IT Security News Weekly Summary – Week 09

• IT Security News Daily Summary 2023-03-05

• Credential Stuffing attack on Chick-fil-A impacted +71K users

• How to avoid billion-dollar fines due to unsecured messaging apps

• New CISO appointments, February 2023

• Iron Tiger updates malware to target Linux platform

• BrandPost: It’s Time to Create More Opportunities for Women in Cybersecurity

• HPE to acquire Axis Security to deliver a unified SASE offering

• Nicaragua’s Political Repression Will Continue Despite Prisoner Release

• Dubai’s Crypto Industry Introduces New Licensing Regulations

• A GoAnywhere MFT hack Exposes Hatch Bank’s Data Breach

• Crypto Scammer Monkey Drainer Shuts Down Criminal Operations

• For Your Mid to Large-Sized Firm, Here Are Four Best Cybersecurity Practices

• Digital Resignation is Initial Stage of Safeguarding Privacy Online

• Browser Security report reveals major online security threats

• Beware of Bot Malware: Understanding the Dangers and How to Protect Your Computer

• Best Ways To Change Your Password On A Chromebook

• Stay Ahead of the Game: How AI Can Help You Avoid Cybersecurity Traps

• Week in review: LastPass breach, GCP data exfiltration, UEFI bootkit

• Cyberattack on British Retailer WH Smith Exposes Employees` Data

• Chinese Hackers Are Using a New Backdoor to Deploy Malware

• How Royal Ransomware Could Wreak Havoc on the U.S. Digital Economy

• Scanning Attack: What It Is and How to Protect Your Organization Against It?

• LBB – 39,288 breached accounts

• Cyber Security Management System (CSMS) for the Automotive Industry

• How to use Bitwarden passwords on the go

• Play Ransomware gang has begun to leak data stolen from City of Oakland

• RADIUS server authentication: Old but still relevant

• Security Affairs newsletter Round 409 by Pierluigi Paganini

• Akamai acquires Ondat to strengthen its cloud computing offerings

• Snowflake and AWS expand partnership to drive customer-focused innovation

• Russia Bans Messengers, Including WhatsApp, Telegram, And More

• IT Security News Daily Summary 2023-03-04

• FiXS, a new ATM malware that is targeting Mexican banks

• PayPal Sued Over Data Breach that Impacted 35,000 users

• BidenCash leaks 2.1M stolen credit/debit cards

• Trezor Users: Target of a Major Cryptocurrency Wallet Phishing Campaign

• TPM 2.0 Library Vulnerabilities May Affect Billions of IoT Devices

• Governance of Zero Trust in manufacturing

• LastPass releases new security incident disclosure and recommendations

• Some Hackers Use Malware-Free Methods

• Building a Certificate Authority (CA) Server for Your Servers and Applications Free of Cost

• Twitter Returns After Two-Hour Outage Affecting Tweets

• YouTube Charged for Data Gathering on UK Minors

• Resecurity Discovered the Investment Scam Network Digital Smoke

• What Are Some Big Cyber-Security Fears Concerning TikTok?

• The LastPass Hack Somehow Gets Worse

• Blue Cross Customers at Risk: Sobeys Hack Exposes Personal Data in Latest Breach

• Fully patched Windows 11 Systems are Susceptible to the BlackLotus Bootkit

• What to Do When Your Boss Is Spying on You

• Cybersecurity: Your Guide to Digital Identity

• Does Your Company Have a Dark Data Problem?

• EPA Mandates States Report on Cyber Threats to Water Systems

• The High-Stakes Blame Game in the White House Cybersecurity Plan

• New FiXS ATM Malware Targeting Mexican Banks

• Security and IT Teams No Longer Need To Pay For SaaS-Shadow IT Discovery

• Build or Buy your own antivirus product

• Biden Administration Unveils National Cybersecurity Strategy to Counter Ransomware Threats

• How to use two-factor authentication without a phone

• LATEST CYBERTHREATS AND ADVISORIES – MARCH 3, 2023

• AT&T Cybersecurity announces 2023 ‘Partner of the Year Award’ winners

• Viasat strengthens network security posture for enterprises with Trusted Cybersecurity Services

• How Artificial Intelligence Is Transforming Cybersecurity

• Wireshark 4.0.4 Released – What’s New!!

• Secret Service, ICE break the law over and over with fake cell tower spying

• HPE acquires Axis Security to expand its edge-to-cloud security capabilities

• Fingerprint collaborates with Spec to help businesses combat fraud

• Rapid7 Brings Threat Intel Data to USF Cybersecurity Lab

• The attack in Ukraine took a lot of the cyber focus off China, says CrowdStrike’s sr. vp of intelligence

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• YouTube under fire for allegedly gathering children’s data

• LockBit ransomware demands $2 million for Pierce Transit data

• Huawei spotlights healthcare, maritime in 5G use case

• Snap CISO: I rate software supply chain risk 9.9 out of 10

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Russia Bans WhatsApp, Discord, Telegram, and Others

• Health info exchange eases Medicaid redeterminations

• How to Configure a Router to Use WPA2 in 7 Easy Steps

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• IT Security News Daily Summary 2023-03-03

• Video Marketing Software Animker Leaking Trove of User Data

• Keep Your Application Secrets Secret

• Quantum ‘ecosystems’ can flourish with government partners

• The best Amazon security camera deals of March 2023: Ring and Blink sales

• Facebook Revamps Controversial Program That Gave Special Content Moderation Treatment To VIPs

• CISOs Share Their 3 Top Challenges for Cybersecurity Management

• Pegasus spyware used to spy on a Polish mayor

• Friday Squid Blogging: We’re Almost at Flying Squid Drones

• Google adds client-side encryption to Gmail and Calendar. Should you care?

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• US government sets a 30-day deadline for wiping TikTok from feds’ phones

• Cybersecurity in the Next-Generation Space Age, Pt. 4: New Space Future Development and Challenges

• Top 10 open-source security and operational risks of 2023

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• FTC: BetterHelp pushed users to share mental health info then gave it to Facebook

• LATEST CYBERTHREATS AND ADVISORIES – MARCH 3, 2023

• EV Charging Infrastructure Offers an Electric Cyberattack Opportunity

• US Marshals Service hit by ransomware and data breach

• CIC Wealth’s Malcolm Ethridge likes CrowdStrike, says cybersecurity is the right play

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Indigo Books Refuses LockBit Ransomware Demand

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Tech trade group leery of new regulations proposed in Biden’s cyber strategy

• White House pitches $1.6B in anti-fraud funding

• Hundreds of thousands of websites hacked as part of redirection campaign

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• US cybersecurity chief: Software makers shouldn’t lawyer their way out of security responsibilities

• CRO Paul Fabara shares how Visa is using AI to counter cyberattacks

• New federal service delivery model focuses on people and problems, not bureaucratic silos

• Industry stakeholders push back on software liability reform in new national cybersecurity strategy

• Polish Politician’s Phone Patrolled by Pegasus

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• House Republicans offer proposal to claw back unemployment modernization funding

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• White House details new life experience projects

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Frankenstein malware stitched together from code of others disguised as PyPI package

