IT Security News Weekly Summary – Week 19

• IT Security News Daily Summary 2022-05-15

• Car hack attacks: It’s about data theft, not demolition

• How to spot the signs of a virtual kidnap scam

• May 08 – May 14 Ukraine – Russia the silent cyber conflict

• Nearly 15 Million People Impacted by ElasticSearch Misconfiguration

• Praetorian Named to Inc. Magazine’s Best Workplaces List 2022

• How Education Decreases the Fear of Terrorism

• Security Affairs newsletter Round 365 by Pierluigi Paganini

• Ukraine CERT-UA warns of new attacks launched by Russia-linked Armageddon APT

• Sysrv-K, a new variant of the Sysrv botnet includes new exploits

• Does Best Buy tackle crime differently from Apple? I had to ask

• Why Access Control Is Critical in The Path to Cyber Insurance Readiness

• Week in review: F5 BIG-IP RCE exploitation, URL spoofing flaws in Zoom, Google Docs

• HP Fixes UEFI Flaws Affecting 200+ Computers

• Singapore launches safety rating scheme for e-commerce sites

• Ana Pinczuk Appointed to SentinelOne Board of Directors

• Weekly Update 295

• Komodor raises $42 million to build a continuous reliability platform for Kubernetes

• Willyama Services launches a new cybersecurity subsidiary

• Votiro completes SOC 2 Type II compliance for Votiro Cloud

• Sigma Computing appoints Brian Murphy as CRO

• IT Security News Daily Summary 2022-05-14

• Women in cybersecurity: Shattering the myths, once and for all

• Telegram is Selling the Eternity Malware Kit, Which Offers Malicious Services

• Hired ‘Hackers’ Try, and Fail, to Invade Brazil Vote System

• The LEGION collective calls to action to attack the final of the Eurovision song contest

• SideWinder Launched Nearly 1000 Assaults in Two Years

• Motorola Solutions Reports First-Quarter 2022 Financial Results

• Sysrv botnet Attack Windows, Linux Servers with New Exploits – Microsoft

• Texas Users Can Now Sue Facebook For Allegedly Censoring Their Content

• How to Turn a Coke Can Into an Eavesdropping Device

• OpRussia update: Anonymous breached other organizations

• The NSA Swears It Has ‘No Backdoors’ in Next-Gen Encryption

• Pro-Russian hacktivists target Italy government websites

• Ukrainian Imprisoned for Stealing Thousands of Login Credentials Per Week & Selling

• Get Lifetime Access to 2022 Cybersecurity Certification Prep Courses @ 95% Off

• Show off your NFT on Instagram

• FBI, CISA, and NSA Warns of Cyberattacks Targeting MSPs

• On Microsoft Exchange Servers, a New IceApple Exploit Toolkit was Launched

• SonicWall Releases Patches for New Flaws Affecting SSLVPN SMA1000 Devices

• Google Created ‘Open Source Maintenance Crew’ to Help Secure Critical Projects

• CynergisTek Will Host Conference Call on Monday, May 16, 2022, to Discuss First-Quarter 2022 Financial Results

• Ingram Micro Cloud Expands Availability of Bitdefender Solutions in Cloud Marketplace

• Cyber Agencies: Beware of State Actors Levelling up Attacks on Managed Service Providers

• CISA Temporarily Removes CVE-2022-26925 from Known Exploited Vulnerability Catalog

• Verimatrix Key Shield enhancements reduce SoftPOS security deployments

• Paragon Cheats – 188,089 breached accounts

• CISA Temporarily Removes CVE-2022-26925 from Known Exploited Vulnerability Catalog

• Push Technology Diffusion 6.8 allows organizations to shorten development timelines

• He sold cracked passwords for a living – now he’s serving 4 years in prison

• Intelligent Waves and Horizon3.ai join forces to provide security for DoD mission support

• Shopping for malware: $260 gets you a password stealer. $90 for a crypto-miner…

• Elastic expands partnership with Microsoft to simplify cloud operations for joint customers

• Motorola Solutions acquires Videotec to expand its portfolio of video security solutions

• Steve Fernandez joins Juniper Networks Board of Directors

• Options appoints Shaun Jackson as CCO

• Ukrainian crook jailed in US for selling thousands of stolen login credentials

• Connecticut expands mobility assistance pilot for the blind

• Multiagency system tracks student progress from pre-K through employment

• IT Security News Daily Summary 2022-05-13

• GSA’s new thinking for evaluating Polaris bids

• Understanding Data Sources and File Formats

• SonicWall urges customers to fix SMA 1000 vulnerabilities

• Citrix exec explains why orgs are using DaaS to secure hybrid workspaces

• White House joins OpenSSF and the Linux Foundation in securing open-source software

• Black Hat Asia: Democracy’s Survival Depends on Taming Technology

• CISO Shares Top Strategies to Communicate Security’s Value to the Biz

• US Agrees to International Electronic Cybercrime Evidence Swap

• Another ex-eBay exec admits cyberstalking web souk critics

• The Army’s plan for tactical cloud computing

• House Dems urge social media networks not to delete evidence of possible Russian war crimes in Ukraine

• How broadband investments can reduce food deserts

• Top 5 things about zero-trust security that you need to know

• US Sentence Ukrainian to 4 Years for Brute-forcing and Selling Login Credentials

• How to spot and avoid a phishing attack – Week in security with Tony Anscombe

• Cylance vs CrowdStrike: EDR software comparison

• Geofence Warrants and Reverse Keyword Warrants are So Invasive, Even Big Tech Wants to Ban Them

• Citrix exec explains why orgs are using DaaS to secure hybrid workspaces: Q&A

• The missing link in the cybersecurity market

• Linux, OpenSSF Champion Plan to Improve Open Source Security

• Anatomy of a Security Update

• Red Hat Enterprise Linux 9: Security baked in

• Android and Chrome to Generate Virtual Cards to Keep Payment Information Safe

• 9 Questions You Should Ask About Your Cloud Security

• GE Current and Others Select ioXt to Secure Their Network Lighting Controllers

• Horizon3.ai Named a Leading Security Visionary in EMA’s Premier Vendor Vision Report Created for the 2022 RSA Conference

• Socure Names Security Veteran Chad Kalmes as Chief Information Security Officer

• Android 13 promises more on Mobile Security and Privacy

• AI compounds discrimination against disabled

• Software patching must work like car safety recalls, says US cyber boss

• Iran-Linked OilRig APT Caught Using New Backdoor

• He cracked passwords for a living – now he’s serving 4 years in prison

• Log4Shell Exploit Threatens Enterprise Data Lakes, AI Poisoning

• Ransomware Operators Send Their Ransom Note To The Victim’s Printer

• Threat Actors Use Telegram To Spread Eternity Malware-As-A-Service

• EU Governments, Lawmakers Agree On Tougher Cybersecurity Rules For Key Sectors

• German Firms Targeted by Malicious NPM Packages

• Texas Social Media Law Restored By US Appeals Court

• Start a new career in ethical hacking with these 18 training courses

• Hackers Can Make Siemens Building Automation Controllers ‘Unavailable for Days’

• Response to Philip Zelikow: Confiscating Russian Assets and the Law

• What’s the safest way to permanently erase your laptop’s drive? [Ask ZDNet]

