IT Security News Weekly Summary – Week 02

• IT Security News Daily Summary 2021-01-17

• DEF CON 28 Safe Mode IoT Village – Deral Heiland’s NAND Flash Recovering File Systems’

• Robert M. Lee’s & Jeff Haas’ Little Bobby Comics – ‘WEEK 312’

• DEF CON 28 Safe Mode IoT Village – Deral Heiland’s ‘Getting Started Building An IoT Hardware Hacking Lab’

• Apple Extends 13-Inch MacBook Pro Backlight Repair Program

• Orbit Fox WordPress Plugin Security Flaws Could Allow Website Takeovers

• Images of Unreleased iPhone 5s in Black and Slate Shared Online

• Negotiating Peace in Iraq’s Disputed Territories: Modifying the Sinjar Agreement

• Two Pink Lines

• WhatsApp Still Needs to Prove it is Trustworthy

• No Surrender: Some Whites Still Believe US Civil War Wasn’t Lost

• Threat Actors Demand Ransom After Major Cyber Attack on Scottish Environmental Protection Agency

• Critical flaws in Orbit Fox WordPress plugin allows site takeover

• New Release of Sysmon Adding Detection for Process Tampering, (Sun, Jan 17th)

• Unemployment Benefits Claims Fraud: New Threats for 2021

• WhatsApp Delay Privacy Updates Until May 2021

• Joker’s Stash, the Largest Carding Forum Shutting Down

• Former DOD Head: The US Needs a New Plan to Beat China on AI

• Security Affairs newsletter Round 297

• Week in review: Pen testing, Sunspot malware, Microsoft plugs Defender zero-day

• Bug Detected in Linux Mint Virtual Keyboard by Two Kids

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Penetration testing

• Pcaps and the Tools That Love Them Part 1 of ???

• XKCD ‘1/100,000th Scale World’

• DEF CON 28 Safe Mode IoT Village – Dewank Pant’s & Shruti Lohani’s ‘Your Connected World Isn’t Yours Now’

• Two kids found a screensaver bypass in Linux Mint

• IT Security News Daily Summary 2021-01-16

• Using Server-Side Encrypt Data AWS KMS to Integrate With Mule-4 AWS-S3 Connector

• Steps to Improve Cybersecurity as Your Employees Return to the Workplace

• UK Police mistakenly deleted 150,000 arrest records in software glitch

• How to check if someone else accessed your Google account

• CES 2021: All of the business tech news you need to know

• Container Inspection for Cloud DevOps

• DuckDuckGo surpasses 100 million daily search queries for the first time

• Russian IT company reportedly lost contract in USA because of serving sites with content from Trump supporters

• Upcoming 16-Inch and 14-Inch MacBook Pros: Everything We Know

• DEF CON 28 Safe Mode IoT Village – Dr. Amit Bar On’s And Anahit Tarkhanyan’s ‘Future Of IoT Sec Baselines’

• EU Regulator: Hackers ‘Manipulated’ Stolen Vaccine Documents

• Facebook Sues Google Chrome Extensions For Scraping User Data

• Siemens fixed tens of flaws in Siemens Digital Industries Software products

• Top Stories: MacBook Pro, iMac, Mac Pro, and iPhone Rumors, Best of CES 2021

• Technology and Software Giants, Microsoft and Google face Threat by Chimer Gang Attack

• Remote Images Used by Hackers to Evade Email Filters

• Bitcoin Scammers Tricked People by Using Elon Musk’s Name

• The Race Is On to Identify and Stop Inauguration Rioters

• The FBI Has Made Over 100 Arrests Related to the Capitol Riot

• Joker’s Stash, the largest carding site, is shutting down

• WhatsApp Delays Controversial ‘Data-Sharing’ Privacy Policy Update By 3 Months

• Obfuscated DNS Queries, (Fri, Jan 15th)

• Facebook Page Vulnerability Allowed Users to Create Invisible Posts

• Big Tech Can’t Ban Its Way Out of This

• ‘Build’ or ‘Buy’ your own antivirus product

• NSA Suggests Enterprises Use ‘Designated’ DNS-over-HTTPS’ Resolvers

• What’s your attitude to parental controls?

• Week in security with Tony Anscombe

• Joker’s Stash, The Largest Carding Marketplace, Announces Shutdown

• Iconic BugTraq security mailing list shuts down after 27 years

• Hackers accessed thousands of surveillance cameras, network devices and even the displays on the platforms of Russian Railways

• Shifting Left: A Penetration Tester’s Journey to the Code Analysis Camp

• Weekly Update 226

• Joker’s Stash, the internet’s largest carding forum, is shutting down

• Cyber ‘Deterrence’: A Brexit Analogy

• The 2021 NDAA, White Supremacy and Domestic Extremism

• The Remote Phish: No Strings Attached

• A security researcher commandeered a country’s expired top-level domain to save it from hackers

• The NSA warns enterprises to beware of third-party DNS resolvers

• Telework, BYOD and DEOS

• Biden-Harris team taps DDM, OSTP director

• Tractors, Pod Ice Cream and Lipstick Awarded CES 2021 Worst in Show

• Extended Expertise – A New Approach to the Resident Engineer Service

• Network Security: Predictions for 2021

• Hackers alter stolen regulatory data to sow mistrust in COVID-19 vaccine

• How law enforcement gets around your smartphone’s encryption

• New MacBook Pro models will arrive this year with MagSafe, M1 successor

• US declares Xiaomi a “Communist Chinese military company,” bans investments

• IT Security News Daily Summary 2021-01-15

• The risks of DDoS attacks for the public sector

• CISA details attacks on cloud services

• GSA drops most drones from multiple award schedules

• FireEye hedges on naming Russians as SolarWinds attackers

• Microsoft Implements Windows Zerologon Flaw ‘Enforcement Mode’

• NSA Appoints Rob Joyce as Cyber Director

• NSA Releases Guidance on Encrypted DNS in Enterprise Environments

• Signal is down for multiple users worldwide

• Apple Testing In-Display Fingerprint Sensor for iPhone 13, Foldable iPhone Also in the Works

• 2021-01-15 – Emotet infection from Epoch 1 botnet

• Rob Joyce to lead NSA cyber office

• How explainable artificial intelligence can help humans innovate

• Florida Man Cyberstalked Survivor of Murder Attempt

• NSA Appoint Rob Joyce as Cyber Director

• MagSafe is Coming Back to the Mac: A Look Back at Apple’s Original Magnetic Charging Technology

• Apple Loses Appeal in VirnetX Dispute, Could Owe Over $1.1 Billion

• Sideloading iOS Apps No Longer Possible on M1 Macs

• BrandPost: Creating a Zero Trust Foundation

• Russian Hacker Sentenced to 12 years in Prison for his Role in an International Hacking Campaign

• 2021-01-12 thru 2021-01-14 – Six items of malspam received by my admin email

• Managing Cybersecurity Costs: Bake These Ingredients Into Your Annual Budget

• Linux Mint fixes screensaver bypass discovered by two kids

• AI set to replace humans in cybersecurity by 2030, says Trend Micro

• Data Security Startup Qohash Raises $6 Million

• Tens of Vulnerabilities in Siemens PLM Products Allow Code Execution

• Threat Roundup for January 8 to January 15

• Revealed: Sophisticated ‘Watering Hole’ Attack – But By Whom?

• Code42 and LogRhythm Partner to Protect Against Insider Threats

• Druva Receives Cyber Catalyst Designation for Outstanding Product Security and Ability to Combat Ransomware

• MacRumors Giveaway: Win an X1 Keyboard and iPad Stand From Satechi

• WhatsApp Delays Privacy Policy Update That Led to Confusion Over Facebook Data Sharing

• Explaining the SIGINT Annex

• A Proposal for a Commission on the Capitol Siege

• How Could Law Enforcement Have Investigated Before the Capitol Riot?

• Can a Former President Be Impeached and Convicted?

• How to Make the National Cyber Director Position Work

• The companies that will benefit most from Biden’s cybersecurity push

• MSPs, have you picked the right PSA for you yet?

• Signal boost: Secure chat app is wobbly at the moment. Not surprising after gaining 30m+ users in a week, though

• NSA Advises Companies to Avoid Third-Party DNS Resolvers

• Apache Velocity XSS Vulnerability Affects Gov Sites

• Microsoft Patch Tuesday Addresses Multiple Office Vulnerabilities

• Misconfigurations: A Hidden but Preventable Threat to Cloud Data

• Hybrid Cloud Adoption Brings Security on the Go

• SolarWinds fallout makes secure communications a critical first line of defense

• Women in Cybersecurity Mid-Atlantic Partners with CMMC COE

• Ex-CISA Head Chris Krebs: ‘Impeachment Is the Right Mechanism’

• DDoS Response Guide

• How to Prevent Digital Certificate Theft – A Lesson From a Recent Breach

• DEF CON 28 Safe Mode IoT Village – Besim Altinok’s And Anil Celik’s ‘IoT Hacking Stories In Real Life’

• The Joy of Tech® ‘Search And Rescue!’