• The Most Common Cyber Attacks Everyone Should Know About

• Best VPN for streaming in 2023: Unblock Netflix and more

• Pushers of insecure software in Biden’s crosshairs

• Feds warn about right Royal ransomware rampage that runs the gamut of TTPs

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Insecure software pushers in Biden’s crosshairs

• OpenAI Releases Developer APIs for ChatGPT and Whisper Models

• The retention problem: Women are going into tech but are also being driven out

• 13 incident response best practices for your organization

• Biden Cybersecurity Strategy: Big Ambitions, Big Obstacles

• Chick-fil-A Customers Have a Bone to Pick After Account Takeovers

• 3 Ways Security Teams Can Use IP Data Context

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Popular Real Estate Theme in WordPress Leaves Websites Vulnerable to Cyber Attacks

• Enterprise Users Still at Risk: RIG Exploit Kit Continues to Infect via Internet Explorer

• Crypto Scammers Game YouTube for Amplification While Keeping Under Radar, Researchers Find

• NTIA wants public insight on how to disperse billions in internet for all funding

• Chick-fil-A Gives Customers a Bone to Pick After Data Breach

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Biden’s cyber plan: Tech firms take center stage

• Chinese Hackers Unleashes MQsTTang Backdoor Against Govt Entities

• Dissenting from our toxic political culture

• Network security management best practices and challenges

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Introducing Exphash: Identifying Malicious DLLs With Export Hashing

• 7 reasons why Endpoint Security and Response shouldn’t be ignored

• White House to officially ban TikTok from government devices within 30 days

• Data-based decision-making is flawed when the data is flawed

• Nick Weaver on Regulating Cryptocurrency

• WH Smith: Employee Data Compromised In Cyberattack

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Cybersecurity headlines trending on Google

• MQsTTang, a new backdoor used by Mustang Panda APT against European entities

• German Parliament Hearing Heaps Scorn On Chat Control

• Polish Mayor Targeted By Pegasus Spyware

• Biden Administration Wants To Hold Companies Liable For Bad Cybersecurity

• Cisco Patches Critical Bugs In Its IP Phones

• New Managed Detection and Response (MDR) offering based on Microsoft’s XDR technology launched by Adarma

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Mobile Banking Trojan Volume Doubles

• Australia’s OAIC Confirms Substantial Increase in Data Breaches

• Data is currency: Tech Experts On Canada’s TikTok Ban on Government-issued Mobile Devices

• White House Cybersecurity Strategy Will Make Big Tech Step Up in Ongoing Cyber Struggle

• Blind Eagle: Hackers Targets Prominent Industries in Columbia

• New Backdoor MQsTTang Attributed to Mustang Panda Group

• It’s Time to Assess the Potential Dangers of an Increasingly Connected World

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Underground Carding Marketplace BidenCash Leaked 2 Million Credit Cards

• Make Your Security Policy Auditable

• What is the Future of Cyberattacks in 2030 (and Beyond)?

• Thousands of Websites Hijacked Using Compromised FTP Credentials

• Trusted Platform Module (TPM) 2.0 flaws could impact billions of devices

• Cybersecurity’s Third Rail: Software Liability

• The Biden-Harris Administration Releases New National Cybersecurity Strategy

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• CISA Warns Against Royal Ransomware in New Advisory

• WH Smith personnel details targeted in cyberattack

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• BlackLotus: UEFI Bootkit Bypass Secure Boot On Windows 11

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• White House Cybersecurity Strategy Stresses Software Safety

• Industry Experts Analyze US National Cybersecurity Strategy

• Organizations Warned of Royal Ransomware Attacks

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Customers are Being Used as Cyber “Crash Test Dummy,” Says CISA Director

• United States Launches New Cybersecurity Strategy

• What Is APIOps? And How to Be Successful at APIOps

• The Sketchy Plan to Build a Russian Android Phone

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Waymo Cuts 8 Percent Of Staff

• Tripwire Patch Priority Index for February 2023

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Warning on SolarWinds-like supply-chain attacks: ‘They’re just getting bigger’

• Cybersecurity Industry News Review: February 28, 2023

• Threat Hunting with VirusTotal

• Over 71k Impacted by Credential Stuffing Attacks on Chick-fil-A Accounts

• New Flaws in TPM 2.0 Library Pose Threat to Billions of IoT and Enterprise Devices

• The U.S. CISA and FBI warn of Royal ransomware operation

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Chick-fil-A Admits Accounts Hacked In “Automated” Attack

• Microsoft and MITRE developed a tool to prepare security teams for attacks on ML systems

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• German Digital Affairs Committee hearing heaps scorn on Chat Control

• NCSC: Twitter Users Should Find MFA Alternatives

• Chinese Hackers Targeting European Entities with New MQsTTang Backdoor

• Verdict-as-a-Service moves malware scanning from the endpoint to the cloud

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Smart security

• The Top Five Most Fun Cybersecurity Mistakes in TV and Movies

• How to backup your Bitwarden password database

• At Least 30% of “Cyber-Criminals” Are Women: Report

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Experts Warn of “SMS Pumping” Fraud Epidemic

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Retailer WH Smith discloses data breach after a cyberattack

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Do cybersecurity allegations against TikTok hold up?

• U.S. Cybersecurity Agency Raises Alarm Over Royal Ransomware’s Deadly Capabilities

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Accenture prevails in long fight for Healthcare.gov work

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• China working on Microsoft OpenAI ChatGPT

• Hackers Exploit Containerized Environments to Steal Proprietary Data and Software

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Integrating Cybersecurity in UX design

• Ermetic’s new capabilities empower users to detect misconfigurations in Kubernetes

• Attackers are developing and deploying exploits faster than ever

• Vulnerabilities of years past haunt organizations, aid attackers

• The role of human insight in AI-based cybersecurity

• New infosec products of the week: March 3, 2023

• GunAction.com – 565,470 breached accounts

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• ManageEngine adds security and risk posture management dashboard to Log360

• WatchGuard ThreatSync equips organizations with XDR capabilities

• Fastly Managed Security Service protects enterprises from web application attacks

• Forescout XDR enables SOC teams to reduce the attack surface

• ML practitioners push for mandatory AI Bill of Rights

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• IBM Contributes Supply Chain Security Tools to OWASP

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• 2023-03-02 – Rig EK –> malware loader –> Redline Stealer

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• S4x23 Review Part 1: What’s New in OT Security

• Please Pick a Number

• Highlights from the New U.S. Cybersecurity Strategy

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Readability in the Test: Exploring the JUnitParams

• EFF and Student Press Law Center Urge Supreme Court to Require Government to Show Subjective Intent in Threat Cases

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Companies must be mindful of the geopolitical environment from a cyber point of view, says Splunk CEO

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Crappy insecure software in Biden’s crosshairs

• Ransomware led to multiple DISH Network outages

• Internet Explorer users still targeted by RIG exploit kit

• Axis Security Acquisition Strengthens Aruba’s SASE Solutions With Integrated Cloud Security and SD-WAN

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• CISA, MITRE Look to Take ATT&CK Framework Out of the Weeds

• GunAuction site was hacked and data of 565k accounts were exposed

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• CI/CD: Necessary for modern software development, yet it carries a lot of risk

• Watchdog: Secret Service, ICE failed to follow federal statutes in using cell phone tracking devices

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• IT Security News Daily Summary 2023-03-02

• National cyber strategy faces major implementation challenges, experts say

• Data warehouse aggregates local homelessness data for statewide analysis

• Tech layoffs have opened the door for IT talent. Now governments must close the deal.

