IT Security News Monthly Summary – November

• IT Security News Weekly Summary – Week 43

• IT Security News Daily Summary 2021-10-31

• Medical digital twins secure COVID-19 data

• Report: At least 25% of consumers use biometrics for online security

• Iranian Black Shadow hacking group breached Israeli Internet hosting firm

• The Taliban Haven’t Changed, But U.S. Policy Must

• Minecraft Japanese gamers hit by Chaos ransomware using alt lists as lure

• Two major bitcoin mining companies are battling it out in a Texas town of 5,600 people

• Graff multinational jeweller hit by Conti gang. Data of its rich clients are at risk, including Trump and Beckham

• Week in review: Popular npm package hijacked, zero trust security key tenets, wildcard certificate risks

• Security Affairs newsletter Round 338

• Penetration testing

• Debunking: that Jones Alfa-Trump report

• Report: 55% of execs say that SolarWinds hack hasn’t affected software purchases

• CIS Mobile Opens Mobile Integration Center in Northern Virginia HQ

• ITOCHU invests $31.5M in SilverSky to improve the cybersecurity programs of its subsidiary companies

• IT Security News Daily Summary 2021-10-30

• Tom Kellermann Joins Attivo Networks Cybersecurity Advisors

• Hacker accessed medical info at UMass Memorial Health

• Report: Facebook Wants To Target Children As Young As Six Years Old

• Reading INTERPOL the African Cyberthreat Assessment Report 2021

• Security AI is the next big thing

• Data Theorem Introduces Industry’s First API Attack Surface Calculator

• Police Arrest Suspected Ransomware Hackers Behind 1,800 Attacks Worldwide

• Apparent Iran-Linked Hackers Breach Israeli Internet Firm

• Apple Discontinues Intel-Based 21.5-Inch iMac

• #ISC2CONGRESS – Lessons Learned from the Baltimore Ransomware Attack

• ‘iMac Pro’ Coming in 2022 With M1 Pro/Max Chips, 27-Inch Mini-LED Display, MacBook Pro Ports and More

• Report: 37% of IT admins fear software vulnerabilities more than cyber threats

• MITRE and CISA publish the 2021 list of most common hardware weaknesses

• Fortinet warns of Black Friday scams involving PS5s, Xboxes and fake Amazon gift card generators that steal crypto

• Enterprises Allocating More IT Dollars on Cybersecurity

• The SolarWinds Hackers Are Looking for Their Next Big Score

• Top Stories: New MacBook Pros and AirPods 3 Launch, macOS Monterey Released, and More

• TrickBot member extradited to US faces up to 60 years in prison

• Build or Buy your own antivirus product

• Weekly Update 267

• (ISC)2 Cybersecurity Workforce Study: Skills Gap Narrows But More Help Is Needed

• Every month should be Cybersecurity Awareness Month!

• Breaking!! Facebook Now Renamed as ‘Meta’

• 2021-10-29 – Files for my talk at the 2021 Texas Cyber Summit

• Minnesotan Charged with Hacking Pro Sports Leagues

• Week in security with Tony Anscombe

• Europol announces “targeting” of 12 suspects in ransomware attacks

• Europol announce “targeting” of 12 suspects in ransomware attacks

• Mozilla Firefox joins browsers implementing Global Privacy Control

• ESET found a variant of the Hive ransomware that encrypts Linux and FreeBSD

• What Do Social Media Companies Know About You?

• HPE unveils edge-to-cloud strategy for the company aligned to dominant market trends

• BrandPost: New HP Wolf Security Report: 83% of IT Teams Say Work from Home Is a ‘Ticking Time Bomb’

• BrandPost: Latest HP Wolf Security Report Uncovers New Way for Attackers to Run Malicious Code

• Snyk Agrees to Acquire CloudSkiff, Creators of driftctl

• An Apparent Ransomware Hack Puts the NRA in a Bind

• IT Security News Daily Summary 2021-10-29

• The state of CMMC from an assessor perspective

• TA575 criminal group using ‘Squid Game’ lures for Dridex malware

• APTs, Teleworking, and Advanced VPN Exploits: The Perfect Storm

• Friday Squid Blogging: Squid Game Has a Cryptocurrency

• Apple Watch Series 8: Everything We Know So Far

• McAfee Enterprise & FireEye 2022 Threat Predictions

• A malware prevention strategy to complement StopRansomware.gov

• Cybercrime: Europol arrests 12 people for ransomware activities possibly affecting 1,800 victims in 71 countries

• Papua New Guinea ‘s finance ministry was hit by a ransomware

• Could “Unbreakable” Oracle Linux be the Logical Enterprise-Ready CentOS Replacement?>

• AI Weekly: The perils of AI analytics for police body cameras

• SolarMarker Attackers Use SEO Poisoning to Push Malicious Code

• Russian National Accused of Role in Trickbot Is Extradited to US

• Caveat Cyber Emptor: 3 Ways to Protect Sensitive Personal Data this Online Shopping Season

• Cerberus Sentinel Acquires RED74

• iFixit’s Full 16-Inch MacBook Pro Video Teardown Highlights Internal Design Changes

• The best free VPNs: Why they don’t exist

• Summary of the GAO Report on Federal Use of Facial Recognition Technology

• GAO backs Microsoft’s protest of $10 billion NSA cloud award to AWS

• Let’s Encrypt explains last month’s outages caused by certificate expiration

• MITRE, CISA Announce 2021 List of Most Common Hardware Weaknesses

• Police arrested 12 individuals involved in 1800 ransomware attacks worldwide

• MacRumors Giveaway: Win iPhone and iPad Stands From Lululook

• Shrootless: Microsoft found a way to evade Apple’s SIP macOS filesystem protection

• NSA, CISA Release 5G Cloud Security Guidance

• FBI Raids Chinese Payment-Terminal Company

• White House pick for DOD CIO eyes tweaks to CMMC

• Cybercriminals Take Aim at Connected Car Infrastructure

• Teardown of 140W MacBook Pro Power Adapter Shows What’s Inside

• Apple Seeds First Public Beta of macOS Monterey 12.1 With SharePlay

• Copyright Regulator Eases Restrictions on Research, Education, and Repair

• CISSP: The Time is Now

• Stories from the SOC – Data exfiltration

• FBI warns of ransomware gang – What you need to know about the OnePercent group

• 1,000,000 WordPress Websites Affected with OptinMonster Vulnerabilities

• Apple’s Warranty Expenses Have Significantly Declined Since Ditching the Butterfly Keyboard in Macs

• The return of the Malwarebytes CrackMe

• Microsoft to offer cyber security training in community colleges across US

• 7 Ways to Improve Your Cybersecurity Team’s Employee Satisfaction

• How much can you make with an associate in cybersecurity?

• Massachusetts Health Network Hacked; Patient Info Exposed

• HelpSystems Expands Shopping Spree With Digital Guardian Acquisition

• Google Releases Security Updates for Chrome

• Ransomware Has Disrupted Almost 1,000 Schools In The US This Year

• How Can You Keep Your Personal Information Safe?

• Google Chrome is Abused to Deliver Malware as ‘Legit’ Win 10 App

• Hackers upping SSL usage for encrypted attacks, communications

• shoulder surfing

• What Exactly Is Secure Access Service Edge (SASE)?

• GoCD Authentication Vulnerability

• Google Releases Security Updates for Chrome

• Apple Executives Address Lack of Face ID and Touchscreens on Macs

• Deals: Verizon Discounting Apple Accessories, MagSafe Chargers, iPhones, iPads, and More

• New Malware Dubbed AbstractEmu Goes Undetected

• A New Zero-day Vulnerability Is Impacting All Windows Versions

• Tips to protect your data, security, and privacy from a hands-on expert

• Update your OptinMonster WordPress plugin immediately

• Data-breached Guntrader website calls in liquidators, is reborn as Guntrader 2 Ltd

• Microsoft documents “SHROOTLESS” hack patched in latest Apple updates

• Finding the Right Approach to Cloud Security Posture Management (CSPM)

• A Treehouse of Security Horrors

• GoCD Authentication Vulnerability

• Microsoft Overtakes Apple as World’s Most Valuable Company

• UK data watchdog calls for end-to-end encryption across video chat apps by default

• Shrootless: macOS Vulnerability Found by Microsoft Allows Rootkit Installation

• Experts Slam Facebook For Collecting Data From Deactivated Accounts

• This New Android Malware Can Gain Root Access to Your Smartphones

• NSA and CISA explained how to prevent and detect lateral movement in 5G networks via cloud systems

