IT Security News Weekly Summary – Week 29

• IT Security News Daily Summary 2021-07-25

• Threat actor offers Clubhouse secret database containing 3.8B phone numbers

• Robert M. Lee’s & Jeff Haas’ Little Bobby Comic – ‘WEEK 339’

• BSides Vancouver 2021 – Christian Miles’ ‘Attack Of The Graph: Visual Tools For Cyber Analysis’

• Fake Windows 11 installers infecting devices with adware, malware

• Four Things to Consider on the Future of AI-enabled Deterrence

• BSides Vancouver 2021 – Vigneshwar Sethuraman’s ‘A Study On Intrusion Detection Systems With A Practical Experiment On Snort’

• Security Evangelist or Zealot – Where to Draw the Line

• House panel advances slate of cybersecurity bills

• Acoustic: Solving a CyberDefenders PCAP SIP/RTP Challenge with R, Zeek, tshark (& friends)

• Discord CDN and API Exploits Drive Wave of Malware Detections

• THORChain Suffers Another Major Hack Totaling $8M

• Crooks target Kubernetes installs via Argo Workflows to deploy miners

• Beware!! Fake Windows 11 Installer Drop Malware on Your Computer

• Gurman: Face ID on the Mac Coming Within a ‘Couple of Years’

• LemonDuck Targets Windows and Linux Systems

• A tax loophole is helping bitcoin holders save tons of cash by avoiding federal taxes

• XCSSET MacOS malware targets Telegram, Google Chrome data and more

• Some of the [Many] Problems with Security Skills

• Wireshark 3.4.7 Released, (Sun, Jul 25th)

• Security Affairs newsletter Round 324

• Week in review: HiveNightmare on Windows 10, Kaseya obtains REvil decryptor

• Penetration testing

• Multilingual Cybersecurity Awareness Training adapted for your needs

• XCSSET, a MacOS malware, Targets Google Chrome and Telegram Software

• This Day in History 1933: IRC Was Founded

• Cybersecurity Professionals to Newcomers: Focus on Vendor-Neutral Certifications

• S&I releases AI building security management system built on Microsoft Azure

• Trustwave partners with CISA and joins CISCP to help strengthen U.S. cybersecurity resiliency

• DigitSec appoints Phil Lepanto as VP of customer success

• Ed Dubrovsky joins Qnext as Executive Cyber Advisor to the CEO and Board

• Datadog gets AWS Government Competency status

• Department of Energy expands its CyberForce program to include more cyber defense events

• IT Security News Daily Summary 2021-07-24

• XKCD ‘Immune Factory’

• BSides Vancouver 2021 – Marek Mikita’s ‘Sysmon Monitoring Different Way’

• macOS Malware Added New Weapons to Its Arsenal To Attack Google Chrome & Telegram

• Japanese computers hit by a wiper malware ahead of 2021 Tokyo Olympics

• CISSPs from Around The Globe: An Interview with Theresa Grafenstine

• BSides Vancouver 2021 – Rossilyne Tan’s & Danielle Cheng’s ‘Get Smart On Smart Tech!’

• Active Directory Certificate Services (ADCS – PKI) domain admin vulnerability, (Sat, Jul 24th)

• Wi-Fi Routers with Default Passwords are Vulnerable to Attacks

• Porn Showed Up on Legit News Sites Thanks to Internet Rot

• Porn Showed Upon on Legit News Sites Thanks to Internet Rot

• Fastest VPN deal: Get lifetime protection for 10 devices for only $25

• Top Stories: Hands-On With MagSafe Battery Pack, iPhone 13 Always-On Display?

• Why some investors are banking on a bitcoin IRA instead of Social Security

• Google Cloud, Partnered With Palo Alto Networks, Receives US Government Success Memo

• USD 50 Million Ransom Demanded from Saudi Aramco Over Leaked Data

• Hacker Employ Milanote App for Spreading Phishing Email

• Researchers Embedded Malware into an AI’s ‘Neurons’ and it Worked Scarily Well

• ‘Build’ or ‘Buy’ your own antivirus product

• Agent.Tesla Dropped via a .daa Image and Talking to Telegram, (Sat, Jul 24th)

• Weekly Update 253

• Bouncy Castle and the Impact of Cryptographic Vulnerabilities

• The work of the Runet was tested in the exercise of disconnection from the global network

• Developer-Led Code Security: Why False Positives Are Worse than False Negatives

• Girl Scouts Safeguards Data with BlackFog

• Obtaining password hashes of Windows systems with PetitPotam attack

• Security Information and Event Management (SIEM) – A Detailed Explanation

• Trustwave Government Solutions Joins the Cybersecurity and Infrastructure Security Agency (CISA) Cyber Information Sharing and Collaboration Program (CISCP)

• Be The Strongest Link In Your Organization’s Supply Chain

• Eclypsium Detects Severe Vulns in Accellion FTA Devices

• Protecting the hybrid workplace through Zero Trust security

• Week in security with Tony Anscombe

• 10 consejos esenciales de ciberseguridad para principiantes

• Entrust adds automated key lifecycle management for AWS customers

• Fraud Follows A Surge in Mobile Adoption

• Mind the Backdoor

• Nodle partners with ESTV to expand its reach into gaming and esports

• Inseego Wavemaker PRO 2000e delivers throughput and reliability for industrial IoT and enterprise networks

• Sophos acquires Braintrace to provide better security outcomes to their MDR customers

• Flashpoint collaborates with Cybermerc to enhance its threat intelligence solution

• AvosLocker enters the ransomware scene, asks for partners

• Appgate participates in the implementation of a Zero Trust Architecture Project with NCCoE

• Immuta expands its leadership team with two key hires

• Discord CDN and API Abuses Drive Wave of Malware Detections

• LastPass: Password Manager Review for 2021

• Redundancy for resilience: The importance of layered protection in the cloud

• EFF, ACLU Urge Appeals Court to Revive Challenge to Los Angeles’ Collection of Scooter Location Data

• IT Security News Daily Summary 2021-07-23

• Phishing attacks get smarter as targets struggle to keep up

• Everything New in the iOS 15 Maps App: Updated Details, AR Walking Directions, Globe View and More

• Warnings That Work: Combating Misinformation Without Deplatforming

• DOD rolls out AR/VR technology at 5G testbed

• Best practices to conduct a user access review

• What Will Cybersecurity Look Like Over the Next Five Years?

• The workforce and mission arguments for modernizing human capital management systems

• Detecting, blocking grid cyberattacks

• Open-source model finds best places for EV charging stations

• Army tests HPC climate model in Azure cloud

• DoD to employ 5G testbeds and AR/VR technology to inform training operations

• Even after Emotet takedown, Office docs deliver 43% of all malware downloads now

• Biden Administration Responds to Geopolitical Cyber Threats

• Combating Shadow IT: A Customer Uses DTEX for Cybersecurity & More

• Why Do Ransomware Attacks Keep Happening

• Data Brokers are the Problem

• A 16-year-old bug (CVE-2021-3438) in printer driver affects millions of printers worldwide

• XLoader, a $49 spyware that could target both Windows and macOS devices

• Boosting Morale During Tough Times Will Also Boost Your Security Resilience

• Senate NDAA pushes for more domestic production, increased cyber authorities

• Home and Office Routers are Targeted by Chinese State Hackers

• APT Gang Distributed Android Trojan via Syrian e-Government Platform

• DDoS Attacks Are Back, More Aggressive Than Ever

• Password-Stealing Windows Malware has been Discovered

• Review: Hyper’s $40 Magnetic Wireless Battery Pack Is a Worthy Competitor to Apple’s MagSafe Battery Pack

• Apple Explains How the Photos People Recognition Feature Has Improved in iOS 15

• 5 Steps to Improving Ransomware Resiliency

• BSides Vancouver 2021 – Vivek Ponnada’s ‘Is The Power Grid A Huge Cybersecurity Risk?’

• Estonian hacker Pavel Tsurkan pleads guilty for operating a proxy botnet.

