IT Security News Weekly Summary – Week 18

• IT Security News Daily Summary 2021-05-09

• Robert M. Lee’s & Jeff Haas’ Little Bobby Comics – ‘WEEK 328’

• CPDP 2021 – Moderator: Robin Pierce ‘Privacy In Automated And Connected Vehicles’

• WhatsApp is reportedly working on web version without connected phone

• OPM extends deadline on implementing Trump-era hiring policy

• CISA MAR report provides technical details of FiveHands Ransomware

• Lawmakers press White House for space acquisition chief

• ‘XcodeGhost’ Malware Infected Around 128M iOS Users

• These Roles Require Cybersecurity Training

• A Complete Penetration Testing & Hacking Tools List for Hackers & Security Professionals

• CPDP 2021 – Moderator: Pieter Van Cleynenbreugel ‘Automated Decision-Making: Towards Effective Remedies In A Changing World?’

• Who is Probing the Internet for Research Purposes?, (Sat, May 8th)

• How the U.S. Government Can Learn to See the Future

• Ransomware Attack Shuts Down Top U.S. Fuel Pipeline Network

• Amazon Fake Reviews Scam Exposed in Data Breach

• Using the new Plot Javascript Exploratory Visualization Library Sans-Observable

• SQL injection issue in Anti-Spam WordPress Plugin exposes User Data

• Why Most Employees Fail at Basic Cybersecurity

• After ransomware, U.S. fuel pipeline Colonial Pipeline shuts down

• A Russian specialist warned of the deadly dangers of the smartphone

• What’s Google Floc? And How Does It Affect Your Privacy?

• The Winklevoss twins’ Gemini exchange now lets you earn interest on your dogecoin

• SolarWinds Hack Alarms US Spy Agencies to Inspect Software Suppliers’ Ties with Russia

• Google Gets Serious About Two-Factor Authentication. Good!

• Apple Gave Zoom Access to Special API to Use iPad Camera During Split View Multitasking

• Week in review: Patch Tuesday forecast, how to select a DLP solution, is it OK to publish PoC exploits?

• Ransomware Cyber Attack Forced the Largest U.S. Fuel Pipeline to Shut Down

• Ransomware Attack Shuts Down Fuel Pipeline Supplying the East Coast

• Security Affairs newsletter Round 313

• An Award-Winning iPhone Hack Used by China to Spy on Uyghur Muslims

• Ransomware Hits US Defense Contractor BlueForce

• TsuNAME flaw exposes DNS servers to DDoS attacks

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Penetration testing

• Weekly Update 242

• Help Shape The HCISPP Exam

• Seclore Security24 enables organizations to protect sensitive data and meet privacy regulations

• OT and IoT Security: Adopt a Post-Breach Mindset Today

• Raytheon to provide signals intelligence field services for the U.S. Air Force under 175M contract

• Sentry enhances platform capabilities to improve developer workflows and productivity

• Bugcrowd names Nick McKenzie as CISO and Sammie Walker as CMO

• SnapAV acquires Access Networks to expand its portfolio with new products and managed services

• Encrypting Office Documents, Part 1: Protecting Local Files

• Verato appoints Clay Ritchey as CEO

• The Colonial Pipeline Hack Is a New Extreme for Ransomware

• IT Security News Daily Summary 2021-05-08

• $2 million lost as WallStreetBets forum members fall for crypto scam

• A cyberattack shutdown US Colonial Pipeline

• Major U.S. Pipeline Crippled in Ransomware Attack

• CPDP 2021 – Moderator: Eduard Fosch-Villaronga ‘Artountability: Accountability, Ai And Art’

• KeePass 2.48 update includes an upgraded password database file format

• Yubico New YubiKey 5 FIPS Series Enables Passwordless Authentication

• Ransomware attack leads to shutdown of major U.S. pipeline system

• CPDP 2021 – Moderator: Marcus Michaelsen ‘Social Media Monitoring And Movement Tracking Of Political Dissidents: The End Of Political Asylum In The EU?’

• XKCD ‘Vaccinated’

• IBM X-Force: Ransomware Was the Preferred Attack Method in 2020

• Colonial Pipeline cyberattack shuts down pipeline that supplies 45% of East Coast’s fuel

• Workings of US Firms Disturbed Due to Covid Surge in Banglore

• Threat Actors Use Several New Advanced Techniques To Exploit Windows Services

• Integre la gestión del ciclo de vida de los certificados con la MDM empresarial y optimice la seguridad de su entorno móvil

• Security News In Review: PyInstaller, Cloud Frameworks, and Scripps (Oh My)

• Here’s How International Application Security Market Is Expected To Grow This Decade

• New Spectre Vulnerability Let Hackers Attack Billions of Computers

• API Security Weekly: Issue #132

• Cyberattack Forces Shutdown of Major U.S. Pipeline

• Microsoft Will Soon Kill Flash on Windows 10 for Good

• Microsoft warns of a large-scale BEC campaign to make gift card scam

• Top Stories: Epic Games vs. Apple, Hidden AirTag Mode, Apple Music Hi-Fi, Colorful MacBook Air?

• TsuNAME: New DNS Bug could be used to DDoS Authoritative DNS Servers

• Top 12 Security Flaws Russian Spy Hackers Are Exploiting in the Wild

• Facebook Will Limit Your WhatsApp Features For Not Accepting Privacy Policy

• Week in security with Tony Anscombe

• Modem Vulnerabilty Attacks Android Phones, Steals Data and Records Calls

• Research Shows 19 Petabytes of Data Exposed Across 29,000+ Unprotected Databases

• ISPs Funded 8.5 Million Fake Comments Opposing Net Neutrality

• ShinyHunters is Leaking Data of all the Big Conglomerates

• ‘Build’ or ‘Buy’ your own antivirus product

• Critical Event Management (CEM) Leader Everbridge Completes Acquisition of xMatters to Accelerate Digital Transformation for Enterprise IT and Cyber Resilience

• Eclypsium Awarded AFWERX SBIR Phase One Contract to Explore Air Force Use of Enterprise Device Security Platform

• Keeping Excess Out of Access

• Weak passwords is one of the main reasons for computer hacking in Russia

• LogDNA Browser Logger empowers developers to more efficiently debug web applications

• Entrust Production Analytics Solution optimizes card issuance operations

• An In-Depth analysis of the new Taurus Stealer

• WPScan Intro: How to Scan for WordPress Vulnerabilities

• Three Ivanti Wavelink applications now available on SAP Store

• Intermedia Unite offers enterprise-grade business phone features to Microsoft Teams

• MariaDB updates MariaDB SkySQL cloud database, expands support for AWS

• Security Catalyst Office Hours Recap for May 7, 2021

• Adam Blitzer joins Datadog as COO

• Importance of Using an Email Filter Security Measure

• Security Compass names Rob Bentley as CRO

• Granholm says cyber R&D is a priority at DOE

• ThycoticCentrify Unveils “Definitive Guide to Securing Privileged Access”

• How to successfully automate GRC systems in 7 steps

• Despite confusion, zero-trust journey underway for many

• How North Korean APT Kimsuky Is Evolving Its Tactics

• Russia-linked APT29 group changes TTPs following April advisories

• Tile to Leverage Amazon Echo and Ring Devices to Better Compete With AirTags

• IT Security News Daily Summary 2021-05-07

• How to Remain Secure While Using Running Apps

• RSA Conference 2021: The Best Place to Strengthen Your Resilience

• iPhone Hack Allegedly Used to Spy on China’s Uyghurs

• Twitter’s Tip Jar Privacy Fiasco Was Entirely Avoidable

• China’s PLA Unit 61419 Purchasing Foreign Antivirus Products, Likely for Exploitation

• Apple Releases Safari Technology Preview 124 With Bug Fixes and Performance Improvements

• Google is launching iOS-style privacy labels for Android apps next year

• Louisiana adds vaccine status to digital driver’s license app

• Agencies struggle to find the right AI solutions

• 3 ways intelligent virtual assistants will drive citizen services delivery

• DHS pushes to hire 200 cyber pros

• Apple Rejected Approximately 35% of Apps Submitted to App Store Between 2017 and 2019

• AirTag Accessories: Keyrings and Holders for Apple’s AirTags

• ‘XcodeGhost’ Malware Attack in 2015 Impacted 128 Million iOS Users, According to Trial Documents

• Three Marylanders Indicted Over BEC Scam

• Most Organizations Feel More Vulnerable to Breaches Amid Pandemic

• People of JumpCloud | Emma Neuberger

• Review: 2021 Volkswagen Tiguan Adds Wireless CarPlay With Multi-Screen Support for Apple Maps Directions