• Shrootless: Microsoft finds Apple macOS vulnerability

• Russian Man Extradited to U.S. for Role in TrickBot Malware Development

• Remote Work Security: Handling Setbacks in the Time of COVID-19

• Panasonic Prototype Battery Lasts Five Times Longer

• 12 People Arrested Over Ransomware Attacks on Critical Infrastructure

• Diversity Matters in Cybersecurity

• Dragos secures $200 million investment turning company into ICS unicorn

• 76% of UK healthcare organisations want government to ban ransomware payments

• Mark Zuckerberg Explains Facebook Meta Name Change

• 400,000 Users Exposed By API Vulnerability – Expert Comment

• Apple fixes security feature bypass in macOS (CVE-2021-30892)

• Ransomware: Police sting targets suspects behind 1,800 attacks that ‘wreaked havoc across the world’

• Schreiber Foods back to normal after ransomware attack shuts down milk plants

• Ransomware Attack Hits PNG Finance Ministry

• Winter is Coming for CentOS 8

• New ‘Shrootless’ Bug Could Let Attackers Install Rootkit on macOS Systems

• Ransomware attack hits Papua New Guinea’s finance department

• Sugar Daddy Scams | Avast

• Chrome 95 Update Patches Exploited Zero-Days, Flaws Disclosed at Tianfu Cup

• Expert Advise On News That WhatsApp To Stop Working On Thousands Of Phones Next Week

• Developing Trends In Cybersecurity

• Commentary On TA505 Phishing Campaign

• Cybercriminals Use Squid Game To Target Fans With Dangerous Malware; New Wave Of Malicious Email Attacks – Proofpoint Research

• 7 Secrets of Successful Software Development Process in 2021

• Google fixes two high-severity zero-day flaws in Chrome

• India’s Top Court Orders Probe Into Pegasus Snooping

• Europol and European Investment Bank sign Working Arrangement

• Google Photos ‘Locked Folder’ Feature for Pixel Phones Coming to iOS

• 18 cybersecurity startups to watch

• FCW Insider: October 29, 2021

• macOS Monterey Users Report Connectivity Issues With USB Hubs

• Misconfigured Database Leaks 880 Million Medical Records

• Forrester Predicts Mass Cybersecurity Brain Drain

• Employees To Demand Remote Work In 2022 | Avast

• Suspected Trickbot Malware Developer Faces 60 Years in Jail

• 12 targeted for involvement in ransomware attacks against critical infrastructure

• Russian TrickBot Gang Hacker Extradited to U.S. Charged with Cybercrime

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Google fixes 2 new actively exploited zero-day flaws in Chrome

• Ranzy Locker Ransomware warning issued by FBI

• New infosec products of the week: October 29, 2021

• Ransomware attack on National Rifle Association of America

• Three OT security lessons learned from 2021’s biggest cyber incidents

• Feds cuff Russian said to be developer of ‘Trickbot’ ransomware

• Safeguarding the B2B sharing economy

• Apple’s Poor Patching Policies Potentially Make Users’ Security and Privacy Precarious

• How do I select an SD-WAN solution for my business?

• MEET THE RECIPIENTS OF THE 2021 (ISC)² GOVERNMENT PROFESSIONAL AWARD

• Trends in connected homes in 2021 – Improved security and connectivity

• Winner of the AT&T Diversity and Inclusion Champion Award 2021

• Google Releases Urgent Chrome Update to Patch 2 Actively Exploited 0-Day Bugs

• Employers must balance productivity and collaboration tools with security

• India’s Supreme Court starts probe into use of Pegasus spyware

• Israeli Researcher Cracked Over 3,500 Wi-Fi Networks in Tel Aviv City

• Unauthorized account openings increased by 21% in the last 12 months

• Securing your Linux Virtual Private Server | Top 5 Ways To Implement Better Server Security

• Cops Receive Stalkerware Training

• Data Breach at University of Colorado

• Despite large investments in security tools, organizations are not confident they can stop data exfiltration

• Kinetic Business Managed Network Security detects and mitigates real-time network attacks

• Appgate launches SDP solution to help enterprises expand and accelerate zero trust initiatives

• Keysight Technologies TimeKeeper monitors time-critical applications, devices and infrastructure

• Services Australia testifies Cellebrite tech only used for fraud and identity theft cases

• AFP confiscates AU$1.7m from Sydney man who stole Netflix, Spotify, Hulu accounts

• 5 tips for parents for a cybersecure Halloween

• DTEX Systems provides insider threat intelligence and investigation services with DTEX I3 research team

• SharePlay Added in macOS Monterey 12.1 Beta

• This is What Facebook’s Upcoming Smart Watch Looks Like

• NAVEX Global collaborates with ECI to enhance ethics and compliance program assessment standards

• VMware partners with eero to improve network connectivity for remote workers

• German authorities and reporters claim to identify core REvil member

• Assange extradition appeal: lawyers cite new claims of CIA plot to harm him

• TrickBot author extradited to U.S. to face cyber crime charges

• Inequitable Access: An Anti-Competitive Scheme by Textbook Publishers

• Report: 64% of security leaders identify obstacles to internal cyber threat intelligence

• Best VPN 2021: Top VPN services reviewed

• Microsoft Edge finally arrives on Linux – “Official” build lands in repos

• Renesas acquires Celeno to deliver end-to-end connectivity solutions for clients and access points

• SUSE acquires NeuVector to strengthen container management security for customers

• DataVisor partners with Equifax to enhance its behavior analytics and fraud detection solution

• Choosing a Managed Security Service: MDR, Firewalls & SIEM

• 6 Ways to Rewrite the Impossible Job Description

• Dragos raises $200M to boost operations against cyberattacks at the industrial level

• Report: 83% of companies say 24-hour shutdown causes incapacitating damage

• Manual certificate management falling way behind PKI growth

• Microsoft found Shrootless bug in macOS that could bypass System Integrity Protection

• Jessica Couto joins Imperva as VP of North America Channel Sales

• Cyber Readiness Institute appoints Karen S. Evans as Managing Director

• Federal cyber leaders assess TMF awards

• Apple ‘Working Feverishly’ to Improve iPhone 13 Supplies

• Apple CEO Tim Cook: We’re Focused on Maintaining Privacy and Security of the App Store

• White House: ‘There’s not a cliff here’ when it comes to vaccine deadlines

• All Sectors Are Now Prey as Cyber Threats Expand Targeting

• Avast releases decryptors for multiple ransomware strains

• IT Security News Daily Summary 2021-10-28

• IRS tech, CISA funding in Build Back Better

• Amid explosive growth, API security a growing concern

• SEO Poisoning Used to Distribute Ransomware

• Apple Reports 4Q 2021 Results: $20.6B Profit on $83.4B Revenue

• Apple Reports All-Time Quarterly Revenue Record for Macs

• Supply Constraints Cost Apple $6 Billion in Q4 2021

• Apple’s Services Achieve All-Time Quarterly Revenue Record

• ICS Security Firm Dragos Reaches $1.7B Valuation in Latest Funding Round

• Over 1 million WordPress sites affected by OptinMonster plugin flaws

• Report: 79% of IT teams have seen increase in endpoint security breaches

• Suspected REvil Gang Insider Identified

• Tech Companies Create Security Baseline for Enterprise Software

• NSA-CISA Series on Securing 5G Cloud Infrastructures

• Ordr Unveils Cybersecurity Innovations and Ransom-Aware Rapid Assessment Service to Expand Its Leadership In Connected Device Security

• How to Use High Power Mode on 16-inch M1 Max MacBook Pro

• Australia Wants Search Engine Choice Screen On Smartphones

• Breaking News: Facebook Changes Name To Meta

• Luxury hotel chain in Thailand reports data breach

• Yet again, Cream Finance skimmed by crooks: $130m in crypto assets stolen

• Twitter details internal Yubico security key rollout

• Researcher found 70% Wi-Fi networks in Tel Aviv are hackable

• Threat Actors Using Squirrelwaffle Loader to Deploy Qakbot & Cobalt Strike Malware

• Identity and Access Management: What’s Driving the Rush?