• These ransomware attackers sent their ransom note to the victim’s printer

• EU Agrees New Cybersecurity Legislation for Critical Services Organizations

• Zyxel fixed firewall unauthenticated remote command injection issue

• At Least 14 German Automakers Targeted by Malware Campaign

• Russia Dubbed as the “Centre” of European-wide Cyber-Attacks

• How much will it cost to secure open-source software? OpenSSF says $147.9M

• Most organizations hit by ransomware would pay up if hit again

• How to Avoid Falling Victim to PayOrGrief’s Next Rebrand

• Data Transformation: 3 Sessions to Attend at RSA 2022

• Business Email Security Contributes to Business Stability

• devOcean Emerges From Stealth With Cloud-Native Security Operations Platform

• How to Fight Foreign Hackers With Civil Litigation

• ‘Peacetime in cyberspace is a chaotic environment’ says senior US advisor

• China’s SMIC Warns Of Plummeting Smartphone, PC Demand

• Critical Vulnerability Allows Remote Hacking of Zyxel Firewalls

• “Eternity Project” Malware Leverages Telegram For Distribution

• Elon Musk Puts Twitter Takeover On Hold

• Bitter APT Hackers Uses Non-existent Email Account/Domain To Send Weaponized Emails

• Threat Actors Use Telegram to Spread ‘Eternity’ Malware-as-a-Service

• Google Created ‘Open-Source Maintenance Crew’ to Help Secure Critical Projects

• Cybercriminals Launch a New Malware-as-a-Service: the ‘Eternity Project’

• Iran-linked Cobalt Mirage extracts money, info from US orgs – report

• Just in time? Bosses are finally waking up to the cybersecurity threat

• Delete data! Here’s the safest way to permanently erase your laptop’s drive [Ask ZDNet]

• Critical flaw in Zyxel firewalls grants access to corporate networks (CVE-2022-30525)

• Microsoft: The Ransomware ware is Changing, Here’s What You Need to Know

• What’s a Parent to Do? Closing the Protection Gap between You and Your Children.

• Critical Vulnerabilities Provide Root Access to InHand Industrial Routers

• ‘IceApple’ Post-Exploitation Framework Created for Long-Running Operations

• How One Company Helps Keep Russia’s TV Propaganda Machine Online

• BPFdoor Has the Capacity to Bypass Firewalls

• Secure Your Migration to AWS, Part II: The Road to Success

• Ukrainian Sentenced to US Prison for Selling Hacked Credentials

• #CYBERUK22: Cyber Trends from the Russia-Ukraine War

• WordPress Websites Files and Databases Injected with Malicious JavaScript

• Organizations in Europe Targeted With New ‘Nerbian’ RAT

• Government’s “Whole of Society” Cyber Strategy Takes Shape

• The Countdown Has Started on Secure IoT Compliance

• Tips for Implementing HITRUST for Healthcare Providers

• Ukrainian Gets Four Years for Brute Forcing Thousands of Credentials

• Open Source Community Hands White House 10-Point Security Plan

• New Saitama backdoor Targeted Official from Jordan’s Foreign Ministry

• Security pros say their mental health has declined

• A 10-point plan to improve the security of open source software

• The state of mental health in the cybersecurity community

• Researchers find 134 flaws in the way Word, PDFs, handle scripts

• Iran-linked COBALT MIRAGE group uses ransomware in its operations

• Zyxel Releases Patch for Critical Firewall OS Command Injection Vulnerability

• Iranian hacking group caught spreading ransomware

• To predict the targets of Chinese malware, look at the target of Chinese laws

• Nokia starts a Cybersecurity Testing Lab for 5G Networks

• Sandstone CTO shares how to assess cyber risk in the cloud

• The SaaS-to-SaaS supply chain is a wild, wild mess

• New infosec products of the week: May 13, 2022

• To predict the target of new Chinese malware, look at the target of new Chinese laws

• Why are DDoS attacks so easy to launch and so hard to defend against?

• Anatomy of a campaign to inject JavaScript into compromised WordPress sites

• Top tech for enterprise identity governance and security

• 63% of cybersecurity pros say their stress levels have risen over the past year

• Nebulon enables 4-minute ransomware recovery on Lenovo ThinkSystem rack server edge deployments

• Keytos EZMonitor prevents breaches and SSL related outages

• Arctic Wolf Data Exploration allows organizations to centralize their security telemetry

• AwareGO Human Risk Assessment for SMEs improves cybersecurity awareness

• iDenfy introduces Business Verification platform to help customers detect bogus companies

• Codenotary adds vulnerability scanning to further secure open source supply chains

• Catalyst Award winner: Soraya Correa

• Government Eagle Award winner: Gundeep Ahluwalia

• Industry Eagle Award winner: Casey Coleman

• Federal officials caution employers on using AI in hiring

• Elastic partners with Tines to help customers respond to security threats

• Iranian APT Cobalt Mirage launching ransomware attacks

• Transforming SQL Queries Bypasses WAF Security

• Aiven Raises $210 million to build more sustainable applications in the cloud

• BalkanID raises $5.75 million and launches a solution to provide visibility into risky entitlements

• devOcean launches out of stealth and raises $6 million to lead cloud-native security operations

• Black Hat Asia: Firmware Supply-Chain Woes Plague Device Security

• Mike Sherwood joins Pondurance as VP of Sales

• Socure names Chad Kalmes as CISO

• CyberArk launches a $30 million investment fund to fuel innovation

• Transmit Security expands in Europe to address growing demand for passwordless authentication

• CoreStack hires Murli Mohan as MD – Sales for IMEA

• A Guide to Using VPNs on Your Smartphone

• Acquisition experts ask Congress to address decline in small business awards

• 10 reasons why we fall for scams

• How password fatigue can cost organizations time, money and mental energy

• Critical F5 BIG-IP Flaw Actively Exploited by Hackers

• How Imperva Data Security Fabric Reduces Splunk Ingestion Costs and Accelerates Incident Management

• California Law Enforcement Now Needs Approval for Military-Grade Surveillance Equipment. We’ll Be Watching.

• IT Security News Daily Summary 2022-05-12

• Google launches ‘open-source maintenance crew’

• Report: 44% decrease in average amount paid after ransomware attacks

• 3 Predictors of Cybersecurity Startup Success

• If you’ve got Intel inside, you probably need to get these security patches inside, too

• How to counter smart home device breaches

• CLOUD: A SHAKESPEAREAN DRAMA?

• Stories from the SOC – Command and Control

• Analysis on recent wiper attacks: examples and how wiper malware works

• Next CISO headache: Vendor cyber insurance

• Misconfigured ElasticSearch Servers Exposed 579 GB of Users’ Website Activity

• Google launches ‘open source maintenance crew’

• Maryland Governor Signs Bills to Strengthen Cybersecurity

• Egnyte Enhances Program for Managed Service Providers

• New Nerbian RAT spreads via malspam campaigns using COVID-19

• Heat island mapping program expands

• Costa Rica Declares Emergency in Ongoing Cyberattack

• 3 ways to apply security by design in the cloud

• Cloud Firm Appian Awarded $2B in Trade Secret Cyber-Theft Lawsuit

• StackHawk Raises $20.7 Million in Series B Funding for Developer-First Application and API Security Testing

• Former Facebook Content Moderator Accuses The Company Of Human Trafficking

• The Navy needs to do a better job finding the right job for its cyber specialists, officials say

• Ransomware: How executives should prepare given the current threat landscape

• How to build a cloud security strategy that sells

• Jail voting expands in Illinois

• BalkanID Raises $6M for Intelligent IGA Technology

• Vendors, governments make ransomware decryptors more common

• Surveillance by Driverless Car

• 21M Users’ Personal Data Exposed on Telegram

• Zero trust vs. zero-knowledge proof: What’s the difference?