• It’s Not Just You: Tweet Previews Aren’t Showing in iMessage Right Now

• Apple Hires New Vice President of Worldwide Corporate Communications

• Millions put at risk by old, out of date routers

• Russian cyber-spies changed tactics after the UK and US outed their techniques – so here’s a list of those changes

• Leaky database exposes fake Amazon product reviews scam

• How to Operationalize Falcon Horizon

• session key

• Better acquisition data would improve DOD oversight

• Boosting student loan debt forgiveness could pay off for cyber recruiting

• Lawmakers seek new probe into AWS JEDI collusion

• Navy to update business systems for performance, reduced costs

• Senate defense committee delays NDAA markup

• Commerce digs into supply chain security

• Better info transfer marks step forward for quantum computing

• Facebook Moving Ahead With “Instagram For Kids” Despite Privacy Concerns

• FBI, NSA, CISA & NCSC Issue Joint Advisory on Russian SVR Activity

• What is File Sanitization? Everything to Know

• Hackers exploit vulnerability on UK NHS Covid vaccine website

• Cyber Threats: The Financial System’s Top Risk

• How a Firewall Can Foster Zero Trust

• computer forensics (cyber forensics)

• The Enemy of Uptime: An Expired SSL Certificate

• The problem with APIs

• Cybersecurity warning: Russian hackers are targeting these vulnerabilities, so patch now

• US-UK Gov Warning: SolarWinds Attackers Add Open-Source PenTest Tool to Arsenal

• Bot Attacks a Top Cybersecurity Concern

• Lawsuit Filed Over Contact Tracing Data Breach

• Over €1 million in cash seized as part of investigation into tobacco smuggling ring

• Smishing Campaign: Roaming Mantis Attacks OS Android Systems With Malware

• New South Wales Labor Party Hit By Avaddon Threat Attackers Demand Ransom

• Exim Releases Security Update

• Very Many Qualcomm Phone Chips Hiding Very Nasty Vulnerability

• 19 petabytes of data exposed across 29,000+ unprotected databases

• Israel’s Version of Moving Fast and Breaking Things: The New Cybersecurity Bill

• SolarWinds aftermath, new data protection law: GFI’s top cybersecurity stories of the month

• 4 Major Privacy and Security Updates From Google You Should Know About

• Critical Cisco Bugs Threaten Corporate Networks

• New Moriya Rootkit Stealthily Backdoors Windows

• Ryuk Ransomware Attack Sprung By Frugal Student

• Biggest ISPs Paid For 8.5 Million Fake FCC Comments Opposing Net Neutrality

• Three US healthcare providers suffer data breach

• Privacy activist Max Schrems on Microsoft’s EU data move: It won’t keep the NSA away

• Protect Against Lost Or Stolen Passwords | Avast

• 3 Ways to Reduce the Cost of a Government Data Breach

• The latest defence against banking scams: Your voice

• Privacy is just for crooks, says enlightened government agency

• 80% of Net Neutrality Comments to FCC Were Fudged

• DevOps is getting code released faster than ever. But security is lagging behind

• Android App Developers Required by Google to Share More Info on Data Handling

• CISA Analyzes FiveHands Ransomware

• Under the Microscope: ISACA Survey on Cybersecurity Workforce, Resources and Budgets

• Qakbot Malware is Targeting the Users Via Malicious Email Campaign

• Defending Against Web Scraping Attacks

• The Edge Pro Quote: Password Empowerment

• Revealing the ‘Snip3’ Crypter, a Highly Evasive RAT Loader

• LogicGate Significantly Expands Integrations Suite and Services

• How to accurately match OVAL security data to installed RPMs

• Multiple Healthcare Provider Clients Affected by CaptureRx Ransomware Attack

• Peloton Shares Price Drop 14% After Suffering Data Breach and Recalling All Its Treadmills

• 51% of Organizations Have Suffered Data Breaches Caused by Third-Party Remote Access

• LibInjection – Detect SQL Injection (SQLi) and Cross-Site Scripting (XSS)

• Malicious Office 365 Apps Are the Ultimate Insiders

• Investment Scammer John Davies Reinvents Himself?

• NCSC Sets Out Security Principles for Smart Cities

• Insurer AXA says it will no longer cover ransomware payments in France

• A spice worth its weight in gold: a multi-million euros fake saffron trafficking scheme uncovered

• Black Hat Asia Speakers Share Secrets About Sandboxes, Smart Doors, and Security

• 11 Reasons Why You Sorta Love Passwords

• Joint NCSC-CISA-FBI-NSA Cybersecurity Advisory on Russian SVR Activity

• 6 Unpatched Flaws Disclosed in Remote Mouse App for Android and iOS

• [Full-Disclosure] HideezKey 2 FAIL: How a good idea turns into a SPF (Security Product Failure)

• Teaching Cybersecurity to Children

• Deals: Shop All-Time Low Prices on M1 MacBook Air and MacBook Pro (Up to $199 Off)

• Prosser: Next MacBook Air Could Come in Colors Similar to iMac

• Obrela teams up with ABS to boost industrial defences against cyberattacks

• Risk to Financial Services and Insurance Organisations increased by 125% in 2020, report reveals

• Data of Over 200,000 People Involved in Amazon Fake Product Review Schemes Was Leaked

• Millions of Old Broadband Routers in the UK Have Serious Security Flaws

• Google to start automatically enrolling users in two-step verification “soon”

• Most Important Security Tools and Resources For Security Researchers and Malware Analyst

• What is Ghimob Malware?

• New Moriya rootkit stealthily backdoors Windows systems

• TsuNAME Vulnerability Can Be Exploited for DDoS Attacks on DNS Servers

• Recycled Phone Numbers Threaten Digital Privacy and Safety, Study Shows

• More Than 180 OAuth 2.0 Cloud Malware Apps Discovered

• 40% of all Android Phones Affected by Qualcomm Snapdragon Vulnerability

• VMware addresses critical RCE in vRealize Business for Cloud

• Apple Exec: We Feature Competitors’ Apps ‘All The Time’ on the App Store

• A New DNS Bug Called TsuNAME Could Be Used to DDoS Key DNS Servers.

• Google Will Require Android App Developers to Disclose Data Collection Procedures

• Cisco Secure Democratizes Extension Security for Firefox and Edge

• Jeff Bezos Offloads $2 Billion In Amazon Shares

• Cryptocurrency Warning From Bank Of England Governor

• Smart cities are a tempting target for cyberattacks, so it’s time to secure them now

• Security Experts Warn Smart Cities Are Vulnerable to Cyberattacks

• New TsuNAME Flaw Could Let Attackers Take Down Authoritative DNS Servers

• FTC Report Highlights Consumer Harms of Manufacturer Repair Restrictions

• New Moriya Rootkit Being Used in The Wild

• Qualcomm’s Mobile Station Modems Vulnerability Puts Android Users’ Privacy at Risk

• VPN protocols explained and compared

• TsuNAME – DNS Bug That Allow Hackers to DDoS Authoritative DNS Servers

• When not to use edge computing

• IRS secures order to serve Kraken with customer data request on cryptocurrency traders

• Google Plans to Switch 2FA (Two-Factor Authentication) On by Default

• VMware Patches Critical Flaw Reported by Sanctioned Russian Security Firm

• Millions of Households at Risk from Outdated Routers

• Apple Supplier Foxconn Raises Employee Bonuses Ahead of iPhone 13 Production

• NCSC provides guidance on cybersecurity for smart cities

• Ryuk Ransomware Infects Bio Research Institute After Student Installs Pirated Software

• How easy is it for hackers to take control of your car?