• Zales.com Leaked Customer Data, Just Like Sister Firms Jared, Kay Jewelers Did in 2018

• Stop Zero-Day Ransomware Cold With AI

• US to Create Diplomatic Bureau to Lead Cybersecurity Policy

• NSA-CISA Series on Securing 5G Cloud Infrastructures

• Dropbox Seemingly Has No Plans to Natively Support Apple Silicon Macs [Updated]

• Throwboy Launches New Apple-Themed Pillows Modeled After iBook G3, iMac G4, Apple Lisa and More

• First iOS 15.2 and iPadOS 15.2 Betas Available to Public Beta Testers

• Apple Seeds First Beta of macOS Monterey 12.1 to Developers

• Facebook Changes Its Name to ‘Meta’

• Europe’s Digital Services Act: On a Collision Course With Human Rights

• Roundup: 2021 Energy & Utility Data Breaches and Defenses in the News

• How Shopping Bots Can Compromise Retail Cybersecurity

• 2021 Cyber Resilient Organization Study: Rise of Ransomware Shows the Need for Zero Trust and XDR

• Keeping tabs on responders’ mental health

• Job hunting? Watch out for this nasty remote work scam

• CIS Control 10: Malware Defenses

• FBI warns of Ranzy Locker ransomware threat, as over 30 companies hit

• Vendor-Neutral Initiative Sets Bare-Minimum Baseline for Security

• Scottish Cybersecurity Startup Unveils Versatile AI-Based Deception

• Free Decryption Tools Available for Babuk, AtomSilo and LockFile Ransomware

• FBI Publishes Indicators of Compromise for Ranzy Locker Ransomware

• S3 Ep56: Cryptotrading rodent, ransomware hackback, and a Docusign phish [Podcast]

• Microsoft to Tap Community Colleges’ Cyber Talent

• CrowdStrike vs Symantec: Top EDR Solutions Compared

• NSA-CISA Series on Securing 5G Cloud Infrastructures

• BSI: Die Lage der IT-Sicherheit in Deutschland (German)

• Growing Ransomware Danger Demands Layered Defense of Your Endpoints

• Termination of Federal Unemployment Programs Represents Turning Point for Fraudsters

• A Brief History of Online Influence Operations

• Recent NPM package hack is an alarming reminder of the risks of website supply-chain fraud

• New! Improvements to Your (ISC)² Cybersecurity Online Continuing Education

• MVSP: A minimum cybersecurity baseline to simplify vendor security assessment

• Protecting your device information with Private Set Membership

• REvil gang member identified living luxury lifestyle in Russia, says German media

• The future of state and local citizen service depends on digital adoption

• Applying security to operating models requires collaboration

• 3 Security Lessons Learned From the Kaseya Ransomware Attack

• ISC Releases Security Advisory for BIND

• Cisco Releases Security Updates for Multiple Products

• Wslink, a previously undescribed loader for Windows binaries

• What Is Different About Cloud Security?

• 6 Business functions that will benefit from cybersecurity automation

• Introducing AT&T Managed Extended Detection and Response (XDR)

• Critical Polygon Blockchain Vulnerability Could Allow Withdrawing Huge Amounts

• Mozilla Removed Two Popular Firefox Add-Ons For Abusing Their Proxy API

• US Copyright Office Adds Support For Right To Repair

• ISC Releases Security Advisory for BIND

• Cisco Releases Security Updates for Multiple Products

• What is GLBA Compliance related to Data Security

• Developer-First Application Security Platform Tromzo Nabs $3.1 Million From Leading CISOs

• EU’s Green Pass Vaccination ID Private Key Leaked

• AbstractEmu, a new Android malware with rooting capabilities

• How we took part in MLSEC and (almost) won

• AtomSilo and LockFile Ransomware Decryptor Now Available for Free

• Microsoft announces plan to cut cybersecurity workforce shortage in half by 2025

• Microsoft finds new macOS vulnerability, Shrootless, that could bypass System Integrity Protection

• Uber To Offer 50,000 Tesla Cars To Drivers

• How to Easily Set Up Mutual TLS SSL

• An Amazon rival reveals the only honest reason to get a video doorbell

• Threat profile: Ranzy Locker ransomware

• Intel Touts New 12th Gen PC Processors

• Best gifts for hackers 2021: Top cybersecurity presents

• How to prepare your team to address a significant security issue

• A Guide to Shift Away from Legacy Authentication Protocols in Microsoft 365

• Israeli Researcher Cracked Over 3500 Wi-Fi Networks in Tel Aviv City

• Issuance of Export Licenses Reveals Strategic Limits on Economic Decoupling

• Lawfare Live: A Discussion on Recent Climate Security Reports

• Learn skills to kick off a lucrative cybersecurity career for only $20

• Codenotary: Notarize and verify your software bill of materials

• 2021 CWE Most Important Hardware Weaknesses

• Cyberattack Cripples Iranian Fuel Distribution Network

• Grief Ransomware Gang Pwns The NRA

• HTTPS Threats Grow More Than 314% Through 2021: Report

• NPM Packages Disguised As Roblox API Code Caught Carrying Ransomware

• Free Decrypters Available Now for AtomSilo, Babuk, and LockFile Ransomware

• Over two-thirds of workers are at risk of a cyber security attack

• You’ve Just Been Ransomed … Now What?

• 2021 CWE Most Important Hardware Weaknesses

• German investigators identify crypto millionaire behind REvil operations

• NRA Presumably Attacked by Grief Ransomware

• Do you need to learn HTML to work as a content manager?

• Iran Blames Nation State For Cyberattack on Petrol Stations

• SlashNext, which uses AI to combat phishing, raises $26M

• HTTPS threats grow more than 314% through 2021: report

• Ransomware: It’s a ‘golden era’ for cyber criminals – and it could get worse before it gets better

• Cloud security in 2021: A business guide to essential tools and best practices

• Grief Ransomware Targets NRA

• Adobe Fixes Gaping Vulnerability Glitches in 14 Software Products

• Downloads in Subscriptions

• VoIP Services Experience “Unprecedented” Cyber-attack In UK

• Israeli Users Targeted by Android Spyware Apps Since 2018

• Good Grief! Ransomware gang has only gone and pwned the NRA – or so it claims

• Ransomware Soars 148% to Record-Breaking Levels in 2021

• Shadow IT Alert: Half of Home Workers Buy Potentially Insecure Kit

• Cyber Scams 2.0 – new tips to help boost your cyber skills

• More Russian SVR Supply-Chain Attacks

• Armis Launches APEX Partner Programme

• What is fileless malware?

• Join Check Point Software Technologies at Microsoft Ignite

• Expert Commentary: Organizations Under Increasing Threat from DNS Attacks

• Following the 2020 Hack, Twitter Security Keys Should Be Used By the Company’s Employees

• Personal Information Belonging to 400,000 German Students Exposed

• September 2021 Cyber Attacks Statistics

• Facebook Orders Staff Not To Destroy Internal Documents

• IoT security provider Viakoo raises $10M

• Crooks steal $130 million worth of cryptocurrency assets from Cream Finance

• Conti ransomware explained: What you need to know about this aggressive criminal group

• Quick Hits

• FCW Insider: October 28, 2021

• Apple releases macOS 12, iOS 15.1, watchOS 8.1, and more

• Say Hey to macOS Monterey – Intego Mac Podcast Episode 211

• Dragos raises $200M to protect industrial customers from cyberattacks

• Malicious NPM Libraries Caught Installing Password Stealer and Ransomware

• New Wslink Malware Loader Runs as a Server and Executes Modules in Memory

• Number of Ransomware Attacks Has Doubled in Just a Year, GCHQ Director Warns

• Small Businesses Pay Up to $1M to Recover from Breaches

• Multiple Local TV Stations in the USA Stop Working Due to A Cyber Attack

• Do you know what your supply chain is and if it is secure?

• If your hair isn’t already gray, 2022’s security threats will get it there, warn infosec duo

• Ransomware news trending on Google

• New certification in Network Defense, Ethical Hacking and Digital Forensics

• #ISC2CONGRESS – Lisa Forte Keynote: Insider Threats A Bigger Challenge Than Ever

• What is 5G shared responsibility and how would it work?