• Deals: Apple Pencil 2 Drops to $103.99 on Verizon ($25 Off)

• Celebrating Duo’s 2021 Community Impact Award Winners

• Six Terms to Up Your IoT Vocabulary

• MacRumors Giveaway: Win Custom MacRumors-Themed AirPods From Electronic Finishing Solutions

• Busted! Fraud-as-a-Service gang that sold 2FA-proof phishing arrested

• CNA legal filings lift the curtain on a Phoenix CryptoLocker ransomware attack

• How DuckDuckGo makes money selling search, not privacy

• Exploiting Wi-Fi Stack on Tesla Model S

• Tencent Keen Security Lab joins GENIVI Alliance

• Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars

• Tencent Security Keen Lab: Experimental Security Assessment of Mercedes-Benz Cars

• Holes in Linux Kernel Could Pose Problems for Red Hat, Ubuntu, Other Distros

• Free Active Directory – 10 Users Free with JumpCloud

• People of JumpCloud | Abbie Rastatter

• The 25 most dangerous software vulnerabilities to watch out for

• US court gets UK Twitter hack suspect arrested in Spain

• Global Outage Disrupts the Services of Major Websites

• Apple Working on External Display With Built-In A13 Chip

• Actor Adrian Grenier explains why bitcoin is central to his plan to build a communal farm in Texas

• Implementing Controls Without Breaking Everything (Including the Bank)

• Windows Defender update caught removing zip, exe, source code files

• How AI Will Transform Data Security

• FIN7’s Liquor Lure Compromises Law Firm with Backdoor

• Threat Actors Target Kubernetes Clusters via Argo Workflows

• BSides Vancouver 2021 – Ruchi Gautam’s ‘Privacy Concerns In The Connected Car Ecosystem’

• Sigstore: An open answer to software supply chain trust and security

• Departing employees pose significant cloud security risks, report finds

• European Commission proposes changes to EU law to increase cryptocurrency transaction transparency

• CASE STUDY: Archroma: designing security into company processes with Edgescan

• Tokyo Olympics 2021 on Russian Cyber Attack Radar

• Microsoft Security Under Scrutiny After Recent Incidents

• App Store Classic ‘Jetpack Joyride’ Launches on Apple Arcade

• Gartner MQ for PAM regards One Identity as a Leader in 2021

• Now Available: Microsoft 365 Application for Duo Single Sign-On

• Cybersecurity: These are the most dangerous and most common software vulnerabilities to watch out for

• House Passes Several Critical Infrastructure Cybersecurity Bills

• Why implementing Zero Trust is more important than ever before

• Sharing Knowledge to Overcome Possible Future Enemies

• Q2 Ransom Payment Amounts Decline as Ransomware becomes a National Security Priority

• Critical Jira Flaw In Atlassian Could Lead To RCE

• Israel To Examine Whether Spyware Export Rules Should Be Tightened

• Kaseya Has Acquired The REvil Ransomware Decryption Key

• Researchers Find New Attack Vector Against Kubernetes Clusters

• Next iPad Mini Won’t Feature Mini-LED Display, Claims Display Analyst

• Deals: Shop Record Low Prices Across Apple’s Full MacBook Pro and MacBook Air Lineup (Up to $499 Off)

• Facebook Gaming Now Available to iOS Users Through Web App Due to App Store Policy

• Law Firm Campbell Disclosed Data Breach Following Ransomware Attack

• Systemd Vulnerability Could Risk Denial-of-Service Across Major Linux Systems

• Latest big data developments in the realm of data lakehouse

• Risk & Repeat: Vulnerability patching still falling short

• Deals: Get Apple’s MagSafe Charger for $29.99 on Woot ($9 Off)

• States weigh bans on ransomware payoffs

• Researchers find new attack vector against Kubernetes clusters via misconfigured Argo Workflows instances

• Dutch Police Arrest Alleged Member of ‘Fraud Family’ Cybercrime Gang

• TikTok fined €750,000 for Violating Children’s Privacy

• Nations come together to condemn China: APT31 and APT40

• Levashov Walks. Russian Spam King gets slap on the wrist

• EU takes aim at ransomware with plans to make Bitcoin traceable, prohibit anonymity

• GitHub boosts supply chain security for Go modules

• Microsoft warns over this unusual malware that targets Windows and Linux

• Over 80 US Municipalities’ Sensitive Information, Including Resident’s Personal Data, Left Vulnerable in Massive Data Breach

• Nasty Windows Printer Driver Vulnerability

• Commercial Location Data Used to Out Priest

• Apple Not Trying Hard Enough to Protect Users Against Surveillance, Researchers Say

• Five steps to password policy compliance

• Important News Websites Host Hardcore Porn After Vidme Domain Purchase

• Kaseya Managed to Obtain the Universal Decryptor After the REvil Ransomware Attack

• DNS Global Outage Affected Websites and Online Services

• Cyber Risk Management Firm Safe Security Raises $33 Million

• Hackers Exploit the COVID-19 Pandemic for Cyber Scams

• Managed Detection and Response in Q4 2020

• Uncovering Shenanigans in an IP Address Block via Hurricane Electric’s BGP Toolkit (II), (Fri, Jul 23rd)

• The Free Security Tools & Software You Can Use for Your Online Protection

• CNA’s Network Was Breached Via Fake Browser Update

• France’s Macron Changes Phone, After NSO Pegasus Report

• Netskope report finds cloud-delivered malware increased 68% in Q2

• Updated Kaseya ransomware attack FAQ: What we know now

• Manufactured Whistleblowing: Data Leaks as Subversion

• Ransomware: Kaseya says it has now got the REvil decryption key – and it works

• Kaseya Obtains Universal Decryptor for REvil Ransomware

• Nasty macOS Malware XCSSET Now Targets Google Chrome, Telegram Software

• Simplify VPN with Cisco Secure Managed Remote Access

• What Is An Identity and Access Management So-lution and How Can Businesses Benefit From It?

• New Windows Print Spooler Zero-Day Bug Triggers Remote Attacks

• Oil Firm Saudi Aramco Suffered Data Breach – Data Put For Sale On Dark Web

• MosaicLoader Malware Targets Users Looking For Pirated Software

• Saudi Aramco Confirms Data Breach After $50m Ransom Demand

• Estonian Botnet Operator Pleads Guilty in U.S. Court

• Industrial Cybersecurity Firm SynSaber Launches With $2.5M in Seed Funding

• Pulse Security Devices Identified with Malware: Alerts CISA

• New Windows and Linux Flaws: Provide Attackers Highest System Privileges

• Dutch Police Arrest Two Hackers Tied to “Fraud Family” Cybercrime Ring

• Wake up! Identify API Vulnerabilities Proactively, From Code Back to Production

• Hole blasted in Guntrader: UK firearms sales website’s CRM database breached, 111,000 users’ info spilled online

• Government To Compensate Victims Of Post Office Horizon Fiasco

• Kaseya says it has now got the REvil ransomware decryption key – and it works

• Are advertising unique IDs anonymous?

• Top 5 Best Dark Web Browser for Anonymous Web Browsing With Ultimate Privacy – 2021

• Kaseya obtained a universal decryptor for REvil ransomware attack

• iPhone 13 May Support 25W Fast Charge Power Adapter

• Kaseya obtains universal REvil decryptor

• Security and privacy laws, regulations, and compliance: The complete guide

• Top cybersecurity M&A deals for 2021

• Kaseya Obtains Universal Decryptor for Ransomware Attack Victims

• Meross Launches Modular Smart LED Floor Lamp With HomeKit Support

• Nomad Opens Pre-Orders for $35 Leather Cover for Apple’s MagSafe Battery Pack

• Instagram Introduces Sensitive Content Control | Avast

• Air Force taps Google Cloud for aircraft maintenance system

• Ransomware Payouts in Review. Highest Payments, Trends & Stats

• Red light for migrant smugglers speeding at up to 250 km/h

• Directives Issued After US Pipeline Ransomware Attack

• AirPods 3 Rumored to Launch Alongside iPhone 13 at Expected September Event

• Tech support scams subside somewhat, but Millennials and Gen Z think they’re bulletproof and suffer

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• Olympic Ticket Data Leaked, Says Japanese Government

• Understanding Certificate Policies and Practice Statements

• Threat Report Portugal: Q2 2021

• First Episode of ‘Ted Lasso’ Season 2 Debuts on Apple TV+

• Audi – 2,743,539 breached accounts

• Kaseya Ransomware Attack Update

• Cyber Attack on Transnet South Africa Shipping

• This Week in Security News – July 23, 2021

• More than half of all Aussies continue to encounter forms of cyber scams in 2021

• COVIDSafe feedback process changes as app moves into business as usual mode

• US Offers Bounty for Tips on State-Sponsored Cybercrime

• Akamai software update triggered a bug that took offline major sites

• New infosec products of the week: July 23, 2021

• Cloud WAF Helps To Stop Breaches Before they Happen

• 40% fell victim to a phishing attack in the past month

• BT tries to crack cyber crime, grabs stake in Safe Security

• Uber found to have interfered with privacy of over 1 million Australians

• User data privacy decisions can be easily manipulated

• Kaseya Gets Universal Decryptor to Help REvil Ransomware Victims

• Logging: A Deep Dive

• Government IT decision makers worried about security risks related to cloud migration

• Trending: 4,500+ Cyber Pros Enroll in Free (ISC)2 Ransomware Course in Less Than a Month in Order to Fortify Their Preparedness and Response Skills