• Costa Rica Declares National Emergency Following Conti Cyber-Attack

• Oklahoma City Indian Clinic Data Breach Affects 40,000 Individuals

• In a Blow to Free Speech, Texas’ Social Media Law Allowed to Proceed Pending Appeal

• Cryptocurrency Crash Continues As Ethereum, Luna Plummets

• ICE’s ‘surveillance dragnet’ built with DMV photos, report says

• Adobe Releases Security Updates for Multiple Products

• In a Blow to Free Speech, Texas’ Unconstitutional Social Media Law Allowed to Proceed Pending Appeal

• Nerbian RAT Malware Delivered Using Word Documents That Include Malicious Macro Code

• Ransomware cyber-attacks in Costa Rica and Peru drives national response

• Managed service contracts deserve extra cyber scrutiny, intel agencies advise

• Needs Improvement: Scoring Biden’s Cyber Executive Order

• Adobe Releases Security Updates for Multiple Products

• Analyzing the New Black Basta Ransomware

• Russia Pushes Law to Force Taxi Apps to Share Data With Spy Agency

• S3 Ep82: Bugs, bugs, bugs (and Colonial Pipeline again) [Podcast]

• Network Footprints of Gamaredon Group

• Duo Opens New Data Center in India

• Royal Mail Drones To Aid Postal Deliveries To Remote Locations

• Vodafone In Merger Talks With Three UK – Report

• Virtual credit cards coming to Chrome: What you need to know

• Team Cymru’s New Attack Surface Management Solution to Transform the Way Organizations Manage Digital Business Risk

• Serious Security: Learning from curl’s latest bug update

• Ransomware The Final Nail In Coffin For Small University

• APT Gang Sidewinder Goes On Two Year Attack Spree Across Asia

• Ukraine War: Don’t Underestimate Russia Cyber Threat, Warns US

• Novel Nerbian Trojan Uses Advanced Anti-Detection Tricks

• Turmoil In Crypto Market As Stablecoin Tether Breaks Dollar Peg

• The Chatter Podcast: The Art of the Security State with Trevor Paglen

• A Legal Approach to the Transfer of Russian Assets to Rebuild Ukraine

• Al-Qahtani Repatriated to Saudi Arabia Following Judge’s Grant of His Motion for a Mixed Medical Commission

• How Imperva DSF Reduces Splunk Ingestion Costs and Accelerates Incident Management

• Clearview AI banned from selling facial recognition data in the US

• Citrix App Protection helps secure remote workers

• NDR vs. Open XDR – What’s the difference?

• XDR: Separating Truth from “We Do That Too”

• How the evolution of ransomware has changed the threat landscape

• Apple No Longer The Most Valuable Company In World

• The stakes ‘could not be any higher’: CISA chief talks about the tech challenges ahead

• Size of Early Stage Cyber Deals Continues to Surge: DataTribe

• What Is RMM Software?

• Ransomware the final nail in coffin for small university

• Dark Web: 31,000 FTSE 100 Logins

• Cyber Threat alert as Russian App as it sends data to Moscow

• 62% of Surveyed Organizations Hit By Supply Chain Attacks in 2021

• Malware Builder Leverages Discord Webhooks

• Iranian Cyberspy Group Launching Ransomware Attacks Against US

• Application Security Firm StackHawk Bags $20.7 Million in Series B Funding

• Known macOS Vulnerabilities Led Researcher to Root Out New Flaws

• How Can Your Business Defend Itself Against Fraud-as-a-Service?

• E.U. Proposes New Rules for Tech Companies to Combat Online Child Sexual Abuse

• Iranian Hackers Leveraging BitLocker and DiskCryptor in Ransomware Attacks

• Massive hacking campaign compromised thousands of WordPress websites

• British Man Charged With Hacking US Bank Computers

• Lincoln College To Close Permanently After Cyberattack – 5 Cyber Experts Comment

• PII Of 21M SuperVPN, GeckoVPN Users Leaked On Telegram

• FBI, CISA, And NSA Warn Of Hackers Increasingly Targeting MSPs

• Man accused of stealing funds from banking firms through fraud

• Top VPN Scams Revealed – Here’s What to Look Out for in 2022

• Zero Trust Firm Xage Security Adds $6 Million ‘Top-up’ to $30 Million Series B Funding

• 5 Years That Altered the Ransomware Landscape

• EU Proposes New Rules for Tech Companies to Combat Online Child Sexual Abuse

• Expert Reaction On Cyber Threats Five Years On From WannaCry

• Cyberattacks on SATCOM networks attributed to Russian threat actors

• How to Write YARA Rules That Minimize False Positives

• StackHawk raises $20.7M for dynamic app testing platform

• Nokia Opens Cybersecurity Testing Lab

• The Hidden Race to Protect the US Bioeconomy From Hacker Threats

• F5 BIG-IP vulnerability is now being used to disable servers

• Government Surveillance Commissioner Warns Of Chinese-made CCTV – Report

• You Can Join the (ISC)² Board of Directors

• The real exchange rate between crypto and freedom

• You Can’t Eliminate Cyberattacks, So Focus on Reducing the Blast Radius

• HP Patches UEFI Vulnerabilities Affecting Over 200 Computers

• On Air With Dark Reading News Desk at Black Hat Asia 2022

• Red TIM Research (RTR) founds 2 bugs affecting F5 Traffix SDC

• South Asian Governments Targeted by Bitter APT Group

• Google Unveils Smartphone, Watch, Tablet, Glasses At I/O Conference

• Life Behind the Screens of Parents, Tweens, and Teens: McAfee’s Connected Family Study

• Hundreds of Thousands of Konica Printers Vulnerable to Hacking via ​​Physical Access

• DEA Investigating Breach of Law Enforcement Data Portal

• The Case for War Crimes Charges Against Russia’s Sandworm Hackers

• Nerbian RAT Malware, New Threat on The Market

• Next Generation Harmony Mobile Introduces the Industry’s First Malicious File Protection

• Novel ‘Nerbian’ Trojan Uses Advanced Anti-Detection Tricks

• Prepare for What You Wish For: More CISOs on Boards

• 9 questions you should ask about your cloud security

• Intel Patches High-Severity Vulnerabilities in BIOS, Boot Guard

• Thousands of WordPress Sites Hacked to Redirect Visitors to Scam Sites

• Five Eyes agencies warn of attacks on MSPs

• Hackers Are Going After Managed Security Providers

• College closes down after ransomware attack

• Government Initiative Promises Rapid Blocking of Scam Sites

• NCSC launches free email security check

• Hands-Free Bluetooth Technologies and the Cell Phone Regulation

• Quarter of Security Pros Say Mental Health Has Worsened

• Trustpilot Forced to Delete Millions of Fake Reviews in 2021

• Five Eyes urges organisations to secure supply chains

• Requiem for the iPod – Intego Mac Podcast Episode 239

• Android and Chrome Users Can Soon Generate Virtual Credit Cards to Protect Real Ones

• Secure your CMS-based websites against pervasive attacks

• APT gang ‘Sidewinder’ goes on two-year attack spree across Asia

• New Phishing-as-a-Service Toolkit Discovered

• What Is All The Hype Around NFTs?

• Everything We Learned From the LAPSUS$ Attacks

• Government Agencies Warn of Increase in Cyberattacks Targeting MSPs

• Europe proposes tackling child abuse by killing privacy, strong encryption

• It’s time to kick China off social media, says tech governance expert

• Hackers Deploy IceApple Exploitation Framework on Hacked MS Exchange Servers

• Critical Vulnerability in Azure Synapse Let Attackers Control other Customers’ Workspaces

• Beware of state actors stepping up attacks on managed service providers: Cyber agencies

• Ukraine war a sorting hat for cyber-governance loyalties: Black Hat founder Jeff Moss

• CISA Urges Organizations to Patch Actively Exploited F5 BIG-IP Vulnerability

• Two Ward 8 Small Businesses Raising Capital Through DC Rebuild Bond Program

• What is tokenization, what are the types of tokenization, and what are its benefits for eCommerce businesses?