• Security Recruiter Directory

• Twitter Suspends Account Sharing Trump Posts

• Quick Hits

• FCW Insider: May 7, 2021

• Google teams up with Stop Scams to tackle financial fraud in the UK

• Google Plans to Switch 2F Authentication On by Default

• Misconfigured Database Exposes 200K Fake Amazon Reviewers

• #COVID19 Researchers Lose a Week’s Work to Ryuk Ransomware

• Connecting the Bots – Hancitor fuels Cuba Ransomware Operations

• Analytics Suggest 96% of Users Leave App Tracking Disabled in iOS 14.5

• 16-30 April 2021 Cyber Attacks Timeline

• Fake Amazon Review Scheme Tricking Customers

• New action at EU level against ‘Ndrangheta in Italy and Germany

• New Stealthy Rootkit Infiltrated Networks of High-Profile Organizations

• New Android app for IT Security News with push notifications

• Possible attacks on the TCP/IP protocol stack and countermeasures

• Analytics Suggest 96% of iPhone Users Leave App Tracking Off in iOS 14.5

• Fake Covid-19 Test Results Stifle Travel | Avast

• Suicide prevention body calls for gambling platform data-sharing practices to be reined in

• Vocus turning to sovereignty as its competitive advantage

• BazarBackdoor Campaigns in Attempts to Avoid Detection

• The Security Industry is Protecting the Wrong Thing

• Protecting Collaboration Channels for Remote Work

• What Is Software Deployment: Definition, Specific Activities, Challenges and Advantages

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• Security Vulnerabilities in Dell Laptops

• No more insurance reimbursements for Ransomware Attacks in France

• New Financially Motivated UNC2529 Hacking Group Targets U.S. Organizations with 3 Malware

• Qualcomm’s Modem Bug Makes Billions of Android Devices Exploitable

• Despite MDM, Financial Services Plagued by Phishing, Malware

• Enterprises in the Crosshairs of Nation-State Attacks

• Private Blockchains: Hyperledger vs. Quorum vs. Corda

• Fantastic passwords and where your children can find them

• Popular routers found vulnerable to hacker attacks

• Be a “dumbass”, like some of the world’s best cyber investigators

• May 2021 Patch Tuesday forecast: Spring cleaning is in order

• The obvious and not-so-obvious data you wouldn’t want companies to have

• New infosec products of the week: May 7, 2021

• Kids in Hong Kong and other highly surveilled states worry infosec careers are just asking for trouble

• Cisco HyperFlex web interface has critical flaw that lets attackers get root and execute arbitrary commands

• Building Cyber Resilience in a Cloudy World

• Why Application Security is Still Important for Financial Services?

• A Secure 5G: US Cyber Center of Excellence Selects Palo Alto Networks

• Consumer views and behaviors on creating and using passwords

• Acting on a security risk assessment of your organization’s use of Salesforce

• NSW readies its own data breach notification scheme for state agencies

• Cisco publishes solutions to SD-WAN and HyperFlex software security vulnerabilities

• Qualcomm chip vulnerability found in millions of Google, Samsung, and LG phones

• ISC Stormcast For Friday, May 7th, 2021 https://isc.sans.edu/podcastdetail.html?id=7490, (Fri, May 7th)

• New workloads are driving data protection modernization

• DefakeHop: A deepfake detection method that tackles adversarial threat detection and recognition

• A Deep Dive into Known Magecart IoCs: What Are the Connected Internet Properties?

• Android developers will need to add iOS-like privacy information soon

• Splunk Observability Cloud helps IT and DevOps teams conquer complexity at any scale

• Juniper Security Director Cloud: Helping customers transition seamlessly to a SASE architecture

• Veriff enables external use of AI-powered identity verification technology for developers and users

• Arete launches Arsinal, a toolkit for threat protection and reporting integrated into SentinelOne

• Google Play to require privacy labels on apps in 2022, almost two years after Apple

• Apple Shares Details on How Apple Card Family Works

• Achieving PCI DSS Compliant Firewalls within a Small Business

• Bosch introduces Autodome IP starlight 5100i IR moving camera with built-in AI

• IBM unveils 2 nm chip technology to increase performance and energy efficiency

• Cequence Security API Sentinel 2.0 helps orgs strengthen their runtime API protections

• RMS announces innovations in ExposureIQ to provide real-time event visualization

• Who’s responsible for cloud security?

• Exposed Azure Storage Containers, (Fri, May 7th)

• Ramp eCDN integrates with Microsoft Teams to securely deliver live and VoD streaming experience

• Cisco partners with Box to advance secure work in the cloud

• Thales and Senetas unveil quantum resistant network encryption solution

• Then a Hacker Began Posting Patients’ Deepest Secrets Online

• Dell just patched a driver security flaw dating from 2009

• Three new malware families found in global finance phishing campaign

• Microsoft launches open source tool Counterfeit to prevent AI hacking

• FDA reportedly plans to authorize Pfizer’s COVID vaccine for teens 12-15 in days

• Google will make you use two-step verification to login

• The growing security problem of Bring Your Own Device (BYOD)

• Proper data hygiene critical as enterprises focus on AI governance

• Insurer AXA Halts Ransomware Crime Reimbursement in France

• Windows Moriya rootkit used in highly targeted attacks

• OPSWAT expands leadership team with the appointment of Mike Barker and Eric Spindel

• Sensata invests in Nanoprecise to expand its IoT and MHM offerings

• Kerv acquires cloudThing to further enhance its cloud and digital credentials

• Infobip acquires Anam to offer enhanced product and service offerings for mobile network operators

• Spam text messages spike in the U.S. during the pandemic

• How chat platforms are using Machine Learning for content moderation?

• Impeachment witnesses talk public service

• Troy Hunt: Organizations Make Security Choices Tough for Users

• Building a Successful Customer Advocacy Program (Hint: It’s Not How You Think)

• ZeroNorth names Dan Beauregard as VP of Strategic Alliances

• FutureVault appoints John Shackleton as CEO

• Matt Cullina joins Sontiq as head of global insurance business

• Defending Cybersecurity Can’t Be Done Blindfolded–The EU’s NIS2 Review Can Set This Right

• Lawmakers press for IDEA Act adoption

• Best encryption software in 2021: Protect your business data

• Cloudflare surges as Q1 revenue tops expectations, outlook higher as well

• Best security system in 2021: Secure your home or business

• The need for cybersecurity “never goes away,” expert says: World Password Day

• World Password Day: Computer credentials are just as important as passwords—protect them, too

• ‘BadAlloc’ vulnerabilities spell trouble for IoT, OT devices

• Google Plans to Automatically Enable Two-Factor Authentication

• New Techniques Emerge for Abusing Windows Services to Gain System Control

• Quais são os tipos mais comuns de ciberataques?

• Introducing the Public Interest Internet

• The Enclosure of the Public Interest Internet

• Outliving Outrage on the Public Interest Internet: the CDDB Story

• IT Security News Daily Summary 2021-05-06

• Implementing digital transformation collaboratively

• DHS kicks off workforce sprint with push to hire 200 cyber pros

• State laws hint at privacy best practices

• Open-source tool helps spot gerrymandered districts

• TMF relaxes payback rules for security, IT modernization, pandemic response

• Integrating open data, open source, cloud drives efficiency

• DOD expands vulnerability disclosure policy to public networks, IoT devices

• Cybersecurity: Don’t blame employees—make them feel like part of the solution

• Oversight Board Pushes Back On Facebook To Make Decisions For Itself

• How Cryptocurrency and Cybercrime Trends Influence One Another

•  Cisco Releases Security Updates for Multiple Products 

• Alien Mobile Malware Evades Detection, Increases Targets

• Phil Schiller on App Store Knockoffs in 2012: ‘Is No One Reviewing These Apps?’

• The Justice Department Shouldn’t Open the Pandora’s Box of Seditious Conspiracy

• Surveillance Self-Defense Playlist: Getting to Know Your Phone

• Qualcomm Snapdragon 855 modem code flaw exposed Android smartphones to possible snooping

• Qualcomm Chip Bug Opens Android Fans to Eavesdropping

• Popular mobile apps leaking AWS keys, exposing user data

• The UNC2529 Triple Double: A Trifecta Phishing Campaign

• DevOps Connect at RSAC 2021: Insightful Talks, Live Q&A, Workshops, Pilates and More

• Qualcomm bug impacts about 30% of all smartphones

• Apple Offered Special App Store API Access to Hulu and Other Developers

• Foriegn Intelligence Surveillance Court Rubber Stamps Mass Surveillance Under Section 702 – Again

• Robotic process automation in healthcare

• ShinyHunters leak database of Indian wedding portal WedMeGood

• Beware of Social Media Scams

• Facebook Dating Service Issues | Avast

• Why Crypto-agility is the Key for Quantum-safe Cryptography

• US defense contractor BlueForce apparently hit by ransomware

• CISA Publishes Analysis on New ‘FiveHands’ Ransomware

• Don’t give away the keys to the kingdom

• CPDP 2021 – Moderator: Niko Härting ‘Collateral Damages Of Enforcement – Digital Services Act, Network Enforcement Act, And Loi Avia’

• PSA: macOS Big Sur 11.3 Includes Colorful New Wallpapers Designed for M1 iMac

• Google Plans to Add Privacy Labels to Play Store Apps Next Year

• Most of Exim email servers could be hacked by exploiting 21Nails flaws

• Ryuk Ransomware Attack Sprung by Frugal Student

• Critical Cisco SD-WAN, HyperFlex Bugs Threaten Corporate Networks

• Android phones may be vulnerable to security flaw in Qualcomm chip

• How to integrate Linux Malware Detection and ClamAV for automated malware detection on Linux servers

• Qualcomm Modem Chip Flaw Exploitable From Android: Researchers

• How to use CIS benchmarks to improve public cloud security

• “Unusually Unhinged” Cyber-stalker Jailed for 10 Years

• Securing the Internet of Things in the Age of Quantum Computing

• Cloud-Native Businesses Struggle with Security

• Your network is talking. Are you listening?