• Why access management needs to evolve beyond passwords

• Hands-on domain password policy setup for Active Directory

• Wireless Network Penetration Testing Checklist – A Detailed Cheat Sheet

• State Department to get cyber bureau

• DOD leans on civilian workforce to fill tech talent gaps

• Intelligence community diversity lags at the highest levels

• Wslink: Unique and undocumented malicious loader that runs as a server

• Dark HunTOR: 150 arrested, $31 million seized in major dark web bust

• New real-world cybersecurity training range opens in South Florida

• NRA responds to reports of Grief ransomware attack

• HelpSystems Acquires Digital Guardian, Extends DLP Capabilities

• Avast releases free decrypters for AtomSilo and LockFile ransomware families

• Microsoft is adding another way to update Windows 11 with Online Service Experience Packs

• More First-Party Apple Apps Can Be Rated, Including Phone, Messages, Photos and Safari

• How to Use App Privacy Report in the iOS 15.2 Beta

• Piiano raises $9M to secure and control PII with data privacy engineering for the cloud

• Report: 90% of hiring execs and job candidates want increased diversity

• Blinken announces new cyber bureau at State

• IC leaders drill in on diversity issues at House hearing

• Verimatrix appoints Jean-François Labadie as CFO

• PQShield expands its business team with two senior appointments

• Evelyn Swaim joins Immersive Labs as CMO

• Apple ships Monterey with security updates, fixes 0-day in Watch and TV products, updates iDevices

• Grief ransomware gang hit US National Rifle Association (NRA)

• PSA: New HomePod Mini Colors Launching in ‘Late November’ in Europe

• Kudelski IoT expands security trainings to North America to help companies evaluate cyber threats

• Drew Schuil joins Silverfort as CRO

• Zyxel Communications names Karsten Gewecke as President

• A New Era of Software Processes Is on the Horizon

• Salesforce and Google create cybersecurity baseline for companies checking vendors

• WordPress Plugin Bug Lets Subscribers Wipe Sites

• Facebook Admits That It Could Soon Face Government Investigation Over Leaked Internal Documents

• 4 Best Antivirus Software of 2021

• Defenders Worry Orgs Are More Vulnerable Than Last Year

• How to Investigate Typosquats

• IT Security News Daily Summary 2021-10-27

• YouTube Accounts Hijacked by Cookie Theft Malware

• BrandPost: XDR Solutions Drive Faster Incident Response

• Smart Car Makers VW & Nissan to Build Smart Factories

• Report: 70% of dev teams admit to skipping security steps

• Apple Releases Safari Technology Preview 134 With Bug Fixes and Performance Improvements

• Apple Releases Safari 15.1 for macOS Big Sur and macOS Catalina

• Russia-linked Nobelium APT targets orgs in the global IT supply chain

• Mitigating Ransomware: A New Paradigm Shift

• Digital Signature Standard (DSS)

• DIU test portable private 5G network for responders

• California faces challenges tracking COVID testing, vaccination data

• QR Codes Help Attackers Sneak Emails Past Security Controls

• NPM packages disguised as Roblox API code caught carrying ransomware

• Teen Rakes in $2.74M Worth of Bitcoin in Phishing Scam

• Ransomware Attacks Are Evolving. Your Security Strategy Should, Too

• India’s Supreme Court Orders Pegasus Probe

• US Launches Appeal Against Assange Extradition Decision

• Apple Seeds First Beta of tvOS 15.2 to Developers

• Apple’s Communication Safety Features for Kids Added in iOS 15.2 Beta

• Secure File Sharing Explained + 13 Options

• USPTO’s path from open data to AI

• Google, Twitter back #ShareTheMicInCyber campaign to expand cybersecurity industry

• The Pixel 6 Chip’s Best Upgrade Isn’t Speed. It’s Security

• Avast released a free decryptor for Babuk ransomware

• Europe’s Digital Services Act: on a Collision Course With Human Rights

• Security does not end with Implementing Controls

• Lawmakers examine TSA’s growing role in cyber

• Adobe’s Surprise Security Bulletin Dominated by Critical Patches

• Develop the skills required for an in-demand cybersecurity career

• Read Between the Lines: Finding Flaws in EPUB Reading Systems

• Video Comparison: AirPods 3 vs. AirPods Pro

• A Universal Gigabit Future Depends on Open Access Fiber

• Use-After-Free in Voice Control: CVE-2021-30902 Write-up

• Donald Trump Loses Bid To Sue Twitter In Florida

• Frequency analysis on hundreds of billions of reports at Report URI: Bloom Filters

• DOD looks to civilian workforce to close technology gaps

• EU Regulators Open Investigation Of Nvidia’s ARM Acquisition

• TransUnion Acquires Identity Security Company Sontiq for $638 Million

• Everything New in iOS 15.2: App Privacy Report and Auto Call Updates

• Kaspersky Buys Brain4Net to Build SASE & XDR Tools

• Blind People Have Won the Right to Break Ebook DRM—for Now

• Protecting workloads from sophisticated supply chain attacks

• FBI Releases Indicators of Compromise Associated with Ranzy Locker Ransomware

• Apple Seeds First Beta of watchOS 8.3 to Developers

• Apple Seeds First Betas of iOS 15.2 and iPadOS 15.2 to Developers With App Privacy Report

• Pixel 6: Setting a new standard for mobile security

• #ISC2Congress – Diversity: The Key to Cybersecurity’s Future

• #ISC2Congress – Critical Infrastructure a Main Focus of Security Congress 2021

• Key benefits of iSIM technology for enabling secure connectivity

• Securing the edge with Zero Trust

• Code similarity analysis with r2diaphora

• BrandPost: Why Data Confidence is the Key to Unlocking Security Automation

• Leverage Virtual Patching to Prevent Network Threats

• Autumn Budget 2021: What It Means For Tech Sector?

• Why Containers in the Cloud Can Be An Attacker’s Paradise

• Report: 83% of orgs leave most sensitive data unencrypted on the cloud

• Report: Confidential computing market could grow to $54B by 2026

• War-Driving Technique Allows Wi-Fi Password-Cracking at Scale

• EC-Council Offers Free Cybersecurity Training

• Cybercriminals Ramp Up Attacks on Web APIs

• 6 Eye-Opening Statistics About Software Supply Chain Security

• Iranian Gas Stations Crippled After Suffering Cyberattack

• The Weaponization of Operational Technology

• Intel partners with Google to deploy ‘Mount Evans’ ASIC-based GPU

• Apple Patches Critical iOS Bugs; One Under Attack

• Kaspersky: North Korean Hackers Targeting IT Supply Chain

• Washington Secretary of State Appointed CISA’s Senior Election Security Lead

• 5 IT security policy best practices

• Apple Releases Security Updates for Multiple Products

• Adobe Releases Security Updates for Multiple Products

• Apple Music for PS5 Available Now, First Integrated Experience on a Game Console

• New insights on cybersecurity in the age of hybrid work

• Fuji Electric Patches Vulnerabilities in Factory Monitoring Software

• Apple Releases Security Updates for Multiple Products

• Adobe Releases Security Updates for Multiple Products

• FBI Releases Indicators of Compromise Associated with Ranzy Locker Ransomware

• 5 elements to include in a cybersecurity strategy for any size business

• Introducing VirusTotal MSSP Program: Differentiate and become indispensable with preventive capabilities

• US Begins Julian Assange Extradition Appeal

• Some states are cloaking prison COVID data

• Linux Foundation: confidential computing market to reach $54 billion in 2026

• Not upgrading to iOS 15? Then you need to install this update now

• Cyber Attack Cripples Iranian Fuel Distribution Network

• Microsoft warns of new supply chain attacks by Russian-backed Nobelium group

• Why Strong Digital Identity Authentication Is More Important Than Ever

• Amazon TVs to Support AirPlay 2 and HomeKit

• New MacBook Pros Have Battery Pull Tabs for Easier Do-it-Yourself Battery Replacements, Says iFixit

• Squirrelwaffle Malware Used to Drop Cobalt Strike

• Review: Dune (2021)

• Weeks Early: Adobe Dumps Massive Security Patch Update

• Microsoft Warns Over Uptick In Password Spraying Attacks

• Afghanistan and American Jihadists: More Inspiration, Less Destination

• Launching a collaborative minimum security baseline

• NATO releases its first strategy for Artificial Intelligence

• Upgrade your network protection with Azure Firewall Premium

• Why It’s Important To Protect Your Personal Information

• These phishing emails use QR codes to bypass defences and steal Microsoft 365 usernames and passwords

• Break into the elite field of cybersecurity by learning Risk Management Frameworks

• Weeks early: Adobe dumps massive security patch update

• Quantum Cybersecurity Provider QuintessenceLabs Raises $18 Million

• Yubico Launches New Security Key With USB-C and NFC

• Apple Patches 22 Security Flaws Haunting iPhones

• How the FBI Gets Location Information

• DJI Launches New Modular Action 2 Camera

• Apple Announces 10 New ‘Power for Impact’ Projects to Tackle Climate Change

• Deals: Apple’s 512GB 14-Inch MacBook Pro Drops to New Low of $1,899 ($100 Off)

• Ransomware Dubbed Ranzy Locker Has Affected No Less Than 30 US Companies in 2021, FBI Reports

• Is Conti Ransomware Selling Access to Victims?

• Onfido Acquires EYN to Provide Acoustic-Based Liveness Detection

• Cynerio Launches IoT Attack Detection and Response Module for Healthcare IoT Devices

• Cyber Readiness Institute Names Karen S. Evans as New Managing Director

• Annual Cyber Risk Survey Finds Businesses Are Sharpening Their Focus on Cybersecurity but Also Reveals Much Room for Improvement in Building Cyber-Resilience

• Identity-Focused Security Controls Prevail

• [eBook] The Guide to Centralized Log Management for Lean IT Security Teams

• Hackers Using Squirrelwaffle Loader to Deploy Qakbot and Cobalt Strike

• The 9th edition of the ENISA Threat Landscape (ETL) report is out!