• Shrinking healthcare cybersecurity gaps between hospitals and manufacturers

• Welcome “Frappo”: Resecurity Discovered a New Phishing-as-a-Service

• S4x22: ICS Security Creates the Future

• How to avoid headaches when publishing a CVE

• CIS Control 18 Penetration Testing

• Multi-Factor Authentication: A Key to Cyber Risk Insurance Coverage

• Critical F5 vulnerability under exploitation in the wild

• 10 best practices to reduce the probability of a material breach

• Cohesity FortKnox helps organizations combat sophisticated attacks and accelerate recovery

• ForgeRock Autonomous Access prevents identity-based cyber attacks and fraud

• Microsoft Patch Tuesday: Fixes for 0-Day and 74 Other Flaws Released

• Progress Chef Cloud Security improves security and compliance outcomes for customers

• Spirent’s new security automation package protects operators from potential security impacts

• Orca Security unveils Shift Left Security capabilities to prevent cloud application issues

• Nasuni Ransomware Protection defends critical business data against ransomware attacks

• Sonatype launches solution to remediate malicious and outdated InnerSource components

• Red Hat announces enhancements across its portfolio of open hybrid cloud solutions

• Platform9 enhancements improve developer productivity and simplify cloud-native operations

• How the evolution of Ransomware changed the threat landscape

• GitProtect.io releases Jira backup to bring data protection in the event of any failure or human error

• FalconStor partners with IBM to accelerate cloud migration for enterprises and MSPs

• Backdoor in public repository used new form of attack to target big firms

• Intel squeezes desktop Alder Lake CPUs into laptops with Core HX-series chips

• Google Maps “immersive view” is the ultimate graphics mode for Google Maps

• ICE Has Assembled a ‘Surveillance Dragnet’ with Facial Recognition and Data, Report Says

• The EU Commission’s New Proposal Would Undermine Encryption And Scan Our Messages

• Ivanti partners with Lookout to help organizations prevent threats in the new hybrid work landscape

• CREST and Hack The Box join forces to boost cyber security skills development

• Palo Alto Unveils Zero Trust 2.0, Says Current Solutions Inadequate

• Material Security raises $100 million to extend the product into new areas and expand internationally

• Concentric raises $14.5 million to autonomously secure business-critical data

• Transcend integrates with Zendesk to automate privacy requests by orchestrating customer data

• ThreatConnect hires Burney Barker as CRO

• Louise Bulman joins Claroty as General Manager of EMEA

• Sunday Security raises $4 million to elevate cyber-risk protection for executive teams

• U.S., allied cybersecurity agencies, advise reviewing contracts with tech vendors

• Why the USAF’s IT chief is ‘bullish’ on open source

• Data-driven decision-making: Easier said than done

• School bus Wi-Fi qualifies for E-Rate, FCC chair says

• eSentire launches e3 partner ecosystem to accelerate digital initiatives requiring modern security

• Unlimited Technology adds three security executives to its leadership team

• David Rushmer joins Blackpoint Cyber as Director of Threat Research

• Blackline Safety appoints Sean Stinson as CGO

• CISA adds CVE-2022-1388 flaw in F5 BIG-IP to its Known Exploited Vulnerabilities Catalog

• Five Eyes turn spotlight on MSPs: Potential weak links in IT supply-chain security

• IT Security News Daily Summary 2022-05-11

• Real win vs. privacy theater: Google’s new personal information removal policy

• How Radiflow helps CISOs secure operational technology environments

• PlainID Debuts Authorization-as-a-Service Platform

• ICE has assembled a ‘surveillance dragnet’ with facial recognition and data, report says

• Ready, IAM, Fire: How Weak IAM Makes You a Target

• Threat Actors Are Stealing Data Now to Decrypt When Quantum Computing Comes

• Going the Extra Mile: What It Takes to Be a Responsible Cyber Power

• US, allies warn of nation-state attacks against MSPs

• Android 13 Tries to Make Privacy and Security a No-Brainer

• Government agencies warn of increase in cyberattacks targeting MSPs

• I/O 2022: Android 13 security and privacy (and more!)

• EFF to Court: Fair Use is a Right Congress Cannot Cast Aside

• CISA, the NSA and the FBI warn about an increase in cyber attacks targeting MSPs

• Google I/O: New security features include virtual credit cards, account safety status

• Orca Security Unveils Context-Aware Shift Left Security to Identify and Prevent Cloud Application Security Issues Earlier

• Microsoft Simplifies Security Patching Process for Exchange Server

• Fraudulent ‘Bot-driven’ College Enrollment up 50%, New Study Finds

• Man Sentenced for Stealing from PayPal Accounts in Wire Fraud Scheme

• Taking on the Next Generation of Phishing Scams

• How to Disable Ad ID Tracking on iOS and Android, and Why You Should Do It Now

• Why you need to add a trust and safety officer to the leadership team

• British Man Charged With Hacking US Bank Computers, Stealing Millions

• Top 6 Security Threats Targeting Remote Workers

• Keeper Security Partners with SHI International for New Fully Managed IT Service (SHI Complete)

• NSA Warns Managed Service Providers Are Now Prime Targets for Cyberattacks

• Multiple Organizations Targeted by Conti Ransomware Worldwide

• MM.Finance, a DeFi platform, Had More Than $2 Million Stolen

• 6 Legal and Free Streaming Services to Consider in 2022

• Measuring the administrative burden of government programs

• Email Security Vendors Score Billion-Dollar Valuations

• MITRE ATT&CK and SIEM Rules: What Should Your Expectations Be?

• Quantum Ransomware Strikes Quickly, How to Prepare and Recover

• Breaking Down the Strengthening American Cybersecurity Act

• Concentric AI Raises Series A Funding Led by Ballistic Ventures to Autonomously Secure Business-Critical Data

• Microsoft Releases May 2022 Security Updates

• Google Releases Security Updates for Chrome

• Cybersecurity and resilience: board-level issues

• Biden Announces Discounted Internet For Low-Income Americans

• 21 Million Records of VPN Users Leaked on Telegram

• Lawmakers balk at possible service changes at launch site of VA’s new health record

• Material Security Reaches $1.1 Billion Valuation for ‘Zero Trust’ Security on Microsoft and Google Email

• Microsoft Releases May 2022 Security Updates

• Google Releases Security Updates for Chrome

• Help Employees and Consumers Avoid Self-inflicted Cybersecurity Mistakes

• Center for Threat-Informed Defense, Microsoft, and industry partners streamline MITRE ATT&CK® matrix evaluation for defenders

• Chrome 101 Update Patches High-Severity Vulnerabilities

• The Importance of Wellness for Security Teams

• Facebook Turns Off Augmented Reality Filters In Two States Over Privacy Concerns

• SpyCloud Report: Fortune 1000 Employees Pose Elevated Cyber Risk to Companies

• The EU Wants Big Tech to Scan Your Private Chats for Child Abuse

• CISA Adds One Known Exploited Vulnerability to Catalog

• Why the World Needs ZTNA 2.0

• UK National Cyber Security Centre launches Email Security Service

• How to delete your Twitter account and protect your data

• SaaS App Vanity URLs Can Be Spoofed for Phishing, Social Engineering

• CISA Adds One Known Exploited Vulnerability to Catalog

• Fresh Ransomware Samples Indicate REvil Is Back

• Actively Exploited Zero-Day Bug Patched By Microsoft

• Western Governments Accuse Russia Of Hacking US Satellite Internet Provider

• Russia Fails To Recover RuTube Access On Third Day Of Outage

• Lincoln College Shuts Permanently After Ransomware Attack

• Fake WHO Safety Emails on COVID-19 Dropping Nerbian RAT Across Europe

• How to Hash, Salt, and Verify Passwords in NodeJS, Python, Golang, and Java

• Ransomware Attack a Nail in the Coffin as Lincoln College Closes After 157 Years

