IT Security News Weekly Summary – Week 40

• IT Security News Daily Summary 2021-10-10

• Data Exfiltration, Revisited

• Meet the Chapters Being Honored at the 2021 (ISC)² Global Achievement Awards

• (ISC)² Celebrates Cybersecurity Awareness Month With Treasure Trove of Knowledge Building Resources

• Introducing the Palo Alto Networks Panorama Advanced AlienApp

• Recalibrating U.S. Counterterrorism: Lessons Learned From Spain

• 6 Takeaways From the Changes in OWASP’s Top 10 Vulnerability Ranking

• Take Back Control of Digital Commerce

• Medtronic recalls some controllers used with some of its insulin pumps over cyberattack risks

• Security Affairs newsletter Round 335

• Previously undetected FontOnLake Linux malware used in targeted attacks

• Company That Routes Billions of SMS For U.S Carriers Silently Says It Was Hacked

• Week in review: Electronic warfare, cybersecurity career plan, Patch Tuesday forecast

• Penetration testing

• Weekly Update 264

• House Delays U.S. Infrastructure Bill Vote – Cybersecurity Funding in Jeopardy? And What Security Practitioners Say Needs to be Prioritized

• How Continuous Monitoring is a Driver of Effective Risk Management

• The meaning behind XDR: A beginner’s guide to extended detection and response

• Infoworks 5.0 accelerates and lowers cost of cloud migration and analytics deployment

• HP Work from Home delivers end-to-end security solutions for hybrid workforces

• Fortanix partners with Google to unveil Client-side encryption for user data in Google Workspace apps

• nThrive appoints Cheryl Alden as CMO

• Tenacity raises $3M to drive its go-to-market strategy and enhance product roadmap development

• Kava Labs chooses CertiK to bring risk assessment and real-time threat monitoring to its ecosystem

• EMV 3DS 2.3 enhances security and fraud prevention across e-commerce channels

• Trustonic Kinibi 510 improves security in the connected vehicle market

• Bhawna Singh joins Auth0 as SVP of Engineering

• IT Security News Daily Summary 2021-10-09

• Facebook Permanently Bans User Who Created A Tool To Help People Quit The Platform

• CCSP vs. EXIN Cloud Certifications: What are the Differences?

• AT&T Business Summit is virtual Oct. 27-28 and free!

• Security.org: 68% of Americans use the same password across accounts

• Firefox Suggest to display sponsored ads but users can disable them

• Google addresses four high-severity flaws in Chrome

• Your cybersecurity team will face burnout, and you need to help

• Report: Government is the most-targeted sector by nation-state attackers

• Someone Hacked a US Warship Facebook Account to Stream Games

• Cloudflare Isn’t Liable for Sites That Hawk Counterfeits

• Top Stories: Apple Watch Pre-Orders, October Apple Event?, Remembering Steve Jobs, and More

• Russian Hackers are Responsible for 58% of All Hacks on Government Networks – Microsoft

• Security expert published NMAP script for Apache CVE-2021-41773 vulnerability

• Meet Megan West, Honoree of the 2021 (ISC)² CEO Global Achievement Award

• Sky.com servers exposed via misconfiguration

• Cox Media Group took down broadcasts after a ransomware attack

• Build or Buy your own antivirus product

• Why App Security Should Be a Major Concern For Financial Service Providers

• How Will $1.9 Billion for Cybersecurity Protect American Infrastructure?