• Click Here to Kill Everybody Sale

• Apple Said to Be Working on Lower-Priced External Monitor to Succeed Thunderbolt Display

• Apple Developing Redesigned iMac With Slimmer Bezels, Apple Silicon Chips

• Apple Working on Two New Mac Pro Desktops, One of Which Will Be Reminiscent of Power Mac G4 Cube

• Apple Extends Free Apple TV+ Trials Until July

• Improving Gender Diversity in the World of Cybersecurity

• Cybersecurity tips for businesses to prepare for the next holiday period

• What is a supply chain attack (and how to prevent it)

• Facebook sues developer of data scraping extensions for Chrome

• Apple Kills MacOS Feature Allowing Apps to Bypass Firewalls

• UK Accidentally Deletes 150k Arrest Records

• Successful Malware Incidents Rise as Attackers Shift Tactics

• People, Process and Technology: Six Best Practices for Cloud Least Privilege

• Expert launched Malvuln, a project to report flaws in malware

• ‘Touch Bar’ Trending on Twitter Following Rumors It’ll Be Removed on 2021 MacBook Pro

• Apple Shares Trailer for Second Season of ‘For All Mankind’

• Apple Shares Behind the Scenes Look at Creating ‘Shot on iPhone’ Videos

• Apple Developing Podcast Subscription Service to Better Compete With Spotify

• XSS vulnerability affects government websites

• 400,000 customer details compromised in Resident Evil and Street Fighter gaming company ransomware attack

• Google Boots 164 Apps from Play Marketplace for Shady Ad Practices

• How next-gen cloud SIEM tools can offer critical visibility companies for effective threat hunting

• Threat Actors Bypassed MFA to Gain Access to Cloud Service Accounts

• Apple Car Speculated to Leverage Eye-Tracking Technology With a ‘C1’ Chip Based on A12 Processor

• COVID-19 State of Remote Work Survey: 34% of Workers Felt Pressure to Return to the Office

• 2020 Cyber Attacks Statistics

• Ransomware Attack on Scottish Environmental Protection Agency SEPA

• Police Delete Database Containing 150,000 Records

• Microsoft Reminds Organizations of Upcoming Phase in Patching Zerologon Vulnerability

• NCSC Reveals New Solution to Protect Remote Public Sector Workers

• How to Achieve Collaboration Tool Compliance

• Name That Toon: Before I Go …

• Apache Releases Security Advisory for Tomcat

• 2021 MacBook Pro Rumored to Feature More Ports: Here’s a Look at What Previous Models Offered

• Are There Shortcuts for the U.S. to Rejoin the Open Skies Treaty?

• Cyberattack Attribution as Empowerment and Constraint

• What is a Malicious App and How to Spot One?

• How a VPN can protect your online privacy

• 5 alternatives to using WhatsApp in 2021

• Facebook Takes Legal Action Against Data Scrapers

• #CES2021: AI and Quantum Technologies Set to Disrupt Cybersecurity Industry

• FTC Orders Popular Women’s Fertility-Predictor App to Stop Misleading Users about Health Info Shared with Data Analytics Providers

• Australian Police Email Mistakenly Identifies Gun Owners

• Dutch Energy Supplier Blames Cyber Intrusion on Data Breaches Suffered by Other Companies

• These Kids Are All Right

• Election Security: A conversation with Matt Olney from Cisco Talos

• RunSafe Security Announces Partnership with ReleaseTEAM

• Winnti APT continues to target game developers in Russia and abroad

• High Severity Cisco Flaw Found In CMX Software For Retailers

• Ransomware Now To Blame For Half Of Healthcare Data Breaches

• Incoming Intel CEO Derides Company’s Inability to ‘Deliver Better Products’ Than Apple’s M1 Chip

• CISSP Online Exam? Explaining the (ISC)² Pilot Test

• Swedish Court Rejects Huawei Appeal Over 5G Ban

• Ransomware attacks now to blame for half of healthcare data breaches

• Malvuln Project Catalogues Vulnerabilities Found in Malware

• Microsoft Patch Tuesday, January 2021 Edition

• Hackers Used Zero-Days to Infect Windows and Android Devices

• Expert Insight On Classiscam Expands To Europe

• What The “Fortune 490” Needs To Do To Stay Safe In 2021

• Python Cryptominer Botnet Quickly Adopts Latest Vulnerabilities

• Ethics Officer Facing Cyberstalking Charge

• The Cyber Kill Chain Model: A Comprehensive Guide

• NSA Publishes Guidance for Enterprises on Adoption of Encrypted DNS

• NSA: DNS over HTTPS Provides “False Sense of Security”

• Cell Phone Location Privacy

• Experts Insight On APT35 Recent Phishing Attacks

• Ring Are Testing End-To-End Encrypted Videos For Their Smart Doorbells

• Expert Reaction On Microsoft Remained Most-spoofed Brand At End Of 2020

• Experts Insight On Mimecast Breach

• Classiscam: Fake Ads hit European Market

• Microsoft Patch Tuesday January Updates Addressed A Zero-Day In Defender

• Australian Government Slams Google For Blocking Local Content

• Toyota slapped with $180 million fine for violating Clean Air Act

• Facebook Sues Devs of Alleged Data-Scraping Chrome Extensions

• I Am Not a Soldier, but I Have Been Trained to Kill

• Researchers Disclose Undocumented Chinese Malware Used in Recent Attacks

• TSMC to Begin Production of 3nm Chips This Year

• Apple Orders Two-Part Oprah Winfrey Biographical Documentary

• Elon Musk giveaway scam spreads throughout Twitter

• Security Recruiter Directory

• The biggest data breach fines, penalties and settlements so far

• Automated “Classiscam” Operation Made $6.5m in 2020

• Check Point Software Partners with Orange Cyber Defense to offer WIFI hacking course to cyber experts

• FCW Insider: Jan. 15

• Rogue: An Android Malware That Gives Hackers Full Control Over a Phone

• Apple Maintained Its Dominant Share of the Wearables Market in 2020

• First Episode of ‘Servant’ Season Two Premieres on Apple TV+

• 150,000 police arrest records lost

• Fujitsu: High Risk of #COVID19 Vaccine Disinformation Campaigns

• Telegram-Based Automated Scam Service Helps Fraudsters Make Millions

• An Explanation Of SSO | Avast

• Hiring Front-End Developers: Experience, Expenses, and Expectations – 2021 Review

• How Augmented Reality Can be Used to Enhance Presentations – 2021 Guide

• Why You Should be Stress Testing Your Network in 2021

• Cybercrime is Becoming More Organized and Professional in 2021

• SolarLeaks Selling Alleged Source Code from Microsoft, Cisco | Avast

• Resident Evil Developer Capcom Became a Victim of Ransomware Attack

• Artificial Intelligence in Cybersecurity: The Culture of the Future

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• Your Quantum-Safe Migration Journey Begins with a Single Step

• Soon, Quantum Computing Could Break Your Encryption

• Cisco says its RV routers will no longer receive updates

• Bloomberg: Next-Generation MacBook Pro to Offer Improved Displays, Faster Charging Over MagSafe

• What analytics can unveil about bot mitigation tactics

• More than 10mil users installed Android apps that showed out-of-context ads

• CES 2021: Car spying – your insurance company is watching you

• FPSL – Field Programmable SASE Logic

• Real-Time Phishing Kit Targets Brazilian Central Bank

• Apple’s Shazam Shares 2021 Popular Music Predictions

• Kuo: New MacBook Pro Models to Feature Flat-Edged Design, MagSafe, No Touch Bar and More Ports

• Phishers count on remotely hosted images to bypass email filters

• Understanding third-party hacks in the aftermath of the SolarWinds breach

• Cisco announces merger with Acacia for $4.5 billion to strengthen its IOT base

• Leaked European Union COVID-19 data from Cyber Attack out on internet

• Throwback Friday: An Example of Rig Exploit Kit, (Fri, Jan 15th)

• Revenue for 5G enterprises in the Asia-Pacific region to reach $13.9B by 2024

• Fraudulent attempt purchase value decreased by $10 in 2020 compared to 2019

• 2021-01-12 (Tuesday) – Pcap and malware for an ISC diary (Hancitor)

• 2021-01-14 (Thursday) – Pcap and malware for an ISC diary (Rig EK)

• Hoplite Technology Anti-Phishing Bot: Protecting everyday users against phishing attacks

• China A.I. firms and Huawei filed patents for tech that could identify Uighur Muslims, report says

• White House opens AI Initiative Office

• ISC Stormcast For Friday, January 15th, 2021 https://isc.sans.edu/podcastdetail.html?id=7330, (Fri, Jan 15th)

• Skyworks Solutions ships its high efficiency small cell PA with a bandwidth of 200 MHz at +28 dBm

• Oracle APEX low-code application development platform now available as a standalone OCI service

• Twenty20 Solutions’ enhanced AI technology drives visibility, security and automation

• Ring launches video End-to-End Encryption for compatible Ring Doorbells and Cams

• Netlogon Domain Controller Enforcement Mode is enabled by default beginning with the February 9, 2021 Security Update, related to CVE-2020-1472

• A Year in Review: Threat Landscape for 2020

• How did the WhatsApp New Privacy Policy Open Up the Gateways to Entire Enterprise Businesses?