• FCC Revokes China Telecom Licence In US

• What is Digital Citizenship? | Avast

• Cost of a Data Breach: Retail Costs, Risks and More To Know

• Watch out for the Steam skin “free knife” scam

• Akamai: API attacks are exposing security vulnerabilities

• Update now! Apple patches bugs in iOS and iPadOS

• Russian cyberspies target cloud services providers and resellers to abuse delegated access

• Amazon Web Services Wins Contract From UK Intelligence Agencies

• Hackers Are Exploiting a Flaw in Popular Billing Software to Deploy Ransomware

• Intent-based networking startup Gluware secures $43M to automate repetitive tasks

• FCW Insider: October 27, 2021

• Microsoft warns over uptick in password spraying attacks

• Meet Balikbayan Foxes: a threat group impersonating the Philippine gov’t

• How To Update Your Security Infrastructure and Recover from a Cyberattack

• Extracting type information from Go binaries

• Many Ransomware Attacks on OT Organizations Involved Ryuk: IBM

• North Korean Lazarus APT Targets Software Supply Chain

• HM Treasury Hit by Five Million Malicious Emails in Past Three Years

• Cyber Attack in Iran Reportedly Cripples Gas Stations Across the Country

• EPP EDR: What Is Each and How They Differ

• Iranian Gas Stations Unable to Operate After Massive Cyberattack

• Lazarus Hacking Group Now Focusing on IT Supply Chain Attacks

• Jefferies downgrades red-hot Cloudflare to hold after stock jumps more than 60% in October

• Can’t Get Used to Your MacBook Pro’s Notch? These Apps Will Hide It for You

• MacBook Pro Shipments Being Delayed Due to UPS ‘Mechanical’ Issues

• 70% of WiFi Networks Cracked by Researcher to Show Their Lack of Security

• Open Access Fiber Networks Will Bring Much-Needed High-Speed Internet Service and Competition to Communities More Efficiently and Economically: Report

• Warehouse belonging to Chinese payment terminal manufacturer raided by FBI

• Top 5 Cloud Native Security Challenges

• Computer vision platform Cogniac nabs $20M to bolster its customer acquisition efforts

• 5 steps to security incident response planning

• Ofcom’s Scam Call-Blocking Plan Could Save Consumers Millions

• North Korea-linked Lazarus APT targets the IT supply chain

• Video Highlights Menu Bar Behavior in Apps Not Updated to Accommodate MacBook Pro Notch

• Research Shows 115% ROI with VM-Series Virtual Firewalls

• Build your own Android security product

• Latest Report Uncovers Supply Chain Attacks by North Korean Hackers

• Operations at Iranian gas stations were disrupted today. Cyber attack or computer glitch?

• Protonmail celebrates Swiss court victory exempting it from telco data retention laws

• Four key tenets of zero trust security

• Cybersecurity concerns make US ban China Telecom on its soil

• QuintessenceLabs raises AU$25m to take quantum-based cyber solutions global

• The fast-expanding world of online proctoring: What cybersecurity industry leaders must know

• Good security habits: Leveraging the science behind how humans develop habits

• Singaporean minister touts internet ‘kill switch’ that finds kids reading net nasties and cuts ’em off ASAP

• How to close the cybersecurity workforce gap

• #ISC2CONGRESS – Lessons Learned from the Baltimore Ransomware Attack

• #ISC2CONGRESS – Panel: DEI Initiatives Come Down To Choosing Talent

• Introducing the Palo Alto Networks Panorama Advanced AlienApp

• McAfee Enterprise & FireEye 2022 Threat Predictions

• How RASP Protects Apache Servers from zero-day Path Traversal Attacks (CVE-2021-41773)

• The dangers behind wildcard certificates: What enterprises need to know

• Organizations making security trade-offs in the push to innovate

• FCC kicks China Telecom out of United States

• How Cyber Threat Intelligence Can Help to Protect Against Cloud Security Threats

• Hidden Value In Creating Cybersecurity Audit Programs

• 150 Arrested Over Darknet Drug Trafficking

• State Department to Form Cyber Bureau

• Manual tasks still a barrier to accelerating innovation through DevOps

• Avast Secure Browser PRO protects devices and operating systems from web-based threats

• Ivanti announces three integrated solutions to improve network security in the everywhere workplace

• Quest On Demand Audit anomaly detection helps businesses tackle ransomware attacks

• OpenText increases data protection against ransomware with new features in Carbonite Server

• Socure Sigma Identity Fraud enables enterprises to reduce fraud losses and false positives

• Perception Point Free Plan allows interception of advanced threats missed by other services

• Australia launches new initiative for blocking scam government texts

• Putting cybersecurity first: Why secure‑by‑design must be the norm

• 150 People Arrested in US-Europe Darknet Drug Probe

• Very Good Security Payment Optimization offers merchants control of their payments

• Veriff launches New Account Onboarding to meet stringent regulatory requirements online

• Data Theorem unveils API Attack Surface Calculator to secure APIs from potential exposures

• Arkose Labs updates its platform with enhanced risk detection and attack response capabilities

• China Telecom booted out of USA as Feds worry it could disrupt or spy on local networks

• Allegro Packets introduces Allegro 800 for large 1 G networks environments

• Movandi upgrades features for BeamXR-powered smart repeaters to accelerate mmWave coverage

• Alert Logic and Sungard AS expand partnership to provide customers with MDR solutions

• Free Tool Helps Security Teams Measure Their API Attack Surface

• Hands-On Video With the New 14-Inch MacBook Pro

• Quick Teardowns Offer First Look Inside 14 and 16-Inch MacBook Pro Models

• Sonrai Security raises $50M to scale multicloud security for global enterprises

• QuintessenceLabs raises A$25M to deliver quantum safe crypto solutions worldwide

• What You Need to Know About the New Climate Security Reports

• Aqua Security appoints Limor Schwartz as CFO

• Ed Pearce joins Aryaka as National Channel Director

• Saviynt appoints Jim Jackson as CFO

• SquirrelWaffle Loader Malspams, Packing Qakbot, Cobalt Strike

• North Korea’s Lazarus Group Turns to Supply Chain Attacks

• ZeroFox expands its presence in Australia and New Zealand to tackle rising cybercrime

• Mike Baron joins Friend MTS as SVP of Sales and Strategy

• StorONE names Chris Noordyke as CRO

• Immutable backups for ransomware defense may not be enough

• This AI Predicts How Old Children Are. Can It Keep Them Safe?

• Dark HunTOR: Police arrested 150 people in dark web drug bust

• IT Security News Daily Summary 2021-10-26

• Public Clouds & Shared Responsibility: Lessons from Vulnerability Disclosure

• Illumio Unveils CloudSecure for Zero Trust Segmentation in the Cloud

• Gas Stations in Iran Downed by Cyberattack

• CISA Announces Appointment of Washington Secretary of State Kim Wyman as Senior Election Security Lead

• IBM Announces Advances and New Collaborations in AI-Powered Automation, 5G Connectivity and Security at Mobile World Congress Los Angeles

• Ready to Play? Squid Game Becomes an Attractive Lure to Spread Cyberthreats

• Dark Web Drug Busts Lead to 150 Arrests

• This AI predicts how old children are. Can it keep them safe?

• Hands-On With the New 14-Inch MacBook Pro

• How to Fix Cyber Vulnerability and Protect Data in Ghost 4.3.2

• F5 beats Wall Street expectations for Q4, capping strong 2021

• Cybersecurity Talent Gap Narrows as Workforce Grows

• (ISC)2 Cybersecurity Workforce Study: Skills Gap Narrows But More Help Is Needed

• BrandPost: Secure SD-WAN Improves Network Protection in Fuel Distribution System

• First Impressions From New MacBook Pro Owners: Benchmarks, Weight, ProMotion

• Resisting the Menace of Face Recognition

• How to start a career in cybersecurity from the human side

• 5 cybersecurity personality traits for a successful career

• Expert managed to crack 70% of a 5,000 WiFi network sample in Tel Aviv

• These couldn’t wait for Patch Tuesday: Adobe issues bonus fixes for 92 security holes in 14 products

• Software ecosystem for integrating community development services

• Lazarus Attackers Turn to the IT Supply Chain

• Report: Facebook Has Known About Human Trafficking Problem For Years Without Fixing It

• Apple to Celebrate Veterans Day With Apple Watch Activity Challenge

• Apple Releases iOS 14.8.1 and iPadOS 14.8.1 With Security Updates

• BrandPost: Helping Healthcare Win Its Other Big Battle: Cyberattacks

• Data Security: How Data Activity Monitoring Protects Against Ransomware

• Thrift Savings Plan to launch mobile app next year

• Why the Next-Generation of Application Security Is Needed

• You definitely don’t want to play: Squid Game-themed malware is here

• SolarWinds Attackers Targeting Resellers, Service Providers: Microsoft

• Third-Party Risk Management — Real-World Solutions

• After a Year of Silence, Are EU Cyber Sanctions Dead?

