IT Security News Weekly Summary – Week 15

• IT Security News Daily Summary 2021-04-18

• WhatsApp Pink is malware spreading through group chats

• Here’s a Quick Look at How Pakistani Counterfeiters Helped Russian Operatives

• Monero Cryptocurrency campaign exploits ProxyLogon flaws

• Belfast Tinderbox: Why Loyalists Are in the Streets This Spring

• Whistleblower: Facebook Loophole Allows For Fake Engagement And Inauthentic Activity

• A member of the FIN7 group was sentenced to 10 years in prison

• Security Affairs newsletter Round 310

• Decoding Cobalt Strike Traffic, (Sun, Apr 18th)

• BazarLoader Malware: Abuses Slack and BaseCamp Clouds

• Most Important Computer Forensics Tools for Hackers and Security Professionals

• The Code Testing Company CodeCov Suffers a Data Breach Which Went Undetected for Months

• CERT-In Issues “High” Severity Rating Advisory for WhatsApp Threats

• Is BazarLoader malware linked to Trickbot operators?

• Week in review: New DNS vulnerabilities, benefits of cyber threat intelligence, FBI removes web shells

• Penetration testing

• Multilingual Cybersecurity Awareness Training adapted for your needs

• New Images Show Smaller iPhone 13 Notch Compared to iPhone 12

• Database containing e-mail addresses of Navalny’s supporters leaked onto the Internet

• Weekly Update 239

• Mapping “America First” Revival of the KKK

• Advanced mobile protection through the AlienApp for MobileIron

• Operation Overtrap – Hackers Attack Online Banking Users Via Bottle Exploit Kit & Banking Malware

• IT Security News Daily Summary 2021-04-17

• CPDP 2021 – Prof. Paul De Hert ‘Opening Remarks’

• CPDP 2021 – Moderator: István Böröcz. ‘To Record Or Not To Record?’, ‘COVID-19, Body Temperature Screenings And The GDPR’s Material Scope’

• Google Project Zero updates vulnerability disclosure policy moving to a “90+30” model

• The United States imposes sanctions against 25 Russian companies for cyber attacks and Crimea

• Online Learning of University of Hertfordshire Disrupted Due to a Major Cyber-Attack

• The SASE wave: Why cloud-native edge security is gathering huge momentum

• The New Russia Sanctions Resolve a Mystery That Mueller Left Unanswered

• How the FBI Got Into the San Bernardino Shooter’s iPhone

• Malware Evasion Techniques

• Microsoft fixes 2 critical Exchange Server flaws reported by the NSA

• denial-of-service attack

• RangeForce & BCA to Create Cyber Career Advancement Opportunities

• Top Stories: Apple Event Next Tuesday, Mini-LED iPad Pro, iPhone Rumors

• Reliable Leaker Hints Redesigned Colorful iMac to Debut at ‘Spring Loaded’ Event

• What are the different roles within cybersecurity?

• SysAdmin of Billion-Dollar Hacking Group Gets 10-Year Sentence

• Critical Zero-day Vulnerability in Desktop Window Manager (DWM) Let Attackers to Escalate Privilege

• Critical RCE can Compromise Juniper Networks Devices

• Crypto Lending Service, Celsius Suffers Third Party Data Breach

• IBM: Flags More Cyber Attacks on COVID-19 Vaccine Infrastructure

• Who Invented the Personal Computer? “Apple Was Literally Following Us Around”

• ‘Build’ or ‘Buy’ your own antivirus product

• 6 out of 11 EU agencies running Solarwinds Orion software were hacked

• Code42 Announces Its Accelerate Partner Program, Increases Partners on Board over 200%

• Top Biden Administration Cyber Leaders Headline Billington CyberSecurity Defense Summit

• ioXt Alliance Expands Certification Program for Mobile and VPN Security

• Use AI to fight AI-powered cyber-attacks

• 5 steps to respond to a data breach

• Spring cleaning? Don’t forget about your digital footprint

• Week in security with Tony Anscombe

• Querying Spamhaus for IP reputation, (Fri, Apr 16th)

• 2021-04-16 – TA551 (Shathak) German-template Word docs push Ursnif (Gozi/ISFB)

• 2021-04-16 – BazaLoader (BazarLoader) activity

• Cyberthreat update from Acronis CPOCs: Week of April 12, 2021

• Phishing 101: How It Works & What to Look For

• Identity Management Day: Cause for Celebration or Concern?

• Senate bill would give feds paid family and medical leave

• El futuro de TI según Forrester

• Steve Dodenhoff joins Okta as SVP of Worldwide Partners and Alliances

• What Are the Connections to Identified Hafnium Malicious IP Addresses?

• Cybersecurity, an Essential Weapon in the Cyberwarfare to Protect Our Democracy

• A hacker claims to be selling sensitive data from OTP generating firm

• information security (infosec)

• Update to REvil ransomware changes Windows passwords to automate file encryption via Safe Mode

• What to consider when shopping for cyber insurance

• Pandemic Drives Greater Need for Endpoint Security

• IT Security News Daily Summary 2021-04-16

• Hopeful employees targeted as phishers identify new windows of opportunity

• How to improve your workplace’s cybersecurity

• BazarLoader Malware Abuses Slack, BaseCamp Clouds

• Security Gaps in IoT Access Control Threaten Devices and Users

• High-Level Admin of FIN7 Cybercrime Group Sentenced to 10 Years in Prison

• Keyfactor to Acquire PrimeKey to Advance Certificate Automation

• Call for Papers: The University of Texas at Austin Announces the 2021 ‘Bobby R. Inman Award’ for Student Scholarship on Intelligence

• 4 Tips for Securing Your Communication Lines Remotely

• Smarter Cybersecurity Spending in a Pandemic

• Days after sanctions, House to vote again on Cyber Diplomacy Act

• iOS Kids Game Morphs into Underground Crypto Casino

• Report: It’s not all doom and gloom in cybersecurity with remote workers

• Balance Online and Offline Activities the Digital Nomad Way

• What to Expect From Apple’s April 20 Event: New iPads, AirTags and More

• Lawmakers talk agency performance plans, TMF

• NSA: 5 Security Bugs Under Active Nation-State Cyberattack

• Microsoft releases biannual reports on digital trust

• XKCD ‘Post Vaccine Social Scheduling’

• What’s New for April 2021

• 21.5-inch iMac Availability Dwindling at Apple Stores

• Duo Security Named a 2021 Gartner Peer Insights Customers’ Choice for Access Management

• HackBoss Cryptocurrency Malware Being Distributed Through Telegram

• NFT Site Rarible Targeted in Typosquatting Campaign

• Celsius Cryptocurrency Breach

• FBI cleans web shells from hacked Exchange servers in rare active defense move

• Top 5 Tips To Enhance Cloud Computing Security Solutions In 2021

• Shady scam bots trick Omegle users into nonconsensual video sex recordings

• Vulnerabilities in OpENer Stack Expose Industrial Devices to Attacks

• 6 SSH best practices to protect networks from attacks

• US Indicts SecondEye Operators

• Swedish Authorities Say Russia Is to Blame for Sports Confederation Hack

• One-Click Remote Code Execution Vulnerabilities Found in Multiple Popular Apps

• WordPress Releases Security and Maintenance Update

• Critical RCE can allow attackers to compromise Juniper Networks devices

• LTPO Displays Supporting 120Hz Refresh Rates Again Rumored for iPhone 13 Pro Models

• Deals: MagSafe Duo Charger Drops to $112.45 on Amazon ($16.55 Off)

• MacRumors Giveaway: Win an Apple Watch Fitness Award Prize Pack From Activity Awards

• Russian infosec firm Positive Technologies trying to stay positive after US sanctions

• Corporate Vision Names Intelligent Waves LLC Best High-Impact IT Systems Integrator in 2021 Global Technology Innovation Competition

• For Second Year in a Row, Hillstone Networks Recognized by Gartner as Customers’ Choice for Network Firewalls 2021

• GrammaTech Provides Static Application Security Testing (SAST) for DoD Platform One

• Considerations for performing IoMT Risk Assessments

• Do customers really care about SASE? Absolutely, and here’s why

• US Issues Russian SVR Warning

• The Whitsun Reef Incident and the Law of the Sea

• How To Protect Your Enterprise When You Can’t See Your Employees

• Security Expert Re: NSA Urges Organizations To Patch Top Vulnerabilities Exploited By Russia

• Experts On Russia Being Held Accountable For SolarWinds

• Debunking Three Cyber Insurance Myths For SMEs

• How Cisco Rolled Out Zero Trust With Duo to 100,000+ Users

• Is Russia acting as safe harbor for ransomware spreading criminals

• Companies must train their SOC teams well to prevent breaches

• Keyfactor to Merge with PrimeKey

• Meet the Cisco Telemetry Broker Team: Sunil Amin

• U.S. Fingers Putin’s Cozy Bear for SolarWinds Attacks

• Apple-Backed ‘Project CHIP’ to Start Smart Home Device Certification in Late 2021

