• Mayor launches IT modernization to boost services delivery

• NON-STATE ACTORS IN THE CYBERSPACE: AN ATTEMPT TO A TAXONOMIC CLASSIFICATION, ROLE, IMPACT AND RELATIONS WITH A STATE’S SOCIOECONOMIC STRUCTURE

• Five Key Trends on SOC Modernization

• Google bets big on government business with new division

• Air Force looks to HBCUs to lead its first university applied research center

• Local government on the edge: The future of IT infrastructure

• Normalyze Announces $22 Million for DSPM Technology

• ‘Raccoon Stealer’ Scurries Back on the Scene After Hiatus

• CISA Releases Guidance on Switching to Modern Auth in Exchange Online before October 1

• encryption

• Cisco Talos techniques uncover ransomware sites on dark web

• CISA Releases Guidance on Switching to Modern Auth in Exchange Online before October 1

• Trade groups seek changes to SEC’s breach disclosure plan

• The Link Between AWM Proxy & the Glupteba Botnet

• China-Backed APT Pwns Building-Automation Systems with ProxyLogon

• How venture capital teams can optimize success in cybersecurity

• CISA warns that Log4Shell remains a threat

• How to transfer data from LastPass to 1Password

• Report: Facebook Bans Users Who Say They Will Mail Abortion Pills

• Can Zero-Knowledge Crypto Solve Our Password Problems?

• Atlassian Confluence Exploits Peak at 100K Daily

• How SAST Will Improve Your Overall Security: Intro

• VMware report finds org modernization cannot succeed without observability

• Citizen science volunteers are almost entirely white

• Google Introduces New Capabilities for Cloud Armor Web Security Service

• Why the next-gen telecom ecosystem needs better regulations

• Toward Digital Solidarity

• Phony Copyright Emails Employed to Install LockBit Ransomware

• Best ways to incorporate security into the software development life cycle

• Cyolo Banks $60M Series B for ZTNA Technology

• CISA Says ‘PwnKit’ Linux Vulnerability Exploited in Attacks

• Wiz launches open database to track cloud vulnerabilities

• Nearly One Million Misconfigured Kubernetes Exposed That Could Cause Data Breaches

• A WAF Is Not a Free Lunch: Teaching the Shift-Left Security Mindset

• When Security Locks You Out of Everything

• Why a “Lift-and-shift” Cloud Migration Strategy Doesn’t Support Data Security

• SECURE North America | Users Aren’t the Weakest Link, They’re Your Allies

• How can your organization find and develop the next generation of cybersecurity?

• How can mentorship help the cybersecurity workforce gap?

• Authenticating legacy apps with a reverse proxy

• Hackers Deploy Shadowpad Backdoor and Target Industrial Control Systems in Asia

• ‘Supercookies’ Have Privacy Experts Sounding the Alarm

• 2022 CWE Top 25 Most Dangerous Software Weaknesses

• Apetito hit by a ransomware attack and so announces a delay in deliveries

• Ransomware Volume Nearly Doubles 2021 Totals in a Single Quarter

• 2022 CWE Top 25 Most Dangerous Software Weaknesses

• ZuoRAT Malware Hijacking Home-Office Routers to Spy on Targeted Networks

• Cisco Talos Supports Ukraine Through Empathy

• Defending Liberalism From the Right and Left

• 5 Cyber Security Tips for Smart Buildings

• How security leaders can help their teams avoid burnout

• Dragonbridge influencers targets rare earth miners, encourages protests to disrupt production

• Mitel VoIP Bug Exploited In Ransomware Attacks

• G7 To Tackle Cyber Threats And Disinformation From Russia

• Expert insights – USB Stick Containing An Entire City’s Personal Details Has Been Lost

• Experts Views On Ransomware-as-a-service (RaaS) Like “Black Basta”

• Multicloud management tools aim to tighten security and lower cost

• Cisco partnering with GDIT to provide private 5G to government agencies

• Android Spyware ‘Revive’ Upgraded to Banking Trojan

• LockBit 3.0 introduces important novelties, including a bug bounty program

• The Abortion Clues That Can Hide On Your Phone

• How To Watch Today’s Surprise Hearing From The Jan. 6 Committee

• RansomHouse Hits AMD And Claims To Have Stolen 450 Gigs Of Data

• Researchers uncover ZuoRAT malware targeting home-office routers

• Uber Agrees To Support Minimum Wage In Australia

• Black Basta Ransomware Emerging From Underground to Attack Corporate Networks

• Machine Learning in Cybersecurity

• Ransomware is the biggest global cyber threat. And the attacks are still evolving

• Codenotary introduces Software Bill of Materials service for Kubernetes

• Chinese Threat Actor Targets Rare Earth Mining Companies in North America, Australia

• Negotiating a golden parachute clause in a CISO contract

• Scanning container image vulnerabilities with Clair

• Phone Hackers: 9 Ways To Tell If You Have Fallen Victim

• AMD targeted by RansomHouse, cybercrims claim to have ‘450Gb’ in stolen data

• Customized malware coded to target OT systems

• Virtual Reality Sales Predicted To Take Off In Spite Of Economic Gloom

• Digital Shadows Weaken Your Attack Surface

• Clear Rules Needed to Prevent Conflict and Struggle in Cyber Space, Says NCSC Chief

• How to Find New Attack Primitives in Microsoft Azure

• How Can We Protect Against NotPetya Like Malware?