• Introduction to SAST

• Sontiq Digital Safety and Security features help families tackle identity crimes and cyberthreats

• Skyflow Fintech Privacy Vault accelerates product development for software teams

• Week in security with Tony Anscombe

• Brewer’s Token Gaffe Causes Massive PII Breach

• ECU Student Charged with Cyber-stalking

• ESET PROTECT Advanced Review: Features & Benefits

• Qualys Automates Ransomware Risk Assessment

• Visa selects Callsign as their behavioral biometric and device intelligence identity provider

• 2021-10-07 – Qakbot (Qbot) obama111 with Cobalt Strike

• Why enterprise patch management pains are cybercriminals’ gain

• SecZetta partners with One Identity to automate identity access for third-party users

• Concentric integrates with Box to protect data, build ransomware resiliency and mitigate risk

• Apple Files Appeal in Epic Games Lawsuit, Asks to Delay App Store Changes

• Emily Rollin joins McAfee Board of Directors

• eSentire and Guidewire apply risk modeling and proprietary data for cyber security risk reduction

• McAfee/FireEye merger completed, CEO says automation only way forward for cybersecurity

• CompTIA updates CASP+ certification for security architects and senior security engineers

• Ann Chaplin joins Qualcomm as General Counsel and Corporate Secretary

• Aura appoints Kelly Merryman as President and COO

• Beware- FontOnLake Rootkit Malware Attacking Linux Systems

• What the Facebook Whistleblower Tells Us About Big Tech

• Firefox reveals sponsored ad “suggestions” in search and address bar

• White House looks to step up endpoint monitoring

• IT, supply chain figure in agency climate resilience plans

• White House, Congress Target Ransomware Payments

• IT Security News Daily Summary 2021-10-08

• 58% of all nation-state attacks in the last year were launched by Russian nation-state actors

• When Is a State Secret Not a Secret?

• cryptographic nonce

• FirstNet to be deployed at 15 Air Force bases

• North American Orgs Hit With an Average of 497 Cyberattacks per Week

• Tips for DFIR Analysts, pt III

• Shaping the Future of Cybersecurity

• Admins: Patch management is too complex and cumbersome

• Apple Stops Signing iOS 15.0 Following iOS 15.0.1 Release, Downgrading No Longer Possible

• You can create Let’s Encrypt SSL certificates with acme.sh on Linux

• A Brief Walkthrough On CMMS Cybersecurity

• What Is Data Protection and Why Does it Matter?

• Apple Watch SE vs. Apple Watch Series 7 Buyer’s Guide

• AI Weekly: EU facial recognition ban highlights need for U.S. legislation

• Citizen Lab researcher disputes claims from NSO Group after UK court finds UAE ruler used Pegasus to hack ex-wife, lawyers

• MacRumors Giveaway: Win an Apple Watch Series 7 and Fitness Award Prize Pack From Activity Awards

• Twitch data breach resulted from server configuration error

• Nevada adds dashcam data to digital twin of work zone traffic

• Motion Picture Academy employs cutting-edge tech to keep Oscar contenders secure

• ‘FontOnLake’ Malware Family Targets Linux Systems

• Challenge seeks mobile fingerprint capture tech for responders

• US Shutters Psychic Mass Mail Fraud

• 71% of Security Pros Find Patching to be Complex and Time Consuming, Ivanti Study Confirms

• The Jan. 6 Investigation Is Ramping Up. Will It Matter?

• How to better secure user authentication protocols

• Wireshark 3.4.9 Released – What’s New!!

• Virtual Workshop Tuesday: EFF’s Mitch Stoltz Will Discuss Free Software Movement On Panel Examining Ethics and Open Source Software Licensing

• Uber Sued In UK Over Alleged Facial Recognition Bias

• NSA Releases Guidance on Avoiding the Dangers of Wildcard TLS Certificates and ALPACA Techniques

• Apple Watch Series 7 Already Seeing Discounts of Up to $25 at Expercom

• Some Customers Unhappy With Apple Watch Series 7 Color Options

• How DevSecOps software factories are closing the delivery gap for DOD

• Install SELinux on Ubuntu Server 20.04: Here’s how

• The history and evolution of ransomware

• Apache patch proves patchy – now you need to patch the patch

• NSA Releases Guidance on Avoiding the Dangers of Wildcard TLS Certificates and ALPACA Techniques

• Source Code Protection Market

• How to Close the Security Gap Between Identity and Access Management (IAM) and Shared Accounts