• 5 Top Cloud Security Threats and Tips to Mitigate Them

• An uncrackable combination of invisible ink and artificial intelligence

• Report: (ISC)2 Cybersecurity Career Pursuers Study Provides Insights From Professionals and Jobseekers to Highlight What Security Jobs Actually Entail

• Evolving Identity: Why Legacy IAM May Not Be Fit for Purpose

• Password security tips and best practices for enterprises

• The 5 most crucial Cybersecurity updates for businesses in 2021

• IBM Claims Breakthrough With 2 Nanometer Chip

• Hundreds of Millions of Dell Systems Vulnerable to Hack Due to Driver Bug

• Secure Application Development: A 17 Year Review

• Most Reliable Hosting Company Sites in April 2021

• DOD Expands Hacker Program

• CaptureRx Data Breach Impacts Healthcare Providers

• Belgian Public Institutions Crippled by Large DDoS Attack

• How to Bring DevOps and Security Teams Closer Together

• The Time for Collaborative Security Is Now

• Webinar: Why Your Legacy Cyber Platforms Can’t Defend Against Modern Day Attacks

• Phisher Errors Lower Entry Barriers for Wanna-be Phishers

• Billy Crudup to Star in Apple TV+ Retro-Future Dramedy ‘Hello Tomorrow!’

• Apple Shares ‘Full Bloom’ Shot on iPhone 12 Video Featuring Flowers

• Brave Browser for iOS Gains New Playlist Feature for Queueing Video and Audio Content

• Hundreds of millions Of Dell PCs affected by CVE-2021-21551 flaws

• Vulnerability in Snapdragon 855 SoCs could pwn Android modems, allow baddies to snoop on conversations

• GoDaddy offers website owners security protection on World Password Day

• Twitter Now Prompts Users To Revise ‘Harmful Replies’

• Health Care Data: It’s Your Personal ‘National Security’ Information

• OverWatch Threat Hunters Win the Race Against Carbanak in MITRE ATT&CK Evaluation

• Massive DDoS Attack Disrupts Belgium Parliament

• World Password Day: How to keep your personal and work data safe

• Recycled U.S. Phone Numbers Linked to Security Threats

• Russian ‘Evil Corp’ Cybercriminals Possibly Evolved Into Cyberspies

• Twilio Impacted By The Recent Codecov Supply-Chain Attack

• CISA Releases Analysis Reports on New FiveHands Ransomware

• FiveHands Ransomware

• MAR-10324784-1.v1: FiveHands Ransomware

• Bugcrowd Welcomes New CI&SO and CMO, Strengthening Mission to Secure Customers’ Innovation Sooner Amid Intense Digital Transformation

• Exclusive Deals: Take 20% Off Sitewide at Nomad This Week

• Cybersecurity Is Not A One-Stop-Shop

• Finastra Ransomware Attack

• RM3 – Curiosities of the wildest banking malware

• Business email compromise: How Microsoft is combating this costly threat

• Business email compromise campaign targets wide range of orgs with gift card scam

• Forrester names Microsoft a Leader in the 2021 Enterprise Email Security Wave

• Tips to keep your passwords secure for World Password Day, and beyond

• Signs You’re a Victim of Identity Theft | Avast

• Millions of older broadband routers have these security flaws, warn researchers

• Tripwire Patch Priority Index for April 2021

• Google to Automatically Enable Two-Step Verification for Some Accounts

• 6 ways to spur cybersecurity board engagement

• Dell patches high-severity flaws in firmware update driver

• S3 Ep31: Apple zero-days, Flubot scammers and PHP supply chain bug [Podcast]

• Northeastern University Team Finds New Ways to Detect Bugs in its Research

• Positive Technologies reported on the impact of U.S. sanctions on its IPO plans

• More Than 200 Belgian Organizations Knocked Offline in a Massive DDoS Attack

• Biden’s Supply Chain Initiative Depends on Cybersecurity Insights

• CISO Challenge: Check Your Cybersecurity Skills On This New Competition Site

• Contrast Security Adds Go Language Support for Industry’s First Interactive Application Security Analyzer

• Take Your Password Security from Zero to Hero This World Password Day

• JET Engine Flaws Can Crash Microsoft IIS And SQL Servers

• New Crypto Stealer Panda Spread Via Discord

• Dogecoin Has To Be Taken Seriously Now

• Your Own Phone Number Can Be Used To Hack You, Study Finds

• Vulnerabilities Found In Wifi-routers

• $2bn Startup Glovo Falls Victim To Cyberattack

• What Is DarkSide Ransomware?

• Vaccine Website Seized After Stealing Data From Its Visitors

• Facebook bans Signal ads that reveal the depth of what it knows about you

• Swiss Cloud Hosting Provider Suffered Ransomware Attack

• Old Routers Pose Security Risk, Warns Which?

• Security by Design and NIST 800-160, Part 1: Managing Change

• multifactor authentication (MFA)

• Data leak implicates over 200,000 people in Amazon fake product review scam

• Google is going to start automatically enrolling users in two-step verification

• NSA offers advice: connecting OT to the rest of the net can lead to “indefensible levels of risk”

• Recycled U.S. Phone Numbers are Linked to Security Threats

• MDR Firm Huntress Raises $40 Million in Series B Funding Round

• Firefox for Android gets critical update to block cookie-stealing hole

• Financial Services Experience 125% Rise in Exposure to Mobile Phishing

• How to Move Beyond Passwords and Basic MFA

• Huntress Raises $40M to Become the Go-To Cybersecurity Platform for SMBs, Arm Reseller Partners with New Services

• Chinese PLA Unit 61419 suspected to have purchased AVs for cyber-espionage

• CVE-2021-1815 – macOS local privilege escalation via Preferences

• Deezer Announces Siri Voice Control Support for HomePod

• Experts Reaction On REvil/Sodin Behind UnitingCare Breach

• Why now is the time to make database security a priority

• It’s World Password Day – Here’s what the experts say

• Making the Internet more secure one signed container at a time

• Endpoint security platform Huntress raises $40M

• Ransomware: There’s been a big rise in double extortion attacks as gangs try out new tricks

• Cisco Patches Critical Flaws in SD-WAN, HyperFlex HX Products

• Financial Firms Report Puzzling 30% Drop in Breaches as Incidents Rise

• Holidaymakers In UK Should Be Wary of Scams As Lockdown Restrictions End, Action Fraud Warns

• New Vulnerabilities in Cellebrite’s Tools Discovered by a Researcher

• Critical Flaws Hit Cisco SD-WAN vManage and HyperFlex Software

• 10 Ways to Diminish Your Vulnerability to School Ransomware Attacks

• Bitglass Security Spotlight: Another Supply-Chain Attack, Microsoft Vulnerabilities, and More Data Breaches

• Passwords a Threat to Public Infrastructure

• Cisco Critical Vulnerabilities Enable Remote Attackers to Execute Commands

• 10 Best Lenovo Laptop for Students 2021 – Top Picks for College

• What is Security Orchestration, Automation and Response (SOAR)?

• CISSPs from Around the Globe: An Interview with Jason Lau

• Trump Slams “Total Disgrace” Of Continued Facebook Ban

• Knowledge of security risks hasn’t fixed the password problem

• Attackers Use Obscurity, Enterprises Should Too

• Microsoft Pledges to Store European Cloud Data in EU

• Cybersecurity Experts Share Thoughts for World Password Day

• Choosing a Cyber Security Framework

• Best Practices for Securing Public Cloud Infrastructure

• Top 5 Ransomware Attacks to Watch Out for in 2021

• The Story of Colossus

• Belgium’s parliament suffer DDoS attack

• SpaceX Starship Successfully Lands Vertically

• Zero Trust and Insider Threats: Was Brutus the Original Bad Actor?