• 10 Arrested for Involvement in Online Sexual Exploitation in Europe

• Top Six Security Bad Habits, and How to Break Them

• New Database Catalogs Cloud Vulnerabilities, Security Issues

• Cybersecurity is complex – but it doesn’t need to be costly or complicated

• Have you modelled the attack paths into your organization? Because an attacker already has

• Log4Shell Vulnerability in VMware Leads to Data Exfiltration and Ransomware

• Ransomware attacks are the biggest global cyber threat and still evolving, warns cybersecurity chief

• Mitel VoIP Bug Exploited in Ransomware Attacks

• NIST Finalizes macOS Security Guidance

• New Vulnerability Database Catalogs Cloud Security Issues

• Home Insurance Buyer’s Guide: Has Technology Made Things Easier?

• Why You Should Look into An Automated Cloud DLP Solution: Intro

• ‘Killnet’ Adversary Pummels Lithuania with DDoS Attacks Over Blockade

• Chinese Hackers Target Building Management Systems

• Cyber-Physical Security: Benchmarking to Advance Your Journey

• VMware vSphere+ and vSAN+ provide centralized cloud-based infrastructure management

• City worker loses USB stick containing data on every resident after day of drinking

• Iran Steel Plants ‘Hit By Cyber-Attack’

• Malware-as-a-service is spreading among teens

• Kids are forming hacking groups online. Here’s what to do about it.

• Log4Shell Vulnerability Targeted in VMware Servers to Exfiltrate Data

• Wiltshire Farm Foods Cyberattack

• Russian Hackers Claim Responsibility For Cyberattack On Lithuania, Expert Reaction

• CafePress Was Fined $500,000 Following Major Data Breach

• How to Create Successful CISSP and CCSP Study Groups

• US Says Private Investment Boosts EV Charger Manufacturing

• How can I improve my Windows laptop’s battery life? [Ask ZDNet]

• LockBit 3.0 Ransomware Emerges With Bug Bounty Program

• APT Hackers Targeting Industrial Control Systems with ShadowPad Backdoor

• Latest OpenSSL version is affected by a remote memory corruption flaw

• How Pulsar Security Established their Continuous Cyber Workforce Development

• LGBTQ+ community targeted by extortionists who threaten to publish nudes

• Malicious Hackers go to Work as We Head for the Sun: Travelers Need to be on Their Guard Over the Summer Holidays and Weekend Breaks

• 97% Of UK Business Leaders Expect Quantum Computing to Disrupt Their Sectors

• Cyber Insurance: The Good, the Bad, and the Ugly

• Why Outsourcing IT Helps Your Business Grow

• Android App Automation Testing Made Easy – Tutorial

• Cloud security risks remain very human

• New Bumblebee malware loader increasingly adopted by cyber threat groups

• Stress and Burnout Could Lead to Exodus of CNI Cybersecurity Leaders

• Nasuni acquires Storage Made Easy to strengthen its file data services

• Connected Commerce: Next Generation Omnichannel

• Tencent Forms XR Unit In Metaverse Drive

• ANAF Spearphishing Campaign Zeroes in on Romanian Businesses

• Australian Retailer Pauses Facial Recognition Trial

• Enforcement of Biden’s federal employee COVID-19 vaccine mandate is delayed—again

• OpenSSL to Release Security Patch for Remote Memory Corruption Vulnerability

• Global Police Operation Cracks Down on Widespread Criminal Activity

• Cybersecurity Experts Warn of Emerging Threat of “Black Basta” Ransomware

• $100m Stolen from California Based Cryptocurrency Firm by Unidentified Hackers

• Center for Cyber Safety and Education Begins Program Updates to Increase Impact

• OpenSSH to Release Security Patch for Remote Memory Corruption Vulnerability

• Toshiba Adds Activist Board Members In Shift Toward Privatisation

• What are the solutions to cybersecurity hiring challenges?

• New Android Banking Trojan ‘Revive’ Targeting Users of Spanish Financial Services

• Peer Software partners with Pulsar Security to help enterprise customers combat ransomware attacks

• Looking for adding new detection technologies in your security products?

• Two critical flaws affect CODESYS ICS Automation Software

• Detection, isolation, and negotiation: Improving your ransomware preparedness and response

• An AI algorithm developed to see through walls

• Ransomware Attack news trending on Google

• Exploring the insecurity of readily available Wi-Fi networks

• Tencent admits to poisoned QR code attack on QQ chat platform

• Security frameworks / attestations and certifications: Which one is the right fit for your organization?

• Trends to watch when creating security strategy for the next two years

• Carnival Cruises torpedoed by US states, agrees to pay $6m after waves of cyberattacks

• Threat actors increasingly use third parties to run their scams

• Japanese City Worker Loses USB Containing Resident’s Personal Data

• Owner of CafePress Penalized $500,000 for Hiding a Data Breach

• Properly securing APIs is becoming increasingly urgent

• Are Protection Payments the Future of Ransomware? How Businesses Can Protect Themselves

• India extends deadline for compliance with infosec logging rules by 90 days

• Carnival Cruises torpedoed by US states, agrees to pay $6m after waves of cyber attacks

• Iran’s Largest Steel Producer Hit By Crippling Cyberattack

• OpenSSL 3.0.5 awaits release to fix potential worse-than-Heartbleed flaw

• MITRE promotes Beth Meinert to SVP and General Manager of MITRE Public Sector

• Lockbit ransomware gang creates first malicious bug bounty program

• Taking the payment friction out of regional transit

• Hochul names first chief cyber officer

• Federal, State Agencies’ Aid Programs Face Synthetic Identity Fraud

• Hexagon appoints Paolo Guglielmini as CEO

• The changing face of ransomware

• LockBit 3.0 Debuts with Ransomware Bug Bounty Program

• LGBTQ+ folks warned of dating app extortion scams

• IT Security News Daily Summary 2022-06-27

• Five Ways the Gaming & Gambling Industry is Targeted by Bad Bots

• Report: Facebook Is Showing Cancer Patients Ads With Medical Misinformation

• Federal Judge Orders Biden Administration to Continue Title 42

• The government of Lithuania confirmed it had been hit by an intense cyberattack