• Vulnerability Management: Definition, Process & Tools

• Biden’s Cybersecurity Strategy Calls for Software Liability, Tighter Critical Infrastructure Security

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• White House National Cybersecurity Strategy: Software Firms Liable for Breaches

• IAM Best Practices

• BlackLotus Bookit Found Targeting Windows 11

• Report: ICE and the Secret Service Conducted Illegal Surveillance of Cell Phones

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• The Data Security Team’s Guide to Data Security Posture Management (DSPM)

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Warzone 2 Cheats and Hacks Can Amplify Your Gameplay

• 1Password is looking to a password-free future. Here’s why

• Google Workspace admins can now use client-side encryption on Gmail and Calendar

• New National Cybersecurity Strategy takes aim at ransomware

• Palo Alto Networks Named a Visionary in 2022 Magic Quadrant for EPP

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• GunAuction – 565,470 breached accounts

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Intruder alert: WH Smith hit by another cyber attack

• Ransomware attacks ravaged big names in February

• New Report: Inside the High Risk of Third-Party SaaS Apps

• Sale of Stolen Credentials and Initial Access Dominate Dark Web Markets

• Dumb Password Rules

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• U.S. DoD Puts CPD At Heart of Its New Cyber Workforce Strategy

• Drone cybersecurity assessment program launches

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• How To Handle Secrets in Python

• Is Observability Replacing Testing?

• White House sends anti-fraud wishlist to Congress as stakeholders await identity executive order

• What GoDaddy’s Years-Long Breach Means for Millions of Clients

• Cryptojacking campaign targets insecure deployments of Redis servers

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Accurately assessing the success of zero-trust initiatives

• Google Trust Services now offers TLS certificates for Google Domains customers

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• CrowdSrike: Cybercriminals Are Choosing Data Extortion Over Ransomware Attacks

• Silicon Insights: How to Evolve Your Enterprise’s Digital Marketing: Part 1

• CloudNativeSecurityCon 2023: A Unique Community Event Focused On the Future of Open Source and Cloud Native Security

• BlackLotus Bootkit Can Target Fully Patched Windows 11 Systems

• API Security Flaw Found in Booking.com Allowed Full Account Takeover

• White House Institutes National Cybersecurity Strategy

• Coded Resistance, the Comic!

• Azure WAF guided investigation Notebook using Microsoft Sentinel for automated false positive tuning

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Tech Issues Persist at Minneapolis Public Schools

• Retail Giant WH Smith Cyberattack – Employee Data Stolen

• Microsoft is named a Leader in the 2022 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Free MortalKombat Ransomware Decryptor Released

• Dish Network Blames Ransomware for Ongoing Outage

• Advance Your Cybersecurity Career with Toolkits from (ISC)² and BUiLT

• Building blocks for Cyber resilience:  MSSPs can lead the way

• 8 Common Cybersecurity issues when purchasing real estate online: and how to handle them

• New tool to help cities make the case for public safety funding

• S3 Ep124: When so-called security apps go rogue [Audio + Text]

• Hackers Target Young Gamers: How Your Child Can Cause Business Compromise

• Booking.com’s OAuth Implementation Allows Full Account Takeover

• Cisco fixed a critical command injection bug in IP Phone Series

• U.S Marshals Service Suffers Data Breach, Hackers Steal Personal Data

• Creator of WannaCry Hero and Kronos Malware Named Cybrary Fellow

• White House Launches National Cybersecurity Strategy

• New research, tooling, and partnerships for more secure AI and machine learning

• The most effective cybersecurity awareness training is personalized

• Cyber Attack news headlines trending on Google

• Chromium Vulnerability Allowed SameSite Cookie Bypass On Android Devices

• BlackLotus UEFI Bootkit – First Known Malware to Bypass Secure Boot Defenses

• Trezor crypto wallets under attack in SMS phishing campaign

• Critical Vulnerabilities Allowed Booking.com Account Takeover

• Webinar Today: Entering the Cloud Native Security Era

• Advancing Women in Cybersecurity – One CMO’s Journey

• Meta Says $725M Deal Ends All Cambridge Analytica Claims – One State Disagrees

• UK Retailer WH Smith Hit By Another Data Leak

• BlackLotus Can Bypass Secure Boot On Windows Machines

• NSO Group Co-Founder Emerges As New Majority Owner

• Create, Add, and Edit Email Signatures in Outlook – Ultimate Guide 2023

• The Data Security Team’s Guide to Data Security Posture Management (DPSM)

• Dropbox lifts Passwords restrictions for free users

• Intruder alert: UK retailer WH Smith hit by another cyber attack

• On Shaky Ground: Why Dependencies Will Be Your Downfall

• Everybody Wants Least Privilege, So Why Isn’t Anyone Achieving It?

• Trezor Wallet Alerts Of Major Crypto Phishing Campaign

• SpaceX Launches Space Station Crew In NASA Mission

• ProtonVPN launches extensions for Chrome and Firefox browsers

• What is a Blue Teamer, and How Can They Protect Your Data?

• Hackers Exploit Containerized Environments to Steals Proprietary Data and Software

• Unpacking Biden’s Conventional Arms Transfer Policy

• AI Nuclear Weapons Catastrophe Can Be Avoided

• Serious API security flaws now fixed in Booking.com could affect many more websites

• What’s Driving the Demand for GRC Professionals in Critical Infrastructure?

• Cisco Patches Critical Vulnerability in IP Phones

• White House Releases National Cybersecurity Strategy

• Information of European Hotel Chain’s Customers Found on Unprotected Server

• Canadian Bookstore Chain Indigo Says Employee Data Stolen in Ransomware Attack

• Attackers increasingly using transfer.sh to host malicious code

• The Future is Now: How Digitalization is Revolutionizing UK Visa Processes in 2023

• Intruder alert: UK retailer WH Smith hit by another data leak

• Can The US-Led Multinational Counterattack Stop Ransomware’s Gold Rush?