• Android users’ privacy at risk as Check Point Research identifies vulnerability on Qualcomm’s mobile station modems

• Ryuk ransomware finds foothold in bio research institute through student who wouldn’t pay for software

• Millions of Internet Users in the U.K. May Be Using Old, Unsecure Routers

• Financial Firm Reports Puzzling 30% Drop in Breaches as Incidents Rise

• Cyber Incidents Drive Security Analysts Away from Their Jobs, New Study Shows

• Researchers Found Three New Malware Strains in a Phishing Campaign

• Panda Stealer Spreads Via Discord to Steal User Crypto-Currency

• New Spectre Flaws in Intel and AMD CPUs Affect Billions of Computers

• New Qualcomm Chip Bug Could Let Hackers Spy On Android Devices

• Operation TunnelSnake

• Apple TV+ Thriller ‘Servant’ Nominated for 2021 TV Choice Award

• Experts On IOS 0-Days Vulnerabilities Discovered

• Russian nuclear subs come under malware attack

• Google Outlines Remote Working For Staff Going Forward

• FCW Insider: May 6, 2021

• Security researchers found 21 flaws in this widely used email server, so update immediately

• Half of UK Manufacturers Suffered a Cyber-Attack Last Year

• Researcher Claims Peloton APIs Exposed All Users Data

• Cyber-Attacks Drive Security Analysts Away from Their Jobs, New Study Shows

• New Spectre Flaws in Intel and AMD CPUs Affect Billion of Computers

• A taste of the latest release of QakBot

• Operation TunnelSnake: formerly unknown rootkit used to secretly control networks of regional organizations

• REvil Ransomware Responsible for the UnitingCare Queensland’s Attack

• Crane horror Reg reader uses his severed finger to unlock Samsung Galaxy phone

• Facebook and Instagram Beg Users to Be Allowed to Track Them – Intego Mac Podcast Episode 186

• What is cryptojacking? How to prevent, detect, and recover from it

• The Microsoft Exchange Server hack: A timeline

• Cisco Flaws Allow Creating Admin Accounts and Executing Commands as Root

• AirTag Precision Finding Interface Includes Hidden ‘Developer Mode’

• Peloton’s Leaky API Potentially Exposed Riders’ Personal Information

• Creating an Effective Cybersecurity EO

• Chrome on Windows turns on Intel, AMD chip-level defenses against malicious websites

• Want to add antivirus to your existing portfolio?

• ACIC believes there’s no legitimate reason to use an encrypted communication platform

• World Password Day, Yet Another Holiday Reminding Us We Should Really Change ‘That’ Password

• Ransomware Attack Disrupts Scripps Health

• The Evolution of Ransomware Attacks

• Cisco fixes critical flaws in SD-WAN vManage and HyperFlex HX software

• Alternative Ways To Perform Basic Tasks, (Thu, May 6th)

• Are NFTs safe? 3 things you should know before you buy

• Most Important Web Server Penetration Testing Checklist

• Ousaban: Private photo collection hidden in a CABinet

• DDoS attack knocks Belgian government websites offline

• Desktop Central est présenté comme le choix des clients de Gartner Peer Insights pour l’UEM en 2021

• Le DataOps est-il le prochain grand générateur de valeur dans l’écosystème analytique ?

• What contractors should start to consider with the DoD’s CMMC compliance standards

• Email security is a human issue

• JET engine flaws can crash Microsoft’s IIS, SQL Server, say Palo Alto researchers

• The Delicate Balance of Security Versus Usability

• Updates to the (ISC)² CAP Exam. What is Changing?

• The importance of creating a small business Cybersecurity plan

• New Malware campaign spreading through Phishing Attacks

• Australia NSW Labor party hit by Avaddon Ransomware

• JET engine flaws can crash IIS and SQL server say Palo Alto researchers

• Crystal Eye XDR: Protect, detect and respond to threats from a single unified platform

• Dispelling four myths about automating PKI certificate lifecycle management

• ISC Stormcast For Thursday, May 6th, 2021 https://isc.sans.edu/podcastdetail.html?id=7488, (Thu, May 6th)

• Cloud native adoption increasing security concerns

• States Push Back Against Use of Facial Recognition by Police

• Kubernetes adoption continues to grow

• Facebook blocks Signal from using ads to show Instagram data collection

• AirTag Anti-Stalking Measures ‘Just Aren’t Sufficient’ Says Washington Post Report

• Semperis DSP 3.5 provides automated security assessments of Microsoft AD

• Avatier for Outlook offers passwordless Single Sign-On and IAM to improve workforce efficiency

• ¿Cómo gestionar los riesgos cibernéticos del futuro?

• Security Questionnaires: Why You Received One and How to Answer It Effectively

• Qualys Puts 21 Nails Into Exim Mail Server

• Scammer Used Fake Court Order To Take Over Dark Web Drug Market Directory

• Americans Turn To VPNs To Prevent Online Fraud And Hacking

• Data Leak Makes Peloton’s Horrible, No-Good, Really Bad Day Even Worse

• Accurics open source project Terrascan integrates with the Argo Project to enhance cloud security

• Nutanix cloud platform now extends to AWS GovCloud to help public sector adopt cloud smart strategy

• Teradata announces a set of enhancements for Teradata Vantage on Google Cloud

• How Internet can get smarter by combining AI and ML

• McAfee Proactive Security Proves Effective in Recent MITRE ATT&CK™

• Lawmakers grow impatient with delayed Biden budget

• REvil ransomware to blame for UnitingCare Queensland’s April attack

• DPPA forms to build a decentralized blockchain-based data ecosystem

• Accenture invests in Prevailion to provide clients with early warning of cyber threats

• McAfee offers cloud-delivered security solutions on the Ingram Micro Cloud Marketplace

• Adlumin integrates with Google Workspace to give customers the ability to ingest crucial audit logs

• 21Nails: Multiple Critical Vulnerabilities Discovered in Exim Mail Server – Patch Now!>

• Does Multifactor Authentication Keep Your Remote Workers Safe?

• IoT is critical to enterprise digital transformation, Omdia says

• Justice Department seizes fake COVID-19 vaccine website stealing info from visitors

• Attackers Seek New Strategies to Improve Macros’ Effectiveness

• It’s Not Over. The Oversight Board’s Trump Decision is Just the Start.

• MITRE appoints Wen Masters as vice president for cyber technologies

• Frequencz raises $4.1M to accelerate product development

• Guide to JWTs for Beginners

• Navy seeks better analytics on facilities’ energy usage

• The new Normals: NOAA releases 30-year climate data

• Data-driven communications lessons from COVID-19

• NLM Pillbox put out to pasture

• New Crypto-Stealer ‘Panda’ Spread via Discord

• Security teams plan a new pandemic quarantine for BYOD devices headed back to the office

• Protecting Industrial Control Systems Against Cyberattacks – Part 2

• Not the Final Answer on NDR in the Cloud …

• The Florida Deplatforming Law is Unconstitutional. Always has Been.

• You don’t actually own the bitcoin you buy on PayPal. But you can still make a profit

• Stopping Carbanak+FIN7: How Microsoft led in the MITRE Engenuity® ATT&CK® Evaluation

• IT Security News Daily Summary 2021-05-05

• Steps to Discover Hidden Threat from Phishing Email

• Roaming Mantis Amplifies Smishing Campaign with OS-Specific Android Malware

• Americans turn to VPNs to prevent online fraud and hacking

• Anti-Spam WordPress Plugin Could Expose Website User Data

• Twilio discloses breach caused by Codecov supply chain hack

• Gap Between Security and Networking Teams May Hinder Tech Projects

• How a Former Netflix Exec Built a Brazen Bribery Scheme

• Luna Display’s Mac-to-Mac Display Feature Now Works Over Ethernet and Thunderbolt

• Twitter App for iOS Now Supports Larger Image Previews in Timeline

• World Password Day 2021 | Avast

• House Dems, unions pitch plan to reclassify TSA screeners

• Government needs a massive investment in FedRAMP

• ThycoticCentrify Unveils “Definitive Guide to Securing Privileged Access”

• DOD Expands Vulnerability Disclosure Program to Web-Facing Targets

• Researchers use PyInstaller to create stealth malware

• Facebook Rejects Encrypted Messaging Service Ads About Data That Facebook Collects

• Wanted: The (Elusive) Cybersecurity ‘All-Star’

• DoD Lets Researchers Target All Publicly Accessible Info Systems

• CPDP 2021 – Moderator: Athena Bourka ‘Cybersecurity For Europe: Fostering Rights Through Technology’

• Navigating the Travel Industry with Threat Intelligence

• China’s PLA Unit 61419 Purchasing Foreign Antivirus Products, Likely for Exploitation

• Found a Lost AirTag? Here’s What to Do

• Automated Pen Testing With ZAP CLI

• IBM adds zero trust capabilities to Cloud Pak for Security

• Raft of Exim Security Holes Allow Linux Mail Server Takeovers

• How one phony vaccine website tried to capture your personal information

• World Password Day: How to keep yourself and your company data secure

• Debating Law Enforcement’s Role in the Fight Against Cybercrime

• Apple Discussed ‘Punitive Measures’ Against Netflix for Dropping In-App Purchases