• You only have nine months to ditch Exchange Server 2013

• Zero-trust market shows signs of maturity at RSA 2022

• Brave Search wants to replace Google’s biased search results with yours

• Harmony blockchain loses nearly $100M due to hacked private keys

• Shadow IT Spurs 1 in 3 Cyberattacks

• How to Protect All Five Stages of the IoT Security Lifecycle

• Alert Fatigue Puts Your Organization at Risk; Here’s What to Do About It

• When 911 calls require a mental health response

• New USAF space buyer eyes fixed-price contracts

• Lithuania Says Hit by Cyberattack, Russia ‘Probably’ to Blame

• Ransomware Group Leveraged Mitel Zero-Day Bug To Target VOIP Appliances

• Cybersecurity Visibility and why it is critical for defense

• DHS looks to expand its Procurement Innovation Lab

• Allied cybersecurity agencies advise against disabling popular tool for cyberattackers

• Unknown Hacker Steals $100m From California-Based Cryptocurrency Firm Harmony

• CISA Adds Eight Known Exploited Vulnerabilities to Catalog  

• Infosecurity Europe: A show so secure a train strike couldn’t break it!

• Analysis of Industrial Control System Security

• Safe Security Publishes Results of New Predictive Model, Highlighting the Cyber Exposure of Specific Industries Over the Next 12 Months

• Sagewind Capital Leads Series B Financing for Code-X

• BigBear.ai Addresses the Future of AI, Smart Factories, and Cyber Applications at Upcoming Healthcare, Manufacturing, Cybersecurity, and Space Industry Events

• Stories from the SOC – Detecting internal reconnaissance

• API security: 12 essential best practices to keep your data & APIs safe

• An enterprise bug bounty program vs. VDP: Which is better?

• How to determine out-of-scope bug bounty assets

• Pro-Russian Hacker Group Killnet Hits Critical Government Websites in Lithuania

• CISA Adds Eight Known Exploited Vulnerabilities to Catalog  

• The Strategic Relevance of Cybersecurity Skills

• 4 breakthrough ideas for compliance and data security

• LockBit Ransomware Gang offers a bug bounty program

• How to install and use the Bitwarden Chrome plugin

• Chinese Researchers Find Critical Security Flaws in CoDeSys Automation Software

• The experience of bringing OpenSSL 3.0 into RHEL and Fedora

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Best cybersecurity schools and programs

• NIST Releases New macOS Security Guidance for Organizations

• FTC warns of LGBTQ+ extortion scams – be aware before you share!

• UK Security Services Must Seek Approval To Access Telecoms Data, Judge Rules

• Beijing Probes Security At Academic Journal Database

• Contractor Loses Entire Japanese City’s Personal Data In USB Fail

• Russia’s Killnet Hacker Group Says It Attacked Lithuania

• How to use Bitwarden on Android

• New Matanbuchus Campaign drops Cobalt Strike beacons

• Tencent Shares Fall As Biggest Investor Says It Will Sell

• House Passes ICS Cybersecurity Training Bill

• Thrive Acquires DSM

• 5 Ways to Retain More Cybersecurity Professionals at Your Organization

• Hacking gets dangerously real: 8 cybersecurity predictions to watch out for

• Spyware vendor targets iOS and Android in Italy and Kazakhstan, collaborates with ISP

• How to transfer LastPass to Bitwarden

• It’s a Race to Secure the Software Supply Chain — Have You Already Stumbled?

• Cybersecurity Experts Warn of Emerging Threat of “Black Basta” Ransomware

• Cerby Emerges From Stealth With Security Platform for Unmanageable Apps

• Apple ‘Prepared To Negotiate’ With Unionised Staff

• Cyberattack halted the production at the Iranian state-owned Khuzestan Steel company

• Conti vs. LockBit: A Comparative Analysis of Ransomware Groups

• Hackers Delivered a Lockbit Ransomware Through Fake Copyright Claim E-mail

• FTC Takes Action Against CafePress Over Massive Data Breach, Cover-Up

• 2022 Workshop on Economics and Information Security (WEIS)

• China Gaming Company Chief ‘To Move Abroad’

• 5 ways cybercriminals steal credit card details

• Netsec Goggle Customizes Brave Search Results to Show Only Cybersecurity Websites

• How to Use Microsoft Defender on All Your Devices

• New Windows Phishing Method gives attackers access to cookies and more

• Consumer Group Says Major Australian Retailers Using Facial Recognition

• 7 devops practices to improve application performance

• Security survives the budget axe

• Cyberattack Forces Iran Steel Company to Halt Production

• Final Call for Views on Government App Security Proposals

• Italy Data Protection Authority Warns Websites Against Use of Google Analytics

• What Are Shadow IDs, and How Are They Crucial in 2022?