• Xiaomi added to US list of alleged Communist Chinese military companies

• Assessing Enterprise Firmware Security Risk in 2021

• CYDERES brings SOC Prime detection content to all its managed security customers

• Consolidated Communications leverages Ciena’s Adaptive IP to build 5G-ready network

• Connected2Fiber and Neustar offer automated platform that simplifies buying and selling

• Uptycs now provides its customers security and compliance for their AWS deployments

• Apple Planning to Bring Music and Podcasts Apps to Microsoft Store

• Onapsis expands board of directors with the appointment of Sebastien Lehnherr

• ZeroEyes hires Taylor May as Director of Sales

• Drata raises $3.2M to help companies streamline their SOC 2 compliance

• Juniper Networks and Türk Telekom partner to advance shift toward Open RAN, 5G and cloud-native networks

• It’s Business As Usual At WhatsApp

• So-called “Consent Searches” Harm Our Digital Rights

• Ten tips for better cyber hygiene during COVID-19

• Biden floats $9B boost to TMF as part of funding surge

• Xayn introduces user-friendly and privacy-protecting web search

• NSA warns against using DoH inside enterprise networks

• Shifting Privacy Landscape, Disruptive Technologies Will Test Businesses

• macOS Big Sur 11.2 Beta 2 Removes Feature Letting Apple Apps Bypass Third-Party Firewalls and VPNs

• Don Freese joins Digital Realty as CISO

• Agilysys announces two leadership appointments in EMEA

• All Roads Lead to… Domains: Why the Humble Domain Name is the Foundation of Your Online Security

• Masking Data With MuleSoft DataWeave

• FireEye not ready to ascribe SolarWinds hack to Russia

• Security software maker Tufin soars on raised Q4 outlook

• Facebook: Malicious Chrome Extension Developers Scraped Profile Data

• Europol announces bust of “world’s biggest” dark web marketplace

• Businesses Struggle with Cloud Availability as Attackers Take Aim

• ‘Chimera’ Threat Group Abuses Microsoft & Google Cloud Services

• IT Security News Daily Summary 2021-01-14

• Preparing a Client Environment for Threat Management

• 5 Cybersecurity Best Practices For Planning Ahead

• It’s time for a tactical LiDAR satellite

• Bipartisan House bill would block Schedule F conversions

• StateRAMP launches for state and local government cloud authorization

• What is the future of cybersecurity?

• NSA Recommends Using Only ‘Designated’ DNS Resolvers

• Expert discovered a DoS vulnerability in F5 BIG-IP systems

• Pad & Quill Debuts New MagSafe-Compatible iPhone 12 Cases

• Netflix Allegedly Testing Spatial Audio Support for AirPods Pro and AirPods Max

• Reassessing the Carter Administration 40 Years Later

• Warning as hackers breach MFA to target cloud services

• Cybersecurity Value is About Protecting Intangible Assets

• Pave the way to a smart city with vehicle recognition technology

• NASCIO pushes feds for more cybersecurity help

• SolarWinds defense: How to stop similar attacks

• Facebook sues two Chrome extension devs for scraping user data

• Tenable: Vulnerability disclosures skyrocketed over last 5 years

• Antigena Email and Enterprise Immune System Designated Marsh Cyber Catalysts 2020

• Epic Games Expands Fortnite Legal Dispute With Apple to the UK

• Web Application Attacks on Healthcare Spike 51% As COVID-19 Vaccines are Introduced

• Install Apache Zeppelin and connect it to AWS Athena for data exploration, visualization and collaboration

• Phishing through the prism of graphic design

• Cybercriminals want your cloud services accounts, CISA warns

• Vaccine Information Leaked After Attack of European Medicines Agency (EMA)

• Florida Ethics Officer Charged with Cyberstalking

• Report: Facebook Is Showing Ads For Military Gear Next To D.C. Riot Posts

• DarkMarket: world's largest illegal dark web marketplace taken down

• Returning foreign fighter arrested in Spain

• How to Set Up an Open Source Strategy

• Operation Spalax, an ongoing malware campaign targeting Colombian entities

• Apple Shares Trailer for Upcoming Tom Holland Movie ‘Cherry’

• Samsung’s $30 SmartTags Beat AirTags to Launch

• Simplify compliance and manage risk with Microsoft Compliance Manager

• Phishing Warning: Popular Brands Most Likely to Be Impersonated By Crooks

• Classiscam Operation Made More Than $6.5 Million in 2020

• 2020 Saw 6% Rise in Number of CVEs Reported

• Convicted Hacker Allegedly Commits Fraud While Awaiting Release

• OPM urges D.C.-area feds to telework through inauguration week

• Vulnerability Exposes F5 BIG-IP Systems to Remote DoS Attacks

• Converting NMAP XML Files to HTML with xsltproc

• Digital Ocean Minds its MANRS Alongside Other Service Providers

• Code42 Achieves FedRAMP Authorization

• CES 2021: Scosche Debuts New Car Mounts Compatible With Apple’s MagSafe Charger

• Abusing cloud services to fly under the radar

• Coming in at number 5, it’s a blast from the past! Tenable’s 2020 security flaw chart show features hits of yesteryear

• Cyber criminals leak Pfizer, BioNTech COVID-19 vaccine data

• Hy-Vee Data Breach Settlement Proposed

• Telegram Bots at Heart of Classiscam Scam-as-a-Service

• US government warns of cyberattacks targeting cloud services

• SASE challenges include network security roles, product choice

• Select a customer IAM architecture to boost business, security

• Security Commands Let Windows Admins Protect Devices Anywhere

• Upcoming Speaking Engagements

• Top MSRC 2020 Q4 Security Researchers – Congratulations!

• What is DLL hijacking? The Windows exploit endangering your sensitive data

• Intel Chips Already Being Made By TSMC – Report

• Hackers Bypassing MFA To Access Cloud Accounts, Warn CISA

• API Security Weekly: Issue #116

• Starting With Ethereum: Smart Contracts

• VMware Carbon Black Cloud™ Awarded Cyber Catalyst Designation

• Cisco says it won’t patch 74 security bugs in older RV routers that reached EOL

• Cloud Attacks Are Bypassing MFA, Feds Warn

• Report: TikTok Harvested MAC Addresses By Exploiting Android Loophole

• S3 Ep15: Titan keys, Mimecast certs and Solarwinds [Podcast]

• Security System Enhanced by Google and Mozilla

• Who Is Responsible for Protecting Physical Security Systems From Cyberattacks?

• New Year, New Outcomes: How We Can Do Better in 2021

• CAPCOM: 390,000 people impacted in the recent ransomware Attack

• iOS 14.4 Will Introduce Warning on iPhones With Non-Genuine Cameras

• Joaquin Phoenix to Star as French Emperor Napoleon in Apple TV+ Film ‘Kitbag’ Directed by Ridley Scott

• Samsung Announces Galaxy S21, S21+, and S21 Ultra Alongside Galaxy Buds Pro and Galaxy SmartTag

• Social Media Companies Need Better Emergency Protocols

• Felony Murder and the Storming of the Capitol

• SolarWinds Is Bad, but Retreat From Defend Forward Would Be Worse

• The Biden Administration and International Climate Change Policy and Action

• Increasing resilience against Solorigate and other sophisticated attacks with Microsoft Defender

• Azure and HITRUST publish shared responsibility matrix

• Microsoft President wants Industries, and Govts stay united against Cyber Attacks

• SASE vs Zero Trust

• CISA Warns Organizations About Attacks on Cloud Services

• Extended detection and response tools take EDR to next level

• Banking Organizations May Face New Breach Notification Requirements from US Regulatory Bodies

• After the global attack by the hackers, the FBI became interested in the company JetBrains

• Vulnerability Management Has a Data Problem

• Juniper Networks Releases Security Updates for Multiple Products

• Cisco Releases Security Updates for Multiple Products

• RCE Vulnerability Affecting Microsoft Defender

• Announcing Refreshed & Updated Cloud Infrastructure Protection

• OT Cybersecurity in 2021 and Beyond Series: Part I – Threat Landscape

• British Airways Subject To Lawsuit After Data Breach – Industry Leader Comments

• Cybereason Announces New Partnership With Intel

• What is PGP Encryption and How does it Work?