• Chinese Regulators Order Tech Companies to Standardize Financial Businesses

• Celebrating 10 Years of BitSight: A Co-Founder Looks Back

• 21 nails in Exim mail server: Vulnerabilities enable ‘full remote unauthenticated code execution’, millions of boxes at risk

• Homecoming Queen Hacker to be Tried as an Adult

• CPDP 2021 – Moderator: Prokopios Drogkaris ‘Securing Personal Data: The “New” Normal’

• XKCD ‘Bubble Wrap’

• Deals: Walmart Among First to Discount 2021 11-Inch iPad Pro, Starting at $749 for 128GB Wi-Fi ($50 Off)

• Experian API exposed credit scores of tens of millions of Americans

• 21 nails in Exim mail server: Vulnerabilities enable ‘full remote unauthenticated code execution’, millions of servers at risk

• These Roles Require Cybersecurity Training

• 5 IT security strategies that you should think about as employees return to the office

• Lessons learned from building an inventory of systems

• Signal Shows Data Collection Adverts Facebook Rejected

• Major EU country hit by crippling DDoS attacks

• Improving Data Security in Schools: Remote Learning Increases Security Threats

• Navy to update business systems for performance, reduced costs

• Senate defense committee delays NDAA markup

• Peloton’s Leaky API Spilled Riders’ Private Data

• Poor collaboration between NOC and SOC hampers digital transformation efforts

• Panda Stealer Targets Crypto Wallets

• Threat Actors’ Dwell Time Reduced to 24 Days, FireEye Reports

• Unidentified Cyberattackers Has Put Alaska Court System Offline

• Cisco wins SC Media Award for “Best Security Company”

• Timeline of a Hafnium Attack

• Deals: Target Offering 44mm GPS Apple Watch Series 6 Models for $379.99 ($50 Off)

• Apple Begins Transition to Randomized Serial Numbers With Purple iPhone 12

• Deja Vu: Apple macOS needs updating again to sort vulnerabilities

• 21Nails: Multiple Critical Vulnerabilities in Exim Mail Server

• Facebook Oversight Board Affirms Trump Suspension — For Now

• DDoS Attack on Belgium Parliament and Universities

• Oversight Board Upholds Trump’s Facebook Suspension

• Software Review: Stellar Repair for Exchange

• 40+ Apps With More Than 100 Million Downloads Exposing AWS API Keys

• World Password Day: Make Passwords the Strongest Link in Your Online Security

• FCW Insider: May 5, 2021

• Dell fixes exploitable holes in its own firmware update driver – patch now!

• Cyber-Attack on Belgian Parliament

• Poor Working Relationships Between Security and Networking Teams Preventing Benefits of Digital Transformation

• 11 Biggest cyber security threats in 2021

• UNC2529, a new sophisticated cybercrime gang that targets U.S. orgs with 3 malware

• Spam and phishing in Q1 2021

• New Spectre-Like Attacks

• Deals: Target Offering 44mm GPS Apple Watch Series 6 Models for $349.99 ($50 Off)

• Line Of Duty And Criminal Education

• COVID-19 A Year Later: Cybersecurity Best Practices At Home Haven’t Improved

• Time To Take The Guesswork Out Of Cyber And Quantify Risk

• Uni Research Finds That Fertility Apps Collecting And Sharing Sensitive Data Without Users’ Permission

• Blackbaud Ransomware Attack 101

• Everything You Need to Know About the WestRock Ransomware Attack

• US Presses TSMC For More Chips For Car Makers

• computer forensics (cyber forensics)

• Americans Not Confident in US Gov’t Cybersecurity Preparedness

• DOD expands its bug hunting programme to networks, IoT and more

• IBM Security announces new ways for customers to adopt a zero trust approach

• 60% of U.S. School Mobile Apps Disclose Collected Data Without Permission

• Critical Flaw Exposes Millions of Windows-Based DELL Laptops, Desktops & Tablets

• Exim Bugs Put Millions of Mail Servers at Risk of Being Hacked (Fixes Available)

• 3 Steps to Disrupt Threat Actors Selling Access to Your Environment

• N3TW0RM Ransomware: Emerges in Wave of Cyberattacks in Israel

• Scripps Health: The Non-Profit Healthcare Giant Hit by Cyberattack

• The Russian Ministry of Internal Affairs began to identify serial cybercrimes with a special program

• Will 2021 Mark the End of World Password Day?

• How to accurately match OVAL security data to installed RPMs

• 12.9-Inch iPad Pro Now Delivers as Late as Mid-July

• Clop Ransomware: Overview, Operating Mode, Prevention and Removal

• Help Shape The HCISPP Exam

• Do not trust communications from companies demanding renewal money

• Feds Shut Down Fake COVID-19 Vaccine Phishing Website

• East London council blurts thousands of residents’ email addresses in To field blunder

• New Exim Bugs Put Millions of Email Servers at Risk of Being Hacked

• Chrome for Windows Gets Hardware-enforced Exploitation Protection

• Cymulate Raises $45 Million to Grow Its Attack Simulation Platform

• Red Hat Open-Sourcing StackRox Security Technology

• Dell fixes exploitable holes its own firmware update driver – patch now!

• New Study Warns of Security Threats Linked to Recycled Phone Numbers

• Cequence Security Strengthens Runtime API Protections in API Sentinel

• Perception Point Raises $28 Million Grow Collaboration Protection Platform

• iPad Pro 2020 vs. iPad Pro 2021 Buyer’s Guide

• Deals: 2020 iPad Pro Models Reach Up to $200 Off in New Sales

• A Vulnerable Dell Driver Might Be Putting Millions of Systems at Risk

• Starlink Signs Up 500,000 Pre-Orders For Satellite Internet

• Juniper’s new security portal aims to ease the move to a SASE architecture

• Millions of DELL PCs Can Grant Rogue User Admin-Level Access

• U.S. Organizations Targeted by New Cybercrime Group With Sophisticated Malware

• Malicious Office 365 Apps Are the Ultimate Insiders

• ZeroNorth Appoints Dan Beauregard as Vice President of Strategic Alliances

• Apple Awards $410 Million to Face ID and LiDAR Scanner Supplier II-VI

• Counterfit: Open-source tool for testing the security of AI systems

• Critical Vulnerabilities Found in Exim MTA Servers

• Cisco Secure Democratizes Extension Security for Firefox and Edge

• How to apply a Zero Trust approach to your IoT solutions

• Provide Cyber Risk Analysis Insights in Business Context

• Twilio’s private GitHub repositories cloned by Codecov attacker, cloud comms platform confirms

• Authorities take down scam campaign impersonating the WHO

• This massive DDoS attack took large sections of a country’s internet offline

• Belgium Hit by Massive Cyberattack

• 60% of U.S. School Apps Disclose Collected Data Without Permission

• 44% of Orgs. Report Breaches Due to 3rd Parties, 74% Cite Privileged Access

• Apple Vs Epic Games Court Battle Continues

• Check Your Privilege – the Risks of Privilege Escalation In the Cloud

• Banking Trojan evolves from distribution through porn to phishing schemes

• Google Chrome: This new feature makes it tougher for hackers to attack Windows 10 PCs

• The VC View: Cloud Security and Compliance

• Cyber Asset Management Startup JupiterOne Raises $30 Million

• Misconfigs and Unpatched Bugs Top Cloud Native Security Incidents

• BIOS PrivEsc Bugs Affect Hundreds of Millions of Dell PCs Worldwide

• BYU Study Suggests Night Shift Mode Doesn’t Help iPhone Users Sleep

• Nearly 1 in 4 Online Shoppers Admit Using Guest Accounts Over Data Privacy Fears

• The Role of Translation in Cyber Security and Data Privacy

• Three New Malware Strains Found in Global-scale Phishing Campaign

• Pingback Malware Uses ICMP to Avoid C&C Detection

• How malicious Office files and abused Windows privileges enable ransomware

• 8 cybersecurity startups to watch

• Panda Stealer dropped in Excel files, spreads through Discord to steal user cryptocurrency

• Belgium Hit by a Massive Cyberattack

• Global Phishing Campaign Drops New Malware Trio

• 5 Steps to Take When Maturing Your Enterprise Company’s Risk Management

• Shujinko’s AuditX Automates SOC 2 Compliance for Free

• Apple ‘Likely’ to Overtake HP as Leading All-in-One PC Vendor

• 21 vulnerabilities found in Exim, update your instances ASAP!