• Critical Security Flaws Identified in CODESYS ICS Automation Software

• Ukrainian telecommunications operators hit by DarkCrystal RAT malware

• XM Cyber acquires Cyber Observer to help organizations improve their security posture

• Contractor loses entire Japanese city’s personal data in USB fail

• Google Jobs Service Hit By Fresh Antitrust Complaint In Denmark

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of June 20, 2022

• Researchers Warn of ‘Matanbuchus’ Malware Campaign Dropping Cobalt Strike Beacons

• Fake Copyright Emails Used to Deploy LockBit Ransomware

• Instagram introduces new ways for users to verify their age

• CISA Log4Shell warning: Patch VMware Horizon installations immediately

• Toshiba Board Set For Vote That Would Back Buyout Strategy

• Global Police Crack Down on Online Sexual Exploitation

• A week in security (June 20 – June 26)

• Deep fakes – a threat to truth online?

• CafePress Fined $500,000 After Massive Data Breach

• How to Detect and Respond to Unauthorized Access

• How to Opt For the Most High-Quality VPN Ever: Features and Criteria to Consider

• Nio ‘Investigating’ Deaths Of Two After EV Plunges From Building

• Snoopers’ Charter Ruled Partially Unlawful

• Threat actors stole $100M in crypto assets from Harmony

• Hackers Used Mitel Zero-Day Flaw To Target VOIP Appliances

• Python packages with malicious code expose secret AWS credentials

• Software developers, how secure is your software ?

• Scammer Who Used Info of Riot Games’ Co-Founder to Mine Crypto is Jailed

• Beijing probes security at academic journal database

• American Bank Data Breach caused from Cyber Attack

• StillVulnerable Campaign for cyber attack victims to Speak Up

• Don’t Risk Losing Control Over Your Microsoft 365 to Ransomware!

• OT security: Helping under-resourced critical infrastructure organizations

• Russia’s ‘Demonstration Army’ Is a Red Flag for U.S. Security Force Assistance

• How phishing attacks are becoming more sophisticated

• Clearview fine: The unacceptable face of modern surveillance

• Cybercriminals use Azure Front Door in phishing attacks

• 48% of security practitioners seeing 3x increase in alerts per day

• How to Get GDPR and Customer Communications Right

• Singapore promises ‘brutal and unrelentingly hard’ action on dodgy crypto players

• How to Protect Your Remote Workforce from a Cyberattack

• Study for certified cybersecurity expert exams with this $49 training

• IT Security News Weekly Summary – Week 25

• IT Security News Daily Summary 2022-06-26

• This Malware is Spreading Via Fake Cracks

• Setting the standard for digital asset security

• Cybersecurity and the metaverse: Identifying the weak spots

• Threat actors sell access to tens of vulnerable networks compromised by exploiting Atlassian 0day

• Python Libraries Hacked AWS Data and Keys

• Hacker Steals $100 million Worth of Crypto from Harmony Horizon Bridge

• Russia’s “Demonstration Army” Is a Red Flag for U.S. Security Force Assistance

• Data Security – What Is the Most Secure OS?

• Security Affairs newsletter Round 371 by Pierluigi Paganini

• Launch a cybersecurity career with this $39 boot camp on risk management

• China-linked APT Bronze Starlight deploys ransomware as a smokescreen

• Russia-linked actors may be behind an explosion at a liquefied natural gas plant in Texas

• Week in review: Log4Shell exploitation, DevSecOps myths, 56 vulnerabilities impacting OT devices

• Penetration testing

• What to Do If Your Identity Has Been Stolen

• API attack types and mitigations

• Claroty appoints Heather Young as RVP Public Sector Sales

• Cyware completes SOC 2 Type 2 Compliance for data security

• Sophanny Schwartz joins Ascent Solutions as Managing Director of Human Resources

• Report: Facebook Is Deprioritizing Election Misinformation

• IT Security News Daily Summary 2022-06-25

• 3 reasons to consider adopting AI cybersecurity tools

• Protecting the modern workforce requires a new approach to third-party security

• Diana Logue Named Chief Operating Officer of ‘ASTORS’ Sponsor Rajant

• Oracle spent 6 months to fix ‘Mega’ flaws in the Fusion Middleware

• How Passwordless Can Help Us Win the Ransomware War

• Security For Want of a Nail

• This New Malware Redirects Cryptocurrency Payments to Wallets Controlled by the Attacker

• The Human Factor in Cybersecurity Breaches

• Protecting Patients With Healthcare Cybersecurity

• It’s not ‘See you later.’ It’s ‘Goodbye’: Moving on from Tokenization in the age of Ransomware

• A simple solution to the constant battle of cyber prevention versus mitigation

• Hackers Exploit Harmony’s Horizon Blockchain Bridge to Steal $100 Million

• Multiple malicious packages in PyPI repository found stealing AWS secrets

• Malicious Excel Files are Now Being Employed to Propagate Revamped Emotet Malware

• Can global recruitment solve the cybersecurity hiring problem?