• Expert Advice Developers to Improve Software Security After NAME:WRECK Disclosure

• Expert Insights: Dir Nat’l Intelligence Releases Annual Threat Assessment Thursday

• Patch now! NSA, CISA, and FBI warn of Russian intelligence exploiting 5 vulnerabilities

• The 7 R’s: Why infrastructure is critical to your application cloud migration

• 1-click code execution vulnerabilities in popular software apps

• Planning the best route with multiple destinations is hard even for supercomputers

• Getting real-time crash data to responders

• ‘Snakebot’ takes a dive to go where other robots can’t

• Scientists are on a path to sequencing 1 million human genomes and use big data to unlock genetic secrets

• Mandiant Front Lines: How to Tackle Exchange Exploits

• Critical Vulnerability Can Allow Attackers to Hijack or Disrupt Juniper Devices

• How the Kremlin Provides a Safe Harbor for Ransomware

• U.S. Agencies Warns of Russian APT Operators Exploiting Five Publicly Known Vulnerabilities

• Cybereason and MassCyberCenter Partner to Mentor College Students

• Trend Micro Offerings Are FedRAMP Authorized and Available on AWS

• Flaw Allows Attackers To Brick Kubernetes Clusters

• Facebook Faces Mass Legal Action Over Data Leak

• US Government Strikes Back At Kremlin For SolarWinds Hack Campaign

• Bitcoin Tumbles After Turkey Bans Crypto Payments Citing Risks

• Swinburne University Confirms Over 5,000 Individuals Affected In Data Breach

• Deals: M1 MacBook Air and MacBook Pro Deals Offer Up to $100 Off Apple’s Latest Notebooks

• PSA: Apple is Updating Old Apps With Latest Signing Certificate Ahead of iOS 14.5

• Expert Comment On DPC Facebook Investigation

• Expert Reaction on Research that Coronavirus Triggering Surge in Cyber Fraud

• Everything You Need to Know About the 2021 Facebook Data Breach

• Cleaning and Catering Business Spotless Hit by a Severe Data Breach

• Class Action Filed Over Data Breach by Presidio Employee

• Russian SVR Behind the SolarWinds Hack, According to U.S. Government

• Deepfakes were going to change everything. And then they didn’t

• Microsoft received almost 25,000 requests for consumer data from law enforcement over the last six months

• Apache SpamAssassin 3.4.6 Release Fixes Two Potentially Aggravating Bugs>

• How AI in Cybersecurity Addresses Challenges Faced by Today’s SOC Analysts

• What is the ACME protocol and how does it work? | Keyfactor

• Industry Reactions to FBI Cleaning Up Hacked Exchange Servers: Feedback Friday

• S3 Ep28.5: Hacking back – is attack an acceptable form of defence? [Podcast]

• How the Biden Administration Can Make Digital Identity a Reality

• Palo Alto Networks a Customers’ Choice in Gartner Peer Insights Report

• Video of Alleged Third-Generation Apple Pencil Leaks Ahead of Apple Event

• Some iPhone 11 Users Seeing Increased Battery Health Percentages After iOS 14.5 Recalibration Process

• Apple Music Tops Spotify With One Cent Paid Per Stream

• Apple Shares 2021 Environmental Progress Report

• A Technical Analysis of the Mirai Botnet Phenomenon

• Tesla Settles Lawsuit Against Ex Staffer Over Source Code

• Indicator Of Attack(IoA’s) And Activities – SOC/SIEM – A Detailed Explanation

• Combating Sleeper Threats With MTTD

• Google backs new security standard for smartphone VPN apps

• Google Project Zero Cuts Bug Disclosure Timeline to a 30-Day Grace Period

• Sanctioned Russian IT Firm Was Partner With Microsoft, IBM

• More Countries Officially Blame Russia for SolarWinds Attack

• Did Someone at the Commerce Dept. Find a SolarWinds Backdoor in Aug. 2020?

• Russia-linked APT SVR actively targets these 5 flaws

• More Than 5,000 People Affected in Data Breach at Swinburne University

• Celsius Email System Suffers Security Breach

• Cybersecurity Models Explained

• US sanctions Russian government, security firms for SolarWinds breach, election interference

• Apple $200m ‘Restore Fund’ Targets Climate Change

• Ransomware Attacks in 2021: Information Meets Emotion

• NSA Discloses Vulnerabilities in Microsoft Exchange

• Facebook CEO Mark Zuckerberg Urged to Scrap Instagram for Kids Plan

• Russian Intelligence Actively Exploits Five Known Vulnerabilities, NSA Says

• Malware and Scammers Are Now Targeting the Popular NFT Marketplace Rarible

• Watchdog thinks Google tricked Australians into giving up data, sues. Judge semi-agrees

• EU’s Proposed Rules For AI Usage Leaked Online

• Google Project Zero Announces 2021 Updates to Vulnerability Disclosure Policy

• Mass Monitoring of Remote Workers Drives Shadow IT Risk

• Creating a safer online world together with the Cybersecurity Tech Accord

• Microsoft Edge Gains New ‘Kids Mode’ for Safer Web Browsing

• How to Encrypt and Password Protect Files on Your Mac

• The CSO guide to top security conferences, 2021

• Quick Hits: April 16

• FCW Insider: April 16, 2021

• Cyberattack on UK university knocks out online learning, Teams and Zoom

• Google to Delay Publishing Bug Details for 30 Days

• White House Blames Russian Foreign Intelligence for SolarWinds, Imposes Sanctions on Rival Nation

• Firefox 88 to Disable FTP Next Week With Full Removal Set for June

• Adapting Security Awareness to the Post-Pandemic World

• Most Common IaaS Security Issues and Ways To Mitigate Them

• Digital Spring Cleaning: Seven Steps for Faster, Safer Devices

• Google Broke Australian Law Over Location Data Collection: Court

• Microsoft Patch Tuesday, April 2021 Edition

• Trickbot Actors Target Slack and BaseCamp Users

• University of Hertfordshire Hit by Cyberattack

• 643GB of Customer Information Exposed in a Data Breach Suffered by Bizongo

• ParkMobile Data Breach: 21Million User Data Exposed

• Severe Bugs Reported in EtherNet/IP Stack for Industrial Systems

• Mirai code re-use in Gafgyt

• iPhone 13 Series CAD Leaks Reveal Larger Camera Dimensions

• Facebook Expands Oversight Board Scope | Avast

• New Federal Data Privacy Legislation Proposed

• Three Wishes to Revitalize SIEM and Your SOC

• Emotet Takedown: Time to Celebrate?

• OPPO Watch and Band Now Support iPhone and Apple Health Syncing

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• US Senate to halt all big tech merger and acquisitions

• IOT Devices operating worldwide are vulnerable to Name Wreck Bug

• Critical Microsoft Exchange Server Vulnerabilities Could Allow Hackers to Control of Enterprise Networks

• Mozilla to start disabling FTP next week with removal set for Firefox 90

• Wordsmithing: Cybersecurity or Cyber Safety?

• Lazarus BTC Changer. Back in action with JS sniffers redesigned to steal crypto

• HTTPS Support for All Internal Services, (Fri, Apr 16th)

• Swinburne University confirms over 5,000 individuals affected in data breach

• One in six people use pet’s name as password

• Clubhouse Exclusivity Applies to Membership, Not Data

• (ISC)2 and the Creation of the U.K. Cyber Security Council

• The rise of QakBot

• The difference between SASE and Zero Trust

• Consumers worry about the cybersecurity of connected vehicles

• Infection Monkey: Open source tool allows zero trust assessment of AWS environments

• The parallels of pandemic response and IoT security

• Protecting the human attack surface from the next ransomware attack

• Securing APIs: Empowering Security

• Cyber Security Headlines – Week in Review – April 12-16, 2021

• The enterprise eGRC market is expected to grow

• 49% of employees prefer a hybrid work arrangement

• Google Project Zero testing 30-day grace period on bug details to boost user patching

• A quick round up of privacy highlights for Q1 of 2021

• Cloud Forensics Firm Cado Security Raises $10 Million in Series A Funding

• Codecov Bash Uploader Dev Tool Compromised in Supply Chain Hack

• New integration: MSPs can now manage Acronis via Kaseya VSA

• D-Link releases lineup of Vigilance solutions to provide high-resolution business surveillance

• Virsec Security Platform 2.0 stops attacks using app-aware runtime visibility inside the container

• InfluxData releases InfluxDB Notebooks to improve communication for software development teams

• DNSFilter Insights Reporting gives users deep visibility into their network’s activity

• AWS launches AQUA for Amazon Redshift to bring compute to the storage layer

• ISC Stormcast For Friday, April 16th, 2021 https://isc.sans.edu/podcastdetail.html?id=7460, (Fri, Apr 16th)

• CloudMoyo and Terracon complete data engineering initiative to modernize the BI platform

• Linux Foundation Research to broaden understanding of open source ecosystem and impact

• LinkSquares helps legal teams accelerate business contracts and deal negotiations

• Styra’s compliance packs for DAS ease collaboration between security and DevOps teams

• 2021-04-15 – BazaLoader (BazarLoader) activity

• Software Developer Arrested in Computer Sabotage Case

• Dell Technologies to spin-off VMware, positioning it for further growth

• BoxBoat reports momentum for BoxOps, its platform for DevSecOps managed services

• Lenovo unveils plans to drive transformation from devices to solutions company

• Vapor IO and VMware announce the Open Grid Alliance to accelerate the evolution of the internet

• Proctoring Tools and Dragnet Investigations Rob Students of Due Process

• 2021 and Emerging Cybersecurity Threats

• OPM digs into the post-pandemic puzzle of remote work and locality pay

• What is Pen Testing and Should You Have a Company that Performs them on Retainer?