• U.S. Agency for Global Media Targeted by Phishers

• 16-30 April 2021 Cyber Attacks Timeline

• Trump Launches ‘Communications’ Website

• World Password Day: Using a Passphrase to Strengthen Your Security

• Shoppers Choose Guest Checkouts Over Security Fears

• New action at EU level against ‘Ndrangheta in Italy and Germany

• HP Enterprise Suffers Critical Bug, Requests Users To Update

• New Android app for IT Security News with push notifications

• Cyber Defense Magazine – May 2021 has arrived. Enjoy it!

• Snapchat Rolls Out Dark Mode on iOS

• Signal Shares the Instagram Ads Facebook Doesn’t Want You to See

• Your 10-Minute Guide to PKI & How Internet Encryption Works

• What Is Zero Trust Network Access? | Avast

• Android May 2021 Update Out, Fixes Over 40 Vulnerabilities

• ALERT — New 21Nails Exim Bugs Expose Millions of Email Servers to Hacking

• Is the Betsy Ross Flag Racist?

• New Hires Speak Out about Cybersecurity Job Expectations

• Experts found critical authentication bypass flaw in HPE Edgeline Infrastructure Manager

• Apple Pay Launches in Israel

• Amazon DevOps Guru: ML-powered cloud operations service to improve application availability

• IBM Cloud Pak for Security simplifies how organizations deploy a zero trust architecture

• What not to expect when you’re expecting: Fertility apps may be selling intimate health secrets

• Looking for adding new detection technologies in your security products?

• Facebook bans Signal’s attempt to run transparent Instagram ad campaign

• Raychat App Suffered a Data Breach of 150 Million Users

• Enterprises Misplace Trust in Partners, Suppliers

• Check Point Technologies offers Cloud Security Educational Program

• Tesla Elon Musk to offer satellite based internet that cannot be hacked

• Zero Trust: Confidently Secure Your Business to Grow Fearlessly

• Microsoft will soon remove Flash Player from Windows 10 devices

• Smart TVs Found to Be Spying on Their Owners in China

• Defeating typosquatters: Staying ahead of phishing and digital fraud

• Is it OK to publish PoC exploits for vulnerabilities and patches?

• IBM X-Force: Ransomware Was the Preferred Attack Method in 2020

• What Docker runtime deprecation means for your Kubernetes

• Android Updates for May 2021 Patch Over 40 Vulnerabilities

• 61% of cybersecurity teams are understaffed

• How modern workflows can benefit from pentesting

• The Security Digest: #59

• ISC Stormcast For Wednesday, May 5th, 2021 https://isc.sans.edu/podcastdetail.html?id=7486, (Wed, May 5th)

• Social media feed simulator Fakey teaches users to recognize credible content

• Pandemic accelerating need for insider risk management

• Achieving CIP Compliance, NERC-Style

• Belgian Government, Parliament, Colleges Hit by Cyberattack

• May 2021 Forensic Contest, (Wed, May 5th)

• BigID App Marketplace provides modular add-on apps for data privacy, protection, and perspective

• AWS launches Amazon FinSpace, a purpose-built analytics service for FSI organizations

• ThreatQuotient launches ThreatQ TDR Orchestrator to accelerate detection and response

• Yubico YubiKey 5 FIPS Series extends phishing-resistant MFA to additional use cases

• ID Verification Platform Provider Persona Raises $50 Million

• TrilioVault for Kubernetes 2.1 offers visibility and insights into Velero backups

• QOMPLX Identity Assurance now automatically detects identity-based attacks on cloud service providers

• DigiCert Smart Seal improves consumer trust in websites

• Robotic Process Automation in Healthcare

• What the Oversight Board Should Do With Trump

• DataStax K8ssandra now available on any Kubernetes environment

• Sysdig adds detailed audit logs for runtime detection and response for AWS Fargate

• Dynatrace announces agentless support for OpenTelemetry

• Riskified Deco enables merchants to address payment authorization failures

• Introducing Active IQ Unified Manager 9.9

• Crowdsec leverages crowdsourcing to reinvent cybersecurity economics

• DATA3 partners with OrionVM to bring D3 Cloud platform to the market

• Ingram Micro partners with UiPath to expand focus on robotics

• Risk Strategies and CyberCube deliver Broking Manager, a cyber risks analytics platform

• Microsoft launches open source tool Counterfeit to prevent AI hacking

• FDA reportedly plans to authorize Pfizer’s COVID vaccine for teens 12-15 in days

• Newer Generic Top-Level Domains a Security ‘Nuisance’

• The IronNet May Threat Intelligence Brief

• Apple Extends Standard AppleCare Plans for Apple TV From Two Years to Three

• How to Factory Reset an AirTag So Someone Else Can Use It

• Codefresh names Kiersten Gaffney as VP Marketing

• Aryaka acquires Secucloud to offer managed SD-WAN and SASE solutions for enterprise customers

• DOD expands bug bounty program to public networks, systems

• McAfee, Akamai Q1 reports top expectations on security technology growth

• Qualys finds 21 vulnerabilities in Exim mail software

• Report: Facebook Is Allowing Drug Ads To Target Teens

• Apple Issues Patches for Webkit Security Flaws

• Workforce Cyber Intelligence 104: Examining Protection Against External & Internal Threats

• Quick and dirty Python: masscan, (Tue, May 4th)

• Apple Releases New Safari 14.1 Update for macOS Catalina and Mojave With Security Fix

• IT Security News Daily Summary 2021-05-04

• Prepare for the next Sunburst by protecting controlled unclassified information

• Better acquisition data would improve DOD oversight

• Earthquake warning network now covers West Coast

• Why open source adoption in federal IT is poised to accelerate

• Lawmakers seek new probe into AWS JEDI collusion

• Global Phishing Attacks Spawn Three New Malware Strains

• iPhone 13 Pro Max Dummy Model Depicts Smaller Notch

• Epic CEO Tim Sweeney Admits App Store’s 30% Cut Is Similar to Consoles, Would Have Accepted Special Deal With Apple

• ‘Millions’ of Dell PCs will grant malware, rogue users admin-level access if asked nicely

• Microsoft Highlighted ‘BadAlloc’ Memory Allocation Flaws In IoT Devices And Networks

• Feds seize fraud domain claiming to provide COVID-19 vaccine

• How to Stop the Popups

• Lawmakers look to revive collusion case against Amazon in JEDI

• Navy looks to business systems modernization to enhance performance, reduce costs

• Cloud adoption is accelerating, but cloud security might be an issue

• Expert: The cloud is more secure than on-prem, but the speed of adoption is making it less so

• Qualys Flags Gaping Security Holes in Exim Mail Server

• More Companies Adopting DevOps & Agile for Security

• Hundreds of Millions of Dell Computers Potentially Vulnerable to Attack

• Planning Our Passwordless Future

• CPDP 2021 – Moderator: Sophie Stalla-Bourdillon ‘Multi-Party Data Sharing And Data Subjects As Beneficiaries: How To Accelerate Accountable Data Sharing’

• A massive DDoS knocked offline Belgian government websites

• Former Apple Employee Responds to Lawsuit Accusing Him of Leaking Trade Secrets to Media

• Tile CEO: ‘We Welcome Competition From Apple, But We Think It Needs to Be Fair’

• Apple Seeds Second Beta of macOS Big Sur 11.4 to Developers

• Hunter Fan Company Expanding Lineup of HomeKit-Enabled Ceiling Fans

• Hands-On With Brydge’s 12.9-Inch iPad Pro Keyboard With Trackpad

• Algorithms improve how we protect our data

• ‘Millions’ of Dell PCs will grant malware, rogue users admin-level access if they ask nicely

• How Cryptocurrency and Cybercrime Trends Influence One Another

• They Told Their Therapists Everything. Hackers Leaked It All

• Alien Mobile Malware Evades Detection, Increases Targets

• 10 Exploits Cybersecurity Professionals are Concerned About

• Red Hat open-sources StackRox Kubernetes security product

• Intel To Invest $3.5bn To Expand New Mexico Factory

• Avaddon hackers steal SIM card data from Telstra service provider

• Defense Is Still the Best Offense: Why Continuous Vulnerability Management Is Essential

• SecureLink: 51% of organizations experienced a third-party data breach

• Pulse Secure VPNs Get a Fix for Critical Zero-Day Bugs

• The Wages of Password Re-use: Your Money or Your Life

• Fake Vaccine Domain Seized

• Can Organizations Secure Remote Workers for the Long Haul?