• ISPs Helped Hackers to Infect Smartphones with Hermit Spyware

• 5 ways to avoid being catfished

• Securing Software Supply Chains on Kubernetes Using Nirmata and Venafi

• Critical Instagram Bug Could Allow Changing Reel Thumbnails

• Operating Systems Can be Detected Using Ping Command

• Novel ToddyCat APT Attacking Microsoft Exchange Servers

• The Post-Roe Privacy Nightmare Has Arrived

• Critical PHP Flaws Allows Attackers to Execute Remote Code on QNAP NAS Devices

• Attackers exploited a zero-day in Mitel VOIP devices to compromise a network

• Amazon No Longer Offers Kindle, Music & Audiobooks Purchases on Android

• This A Cappella Group on YouTube Can Mimic The Music Sound Effects From Video Games & TV Series

• How to Move Your WhatsApp Chats Across Devices and Apps

• We’re now truly in the era of ransomware as pure extortion without the encryption

• Learn NIST Inside Out With 21 Hours of Training @ 86% OFF

• The 5 best security cameras of 2022

• Build or Buy your own antivirus product

• Weekly Update 301

• DevSecOps deploy and operate processes

• Bectran releases driver’s license verification solution to help businesses mitigate fraud in real-time

• IOTech Edge XRT 2.0 simplifies the development of time-critical OT applications

• Datadog Audit Trail enables businesses to achieve their compliance and governance objectives

• A Man of Action: Meet Callum Carney

• Instagram’s new age verification tool – Week in security with Tony Anscombe

• Prepare for Your Salesforce Certified OmniStudio-Developer Exam

• Modern Application Security Requires Defense in Depth

• Threat Intelligence Services Are Universally Valued by IT Staff

• Why We’re Getting Vulnerability Management Wrong

• Does an iPhone Need Antivirus Software?

• The psychology of phishing attacks

• More than $100m in cryptocurrency stolen from blockchain biz

• IT Security News Daily Summary 2022-06-24

• ISPs Helping Attackers Install Hermit Spyware on Smartphones- Google

• Low-cost sensors are helping communities find gaps in air quality data

• Friday Squid Blogging: Squid Cubes

• How the Evolution of Agents has Been Essential for Modern Database Security

• #InfosecurityEurope2022: Preparing for Future Challenges and Opportunities

• Private Network 5G Security Risks & Vulnerabilities

• Top 4 best practices to secure the SDLC

• Budding spies might not get weeded out for past drug use

• Making the case for identity access management

• Internet data produces a racist, sexist robot

• Thank You for Participating in Our Security Dashboard Redesign Survey

• Ukraine deploys a DDoS protection service to survive the cyberwar

• Digital identity challenges could be a roadblock to improved CX

• APT Groups Swarming on VMware Servers with Log4Shell

• Chinese APT Utilizes Ransomware to Cover Cyberespionage

• It’s your technology and your security controls: Don’t let an auditor become your CTO

• A First Circuit Decision and the Future of Telephone Pole Camera Surveillance

• Intern with Lawfare!

• Researchers criticize Oracle’s vulnerability disclosure process

• Phishing Emails Faking Voicemails aim to Steal Your Data

• Black Basta may be an all-star ransomware gang made up of former Conti and REvil members

• Cybersecurity Agencies Release Guidance for PowerShell Security

• Only 3% of Open Source Software Bugs Are Actually Attackable, Researchers Say

• How to create a continuous lifecycle for your IT Policy Management

• Navigable 3D site models would improve responder, law enforcement training

• Best cybersecurity certifications in 2022

• Citrix Releases Security Updates for Hypervisor

• Indian Crypto Users Duped Of Rs 1,000 Crore By Fake Exchange

• Teenager charged for launching DdoS attacks on International Banks and Websites

• Microsoft: Russia stepping up hacking, cyber penetration efforts on 42 Ukraine allies

• OpenSSL issues a bugfix for the previous bugfix

• Citrix Releases Security Updates for Hypervisor

• US watchdog is worried cyber insurance won’t cover ‘catastrophic cyberattacks’

• 7 best cybersecurity certifications of 2022

• #InfosecurityEurope2022: The Interactivity Between Nation-State Attackers and Organized Crime Gangs

• Threat actors continue to exploit Log4Shell in VMware Horizon Systems

• Security features in Red Hat Enterprise Linux 9

• EFF’s Statement on Dobb’s Abortion Ruling

• Malware and best practices for malware removal

• #InfosecurityEurope2022: Security awareness must be in the moment

• The Importance of a Consistent Security Policy

• Prisma Cloud Introduces Out-of-Band Web App and API Security

• Presidio and Palo Alto Networks Secure Hybrid Workforces with ZTNA 2.0

• Microsoft Compares Russian Hacks Of Ukraine To Assassination That Started World War I

• Google Warns Spyware Being Deployed Against Android, iOS

• Beijing-Backed Attackers Use Ransomware As Decoy While They Conduct Espionage

• NSO Claims More Than 5 EU States Use Pegasus Spyware

• A Comprehensive Guide to Security Assertion Markup Language (SAML)

• Chinese Hackers Disseminating SMS Bomber Tool with Hidden Malware

• ToddyCat claws at Asian governments

• Researchers: Oracle Took 6 Months to Patch ‘Mega’ Vulnerability Affecting Many Systems

• Hackers Exploit Mitel VoIP Zero-Day in Likely Ransomware Attack

• How to Mitigate Ransomware?

• Google details commercial spyware that targets both Android and iOS devices

• This new malware diverts cryptocurrency payments to attacker-controlled wallets

• CrowdStrike: Ransomware Actor Caught Exploiting Mitel VOIP Zero-Day

• Researchers: It Took Oracle 6 Months to Patch ‘Mega’ Vulnerability Affecting Many Systems

• 7 Steps to Stronger SaaS Security

• Vulnerabilities in the Jacuzzi SmartTub app could allow to access users’ data

• First Nixon, Then Trump: The Serious Problem of the President-as-Candidate

• Scalper bots are snapping up appointments for government services in Israel

• Hackers Exploit Mitel VoIP Zero-Day Bug to Deploy Ransomware

• A conversation with Jim Dolce, CEO of Lookout

• How to Prevent Ransomware?