• IGEL Launches the UD Pocket2, a Portable Dual Mode USB Device for Secure End User Computing from Anywhere

• CES 2021: Ring Trials End-To-End Encryption In Smart Doorbells

• Transitioning Traditional Apps into the Cloud

• Running my own DoH relay and getting Pi-hole protection away from home!

• Switching to Signal? Turn on these settings now for greater privacy and security

• Cybercriminals are Bypassing Multi-factor Authentication to Access Organisation’s Cloud Services

• Using OpenSCAP to help achieve HIPAA compliance with Red Hat Enterprise Linux 8.3

• Unemployment Fraud in the Criminal Underground

• Hackers Used 4 Zero-Days To Infect Windows And Android Devices

• Apple Removes Feature That Allowed Its Apps To Bypass macOS Firewalls And VPNs

• Kaspersky Lab Fingers Own Government For SolarWinds Hack

• Ring Adds End-To-End Encryption To Quell Security Uproar

• Many iOS Encryption Measures ‘Unused,’ Say Cryptographers

• ‘Anyone Else’s Skype not Working?’

• Silicon Valley’s share of venture capital expected to drop below 20% for the first time this year

• Ministry of Defence’s cyber warfare drive is helping burn a hole through its budget, warns UK’s National Audit Office

• Hackers used 4 zero-days to infect Windows and Android devices

• Windows 10X will feature clever anti-theft protection to deter thieves

• Death Threats Against Huawei’s Meng Wanzhou

• 9 Software Development Mistakes Leading to Cyber Attacks

• Phishing warning: These are the brands most likely to be impersonated by crooks, so stay alert

• Trump ban: No ‘moment for celebration’ in the eyes of Twitter chief

• Apple removes feature that allowed its apps to bypass macOS firewalls and VPNs

• Ring Adds End-to-End Encryption to Quell Security Uproar

• Capcom Says Personal Data of Thousands More Stolen in Ransomware Attack

• Ring Rolls-Out End-to-End Encryption to Bolster Privacy

• NTT DATA and Conferma Pay Partner to Deliver Secure, Virtual Payment Comms to Hotels

• 3 Ways Financial Institutions are Embracing Digital Transformation

• Classiscam expands to Europe: Russian-speaking scammers lure Europeans to pages mimicking classifieds

• Expert Insight On Critical “Orbit Fox” WordPress Plugin Vulnerability

• German Investigators shut down DarkMarket

• How Are Companies Using Device Policies to Thwart Cyber Threats?

• Best 6V Golf Cart Batteries 2021 – Guide & Review

• 7 Best Laptops for Students in India 2021

• Report: Impact of COVID-19 on Enterprise IT Security Teams

• Why cyberinsurance can save your business

• Over 70 Vulnerabilities Will Remain Unpatched in EOL Cisco Routers

• Vulnerabilities Can Allow Hackers to Create Backdoors in Comtrol Industrial Gateways

• CaaS Services Through AWS, Azure, and Google Cloud

• Why Developers Shun Security and What You Can Do about It

• Cisco addresses a High-severity flaw in CMX Software

• Don’t Forfeit Productivity for Internal Email Security

• Microsoft Increases OneDrive File Size Upload Limit to 250GB

• Hackers bypassed the US Cybersecurity Agency’s MFA

• Entrust acquires HyTrust to offer identity, encryption and security policy control for cloud environments

• Best Gaming Keyboards for Small Hands 2021

• 2021: Our cybersecurity predictions for the new year

• Twitter’s Jack Dorsey: Trump Ban Right Thing To Do

• Scam-as-a-Service operation made more than $6.5 million in 2020

• Over 70 Vulnerabilities Will Remain Unpatched in Cisco EOL Routers

• #CES2021: Microsoft President Calls for Collaboration to Counter Growing Cyber-Threats

• Pfizer and BioNTech COVID-19 Documents Stolen in EMA Cyberattack

• Dynamically analyzing a heavily obfuscated Excel 4 macro malicious file, (Thu, Jan 14th)

• Philips Hue Announces New Wall Switch Module, Dimmer Switch, and Outdoor Light Bar

• IT Professionals’ Confidence In Public Cloud Has Surged, Despite Performance Optimisation Issues

• Healthcare Web App Attacks Up 51%; 498 Attacks/month, Per Org. – Experts Perspectives

• Physical Access To The Capital: Potential Security Risks

• Five Things On Our Data And AI Radar For 2021

• Warning of COVID-19 QR code scams

• 7 Best Laptops for Linux 2021 – Review

• Top 10 Best 13 And 14 Inch Gaming Laptops 2021 under $1000

• Most Expensive TVs That You Can Buy – 2021 Guide

• How iTunes Changed Apple – Intego Mac Podcast Episode 170

• 17 types of Trojans and how to defend against them

• 5 things to look for in an XDR solution

• Role of Context in Threat Detection

• New Paper: “Future of the SOC: SOC People — Skills, Not Tiers”

• Brand Phishing Report – Q4 2020

• Seed rounds for cybersecurity rose during pandemic as enterprises search for new defenses

• FCW Insider: Jan. 14

• Quick Hits

• Ring trials customer video end-to-end encryption for smart doorbells

• CISA Warns of Cloud Attacks Exploiting Poor Cyber-Hygiene

• 5G UWB Opportunities And Risks | Avast

• CISA warns of recent successful cyberattacks against cloud service accounts

• Evernote Note-Taking App Launches ‘Home’ One-Stop Information Dashboard

• Aether XI release delivers protection for Windows on ARM

• EU Court Opinion Leaves Facebook More Exposed Over Privacy

• European Regulator: #COVID19 Vaccine Data Leaked Online

• Experts Uncover Malware Attacks Against Colombian Government and Companies

• Satisfaction With WAFs at Only 40 Percent

• Denon Introduces New Sound Bar With Dolby Atmos, AirPlay 2 Support, and More

• Veritas Technologies acquires HubStor to protect cloud data

• SAP Issued Warning and Updates Regarding the Serious Flaws with the Code Injection

• Oracle Database 21c introduces 200+ innovations

• Want to add antivirus to your existing portfolio?

• Object Versus File Storage: Why Security is a Key Consideration

• Is a remote workforce making your organisation less secure?

• Minimizing cyberattacks by managing the lifecycle of non-human workers

• What is a vulnerability management program and should your business have one?

• IoT Cybersecurity Act successfully signed into law

• ‘Twas the night before InfoSec

• British Airways to compensate customers with £3 billion

• HornetSecurity acquires Altaro

• CES 2021: Router swarms invade your home (and know where you are)

• Hackers leak stolen COVID‑19 vaccine documents

• The Russian expert explained why scammers distribute free SIM cards

• BMW Announces Plans to Launch Ultra Wideband Version of Apple’s Car Key Feature by Early Next Year

• 43% of financial services orgs plan to increase private cloud investments

• Capital projects delayed or put on hold due to pandemic

• Healthcare IT teams battle with technical challenges to ensure network resilience and security

• Most containers are running as root, which increases runtime security risk

• Role of Privacy Regulation | Avast

• DarkMarket Taken Down in an international Operation

• ISC Stormcast For Thursday, January 14th, 2021 https://isc.sans.edu/podcastdetail.html?id=7328, (Thu, Jan 14th)

• McAfee extends agreement to be the provider of consumer security on ASUS

• Confluera expands XDR capabilities with VMware Carbon Black

• QuoLab releases reporting capability allowing users to generate reports that deliver actionable intelligence

• LaSalle Solutions LAMP 5.0: Enhanced security features, processes, automation, and search

• PrivaceraCloud: A SaaS-based data security and governance platform

• CISO’s Board Report Cyber Security Toolkit

• CMMC, industrial capital strategy could continue in Biden’s DOD

• Australian Home Affairs Minister takes issue with EU Electronic Communications Code

• Apple Pay Promo Offers Four Months of Free Coffee From Panera Bread

• HITRUST announces organizational changes in the form of new leadership appointments

• EasyDMARC closes investment round to accelerate its growth for the next 12 months

• VComply raises $6M to fuel go to market operations in the US

• Fertility-tracking app Flo Health settles FTC allegations of inappropriate data sharing

• Guest Mode now available on Google Assistant

• Facebook Updates “Access Your Information” Tool To Make It Easier To Navigate

• House Impeaches Trump For Role In Deadly Capitol Riot

• Prototype iPhone 12 Pro Shown Off in Photos

• Lacework appoints Mike Staiger as Chief Financial Officer

• Auth0 expands board of directors with the addition of three industry leaders

• Black PR: Cybercriminals Offer Negative Reputation Services to Help Businesses Target Competitors