• Scripps Health Responds to Cyberattack

• The UNC2529 Triple Double: A Trifecta Phishing Campaign

• Joy Of Tech® ‘Apple, Spotify And The EU’

• Improve Security Effectiveness and Efficiency by Validating Security Tools

• Most of Exim email servers could be hacked by exploiting 21Nails flaws

• Synopsys Launches New Tool for Automated Application Security

• Enabling Hardware-enforced Stack Protection (cetcompat) in Chrome

• Spectre attacks come back from the dead

• TMF payback rules relaxed for cyber upgrades, pandemic response

• Best VPN in 2021: Expert reviews of the best VPN services

• Ransomware Hackers Target Popular Cloud Service Provider ‘Swiss Cloud’

• Philippines Solicitor-General’s Office Breached Data Was Public

• Sectigo Acquires SiteLock, Solidifying Its Market-Leading Position in Web Security

• New Advanced AlienApps for Fortinet

• Bridging the Cybersecurity frontier: SaaS

• Common Ways on how to Remove Your Personal Information from Google

• BrandPost: Achieving Consistent Security Policies Across the Entire Infrastructure

• BrandPost: Closing the Cyber Skills Gap with Fortinet’s Training Advancement Agenda (TAA)

• insider threat

• Hundreds of Millions of Dell Users at Risk from Kernel-Privilege Bugs

• Apple Fixes Zero‑Day Security Bugs Under Active Attack

• Facebook: Don’t expect full end-to-end encryption on Messenger until 2022 ‘at the earliest’

• Smart TVs in China Found to Be Spying on Their Owners

• Virgin Active SA Suffers Cyber-Attack

• XM Cyber Announces Integration with Palo Alto Network’s Cortex XSOAR

• Important Apple Updates, (Tue, May 4th)

• Three New Malware Families Found In Global Finance Phish

• 4,700 Amazon Employees Had Unauthorized Access To Private Seller Data

• Deepfake Attacks Are About To Surge, Experts Warn

• Dell Patches Vulnerable Driver For Over A Decade Of Products

• Cloud Security with Microsoft Project Freta

• How Cost Cutting on Cybersecurity Presents an Opportunity for Hackers

• Set Up Okta as Identity Provider on Mulesoft Anypoint Platform

• Fraudulent Apps that Automatically Charge you Money Spotted in Google Play

• Channel Account Manager Brearna Leopold on the Power of Seizing Every Opportunity

• Three new malware families found in global finance phishing campaign

• New Variant of Buer Malware Loader Written in Rust to Evade Detection

• High-Severity Dell Driver Vulnerabilities Impact Hundreds of Millions of Devices

• UK Cyber Security Association Officially Opens for Membership

• Third Parties Caused Data Breaches at 51% of Organizations

• Apple Releases Security Updates

• Hundreds of millions Of Dell PCs affected by CVE-2021-21551 flaws

• Compliance clarity with Red Hat Insights

• Chinese Military-Civil Fusion and Section 1260H: Congress Incorporates Defense Contributors

• Apple Hires Google AI Scientist Samy Bengio

• BadAlloc – Microsoft Warns of Multiple Vulnerabilities That Affects Wide Range of IoT & OT Devices

• Most Reliable Hosting Company Sites in April 2021

• Adopting Microsegmentation Into Your Zero Trust Model, Part 2

• Cybersecurity compliance startup Vanta raises $50M

• Sneakers, Gaming, Nvidia Cards: Retailers Can Stop Shopping Bots

• Apple hurries out fixes for WebKit zero-days

• It’s Time to Ditch Celebrity Cybersecurity

• Tesla Remotely Hacked from a Drone

• Phisher Errors Lower Entry Barriers for Wanna-be Phishers

• Expert Commentary – Ofcom Warn People Not to Trust Caller ID

• Expert Insights On Ransomware Task Force Report

• Experts Comments on World Password Day

• 92% Of Organisations Who Pay Ransoms Don’t Get All Their Data Back

• Threat Prevention 101: What You Need to Know to Keep Your Business Safe

• Scripps Health’s Network Hit by Ransomware Attack

• N3TW0RM Ransomware Gang Emerges In Israel

• Babuk Focuses On Data-Theft Extortion

• RM3 – Curiosities of the wildest banking malware

• Bill And Melinda Gates To Divorce

• Third-party ransomware risk is real, but Black Kite’s latest tool can help

• Patch issued to tackle critical security issues present in Dell driver software since 2009

• Bait Boost: Phishers Delivering Increasingly Convincing Lures

• SMS Malware that Imitates COVID Registration App Targets Indian Users

• Trend Micro Unveils New OT Endpoint Security Solution Made by TXOne

• Australia’s Proposed Curriculum Aims to Teach Five-Year-Olds About Online Privacy and Cybersecurity

• JupiterOne Secures $30 Million in Series-B Funding Round

• Okta Completes Acquisition of Auth0

• Deals: Get Apple’s AirPods Pro for $189.99 Today on Woot ($59 Off)

• Security Expert Re: Tesla Cars Hacked Remotely by Drone

• First Horizon Bank Accts Breached by “Unauthorized Party”, Millions Removed

• First Horizon Corporation Affected by A Data Breach With Clients Funds Stolen

• Security Researcher Released PoC Exploit for High-severity Vulnerability in Microsoft Exchange

• Cybersecurity firm offering new way to detect malware attracts investors

• Expert Interview: How to Secure Critical Infrastructure With Operational Technology

• This malware has been rewritten in the Rust programming language to make it harder to spot

• Acronis banks $250M in funds to grow portfolio, partners

• Acronis Raises $250 Million at $2.5 Billion Valuation

• Apple products hit by fourfecta of zero-day exploits – patch now!

• Tesla Car Hacked Remotely by Drone Via Zero-Click Exploit

• UNICC and Group-IB Shut Down 134 Scam Websites In a Major Crackdown

• How Should the Service Desk Reset Passwords?

• New Pingback Malware Using ICMP Tunneling to Evade C&C Detection

• New Research Reveals 60% of Respondents Have Increased Security Concerns Since Adopting Cloud Native Computing

• AirTag Owners Bemoan Inability to Let Others Track Their Items Via Family Sharing

• Expert Insight On Buer Malware Rewritten in Rust

• Why Software Supply Chain Attacks Are Inevitable and What You Must Do to Protect Your Applications

• The Key to Cybersecurity is an Educated Workforce

• Critical IP Address Validation Vulnerability Also Affects Python Projects

• Why Duo Security Is a Great Place To Work

• The 2021 Two-Factor Evaluation Guide Is Here!

• 4 Best Practices for Attack Surface Management

• Keeping Excess Out of Access

• OneTrust acquires Shared Assessments to standardize third-party risk management

• Aryaka gains SASE features with Secucloud acquisition

• JupiterOne nabs $30M to help companies manage cybersecurity data

• Data backup company Acronis secures $250M to expand datacenter footprint

• This ambitious Microsoft project aims to fix cloud computing security

• State-Sponsored Successor to “Project Signal” Ransomware Campaign Discovered

• Scripps Health Knocked Offline by Ransomware

• Acronis, the global leader in cyber protection, receives more than $250M investment at a $2.5B valuation

• Breached Online Ordering Platforms Expose Hundreds Of Restaurants

• New community to gives cybersecurity leaders outside the Fortune 2000 a forum to collaborate

• Verizon Sells Internet Icons AOL, Yahoo

• The Developer’s Guide to Relationship-based Access Control

• Don’t Make Headlines Over an Insider Incident: Lessons From the Frontlines

• Enhance Application Security with Nutanix Flow and Check Point CloudGuard

• Microsoft’s new open-source tool could stop your AI from getting hacked

• Suspected Iranian Ransomware Group Targets Israeli Firms

• Pulse Secure Patches Critical Zero-Day Flaw

• Apple Fixes Zero-Day Flaws in Unscheduled iOS Update – Here’s How to Patch

• Then a Hacker Began Posting Patients’ Deepest Secrets Online

• FBI is probably patching your system for you without your consent

• 8 top identity and access management tools

• CSO50 2021 awards showcase world-class security strategies

• 5 key qualities of successful CISOs, and how to develop them

• BT Half Price Fibre Broadband For Low Income Households

• Breaking Up With Legacy Security Solutions Can Create Peace Between Security and DevOps

• Quick Hits

• FCW Insider: May 4, 2021

• Problems installing iOS 14.5.1? Here’s what you need to know

• Group-IB revealed a distributed network of fraudulent sites imitating WHO

• City of Toronto Hit by a Potential Cyber Breach

• OpenBullet Exploited for Credential Stuffing

• AirTag Removable Battery Sparks Child Safety Concerns

• iPad Shipments to Stay Stable in Second Quarter Despite Chip Shortages

• Apple fixes four zero-days under attack

• CSO Hall of Fame honorees

• Apple Developing Foldable iPhone For 2023 – Report

• Apple Privacy Update And Advertisers | Avast

• ATT&CK v9 Introduces Containers, Google Workspace

Generated on 2021-05-09 23:59:06.221699