• MWC Barcelona 2021 – Highlights from the biggest mobile trade show

• Manufacturers turning to zero trust to better secure their networks

• How prepared are organizations for the challenges of the changing SAP landscape

• Cloud WAF Helps that to Stop Breaches Before they Happen

• IoT ML and AI services to reach $3.6 billion in 2026

• Kuo: Mini-LED MacBook Air Coming in Mid-2022

• AnyVision OnPatrol: A tactical surveillance mobile app for law enforcement and military personnel

• ISC Stormcast For Friday, July 23rd, 2021 https://isc.sans.edu/podcastdetail.html?id=7598, (Fri, Jul 23rd)

• Sisense Extense Framework provides users access to actionable intelligence inside applications

• Dremio Cloud empowers self-service and interactive analytics on the data lake

• Straive Data Platform derives actionable insights out of unstructured datasets

• Cognito Flow offers online verification requirements for global business customers

• Council of Europe’s Actions Belie its Pledges to Involve Civil Society in Development of Cross Border Police Powers Treaty

• Kaseya obtains REvil decryptor, starts sharing it with afflicted customers

• Popular Wi‑Fi routers still using default passwords making them susceptible to attacks

• Ermetic’s governance capabilities allow organizations to enforce their own security standards

• GTT’s portal feature provides expanded visibility into network security and performance

• Ridge Security enhances web application testing in RidgeBot 3.5

• Never mind the trolls, Discord hosts ‘significant volumes of malware’ in its CDN

• API Abuse Is a Data Security Issue Here to Stay

• Most Falsehoods “Tend to Promote Conservative Positions”

• Innodisk launches 112-Layer 3D TLC SSDs with increased capacity

• Spectra Logic partners with StorMagic to deliver active archive repository for video surveillance

• SAFE Security raises $33M to help organizations improve risk analysis and prevent data breaches

• Audax Private Equity acquires Flashpoint to support its growth initiatives

• Equipping AI with emotional intelligence can improve outcomes

• 6 Steps to Using the LogRhythm API

• Top Highlights from Data Company Conference 2021

• Tara Wisniewski joins (ISC)² as EVP of advocacy, global markets and member engagement

• (ISC)² appoints Amy Eubanks as EVP of strategy and professional development

• Mitch Lowe invests in UseCrypt to offer privacy in the field of telecommunications

• Thriving in Chaos: How Cyber Resilience Works

• Apple Supplier Corning Releases New Gorilla Glass for Camera Lenses

• Apple to Pull ‘iDOS 2’ DOS Emulator From App Store

• Veeam reports 26% growth in Q2’2021 for its data protection solutions

• Two CSPs in APAC select Allot to provide cybersecurity services to their customers

• ClearDATA expands leadership team with two new appointments

• Kevin McCarty joins Kovrr Advisory Board

• Cyber-attacks really ramp up after Halloween – so why not start preparing now?

• A Government Practitioner’s Guide to Countering Online Foreign Covert Influence

• IT Security News Daily Summary 2021-07-22

• What we learned about accessibility by scanning more than 2 million federal .gov web pages

• FBI: Cybercriminals Eyeing Broadcast Disruption at Tokyo Olympics

• Teardown Shows Off What’s Inside Apple’s New MagSafe Battery Pack

• Lawmakers push for new defense supply chain strategy

• Critical Jira Flaw in Atlassian Could Lead to RCE

• Phish Swims Past Email Security With Milanote Pages

• Kaseya obtains universal decryptor key for recent REvil ransomware attacks

• The Kaseya Ransomware Nightmare Is Almost Over

• Rural water utilities vulnerable to cyberattacks

• Colorado requires accessibility to state, local government websites

• California funds broadband infrastructure expansion

• Rapid7 Acquires IntSights to Gain External Threat Intelligence

• WifiDemon – iPhone Wifi bug exposed devices to remote attacks

• VA to continue pause on Cerner deployment for six more months

• With billions available for public health, it’s time to rebuild

• Tabletop exercise tests election security

• Akamai has trouble and the internet hiccups again

• Akamai Software Update Triggers Internet Outages

• Kaseya obtained ransomware decryptor from ‘trusted third party’

• How to conduct security patch validation and verification

• Twitter Beta for iOS Gains ‘Sign in With Apple’ Option

• Apple Music’s Spatial Audio Feature Doesn’t Work With Built-In Speakers of iPhone XR, iPad, or iPad mini

• Bug Bounty and VDP Platform YesWeHack Raises $18.8 Million

• Apple Music App for Android Gains Spatial Audio and Lossless Quality

• Microsoft Edge 92 starts rolling out to mainstream users

• BSides Vancouver 2021 – Dolev Farhi’s ‘Damn GraphQL – Defending And Attacking APIs’

• XKCD ‘Pre-Pandemic Ketchup’

• How to Reduce Noise and Fix Alert Fatigue in Security Operations [With Examples]

• Pegasus Project investigation uncovers the reach and implications of NSO Group spyware

• BSides Vancouver 2021 – Chris Timmons’s ‘So You Cracked A Bunch Of Passwords. Now What?’

• Advancing an inclusive, diverse security industry

• Protecting more with Site Isolation

• How to protect your CAD data files with MIP and HALOCAD

• Microsoft has a workaround for ‘HiveNightmare’ flaw: Nuke your shadow copies from orbit

• Critical Oracle Weblogic Flaw Let Remote Attacker Take Control of The System

• My Journey from Intern to Principal Engineer

• Industrial Networks Exposed Through Cloud-Based Operational Tech

• Report: It’s Easy For Misinformation Groups To Avoid Detection On Facebook

• Oracle fixes critical RCE vulnerabilities in Weblogic Server

• Legal Tetris and the FBI’s ANOM Program

• 5 years for swatter who caused a man’s death for a Twitter handle

• Ofcom: Telecom Firms Must Do More To Help Struggling Customers

• Scammers offer streaming services, giveaways and a fake cyber currency to cash in on the Olympic Games

• Malicious NPM Package Stealing Users’ Passwords

• France Examines Cybersecurity Measures After Spyware Reports

• Why Understanding Cyber Criminals Behavior and Tools is Vital

• Lost in the Cloud: Akamai DNS Outage, (Thu, Jul 22nd)

• Team streamlines neural networks to be more adept at computing on encrypted data

• A guide to balancing external threats and insider risk

• API Security Weekly: Issue #143

• Securing the cloud while Windows burns: Microsoft pops CloudKnox in trolley

• British Hacker Arrested for 2020 Twitter Hack and Bitcoin Scam

• Biden to Convene Business Sector Leaders to Discuss Cybersecurity in August

• 7 Hot Cyber Threat Trends to Expect at Black Hat

• Multiple Major Websites Down Amid Akamai Outage

• When coin miners evolve, Part 1: Exposing LemonDuck and LemonCat, modern mining malware infrastructure

• Apple Issues Urgent iPhone Updates; None for Pegasus Zero-Day

• Apple Shares ‘Hello Sunshine’ Ad Highlighting Apple Watch Series 6 Health and Fitness Features

• Okta CEO on cybersecurity: Take an identity-centric approach

• Pegasus Spyware Hacks iPhones of Prominent Individuals

• How Can CCSP Certification Help Your Organization?

• MWC 2021: Three key Thales innovations at this year’s event

• Visa Continues Fintech Push With Currencycloud Acquisition

• Attacks on critical infrastructure are dangerous. Soon they could turn deadly, warn analysts

• Get a lifetime of data encryption for your company for just $60

• Swedish Crypto Scammer Jailed for 15 Years in Gold-Backed Fraud

• Comforte AG Announces New Partnership with ITKaa

• Group-IB helps Dutch police identify members of phishing developer gang Fraud Family

• Nasty Printer Driver Vulnerability

• Next-Generation iPad Mini Will Reportedly Feature a Mini-LED Display

• Most Common Remote Work Security Risks in 2021

• Respect in Security initiative aims to build reporting lines for infosec bods suffering harassment at work, conferences and online

• Atlassian Patches Critical Vulnerability in Jira Data Center Products

• S3 Ep42: Viruses, Nightmares, patches, rewards and scammers [Podcast]

• Spain and Serbia dismantle Serbian marijuana trafficking network

• NPM Package Steals Passwords Via Chrome’s Account Recovery Tool

• Saudi Aramco Denies Breach After Hackers Hawk Stolen Files

• 740 Ransomware Victims Named On Data Leak Sites In Q2 2021

• Long-Awaited Bill Would Force Breach Victims To Contact CISA

• NSO Will No Longer Talk To The Press About Damning Reports

• HBO’s Apple TV Channel Shuts Down Today, Forcing All Users to Migrate to HBO Max

• Tesla To Open Supercharger Network To Other EVs

• Systemd can’t seem to catch a break: New vulnerability found

• The ransomware risk management calculus is changing for OT, ICS and critical infrastructure

• How cyberattacks exploit known security vulnerabilities

• U.K. man arrested in connection with 2020 Twitter breach

• IoT Devices a Huge Risk to Enterprises

• Drupal Releases Security Updates

•  Cisco Releases Security Updates

• Apple security updates: iOS 14.7 fixes WiFiDemon flaw

• How to Secure Your Smart Home: A Step-by-Step Guide

• British man arrested in connection with Twitter mega-hack that posted cryptocurrency scam from celebrity accounts

• Windows “HiveNightmare” bug could expose system files to non-admin users

• Google Cloud Unveils New SOC, IDS Solutions

• CISO Stories Podcast: Protecting the Crown Jewels

• You’re Invited to AWS re:Inforce 2021

• Sony Offering PS5 Owners An Extended Six Month Free Trial of Apple TV+

• 740 ransomware victims named on data leak sites in Q2 2021: report

• Deals: Get Apple’s 2021 128GB 11-Inch iPad Pro for $749 on Amazon ($50 Off)

• Winners Announced for 14th Annual iPhone Photography Awards

• CARROT Weather Gains Weather Report Videos and Smart Layouts

• What Is the Principle of Least Privilege?