• Cybersecurity Attacks To Come: Here’s How To Prepare

• WH Smith Discloses Cyber-Attack, Company Data Theft

• Leveraging Data Science to Minimize the Blast Radius of Ransomware Attacks

• This Hacker Tool Can Pinpoint a DJI Drone Operator’s Exact Location

• Experts Identify Fully-Featured Info Stealer and Trojan in Python Package on PyPI

• 2023 Browser Security Report Uncovers Major Browsing Risks and Blind Spots

• New Cryptojacking Campaign Leverages Misconfigured Redis Database Servers

• Rapid7 Report: Attackers are Launching Exploits Faster Than Ever Before

• Are you using a secure password manager? Find out why Bitwarden passed its annual audit with flying colors

• WH Smith Admits Staff Data Accessed In ‘Cyber Incident’

• New CISA Tool ‘Decider’ Maps Attacker Behavior to ATT&CK Framework

• US government puts cybersecurity at forefront with newly announced National Strategy

• The Biggest Data Breaches of 2023

• Fraudsters can Rob your Entire Digital Life Using this iPhone Feature

• Managed XDR Exposes Spear-Phishing Campaign Targeting Hospitality Industry Using RedLine Stealer

• Poland Blames Russian Hackers For Tax Website Attack

• Pirated Mac Apps Contain Malware, and iMessage Support on Windows (Sort of) – Intego Mac Podcast Episode 281

• Winning Combinations: Check Point Customers and Their Advanced Security Solutions

• 10 Database Security Best Practices You Should Know

• Even the virtual metaverse has a gender gap

• Russian Government Bans Foreign Messaging Apps

• White House aims to shift cybersecurity burden from individuals, small businesses to tech providers

• Tesla To Build Factory In Mexico, Says President

• New White House cyber strategy looks to redistribute risks, responsibilities

• GitHub Secret Scanning Now Generally Available

• ICO Calls for Review into Private Message Use by Ministers

• BlackLotus UEFI bootkit disables Windows security mechanisms

• Major Phishing Campaign Targets Trezor Crypto Wallets

• Threat actors target law firms with GootLoader and SocGholish malware

• Pierce Transit: Bus System In Washington Admits Ransomware Attack

• SysUpdate Malware Strikes Again with Linux Version and New Evasion Tactics

• Do you know what your supply chain is and if it is secure?

• Forget ChatGPT, the most overhyped security tool is technology itself, Wiz warns

• Appdome ThreatScope Mobile XDR provides threat intelligence for mobile apps

• Europe Leads the Cybersecurity Regulation Dance

• Phishing as a Service Stimulates Cybercrime

• R3NIN Sniffer Malware Stealing Credit Card Data from E-commerce Consumers

• Cyber resilience in focus: EU act to set strict standards

• Don’t be fooled by a pretty icon, malicious apps hide in plain sight

• Moving target defense must keep cyber attackers guessing

• Uncovering the most pressing cybersecurity concerns for SMBs

• Layoffs are set to continue. But workers from this sector may escape

• Law firms facing malware cyber threat

• How to protect your car dealership from cyber-attacks

• Critical Flaw in Cisco IP Phone Series Exposes Users to Command Injection Attack

• Latest Cyberthreats and Advisories – February 24, 2023

• The Top 5 New Social Engineering Attacks in 2023

• Internet Access, Privacy ‘Essential for Freedom’: Proton Chief

• ThreatNG Cloud and SaaS Exposure Module empowers users with a proactive outside-in perspective

• ReasonLabs FamilyKeeper enables parents to monitor social media conversations

• Radiant Logic’s redesigned platform helps organizations improve their overall security posture

• Pliant Observability Solution accelerates device and data onboarding

• Appdome ThreatScope Mobile XDR tracks Android and iOS attacks in real time

• Layoffs are set to continue. But workers from this sector may likely escape

• BidenCash Market Leaks 2M Credit Cards in Birthday Blitz

• HCLSoftware and SolarWinds join forces to build AI-based telecom observability platform

• Axis Communications and Genetec introduce an enterprise-level access control solution

• Otorio partners with Compugen to enhance security for OT operations

• How Cambodia-based scammers made an estimated $3 million in ‘pig butchering’ scheme

• I Asked an Algorithm to Optimize My Life. Here’s What Happened

• Microsoft introduces AI model that can understand image content, pass IQ tests

• Fast-moving Musk makes very slow progress turning Twitter into “everything app”

• 15 Best Practices on API Security for Developers

• Could Bitcoin Be The Future Of DeFi?

• The Unsung Heroes of Open Source: The Dedicated Maintainers Behind Lesser-Known Projects

• LastPass was undone by an attack on a remote employee

• Crushing the two biggest threats to mobile endpoint security in 2023

• AI voice cracks telephone banking voice recognition

• SBOM graph database aims to be cloud security secret sauce

• Wireless Security: WEP, WPA, WPA2 and WPA3 Explained

• Ermetic Adds Kubernetes Security to CNAPP

• InQuest appoints Darren Spruell as Chief Intelligence Officer

• Stop using your 4-digit iPhone passcode in public. Do this instead

• 2 of the Worst Healthcare Data Breaches in US History Happened Last Year

• Octillo Launches Women’s Cybersecurity Scholarship in Partnership With the Center for Cyber Safety and Education

• Canada is going to ban TikTok on government mobile devices

• How to turn on Private DNS Mode on Android (and why you should)

• One State Throws A Wrench In Facebook Privacy Settlement Plans

• Dish Blames Ransomware Attack for Disruptions of Internal Systems, Call Center Services

• Fastly Launches Managed Security Service to Protect Enterprises From Rising Web Application Attacks

• Forescout Addresses Modern SecOps Challenges With Launch of Forescout XDR

• Visibility Is as Vital as Zero Trust for Low-Code/No-Code Security

• DoControl’s 2023 SaaS Security Threat Landscape Report Finds Enterprises and Mid-Market Organizations Have Exposed Public SaaS Assets

• IT Security News Daily Summary 2023-03-01

• Work with what you’ve got: Accelerating zero trust deployments

• It’s official: BlackLotus malware can bypass Secure Boot on Windows machines

• TechRepublic Premium editorial calendar: IT policies, checklists, toolkits and research for download

• Main Targets of Ransomware Attacks & What They Look For

• Microsoft Warns of Surge in Token Theft, Bypassing MFA

• BlackLotus is the first bootkit bypassing UEFI Secure Boot on Windows 11

• Offensive Security Is Now OffSec – Refresh Reflects Future of Cybersecurity Learning and Skills Development

• The Impact of AI on Telecoms Fraud Protection Strategies

• Zero Trust Distributed Computing With WebAssembly and WasmCloud

• Why TikTok Is Being Banned on Gov’t Phones in US and Beyond

• Configuring host-level audit logging for AKS VMSS

• Azure Kubernetes Service (AKS) Threat Hunting

• Login Flow With Google Identity Services and Firebase

• Angular vs. React: Which JS Framework Is Better?

• Unpatched, known vulnerabilities still key driver of cyberattacks

• Linux Support Expands Cyber Spy Group’s Arsenal

• CISA advisory details red team attack on critical infrastructure organization

• Cyber criminals are increasingly exploiting cloud environments, report finds

• Dig into feedback on digital services, experts advise

• So You Want to Launch 5G — Is Your 5G Security Strategy Ready?

• Webinar Tomorrow: Entering the Cloud Native Security Era

• What Happened in That Cyberattack? With Some Cloud Services, You May Never Know

• Cybercriminals Targets Law Firms With GootLoader & FakeUpdates

• Google Workspace Adds Client-Side Encryption to Gmail and Calendar

• The Future of Cybersecurity and How Artificial Intelligence Is Changing the Way

• The Importance of Recession-Proofing Security Operations

• Cisco to Acquire Valtix for Cloud Network Security Tech

• Top 10 Security, Operational Risks From Open Source Code

• 8 ways to secure Chrome browser for Google Workspace users

• Lazarus’s Latest Weapons: Wslink Loader and WinorDLL64 Backdoor

• GoDaddy, a Web Hosting Provider Hit Multiple Times by the Same Group

• SEC cyber risk management rule—a security and compliance opportunity

• The Significance of Key Risk Indicators in Organisations

• Could the Pentagon use a little ChatGPT?