• Google reveals high-profile attack targeting Android, Windows users

• Labor Dept. official says religious exemption for some contractors won’t allow discrimination

• DOD outlines breakup of chief management office

• Census workers raise concerns about data quality, with bureau leaning on records rather than in-person counts

• Expect more SolarWinds victims, national security official says

• A real-time mapping platform built from volunteered information

• NGA eyes expanding homeland security info with business data

• High-Severity Cisco Flaw Found in CMX Software For Retailers

• TikTok Takes Teen Accounts Private

• SolarWinds Attackers May Have Hit Mimecast, Driving New Concerns

• Cyber News Rundown: Gaming Industry in Crosshairs of Cybercriminals

• Attackers Exploit Poor Cyber Hygiene to Compromise Cloud Security Environments

• Strengthening Security Configurations to Defend Against Attackers Targeting Cloud Services

• Solar Winds, Office 365 & Shipbuilding…

• Fewer Airline Flights is Surely Leaving Meteorologists Blind

• Attackers targeted Accellion FTA in New Zealand Central Bank attack

• The Best Apple-Related Accessories at CES 2021

• Necessary and Insufficient: The Problems Impeachment Does Not Solve

• IT Security News Daily Summary 2021-01-13

• What Does Edge Security Look Like in 2021

• Bitcoin Exchange Owner Jailed for Money Laundering

• Former Florida Official Charged with Cyberstalking

• Miscreants Manipulate Mimecast Certificate -> Microsoft 365 Exchange Web Services: Welcome To The Pew Pew

• Belkin Recalls Portable Wireless Charger Due to Fire Hazard

• Microsoft issues 83 patches, one for actively exploited vulnerability

• Iranian cyberspies behind major Christmas SMS spear-phishing campaign

• Critical WordPress-Plugin Bug Found in ‘Orbit Fox’ Allows Site Takeover

• 5 programming languages cloud engineers should learn

• Be proactive: 3 risk management steps to take before a cyberattack

• CES 2021: All of the business tech news you need to know

• Google exposes malicious exploits targeting Windows and Android users

• Capcom Data Breach May Have Impacted Extra 40k Customers

• Maze Ransomware is Dead. Or is it?

• Así es M365 Security Plus, la completa solución de seguridad para Microsoft 365

• DEF CON 28 Safe Mode Lockpick Village – Preston Thomas’ ‘Intro To Lockpicking’

• New Leak Site Claims to Sell Data Stolen in SolarWinds Attacks

• Microsoft Defender Zero-Day Mitigation in 2021 Patch Tuesday

• Google Discloses Hacking Campaign with Windows, Android Targets

• 2021 Threat Predictions Report

• New Zealand Central Bank Says Accellion Service at Heart of Cyberattack

• Microsoft Defender zero-day fixed for January Patch Tuesday

• VPN vs. VLAN: What’s the difference?

• Virtual Pen-Testing Competition Tasks College Students With Running a Red Team Operation

• Huntress Acquires EDR Technology From Level Effect

• How Law Enforcement Gets Around Your Smartphone’s Encryption

• Assessing design quality for better software due diligence

• DEF CON 28 Safe Mode Lock Picking Village – N∅thing’s ‘How I Defeated The Western Electric 30c’

• XKCD ‘Apple Growers’

• Rogue Android RAT emerges from the darkweb

• Apple Seeds Second Beta of tvOS 14.4 to Developers

• Apple Seeds Second Beta of watchOS 7.3 to Developers

• Apple Seeds Second Beta of macOS Big Sur 11.2 to Developers

• Apple Seeds Second Betas of iOS 14.4 and iPadOS 14.4 to Developers

• Assessing the Vulnerabilities Equities Process, Three Years After the VEP Charter

• The Coronavirus Games: A Geopolitical Spy Story

• Azure Active Directory empowers frontline workers with simplified and secure access

• Signal Ramps Up Hiring After Surge – Report

• Sophisticated Hacks Against Android, Windows Reveal Zero-Day Trove

• Hackers Leak Stolen Pfizer-BioNTech COVID-19 Vaccine Data

• Official: Number of Victims of Russian Hack Likely to Grow

• Understanding TCP/IP Stack Vulnerabilities in the IoT

• CalDigit Introduces Thunderbolt 4 Dock With 10 Ports and Up to 94W Charging for Macs

• Leaked Marketing Materials for S21 Launch Confirm Samsung Won’t Include Charger

• Security Update Guide Supports CVEs Assigned by Industry Partners

• Qualcomm To Acquire Chip Startup NuVia For $1.4 Billion

• Owner forgets password to digital wallet with $240m of Bitcoin inside

• Sophisticated Hacks Against Android, Windows Reveals Zero-Day Trove

• Threat Actor Targets New Zealand Reserve Bank to Acquire Sensitive Information

• What is Under the Cape of a Security Champion?

• Sunburst backdoor – code overlaps with Kazuar

• Qualcomm to Acquire Chip Startup Nuvia, Founded by Ex-Apple Chip Designers, for $1.4 Billion

• Experts Commentary On DarkMarket Being Taken Down By Europol

• Mimecast customers targeted by espionage campaign says Microsoft

• Top 5 Most Secure VPN services in 2021

• Big Data in Agriculture: Revolutionizing The Industry

• BrandPost: Public Agencies Uncover Numerous Opportunities With Fortinet’s Fabric Management Center

• NetApp and NVIDIA: Delivering breakthroughs in conversational AI

• Intel CEO Bob Swan To Step Down, Replaced By Pat Gelsinger

• Meet The New Business Hub | Avast

• Ring rolls out end-to-end video encryption after a class action lawsuit

• FCW Insider: Jan. 13

• NASA names permanent CIO

• IoT Security Firm Vdoo Expands Series B Funding to $57 Million

• Home schooling – how to stay secure

• The Data-Centric Path to Zero Trust

• Isolate and Liberate

• Egregor Ransomware: Origins, Operating Mode, Recent Incidents

• A Rare Look Inside a Cryptojacking Campaign and its Profit

• TikTok tightens up privacy controls for young users

• WhatsApp says: No, we can’t see your private messages – and neither can Facebook

• Microsoft mocks Facebook and it doesn’t go down well

• Best VPN services for 2021: Safe and fast don’t come for free

• Hackers Publish COVID-19 Vaccine Data Stolen From EU Medicines Agency

• Tech Giants Hope for US Data Privacy Law

• Mimecast Cert Abused to Target Inboxes in “Sophisticated” Attack

• International Task Force Takes Down Largest Dark Web Market

• How Amazon Sidewalk Works—and Why You May Want to Turn It Off

• GUEST ESSAY: 5 steps for raising cyber smart children — who know how to guard their privacy

• Cybereason and SYNNEX Corporation Partner to End Cyber Attacks

• Microsoft Patch Tuesday for January 2021 fixes 83 flaws, including an actively exploited issue

• Hackers Have Leaked The COVID-19 Vaccine Data They Stole

• WhatsApp Responds To Concerns Over Privacy Policy Update

• The Password Guess Worth $240 Million In Bitcoin

• Mimecast Certificate Hacked In Microsoft Email Attack

• Safari Allows Users to Enable Hidden ‘Items’ Tab in ‘Find My’ App Ahead of AirTags Launch

• Paris Metro Navigo Cards Now Supported on iPhone

• Intel CEO Bob Swan to Step Down in February

• Is Signal The Safest Alternative? What Expert Says

• ANU Scam: New Positive Positive cases of COVID-19

• Pfizer COVID-19 Vaccine Data Leaked Online

• Russian Hacker Sentenced to 12 years in Prison for his Role in an International Hacking Campaign

• Social Engineering And Social Media: How to Stop Oversharing

• CISOs Prep For COVID-19 Exposure Notification in the Workplace

• WhatsApp Stresses Privacy as Users Flock to Rivals

• SolarLeaks: Files Allegedly Obtained in SolarWinds Hack Offered for Sale

• #COVID19 Led to Surge in Malware Attacks Last Year

• Korean Dating App Leaks 1 Million Private Photos Shared By Users

• Safari Allows iPhone Users to Enable Hidden ‘Items’ Tab in ‘Find My’ App Ahead of AirTags Launch

• A 5-Step Guide to Implementing Zero Trust in the Workforce

• Hackers have leaked the COVID-19 vaccine data they stole in a cyberattack

• Mimecast Discloses Certificate Incident Possibly Related to SolarWinds Hack

• ‘Rogue’ Android RAT Can Take Control of Devices, Steal Data

• Kosovo Hacker Faces Extended US Prison Stay After Allegedly Committing Crimes from His Cell

• Computing Giant Intel Launches New Processors with Ransomware Detection Features

• On US Capitol Security — By Someone Who Manages Arena-Rock-Concert Security

• Apple Launches New Nationwide Racial Equity and Justice Initiative Projects

• Response Comments On 2020 The Busiest Year On Record For Cyber Attacks

• Ubiquiti Urges Customers To Quickly Enable 2FA

• Protecting The Digitally-excluded: Biometric Identification Ensures Access To Payments In A Cashless World

• Mimecast certificate used by Microsoft 365 Exchange Web Services have been compromised

• Patch Tuesday (January 2021): Microsoft patches 83 vulnerabilities, including a Zero-Day

• (ISC)² Supports DOE Competition to Train the Next Generation of Cybersecurity Leaders

• How to Avoid Getting Your Trading Account Hacked

• CES 2021: Tech Expo Virtual Highlights So Far

• What Fitbit Knows About You | Avast

• WhatsApp vs. Signal vs. Telegram vs. Facebook: What data do they have about you?