• What is a Hotfix? Definition, Challenges, and Best Practices

• Hadrian Raises $11 Million for Offensive Security Platform

• Black Basta Ransomware Becomes Major Threat in Two Months

• The Cybersecurity Talent Shortage Is a Myth

• Chinese Hackers Distributing Nim language Malware in SMS Bomber Tool

• Report: 84% of orgs experienced an identity-related breach last year

• When I reset my Windows PC, I ended up with Home edition. How do I get my Pro upgrade back? [Ask ZDNet]

• CISA: Hackers are still using Log4Shell to breach networks, so patch your systems

• Without Conti On The Scene, LockBit 2.0 Leads Ransomware Attacks

• Google Says ISPs Helped Attackers Infect Targeted Smartphones with Hermit Spyware

• Cybersecurity agencies: You don’t have to delete PowerShell to secure it

• Codesys Patches 11 Flaws Likely Affecting Controllers From Several ICS Vendors

• On the Dangers of Cryptocurrencies and the Uselessness of Blockchain

• Open Source Threat Intelligence Platform – Best Alternatives for Your Company [2022]

• Users in Italy and Kazakhstan Targeted by Spyware Provider

• Critical Vulnerability In Apple Game Center Could Allow Authentication Bypass

• iPhone users: Google Chrome browser on iOS is getting these five new features

• Google Warns Spyware Being Deployed Against Android, iOS Users

• US Agencies Warn Organizations of Log4Shell Attacks Against VMware Products

• $100 million worth of crypto has been stolen in another major hack

• Google: How we tackled this iPhone, Android spyware

• Google Warns Of Italian Spyware On Apple, Android Phones

• Nasdaq Listing Most Likely For ARM, Says Softbank Boss

• US, UK, New Zealand Issue PowerShell Security Guidance

• Multiple Backdoored Python Libraries Caught Stealing AWS Secrets and Keys

• Attackers still exploit Log4Shell on VMware Horizon servers, CISA warns

• NEET Study Material: Benefits of NEET Study Material

• Cybersecurity Compliance Should Be A Priority For Companies

• Intel Signals Delay To Ohio Factory Over US Chips Act Dispute

• Conti Group Compromised 40 Firms in Just One Month

• Euro Police Target Gangs Grooming Ukrainian Refugees Online

• Unsecured APIs Could Be Costing Firms $75bn Per Year

• State-Backed Hackers Using Ransomware as a Decoy for Cyber Espionage Attacks

• Cloudflare One Partner Program enables companies of all sizes to adopt zero trust strategies

• What stolen info can be bought off the dark web, and for how much?

• Silicon UK In Focus Podcast: Sustainable Business

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Google TAG argues surveillance firm RCS Labs was helped by ISPs to infect mobile users

• Beijing-backed attackers use ransomware as a decoy while they conduct espionage

• Over 65% of companies were targeted twice with cyber attacks within a year

• Italian spyware targets Apple and Android smartphones says Google

• New infosec products of the week: June 24, 2022

• NSO claims ‘more than 5’ EU states use Pegasus spyware

• New ‘Quantum’ Builder Lets Attackers Easily Create Malicious Windows Shortcuts

• iPaaS: The latest enterprise cybersecurity risk?

• Morse Code: How did it change communication?

• All you need to know about data security and its benefits for small businesses

• VA electronic health record system ‘not yet stable enough’ for planned rollouts

• How companies are prioritizing infosec and compliance priorities

• Log4Shell Still Being Exploited to Hack VMWare Servers to Exfiltrate Sensitive Data

• Risky behavior reduced when executives put focus on identity security

• Despite known security issues, VPN usage continues to thrive

• Virtual private networks: 5 common questions about VPNs answered

• Hypori Halo 2022.1 provides secure access to mobile applications and data from any device

• Mitek Verified Identity Platform protects customers against identity theft

• Ermetic enables organizations to provide secure JIT access to cloud environments for developers

• Palo Alto Networks adds new cloud security features to help organizations secure web applications

• SolarWinds Next-Generation Build System improves enterprise software security

• Top Security Tools & Software for SMBs in 2022

• NightDragon and Orange Cyberdefense deliver cybersecurity services to European organizations

• Bugcrowd partners with SocialProof Security to protect clients against social engineering attacks

• Binarly raises $3.6 million to speed up research and development initiatives

• Starburst acquires Varada to help customers improve their data lake analytics

• The Bipartisan Digital Advertising Act Would Break Up Big Trackers

• Experts call for more chief customer officers in government

• Tortuga Logic changes its name to Cycuity to address evolving needs in product security

• ThreatX API Protection Quick Start Program enables businesses to extend security to their APIs

• Zilla Security appoints Ryan Burke as Head of Sales

• Online Safety for Seniors – How to Keep Older Family Members Safe Online

• IT Security News Daily Summary 2022-06-23

• SBA team targets set-aside contracts awarded to ineligible firms

• 3 threats dirty data poses to the enterprise

• Facebook’s Own Oversight Board Says It Needs To Be Much More Transparent

• How volunteers help states shore up cybersecurity

• Apple, Android Phones Targeted by Italian Spyware: Google

• Use ssh-keygen to create SSH key pairs and more

• #InfosecurityEurope2022: How Should SMEs Defend Against Cyber-Risks?