• UK newspaper The Telegraph exposed a 10TB database with subscriber data

• FCW Insider: October 8, 2021

• Patch ‘Immediately’: Apache Issues Software Fix Amid Zero-Day Attacks

• Apple Watch Series 7 the Same Thickness as Series 6, Despite Rumors

• Never mind Russia: Turkey and Vietnam are Microsoft’s new state-backed hacker threats du jour

• FontOnLake Linux Malware Used in Targeted Attacks

• Google Patches Four Severe Vulnerabilities in Chrome

• Google Blocked 14,000 Russian Government Phishing Emails

• Twitch Blames Server Error For Massive Data Leak

• New TSA Regulations To Address Cyber Threat To Rail Systems

• BrewDog Exposed Data Of 200,000 Shareholders For Over A Year

• AVD Bug Fixed by Microsoft

• What is a data breach & how to prevent one?

• Ransomware: Cyber criminals are still exploiting these old vulnerabilities, so patch now

• Apple Products Now Include 7-Day Complimentary AppleCare+ in Australia

• Apple Discontinues Apple Watch Series 6 as Series 7 Pre-Orders Begin

• Apache Releases Yet Another Emergency Update to Address Exploited Vulnerabilities

• FIN12 Ransomware Group Hits Healthcare Sector

• At long last, Microsoft is disabling Excel 4.0 macros by default

• Securing the Future of Work With Zero Trust

• 5 Trends Driving Application Security Challenges

• Hardware Bolsters Medical Device Security

• Ransomware Group FIN12 Aggressively Going After Healthcare Targets

• Actors Target Huawei Cloud Using Upgraded Linux Malware

• Sky Launches Streaming Television Unit, Sky Glass

• The Case for Cybersecurity Education for Engineers

• Russia poses the biggest nation-state cyber threat, says Microsoft

• BrewDog exposed data of 200,000 shareholders for over a year

• Apple Watch Series 7 Already Facing November Delivery for Some Models

• Understanding Police Reliance on Private Data

• Cybersecurity experts discuss the Twitch data breach

• Singapore tweaks cybersecurity strategy with OT emphasis

• EDR Bypasses

• Lots and Lots of Bots: Looking at Botnet Activity in 2021

• 4 Keys to Create a Thriving Cybersecurity Team for Long-Term Success

• Apple Watch Series 7 Now Available for Pre-Order

• Deals: Carriers Introduce First Offers on Apple Watch Series 7

• How Can Parents Keep Children Safe Online?

• Tesla Moves Headquarters From California To Texas

• Let’s Encrypt Root Expiration – Post-Mortem

• The Netherlands declares war on ransomware operations

• Expert Cybersecurity Comment | Twitch Data Breach

• Feedzai Financial Crime Report: 23% Increase In Online Fraud As Cashless Payments Take Center Stage

• Google announces new efforts to protect journalists and high-risk users from cyberattacks

• Apache Releases Another Patch for Actively Exploited HTTP Server Zero-Day

• CFO Survey: Covid, cyberattacks biggest external threats to business

• Making better cybersecurity training: Q&A with Malwarebytes expert Kelsey Prichard

• September 2021’s Most Wanted Malware: Trickbot Once Again Tops the List

• CIA Creates Working Group on China as Threats Keep Rising

• Twitch Struggles With Hackers and Hate Raid Bots

• Widespread Power Outages in China Have Apple Suppliers ‘Scrambling’ to Keep Production on Track

• 14,000 Gmail Users Warned by Google of Phishing Campaign

• Excel 4.0 Macros Will Be Disabled in Order to Protect Users

• Discord scammers lure victims with promise of free Nitro subscriptions

• The CSO guide to top security conferences, 2021

• Microsoft: Russia Dominates State-Sponsored Attacks

• Google warns of APT28 attack attempts against 14,000 Gmail users

• Google Executive Wants to Help Apple Make Texts Between Android and iPhone Users More Secure