• Human-centered Design in the New Webroot Management Console

• US Gov sanctions Russia and expels 10 diplomats over SolarWinds hack

• Lawfare Live: DHS And CISA Talk Cybersecurity

• Vividh Siddha joins Thread Group as new President

• Google Brings 37 Security Fixes to Chrome 90

• How Individualism Ruins Democracy

• Mobile app security standard for IoT, VPNs proposed by group backed by Big Tech

• IT Security News Daily Summary 2021-04-15

• BrandPost: Dirty Tricks: The Latest in Ransomware Tactics

• USTRANSCOM prepares for third-party cyber compliance assessments

• Biden Races to Shore Up Power Grid Against Hacks

• Risk & Repeat: FBI’s web shell removal raises questions

• US Imprisons “Sadistic” Sextortionist

• Pandemic Pushes Bot Operators to Redirect Efforts

• US Formally Attributes SolarWinds Attack to Russian Intelligence Agency

• M-Trends 2021: A View From the Front Lines

• Hacking Operational Technology for Defense: Lessons Learned From OT Red
  Teaming Smart Meter Control Infrastructure

• Segurança sob ataque: Padrões perigosos que colocam seu ambiente em risco

• Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild

• US Hits Russia With Fresh Sanctions Over Solarwinds Hack, Expels Diplomats

• SolarWinds Hack – US officially Blames Russian Intel Agency Hackers

• Why I’m Excited for Keyfactor and Primekey Coming Together

• NordVPN review: A market leader with consistent speed and performance

• Child Safety Experts Urge Facebook To Scrap “Instagram For Kids” Idea

• US Sanctions on Russia Rewrite Cyberespionage’s Rules

• Industry Recognition for Cisco Secure Email Cloud Mailbox

• IBM X-Force: Ransomware Was the Preferred Attack Method in 2020

• API Security Weekly: Issue #129

• Kryon throws down the gauntlet for better RPA governance

• How to set up an SSH tarpit in Ubuntu Server 20.04

• Domain Name Security Neglected by U.S. Energy Companies: Report

• Nation-state hacker indictments: Do they help or hinder?

• Sanctions Escalate US–Russia Tensions

• How to Free Up Storage Space on iPhone and iPad

• ‘Fathom’ Whale Documentary Coming to Apple TV+ on June 25

• Sanctioning Russia for SolarWinds: What Normative Line Did Russia Cross?

• Chrome users, here’s how to opt out of the Google FLoC trial

• IcedID Malware Ramping Up

• Compromised Exchange Servers Were Used to Host Payloads to Hack Other Exchange Servers

• Researcher Discovers Kubernetes Denial of Service Vulnerability

• Operation to Remove Exchange Webshells Announced by Department of Justice

• Why Coin Miners Go Bad & How to Protect Your Tech When They Do

• OWC partners with Acronis protect your backups from ransomware attacks

• IBM: 44 Organizations Targeted in Attacks Aimed at COVID-19 Vaccine Cold Chain

• Arrest Made Over California City Data Breach

• Looking ahead to Gartner IAM Americas

• Daniel Stori’s ‘Security Expert’

• Introducing Virsec Security Platform 2.0

• Apple Pay With Express Transit Mode Now Available for San Francisco Bay Area’s Clipper Card

• CyberMDX and Microsoft: Protecting life-saving medical devices

• “Huge upsurge” in DDoS attacks during pandemic

• Virsec Security Platform Adds Runtime Container Workload Protection from the Inside

• CISSPs from Around the Globe: An Interview with Mari Aoba

• So Many Awards, So Little Time Left to Nominate. Complete Your Global Achievement Award Nomination Today!

• Endpoint Security: Helping to realize the benefits of SASE

• What is a cybersecurity strategy and how can your business develop one?

• Microsoft rolls out Edge 90, with new history search, Kids Mode, to mainstream users

• Gafgyt Botnet Lifts DDoS Tricks from Mirai

• Phishing attack ramps up against COVID-19 vaccine supply chain

• Get to know cloud-based identity governance capabilities

• Unify on-premises and cloud access control with SDP

• How to Create an Incident Response Plan From the Ground, Up

• 6 Tips for Managing Operational Risk in a Downturn

• MAR-10327841-1.v1 – SUNSHUTTLE

• CISA and CNMF Analysis of SolarWinds-related Malware

• US Sanctions Russia and Expels 10 Diplomats Over SolarWinds Cyberattack

• Spamhaus Botnet Threat Update: Q1-2021

• BSides Philly 2020 – Raymond Cazanese’ ‘The Cloud Is For Launching Cyber Attacks’

• Hands-On With Anker’s MagSafe-Compatible Battery Pack

• Why taking the cybersecurity initiative can win you business

• University of Hertfordshire suffers system outage due to cyberattack

• Congratulating Our Top MSRC 2021 Q1 Security Researchers!

• Brazilian Trojan targets Britain Smartphones leading to Banking fraud

• Jeff Bezos Urges Amazon Staff Focus In Final Shareholder Letter

• How to Design and Roll Out a Threat Model for Cloud Security

• Wells Fargo and Chase now among most imitated brands in phishing attacks

• QBot Malware Replaces IcedID in Malspam Campaigns

• Nation-State Attacks Force a New Paradigm: Patching as Incident Response

• Acunetix by Invicti Exhibiting at RSA Conference 2021

• How Frequently Should We Run a Vulnerability Scan in the Vulnerability Management Process?

• Apple Fitness+ Getting New Workouts for Expecting Mothers, Older Adults, and More on April 19

• Docker Desktop for Mac Updated With Apple Silicon Support

• Point Products vs Complete Cyber Security Suite: Which Strategy Is Better for Ensuring the Safety of Your Business?

• University of Hertfordshire pulls the plug on, well, everything after cyber attack

• It was Russia wot did it: SolarWinds hack was done by Kremlin’s APT29 crew, say UK and US

• BrandPost: The Top 3 Most Common Cloud Attacks and How to Avoid Them

• Dell To Offload Ownership Stake In VMware

• ParkMobile parking app data breach – 21M user records stolen, sold

• Keyfactor raises $125M and merges with PrimeKey to create a machine identity management platform

• SolarWinds: US and UK blame Russian intelligence service hackers for major cyber attack

• NSA: Russian Hackers Exploiting VPN Vulnerabilities – Patch Immediately

• Reddit Launches Public Bug Bounty Program

• Uni of Hertfordshire Suffers Cyber-Attack That Takes Down its Entire IT Network

• Foreign hackers attack Russian research institutes

• NSA-CISA-FBI Joint Advisory on Russian SVR Targeting U.S. and Allied Networks

• Cyber thieves move $760 million stolen in the 2016 Bitfinex heist

• Simplify and Accelerate Threat Hunting with High-Speed, High-Confidence Threat Intelligence

• Leaked Photos Show Additional Spring Colors for iPhone 12 Cases

• Peloton Seemingly Rolling Back GymKit Support

• PGH Parking App Experiences Data Breach

• Q1 2021 Cyber Attack Statistics

• What to know about the U.S. sanctions against Russia

• Why Security Pros Can’t Ignore Big Data Monopolies

• user authentication

• White House sanctions Russia over SolarWinds campaign, election interference

• FirstNet rolling out 5G, tower-to-core encryption

• Making an impact as a new CIO

• White House launches plan to protect US critical infrastructure against cyber attacks

• US Expels Russian Diplomats, Imposes New Round of Sanctions

• Malicious PowerShell Use, Attacks on Office 365 Accounts Surged in Q4

• Axis Security Selected as Finalist for RSA Conference 2021 Innovation Sandbox Contest

• Why and How You Should be Using an Internal Certificate Authority, (Thu, Apr 15th)

• Is It Still Possible To Run Malware In A Browser Using JavaScript And Rowhammer? Yes, Yes It Is

• Google Releases Chrome 90 With HTTPS By Default

• Stories Of Dealing With Ransomware Gangs

• US Imposes Sanctions On Russia Over Cyber Attacks

• Apple Launches $200 Million ‘Restore Fund’ to Remove Carbon From Atmosphere

• User Adds Car to HomeKit for In-App Controls and Automations, Showing Future Potential