• RG Coins cryptocurrency exchange owner lands 10 years behind bars for money laundering

• Microsoft Fixes Windows Defender Zero-Day Bug

• #CES2021: Raising the Bar on Privacy and Trust Online in 2021

• Global iPhone Shipments Up 10% in 2020 Compared to Previous Year

• Expert Reaction On Latest Update On Data Breach At Capcom

• SaferVPN Hit By Major Security Vulnerability

• Expert Insight On New Ransomware Blackmail Technique

• Mimecast Compromised By Threat Actor

• Far Right Platform Parler Under Cyberattack

• Google’s Project Zero reveals Windows and Android exploit chains

• Top SolarWinds risk assessment resources for Microsoft 365 and Azure

• Hashing explained: Why it’s your best bet to protect stored passwords

• YouTube Suspends Donald Trump Channel

• Cloud Threat Hunting: Attack & Investigation Series- Lateral Movement – Under the Radar

• Adobe fixes critical code execution vulnerabilities in 2021’s first major patch round

• 8 Cloud Security Best Practice Fundamentals for Microsoft Azure

• Worst Plunge Since March Shakes Faith in Bitcoin

• Intel Adds Hardware-Enabled Ransomware Detection to 11th Gen vPro Chips

• SolarWinds aftermath continues with SolarLeaks

• 2020 Cyber Attacks Statistics

• Hackers hijacked email security firm Mimecast to spy on customers

• Cybereason to Adopt Intel’s PC Hardware Ransomware Solution

• Healthcare Hit by 187 Million Monthly Web App Attacks in 2020

• MegaCortex Ransomware: The Cyber-Threat Looming Over Corporate Networks

• Buyer’s Guide for Securing Internal Environment with a Small Cybersecurity Team

• World’s largest dark-web marketplace shuttered after Euro cybercops cuff Aussie

• Looking for adding new detection technologies in your security products?

• Authorities Take Down World’s Largest Illegal Dark Web Marketplace

• Four Steps to Mitigate Future Healthcare Cyberattacks

• Data collection cheat sheet: how Parler, Twitter, Facebook, MeWe’s data policies compare

• The future history of medical device cybersecurity

• Ransomware news trending on Google

• Australian citizen runs $220m dark web to sell stolen credit card info and malware

• Operation Spalax: Targeted malware attacks in Colombia

• Microsoft Issues Patches for Defender Zero-Day and 82 Other Windows Flaws

• Hackers Steal Mimecast Certificate Used to Securely Connect with Microsoft 365

• Data industry trends to watch in 2021

• Scammers are claiming to sell Covid-19 vaccines on the dark web for up to $1,000 worth of bitcoin

• What is a software-defined perimeter and how does SDP work?

• ‘Tis the season for session hijacking – Here’s how to stop it

• Joint Chiefs Message To The Joint Force

• SOC analysts overloaded, but role more important than ever

• Massive IT-employee disconnect hindering remote productivity

• More Lessons Learned About Trying Harder and Passing the Offensive Security Certified Professional Exam (OSCP)

• Watchdog Raises Concerns About Census Bureau’s IT Security

• ISC Stormcast For Wednesday, January 13th, 2021 https://isc.sans.edu/podcastdetail.html?id=7326, (Wed, Jan 13th)

• Allot DNS Secure joins the Allot Secure family of cybersecurity solutions for CSPs

• NETGEAR Insight: Providing businesses with increased simplicity, capabilities and user experience

• Intel introduces four processors for business, education, mobile and gaming platforms

• Microchip announces production release of 24G SAS/PCIe Gen 4 Tri-mode storage controllers

• (ISC)² offers online proctoring pilot test for CISSP and other cybersecurity certifications

• Microsoft Patch Tuesday, January 2021 Edition

• The Top Five Secrets Found in Code

• Hancitor activity resumes after a hoilday break, (Wed, Jan 13th)

• The Originalist Presidency in Practice?

• NETGEAR unveils 4G and 5G wireless solutions as an alternative to traditional wired broadband

• Major upgrades planned for Dense Air’s Hyper Dense network at Millbrook

• OmniVision enhances automotive image sensor with higher 3MP resolution and cybersecurity features

• D-Link unveils 5GNR Wi-Fi 6 CPE device and 5G Wi-Fi 6 Mobile Hotspot

• The Biggest Data Breaches of 2020

• New Relic promotes Bill Staples to President and Chief Product Officer

• JumpCloud raises $200M to expand product development, marketing, and sales globally

• Hornetsecurity acquires Altaro to expand international locations and provide new products

• Malware vendor returns with yet another nasty Android malware

• 5 Reasons Why Security and User Experience Go Hand in Hand

• backdoor (computing)

• Civilian-military concerns trail Biden’s defense secretary pick

• Evanina: Number of known SolarWinds victims ‘will continue to grow’

• Australian man arrested for alleged operation of now-shuttered DarkMarket

• VERT Threat Alert: January 2021 Patch Tuesday Analysis

• Facebook Says It Isn’t At Fault For Allowing Capitol Rioters To Organize

• United Nations Security Flaw Exposed 100K Staff Records

• More SolarWinds Attack Details Emerge

• Sophisticated hacking campaign uses Windows and Android zero-days

• Matt Schatz joins Trulioo as Chief Revenue Officer

• Microsoft emits 83 security fixes – and miscreants are already exploiting one of the vulns in Windows Defender

• Enriching Intrusion Detection and Prevention Systems with IP and Domain Intelligence

• Dunne: Schedule consolidation is paying off

• Billions were stolen in blockchain hacks last year

• ManagedMethods & The CISA Joint Cybersecurity Advisory

• Apple Met With Electric Vehicle Startup Canoo in Early 2020, But Talks Fell Apart

• IT Security News Daily Summary 2021-01-12

• DOD, NTIA pushing open 5G stack ecosystem

• Cloud platform integrates social services data across departments

• The tech first responders really want

• Critical Microsoft Defender Bug Actively Exploited; Patch Tuesday Offers 83 Fixes

• Microsoft Defender Zero-Day Fixed in First Patch Tuesday of 2021

• January 2021 Patch Tuesday fixes 83 vulnerabilities

• Police took down DarkMarket, the world’s largest darknet marketplace

• Lawfare Live: Seditious Conspiracy, Impeachment and the Inauguration

• About That Presidential Medal of Freedom: Revisiting the Nunes Memo

• January 2021 Patch Tuesday: Microsoft plugs Defender zero-day RCE

• EFF Welcomes Fourth Amendment Defender Jumana Musa to Advisory Board

• Microsoft emits 83 security fixes in first Patch Tuesday of 2021 – and miscreants are already exploiting one of them

• World’s Largest Illegal Dark Web Marketplace Taken Down

• How DOD can plan for the pandemic’s next wave by eliminating network choke points

• For small and mid-sized communities, digital transformation depends on cloud computing

• Google reveals sophisticated Windows and Android hacking operation

• SolarWinds: What Hit Us Could Hit Others

• Microsoft Releases January 2021 Security Updates

• Microsoft January 2021 Patch Tuesday, (Tue, Jan 12th)

• Face Surveillance and the Capitol Attack

• BrandPost: Ransomware Attacks: Don’t Think It Can Happen to You?

• Microsoft fixes Defender zero-day in January 2021 Patch Tuesday

• New Resources Define Cloud Security and Privacy Responsibilities

• Microsoft Patch Tuesday: 83 Vulnerabilities, 10 Critical, 1 Actively Exploited

• SAP Patches Serious Code Injection, DoS Vulnerabilities

• Healthcare Cyberattacks Disrupt COVID-19 Vaccine Supply Chain

• Via The Department Of Better Late Than Never: Federal Trade Commission Sues Facebook Inc.