• DHS tests show facial recognition tech has varied results, but gaining ground

• Report: Smarter wildfire fighting demands better data quality and sharing

• Two Hacking Groups Seen Targeting Materials Sector in Asia

• Ransomware Attacks: Don’t Let Your Guard Down

• CISA Shares Advice to Improve Networks’ Monitoring and Hardening

• Cyberattackers Double Down on Bypassing MFA

• (ISC)² Security Congress 2023 Begins Call for Presentations

• Third party Cybersecurity risks in securing the supply chain

• Stories from the SOC  – The case for human response actions

• GuLoader – a highly effective and versatile malware that can evade detection

• Belgium admits China hackers behind the attack on European Government MP

• CISA: ZK Java Framework RCE Flaw Under Active Exploit

• The Microsoft Intune Suite fuels cyber safety and IT efficiency

• Upgrading from API v2 to v3: What You Need to Know

• The Digital World is Changing Fast: Data Discovery Can Help

• Creating secure customer experiences with zero trust

• Public SaaS Assets Are a Major Risk For Medium, Large Firms

• Satellite TV giant Dish admitted that the recent outage was caused by a ransomware attack

• Experience the Refreshed OffSec

• Visualize change with an out-of-the-box configuration report

• Google Cloud Platform allows data exfiltration without a (forensic) trace

• US Officials Make Case for Renewing FISA Surveillance Powers

• Several Law Firms Targeted in Malware Attacks

• Without FIDO2, MFA Falls Short

• PlugX RAT Masquerades As Legit Windows Debugger To Slip Past Security

• Investors Pull Around $6 Billion Out Of Binance’s Stablecoin

• TikTok Answers Three Big Cybersecurity Fears About The App

• Dish Network Confirms Cyberattack

• Business and Human Rights Requirements Are on the Rise in 2023

• The Digitalization of the Casino Industry: How Small Online Casinos are Adapting?

• Here is How Toronto-area Police Force Helped Take Down a Russian-linked Hacking Group

• Top 10 open source software risks for 2023

• Cybercriminals Targeting Law Firms with GootLoader and FakeUpdates Malware

• Perception Point Recognized in 2023 Gartner® Market Guide for Email Security for Fourth Year in a Row

• (ISC)² Members Reveal Deep Skepticism About Artificial Intelligence and Machine Learning

• Cybercriminals Use ChatGPT to Ease Their Operations

• Future of the Cloud is Plagued by Security Issues

• The Ukraine Invasion Blew up Russian Cybercrime Alliances

• Google is expanding this ‘next level’ encryption to more Gmail users

• Social Engineering: Definition & 6 Attack Types

• AI-Powered SASE Is Center Stage at Virtual SASE Launch Event

• Google: Client-Side Encryption Added To Gmail And Calendar

• A Stronger European Defense Requires Resetting Cooperation Between the U.K. and Europe

• Microsoft Rolls Out Bing AI To Windows 11

• South American Cyberspies Impersonate Colombian Government in Recent Campaign

• CISO Conversations: Code42, BreachQuest Leaders Discuss Combining CISO and CIO Roles

• Google Workspace Client-Side Encryption Now Generally Available in Gmail, Calendar

• UK sees 35% increase in mobile phishing exposures – Global State of Mobile Phishing Report

• DNS abuse: Advice for incident responders

• U.S. Marshals Service Hacked – Sensitive Information Leaked

• Record Number of Mobile Phishing Attacks in 2022

• Parallax RAT used in attacks aimed at cryptocurrency entities

• Fooling a Voice Authentication System with an AI-Generated Voice

• CISOs Are Stressed Out and It’s Putting Companies at Risk

• BlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11

• What Printer Can I Use for Sublimation?

• Are New Technologies Revolutionizing the Gambling Industry? The Future of Casino

• Bitwarden passes annual security audit with flying colors

• China Warns Elon Musk Over Wuhan Lab Leak Tweet

• Dish Network Says Outage Caused by Ransomware Attack

• Keylogger on Employee Home PC Led to LastPass 2022 Breach

• Bitwarden passes third annual security audit with flying colors

• How To Reduce Security Risks Posed by Cloud Identities?

• Key tips for helping secure your digital life

• Social Engineering: Definition & 5 Attack Types

• Dish Network Confirms Outage Was Due To Ransomware Attack

• 5 Best Video Editing SDKs for iOS

• Critical Vulnerabilities Patched in ThingWorx, Kepware IIoT Products

• Attacker Breakout Time Drops to Just 84 Minutes

• 3 Reasons for Securing Your Company with Passwordless Login

• Dish Network Confirms Ransomware Outage

• Gmail and Google Calendar Now Support Client-Side Encryption (CSE) to Boost Data Privacy

• Researchers Release MortalKombat Ransomware Decryptor

• 3 Key Takeaways from the 2023 Gartner Market Guide for Email Security

• Bitdefender Releases New Decryptor For MortalKombat Ransomware

• Iron Tiger’s SysUpdate Reappears, Adds Linux Targeting

• Intel Offers Quantum SDK For Developers

• Why performing security testing on your products and systems is a good idea

• Former FTX Engineer Pleads Guilty To Fraud Charges

• Elon Musk Overstated Tesla Autopilot New Lawsuit Alleges

• Parallax RAT Targeting Cryptocurrency Firms with Sophisticated Injection Techniques

• PlugX RAT masquerades as legit Windows debugger to slip past security

• Google Gmail client-side encryption is available globally

• 5 open source Burp Suite penetration testing extensions you should check out

• Developers can make a great extension of your security team

• Provide Your Feedback on the CISSP-ISSEP Exam Outline

• Governance of Zero Trust in manufacturing

• RADIUS server authentication: Old but still relevant

• LastPass becomes a cyber attack victim for the second time from the first time

• Alarming Rise in Mobile Banking Malware – Over 200,000 New Installers Discovered

• Dormant accounts are a low-hanging fruit for attackers

• Covert cyberattacks on the rise as attackers shift tactics for maximum impact

• A modern-day look at AppSec testing tools

• Google Adds Client-Side Encryption to Gmail, Calendar

• AlertEnterprise reveals Guardian AI Chatbot powered by OpenAI ChatGPT

• CIS Hardened Images List

• Infosec products of the month: February 2023

• U.S. Marshals Service hacked in ‘major incident’

• VMware extends SD-WAN to OT with new software client offering

• Veeam Backup for Microsoft 365 v7 strengthens data protection

• How to Choose the Right Data Masking Tool for Your Organization

• Huawei launches ‘world’s best’ ransomware detection system

• Google: You get crypto, you get crypto, almost everyone gets email crypto!

• Optimize Mac Storage can make your files go poof. Ask me how I know

• CISOs Share Their 3 Top Challenges for Cybersecurity Management

• Google adds client-side encryption to Gmail and Calendar. Should you care?