• Deals: Beats Headphones Deals Abound With Up to $89 Off Powerbeats Pro, $70 Off Solo Pro, and $10 Off Beats Flex

• Privacy-Focused Browsers Oppose Google’s FLoC Technology

• A New Standard for Mobile App Security

• HTTPS Everywhere Now Uses DuckDuckGo’s Smarter Encryption

• EFF Partners with DuckDuckGo to Enhance Secure Browsing and Protect User Information on the Web

• Monetising Customer Data Without Their Knowledge Is Unethical and Must Stop By Sridhar Iyengar, MD, Zoho Europe

• Cyberattacks could pose a material risk to water and sewer utilities

• Expert publicly released Chromium-based browsers exploit demonstrated at Pwn2Own 2021

• How digital marketers track you everywhere (including offline)

• How to Secure Cloud Non-Native Workloads

• Attackers Target ProxyLogon Exploit to Install Cryptojacker

• Exploit for Second Unpatched Chromium Flaw Made Public Just After First Is Patched

• 5 cybersecurity testing areas CISOs need to address

• S3 Ep28: Pwn2Own hacks, dark web hitmen and COVID-19 privacy [Podcast]

• Deep Dive Into Security Orchestration, Automation and Response (SOAR)

• 6 Insider DLP Risk Indicators

• A Look at Digital Attacks on Gaming Resources During the Pandemic

• $125M Growth Round Fuels Keyfactor and PrimeKey Merger to Bring Machine Identity Management to the Mainstream

• Prevalent Study Reveals Few Companies Are Expanding Third-Party Risk Management Programs Despite Increasing Threats

• Malwarebytes releases SMB Cybersecurity Trust & Confidence Report 2021

• FBI cleaned up malicious scripts from hundreds of Vulnerable US Computers

• All enterprises are at risk of mobile attacks says Check Point Software Technologies

• Why SMBs Must Conduct Rigorous Vendor Evaluation to Protect Themselves from Supply Chain Attacks

• 4 Steps to Perform a Website Security Audit

• Irish Regulator Investigates Facebook Over ‘Data Leak’

• AI Security: How Human Bias Limits Artificial Intelligence

• Google backs effort to bring Rust to the Linux kernel

• Better than the best password: How to use 2FA to improve your security

• Smuggling network connected to four deaths at sea dismantled in Spain

• 1-Click Hack Found in Popular Desktop Apps — Check If You’re Using Them

• April 2021 Security Patch Day fixes a critical flaw in SAP Commerce

• DNI’s Annual Threat Assessment

• Apple Again Rumored to Be Readying Third-Generation Apple Pencil

• Nvidia Unveils Data Centre ARM CPU Dubbed ‘Grace’

• McAfee Labs Report Reveals Latest COVID-19 Threats and Malware Surges

• Microsoft Continues to be Most Imitated Brand for Phishing Attempts in Q1 2021

• Google releases Chrome 90 with HTTPS by default and security fixes

• Months After Hack, US Poised to Announce Sanctions on Russia

• Cracked Version of few Software Steal Session Cookies and Monero Cryptocurrency

• Data Breaches, Class Actions and Ambulance Chasing

• Malware Variants: More Sophisticated, Prevalent and Evolving in 2021

• Apple Transporter and Microsoft Remote Desktop Gain Native M1 Mac Support

• University of Hertfordshire hit by cyberattack

• UK Regulator Provisionally Approves Virgin, O2 Merger

• Nvidia Unveils Data Centre ARM Chip Dubbed Grace

• Yuki Chan – Automated Penetration Testing and Auditing Tool

• Cado Security raises $10M for cloud cybersecurity forensics

• Keyfactor raises $125M and acquires PrimeKey to create a machine identity management platform

• Quick Hits: April 15

• FCW Insider: April 15, 2021

• Man Gets 10 Years for Multimillion-Dollar Medicare Fraud Scheme

• Europe’s Data Protection Guardians Green Light EU-UK Data Flows

• LinkedIn Data Leak: Hundreds of Thousands of Spam Emails Flood Users’ Inboxes

• Capcom Released the Final Update on Ransomware Attack

• YIKES! Hackers flood the web with 100,000 pages offering malicious PDFs

• New Zero-Day Vulnerability Found in Google Chrome and Microsoft Edge Posted on Twitter

• The password hall of shame (and 10 tips for better password security)

• Top cybersecurity M&A deals for 2021

• NVIDIA Unveils ‘Morpheus’ Cybersecurity Framework

• Global Attacker Dwell Time Drops to Just 24 Days

• Upcoming Event: Spectrum by Prisma Cloud

• Chrome 90 Defaults to HTTPS, Adds AV1 Codec for Optimized Video Conferencing

• Gurman: Apple’s ‘Spring Loaded’ Event Won’t Feature Anything ‘Particularly Innovative’

• Apple Supplier TSMC Says Global Chip Shortage Likely to Last into 2022

• 500 Million More Reasons to Talk About Facebook – Intego Mac Podcast Episode 183

• Australian government prefers education over prosecution to deter cyberbullying

• CISOs Must Focus on People and Technologies Amid Rising Attacks

• The Need for a Cybersecurity Protection Agency

• 75% of Leaders Lack Confidence in Their Web Application Security

• Heartbreak and Hacking: Dating Apps in the Pandemic

• Want to add antivirus to your existing portfolio?

• Linux, MacOS Malware Hidden in Fake Browserify NPM Package

• Enterprise Data Encryption Use Reaches Historic Highs

• For the second time in a week, a Google Chromium zero-day released online

• FBI removes web shells from compromised Exchange servers

• Machine learning-powered cybersecurity depends on good data and experience

• Open source security, license compliance, and maintenance issues are pervasive in every industry

• Cybersecurity and IT Consulting Firm SecureTech360 to Expand in Fairfax County, Create 10 New Jobs

• Hush – This Data Is Secret

• Under the Hood: Inside (ISC)² Exam Development Cycle

• Unpatched zero-day vulnerability Affecting Current Versions of Google Chrome & Microsoft Edge Published Online

• The future of touchless visitor management lies with biometrics

• Securing Your Supply Chain with CIS and Tripwire

• Beware of These 3 Scams Making the Rounds This Tax Season

• 48% of IT leaders accelerated automation projects

• The impact of the pandemic on AML compliance and fraud strategies

• Advice for aspiring threat hunters, investigators, and researchers from the old town folk

• Victorian government earmarks AU$30m to lift hospital cyber capabilities

• Irish Watchdog Opens Another Facebook Probe, Over Data Dump

• ISC Stormcast For Thursday, April 15th, 2021 https://isc.sans.edu/podcastdetail.html?id=7458, (Thu, Apr 15th)

• S2C Prodigy MDM Pro provides simultaneous debugging across multi-FPGAs

• Grid.ai platform enables researchers and data scientists to train AI models on the cloud

• 1Password Secrets Automation helps businesses secure and manage secrets

• Apple Celebrates Earth Day by Donating $1 for Every Apple Store Purchase Made With Apple Pay

• Important Strategies for Aligning Security With Business Objectives

• OpenText unveils Cloud Editions 21.2 to power modern work in the cloud

• Huntsman Security unveils its SIEM 7.0 in both an enterprise and MSSP release

• SmartBear integrates TestComplete with BitBar, enabling users to create a codeless mobile test

• Masergy enhances AIOps feature by applying AI and ML to optimize SaaS apps on global networks

• Is it still possible to run malware in a browser using JavaScript and Rowhammer? Yes, yes it is (slowly)

• Together for the Good of the Internet: eco Complaints Office Registers More Reports Than Ever Before

• Unpatched MS Exchange servers hit by cryptojacking malware

• 7 Practical Secure Coding Practices

• Logz.io announces support for OpenSearch project, an open source fork of Elasticsearch and Kibana

• IBM, Red Hat and Cobuilder create OpenBuilt platform to accelerate DX across the construction industry

• Vertosoft to offer Inkscreen’s mobile camera app to help govt employees keep data secure

• IDEMIA and INTERPOL renew existing contract to deliver fingerprint and facial recognition system

• Panasonic TOUGHBOOK 55 integrates Viasat Eclypt hard drives to protect data for the defense industry

• What to expect from Apple’s “Spring Loaded” event on April 20

• Here’s how the FBI managed to get into the San Bernardino shooter’s iPhone

• Rust in the Linux kernel

• The IT-OT Connection: How the Two Work Together

• The Biggest Security Threats to the US Are the Hardest to Define

• Paul King joins iProov advisory board

• AI.Reverie names Aayush Prakash as Head of Machine Learning

• Nigerian email scammer sent down for 40 months in the US, ordered to pay back $2.7m to victims

• 2021-04-12 – Guildma (Astaroth) activity from Brazil-based malspam

• 2021-04-14 – BazaLoader (BazarLoader) activity

• Thycotic & Centrify Merge to Form Cloud Identity Security Firm

• The FBI Takes a Drastic Step to Fight China’s Hacking Spree

• WhatsApp flaws could have allowed hackers to remotely hack mobile devices

• Report: Aussie biz Azimuth cracked San Bernardino shooter’s iPhone, ending Apple-FBI privacy standoff

• IT Security News Daily Summary 2021-04-14

• Now hiring for next set of Presidential Innovation Fellows

• Pentagon officials debut innovation steering group

• Security Bug Allows Attackers to Brick Kubernetes Clusters

• FBI removes web shells from infected Exchange servers

• CISA Urges Caution for Security Researchers Targeted in Attack Campaign

• What Real Security and Compliance Look like when Managing 5000+ Endpoints

• Cinq lectures dignes d’intérêt : Les coûts imprévus suite à une cyberattaque

• Biden Admin Takes Action to Defend Electric Utilities Against Cyberattacks

• BrandPost: Remediate Insecure Configurations to Improve Cybersecurity

• Indian supply-chain giant Bizongo exposed 643GB of sensitive data

• Don’t Stop At ‘Delete:’ How Privacy Needs Are Shaping Data Destruction

• Nakasone deflects senators’ invitations to seek domestic spying powers

• California builds data warehouse to better manage homelessness

• Do researchers have the data to take networking to the next level?