• Robert M. Lee’s & Jeff Haas’ Little Bobby Comics – ‘WEEK 311’

• DEF CON 28 Safe Mode Lock Picking Village – Austin Marck’s ‘Keystone To The Kingdom’

• CMMC Takeaways and Impact

• EMA: Some of Pfizer/BioNTech COVID-19 vaccine data was leaked online

• CES 2021: Arlo Highlights Touchless Video Doorbell and Essential Indoor Camera, Adds HomeKit to Wired Doorbell

• AirPods Max vs. Drop + THX Panda Wireless Headphones

• SolarWinds malware was sneaked out of the firm’s Orion build environment 6 months before anyone realised it was there – report

• OmniTRAX Affected by Conti Ransomware

• Android Malware Claims to Give Hackers Full Control of Smartphones

• New Phishing Campaigns and Cyber Attacks Target Columbia

• Ubiquiti Network Device Manufacturer Potential Data Breach

• These are the secure chat apps to download now that Facebook ruined WhatsApp

• Pakistani Android users hit by spyware campaign with malicious apps

• BumbleBee Opens Exchange Servers in xHunt Spy Campaign

• Mimecast Certificate Hacked in Microsoft Email Supply-Chain Attack

• Data Breach at ‘Resident Evil’ Gaming Company Widens

• How to Boost Executive Buy-In for Security Investments

• Apple’s Anti-Reflective Coating Repair Program Still in Effect for Some MacBooks With New Mail-In Policy

• Anker Unveils $130 Soundcore Liberty Air 2 Pro Earbuds to Compete With AirPods Pro

• Facebook Updates ‘Access Your Information’ Tool for Data Management

• Ubiquiti breach, and other IoT security problems

• Adobe Fixes 7 Critical Flaws, Blocks Flash Player Content

• 5 best languages for cloud engineers to learn

• Microsoft Defender for Endpoint on Linux Goes Live

• Just What Does It Take to Develop a Career in the Cybersecurity Domain?

• Microsoft Defender for Linux now has endpoint detection and response security

• macOS malware used run-only AppleScripts to avoid detection for five years

• Mimecast says hackers abused one of its certificates to access Microsoft accounts

• Europol Reveals Dismantling of ‘Largest’ Underground Marketplace

• Adobe Releases First Security Updates of 2021 as It Blocks Flash Content

• SolarWinds breach news center

• Security Operations Struggle to Defend Value, Keep Workers

• An Absurdly Basic Bug Let Anyone Grab All of Parler’s Data

• Cisco Secure Endpoint Named an Endpoint Security Top Player

• Apple Researching iPhone Cases That Can Charge AirPods and Other Accessories

• CBS This Morning: Apple to Make ‘Big Announcement’ Tomorrow Morning

• Trump’s War on the U.S. Agency for Global Media

• What to Make of the Facebook Oversight Board’s Inaugural Docket

• Findings of the Forrester Wave SAST 2021 Report

• The Financial Impact of SolarWinds Breach

• Canada In Fidem acquired by Atos

• Ask Umi the IT dog: Boxed in by Dell

• SolarWinds Hack – Multiple Similarities Found Between Sunburst Backdoor and Turla’s Backdoor

• Introducing Avast Hacker Archives | Avast

• German Police Take Down ‘World’s Largest Darknet Marketplace’

• Beyond the Pandemic: Far-ranging and Lasting Change Ahead for Industrial Networks

• Intel Packs Ransomware Detection Directly Into vPro Platform

• Twitter Cites Capitol Protests in Suspension of 70,000 User Accounts

• Over 200 Million Facebook, Instagram and LinkedIn Profiles Exposed Through Unsecured Database Held by Chinese Startup

• The data of 1.3 million Russian Hyundai customers are on sale

• Cyber Attackers Targets the Montreal Car-Sharing Service Communauto

• Over-Sharer or Troublemaker? How to Identify Insider-Risk Personas

• SAP Releases January 2021 Security Updates

• Adobe Releases Security Updates for Multiple Products

• Mozilla Releases Security Update for Thunderbird

• NSA Cybersecurity Directorate Releases 2020 Year in Review

• Clumio Achieves ISO 27701 Certification, First Internationally Recognized Privacy Standard Aligned with GDPR

• Parler Hacked As Attackers Claim Access To Messages, Locations, And Raw Videos

• This Android Malware Claims To Give Hackers Full Control Of Your Phone

• Amazon And Facebook Staff Warned Of Threats To Safety

• Twitter Suspends 70,000 Accounts Sharing QAnon Content

• Adobe Flash is Officially Dead After 25 Years With Content Blocked Starting Today

• Web Application Attacks on Healthcare Spike 51% As COVID-19 Vaccines are Introduced

• Install Apache Zeppelin and connect it to AWS Athena for data exploration, visualization and collaboration

• Phishing through the prism of graphic design

• 3 security career lessons from ‘Back to the Future’

• Signal Installations Surge Amid WhatsApp Data Concerns

• State of ITAM: How Your IT Asset Management Must Evolve

• Chinese firm leaked 200m Facebook, Instagram, LinkedIn users’ data

• Part One: Secure Coding Urban Myths

• Why all of Trump’s tweets and other social media posts must be archived for future historians

• Cybersecurity teams are struggling with burnout, but the attacks keep coming

• Ethical Hackers Breach U.N., Access 100,000 Private Records

• Facebook Awards Big Bounties for Invisible Post and Account Takeover Vulnerabilities

• SecurityWeek Names Ryan Naraine as Editor-at-Large

• Location Data from Muslim Prayer App Sold to Data Broker

• Returning foreign fighter arrested in Spain

• Warning — 5 New Trojanized Android Apps Spying On Users In Pakistan

• Huntress Acquires Network-Aware Endpoint Detection and Response Technology from Level Effect to Strengthen Platform Capabilities

• Bulletproof Hosting Services Essential for Criminal Underground Security and Anonymity

• CES 2021: Satechi Launches 2-in-1 Magnetic Wireless Charging Stand

• WhatsApp Affirms User Privacy Following Backlash Over Data Sharing With Facebook

• SolarWinds hack investigation reveals new Sunspot malware

• Peaks and Valleys: The Mental Health Side of Cybersecurity Risk Management

• Ubiquiti Tells Users to Change Passwords After Breach at Cloud Provider

• DarkMarket: world's largest illegal dark web marketplace taken down

• Abusing cloud services to fly under the radar

• Keeping your kids safe online during lockdown

• Microsoft’s beefed-up take on Linux server security has hit general availability

• ‘Sunspot’ Malware Used to Insert Backdoor Into SolarWinds Product in Supply Chain Attack

• New Zealand Central Bank Breach Hit Other Companies

• Two-Thirds of Employees Don’t Consider Security Whilst Home Working

• Ubiquiti users told to change their passwords following security breach

• Cloning Google Titan 2FA keys

• CES 2021: LG Teases ‘World’s First Rollable Smartphone’

• Expert Commentary: Chinese Data-Scraping Startup Leaked Its 408 GB Database Online

• Parler Hack: Platform’s Role in U.S. Insurrection

• Potential Link between SolarWinds and Turla APT

• WhatsApp vs Telegram vs Signal – Which One Is More Secure?

• Elon Musk’s Starlink Satellite Broadband Gains UK Approval

• Colombian energy, metal firms under fire in new Trojan attack wave

• This Android malware claims to give hackers full control of your smartphone

• Third Malware Strain Discovered as Part of SolarWinds Attack

• Experts Sound Alarm On New Android Malware Sold On Hacking Forums

• Identity Risk: Identifying a Misconfigured IAM Trust Policy

• Wawa Data Breach: A Lesson in the Consequences of Data Security Failures

• Sunspot, the third malware involved in the SolarWinds supply chain attack

• Allegedly Leaked 2021 iPad Pro CAD Images Suggest Few Design Changes

• Ubiquiti warns customers about potential data breach

• 3 security career lessons from Back to the Future

• Going Rogue – a Mastermind Behind Android Malware Returns with a New RAT

• FCW Insider: Jan. 12

• Chinese Startup Leaks Social Profiles of 214 Million Users

• iPhone 12 Sales in China Hit Nearly 18 Million Units in Q4 2020

• What Expert Says On IoT Vendor Ubiquiti Recent Breach

• Using 5G And Cybersecurity To Realize Edge Computing In 2021

• Experts Insight On UN’s Environmental Program Breach-100K+ Employee Records Leaked

• Bitdefender release free DarkSide ransomware decryptor

• Instagram, Facebook and LinkedIn accounts exposed by Chinese Data-Scrapers

• The Financial Impact of SolarWinds: A Cyber Catastrophe… But Insurance Disaster Avoided?