• Microsoft Adds Another Security Acquisition With CloudKnox

• An Explosive Spyware Report Shows the Limits of iOS Security

• Satechi Launches Trio of New GaN USB-C Wall Chargers

• 3 Ways CISOs Can Brief Executives on Cybersecurity IT Governance

• Decentralized identity authentication platform Magic raises $27M

• 1,000 GB of local government data exposed by Massachusetts software company

• Saudi Aramco denies breach after hackers hawk stolen files

• Microsoft Issues Windows 10 Workaround Fix for ‘SeriousSAM’ Bug

• China-Linked APT31 Abuses Hacked Routers in Attacks, France Warns

• CISA analyzed stealthy malware found on compromised Pulse Secure devices

• Millions of Windows machines affected by ancient printer vulnerability

• Updated XCSSET Malware Targets Telegram, Other Apps

• NSO Group: Blame The Customer, Not Us

• Cloud security in 2021: A business guide to essential tools and best practices

• 1,000 GB of local government data exposed exposed by Massachusetts software company

• iOS Security Update Patches Recently Disclosed Wi-Fi Vulnerability

• Beef up your ransomware defense with Cisco Secure Choice

• Five Key Takeaways from SASEDay 21

• Authlogics announces enhancements to its Password Security Management Product

• The Role of Culture in Compliance

• Top 7 Cybersecurity Strategies For Startup Businesses

• Do you want to start building your website? Here are 6 helpful tips.

• You don’t want to miss these 7 cybersecurity trends of 2021

• Comparis Disclosed Data Breach Following Ransomware Attack

• CISA Details Malware Used in Attacks Targeting Pulse Secure Devices

• Pegasus spyware has been here for years. We must stop ignoring it

• FCW Insider: July 22, 2021

• Quick Hits

• Apple and Tim Cook Celebrate 40 Years of Company’s Presence in Singapore

• Check Point Software Rewards Channel Excellence for Securing Migration to the Cloud

• Tips for Securing Your Industrial Control Systems with a Safer Operational Technology (OT) Environment

• Microsoft just published a workaround for this important Windows 10 flaw

• Is Your SecOps Solution Keeping Up?

• Safeguard Your Smartphones From Radio-based Attacks

• Cyber-Attack by Hackers Disrupt Iranian Railway System

• APT Hackers Distributed Android Trojan via Syrian e-Government Portal

• New Jira Vulnerability May Result in Critical Remote Code Execution

• Q2 2021 Cyber Attack Statistics

• Briton Arrested Over Twitter Hack Of Public Figures

• Reduce End-User Password Change Frustrations

• Prepare for the End of 3G Networks – Intego Mac Podcast Episode 197

• Avast Receives AV-Comparatives Approved Business Product Award | Avast

• Secure multiparty computation explained: Ensuring trust in untrustworthy environments

• Why you need to update your iPhone and iPad now

• Resellers List AirTag Accessory Color Options Not Yet Offered by Apple

• NPM Malware Poses a Threat to Passwords in Google Chrome

• A Stealthy Malware Found on Hacked Pulse Secure Devices

• Vishing attacks on the rise with newest campaign

• Apple releases iOS 14.7, watchOS 7.6, macOS 11.5, and more

• Pegasus: The Case of the Infamous Spyware

• Did you know a third of cybersecurity pros have experienced harassment?

• What Is a Botnet & How to Prevent Your PC From Being Enslaved

• XLoader Malware Now Upgraded to Target MacOS Systems

• Fighting new Ransomware Techniques with McAfee’s Latest Innovations

• Pegasus And Spyware | Avast

• Thales launches payment card with onboard fingerprint scanner

• Oracle Warns of Critical Remotely Exploitable Weblogic Server Flaws

• Malicious NPM Package Steals Chrome Browser Passwords By Abusing Legitimate Tool

• China bans children under 16 from appearing in live-streaming and online video content

• Lack of cyber in Australian supply chain resilience plan has IBM concerned

• Another Hacker Arrested for 2020 Twitter Hack and Massive Bitcoin Scam

• Securing UX in Open Banking Apps

• Twitter Spaces Will Soon Let You Manipulate the Sound of Your Voice

• Want to add antivirus to your existing portfolio?

• A Cure for a Disheartened Cybersecurity Professional

• How (and Why) Hacker Forums Self-Moderate

• Secure Your Images with AWS Lambda Serverless Functions

• China pushes back against Exchange attack sponsorship claims

• TicketClub Italy Database Offered in Dark Web

• Questions that help CISOs and boards have each other’s back

• Ransomware attack on Saudi Aramco leaks critical data

• Twitter Hack 2020 culprit arrested in Spain

• Telegram Pavel Durov says that since 2018 he knew about the potential surveillance of his phone

• Thousands of Humana customers have their medical data leaked online by threat actors

• Asset inventory management: What’s the ROI?

• Modi government accused of spying on critics and opponents using Pegasus spyware

• Financial services accounting for nearly 40% of all phishing URLs

• Elon Musk walks back his fossil fuel worries, says Tesla will likely start accepting bitcoin again

• Who is responsible for improving security in the software development environment?

• Igniting Passion for Diversity, Equity and Inclusion (DEI): Cybersecurity Professionals Address Challenges and Offer Tangible Advice for Weaving Inclusion into Our Industry

• How can predictive analysis unlock the potential of 5G?

• DDoS attacks are up, with ever-greater network impact

• NSO Group ‘will no longer be responding to inquiries’ about misuse of its software

• Agile adoption increasing within both IT and non-IT teams

• Heartless Attackers Stole Identities of Surfside Condo Collapse Victims

• Edge AI software market to expand significantly by 2030

• Skyflow PII Data Privacy Vault ensures regulatory compliance for sensitive data

• US senators warn China’s Digital Yuan could compromise Olympic athletes

• Singapore neglecting smart nation roots in COVID-19 fumble

• Biden to Meet Next Month With Private Sector on Cyber Issues

• ISC Stormcast For Thursday, July 22nd, 2021 https://isc.sans.edu/podcastdetail.html?id=7596, (Thu, Jul 22nd)

• XioGuard delivers visibility and response capabilities across the entire attack surface

• Wipro invests $1B in cloud transformation capabilities and launches Wipro FullStride Cloud Services

• 2021-07-21 – TA551 (Shathak) BazarLoader with Cobalt Strike

• Cybercriminals may target 2020 Tokyo Olympics, FBI warns

• Styra DAS extends OPA policy-as-code guardrails to public, private and hybrid cloud configurations

• Microchip Smart Storage adapters enable NVMe and 24G SAS connectivity and manageability

• Ping Identity adds its IAM solutions to the Department of Homeland Security CDM APL

• TP-Link expands Omada business line with two 10G switches and one transceiver

• Security and Restaurant Businesses: 5 Things to Remember in 2021

• What Does a Transparent and Secure Digital Workplace Look Like?

• Transcend: Cookie consent banners hurt rankings

• Microsoft doubles down on cybersecurity with CloudKnox acquisition

• Apple Releases Safari Technology Preview 128 With Bug Fixes and Performance Improvements

• Dialpad partners with Miro to enable the fluidity of work that surrounds remote meetings

• SIGNIUS and Cryptomathic launch qualified e-signature platform to a broad range of organizations

• Intel collaborates with Airtel to drive network development of 5G technology

• Scale Computing collaborates with IBM to help enterprises adopt an edge computing strategy

• Home and office routers come under attack by China state hackers, France warns

• Can federal funding fill gaps in rural cyber preparedness?