• NSA spots new Exchange CVEs, Microsoft issues patches

• Ransomware Attack Creates Cheese Shortages in Netherlands

• 100+ critical IT policies every company needs, ready for download

• Facebook Critic And Data Breach Victim Shows Just How Much The Company Knows About Him

• FBI Operation Remotely Removes Web Shells From Exchange Servers

• BSides Philly 2020 – Apurv Singh Gautam’s ‘Automating Threat Hunting On The Dark Web’

• Combating security challenges with cloud-native AI-driven architecture

• Top 5 Most Vicious Bad Bots

• Congress, Don’t Let ISP Lobbyists Sabotage Fiber for All

• What the FLoC? Browser makers queue up to decry Google’s latest ad-targeting initiative as invasive tracking

• CCISO exam guide authors discuss the changing CISO role

• Sample CCISO exam questions on security project management

• Lawsuit Filed After Facial Recognition Tech Leads to Wrongful Arrest

• Aviation Industry Lacks Cohesive Cybersecurity Approach

• New Jersey School Districts Investigate Cyber-Attacks

• Apple’s Trade-In Partner Phobio Has Reportedly Faced an ‘Alarming Uptick’ in Complaints

• Microsoft Exchange Server Vulnerabilities, Patch Now

• Multiple Tasmania Casinos Affected in Ransomware Attack

• Risk and Compliance Company LogicGate Suffers Data Breach

• 11 Emerging Cybersecurity Trends in 2021

• 11 Types of Phishing + Real-Life Examples

• A Post-Data Privacy World and Data-Rights Management

• FBI Clears ProxyLogon Web Shells from Hundreds of Orgs

• YT$AW: FBI Cleans Up Exchange Servers, NSA Tips Microsoft 4 More Bugs

• All About WhiteSource’s 2021 Open Source Security Vulnerabilities Report

• Google Assistant Can Now Help You Find Your Lost iPhone

• Justice Thomas’s Misguided Concurrence on Platform Regulation

• The Importance of ‘Biological Destruction’ in Responsible Coverage of Xinjiang

• Chrome and Chromium updated after yet another exploit is found in browser’s V8 JavaScript engine

• Wanted: Software Developers with a Security Mindset

• Phishing towards failed trust

• What educational institutions need to do to protect themselves from cyber threats

• Augmented reality goggles and the future of defense acquisition

• ExpressVPN review: A fine VPN service, but is it worth the price?

• FBI cleans up infected Exchange servers

• Securonix, AWS partner on new cloud-native SIEM solution

• Criminals Use Collaboration Platforms to Spread Malware, Research Finds

• The CISO Life Is Half as Good

• 100,000 Google Sites Used To Install SolarMarket RAT

• Reddit Takes Bug Bounty Program Public

• Facebook Will Not Notify More Than 530M Users Exposed In 2019 Breach

• FBI Deletes Web Shells From Hundreds Of Compromised Microsoft Exchange Servers Before Alerting Admins

• Forced Arbitration Thwarts Legal Challenge to AT&T’s Disclosure of Customer Location Data

• FBI shuts down malware on hundreds of Exchange servers, opens Pandora’s box

• SolarWinds spends $19m to remediate affects of Cyber Attack

• FinOps helps NetApp optimize cost efficiencies for cloud-led software development

• Iran’s Natanz Cyberattack Blamed On Israel

• Bitcoin Value Reaches $63,000 Record High

• FBI accessing computers accross US to remove malicious web shells

• DDoS attacks increased by 20% in 2020, meaning everyone should consider themselves at risk

• Exchange Server bugs continue to bite on April Patch Tuesday

• Banks have assessed the security of digital ruble payments

• The CISO Life is Half as Good

• CyGlass Makes the Case for SaaS Network Detection and Response

• New Microsoft Exchange Patches For SMBs | Avast

• New Amazon Echo Buds Take on AirPods Pro With Improved Design and Better Noise Cancellation

• Update now! Chrome needs patching against two in-the-wild exploits

• What are extended validation certificates? And are they dead?

• AFWERX invests in 5G-enabled IoT security

• SecDef plans new screening, training to weed out extremism

• 100,000 Google Sites Used to Install SolarMarket RAT

• Capcom Says Older VPN Device at Heart of Ransomware Attack

• Russian expert give tips on how to protect yourself from “eavesdropping” on your smartphone

• Cybercriminals Are Using Google URLs as a Weapon to Spread Malware

• Threat Actors Targeting Cybersecurity Researchers

• New JavaScript Exploit Can Now Carry Out DDR4 Rowhammer Attacks

• New WhatsApp Bugs Could’ve Let Attackers Hack Your Phone Remotely

• FireEye: 650 new threat groups were tracked in 2020

• The FBI Is Now Securing Networks Without Their Owners’ Permission

• iPhone 13 Pro Rumored to Be Thicker and Feature Larger Rear Camera System

• Apple Quietly Updated Some Of Its Top Hardware Due To Security Risks

• Capcom release final update on ransomware attack

• Two of Tasmania’s Four Casinos Were Hit by A Ransomware Attack

• Hillsborough Schools Computer Network Shut Down by Cyber Attack

• ParkMobile Breach Leaves 21M User Data Exposed

• Shopify and Ledger Named in a New Class-Action Lawsuit Following Data Breach

• Hackers Abuse Website Contact Forms To Deliver Sophisticated IcedID Malware

• Verizon unveils Hyper Precise Location service in more than 100 markets

• Cybersecurity funding hits all time high in 2020

• Cybersecurity VC Funding Hit Record in 2020 With $7.8 Billion Invested

• Dependency Problems Increase for Open Source Components

• Bolstering Our Nation’s Defenses Against Cybersecurity Attacks

• Rise of Double-Extortion Shines Spotlight on Ransomware Prevention

• Armis Taps Salt Security to Automate API Discovery and Enable API Security

• How Contextualized Intelligence Maximizes Security Outcomes in SecOps Tools

• What’s New for April 2021

• Kuo: Next Year’s iPhone Lineup Won’t Include a Mini Model

• Deals: Shop Low Prices on iPad Pro (Up to $120 Off), iPad Air (Up to $50 Off), and iPad Mini ($69 Off)

• Parallels 16.5 Can Virtualize ARM Windows Natively on M1 Macs With Up to 30% Faster Performance

• Security Researcher “Chrome 0day” Tweet – Expert Insight

• Utah Creates Safe Harbor for Companies Facing Data Breach Litigation

• QBot Malware Is Making a Comeback by Replacing IcedID in Malspam Campaigns

• Google Founders Larry Page, Sergey Brin Personal Fortune Grows

• Microsoft Has Busy April Patch Tuesday with Zero-Days, Exchange Fixes

• High numbers of schools hit by phishing, account compromise and ransomware attacks

• FBI hacks into hundreds of infected US servers (and disinfects them)

• Thycotic and Centrify Complete Merger to Expand PAM Offerings

• Introducing the Cisco Security Outcomes Study: Small and Midsize Business Edition

• Spectral releases open source tool to help developers keep secrets

• Illusive Collaborates with Microsoft on Active Defense Solution with Microsoft Defender for Endpoint to Combat Advanced Human-Operated Attacks

• Endpoint Security Solutions 101: What Should a Good EDR Software Contain

• How Cisco Rolled Out Zero Trust With Duo to 100,000+ Users

• Ransomware disrupts food supply chain, Exchange exploitation suspected

• Building Cyber Resilience in a Cloudy World

• Another Critical Vulnerability Patched in SAP Commerce

• How IT Teams Help Manage Classrooms During Remote Learning

• Apple Launches Study into Whether Apple Watch Can Detect COVID-19

• Damaging Linux, macOS Malware Is Hiding in False Browserify NPM Package

• W-2 Phishing Scam Targets 2021 Tax Season

• Behind The Capcom Ransomware Attack

• Apple Teases New Devices With ‘Spring Loaded’ Event

• An Update: The COVID-19 Vaccine’s Global Cold Chain Continues to Be a Target

• AWS Marketplace offerings explained: CloudGuard adds AWS GWLB

• FCW Insider: April 14, 2021

• Quick Hits: April 14

• Cyber criminals are installing cryptojacking malware on unpatched Microsoft Exchange servers