• Adobe Patches Gaping Security Flaws in 14 Software Products

• Are Baby Boomers More Vulnerable Online Than Younger Generations? You Might Be Surprised

• DoJ & Europol Arrest 150 in Disruption of DarkNet Drug Operation

• What About International Digital Competition?

• Biden nominates FCC, NTIA chiefs

• Illumio Brings Visibility, Zero Trust Principles to Hybrid Cloud

• FBI Raids Chinese Point-of-Sale Giant PAX Technology

• Millions of Android devices abused by UltimaSMS Adware Scam

• Phishing attack exploits Craigslist and Microsoft OneDrive

• Iran Blames Cyberattack as Fuel Supply Hit

• Study Coordinator Falsified Clinical Trial Data

• Native Union Brings Back iPod Socks, But for AirPods

• #ISC2CONGRESS – Adam Steltzner Keynote: Perseverance and Ingenuity Will Get Us through the Pandemic

• Every month should be Cybersecurity Awareness Month!

• Tracking Mobile Devices by Analyzing Bluetooth Transmissions

• Serious RCE Vulnerability Affects Older WinRAR Versions

• What Are The Top 5 Penetration Testing Techniques?

• Lead Cloud-Native Security Analytics Engineer Shares Top Tips for Securing the Enterprise >

• Facing Tech Burnout? Here’s How Employers Can Help

• encryption key

• DOJ, Europol arrest hundreds as part of international darknet drug operation

• Attackers Hijack Craigslist Emails to Bypass Security, Deliver Malware

• 9 key security threats that organizations will face in 2022

• Researcher Explains Wi-Fi Password Cracking at Scale

• Mozilla Blocks Malicious Firefox Add-Ons Abusing Proxy API

• Banking scam uses Docusign phish to thieve 2FA codes

• How social media mistakes can impact cybersecurity

• CISA warns of remote code execution vulnerability with Discourse

• Camera Comparison: iPhone 13 Pro Max vs. Pixel 6 Pro

• Protect your business from password sprays with Microsoft DART recommendations

• Massive Cyber Attack on Iran Gas Stations

• Australia Funds Telstra Buy Of Digicel Pacific To Thwart China

• Tesla Reaches $1 Trillion Valuation

• TMF hiring new technical leads

• IRS tax system modernization falls further behind

• Mozilla Firefox Blocks Malicious Add-Ons Installed by 455K Users

• Targets and Prizes Announced for 2022 ICS-Themed Pwn2Own

• SBOMs: Securing the Software Supply Chain

• Operation Secondary Infektion Impersonates Swedish Riksdag, Targets European Audiences

• Unleashing visibility for cyber resilience

• Amazon Given Contract To Store Data For MI5, MI6, And GCHQ

• Facebook Admits Site Appears Hardwired For Misinformation

• BlackMatter Botched Millions In Ransoms Due To Coding Flaw

• Apple Executives Discuss Optimizations for Larger Apple Watch Series 7 Display, Lack of Third-Party Watch Faces

• What To Expect in a Ransomware Negotiation

• Ranzy Locker ransomware hit tens of US companies in 2021

• Do host firewalls matter in cloud deployments?

• Password Vs Passwordless? Cybersecurity Experts Annouce New Password Guidance

• The Discovery of a Polygon Vulnerability Rewarded with a Prize to the Tune of $2 Million

• Facebook Launched SSRF Dashboard Tool Helps Spot SSRF Bugs

• A Punctuation Error May Expose Users’ Search Terms to ISPs Via Chrome And Firefox

• Exposed Prefect Workflows Could Lead to Disruptive Attacks

• Young civic tech star featured in Boston Globe

• Cloud Security Company Sonrai Raises $50 Million

• Almost All US Organizations Experienced a Cyber Event in the Past Year

• Apple’s Polishing Cloth and AirPods 3 Now Available for Same-Day Pickup at Select Apple Stores

• Patch now to bypass Firefox add-ons that abuse the proxy API to deny updates

• France Holds Secret Talks With Israel Over NSO Spyware

• Apple ‘Very Likely’ To Face DoJ Antitrust Lawsuit – Report

• Your Liberal Arts Degree Gives You the Skills for a Cybersecurity Career

• New missions could present challenges for DODs cyber workforce

• These ransomware criminals lost millions of dollars in payments when researchers secretly found mistakes in their code

• 150 arrested in dark web drug bust as police seize €26 million

• Pulling Back the Curtain on Bug Bounties

• Admins Urged by CISA to Patch Critical RCE Bug Found in Discourse

• UltimaSMS Subscription Fraud Campaign Targeted Android Users

• BrandPost: Scary Cyber Threats and Sweet Solutions

• Cybersecurity startup Sonrai Security, which offers identity graph for public cloud, nabs $50M

• AWS wins deal to store UK spy agencies’ work, brings AI to the table

• Enterprise Data Privacy Startup Piiano Emerges From Stealth Mode

• Adobe Releases New Features for Creative Cloud Apps as Adobe MAX 2021 Begins

• Exclusive Deals: Get Up to 45% Off Anker’s MagSafe-Compatible Chargers and Other Accessories

• Millions of Android Users Scammed in SMS Fraud Driven by Tik-Tok Ads

• BillQuick Billing Software Exploited to Hack U.S. Engineering Company

• Researcher cracks 70% of neighborhood Wi-Fi passwords

• Leveraging Zero Trust to Protect K-12 Communities from Cyber Threats

• Facebook Making Online Hate Worse, Whistleblower Tells MPs

• Avast Data Summit 2021 | Avast

• Defending Assets You Don’t Know About, Against Cyberattacks

• Wardrivers Can Still Easily Crack 70% of Wi-Fi Passwords

• Retail Demo Unit Suggests Apple Considered ‘Apple Watch Pro’ Branding

• 4 Best Practices to Protect your Organization from Risk

• CISSP: The Time is Now

• Why you really should buy your own laptop

• Ransomware has proliferated because it’s ‘largely uncontested’, says GCHQ boss

• To Defend Against Ransomware, First Accept These Truths

• CISA Alert – Critical Discourse Bug

• Mandiant And Microsoft Identify New Activity From Russian Actor Nobelium, Experts Reactions

• New Research Reveals That AUS Is The 8th Lowest Risk Country For Cyber Threats In The World.

• Matrix for the masses platform Element One goes live: $5 a month with WhatsApp, Signal, Telegram bridges

• UK Spy Chiefs Seal Cloud Data Deal With Amazon: FT

• Over 10 Million Android Users Targeted With Premium SMS Scam Apps

• Apple’s Privacy Rules to Blame for Facebook’s Lower Than Expected Quarterly Growth, Says Zuckerberg

• Pixelmator Pro 2.2 Update Adds Monterey Support, 28 Shortcuts Actions, New Split Comparison View, and More

• Popular nmp package hijacked, modified to deliver cryptominers

• Threat Actors Exploit SQL-injection Vulnerability in the BillQuick Billing Software to Spread Ransomware

• Nobelium APT Group: A New Supply Chain Attack where Tech Resellers Are Targeted

• Malicious Firefox Add-ons Blocked

• Silicon UK In Focus Podcast: Women In Tech

• Nearly all US execs have experienced a cybersecurity threat, but some say there’s still no plan

• APT trends report Q3 2021

• Ransomware Group REvil Reportedly Taken Down By Multi-country Effort – Experts Reaction

• DDoSers take weekend off only to resume campaign against UK’s Voipfone on Monday

• How Your Business Can Benefit From Using Cloud-based Collaboration Services

• Tesco Website Hack Attempt: What We Know So Far

• Deepfakes, Cryptocurrency and Mobile Wallets: Cybercriminals Find New Opportunities in 2022

• US State Department Sets Up Cyber Bureau, Envoy Amid Hacking Alarm

• Global Security Skills Shortage Falls to 2.7 Million Workers

• DDoSers take weekend off only to resume campaign against Voipfone on Monday

• Deloitte: 14% of US orgs remain defenseless as cybersecurity threats loom

• Third-party data breach in Singapore hits healthcare provider

• Smuggling network up in smoke: seven arrested in Spain

• How to Use Shortcuts to Automate macOS Monterey

• Update Your Mac to macOS Monterey

• Cheap and free cybersecurity training: 8 ways to build skills without breaking the bank

• 10 essential skills and traits of ethical hackers

• Russian Threat Group Nobelium Attacking 14 IT Supply Chains & 140 MSPs

• Schools put the brakes on facial recognition scheme for kids buying lunch

• 16-30 September 2021 Cyber Attacks Timeline

• BEC Costs UK Firms £140M Over Past Year

• GCHQ Boss: Ransomware Has Doubled in a Year

• Criminal group behind €45 million money laundering scheme dismantled in Spain

• UltimaSMS subscription fraud campaign targeted millions of Android users

• Employment fraud in the construction sector: twelve arrested in Belgium and Italy

• Apple Releases macOS Big Sur 11.6.1 With Security Fixes

• Affinity Creative Apps 1.10.3 Update Brings Monterey Support and ‘Stunning’ Performance Optimizations on New MacBook Pros

• Social Media Use And Covid-19 Vaccines | Avast

• Mozilla Firefox cracks down on malicious add-ons used by 455,000 users

• Malicious Firefox Add-ons Block Browser From Downloading Security Updates

• The CISO’s guide to choosing an automated security questionnaire platform

• Looking for adding new detection technologies in your security products?