• Sysdig acquires Apolicy to help customers secure Infrastructure As Code and automate remediation

• Cybereason acquires empow to enhance its XDR features

• Unbound Security partners with HashiCorp to offer integrated encryption key management solution

• Extended Detection and Response (XDR) Needs a New Kill Chain

• No, You Don’t Need EDR

• US DoJ indicts four members of China-linked APT40 cyberespionage group

• The Top Five Habits of Cyber-Aware Employees

• UK national arrested in Spain after DOJ indictment for Twitter hack

• Open Systems appoints Tom Corn as CPO

• Hypori appoints Jim Cushman as President of Commercial Markets and CPO

• Unisys announces a four-year contract to improve data security and travel for the European Union

• Black & Veatch Management Consulting achieves accreditation as a RPO from CMMC-AB

• U.S. Patents and Trademark Office grants two patents for Bugcrowd’s proprietary systems and methods

• How to prevent chargeback fraud in your online business?

• Security Advisory Regarding HiveNightmare

• Cinq lectures dignes d’intérêt : L’hygiène des mots de passe – Le premier pas vers une meilleure sécurité

• 6 claves de Gartner contra el ransomware

• Cloudflare reaches final step before full FedRAMP authorization

• SAP unveils its financial results and increases revenue, profit outlook

• Chris Riley joins Avanan as VP of Enterprise Sales

• ionir announces Mike Wall as CEO

• Risk analysis for DEF CON 2021

• Supply Chain Disruption Cost Multinational Companies $4 Trillion Last Year. Don’t Let Lax Cybersecurity Be the Cause

• Venmo Takes Another Step Toward Privacy

• IT Security News Daily Summary 2021-07-21

• AI sifts through video data to spot fires

• TSA tightens cyber rules for pipelines

• ‘Blockchain light’ may help Army ensure data trustworthiness

• Japanese government official says Olympic ticket data leaked

• A Purposeful Mission and a Culture of Innovation Fuels Balbix

• Benefits of multi-factor authentication

• Infographic – 7 Common SSL/TLS Certificate Errors and How to Avoid Them

• Everything Cybereason at the Black Hat 2021 Virtual Conference

• Can JADC2 fly without budget reform?

• How MLOps can bring government’s AI visions to life

• How to activate Microsoft Defender Application Guard in Windows 10

• Google Cloud Introduces New Zero Trust Offerings for Government

• Serial Swatter Who Caused Death Gets Five Years in Prison

• PrintNightmare: How To Check If Your Systems Are Still Vulnerable

• Guntrader – 112,031 breached accounts

• Cheers to the Winners of EFF’s 13th Annual Cyberlaw Trivia Night

• Spanish cops cuff Brit bloke accused of playing role in 2020 celeb Twitter hijacking

• US House terminates deal with iConstituent after company waited days to raise ransomware alarm

• Patch now: Linux file system security hole, dubbed Sequoia, can take over systems

• Saudi Aramco Facing $50M Cyber Extortion Over Leaked Data

• Your Work Email Address is Your Work’s Email Address

• How to Install Apple’s Beta Firmware on AirPods Pro

• NSO Exploits Still Remain Mysterious: ZecOps Can Help You Fight Back

• Senate breach disclosure bill targets agencies, contractors, infrastructure

• Apple Security Under Scrutiny Amid Fallout from NSO Spyware Scandal

• U.S. FTC Commits to Fighting Against Unlawful Repair Restrictions

• Elon Musk says Tesla will likely start accepting bitcoin again

• Introducing Bounty Awards for Teams Mobile Applications Security Research

• Should we use AI in cybersecurity? Yes, but with caution and human help

• BSides Vancouver 2021 – Petr McAllister’s ‘How To Secure Microservices Without Traditional Firewall’

• Apple Confirms iOS 14.7 Fixes WiFi Bug and Many Other Vulnerabilities

• Twitter Testing Internal ‘Dislike’ Button for Tweet Replies

• New to GovCloud: Falcon Managed Detection and Response Transforms Government Security

• Defining Log Management: The Importance of Logging and Best Practices

• iOS Engineering Lead and Senior Manager Thibault Martin-Lagardette on Building a More Diverse Workforce (and Market-leading Products)

• What is a digital certificate?

• NPM Package Steals Passwords via Chrome’s Account-Recovery Tool

• France ANSSI agency warns of APT31 campaign against French organizations

• This Chat is Being Recorded: Egregor Ransomware Negotiations Uncovered

• Google Cloud Introduces Security Tools for the Public and Private Sectors

• Russian Cybercriminal Levashov Sentenced to Time Already Served

• Ransomware Attack on UK Rail System – Spray and Pray or Targeted?

• BSides Vancouver 2021 – Filipi Pires’ ‘Discovering C&C In Malicious PDF With Obfuscation, Encoding And Other Techniques’

• The Joy of Tech® ‘Facebook Is Killing People!’

• 22-Year-Old UK Citizen Arrested for 2020 Twitter Hack Affecting Apple

• The life and death of the ZeuS Trojan

• Indictments, Attribution Unlikely to Deter Chinese Hacking, Researchers Say

• New Cybersecurity Requirements for Pipeline Operators

• Work from Home is To Blame for Financial Services Cyberattacks

• Microsoft Acquires Cloud Security Start-up CloudKnox

• 2021 CWE Top 25 Most Dangerous Software Weaknesses

• Apple Releases macOS Big Sur 11.5 With Podcast App Updates and Bug Fixes

• Apple Releases iPadOS 14.7 With Apple Card Merging Option, Fix for 3.5mm Headphone Jack to USB-C Adapter Bug

• Why Current Botnet Takedown Jurisprudence Should Not Be Replicated

• The White House Responded to the Chinese Hacks of the Microsoft Exchange Servers This Week. Is It Enough?

• Google Cloud’s Intrusion Detection Service attempts to make security ‘invisible’ but cost will be the big giveaway

• Beyond Ransomware: Four Threats Facing Companies Today

• What is Anomaly Detection in Cybersecurity?

• Verizon Releasing Fios TV App for Apple TV Tomorrow

• Instagram Stories Gains Built-In Text Translation Feature

• Are you READY for (ISC)² Security Congress?

• ‘Numberless’ bank cards could be the future: here’s why

• Your top five questions on biometric bank cards answered

• Reduce Instances of Covid-19 Phishing Email Attacks

• Amazon To Halt Covid Testing For US Workers

• Microsoft acquires privileged access management vendor CloudKnox Security

• Windows “HiveNightmare” bug could leak passwords – here’s what to do!

• Microsoft acquires security start-up CloudKnox

• The evolution of a matrix: How ATT&CK for Containers was built

• Microsoft acquires CloudKnox Security to offer unified privileged access and cloud entitlement management

• Mobile Phones in UK are vulnerable to Cyber Threats

• Millions of Printers Worldwide Vulnerable To The 16-Year-Old Bug

• The space wide web is ready to launch

• DNSFilter Raises $30 Million in Series A Funding

• Venmo Gets More Private—but It’s Still Not Fully Safe

• TSA Announces New Pipeline Security Order

• Why Apple’s Walled Garden Is No Match For Pegasus Spyware

• MacOS Being Picked Apart By $49 XLoader Data Stealer

• EU Plans To Make Bitcoin Transfers More Traceable

• Fortinet’s Security Appliances Hit By Remote Code Exec Vuln

• ID theft ghouls targeting Surfside victims is appalling, but no surprise

• We Now Have a National Cyber Director…But Is That Enough?

• Keep Virgin Media O2 Routers Out Of Direct Sunlight

• Low- and middle-income countries lack access to big data analysis – here’s how to fill the gap

• Kubernetes Cloud Clusters Face Cyberattacks via Argo Workflows

• Industrial Firms Warned of Risk Posed by Cloud-Based ICS Management Systems

• Malware Targeting Pulse Secure Devices

• Common Windows Malware Can Now Infect Macs

• New Malware “MosaicLoader” Targeting Users Searching for Pirated Software

• Hybrid Workplace Vulnerabilities: 4 Ways to Promote Online Safety

• Hackers embrace 5-day workweeks, unpatched vulnerabilities

• MAR-10336935-1.v1: Pulse Connect Secure

• MAR-10337580-1.v1: Pulse Connect Secure

• MAR-10337580-2.v1: Pulse Connect Secure

• MAR-10338401-1.v1: Pulse Connect Secure

• MAR-10338868-1.v1: Pulse Connect Secure

• XLoader, a $49 spyware that could target both Windows and macOS devices

• Back to work: Onslaught of personal devices could pose serious cybersecurity risk

• HiveNightmare zero-day lets anyone be SYSTEM on Windows 10 and 11

• TenSec 2019

• Exploiting Wi-Fi Stack on Tesla Model S

• Tencent Keen Security Lab joins GENIVI Alliance

• Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars

• Tencent Security Keen Lab: Experimental Security Assessment of Mercedes-Benz Cars