• It’s a party! Cisco SecureX at RSAC and Cisco Live US 2022

• Update now! Microsoft releases patches, including one for actively exploited zero-day

• Intel announces new security as-a-service to deliver confidential computing

• Intel’s Project Amber provides security for confidential computing

• Cybersecurity has a desperate skills crisis. Rural America could have the answer

• How to delete yourself from internet search results and hide your identity online

• Most Brazilian companies don’t pay to get data back after ransomware attacks

• Ransomware is a national security threat, so please tell us about attacks, says government

• Fresh ransomware samples indicate REvil is back

• Five Eyes Nations Issue New Supply Chain Security Advisory

• ICE Is a Domestic Surveillance Agency

• Chip Shortage Sees BMW Deliver Cars Without Android Auto, Apple CarPlay

• Cohesity delivers a SaaS data isolation and recovery solution

• Opportunity out of crisis: Tapping the Great Resignation to close the cybersecurity skills gap

• The Danger of Online Data Brokers

• Cyber-Espionage Attack Drops Post-Exploit Malware Framework on Microsoft Exchange Servers

• Hackers are using tech services companies as a ‘launchpad’ for attacks on customers

• CISA adds actively exploited critical F5 BIG-IP bug to its must-patch list

• Cybersecurity has a desperate skills crisis: Rural American could have the answer

• Healthcare Technology Provider Omnicell Discloses Ransomware Attack

• Vanity URLs Could be Spoofed for Social Engineering Attacks

• Researchers uncover URL spoofing flaws on Zoom, Box, Google Docs

• NCSC Confirms Russia Responsible For Viasat Hack

• Concentric AI to autonomously secure business-critical data with $14.5M series A funding

• ServiceNow launches major new features for cloud IT service management

• Bitter APT Hackers Add Bangladesh to Their List of Targets in South Asia

• Why Its So Important For Organisations To Put Staff Welfare First When A Cyber-attack Strikes.

• British Man Charged In New York With Hacking Into Bank Computers, Stealing Millions

• Wannacry – 5 Years On, 68% Of Enterprises Are Still At Risk

• 31,000 FTSE 100 Logins Found On Dark Web

• A New Phishing-as-a-Service Toolkit Was Discovered

• Novel Phishing Trick Uses Weird Links to Bypass Spam Filters

• Intel Memory Bug Poses Risk for Hundreds of Products

• Protecting payments in an era of deepfakes and advanced AI

• Webinar Today: Managing IoT/OT Visibility, Protection and Monitoring in a Zero Trust Environment

• ICS Patch Tuesday: Siemens, Schneider Electric Address 43 Vulnerabilities

• Protecting Against Cyber Threats to Managed Service Providers and their Customers

• CISA Joins Partners to Release Advisory on Protecting MSPs and their Customers

• Ivanti and Lookout partner together to help organizations develop their zero trust security posture

• ForgeRock releases AI-driven anti-fraud solution

• Elon Musk says Russian efforts to jam Starlink are ‘ramping up’

• Africa Grapples With Way Forward on Cybercrime

• Protecting Against Cyber Threats to Managed Service Providers and their Customers

• CISA Joins Partners to Release Advisory on Protecting MSPs and their Customers

• New ransomware trends in 2022

• How Traffic Analysis Boosts Ecommerce Profits

• Progress launches Chef Cloud Security to extend DevSecOps to cloud-native assets

• Actively Exploited Zero-Day Bug Patched by Microsoft

• SAP Patches Spring4Shell Vulnerability in More Products

• Thousands of Top Websites See What You Type—Before You Hit Submit

• Next-Generation CMS: Why Advanced Content Management is the Key to Sustained Growth and Profitability

• April 2022’s Most Wanted Malware: A Shake Up in the Index but Emotet is Still on Top

• Ransomware Deals Deathblow to 157-year-old College

• Critical Vulnerability Exploited to ‘Destroy’ BIG-IP Appliances

• Apple To Discontinue The iPod

• Windows Print Spooler Vulnerabilities Increasingly Exploited in Attacks

• Novel Nerbian RAT Lurks Behind Faked COVID Safety Emails

• Researchers Warn of Nerbian RAT Targeting Entities in Italy, Spain, and the U.K

• Windows Print Spooler Exploit: the Path for Threat Actors to Perform 65,000 Cyberattacks

• 5 Key Learnings from Intel’s 2021 Product Security Report

• Defending Your Remote Workforce with Zero Trust Security

• Dell & Apple to Face Lawsuit After the Company Failed to Provide paid-for Services

• Ransomware in numbers: How 2,500 potential targets turns into one actual attack

• Microsoft: Ransomware Relies on the Gig Economy

• NCSC’s Free Email Security Check Spots Domain Issues

• CNI firms see cyberattack surge

• A Complete Guide to Desktop as a Service (DaaS)

• Elon Musk To Reverse ‘Stupid’ Twitter Ban Of Donald Trump

• Malicious NPM Packages Target German Companies in Supply Chain Attack

• How to blur your house on Google Maps and why you should do it now?

• Spain sacks spy chief over Pegasus scandal

• Canon printer owners: Be careful of bogus driver download sites

• Deep-Sea Phishing: How to defend against attacks

• Microsoft Fixes Three Zero-Days in May Patch Tuesday

• Yahoo Japan strives for universal passwordless authentication

• E.U. Blames Russia for Cyberattack on KA-SAT Satellite Network Operated by Viasat

• Which phishing scams are trending in 2022?

• EU condemns Russian cyber operations against Ukraine

• Microsoft Patch Tuesday updates for May 2022 fixes 3 zero-days, 1 under active attack

• Hackers try to cyber scam by posing Chief Executive of Lincoln College

• Ransomware attack shuts down a US College permanently

• Microsoft Releases Fix for New Zero-Day with May 2022 Patch Tuesday Updates

• Ransomware works fast, you need to be faster to counter it

• Adding Guardrails To A Cloud Account After The Fact

• An offensive mindset is crucial for effective cyber defense

• Sarah Fay Appointed Chair of Ziff Davis Board of Directors

• Lattice to Host Virtual Seminar on Cyber Resiliency for Firmware Protections and Supply Chain Security

• Cyber Security Leader guardDog.ai Wins CE Pro/Commercial Integrator 2022 Top New Technology (TNT) Award

• Endpoint security and remote work

• Is that health app safe to use? A new framework aims to provide an answer

• Google Drive emerges as top app for malware downloads

• Password reuse is rampant among Fortune 1000 employees

• Microsoft Patch Tuesday, May 2022 Edition

• HackerOne Attack Resistance Management increases customers’ cyber resilience

• SecureAge CatchPulse safeguards enterprises against complex security threats

• Download guide: Evaluating third-party security platforms

• Elon Musk plans to reverse Donald Trump’s permanent ban on Twitter

• Zerto enhances ransomware recovery capabilities to address a wide range of data protection issues

• Cloud Security Management by Deloitte helps organizations secure their cloud environments

• GlobalSign Ready S/MIME feature enables users to secure email certificates

• Sternum releases live attack simulation platform for IoT devices

• Onapsis Assess Baseline protects mission-critical SAP applications

• Five Eyes pin Russia for pre-Ukraine invasion attack on Viasat

• Microsoft closes Windows LSA hole under active attack

• Hackers Hit Web Hosting Provider Linked to Oregon Elections

• Druva partners with AWS to deliver cloud-first data protection across multiple applications