• Siemens Releases Several Advisories for ‘NAME:WRECK’ Vulnerabilities

• Bad Bots Could Disrupt #COVID19 Vaccine Rollout

• FBI silently removed web shells planted on Microsoft Exchange servers in the US

• FBI removed web shells from Exchange Servers without consent

• Tips to improve domain password security in Active Directory

• Let’s Make Security Easy

• Microsoft Defender for Endpoint now protects unmanaged BYO devices

• Microsoft Patches Four More Critical Exchange Server Bugs

• Research Study shows that 100 Million IOT Devices are at Risk

• Apple Preparing Rollout of New Randomized Product Serial Numbers Ahead of ‘Spring Loaded’ Event

• Samsung to Reveal ‘Most Powerful Galaxy Device’ at April 28 Event, Likely Referencing New Laptops

• NSA: New Critical Vulnerabilities Found in Microsoft Exchange Server

• Spy agency GCHQ told me Gmail’s more secure than Microsoft 365, insists British MP as facepalming security bods tell him to zip it

• Chip Shortage – Renault To Extend Idle Factories Until September

• FBI Removes Web Shells from Infected Exchange Servers

• Hackers Expose Contact and KYC Details of Upstox Clients

• Warning: Your WhatsApp May Be Hacked and There’s Nothing You Can Do

• More Leaked iPhone 13 Samples Show Smaller Notch, Repositioned Earpiece and Front Camera

• Android 12 Leak Reveals iOS 14-Style Clipboard Access Notification

• FBI removes web shells from hacked Microsoft Exchange servers

• NHS Website Crashes Briefly Amid Rush For Vaccine Bookings

• ASIO boss says he’s not concerned with Australian Parliament’s March outage

• Simplify, then Add Lightness – Consolidating the Technology to Better Defend Ourselves

• Securing Remote Health Care Post-COVID-19

• In the World of IoT Security, Lock Every Door

• Kuo: Apple to Adopt Under Display Face ID Starting With 2023 iPhones

• Looking for adding new detection technologies in your security products?

• Over 3.1 million cyber attacks on cloud user accounts

• Broadcom to move its security offerings onto Google Cloud Platform

• Semiconductor restraints will shake up auto maker supply chains: Nvidia CEO

• Security crucial as 5G connects more industries, devices

• Update Your Chrome Browser to Patch 2 New In-the-Wild 0-Day Exploits

• Majority of Mobile App Vulnerabilities From Open Source Code

• Why Traditional Security Network Fails SMBs | Avast

• Vice Apologizes for Faked Photos of Genocide Victims

• Sweden blames Russia for Swedish Sports Confederation hack

• WhatsApp flaw lets anyone lock you out of your account

• 2 New Chrome 0-Days Under Attack — Update Your Browser ASAP!

• Kuo: 2022 iPhones to Feature 48-Megapixel Camera, 8K Video, and 6.1 and 6.7″ Sizes With no 5.4″ Mini Option

• DDoS attack activity: 10 million-plus attacks and 22% increase in attack frequency

• Get your firm to say goodbye to password headaches

• Cloudflare Partners with NVIDIA to Bring AI to its Global Edge Network

• Deadline is Extended for 2021(ISC)² Global Achievement Awards Nominations!

• Adaptive cybersecurity: 3 strategies that are needed in an evolving security landscape

• FBI Agents Secretly Deleted Web Shells From Hacked Microsoft Exchange Servers

• Test-DEU-169665

• NSA Discovers New Vulnerabilities Affecting Microsoft Exchange Servers

• 330 million people across 10 countries were victims of cybercrime in 2020

• Detection capabilities improve, but ransomware surges on

• At Least 100 Million Devices Affected by “NAME:WRECK” DNS Flaws in TCP/IP Stacks

• ISC Stormcast For Wednesday, April 14th, 2021 https://isc.sans.edu/podcastdetail.html?id=7456, (Wed, Apr 14th)

• Europe data center market to grow steadily by 2026

• Despite higher workloads, risk managers have high levels of job satisfaction

• ‘FLoC off!’ Vivaldi declares as it says no to Google’s tracking system

• Protecting Your Electronic Health Records (EHR) With Continuous Monitoring

• How do you solve a problem like customer data protection?

• Sontiq Secure Identity Vault delivers digital file security for COVID-19 vaccination cards and medical files

• Flashpoint helps enterprises and govt agencies mitigate fraud and protect against physical and cyber threats

• FBI deletes web shells from hundreds of compromised Microsoft Exchange servers before alerting admins

• FBI blasts away web shells on US servers in wake of Exchange vulnerabilities

• April 2021 Forensic Quiz: Answers and Analysis, (Wed, Apr 14th)

• Threat Stack supports AWS Graviton2-based instances through the Threat Stack Cloud Security Platform

• TP-Link introduces Multi-Gigabit switches and PoE support for business solutions and prosumers

• TOYO NetEyez simplifies network monitoring and helps to ensure enterprise network quality

• Aruba announces set of cross-portfolio edge-to-cloud security integrations for Aruba ESP

• Google Sites blight: Over 100,000 web pages for business form searches overrun with backdoor RATs

• Google Releases Security Updates for Chrome

• 10 Must-Ask Questions When Choosing a SOAR Solution in 2021

• Red Hat and NEC Corporation collaborate to deliver 5G solutions built on Red Hat OpenShift platform

• Semafone partners with Avaya to strengthen PCI DSS compliance and privacy capabilities

• ID R&D IDLive Face offers face biometrics and facial liveness on embedded IoT and edge systems

• Entrust delivers security management to VMware Cloud Foundation with HyTrust CloudControl

• Detroit man sues police for wrongfully arresting him based on facial recognition

• J&J COVID vaccine use paused due to one-in-a-million complication

• FBI launches operation to remotely remove Microsoft Exchange server backdoors

• Apache SpamAssassin 3.4.6 Release Fixes Two Potentially Aggravating Bugs>

• VERT Threat Alert: April 2021 Patch Tuesday Analysis

• Microsoft Patch Tuesday, April 2021 Edition

• Auth0 appoints Lucy McGrath as VP of Privacy

• Cloudera partners with NVIDIA to make AI-fueled business transformation a reality

• Data Brokers Are a Threat to Democracy

• 100 Million More IoT Devices Are Exposed—and They Won’t Be the Last

• This is Intel’s plan to dominate driverless car technology

• Spring Loaded: Apple announces April 20 event

• California: Demand Broadband for All

• How to provide both a Secure & Seamless Remote Onboarding Experience on a Regula Basis?

• This man was planning to kill 70% of Internet in a bomb attack against AWS

• The Expanding Attack Surface: Don’t Forget to Protect your APIs

• BrandPost: Microsoft Exchange Server Security

• BrandPost: Why Network Detection and Response Belongs in Your 2021 Strategy

• BrandPost: What Is a Next-Generation Intrusion Detection System?

• House Oversight presses for details on TMF repayment plans

• Google Patches More Under-Attack Chome Zero-days

• DNS Vulnerabilities Expose Millions of Internet-Connected Devices to Attack

• Mufti Monim joins PCI Pal as CTO

• ColorTokens appoints Rajesh Khazanchi as CEO

• Ric Elert joins Fluree Board of Directors

• AttackIQ promotes Ross Brewer to GM and VP of EMEA and APJ regions

• Microsoft patches new Exchange CVEs, credits NSA with discovery

• How the NAME:WRECK Bugs Impact Consumers, Businesses

• Compromised Microsoft Exchange Server Used to Host Cryptominer

• NSA Alerted Microsoft to New Exchange Server Vulnerabilities

• We Finally Got Businesses to Talk About Their Run-ins With Ransomware. Here’s What They Said.

• SAP Releases April 2021 Security Updates

• Microsoft fixes 2 critical Exchange Server flaws reported by the NSA

• Apple’s Filings in Epic Games Case Argue It Has Reduced Industry Commissions, While Third-Party App Stores Would Compromise Privacy and Security

• Twitter Hashflag for April 20 Apple Event Goes Live

• Lawfare Live: China’s Recent Aggression Against Taiwan

• IT Security News Daily Summary 2021-04-13

• Latest Edelman survey rates trust in tech at a 21-year low

• IC warns that U.S. adversaries are ramping up cyber attacks

• Microsoft cools data center servers in liquid-filled tanks

• FCC app measures mobile broadband access

• Microsoft April patch download covers 114 CVEs including new Exchange Server bugs

• COVID-Related Threats, PowerShell Attacks Lead Malware Surge

• Azure MFA NPS extension boosts authentication capabilities

• Global Dwell Time Drops as Ransomware Attacks Accelerate

• Cloud Security Alliance Shares Security Guidance for Crypto-Assets Exchange

• White House urges downloading of Microsoft patches due to new vulnerabilities

• Government agencies must update Microsoft Exchange as feds warn of ‘unacceptable’ security risk

• 1Password targets developers with Secrets Automation, acquisition of SecretHub

• BrandPost: Fortinet Secure SD-WAN Provides Simplified Compliance for More Than 1,000 Retail Locations

• physical security

• The American Rescue Plan is a win for federal IT modernization. Where should agencies start?