• Video Marketing Software Animker Leaking Trove of User Data

• Keep Your Application Secrets Secret

• Thales and Qualcomm join forces to launch GSMA certified iSIM

• US government sets a 30-day deadline for wiping TikTok from feds’ phones

• How to Use Input Sanitization to Prevent Web Attacks

• Cyolo unveils partner program to accelerate adoption of zero-trust access

• iPhone users targeted in phone AND data theft campaign

• US Marshals Service hit by ransomware and data breach

• Two of The Worst Healthcare Data Breaches in US History Happened Last Year

• Hoxhunt Launches Human Risk Management Platform

• The Bridge to Zero Trust

• Distributed Tracing: A Full Guide

• Security Defects in TPM 2.0 Spec Raise Alarm

• LastPass DevOps Engineer Targeted for Cloud Decryption Keys in Latest Breach Revelation

• US cybersecurity chief: Software makers shouldn’t lawyer their way out of security responsibilities

• IT Security News Monthly Summary – March

• IT Security News Daily Summary 2023-02-28

• How can Vault Vision help secure your company with passwordless login?

• Top benefits of SOAR tools, plus potential pitfalls to consider

• Exfiltrator-22: The Newest Post-Exploitation Toolkit Nipping at Cobalt Strike’s Heels

• Security Architecture Review on a SASE Solution

• House Republicans offer proposal to claw back unemployment modernization funding

• Look for fraudsters to apply COVID-era tricks to new programs

• Texas Public Safety agency sent at least 3,000 driver’s licenses to organized crime group targeting Asian Texans

• LastPass breach tied to hack of engineer’s home computer

• US Marshals Ransomware Hit Is ‘Major’ Incident

• Dish: Someone snatched our data, if you’re wondering why our IT systems went down

• Southern states have the most open cyber exposures, report finds

• Building scalable, cost-effective application security

• The 5 best VPN deals right now: March 2023

• How to export your Bitwarden vault for safekeeping

• Facebook Introduces New Tool To Crack Down On Spread Of Teens’ Intimate Images

• Win for Government Transparency and Immigrant Privacy Rights at Second Circuit

• Understanding Jamstack Security

• How threat intelligence helps SecOps prevent cyberevents before they happen

• U.S. Marshals Service suffers ransomware attack, data breach

• Pig butchering scam explained: Everything you need to know

• Bitdefender released a free decryptor for the MortalKombat Ransomware family

• What is Zero Trust Security? Breaking Down a Zero Trust Architecture

• 5 Challenges Every Engineering Manager Must Overcome

• Embrace SASE With Cisco

• WannaCry Hero & Kronos Malware Author Named Cybrary Fellow

• How to spot and avoid PDF malware

• February 2023 Web Server Survey

• Zero Trust OT Security for Zero Operational Downtime

• Enforce Zero Trust for 5G Security to Work

• Partner Blueprint for Success — Breakaway 1=5

• CrowdStrike 2023 Global Threat Report: Resilient Businesses Fight Relentless Adversaries

• Pen testing report: IT budgets should focus on entire security stack

• LastPass Employee PC Hacked with Keylogger to Access Password Vault

• How SecDevOps Adoption Can Help Save Costs in Software Development

• What Is API-First?

• US Gov. Agencies Have 30 Days to Remove TikTok, Canada Follows Suit

• Pernicious Permissions: How Kubernetes Cryptomining Became an AWS Cloud Data Heist

• Crypto Scammers Game YouTube for Amplification While Keeping Under Radar, Researchers Find

• LastPass breach: Hackers put malware on engineer’s home computer to steal their password

• White House to officially ban TikTok from government devices within 30 days

• Trackd Snags $3.35M Seed Funding to Automate Vuln Remediation

• LastPass Data Stolen in August 2022 Breach Used For December Attack

• First steps in CHERIoT Security Research

• Microsoft Security Experts discuss evolving threats in roundtable chat

• Succession Wealth Fails to Keep Cyber Attackers at Bay

• 7 reasons why Endpoint Security and Response shouldn’t be ignored

• AT&T Cybersecurity announces 2023 ‘Partner of the Year Award’ winners

• NASA tests autonomous aircraft decision tech in Arizona cities

• What’s the best way to ensure your privacy with a web browser?

• Hackers Claim They Breached T-Mobile More Than 100 Times in 2022

• China’s BlackFly Targets Materials Sector in ‘Relentless’ Quest for IP

• U.S. Marshals Service suffers a ransomware attack

• The U.S. Is Now Using Facial Recognition Rigged Drones For Special Ops

• Stupid Patent of the Month: Clocking In To Work—On an App

• Apple iPhone Vulnerability let hackers steal photos, messages and files

• Vulnerabilities Being Exploited Faster Than Ever: Analysis

• Ransomware Attack Hits US Marshals Service

• Ransomware Attack On US Marshalls Compromises Sensitive Information

• LastPass Says Employee’s Home Computer Was Hacked And Corporate Vault Stolen

• Hackers Sat On News Corp For Two Years

• Rapid7’s 2022 Vulnerability Intelligence Report

• Dish Multi-Day Outage Rolls On As Ransomware Fears Grow

• US Chips Act Bars Companies From Expanding In China

• A Tale of Two Insurrections: Lessons for Disinformation Research From the Jan. 6 and 8 Attacks

• On AI-Generated Works, Artists, and Intellectual Property

• U.S. Marshals Service Looking Into Data Theft & Ransomware Attack

• The Buffett test: This chart shows every Club holding’s spending on stock buybacks

• DNA testing biz vows to improve infosec after criminals break into database it forgot it had

• How SMB Protocol Functions and its Susceptibility to Vulnerabilities

• The DoJ Disruption of the Hive Ransomware Group Is a Short-Lived Win

• Our commitment to fighting invalid traffic on Connected TV

• 5 Cybersecurity Trends and Predictions for Secure Online Shopping in 2023 – How to Shop Securely?

• Travelling? These Are 5 Tips For Better Online Safety

• Preventing a USB Killer Threat

• Info-stealer Ransomware hit Government Organisations

• Visa, Mastercard ‘Pause Crypto Partnerships’ Amidst Meltdown

• US Marshals Service Hit By Major Ransomware Attack

• Zero-Day Exploits: The Anatomy of Unexpected Attacks

• Bitdefender Releases Free Decryptor for MortalKombat Ransomware Strain

• New EX-22 Tool Empowers Hackers with Stealthy Ransomware Attacks on Enterprises

• Bitdefender Releases Free MortalKombat Ransomware Decryptor

• LassPass breach: Hackers put malware on engineer’s home computer to steal their password

• ‘Hackers’ Behind Air Raid Alerts Across Russia: Official

• 33 New Adversaries Identified by CrowdStrike in 2022

• New ‘Exfiltrator-22’ Post-Exploitation Framework Linked to Former LockBit Affiliates

• Rapid7: Attackers exploiting vulnerabilities ‘faster than ever’

• LastPass: Keylogger on home PC led to cracked corporate password vault

• Industry Embraces Single-Vendor SASE as Cato Reports Record Growth

• Are our pets leaking information about us?

• Cybersecurity Industry News Review: February 28, 2023

• LastPass breach: Hacker accessed corporate vault by compromising senior developer’s home PC

• The power of community participation with Faye Francy, Executive Director, Auto-ISAC

• What Must You Do Before Uploading Your Sensitive Data to the Cloud?