• Confronting Misinformation in the Age of Cheap Speech

• YL Ventures announces $400 million fund to boost Israeli cybersecurity innovation

• Abnormal Security raises $200 million to provide email security solutions for businesses

• What to Patch Now: Actively Exploited Windows Zero-Day Threatens Domain Controllers

• Susan Walker joins Jumio as CFO

• Email domain for NPM lib with 6m downloads a week grabbed by expert to make a point

• County completes 5-year telecom modernization

• How moving HR, finance to the cloud raised city efficiency, security

• GuidePoint Security University helps develop and advance cybersecurity skills

• Arctic Wolf launches a new research-focused division to help customers stay ahead of threat actors

• OpenSSF announces 15 new members to tackle supply chain security challenges

• Onapsis appoints Simon Naylor as VP, Asia Pacific

• US Pledges to Help Ukraine Keep the Internet and Lights On

• What Companies Can Do Now to Protect Digital Rights In A Post-Roe World

• IT Security News Daily Summary 2022-05-10

• Federal CIO talks customer experience

• Signals along ‘Smart Spines’ optimize traffic flow

• VERT Threat Alert: May 2022 Patch Tuesday Analysis

• US, Europe formally blame Russia for data wiper attacks against Ukraine, Viasat

• As important as bulletproof vests: Yubico sends 20,000 keys to Ukrainian government and energy agencies

• APT34 targets Jordan Government using new Saitama backdoor

• Senate bill to update 1960s-era cooperation rules wins support from leading state and local groups

• Docker Desktop for Linux finally arrives

• Hackers have carried out over 65,000 attacks through Windows’ Print Spooler exploit

• US, EU attribute Viasat hack to Russia

• Case study: Scaling DevSecOps at Comcast

• Cyber assistance ranks high on National Guard requested services, chief says

• What are some tips for storage of sensitive data?

• Hackers Are Now Exploiting Windows Event Logs

• AMD Gave Google Cloud Rare Access to Its Tech to Hunt Chip Flaws

• CISA Adds One Known Exploited Vulnerability to Catalog

• Microsoft patches Windows LSA spoofing zero-day under active attack (CVE-2022-26925)

• Security Above and Beyond CNAPPs

• It’s time for startups to get proactive and prioritize security

• Data collection featured in new bill targeting equity at FEMA

• Red Hat Enterprise Linux 9: Security baked in

• CISA Adds One Known Exploited Vulnerability to Catalog

• Reproductive Privacy Requires Data Privacy

• Caramel Credit Card Theft is Proliferating Day by Day

• Survey: 93% of Americans fear cyber warfare against U.S.

• Internet service essentially free for millions under new Biden program

• New Malware Samples Indicate Return of REvil Ransomware

• Patch Tuesday: Microsoft Warns of New Zero-Day Being Exploited

• Semiconductor Investments Won’t Pay Off If Congress Doesn’t Fix the Talent Bottleneck

• Personal details of 21M SuperVPN, GeckoVPN users leaked on Telegram

• Microsoft Azure Vulnerability Allowed Code Execution, Data Theft

• Lincoln College Set to Close After Crippling Cyberattack

• FirstNet, NIST launch immersive emergency response training lab

• Colonial Pipeline facing $1,000,000 fine for poor recovery plans

• Electric eels inspired the first battery two centuries ago and now point a way to future battery technologies

• Adobe Warns of ‘Critical’ Security Flaws in Enterprise Products

• Podcast Episode: The Philosopher King

• A Token of Thanks for a Brighter Future

• SoftServe Opens Delivery Center in Bucharest, Romania to Expand Regional Capabilities

• Consilio Announces Launch of Complete Enterprise to Drive Evolution for Legal Operations with Proven Technology and People Solutions

• What to look for in a vCISO as a service

• How and why you should secure APIs

• DevOps release process

• Spain’s Spy Chief Sacked Over Pegasus Scandal

• Cybercriminals Are Increasingly Exploiting Vulnerabilities in Windows Print Spooler

• Microsoft Releases Security Advisory for Azure Data Factory and Azure Synapse Pipelines

• U.S. Government Attributes Cyberattacks on SATCOM Networks to Russian State-Sponsored Malicious Cyber Actors

• Microsoft security experts outline next steps after compromise recovery

• Fake Crypto Giveaways Use Elon Musk Ark Invest Video to Steal Millions of Dollars

• South Korea Joins NATO’s Cyber Research Centre, Becomes First Asian Member

• Watch out for these signs to know whether your phone is hacked

• Ransomware has gone down because sanctions against Russia are making life harder for attackers

• Many security executives say they’re unprepared for the threats that lie ahead

• Credit card skimming services make it easy for low-level cybercriminals to join the game

• Onapsis Announces New Offering to Jumpstart Security for SAP Customers

• 5-Buck DCRat Malware Foretells a Worrying Cyber Future

• Arctic Wolf Launches Arctic Wolf Labs Focused on Security Operations Research and Intelligence Reporting

• Microsoft Releases Security Advisory for Azure Data Factory and Azure Synapse Pipelines

• U.S. Government Attributes Cyberattacks on SATCOM Networks to Russian State-Sponsored Malicious Cyber Actors

• Patch Tuesday

• Best Business Continuity Software in 2022

• Malware goes regional as attackers change tactics

• Microsoft: The ransomware world is changing, here’s what you need to know

• Microsoft fixed RCE flaw in a driver used by Azure Synapse and Data Factory

• More and More Companies Are Getting Hit with Ransomware [2021-2022]

• What Do Financial Institutions Need to Know About the SEC’s Proposed Cybersecurity Rules?

• Western Intelligence Blames Russia for Europe-Wide Cyber-Attack

• Mastering the New CISO Playbook

• Fostering a culture that normalizes mental health discussions

• The Business Case for Modernizing On-Premises and Cloud-Based Database Security

• IBM ‘Unsure’ How Long It Can Keep Paying Russian Staff

• This AI Can Generate Unique and Free Bored Ape NFTs

• Lincoln College Closed its Doors after 157 Due to Recent Cyber Attack

• New REvil Samples Indicate Ransomware Gang is Back After Months of Inactivity

• Mental Health Awareness Week: How Does Cybercrime Affect Victims’ Mental Wellbeing?

• Horizon3ai Publishes Root Cause Of CVE-2022-1388, F5’s BIG-IP iControl REST Endpoint Critical Vulnerability

• Client side scanning may cost more than it delivers

• Vulnerabilities That Allow Hijacking of Most Ransomware to Prevent File Encryption

• Meta Criticises ‘Clearly Flawed’ German Decision In Court

• Abnormal Security Raises $200 million to thwart phishing emails

• Red Hat Enterprise Linux 9 offers new solution to verify the integrity of OS’s

• Government hackers made hundreds of thousands of stolen credit cards ‘worthless’ to crooks

• Hackers Actively Exploit F5 BIG-IP Bug

• SANS 2022 Cloud Security Survey

• 2022 Cyber Defenders Playbook

• Webinar Optimizing Your Azure Sentinel Platform

• A Complete Guide to Modernizing Your Security Operations Center

• Email Security Firm Abnormal Security Raises $210 Million at $4 Billion Valuation

• YL Ventures Closes $400 Million Cybersecurity Investment Fund

• How to Check If Your F5 BIG-IP Device Is Vulnerable

• Experts Detail Saintstealer and Prynt Stealer Info-Stealing Malware Families

• What Does The Future Hold For Blockchain Within Third-Party Risk Management?