• Kaspersky Lab autopsies evidence on SolarWinds hack

• Parler Sues Amazon Web Services After Hosting Takedown

• Lack of Funding Could Lead to “Lost Generation” of Cyber-Startups

• Big Tech Bans Social Networking App

• Korean Dating App Leaks Private Images and Information of 1 Million Users

• Microsoft Excel for iPad Now Supports Split View, Word Gains Full Trackpad Support, and PowerPoint Offers Presenter Coaching

• Parler Data Hacktivism | Avast

• Facebook targets “stop the steal” content ahead of Inauguration Day

• Typeform Patched an Information Hijacking Vulnerability

• Bitdefender releases free decrypter for Darkside ransomware

• Longer-Term Cybersecurity Implications of the Occupation of the Capitol—Beware of Fake Leaks

• Application security testing is not just buzzwords

• Data Privacy Day: Understanding COVID-19’s Impact

• Babuk Locker Emerges as New Enterprise Ransomware of 2021

• Over 30 million ‘COVID safe’ check-ins through the Service NSW app

• How Logging Eliminates Security Blindspots to Better Identify Threats

• It’s time for a national privacy law in the US

• In case you hadn’t heard, SolarWinds was hacked by Moscow, says Kaspersky Lab

• WhatsApp users switching to Telegram due to new Data Privacy Rules

• Intel Processors to recognize ransomware attacks at hardware level

• 5 common scams and how to avoid them

• Unveiled: SUNSPOT Malware Was Used to Inject SolarWinds Backdoor

• Addressing the lack of knowledge around pen testing

• Signal and Telegram downloads surge after WhatsApp says it will share data with Facebook

• How I found a bug in YouTube that let me watch private videos I wasn’t allowed to, says compsci student

• What is URL filtering? Web filtering explained

• Steps for PCI DSS Gap Analysis

• Reprioritizing security requirements for 2021

• Top videoconferencing attacks and security best practices

• Five emerging fraud threats facing businesses in 2021

• Securing the connected home: A joint task for homeowners and their ISP

• Over 50 Aussie MPs form group aimed at holding social media companies accountable

• NSA Publishes Cybersecurity Year in Review Report

• ゾンビマルウェア (ボット) がもたらす甚大なランサムウェア被害

• ISC Stormcast For Tuesday, January 12th, 2021 https://isc.sans.edu/podcastdetail.html?id=7324, (Tue, Jan 12th)

• iTunes at 20: How One App Changed Apple’s Course

• Third malware strain discovered in SolarWinds supply chain attack

• Lenovo ThinkReality A3: Lightweight smart glasses delivering intelligent transformation in business

• TP-Link’s latest networking offerings provide an easy to manage and secure home networking experience

• Ubiquiti iniquity: Wi-Fi box slinger warns hackers may have peeked at customers’ personal information

• 5G Open Innovation Lab recruiting start-ups focused on enterprise innovation and 5G-enabled services

• TEKTELIC and Senet enable rapid adoption of IoT by making networks easy to design, implement and use

• ZOTAC launches MAGNUS ONE, a ZBOX Mini PC of the E Series line

• Western Digital delivers 4TB portable SSDs

• Mavenir expands and cloudifies its portfolio by introducing four new solutions

• That’s it. It’s over. It’s really over. From today, Adobe Flash Player no longer works. We’re free. We can just leave

• Reserve Bank of New Zealand investigates illegal access of third-party system

• Hyperproof Closes An Additional $4M Investment to Expand Its Compliance Operations Platform and Hire Staff

• Cloudera expands board of directors by appointing Gary Hu

• Igal Elbaz re-elected to serve as Chairman of the 5G Americas Board of Governors

• Beyond Platforms: Private Censorship, Parler, and the Stack

• 9 Software Development Mistakes Leading to Cyber Attacks

• IoT Vendor Ubiquiti Suffers Data Breach

• Intel’s New vPro Processors Aim to Help Defend Against Ransomware

• Harnessing Digital Identity to Build Tomorrow’s Public Sector

• Ubiquiti discloses a data breach

• Warranty Replacements for AirPods Max Don’t Include New Ear Cushions

• Twitter Puts an End to Trump’s Rhetorical Presidency

• Longer-term Cybersecurity Implications of the Occupation of the Capitol—Beware of Fake Leaks

• MITRE names Gerald Gilbert a MITRE Fellow

• US bulk energy providers must now report attempted breaches

• Parler data scraped and archived by online activists

• What is STRIDE and How Does It Anticipate Cyberattacks?

• DOD does away with diversity training modification for contractors

• DOD looks to kickstart 5G competition

• Aliens and UFOs: A Final Frontier for Social Engineers

• CES 2021: Intel Highlights Next-Generation ‘Alder Lake’ Chips

• Apple Picks Up Sci-Fi Project From Andy Samberg and Ben Stiller

• Equifax CEO on how the company will fight fraud

• IT Security News Daily Summary 2021-01-11

• The first Patch Tuesday of ’21; time to delay updates

• Did Trump shrink the government? Not according to the Plum Book

• USAID seeks remote sensing, analytics platform to track location, condition of aid

• DISA takes on DOD cloud operations

• The evolving threat of ransomware: Beware of cyber extortion in 2021

• IT cleanup at U.S. Capitol presents massive challenge

• CES 2021: Intel adds ransomware detection capabilities at the silicon level

• Ubiquiti tells customers to change passwords after security breach

• Millions of Social Profiles Leaked by Chinese Data-Scrapers

• Expert Says Facebook Should Be “Held Responsible” For Violence At U.S. Capitol

• SolarWinds Hack Lessons Learned: Finding the Next Supply Chain Attack

• Minimize Risk and Impact with a Security Platform Approach

• DEF CON 28 Safe Mode Lock Picking Village – N∅thing’s ‘How I Defeated The Western Electric 30C’

• Security Mindset, Indeed

• Ubiquiti: Change Your Password, Enable 2FA

• Connecting the dots between SolarWinds and Russia-linked Turla APT

• Mac Shipments Rise Significantly in Q4 2020 Amid Overall PC Market Growth

• Lack of clarity hampers new regulation’s ability to stop SolarWinds-type attack on power grid

• More than 25 DevOps and Automation sessions on demand from NetApp INSIGHT 2020

• Security researchers claims downloading 70TB of sensitive Parler data

• Many state capitols have security holes

• Microsoft Sysmon adds support for detecting Process Herpaderping attacks

• Accenture buys Brazilian security firm Real Protect

• Researcher Builds Parler Archive Amid Amazon Suspension

• WUfB vs. WSUS: Which handles Windows updates better?

• Cybersecurity career path: 5-step guide to success

• (ISC)² Offers Online Exam Proctoring

• Francisco Partners Completes Forcepoint Acquisition

• Q&A: Here’s why securing mobile apps is an essential key to tempering political division

• Ecobee Updates HomeKit-Enabled SmartCamera With Spotify Integration and More, Lowers Price to $130

• Twitter Permanently Bans Donald Trump

• US Capitol Attack a Wake-up Call for the Integration of Physical & IT Security

• CES 2021: Western Digital Debuts New 4TB SSDs From SanDisk and WD

• The Facebook Oversight Board Should Review Trump’s Suspension

• Supreme Court Hears Oral Arguments in Nestlé v. Doe and Cargill v. Doe

• The Government Has All of the Powers it Needs to Find and Prosecute Those Responsible for the Crimes on Capitol Hill this Week.

• Zero-day Privilege Escalation Vulnerability Has Affected PsExec for 14 Years

• United Nations Breach Exposed 100K+ UNEP Staff Records

• A Crypto-Mining Docker Botnet Now Stealing AWS Credentials

• Security researchers download, leak 70TB of sensitive Parler data

• Cybersecurity for Healthcare: Addressing Medical Image Privacy

• Quick Hits

• FCW Insider: Jan. 11

• Decryptor Released for Ransomware That Allegedly Helped Cybercriminals Make Millions

• 5 cybersecurity vendors to watch in 2021

• Naked Security Live – HTTPS: do we REALLY need it?

• New Tool Sheds Light on AppleScript-Obfuscated Malware

• The SolarWinds Hackers Shared Tricks With a Russian Spy Group

• Microsoft Releases Security Updates for Edge

• XKCD ‘Steepen The Curve’

• SolarWinds: The CSO Perspective

• CES 2021: Linksys Debuts Wi-Fi 6E Tri-Band Mesh System

• CES 2021: Belkin Debuts New 2-in-1 MagSafe Charger, Find My-Compatible Soundform Wireless EarBuds

• CES 2021: OtterBox Launches New Mobile Gaming Clip and Gaming Cases

• CES 2021: Anker Unveils New Magnetic Series Accessories, PowerWave Stand and More

• Apple Releases iOS 12.5.1 With Exposure Notifications Bug Fix for Older iPhones

• Building Faster AMD64 Memset Routines

• The Rise And Fall Of Parler | Avast

• SolarWinds Hack Potentially Linked to Turla APT

Generated on 2021-01-17 23:58:24.524114