• Cybersecurity risk: The number of employees going around IT security may surprise you

• Guide to the latest Black Hat 2021 Conference news

• “Summer of SAM”: Microsoft Releases Guidance for CVE-2021-36934, (Wed, Jul 21st)

• Deals: Shop All-Time Low Prices on 2021 Apple TV 4K Models, Starting at $169 for 32GB ($10 Off)

• Japan Sets Data Transfer Speed Record Of 319Tbps

• New Attacks on Kubernetes via Misconfigured Argo Workflows

• This password-stealing Windows malware is distributed via ads in search results

• French Launch NSO Probe After Macron Believed Spyware Target

• Oracle Releases July 2021 CPU With 342 Security Patches

• Apple Releases Security Updates

• Podcast | Social and Emotional Learning in K-12 Schools

• Ermetic Automates Identity Governance for Cloud Infrastructure

• Three Ransomware Attacks that Upped the Ante

• Sigstore: An open answer to software supply chain trust and security

• AirPods Pro Beta Firmware Now Available

• What Is an Intrusion Prevention System – IPS? Definition and Benefits

• Biden Backtracks Over Facebook ‘Killing People’ Comment

• Hackers co-opt Microsoft’s anti-phishing feature for phishing attacks

• Chrome 92 Brings Several Privacy, Security Improvements

• Malicious NPM Package Caught Stealing Users’ Saved Passwords From Browsers

• What Is an Intrusion Prevention System – IPS? Definition, How Does It Work, Benefits

• Core Scientific, a major U.S. bitcoin mining company, is going public via SPAC

• Tracking Malware and Ransomware Domains in 2021

• This New Malware Hides Itself Among Windows Defender Exclusions to Avoid Detection

• Now Available: Microsoft 365 Application for Duo Single Sign-On

• StrongPity APT Group Deploys Android Malware for the First Time

• Macron Among 14 Heads of States on Potential Spyware List

• Caliente Bandits Target Spanish Speaking Individuals to Spread Bandook Malware

• The Security Startup Ecosystem and the Trends Cisco is Watching

• Malware, Cybercrime and Cloud Security

• DNSFilter nabs $30M to fight DNS threats with AI

• Chrome just added these big new security and privacy features

• ‘Where’s my iPadOS 14.7 update?’

• Cybersecurity lags behind as IoT devices proliferate, according to a new report

• Zero Trust, We Must

• Millions of Devices Affected by Vulnerability in HP, Samsung, Xerox Printer Drivers

• TSA issues second cybersecurity directive for pipeline companies

• Cybercriminals May Be Targeting Tokyo 2020 Olympic Games, FBI Warns

• New bill would make some companies report cyberattacks to the government

• Apple Delays Staff Office Return As Covid Cases Rise

• Check Point R81.10 AI & ML Driven Threat Prevention and Security Management

• Apple confirms iOS 14.7 unlocking bug headache, especially for enterprise users

• Chrome browser just added these new security and privacy features

• Moving OT to the cloud means accounting for a whole new host of security risks

• Fortinet plugs RCE hole in FortiManager and FortiAnalyzer (CVE-2021-32589)

• Linux Kernel Vulnerability Allows Hackers to Acquire Root Privileges on Most Distros

• Short Édition – 505,466 breached accounts

• Levashov Walks. Russian Spam King gets slap on the wrist

• Phone Of France’s Macron Targetted By NSO Pegasus – Report

• $49 malware receives major upgrade to strike both Windows and macOS PCs

• This new password-stealing Windows malware is distributed via adverts for cracked software

• Adobe Patches 21 Vulnerabilities Across Seven Products

• XLoader Windows InfoStealer Malware Now Upgraded to Attack macOS Systems

• DuckDuckGo Launches a New Email Privacy Service

• New bill would make some companies report cyber attacks to the government

• MacOS Being Picked Apart by $49 XLoader Data Stealer

• [eBook] A Guide to Stress-Free Cybersecurity for Lean IT Security Teams

• Several New Critical Flaws Affect CODESYS Industrial Automation Software

• Managed Detection and Response in Q4 2020

• Google Maps Gains Expanded Transit Crowdedness Predictions

• Best Mitre D3FEND advice to harden Windows networks

• Digital Wallets And Driver’s Licenses | Avast

• Joker billing fraud malware found in Google Play Store

• Easily exploitable, unpatched Windows privilege escalation flaw revealed (CVE-2021-36934)

• Hackers Might Gain Admin Rights Through a 16-years-old Vulnerability

• Safe Security raises $33M to manage and mitigate cyber risk

• Fortinet Patches Remote Code Execution Vulnerability in FortiManager, FortiAnalyzer

• Salvation Army Achieves Game-Changing Cybersecurity Posture with LogRhythm

• Apple Music to Livestream Premiere of Kanye West’s New Album ‘Donda’ on Thursday

• 15 000 tonnes of illegal food and beverages off the market

• iPhone Supplier Foxconn Says China Floods Not Impacting Operations

• Apple’s iPhone is the Easiest to Snoop on Using the Pegasus, Says Amnesty

• Aqara HomeKit Accessories Now Available From Online Apple Store in Europe

• Looking for adding new detection technologies in your security products?

• Security and Culture are Key to Digital Transformation

• New Bill Could Force U.S. Businesses to Report Data Breaches Quicker

• IT/OT Convergence or IT/OT Integration?

• New Windows and Linux Flaws Give Attackers Highest System Privileges

• ASX issues caution for Aussies investing in crypto and contemplates exchange regulation

• Defending Against Pervasive Spyware

• Product showcase: Action1 RMM

• Google offers additional security features for its cloud users

• Are advertising unique IDs anonymous?

• LPE flaw in Linux kernel allows attackers to get root privileges on most distros

• Kelihos botmaster Peter Levashov gets time served

• Despite good defensive measures, ransomware continues to get in

• A unified approach is the future of data backup

• Researchers smash internet speed record

• China dismisses Exchange attribution and accuses US of whitewashing its cyber heists

• How Artificial Intelligence is Changing Healthcare

• DDoS attacks increased 33% in H1 2021

• Security Evangelist or Zealot – Where to Draw the Line

• How can Digital First banking benefit financial institutions?

• Fast track to StateRAMP for more secure state and local government

• Air Force taps Google Cloud for aircraft maintenance system

• Google Enhances Protections in Cloud Armor Web Security Service

• Image encryption technique could keep photos safe on popular cloud photo services

• What is DNS Attack and How Does it Work?

• AirPods 3 Mass Production Said to Kick Off in August

• Most companies still rely on manual tools and tech for internal audit processes

• ISC Stormcast For Wednesday, July 21st, 2021 https://isc.sans.edu/podcastdetail.html?id=7594, (Wed, Jul 21st)

• Nikkei: 2022 iPhone SE to Feature A15 Chip, 5G, and 4.7-Inch Display

• Dropbox continues building tools to protect personal content

• Europe’s IT and business services market propelled by growing cloud-based services adoption

• Thales’s biometric payment card provides users with increased security and convenience

• Stellar Cyber XDR Kill Chain allows security analyst teams to disrupt cyberattacks

• Votiro introduces an AWS S3 bucket connector to reduce risk of weaponized files in storage buckets

• Vocera Edge maximizes EHR investments and empowers mobile clinicians

• Make-me-admin holes found in Windows, Linux kernel

• DHS lacks comprehensive strategy to counter violent extremism, report says

• Some URL shortener services distribute Android malware, including banking or SMS trojans

• The Security Digest: #70

• How to build a security-first culture with remote teams

• Google Cloud’s zero trust offerings help U.S. government organizations guard against cyberthreats

• Hide yo’ operating systems: Make-me-admin holes found in Windows, Linux kernel

• How China’s Hacking Entered a Reckless New Phase

• Bosch upgrades its Dicentis system server with new hardware from HP

• Mastercard enhances its card program for cryptocurrency wallets and exchanges

• Safety Vision WiFi 6e reduces download time from hours to minutes

• Virtium launches StorFly Series 3 M.2 NVMe SSD platform designed for extreme environments

• Oh great, now I’ve gotta check my phone for Pegasus spyware?