• Response To Queen’s Speech Data Reform Bill “Government And Business Must Approach Privacy And Innovation As Partners”

• Patch Tuesday May 2022 – Microsoft Pledges Fixes and Improvements for Azure Synapse Pipeline and Azure Data Factory

• DarkCrystal RAT Offers Many Capabilities for Very Low Price

• Managing Red Hat Enterprise Linux at the edge

• “Chemical attack” email warnings deliver Jester Stealer malware

• Conti Ransomware Attack Spurs State of Emergency in Costa Rica

• Technical Details, IoCs Available for Actively Exploited BIG-IP Vulnerability

• Spain’s Spy Chief Sacked Over Phone Hacking Scandal

• EU Blames Russia for Satellite Hack Ahead of Ukraine Invasion

• #CYBERUK22: Jeremy Fleming Argues Offensive Capabilities Required to Be Global Cyber Power

• Cisco Partner Story: Security Resilience is a Journey, Not a Destination

• Don’t Underestimate the DCRat Malware!

• Funding Round Values Cryptocurrency Exchange KuCoin At $10bn

• Crypto romance scams steal victims’ life savings

• Cloud computing security: New guidance aims to keep your data safe from cyberattacks and breaches

• Ransomware attack and COVID woes force this 150-year-old college to shut down

• India Demands VPNs, VPS, And Crypto Exchanges To Log User Data

• New malware attack stores payloads in the Windows event log

• QNAP Patches Critical Vulnerability in Network Surveillance Products

• Critical F5 BIG-IP Vulnerability Exploited by Hackers

• Examining the Black Basta Ransomware’s Infection Routine

• Former Meta Content Moderator Sues Company In Kenya

• Info-stealer Campaign targets German Car Dealerships and Manufacturers

• 7 Steps to Start Reducing Risk to Your Critical Infrastructure Quickly

• Microsoft Flexes Security Vendor Muscles With Managed Services

• Lincoln College to Close

• Sony Plans To Sell 18 Million PlayStation 5 Consoles This Year

• Scammer posed as cybersecurity chief in phishing email

• Microsoft Mitigates RCE Vulnerability Affecting Azure Synapse and Data Factory

• NCSC shut down 2.7 million scams in 2021

• Cyberattacks lead to US college closure

• A New Regulation Seeks to Secure Non-HIPAA Digital Health Apps

• Critical Infrastructure Firms See Cyber-Attacks Surge

• Research finds over 31,000 stolen credentials from the FTSE 100 on the Dark Web

• Tesla ‘Halts Most Production’ At Shanghai Plant

• UK Government Security Experts Take Down 2.7 Million Scams

• Researchers Find 31,000 FTSE 100 Logins on Dark Web

• U.S. Proposes $1 Million Fine on Colonial Pipeline for Safety Violations After Cyberattack

• Musk Lays Out Twitter Plans In Leaked Document

• Multiple QNAP Flaws Let attackers to Access and Read Sensitive Data

• Top 7 Speech-to-Text Apps for Students: Free and Paid

• Clearview AI agrees to restrict sales of facial recognition technology

• Threat actors are actively exploiting CVE-2022-1388 RCE in F5 BIG-IP

• Hacktivists hacked Russian TV schedules during Victory Day and displayed anti-war messages

• Exclusive: Welcome “Frappo” – Resecurity identified a new Phishing-as-a-Service

• Russian TV hacked on Victory Day Military Parade

• China to discard 50 million computers because of software security concerns from US tech war

• Critical Gems Takeover Bug Reported in RubyGems Package Manager

• Clearwater AI agrees to restrict sales of facial recognition technology

• Five Arctic Wolf Leaders Recognized by CRN as 2022 Women of the Channel

• Celebrating Service and Diversity – Nominate a Colleague Today!

• Analysis on recent wiper attacks: examples and how wiper malware works

• Next CISO headache: Vendor cyber insurance

• Threats to hardware security are growing

• Researchers discover hackers using SEO to rank malicious PDFs on search engines

• How to set up a powerful insider threat program

• Building a Strong Business Case for Security and Compliance

• Welcome “Frappo” – Resecurity identified a new Phishing-as-a-Service

• Industry pushes back against India’s data security breach reporting requirements

• Codenotary adds observability for Kubernetes and VMware environments

• ADVA OSA SoftSync brings PTP timing technology to server-hosted applications and virtual machines

• Low-rent RAT Worries Researchers

• Settlement Curbs Firm’s Facial Recognition Database in US

• How to Check if Your F5 BIG-IP Device Is Vulnerable

• Stellar Cyber collaborates with NGBPS LIMITED to bring Open XDR to India

• Avaya partners with Microsoft to help customers accelerate their cloud migration

• Kroll and Armis join forces to strengthen cyber resilience for critical systems

• Jocker, Other Fleeceware Surges Back Into Google Play

• What to Do If You Can’t Log In to Your Google Account

• Red Hat and Accenture expand partnership to drive innovation and IT modernization at scale

• NSA recognizes Codebreaker challenger winners in ceremony shedding light on cybersecurity careers

• Intellicheck appoints Jeffrey Ishmael as CFO

• Joker, Other Fleeceware Surges Back Into Google Play

• Relativity announces its SaaS platform is now available in Japan

• Carlos Torales Montero joins Cloudflare as VP, Head of Sales Latin America

• Biden signs cybercrime tracking bill into law

• Idaho maps out cybersecurity strategy

• IT Security News Daily Summary 2022-05-09

• EV infrastructure vulnerabilities put cars, the grid at risk

• Cryptocurrency hype spawns email attacks, FBI says

• Costa Rica Declares State of Emergency Under Sustained Conti Cyberattacks

• How lightweight encryption can protect critical infrastructure for smart cities

• Number ‘100’ And Scams

• Russian TV Schedules Hacked on Victory Day to Show Anti-War Messages

• EFF and Other Civil Society Organizations Issue Report on Danger to Digital Rights in Ola Bini Trial

• Getting Started with the Burp Suite: A Pentesting Tutorial

• 5 Tips to Protect Your Career Against a Narcissist

• It costs just $7 to rent DCRat to backdoor your network

• Senate bill to train acquisition workforce on AI gets House counterpart

• NFTs Emerge as the Next Enterprise Attack Vector

• Google, Apple, Microsoft to Soon Bring Passwordless Sign-Ins for Users

• How to remove yourself from Internet search results and hide your identity

• Meet Kessel Run’s newest chief of staff

• Measuring administrative burden

• ForgeRock vs Okta: Compare IAM software

• Hackers Replace Russian TV Schedules During ‘Victory Day’ With Anti-War Messages

• FBI: Rise in Business Email-based Attacks is a $43B Headache

• Kaspersky uncovers fileless malware inside Windows event logs

• U.S. Offers $15 Million Bounty for Leaders of Conti Ransomware Gang

• Victims of Horizon Actuarial data breach exceed 1M

• Deloitte Launches Expanded Cloud Security Management Platform

• What is the Importance of a Vulnerability Scan?

• US offers $10M bounty for Conti ransomware information

• Vulnerability mitigated in the third-party Data Connector used in Azure Synapse pipelines and Azure Data Factory (CVE-2022-29972)

• US offers $15m reward for information about Conti ransomware gang

• Stories from the SOC – Command and Control

• parameter tampering

• Facebook To Discontinue “Nearby Friends” And Other Location Tracking Features

• What on Earth Is the Fediverse?