• Busting Myths Around Cybersecurity Team Training

• Massive Blaze Shuts Down Apple Supplier Plant In India

• How to Obtain EV Code Signing Certificate for Azure?

• How SlashNext is using generative AI to shut down ChatGPT phishing attacks

• Vouched Raises $6.3 Million for Identity Verification Platform

• Apple Users Need to Update iOS Now to Patch Serious Flaws

• China Is Relentlessly Hacking Its Neighbors

• The future of cyber insurance

• The Buffett test: This one chart shows how much every Club holding spends on stock buybacks

• EU Narrows App Store Charges Against Apple

• US Electric Cooperative Association Launches Commercial OT Security Solution

• Vulnerability in Popular Real Estate Theme Exploited to Hack WordPress Websites

• CrowdStrike: Threat actors shifting away from ransomware

• LastPass: The crooks used a keylogger to crack a corporate password vault

• London Honeypots Being Attacked 2000 Times Per Minute

• Application Security vs. API Security: What is the difference?

• CISA adds ZK Java Web Framework bug to Known Exploited Vulnerabilities Catalog

• Meta Forms AI Team To Compete With ChatGPT

• APT-C-36 Strikes Again: Blind Eagle Hackers Target Key Industries in Colombia

• Funding Your Business Expansion in 2023: 4 Considerations and Options

• Foxconn Expands In China’s Henan After Factory Disruption

• Phone Attacks and MFA Bypass Drive Phishing in 2022

• Canada Bans TikTok From Government Devices

• Operational Security: 8 best practices to create a comprehensive OPSEC program

• Deepfakes: What they are and tips to spot them

• Experts Spot Half a Million Novel Malware Variants in 2022

• LastPass DevOps Engineer Breached To Steal Password Vault Data

• Critical Flaws in WordPress Houzez Theme Exploited to Hijack Websites

• London Honeypots Attacked 2000 Times Per Minute

• 15 odd and interesting gift ideas for hackers in 2023

• News Corp outfoxed by IT intruders for years

• Need to improve the detection capabilities in your security products?

• Resecurity identified the investment scam network ‘Digital Smoke’

• Russian hacktivists DDoS hospitals, with pathetic results

• CENTRAL BANK DIGITAL CURRENCIES

• How to safely file your taxes online

• US Marshals Service leaks ‘law enforcement sensitive information’ in ransomware incident

• LastPass Reveals Second Attack Resulting in Breach of Encrypted Password Vaults

• CISA Issues Warning on Active Exploitation of ZK Java Web Framework Vulnerability

• Decrypting Cyber Risk Quantification

• Security teams have no control over risky SaaS-to-SaaS connections

• Expert strategies for defending against multilingual email-based attacks

• It only takes one over-privileged identity to do major damage to a cloud

• Ransomware Attack on servers of the US Marshals Service

• LastPass publishes final analysis of hack into password infrastructure

• (ISC)² Research Finds Cybersecurity Professionals to be Least Impacted by Layoffs in 2023

• The ethics of biometric data use in security

• 10 US states that suffered the most devastating data breaches in 2022

• White House: No More TikTok on Gov’t Devices Within 30 Days

• LastPass: The crooks used a keylogger to crack a corporatre password vault

• Vouched raises $6.3 million to enhance its platform

• Red Hat and Samsung partner on new 5G RAN solution

• LiveRamp enhances identity resolution services on Snowflake

• LastPass says employee’s home computer was hacked and corporate vault taken

• SpaceX unveils “V2 Mini” Starlink satellites with quadruple the capacity

• Twitter Payments chief is out as layoffs cut 10% of Twitter staff, report says

• Linux is not exactly “ready to run” on Apple silicon, but give it time

• Facial recognition algorithms hit new accuracy highs in latest NIST test

• Feeling VEXed by software supply chain security? You’re not alone

• Fake ROBLOX and Nintendo game cracks drop ChromeLoader malware

• LastPass: hackers breached the computer of a DevOps engineer in a second attack

• 5 Best Practices for a Multi-Factor Authentication (MFA) Strategy

• 2023 Predictions

• A week in security (February 20 – 26)

• TikTok probed over child privacy practices

• Fighting online censorship, or, encryption’s latest surprise use-case, with Mallory Knodel: Lock and Code S04E05

• How to work from home securely, the NSA way

• Special Report: The State of Software Supply Chain Security 2023

• Configure Kubernetes Health Checks

• Attackers Were on Network for 2 Years, News Corp Says

• Active Digital Identity Apps to Surpass 4.1B by 2027

• IT Security News Daily Summary 2023-02-27

• DevSecOps: The Broken or Blurred Lines of Defense

• Workforce gaps could impact zero trust rollout

• Data to treat the rising cost of prescriptions

• How to create a CSIRT: 10 best practices

• Building an incident response framework for your enterprise

• Wiz Reaches $10B Valuation With Consolidated Cloud Security Platform

• Rights groups push ICE to end contract with LexisNexis

• Cyberattack on Boston Union Results in $6.4M Loss

• LastPass Says DevOps Engineer Home Computer Hacked

• Threat actors leak Activision employee data on hacking forum

• Introducing Exphash: Identifying Malicious DLLs With Export Hashing

• How New Cybersecurity Regulations Are Shaping the Medical Device Industry

• Workforce gaps could impact zero trust roll out

• Vouched Raises $6.3M to Expand AI Identity Verification Offering to Telemedicine and Healthcare

• How to build future-facing ERP

• Dish multi-day outage rolls on as ransomware fears grow

• A Deep Dive into the Evolution of Ransomware Part 3

• Immuta and ServiceNow partner to tackle cloud data visibility crisis

• What’s the secret to getting to the cloud? Just do it

• PureCrypter Malware Targets Governments Through Discord

• Palo Alto Announces Zero-Trust Security Solution for OT

• All CVEs Are Not Created Equal

• How to Reduce Code Risk Using Pipelineless Security

• Mobile Banking Trojans Surge, Doubling in Volume

• Dutch police arrest three cyberextortion suspects who allegedly earned millions

• Cloud security provider Wiz raises $300M for consolidated CSPM/CNAPP platform

• digital signature

• Researchers Discover Nearly 200,000 New Mobile Banking Trojan Installers

• Edgio Strengthens Security Offering With WAAP Enhancements and DDoS Scrubbing Solution

• ThreatHunter.ai Launches “More Eyes” Program to Help Large Organizations Mitigate Cyber Threats

• Summary of Oral Arguments in Rep. Scott Perry Phone Seizure Case

• Researchers Highlight Security Issues With Email Forwarding Protocols

• Facebook Whistleblower Wants To Force The Company To Be More Transparent

• How the Ukraine War Opened a Fault Line in Cybercrime, Possibly Forever

• News Corp Reveals Two-Year-Long Breach

• 5 reasons to adopt a Zero Trust security strategy for your business

• Meta Announces a New AI-powered Large Language Model

• Online Tracking: What Do You Need to Know?