• Hackers use single bit change in Intel CPU register to evade detection

• What We Know About the Secretive Company Behind the Pegasus Spy Software

• China hits back at the US and its allies for “fabricated” hacking allegations

• ‘Flexgate’ Class Action Lawsuit Over Faulty MacBook Pro Displays Dismissed by Judge

• CoreSite enhances connectivity in Silicon Valley with Google Cloud Dedicated Interconnect

• Infortrend releases U.2 SSD for EonStor CS scale-out NAS

• Journo who went to prison for 2 years for breaking US cyber-security law is jailed again

• Rapid7 acquires IntSights to enhance its XDR offering

• Synaps implements iProov’s Genuine Presence Assurance technology for secure onboarding process

• Prevent Cyber Risk as a Managed Service Provider (MSP)

• Brinks Home appoints Dinesh Kalwani as CPO

• Infosys opens Automotive Digital Technology and Innovation Center in Stuttgart

• Morpheus Data announces new channel investments to enhance service delivery capabilities

• Node4 acquires TNP to increase its end-to-end managed services portfolio

• Accenture acquires Cloudworks to expand Oracle capabilities in Canada

• KLDiscovery appoints Danny Zambito as COO

• Spam Kingpin Peter Levashov Gets Time Served

• iOS 15: What’s New With Notifications

• Bitcoin mining isn’t nearly as bad for the environment as it used to be, new data shows

• IT Security News Daily Summary 2021-07-20

• Adversaries continue to abuse trust in the supply chain

• Russian Hacker Levashov Sentenced to Time Already Served

• An introductory guide to mobile app security testing

• Lawfare Lecture: Quinta Jurecic On Section 230 Reform

• Angry Political Man

• India’s Draconian Rules for Internet Platforms Threaten User Privacy and Undermine Encryption

• OPM takes back control of CHCO Council

• Netflix to Take on Apple Arcade With Mobile Games for Subscribers

• Security experts: Consistency and security are key in creating vaccine passports

• Vaccine passports have to be consistent so that all countries can recognize them, expert says

• DHS unveils second round of new pipeline security requirements

• All Three Major U.S. Carriers and Google Adopt Rich Communication Services, But No Sign of Apple Interest

• CISA: China successfully targeted US oil and natural gas infrastructure

• How to Fix the Big Problems With Two-Factor and Multifactor Authentication

• New Cybersecurity Order Issued for US Pipeline Operators

• Ultra Wideband Availability Expands to Argentina, Paraguay, and More

• Jon Stewart Promo for Upcoming Apple TV+ Show Makes Fun of Billionaire Space Race

• BrandPost: Redefining Home Security

• DHS releases new mandatory cybersecurity rules for pipelines after Colonial ransomware attack

• Deals: Expercom’s New Sale Includes Discounts on Unlocked iPhone 12 Models, 24-Inch iMac, and More

• Victory! Californians Can Now Choose Their Broadband Destiny

• NSO Exploits Still Remains Mysterious: ZecOps Can Help You Fight Back

• BrandPost: View the Women’s Executive Leadership Panel Hosted by HP

• BrandPost: Click Happens: Endpoint Protection That Doesn’t Rely on Detection

• Researchers: NSO Group’s Pegasus Spyware Should Spark Bans, Apple Accountability

• Your iPhone and the Pegasus spyware hack: What you need to know

• Supply chain attacks: Top 5 things to know

• Top 5 things to know about supply chain attacks

• A 16-year-old bug (CVE-2021-3438) in printer driver affects millions of printers worldwide

• NSO Group Hacked

• Newport Wafer Fab Sold To China, Has UK Government Defence Contracts

• EMEA Recruitment Partner Amy Bird on What She Looks For in a Candidate and How Diversity Drives Innovation

• The Hoot Podcast (Episode 35): Humio at Bloomreach with Junaid Sheriff

• XKCD ‘Bad Map Projection: The Greenland Special’

• BSides Vancouver 2021 – Mike Sample’s ‘Linux Sessions For Monitoring And Reviewing Linux Workloads’

• Apple Requiring Retail Employees in Some Regions to Wear Masks, Other Employees Encouraged to Do So

• Hands-On With Apple’s MagSafe Battery Pack

• WifiDemon – iPhone Wifi bug exposed devices to remote attacks

• WiFiDemon – iPhone Zero-click Wifi Hacking Flaw Can be Used to Execute Remote Code

• Chrome for iOS Gains Biometric Authentication for Incognito Tabs

• DuckDuckGo Announces Cross Platform Alternative to Apple’s Hide My Email

• Final Days: Connect to a Brighter Internet ☀️

• Avoid Blind Spots: Is Your Incident Response Team Cloud Ready?

• SSL (secure sockets layer)

• TSA imposes new cyber rules on pipeline operators

• The US and its Allies Accuse China of a Huge Microsoft Exchange Attack

• Romanian Linux Cryptojacking Cybercriminals Spotted

• Aruba Notified Customers Regarding a Data Breach After Two Months

• Saudi Aramco Loses 1TB of Data Following Data Breach

• Low-Risk iOS Wi-Fi Naming Issue can Compromise iPhones Remotely

• Twitter Rolling Out New Version of TweetDeck Starting Today

• The U.S. Is Continuing Its Campaign Against Huawei

• Protecting more with Site Isolation

• Law Firm to the Fortune 500 Breached with Ransomware

• A New Approach to Finding Cybersecurity Talent: A Conversation with Alan Paller

• RansomEXX Ransomware Hits Ecuador’s State-Run CNT Telco

• Researchers flag 7-years-old privilege escalation flaw in Linux kernel (CVE-2021-33909)

• Cybersecurity Professionals to Newcomers: Focus on Vendor-Neutral Certifications

• CISSPs from Around The Globe: An Interview with Theresa Grafenstine

• Why digital issuance is the perfect recipe for modern financial services

• Jeff Bezos Completes Blue Origin Spaceflight

• Nasty Linux systemd security bug revealed

• Google, Bloomberg and Facebook pledge support for second year of Security Training Scholarship Program for women

• Apple’s Insecure iPhone Lets NSO Hack Journalists (Again)

• Tetris Beat, Monster Hunter Stories, and Skate City Tokyo Coming to Apple Arcade

• Advancing an inclusive, diverse security industry

• Ransomware attack on law firm leads to data breach

• Rapid7 Acquires Threat Intelligence Firm Intsights for $335 Million

• Congratulations, Chip! SecureLink CFO awarded “Top CFO” honors by ABJ

• Top 10 Tips to Protect Against OWASP Top 10 Vulnerabilities

• MagSafe Battery Pack Tidbits: Thickness, Weight, Charging Details, and More

• WebRTC Security Vulnerabilities You Should Know About

• What is a SIEM, And Why Should You Have One?

• Success of Ransomware Attacks Shows the State of Cybersecurity

• U.S. Government Attributes ICS Attacks to Russia, China, Iran

• Life in Lockdown: Offices Are Empty of People, Full of Risky IoT Devices

• How Data Discovery and Zero Trust Can Help Defend Against a Data Breach

• The Android apps on your phone each have, on average, 39 security vulnerabilities

• CrowdStrike and Siemplify: SOARing with the Falcon is Now Easier Than Ever

• US, EU, UK, NATO blame china for “reckless” Exchange attacks

• Fortinet’s security appliances hit by remote code execution vulnerability

• Apple iPhone patches are out – no news if recent Wi-Fi bug is fixed

• HP Patches Vulnerable Driver Lurking In Printers For 16 Years

• Chinese Hackers Hid Hacked Data In A Donald Trump Picture

• Apple Under Pressure Over iPhone Security After NSO Spyware Claims

• China Denies Being Behind Major Microsoft Hack

• Hundreds Of Touchscreen Ticket Machines Hit By Ransomware Attack

• iPad Mini 6 Rumored to Feature A15 Chip and Smart Connector

• TeamTNT Campaigns Emphasize Importance of Addressing Cloud Security Gaps

• Defense spending, policy bills may not clear until December

• Why Your Business Needs a Long-Term Remote Security Strategy

• Ransomware: International cooperation is needed to curb these cybersecurity threats, says expert

• Vulnerability Exposes MicroLogix PLCs to Remote DoS Attacks

• A bug in Fortinet FortiManager and FortiAnalyzer allows unauthenticated hackers to run code as root

• Deals: AirPods Max Available for $454.99 at Amazon and Best Buy ($94 Off)

• Adobe Updates Premiere Pro to Run Natively on M1 Macs

• SAP Invests £216m In UK, Opens Offices In London, Manchester

• IBM FlashSystem gets safeguarded data copies to speed up cyberattack recovery

• Google Cloud rolls out new security tools as threat landscape heats up

• 16-Year-Old HP Printer-Driver Bug Impacts Millions of Windows Machines

• China Says Washington Hack Claims ‘Fabricated’, Condemns US Allies

• Cybereason Enhances XDR Offering with empow Acquisition

• Google Cloud targets Biden’s zero trust order with new services

• Sysdig acquires Apolicy to bolster container security offerings

• What’s the consensus on the state of web app security, anyway?