• Vidar Stealer Returns and Has a New Target: Mastodon

• GnuPG fixes a problem with Let’s Encrypt certificate chain validation

• Prevent Business Network Failures | Avast

• Attackers Encrypt VMware ESXi Server With Python Ransomware

• NatWest Pleads Guilty in £400m Money Laundering Case

• UK Firms Hit by One Attack Every 47 Seconds Over Summer

• Printing shop for forged documents dismantled in Barcelona

• Here Are the Apple Watch Series 7 Prices

• Livestream Panel Discussion Tuesday: EFF, Encryption Users Will Discuss Consequences of Apple’s Planned Scanning Tool, Suggest Changes

• Apache rolled out a new update in a few days to fix incomplete patch for an actively exploited flaw

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Hacker Leaks Twitch Source Code and Contents | Avast

• Researchers Warn of FontOnLake Rootkit Malware Targeting Linux Systems

• Apple Online Store Down Ahead of Apple Watch Series 7 Pre-Orders

• iPhone 13 Series Launches in More Countries, Including South Korea and Thailand

• Google to Auto-turn on 2-Factor Authentication For 150 Million Users by Default

• October 2021 Patch Tuesday forecast: Halloween came early this year

• New infosec products of the week: October 8, 2021

• Microsoft says Russia indulged in 58% of state funded cyber attacks last year

• Ransomware Attack on Weir Group

• (ISC)² goes to school: CISSP preparation and training as part of a specialist study

• Building cyber radar systems could alert Indo-Pacific nations and their allies

• New Patch Released for Actively Exploited 0-Day Apache Path Traversal to RCE Attacks

• Patch management complexity increased by remote work is putting organizations at risk

• Air gaps have been ‘shattered’, says new Indian policy on power sector security

• Analytics Insight Announces ‘The 10 Most Influential CISOs to Watch in 2021’

• Entrust Celebrates Milestones and Previews the Road Ahead for Customers, Partners and the Security Industry

• CCSP vs. AWS Cloud Certified: Which One for Cloud Security?

• How to shift into a new approach to cybersecurity asset management

• Smishing on the Rise

• Virtual collaboration technology issues plaguing the hybrid workforce

• JFTC starts another antitrust probe against Apple and Google on smart devices: Report

• Cloud infrastructure spending decreased 2.4% YOY in 2Q21

• Governments are holding back the U.S. and Europe in 5G race, says Huawei exec

• A security architect’s POV on a mature data-centric security program, Part 3

• VMware announces security innovations to deliver zero trust architecture across cloud and app environments

• Fletch releases two security offerings to help organizations stay ahead of cybercriminals

• Tessian Architect offers protection against data loss through email

• Prevailion Omega exposes previously undetected malware blind spots in the cloud

• Healthcare IT market to reach $121.75 billion by 2025

• Box Shield helps customers reduce the risk of ransomware by scanning files in near real-time

• HITRUST adds two offerings to aid in understanding control effectiveness and cyber preparedness

• PingOne Fraud detects and alerts enterprises to fraud before it happens

• FontOnLake: Previously unknown malware family targeting Linux

• TuxCare DatabaseCare provides live patching service for open-source enterprise-grade databases

• VMware unveils multi-cloud advancements to accelerate modernization of enterprise apps

• Baltimore retools property management system

• What Biden’s Top China Theorist Gets Wrong

• Parasoft SOAtest empowers teams to overcome software quality challenges

• Telecom giant behind routing SMS discloses 5-year-long data breach

• Additional fixes released addressing Apache HTTP Server issue

• Telia Company partners with VMware to accelerate its transition to a cloud-native infrastructure

• Cohesity Helios integrates with Cisco SecureX to strengthen data security postures

• IBM partners with MonetaGo to bring secure financing to ASEAN region

• How AI can fight human trafficking

• Coalition acquires Attune to expand its commercial insurance offerings

• Keysight collaborates with NXP Semiconductors to advance the development of 5G FWA solutions