• Breaches Detected Faster, But Ransomware Surge a Major Factor: FireEye

• Swedish Sports Body Hacked by Russians, Officials Say

• Cyber-bullied Teen Takes Own Life

• Dark Reading to Upgrade Site Design, Performance

• Why SMBs are Under Attack by Ransomware

• Hybrid IAM and Cloud Steer Maersk Toward Improved Experiences and Cost Savings

• Microsoft April 2021 Patch Tuesday, (Tue, Apr 13th)

• Maxon’s Redshift Now Available for macOS With Support for Metal and M1 Macs

• VanMoof and Apple Spent Nine Months Working to Integrate E-Bikes Into Apple’s Find My Ecosystem

• NSA helps out Microsoft with critical Exchange Server vulnerability disclosures in an April shower of patches

• Tax Phish Swims Past Google Workspace Email Security

• MS Patch Tuesday: NSA Reports New Critical Exchange Flaws

• Cybersecurity Services Market to be Worth $192.7bn

• CISO Insights: Why you can’t ignore machine identities in IAM strategy

• Deals: HomePod Mini Sees First Discount, Available for $89 at Expercom ($10 Off)

• Review: 2021 Buick Envision Adds Wireless CarPlay to a Solid Infotainment System

• Longtime Apple Maps Bug in Australia Erroneously Lists Businesses in Residential Areas

• DNS and TCP/IP Stack Vulnerabilities Affect 100 Million Devices

• Ransomware Attack Caused Cheese Shortage at Supermarket Chains in the Netherlands

• Microsoft Security Intelligence Identifies Surge of IcedID Campaigns Leading to Cobalt Strike

• Resolving SQL Connection Errors Due to SSL Certificate Issues

• attack vector

• Adobe Patches Critical Code Execution Vulnerabilities in Photoshop, Bridge

• IoT bug report claims “at least 100M devices” may be impacted

• Apply Microsoft April 2021 Security Update to Mitigate Newly Disclosed Microsoft Exchange Vulnerabilities

• M-Trends 2021: A View From the Front Lines

• Hacking Operational Technology for Defense: Lessons Learned From OT Red
  Teaming Smart Meter Control Infrastructure

• Adobe addresses two critical vulnerabilities in Photoshop

• Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild

• Apple Seeds Eighth Betas of iOS 14.5 and iPadOS 14.5 to Developers

• Apple Seeds Eighth Beta of macOS Big Sur 11.3 to Developers

• Synopsys Study reveals increase in Vulnerable, Outdated, and Abandoned Open Source Components in Commercial Software

• How far have we come? The evolution of securing identities

• April 2021 Update Tuesday packages now available

• Cracked copies of Microsoft Office and Adobe Photoshop steal your session cookies, browser history, crypto-coins

• Advanced mobile protection through the AlienApp for MobileIron

• The Importance of Testing Machine Learning Models in Cybersecurity

• Some details of hacker who stole $4 billion bitcoins from Silk Road Blackmarket

• Google Chrome tweaks data privacy with FLoC technology

• Ransomware attack cuts down food supply chain for Albert Heijn supermarket

• BrandPost: Healthcare Organizations: Moving to High Alert for Ransomware

• Researcher release PoC exploit for 0-day in Chrome, Edge, Brave, Opera

• Turning Down the Noise: Adding Context to the SIEM With Modern Data Security

• CISO Insights: Why you can’t ignore machine identities in IAM strategy

• IVAS and the future of defense acquisition

• Adobe Patches Slew of Critical Security Bugs in Bridge, Photoshop

• How open source security flaws pose a threat to organizations

• Fitch Partners with SecurityScorecard to Help Investors Assess Businesses’ Cyber-Risk

• 5 Objectives for Establishing an API-First Security Strategy

• Adobe Releases Security Updates

• BSides Philly 2020 – Peter Scheffler’s ‘Mary Quantum Of Scots’

• Threat Stack Announces Support for Arm-based AWS Graviton2

• Experts released PoC exploit code for a critical RCE in QNAP NAS devices

• Apple TV+ News: Louis Armstrong Documentary Announced, First Look at Stephen King Series ‘Lisey’s Story’ and More

• Apple’s ‘Spring Loaded’ Event Officially Announced for Tuesday, April 20

• Apple’s April 20 Event Page Offers Up Morphing AR Logo

• Mini-LED iPad Pro Expected at Apple Event on April 20 as Production Ramps Up

• Tim Mackie takes lead channel role for Armis

• Promising news: users are becoming more savvy to COVID-19 based phishing attacks finds KnowBe4

• Synopsys Study reveals increase in Vulned erable, Outdated, and AbandonOpen Source Components in Commercial Software

• Secure unmanaged devices with Microsoft Defender for Endpoint now

• Start prepping for open finance — if you want to gain more market share(VB Live)

• Google makes business process tool AppSheet Automation generally available

• Biden taps former Obama defense policy chief as Army secretary

• Samsung’s new Galaxy Quantum 2 uses quantum cryptography to secure apps

• How Cybersecurity Found Me: My Career Journey

• What is Black Box, Grey Box, and White Box Penetration Testing?

• Estate Agent’s Hi-Tech House Tour Exposes Personal Data

• Millions Of Devices Are At Risk From The NAME:WRECK DNS Bugs

• Prosecutor Says Russia’s GRU Hacked Sweden’s Sports Body

• 1.3M Clubhouse Users’ Data Dumped In Hacker Forum For Free

• Apple TV+ News: Louis Armstrong Documentary Announced, First Look at Stephen King Series ‘Lisey’s Story’

• Tweet Chat: The Social Dilemma

• Indian Stock Trading Firm Upstox Reveals It Has Suffered Serious Data Breach

• What Is a SCEP Server?

• Cheese Delivery Crisis for Dutch Supermarkets Following Ransomware Attack

• NAME:WRECK, a potential IoT trainwreck

• BrandPost: Why Choose Open XDR? It’s the Integration

• NetApp Keystone meets you where you are

• 1Password expands into secrets management to help enterprises secure their infrastructure

• Attacks against cloud users surged in 2020

• McAfee: PowerShell threats grew 208% in Q4 2020

• NCSC Warns of Exploited VPN Servers: Here are the Safety Tips to Fix Your VPN

• Beyond Identity Integration With Auth0 Enables Completely Passwordless Authentication

• More Biden Cybersecurity Nominations

• Spotify Announces the ‘Car Thing’ as its First Hardware Device

• Name:Wreck DNS Bugs Put IoT Devices At Risk

• Broadcom moves its Symantec, CA software portfolios to Google Cloud

• Cybersecurity: Victims are spotting cyber attacks much more quickly – but there’s a catch

• Chrome Zero-Day Exploit Posted on Twitter

• CISA Details Malware Found on Hacked Exchange Servers

• Exploit Released for Critical Vulnerability Affecting QNAP NAS Devices

• McAfee: COVID-19 Themed Attacks Continue to Surge

• Clear & Present Danger: Data Hoarding Undermines Better Security

• Malicious Life Podcast: The Story of LØpht Heavy Industries, Part 2

• Millions of devices impacted by NAME:WRECK flaws

• Powering Enterprise Security with End-to-End Threat Visibility

• Adobe Premiere Rush Now Fully Supports M1 Macs

• Roku’s New Remotes Feature an Apple TV+ Button

• Apple’s Head of Retail Engineering Leaving Company After 10 Years

• The Return to Balfour: Israel’s Supreme Court Strikes Down Coronavirus Regulations Curbing the Right to Protest

• Expert Reaction On Pulse Secure VPN Users Can’t Login Due To Certificate Related Outage

• Industry Leaders On Android.Joker Malware

• Iran Nuclear Facility Potential Cyber Attack – What Expert Says

• What Is SNMP In Computer Network Science?