• Security and Privacy Tips for People Seeking An Abortion

• A look at Chainalysis’ Crypto incident response service

• Determining “Need to share vs. Need to know” is a Cornerstone of a Data Protection Strategy

• Parental Control: How to Keep Kids Safe Online

• Australia Fines Samsung Over Water-Resistance Claims

• A Look at Chainalysis’ Crypto incident response service

• State DOT gets new operations center

• Study to ace four core CompTIA certification exams for $29

• #InfosecurityEurope2022: Lawyers Update Security for New Ways of Working

• Chinese APT Group Likely Using Ransomware Attacks as Cover for IP Theft

• Livestream: Jan. 6 Select Committee Hearing Day Five

• Malicious Cyber Actors Continue to Exploit Log4Shell in VMware Horizon Systems

• MAR-10382254-1.v1 – XMRIG Cryptominer

• MAR-10382580-1.v1 – Unidentified RAT

• Malicious Cyber Actors Continue to Exploit Log4Shell in VMware Horizon Systems

• Azure IoT increases enterprise-level intelligent edge and cloud capabilities

• Amazon Reveals Alexa Option To Mimic Any Person’s Voice

• Johnson Controls Acquires Tempered Networks to Bring Zero Trust Cybersecurity to Connected Buildings

• Malicious Cyber Actors Continue to Exploit Log4Shell in VMware Horizon Systems

• MAR-10382254-1.v1 – XMRIG Cryptominer

• MAR-10382580-1.v1 – Unidentified RAT

• Malicious Cyber Actors Continue to Exploit Log4Shell in VMware Horizon Systems

• Chinese Tropic Trooper APT spreads a hacking tool laced with a backdoor

• The Chatter Podcast: Misremembering Watergate and Jan. 6 with Tim Naftali

• Public Sector Must Remain Diligent as Cloud and Ransomware Intersect

• Cisco To Wind Down Russian, Belarus Business

• A Year After Death, McAfee’s Corpse Still in Spanish Morgue

• #InfosecurityEurope2022: Actions Not Words – Hacking the Human Through Social Engineering

• ShiftLeft: Focus On ‘Attackability’ To Better Prioritize Vulnerabilities

• Unconscious Bias: How to Understand, Identify and Manage It

• Pair of Brand-New Cybersecurity Bills Become Law

• Google Warns of New Spyware Targeting iOS and Android Users

• Operational Security: How to Get Rid of Digital Footprints On The Internet?

• How the Cloud Upended Security – and How Encryption Helps Restore It

• Trend Micro CEO Discusses Need for a Unified Cybersecurity Platform

• Spotlight on innovation in the 2023 defense policy bill

• GAO calls for deeper analysis of federal cyber insurance option

• Ongoing PowerShell security threats prompt a call to action

• S3 Ep88: Phone scammers, hacking bust, and data breach fines [Podcast + Transcript]

• #InfosecurityEurope2022: Disinformation Warfare – How Do We Tackle Fake News?

• Conti ransomware group’s pulse stops, but did it fake its own death?

• Okta for Good Launches New Grant Portfolio to Improve Cybersecurity for Nonprofits

• U.S. State and Federal Funding for Cybersecurity is on the Rise

• World Password Day: Why we need a password-less future

• World Password Day: Why are passwords still a problem in 2022?

• Steve Kelman reports from his 50th college reunion

• House committee boosts defense budget by $37B

• This state will hire you — no college degree required

• Cyberattackers Abuse QuickBooks Cloud Service in ‘Double-Spear’ Campaign

• Reinventing How Farming Equipment Is Remotely Controlled and Tracked

• The Rise, Fall, and Rebirth of the Presumption of Compromise

• NSA, CISA Say: Don’t Block PowerShell, Here’s What To Do Instead

• Questions Over Cyber Command Support, Operations Raised In Defense Authorization Bill

• CISA Warns Over Software Flaws In Industrial Control Systems

• Fancy Bear Uses Nuke Threat Lure To Exploit 1-Click Bug

• Detecting malicious key extractions by compromised identities for Azure Cosmos DB

• Conti ransomware disappears—did it fake its own death?

• 84% of US Businesses Experienced Identity-Related Breaches

• Hackers are Using LNK Files to Deploy Malicious Payload

• Ransomware news headlines trending on Google

• Critical Flaws in MEGA Cloud Storage Let Attacker Decrypt User Data

• Biden Signs Two Cybersecurity Bills Into Law

• Dial 311 for… cybersecurity emergencies?

• $6b mega contract electronics vendor Sanmina jumps into zero trust

• How to secure cloud environments by simplifying their complexity

• The current cybersecurity shortage and how to resolve it

• How to transfer Authy to a new phone

• Palo Alto Networks Bolsters Its Cloud Native Security Offerings With Out-of-Band WAAS

• The EU’s Proposal on CSAM Is a Dangerous Misfire

• Response To News On Cyber Pathways Initiative

• Rogue cryptocurrency billboards go phishing for wallets

• How to import passwords into 1Password

• #InfosecurityEurope2022: The NCSC Sets Out the UK’s Cyber Threat Landscape

• Your Android Phone Can Now Keep All Your Passwords On Your Home Screen

• Lack Of Web Scraping Regulations Hurts Progress

• Tesla Factories In Texas, Germany Losing Billions Of Dollars, Says Elon Musk

• NHS warns of scam COVID-19 text messages

• Top Cryptographers Flag ‘Devastating’ Flaws in MEGA Cloud Storage

• Security Orchestration: Beware of the Hidden Financial Costs

• Why 84% Of US Firms Hit With Identity-Related Breaches In 2021

• Yodel Cyber Incident – Experts Discussion

• Attracting Cybersecurity Talent Takes an Open Mind, Creativity and Honesty

• CISA warns over software flaws in industrial control systems

• Avos ransomware threat actor updates its attack arsenal

• Chinese APT ‘Bronze Starlight’ Uses Ransomware to Disguise Cyberespionage

• How APTs Are Achieving Persistence Through IoT, OT, and Network Devices

• CISA Releases Cloud Security Technical Reference Architecture

• NSO Group told lawmakers that Pegasus spyware was used by at least 5 European countries