• Forgot to Pre-Order Your MacBook Pro? Apple Store Pickup Is Now An Option

• Kansas Man pleads guilty to hacking the Post Rock Rural Water District

• GCHQ director outlines plan to ‘go after’ links between ransomware crims and state actors

• CTO’s Practical Guide to Comply With CPRA Cybersecurity Requirements

• The first step to being cybersmart: Just start somewhere

• Australian government announces Cyber Security skills program

• Cyber Threat ranking for countries across the world

• Introducing Avast Secure Browser PRO | Avast

• Navigating ethics in AI today to avoid regrets tomorrow

• Executives’ top concern in Q3 2021? New ransomware models

• Increased risk tolerances are making digital transformation programs vulnerable

• Cyber attacks on vehicles pose a threat to drivers and manufacturers, says Cybellum

• Trends in connected homes in 2021 – Improved security and connectivity

• FBI warns of ransomware gang – What you need to know about the OnePercent group

• Biometrics emerging as the preferred identity verification option for digital consumers

• 72% of organizations hit by DNS attacks in the past year

• Home Affairs in talks to give telco more blocking powers against malicious messages

• KT clarifies routing error caused outage instead of DDoS attack

• When it comes to collaboration tools, firms struggle to keep up with security and compliance

• SPARTA – GUI Toolkit To Perform Network Penetration Testing

• Hardware-grade enterprise authentication without hardware: new SIM security solution for IAM

• New Attack Lets Hackers Collect and Spoof Browser’s Digital Fingerprints

• CompoSecure releases Arculus business solution to reduce fraud and online hacking

• Jumio expands KYX Platform with a no-code orchestration layer to address identity proofing

• CoSoSys offers same-day support for macOS Monterey to prevent data leaks

• First MacBook Pro Orders Arriving to Customers in New Zealand, Australia and Asia

• Report: 77% of companies lost revenue due to bot attacks

• NSW government stands up dedicated unit to fight identity theft

• Jumio Launches End-to-end Orchestration for its KYX Platform

• Forcepoint Completes Acquisition of Bitglass

• OpenText Strengthens Ransomware Resilience

• Display Analyst: 4.7-Inch 5G ‘iPhone SE Plus’ Coming in 2022, iPhone SE 3 With Larger Display Planned for 2024

• Scale Computing partners with Acronis to deliver Business Resilience System for MSPs

• ACI Worldwide and RocketFuel Blockchain provide zero fees cryptocurrency payments

• SolarWinds hackers, Nobelium, hit cloud providers and resellers

• State Department offers glimpse of $8B IT services contract

• Austrac limited when regulating overseas terrorism financing via online platforms

• Schneider Electric names Karlton Gray as IT Channel Director for the UK and Ireland

• Inseego appoints Robert G. Barbieri as CFO

• SolarWinds Attacker Targets Cloud Service Providers in New Supply Chain Threat

• iOS 15.1: How to Enable Dolby Atmos Spatial Audio and Apple Lossless on HomePod

• 10 Great macOS Monterey Features Worth Upgrading For

• Walter Hoffman joins Sontiq as Vice President of Public Sector Sales

• Noname Security appoints Matt Tesauro as API Security Evangelist

• Microsoft discloses new hack

• If you’re using this hijacked NPM library anywhere in your software stack, read this

• Staying Cyber Aware and Safer from Ransomware

• GAO prods OPM to review pandemic hiring

• Defending Assets You Don’t Know About Against Cyberattacks

• IT Security News Daily Summary 2021-10-25

• California’s new strategy for prioritizing cyber defense

• BillQuick says patch coming after Huntress report identifies vulnerabilities used in ransomware attack

• Groove Calls for Cyberattacks on US as REvil Payback

• Emsisoft cracked BlackMatter ransomware, recovered victims’ data

• Who’s In Your Wallet? Exploring Mobile Wallet Security

• Industrial Goods & Services Tops Ransomware Targets in 2021

• Unknown ransomware gang uses SQL injection bug in BillQuick Web Suite to deploy ransomware

• U.S. Department of Justice Likely to File Antitrust Lawsuit Against Apple

• How to Clean Install macOS Monterey Easily Using the New Erase Mac Option

• iOS 15.1 Features: Everything New in iOS 15.1

• BillQuick Billing App Rigged to Inflict Ransomware

• Why hackers should learn Python for pen testing

• SolarWinds hackers attacking more IT supply chain targets

• NOBELIUM Attacks on Cloud Services and other Technologies

• What is a cybersecurity degree?

• Conti Ransom Gang Starts Selling Access to Victims

• Apps and Games That Use iOS 15.1’s New SharePlay Feature

• Ex-NSA hacker says a supply chain cyberattack is one of the things that keeps him up at night

• Nobelium Espionage Campaign Persists, Service Providers in Crosshairs

• State, local governments lean into agile

• SolarWinds APT Targets Tech Resellers in Latest Supply-Chain Cyberattacks

• NOBELIUM Attacks on Cloud Services and other Technologies

• Deals: Sitewide Sales Offer Up to 30% Off Popular Accessories From Mophie, ZAGG, and Pad & Quill

• AnandTech’s Deep Dive Into M1 Pro and M1 Max Highlights Performance and Efficiency Improvements

• Apple One’s Premier Tier Available in 17 Additional Countries Starting Next Week

• AirPods 3 and Polishing Cloth Orders Begin Shipping Out to Customers

• Federal watchdog calls out transparency issues in pandemic spending

• New York Times Journalist Hacked with NSO Spyware

• Belarus’s Lawfare Against Latvia, Lithuania and Poland

• Gaming companies are paying more than double for cyber insurance, and here’s why

• Supply chain attacks ‘keep me up at night,’ TrustedSec CEO says

• Kansas Man Admits Hacking Public Water Facility

• There’s a wave of ransomware coming down the pipeline. What can you do about it?

• CISA Raises Alarm on Critical Vulnerability in Discourse Forum Software

• Evaluating the WeTheNorth Illicit Online Forum

• Beyond the VPN: Ultimate online privacy, with The Tor Project’s Isabella Bagueros: Lock and Code S02E20

• UK Charity Claims Facebook Apps Have Been Used In More Than 5,000 Child Grooming Crimes

• Lossless Audio and Dolby Atmos Support Come to HomePod With 15.1 Software Update

• Apple Releases watchOS 8.1 With SharePlay Fitness+ Group Workouts, Fall Detection Enhancements and More

• Apple Releases macOS Monterey With AirPlay to Mac, Live Text, Safari Updates, Shortcuts App and More

• We’re Excited to Announce the Launch of Comms Hub!

• Ransomware criminals have feelings too: BlackMatter abuse caused crims to shut down negotiation portal

• MEET THE RECIPIENTS OF THE 2021 (ISC)² GOVERNMENT PROFESSIONAL AWARD

• Winner of the AT&T Diversity and Inclusion Champion Award 2021

• Cybersecurity Awareness Month: Listen up – CYBER­SECURITY FIRST!