• Challenges With Software Supply Chain & CNAPP

• How to make sure the reputation of your products and company is good

• Integrating Cybersecurity in UX design

• Beware of Malicious 2FA Apps in App Store and Google Play that Deploys Malware

• NCA executive director shares top cybersecurity risks in 2023

• US National Cyber Strategy Pushes Regulation, Aggressive Hack-Back Operations

• Danish Hospitals Struck By Cyberattack From ‘Anonymous Sudan’

• 2023: The Year of AI? A Closer Look at AI Trends

• Ransomware Attack Compromises Indigo Employees’ Data

• Data Breach occurs at Stanford University

• ChromeLoader Malware Poses as Steam, Nintendo Game Mods

• Researchers Share New Insights Into RIG Exploit Kit Malware’s Operations

• Shocking Findings from the 2023 Third-Party App Access Report

• MWC 2023: EU Business Chief Calls For ‘Focus On Future’

• SpaceX Cancels Space Station Crew Launch At Last Minute

• How to use zero trust and IAM to defend against cyberattacks in an economic downturn

• Should organizations swear off open-source software altogether?

• ‘PureCrypter’ Downloader Used to Deliver Malware to Governments

• US Sanctions Several Entities Aiding Russia’s Cyber Operations

• As Social Engineering Attacks Skyrocket, Evaluate Your Security Education Plan

• Signal CEO Signals Signal Will Exit The UK If Law To Weaken Encryption Passes

• China Makes It Even Harder For Data To Leave Its Shores

• Russian Charged With Smuggling US Counterintel Tech

• Microsoft: For Better Security, Scan More Exchange Server Objects

• PlugX Trojan disguised as a legitimate Windows open-source tool in recent attacks

• How Much Can the Speech or Debate Clause Protect Mike Pence?

• The Jurisdiction of the New Data Protection Review Court

• 1-15 February 2023 Cyber Attacks Timeline

• News Corp: Hackers sat undetected on its network for 2 years

• Stanford University Data Breach – Ph.D. Admission Data Leaked

• How Breached Companies Become the Face of Change

• Cloud Security Firm Wiz Raises $300 Million at $10 Billion Valuation

• Microsoft Exchange admins advised to expand antivirus scanning

• QNAP starts bug bounty program with rewards up to $20,000

• Advance Your Cybersecurity Career with Toolkits from (ISC)² and BUiLT

• China makes it even harder for data to leave its shores

• Growing Demand For Skilled Cybersecurity Workforce In This Digital Age

• Canada Launches Latest TikTok Data Privacy Probe

• Twitter Cuts 10 Percent Of Staff, Including #SleepWhereYouWork Exec

• US-Led ‘Chip 4’ Alliance Holds First Senior-Level Meeting

• Setting Up an SSL in a Spring Boot Application

• How to Find the Best iGaming Sites to Gamble At in 2023? For Maximum Fun and Profit

• Media Giant News Corp Discloses New Details of Data Breach

• QNAP Offering $20,000 Rewards via New Bug Bounty Program

• Dutch Police arrests 3 men involved in a massive extortion scheme. One of them is an ethical hacker

• Beware of ChatGPT Clones: A Surge of Fraudulent Apps Exploiting OpenAI’s Chatbot

• Russian charged with smuggling US counterintel tech to Motherland

• Apple iOS Vulnerability Could Expose Users’ Messages And Photos

• Stanford University Discloses Data Breach – Ph.D. Admission Data Leaked

• ChromeLoader Malware Targeting Gamers via Fake Nintendo and Steam Game Hacks

• FTC reveals alarming increase in scam activity, costing consumers billions

• Resecurity identified the investment scam network Digital Smoke

• Approximately 3 T.B. of U.S. Military Emails were Left Unattended on the Internet

• PlugX Trojan Disguised as Legitimate Windows Debugger Tool in Latest Attacks

• PureCrypter Malware Targets Government Entities in Asia-Pacific and North America

• Missing China Bank Founder ‘Working With Authorities’

• The great power pivot and the intelligence community

• 9 Ways Cyber Attackers are Looking to Exploit Government Agencies in 2023

• The 10 Most Common Website Security Attacks (and How to Protect Yourself)

• Palo Alto Networks Unveils Zero Trust OT Security Solution

• North Carolina Business Magnate Indicted in $2bn Fraud Case

• PureCrypter used to deliver AgentTesla to govt organizations

• The mobile malware threat landscape in 2022

• Dashlane password manager braces for passwordless future

• Australian Battery Start-Up Takes Over Failed Britishvolt

• Governments Targeted by Discord-Based Threat Campaign

• Police Arrest Trio in Multimillion-Dollar Extortion Case

• ChromeLoader campaign uses VHD files disguised as cracked games and pirated software

• Dish Network Offline Following Cyberattack, Staff Disconnected

• Software developers, how secure is your software?

• Find a Provider for Securing Your Company with Passwordless Login

• Hacker Claim Telecom Provider Data Including Source Code, Employee Data Stolen

• Dutch Police Arrest 3 Hackers Involved in Massive Data Theft and Extortion Scheme

• The importance of synchronizing siloed security solutions

• Wiper malware goes global, destructive attacks surge

• Stay one step ahead: Cybersecurity best practices to prevent breaches

• Foiling intellectual property theft in a digital-first world

• Ransomware attack on Dish Network

• When Low-Tech Hacks Cause High-Impact Breaches

• Third-party risks overwhelm traditional ERM setups

• Top Morningstar strategist names a deeply discounted tech stock, in a sector poised for strong growth

• Contrast Security adds Microsoft Azure Functions support to evaluate serverless risks

• Beware rogue 2FA apps in App Store and Google Play – don’t get hacked!

• IT Security News Weekly Summary – Week 08

• IT Security News Daily Summary 2023-02-26

• Integrating AWS Secrets Manager With Spring Boot

• Understanding Static Code Analysis

• Dynatrace Perform: Day One

• Ransomware attack on food giant Dole Food Company blocked North America production

• HTTP 1 vs. HTTP 1.1 vs. HTTP 2: A Detailed Analysis

• Don’t Be So Confident in Nuclear Decision-Making

• Pro-Ukraine hackers CH01 defaced tens of Russian websites on the invasion anniversary

• How to Avoid Cyberattacks on Your Home Network

• Stress May Drive Half of the Cyber Staffer to Leave Their Jobs

• Cloud future overcast by security concerns

• Cybersecurity Industry News Review: February 21, 2023

• Dangers of Adopting Unsanctioned SaaS Applications

• Devices

• News Corp says hackers first breached its systems between Feb 2020 and Jan 2022

• Canadian Telecom Provider Telus is Reportedly Breached

• Security Affairs newsletter Round 408 by Pierluigi Paganini

• Week in review: ChatGPT and cybersecurity, hidden vulnerabilities in Docker containers

• Microsoft: For better security, scan more Exchange server objects

• Convex – 150,129 breached accounts

• Cyber Security Management System (CSMS) for the Automotive Industry

• The Center for Cyber Safety and Education Evolves Its Mission Statement

• Building blocks for Cyber resilience:  MSSPs can lead the way

• Ethical hacker among 3 arrested for blackmail and ransomware attacks

• New Threat Report Shows Attackers Increasingly Exploiting MFA Fatigue

• The Future of Online Privacy

• Clasiopa group targets materials research in Asia

Generated on 2023-03-05 23:59:28.213115