• The Great Resignation in the Tech Sector and Tips to Solve the Issue

• Flaws in Smart Jacuzzi App Could Be Exploited To Extract Users’ Data

• These hackers are spreading ransomware as a distraction – to hide their cyber spying

• #InfosecurityEurope2022: Actions Not Words: Hacking the Human Through Social Engineering

• CISA Releases Cloud Security Technical Reference Architecture

• Looking For A Fresh Healthy Start: Follow This Simple Guide To Detoxing In 2022

• Everything You Can Do with iCloud – Intego Mac Podcast Episode 245

• Chinese Hackers Using Greyware Tool To DoS Against Mobile Phones

• Johnson Controls Acquires Tempered Networks to Shield Buildings From Cyberattacks

• Affected ICS Vendors Start Responding to OT:Icefall Vulnerabilities

• DOJ Dismantles Major Russian Botnet Responsible for Hacking Millions of Connected Devices

• Fancy Bear Uses Nuke Threat Lure to Exploit 1-Click Bug

• #InfosecurityEurope2022: Focus on End-User Behaviors to Enhance Security

• #InfosecurityEurope2022: Firms Look To Align Security and Business Risk

• Bolt-On vs Baked-In Cybersecurity

• Conti effectively created an extortion-oriented IT company, says Group-IB

• How Technology Is Improving Online Gambling Security

• MetaMask Crypto-Wallet Theft Skates Past Microsoft 365 Security

• Biden signs cyber bills into law

• MCG Health Faces Lawsuit Over Data Breach Impacting 1.1 Million Individuals

• S3 Ep88: Phone scammers, hacking bust, and data breach fines [Podcast]

• Parents Need to Know What’s Going On Inside Their Day Care Apps

• Manual vs. SSPM: Research on What Streamlines SaaS Security Detection & Remediation

• NSO Confirms Pegasus Spyware Used by at least 5 European Countries

• On the Subversion of NIST by the NSA

• 4 Best Gaming PC For Playing Apex Legends 2022

• Your email is a major source of security risks and it’s getting worse

• NSA, CISA say: Don’t block PowerShell, here’s what to do instead

• US Subsidiary of Automotive Hose Maker Nichirin Hit by Ransomware

• QNAP warns of a critical PHP flaw that could lead to remote code execution

• Microsoft Office 365 Feature Could Help Ransomware Attackers Infiltrate Cloud Files

• Automotive hose manufacturer hit by ransomware, shuts down production control system

• May 2022 Cyber Attack Statistics

• The hateful eight: Kaspersky’s guide to modern ransomware groups’ TTPs

• Police seize and dismantle massive phishing operation

• Russian Government Hackers Target Ukraine’s Allies

• Cloud Email Threats Soar 101% in a Year

• Chinese Hackers Are Now Using the Nimbda Loader and a New Form of the Yahoyah Trojan

• Swedish Appeals Court Upholds Huawei 5G Ban

• Top Tips from Leading Females Within Tech on International Women in Engineering Day

• Researchers Found that Adobe Acrobat Blocking Security Software Visibility into PDF Files

• CompoSecure expands Arculus capabilities to help users manage multiple digital assets

• How Technology Has Changed the Way We Write

• Less Than Half of Organizations Have Open Source Security Policy

• #InfosecurityEurope2022: Are You Prepared For The Next Big Crisis?

• KSOC releases remediation-as-code response feature for Kubernetes users

• The secret gay history of the modern internet

• Vishing scams on the rise: How to protect yourself

• Halfords suffers a puncture in the customer details department

• Russia Steps Up Cyber-Espionage Against Ukraine Allies

• CyberStrong 3.20 empowers customers to automate the assessment process

• Don’t ditch PowerShell to improve security, say infosec agencies from UK, US, and NZ

• Researchers found flaws in MEGA that allowed to decrypt of user data

• Hillstone Networks ZTNA solution provides organizations with control over their network access

• Do you know what your supply chain is and if it is secure?

• Chinese Hackers Distributing SMS Bomber Tool with Malware Hidden Inside

• Arcserve N Series appliances allow organizations to protect their digital assets

• #InfosecurityEurope2022: The Power of Narrative in Highlighting OT System Risks

• Critical PHP Vulnerability Exposes QNAP NAS Devices to Remote Attacks

• Europol arrests nine suspected of stealing ‘several million’ euros via phishing

• Traefik Hub enables users to secure and scale their cloud native services

• GitGuardian announces new features to help developers reduce risks of exposure

• Cavelo unveils platform enhancements to minimize data exposure for midsized businesses

• Darktrace adds early warning system to its Antigena Email solution

• Cyber Attack propels false Rocket Attack alarms in Israel

• Tips to stay safe from online banking frauds

• Inside a large-scale phishing campaign targeting millions of Facebook users

• Unit 221B Report Validates Deep Instinct’s >99% Zero-Day and

• SECURE North America | Apple Stories: How Technology Has Mediated Technology Through History

• (ISC)² Concludes Online Proctored Exams Do Not Meet Exam Security Standards

• Why Digital ID Should be On the Vacation Checklist

• Attack methods using hybrid bots enable criminals to open mule accounts at scale

• Rate of IT security incidents grows with company size

Generated on 2022-07-01 00:02:11.564932