• How IT leaders stay on the right side of innovation with open cloud (VB Live)

• Synopsys: 84% of codebases contain an open source vulnerability

• Enterprise security platform Intrigue expands attack surface management with $2M round

• Small Kansas Water Utility System Hacking Highlights Risks

• PoC Exploit Released for Unpatched Flaw Affecting Chromium-Based Browsers

• New NAME:WRECK Vulnerabilities Impact Nearly 100 Million IoT Devices

• McAfee Sees COVID-19-Themed Threats and Powershell Malware Continue to Surge

• Acronis launches new partner portal to empower service providers, resellers and distributors

• Broadcom to Migrate Security Platforms to Google Cloud

• CloudKnox Report Uncovers Dubious Permissions Gap Across Enterprise Hybrid and Multi-Cloud Environments

• Intrigue Raises $2M to Secure the Enterprise through Attack Surface Management

• Apple Car May Initially Be Made in Small Numbers by LG Magna e-Powertrain

• iPhone 13 Base Model Rumored to Feature Diagonal Rear Camera Layout

• Deals: AirPods Pro Drop to $199.99 on Amazon ($49 Off)

• Expert Comment On Darktrace Set For IPO

• New Vulnerabilities Put Millions Of IoT Devices At Risk

• Bad Bot Report 2021: The Pandemic of the Internet

• What Is WLC in Networking and Why Is It Important?

• Patch Tuesday, April 2021 – Microsoft Removes Legacy, Non-Chromium-based Edge Browser; Pushes several MS Office Updates

• Q1 2021 Cyber Attack Statistics

• Updates to the (ISC)² CAP Exam. What is Changing?

• Wake Me Up Before You Know Know … About the Latest Third-Party Data Breach

• Brave browser disables Google’s FLoC tracking system

• DOJ Charges Texas Resident for Allegedly Planning to ‘Kill About 70% of The Internet”

• Detecting the “Next” SolarWinds-Style Cyber Attack

• Hackers Using Website’s Contact Forms to Deliver IcedID Malware

• Image Shows Upcoming Spring Color Options for iPhone 12 Cases [Updated: April Launch]

• German Regulators Seek to Stop WhatsApp Sharing Data With Facebook

• Sorry, Joe Biden isn’t offering you a work visa, it’s a scam

• AI Security Firm Darktrace Plans London IPO

• US Proposal Would Ban Big Tech Firms From Buying Anything, Ever

• 500,000 Huawei Users Infected with Joker Android Malware From Own Apps Store

• Cloudified Data Centers are the New Normal

• March 2021’s Most Wanted Malware: IcedID Banking Trojan Enters Top 10 Following Covid-Related Campaign

• Aruba brings new security integrations to its Edge Services Platform

• Destructive Attacks Surged in 2020 for Financial Institutions

• AttackIQ Appoints New General Manager and Vice President of EMEA and APJ Regions

• SecZetta Enjoys Record 2020: Reports Strongest Quarterly Growth in Company’s History in Q4, Ends Year With 300% Year-Over-Year Growth

• SecZetta to Participate in Inaugural ‘Identity Management Day’

• 7 new social engineering tactics threat actors are using now

• 6 tips for receiving and responding to third-party security disclosures

• NHS Covid-19 App Update Blocked Over Privacy Rules

• Phone App Reminds Users To Stay Alert While Walking

• FCW Insider: April 13, 2021

• Quick Hits: April 13

• Name:Wreck Bugs Could Impact 100M IoT Devices

• 500,000 Huawei Devices hit by the Joker Malware

• Osterman Research: Almost One-third of US Companies Under-Resourcing Cloud Security Despite Escalating Risks

• Expert publicly released Chromium-based browsers exploit demonstrated at Pwn2Own 2021

• Image Allegedly Shows Upcoming Spring Color Options for iPhone 12 Cases [Updated]

• Average British computer criminal is young, male and not highly skilled, researcher finds

• Why SMBs Must Conduct Rigorous Vendor Evaluation to Protect Themselves from Supply Chain Attacks

• 4 Steps to Perform a Website Security Audit

• FBI Arrest Man Over ‘Plot To Blow Up Internet’

• Alibaba Makes Changes Following Record Fine

• Avast Hacker Archives Episode 5 – Eva Galperin | Avast

• Food Shortages at Dutch Supermarkets After Ransomware Outage

• Image Allegedly Shows Upcoming Spring Color Options for iPhone 12 Cases

• Microsoft Focuses On Healthcare With $20bn AI Buy

• Smuggling network connected to four deaths at sea dismantled in Spain

• How AI is Contributing to Global Warming and What it Can Learn from Bitcoin

• Salesforce DevSecOps: Avoiding Arrested Development

• Siri Reveals Apple Event Planned for Tuesday, April 20

• Application security testing is not just buzzwords

• McAfee Labs Report Reveals Latest COVID-19 Threats and Malware Surges

• 100M More IoT Devices Are Exposed—and They Won’t Be the Last

• RCE Exploit Released for Unpatched Chrome, Opera, and Brave Browsers

• BRATA Malware Poses as Android Security Scanners on Google Play Store

• This Day in History 1861: Confederacy Starts War With United States to Force an Expansion of Slavery

• Hackers Leak Hacker Data in Swarmshop Breach

• Expired certificate caused a Pulse Secure VPN global scale outage

• Clubhouse in the spotlight after user records posted online

• Data Breaches, Class Actions and Ambulance Chasing

• New DNS vulnerabilities have the potential to impact millions of devices

• How to address post-pandemic infrastructure pain points

• XDR and MDR: What’s the difference and why does it matter?

• FBI: Cybercrime Shot Up in 2020 Amidst Pandemic

• Survey: Cybersecurity Community Increasingly Concerned About SolarWinds Breach

• Why would a lawyer ever need an Information Security Professional?

• Four clever ways smart technology can help create big energy savings

• Why biometric bank cards are the future of payments

• These new vulnerabilities put millions of IoT devices at risk, so patch now

• 100M More IoT Devices Are Exposed—and They Won’t Be the Last

• Worldwide IT spending to total $4.1 trillion in 2021

• Grambling Grad Getting Louisiana’s 1st Cybersecurity Degree

• ISC Stormcast For Tuesday, April 13th, 2021 https://isc.sans.edu/podcastdetail.html?id=7454, (Tue, Apr 13th)

• NMAP Announces release of nPcap 1.30, Raw Wifi + Better Performance. https://seclists.org/nmap-announce/2021/1, (Tue, Apr 13th)

• 5G IoT market size to reach $40.2 billion by 2026

• Cybersecurity guide for the hospitality industry

• Ghidra 101: Creating Structures in Ghidra

• Want to turbo-charge your cybersec skills? It’s time to put yourself on the SPOT

• LinkedIn is Deleting All My Comments and Posts About Virginia Police

• IDEMIA Health Travel Pass reduces public health risks while traveling

• Soliton G/On helps scale-up remote access by implementing zero-trust principles

• Syniverse partners with Hitachi to launch a mobile messaging service for CATS’ riders

• Zyxel adds USG FLEX firewall to its Nebula Cloud Networking solution for SMBs and MSPs

• Why adding neurodiversity to cybersecurity teams is a win-win for companies and employees

• ManageEngine nuevamente se destaca en la gestión unificada de endpoints

• Justice Thomas Gives Congress Advice on Social Media Regulation

• Prof. Stephen Clark joins Cambridge Quantum Computing as Head of Artificial Intelligence

• Raytheon appoints Neil Mitchill as CFO

• Cohesity names Brian Spanswick as CISO

• Talon Cyber Security raises $26M to further develop its technology and expand the development team

• Vaccine passports and travel plans race up Covid threat charts

• We need more federal guidance on mobile IT security

• User personas and DaaS could solve some security challenges of remote work

• Joker Android Trojan Lands in Huawei AppGallery App Store

• ParkMobile Breach Exposes License Plate Data, Mobile Numbers of 21M Users

• Jerry Raphael joins Axonius as CFO

• OneSpan appoints Garry Capers to its Board of Directors

• How Reverse IP Lookup API Can Help Detect Connected Domains

• The riskiest smart city technologies

• Biden Nominates Former NSA Officials for Top Cybersecurity Roles

• Apple Inc. Whitepaper: A Day In The Life Of Your Data

• American Pedestrians Killed Disproportionately by Race

• Example of Cleartext Cobalt Strike Traffic (Thanks Brad), (Mon, Apr 12th)

• Why EFF Supports Repeal of Qualified Immunity

• IT Security News Daily Summary 2021-04-12

• Kentucky county clerks to authenticate via Yubikey

• NIST prototypes tech that bridges LMR and wireless broadband networks.

• 911 pilot tests emergency systems’ cyber defenses

• 1.3M Clubhouse Users’ Data Dumped in Hacker Forum for Free

• Sample CompTIA Security+ exam questions and answers

• Advice on how to prepare for the CompTIA Security+ exam

• Expert: Facebook Had Years To Fix Recent Data Breach Problem

• Microsoft Warns of Malware Delivery via Google URLs

• The Cost of Cloud LDAP

• Two former NSA Officials appointed by Joe Biden for prominent cyber roles

• After Cookies, Ad Tech Wants to Use Your Email to Track You Everywhere

• ShinyHunters dump partial database of broker firm Upstox

• JAIC feels pressure to go faster as tight budgets loom

• Man Arrested for AWS Bomb Plot

• How to raise the cybersecurity poverty line and make companies more secure

• 5 ways to increase your security on Clubhouse and why you should take precautions

Generated on 2021-04-18 23:58:23.353957