• How China Is Rewriting the Norms of Human Rights

• Thomson Reuters to Review Human Rights Impact of its Data Collection for ICE

• Costa Rica declares ransomware emergency and Colonial Pipeline Cyber Attack fetches $1 Million penalty

• Caramel Skimmer – Credit Card Stealing Service Sells 2,000 USD For Lifetime Subscription

• Microsoft’s new cybersecurity service combines tech and human experts

• Common LinkedIn scams: Beware of phishing attacks and fake job offers

• RubyGems supply chain rip-and-replace bug fixed – check your logs!

• Agricultural Manufacturer AGCO Hit by Ransomware

• DCRat, only $5 for a fully working remote access trojan

• Update now! F5 BIG-IP vulnerability being actively exploited

• Costa Rica continues defence against sustained Conti ransomware attacks

• Podcast: The State of Secret Sprawl

• Bitcoin Falls To 22-Month Low As Stock Markets Tumble

• Colonial Pipeline Faces Nearly $1m Fine One Year After Ransomware Attack

• Ransomware Plows Through Farm Machinery Giant AGCO

• Small Drones Are Giving Ukraine An Unprecedented Edge

• Recovering from romance scams with Cindy Liebes: Lock and Code S03E10

• Apple Mail Now Blocks Email Trackers

• AT&T launches SASE with Cisco Meraki to enable security anywhere

• How to remove Google from your life

• Scammers Employ Instagram Stories to Target Users

• Panda Security leads the AV-Comparatives’ Performance Tests – again!

• Beware: This cheap and ‘homemade’ malware is surprisingly effective

• National Emergency Declared by Costa Rica Following Conti Cyberattacks

• New DOJ Team Focuses on Ransomware and Cryptocurrency Crime

• Ransomware plows through farm machinery giant AGCO

• FBI: $43 billion in losses are due to Business Email Compromise fraud between 2016 and 2021

• Regulator Proposes $1 Million Fine for Colonial Pipeline One Year After Cyberattack

• Security Stuff Happens: Where Do You Go From Here?

• Top Tips for Improving Browsing Speed

• Agricultural Equipment Maker Hit By Ransomware Attack

• How To Build A DevOps Strategy With APIs

• Microsoft launches cybersecurity services to help clients fight off ransomware and other attacks

• Microsoft Security Experts: Humans and automation to fight off cyber threats

• US Administration ‘Elevates Probe’ Into Kaspersky Lab

• What is cybersecurity? Definition, importance, threats and best practices

• Microsoft launches new managed service category

• Ransomware Attack Hits Production Facilities of Agricultural Equipment Giant AGCO

• Ransomware-as-a-service: Understanding the cybercrime gig economy and how to protect yourself

• Building a safer world together with our partners—introducing Microsoft Security Experts

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of May 2, 2022

• Experts Sound Alarm on DCRat Backdoor Being Sold on Russian Hacking Forums

• CERT-UA warns of malspam attacks distributing the Jester info stealer

• A special browser designed for online banking. Good idea, or not so much?

• Colonial Pipeline faces nearly $1m fine one year after ransomware attack

• Amazon Takes Legal Action Against Fake Review Brokers

• Hackers Hijacked Official Ferrari Subdomain to Host NFT Scam

• RubyGems Fixes Critical Gem Takeover Vulnerability

• Information Leading to the Arrest of Conti Ransomware Co-Conspirators to be Rewarded

• HOT CYBERSECURITY TECHNOLOGIES

• New Raspberry Robin Found Dropping Windows Malware

• Podcast: The State of the Secret Sprawl

• F5 BIG-IP in Attacker Crosshairs Following Disclosure of Critical Vulnerability

• What to Do If You Can’t Log In to Your Google Account

• Google takes steps to better protect Play Store customers

• EFF Warns Over Health App Data After Roe v Wade Report

• UK Tech Watchdog To Be Given Legal Powers

• $600 a week to wrap your car? It’s a scam

• Another Set of Joker Trojan-Laced Android Apps Resurfaces on Google Play Store

• Cybercrime: The Dangerous World of QR Codes

• Cyber attacks cause national emergency in Costa Rica

• Caramel Credit Card Theft Is Becoming Increasingly Popular

• A week in security (May 2 – 8)

• A scanning tool for open-sourced software packages? Yes, please!

• Understanding Russian Hacking Tactics to Power Up Security in the Energy Sector

• Gone Phishing: How Ransomware, Log4j, and Other Exploits Use Your Network to Catch the Big Fish

• China wants its youth to stop giving livestreamers money

• Treasury Sanctions Crypto Firm After North Korea’s $620m Heist

• US government offers up to $15m for Conti info

• Influencer Industry Must Be Regulated, Say MPs

• Bitcoin Falls 50 Percent From November High

• London Police Warn of Crypto Muggings – Report

• Experts developed exploits for CVE-2022-1388 RCE in F5 BIG-IP products

• Ferrari Subdomain was Seized over to Promote a Bogus Ferrari NFT Collection

• NIA Starts Probe into Malware Attacks on Social Media of Defense Personnels

• Ukrainian CERT Warns Citizens of a New Wave of Attacks Distributing Jester Malware

• Crypto mixer Blender sanctioned by US Treasury for involvement in $600m Ronin theft

• Attackers are attempting to exploit critical F5 BIG-IP RCE

• Experts uncovered a new wave of attacks conducted by Mustang Panda

• IKEA Canada becomes a victim of a large data breach

• Two Ransomware news headlines trending on Google

• Funding women-led cybersecurity startups: Where are we at?

• The role of streaming machine learning in encrypted traffic analysis

• 5 Potential Solutions to the Cybersecurity Talent Shortage

• The main security challenges when adopting cloud services

• Researchers Develop RCE Exploit for the Latest F5 BIG-IP Vulnerability

• U.S. Offering $10 Million Reward for Information on Conti Ransomware Hackers

• Data centers on steel wheels: Can we trust the safety of the railway infrastructure?

• Siren 12.1 provides organizations with 360 degrees data visibility capability

• AT&T launches SASE with Cisco Meraki to help protect businesses from malicious web-based threats

• Goldman fund manager reveals ‘massive’ opportunity in tech, says investors are missing 2 stocks

• Anonymous NB65 Claims Hack on Russian Payment Processor Qiwi

• IT Security News Weekly Summary – Week 18

• IT Security News Daily Summary 2022-05-08

• India’s ongoing outrage over Pegasus malware tells a bigger story about privacy law problems

• Conti ransomware claims to have hacked Peru MOF – Dirección General de Inteligencia (DIGIMIN)

• OpenSea Warns of Discord Channel Hack

• Russian Group Attack on Bulgarian Refugee Agency

• What is tokenization, what are the types of tokenization, and what are its benefits for eCommerce businesses?

• May 01 – May 07 Ukraine – Russia the silent cyber conflict

• New Ideas for Over-the-Horizon Counterterrorism in Afghanistan

• NIST published updated guidance for supply chain risks

• Misconfiguration Identified in Google Cloud Platform

• Google, Apple, and Microsoft step hand in hand into a passwordless future

• Google, Apple, and Microsoft walk hand-in-hand into a passwordless future

• Considering Replacing Your Endpoint Security Solution? 5 Questions Worth Asking

• US agricultural machinery manufacturer AGCO suffered a ransomware attack

• Google: Two Major Pixel Vulnerabilities Patched

• Anonymous Leaks 82 GB Police Data as Protest Against Australian Detention Centre

• Security Affairs newsletter Round 364 by Pierluigi Paganini

• Week in review: F5 BIG-IP flaw, critical bugs in Aruba and Avaya network switches, Patch Tuesday forecast

• US DoS offers a reward of up to $15M for info on Conti ransomware gang

• This New Raspberry Robin Worm Utilizes Windows Installer to Drop Malware

• Attackers Inject Fileless Malware Directly into Windows Event Logs

Generated on 2022-05-15 23:59:17.405674