• Google unveils ‘self-driving’ cloud security feature

• MosaicLoader Malware Delivers Facebook Stealers, RATs

• A New Security Paradigm: External Attack Surface Management

• Microsoft Adds Teams Mobile Applications to Bug Bounty Program

• Chinese Gas Pipeline Intrusion Campaign, 2011 to 2013

• Cutting Through the Cybersecurity Noise and Chao

• Northern Train’s ticketing system out to lunch as ransomware attack shuts down servers

• HP patches vulnerable driver lurking in printers for 16 years

• Hundreds of touchscreen ticket machines are offline after a ransomware attack

• Google is using machine learning to stop DDoS attacks

• NordVPN deal: Save over 65% on a two-year subscription and get a $10 credit

• Companies are losing the war against phishing as attacks increase in number and sophistication

• Ransomware fallout is devastating and could often be avoided, study finds

• Summer of SAM – incorrect permissions on Windows 10/11 hives, (Tue, Jul 20th)

• MosaicLoader Malware Uses SEO Poisoning to Infect Software Pirates’ Systems

• Be The Strongest Link In Your Organization’s Supply Chain

• NSO Denies Allegations Pegasus Targetted Activists, Journalists

• Verified: UK.gov launching plans for yet another digital identity scheme

• Cybersecurity M&A Roundup for July 9-19, 2021

• 16-Year-Old Security Bug Affects Millions of HP, Samsung, Xerox Printers

• Apple Looking to Establish a Large Production Campus in Los Angeles for Apple TV+

• 3 Ways CISOs Can Brief Executives on Cybersecurity IT Governance

• How to generate Cryptographically secure random numbers and data in Python

• Ecuador Telecom Giant CNT Suffered Cyber Attack – Ransomware Suspected

• Schneider Electric Patched Security Bugs In EVlink Charging Stations

• Biden administration, US allies condemn China’s malicious hacking, espionage actions

• Government £375m Fund For UK Tech Firm Growth

• 3 Quality Assurance Tools That Will Take Your Business From Good to Great

• UN Rights Chief Alarmed by Reported Use of Powerful Spyware

• Microsoft secured court order to take down domains used in BEC campaign

• Apple Reportedly Agrees Deal to Sell iPhones in Korean LG Retail Stores From August

• Oil Company Saudi Aramco Affected by a Data Breach

• Microsoft heads to court to take on imposter, homoglyph domains

• Researchers: Apple Quietly Patched 0-Click Wi-Fi Code Execution Vulnerability in iOS

• Mitigating Threats to Encryption From Quantum and Bad Random

• U.S. Department of Commerce Seizes Trade with 6 Russian Companies

• Armis: Top Performer in Asset Visibility and Real-Time Detection in MITRE Engenuity ATT&CK® Evaluations for Industrial Control Systems (ICS)

• China Officially Accused of Microsoft Exchange Attacks

• US legal eagles representing Apple, IBM, and more take 5 months to inform clients of ransomware data breach

• China Denies Microsoft Hacking Claim By The West

• Chinese Hackers Were Responsible For The Massive Microsoft Exchange Server Attacks – NCSC, UK

• MagSafe Battery Pack Now Available for In-Store Pickup in UK, EU, Australia, Japan, and China

• Bug hunters asked to probe Microsoft Teams mobile apps, can earn up to $30k

• Four Members of APT40 Indicted by the U.S. Department of Justice

• Google Cloud CISO Phil Venables on the future of cloud security

• 8 biases that will kill your security program

• Quick Hits

• FCW Insider: July 20, 2021

• Beats Studio Buds Now Available to Order in Many European Countries

• Who Can See Your Address Online? | Avast

• WHAT IS A SIEM, AND WHY SHOULD YOU HAVE ONE?

• This New Malware Hides Itself Among Windows Defender Exclusions to Evade Detection

• Apple Could Be Forced to Follow New Digital Competition Rules or Face Fines, Under UK Proposal

• Zero-Trust is an Adjective Without a Noun

• Application security testing is not just buzzwords

• Last (Executive) Orders Please: Supply Chains, Policy and Modernising Cybersecurity

• WhatsApp Now Lets You Join Group Calls Even After They’ve Started

• Apple Pay Now Available for Mir Cardholders in Russia

• Juniper Bug Allows RCE and DoS Against Carrier Networks

• US and Global Allies Accuse China of Massive Microsoft Exchange Attack

• Deepfakes: The Next Big Threat

• WiFiDemon – Recently discovered iPhone Wi-Fi bug could also allow RCE

• Nations come together to condemn China: APT31 and APT40

• Scanning for Vulnerabilities in Cloud-Native Applications

• Rising Threats Target Cloud Providers, Virtual Infrastructure

• How do I select a data recovery solution for my business?

• Vishing attacks on the rise with newest campaign

• Combating deepfakes: How we can future-proof our biometric identities

• Apple iPhones to get protection against Pegasus Mobile Spyware

• Ransomware Attack on Northern Rail UK

• iOS 14.7 Bug May Prevent iPhones With Touch ID From Automatically Unlocking Apple Watch

• IoT malware attacks rose 700% during the pandemic

• Is differential privacy the ideal privacy-enhancing computation technique for your business?

• Implementing Controls Without Breaking Everything (Including the Bank)

• Instagram Introduced Security Checkup – A New Feature to Recover Hacked Accounts

• McAfee Partners with American Express to Provide Best-in-Class Security

• Fighting new Ransomware Techniques with McAfee’s Latest Innovations

• Business correspondence in messengers and social networks poses a cyber threat to companies

• Apple Will Delay Bringing Employees Back to Offices Until at Least October

• Most financial services mobile apps still rely on passwords, even with added friction

• ETSI completes set of IoT MQTT and CoAP testing standards

• CSaaS market to reach valuation of $87.59 billion by 2025

• ISC Stormcast For Tuesday, July 20th, 2021 https://isc.sans.edu/podcastdetail.html?id=7592, (Tue, Jul 20th)

• Cofense Protect MSP: Phishing protection for MSPs safeguarding SMBs

• EXPLAINER: Target List of Israeli Hack-for-Hire Firm Widens

• Thousands of companies compromised by REvil Ransomware – the supply chain strikes again

• Four features your data-centric security strategy must provide

• Synopsys partners with Samsung to accelerate ISO 26262 functional safety deliverables

• Airtel delivers connectivity solutions for enterprises based on Cisco SD-WAN technology

• This tool tells you if NSO’s Pegasus spyware targeted your phone

• Oil giant Saudi Aramco hit by 1TB data breach

• How Phishers Abuse Hypertext Transfer Protocol Secure (HTTPS) Protocol

• Westbase Group acquires Wireless Coverage to extend WISDM platform development

• Fast Radius merges with ECP Environmental Growth Opportunities to become a publicly-listed company

• What’s Next for REvil’s Victims?

• Kdan Mobile raises $16M to increase its global footprint

• OPSWAT acquires Bayshore Networks to extend its suite of CIP cybersecurity solutions

• U.S. and allies say China at fault for massive Microsoft hack

• Supply chain threats demand industrywide approach to AI

• Cybersecurity company warns of American Rescue Plan Act scams as first IRS child tax credit payments released

• Microsoft Cracks Down on Malicious Homoglyph Domains

• L3Harris Technologies develops surveillance concepts for NATO’s AFSC program

• Goldilock raises $1M to expand its air gap cybersecurity solution

• TLS Email Encryption Explained – How To Encrypt Email with TLS>

• Reimagining the Malware Analysis Experience

• 8 Signs It May Be Time for Parental Controls

• Key security patch testing best practices

• Data trust and connectivity challenge Army network innovators

• President Biden Accuses Facebook Of “Killing People” With Misinformation

• Law Firm for Ford, Pfizer, Exxon Discloses Ransomware Attack

• Fortinet Releases Security Updates for FortiManager and FortiAnalyzer

• IT Security News Daily Summary 2021-07-19

• The Pipeline Attack – Is Log Analysis Enough for Cybersecurity?

• Threat Hunting Frameworks and Methodologies: An Introductory Guide

• Lawmakers balk at cost-overruns, transparency issues with VA’s $21 billion health record program

• Unpatched iPhone Bug Allows Remote Device Takeover

• How to activate virtualization-based security and core isolation in Windows 10

• Balancing the benefits with the risks of emerging technology

• Don’t Wanna Pay Ransom Gangs? Test Your Backups.

• capa 2.0: Better, Faster, Stronger

• Apple Releases Safari 14.1.2 Update for macOS Catalina and macOS Mojave

• DACA Update: A Federal Judge Rules that DACA is Illegal, But Keeps Options Open

• US charges four suspected Chinese spies who coordinated APT40 hackers

• How to Monitor for Cryptomining in the Cloud

• Sharding Kafka for Increased Scale and Reliability

• Shlayer Malvertising Campaigns Still Using Flash Update Disguise

Generated on 2021-07-25 23:59:15.283700