• DiploFoundation Develops Simulated Cyber-Attack Game

• Vulnerability Summary for the Week of October 18, 2021

• L0phtCrack Password Auditing Tool Now Available As Open Source

• Best File & Disk Encryption Tools for Linux>

• A Journey in Organizational Resilience: Privacy

• Report: Third-party attackers have breached 44% of health care orgs

• REvil ransomware group reportedly taken offline by multi-nation effort

• Companies that pay ransomware attackers get thumbs down from consumers

• Nominations Sought for Global Cyber Awards

• Vulnerability Summary for the Week of October 18, 2021

• SolarWinds Hackers, Nobelium, Once Again Strike Global IT Supply Chains, Microsoft Says

• Facebook Sues Scraper Who Sold 178 Million Phone Numbers And User IDs

• Facebook Whistleblower Frances Haugen Faces UK Parliament

• Ransomware Group Targets Financial Firms With Phishing

• AirPods 3 Unboxing Videos and Reviews Shared Ahead of Tomorrow’s Launch

• Microsoft Digital Defense Report shares new insights on nation-state attacks

• Tesco Cyber Attack 2021 and Microsoft Nobelium Cyber Attack 2021 details

• BrandPost: Overcoming Today’s Top Distributed Workforce Security Challenges

• Facebook sues Ukrainian man for scraping and selling 178m users’ data

• Why PKI Is Critical to Your Cloud Strategy

• Coast Guard plans mobile access to law enforcement database

• Listen up 3 – CYBERSECURITY FIRST! Cyberinsurance, help or hindrance?

• 3 reasons even Chromebook™ devices benefit from added security

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Anatomy of a Linux Ransomware Attack>

• How Secure Is Linux?>

• Why an Ounce of Cybersecurity Prevention is Worth a Pound of Detection

• payload (computing)

• CISA Urges Sites to Patch Critical RCE in Discourse

• Changing Approaches to Preventing Ransomware Attacks

• Russia-Linked SolarWinds Hackers Continue Launching Supply Chain Attacks

• PC&Console Controllers Manufacturer SCUF Gaming Hacked to Steal Banking Information

• Groove Ransomware Gang Asks Extortion Groups to Attack US Interests

• Ransomware: Industrial services top the hit list – but cyber criminals are diversifying

• 5 Cybersecurity Considerations for the Auto Industry

• Cybersecurity M&A Roundup for October 11-24, 2021

• Countries Ranked According to Online Risks

• Anglo American Launches Cybersecurity Apprenticeships

• State Anti-Protest Laws and Their Constitutional Implications

• A Well-Known NPM Library Was Hijacked

• YouTube Accounts Hijacked by Cookie Theft Malware

• Listen up 2 – CYBERSECURITY FIRST! How to protect yourself from supply chain attacks

• A critical RCE flaw affects Discourse software, patch it now!

• MacBook Pro Reviews: Fast Performance, Added Ports, and ProMotion Displays Check All the Boxes

• Anker Launches MagSafe-Compatible ‘MagGo’ Lineup of Charging Accessories

• AirPods 3 Features First Water-Resistant AirPods Charging Case

• Cybersecurity First: Becoming GOAT

• How We Can Narrow the Talent Shortage in Cybersecurity

• The Best VPNs to Protect Yourself Online

• Red TIM Research found two rare flaws in Ericsson OSS-RC component

• Smishing On The Rise – What Can Consumers And Organisations Do To Avoid Being Caught Out?

• New Attack Let Attacker Collect and Spoof Browser’s Digital Fingerprints

• MacBook Pro Unboxing Videos and Reviews Shared Ahead of Tomorrow’s Launch

• MacBook Pro Reviews: Fast Performance, Added Ports, and ProMotion Displays Check All the Boxes for Professional Users

• SolarWinds attacker on the move: Russia’s Nobelium crew has trebled attacks targeting MSPs, cloud resellers, says Microsoft

• Researcher Earns $2 Million for Critical Vulnerability in Polygon

• Tesco ‘Hack’ – How Businesses Can Reduce The Risk Of Falling Victim, Experts Weigh In

• Snowden Warning On Weak Encryption – Expert Comments

• Premium SMS Scam Apps on Play Store | Avast

• Facebook Sues Ukrainian for Scraping, Selling Data of 178 Million Users

• Cambridge Centre for Risk Studies and BitSight Partner on Cybersecurity Economics

• HIV Scotland fined £10,000 for BCC email blunder identifying names of virus-carriers’ patient-advocates

• How APIs can turn your business into a platform

• Russia-linked Nobelium APT targets orgs in the global IT supply chain

• SolarWinds hackers are going after cloud, managed and IT service providers

• Russian Drivers’ Private Information Available For Sale

• SolarWinds hackers are targeting the global IT supply chain, Microsoft says

• HIV Scotland fined £10,000 for BCC email blunder identifying names of virus carriers

• Frequency analysis on hundreds of billions of reports at Report URI: Bloom Filters

• Cybersecurity Awareness Month: Listen up – CYBERSECURITY FIRST!

• Apple Watch Series 8 Suppliers Developing Blood Glucose Monitoring Components

• Blackmatter Ransomware Victims Helped with a Secret Decryptor

• Microsoft identifies new Russian hacking activity on tech companies

• A week in security (Oct 18 – Oct 24)

• HTTPA – Taking HTTPS Security To The Next Level

• LightBasin Hacking Group Switches Focus From Windows To Linux To Target Telecom Sector

• REvil Hacking Gang Forced Offline In Multi-Country Operation

• WeChat Fixes Content ‘Glitch’ Amidst Regulatory Pressure

• Microsoft Warns of Continued Supply-Chain Attacks by the Nobelium Hacker Group

• Gummy Browsers – An Attack Exploiting Browser Fingerprinting

• SolarWinds hackers, Nobelium, once again strike global IT supply chains, Microsoft warns

• Cyber-Attacks on House of Commons Soar by 358% in 2021

• NYT Journalist’s iPhone infected twice with NSO Group’sPegasus spyware

• Reddit’s Allison Miller builds trust through transparency

• FCW Insider: October 25, 2021

• Quick Hits

• Tesco’s website restored after suspected cyberattack

• Online harms don’t need dangerous legislation, they need a spot of naval action

• Italy ‘Negotiating With Intel’ Over 4bn Euro Chip Plant

• Snap Shares Slump On Apple Privacy Disruption

• No Integrity, No Trust. The Foundation of Zero Trust Architecture

• BlackMatter Bug Saved Victims Millions in Ransom Payments

• Amazon Faces Fresh Union Drive In New York City

• Robot Artist Freed By Egyptian Customs After Spy Detention

• Tesco App and Website Back Online After Cyber Incident

• Hackers Exploited Popular BillQuick Billing Software to Deploy Ransomware

• Apple TV 4K and Apple TV+ Service to Launch in Korea on November 4

• DaVinci Resolve 17.4 Offers Five Times Faster 8K Editing on New MacBook Pros

• Facebook sues scraper who sold 178 million phone numbers and user IDs

• Trying to register your antivirus in Windows Security Center?

• Twitter Finds Algorithms Give More Prominence To Political Right

• Apple TV+ to Launch in Korea on November 4 and Debut Korean Drama ‘Dr. Brain’

• NOBELIUM targeting delegated administrative privileges to facilitate broader attacks

• NYT Journalist Repeatedly Hacked with Pegasus after Reporting on Saudi Arabia

• Ransomware: How bad is it going to get?

• AFP is looking to be ‘more aggressive’ with new cyber offensive arm

• Large DDoS attack shuts down KT’s nationwide network

• Emsisoft created a free decryptor for past victims of the BlackMatter ransomware

• Why cybersecurity leaders should focus on spending, people and technology (in that order)

• Half a billion cyber attacks thwarted by Tokyo Olympics 2021

• SolarWinds recovered from the last year’s massive Cyber Attack

• Network and IoT security in a zero trust security model

• Cleanup on aisle C: Tesco app back online after attack led to shopping app outages

• How to implement secure configurations more quickly

• Despite spending millions on bot mitigation, 64% of organizations lost revenue due to bot attacks

• Security leaders facing challenges in managing and securing distributed work environments

• Singtel sells off payment card compliance business

• AFP is looking to be ‘more aggressive’ with new cyber offense arm

• CISO Interview Series: Investing in Frameworks, Humans, and Your Technical Skills

• Top 3 Grooming Techniques in Fraud: What to Watch for

• Data engineers burnout overwhelming, a wake-up call to organizations

• Virtru launches zero-trust key management for entire Google ecosystem

• China is pushing to develop its own chips — but the country can’t do without foreign tech

• Review: Dune (2021)

• Konica Minolta: Solving Challenges for the Government Workplace

• IT Security News Weekly Summary – Week 42

• IT Security News Daily Summary 2021-10-24

• TodayZoo phishing kit borrows the code from other kits

• 5 Security Concerns for Developers In Workload Protection

• Insights Into Proactive Threat Hunting

• Apple Says Notch is a ‘Smart Way’ to Give Users More Space for Content on New MacBook Pros

• Google’s future in enterprise hinges on strategic cybersecurity

Generated on 2021-11-01 00:02:40.774254