• iXsystems partners with Futurex to give TrueNAS users more cryptographic control of their data

• Thales and Google Cloud deliver cloud offering for French companies and public sector institutions

• 42Crunch expands its global team with two key executive appointments

• 23andMe and JFrog partner to solve code injection vulnerability

• Uptake names Kayne Grau as CEO

• deepwatch appoints two cybersecurity industry executives to Board of Advisors

• Eric Schou joins Cisco AppDynamics as CMO

• Versa Network names Lalit Kumar as CFO

• Microsoft: 58% of Nation-State Cyberattacks Come From Russia

• HP Extends Security Features to Work-from-Home Devices

• Microsec.ai Launches Solution to Deliver Agentless Runtime Protection for Multi-cloud Infrastructure as a Service

• Steve Jobs Asked Dell to Pre-Install Mac OS on PCs and Pay Hundreds of Millions in Royalties

• CISA chief looks to new system to attract cyber talent

• Microsoft: 58% of Nation-State Cyberattacks Come from Russia

• FIN12 ransomware gang don’t implement double extortion to prioritize speed

• IT Security News Daily Summary 2021-10-07

• Apple’s In-App Purchase Rules Are Anti-Competitive, Rules Dutch Antitrust Watchdog

• Navigating Path Traversal Vulnerabilities in Java Applications

• IT spend expected to trend up, acting DOD CIO says

• What Are Some Red Flags in a Vendor Security Assessment?

• Apache Releases HTTP Server version 2.4.51 to Address Vulnerabilities Under Exploitation

• next-generation firewall (NGFW)

• Survey: Federal IT workers say agencies are lagging with digital transformations

• DOD launches ‘continuous vetting’

• Twitch Leak Included Emails, Passwords in Clear Text: Researcher

• Navy Warship’s Facebook Page Hacked to Stream ‘Age of Empires’ Gaming

• Rapid RYUK Ransomware Attack Group Christened as FIN12

• CyberArk Leads the PAM Omdia Universe

• Apache Releases HTTP Server version 2.4.51 to Address Vulnerabilities Under Exploitation

• How to Shoot ProRes Video on iPhone 13 Pro and iPhone 13 Pro Max

• What You Need to Know About Data Security Heading into 2022

• County DA pilots race-blind charging algorithm

• A holistic approach to vulnerability management solidifies cyberdefenses

• Lawfare Live: Adam Klein and Benjamin Wittes on FISA Applications

• BrandPost: How to Stop Data from Walking Out the Door During the Great Resignation

• Russian spies reportedly used SolarWinds hack to steal US counterintelligence details

• What are Network Firewalls?

• Here’s what to know about a ransomware group that’s targeting the healthcare industry

• VMware lays out its vision for “easy” security

• ExtraHop adds new threat hunting and network advisory services to Reveal(x) 360 NDR

• Patching Too Tortuous for IT Pros

• Google Protects Your Accounts – Even When You No Longer Use Them

• Twitter Sells Mobile Ad Platform MoPub

• You know what ransomware attackers really, really like? Yes, your backups…

• Former Google Employees Launch Supply Chain Security Startup

• When Could the October Apple Event Be Held?

• Why Businesses Need to Refresh Cyber Resilience in the Cloud Era

• CISA, NIST Says Use Cybersecurity Control Systems

• Russia To Send Bailiffs To Collect Unpaid Facebook Fines

• 4 Key Questions for Zero-Trust Success

• How to evaluate and deploy an XDR platform

• Apple Releases New macOS 12 Monterey Public Beta

• Twitch attributes breach to server configuration error, resets all stream keys

• No honor among thieves: One in five targets of FIN12 hacking group is in healthcare

• How to use this unique method of securing SSH

• S3 Ep53: Apple Pay, giftcards, cybermonth, and ransomware busts [Podcast]

• #DTX2021: A Beginner’s Guide to Chaos

• Third-party September patch roundup: Another heavy month of fixes

• Face Recognition Isn’t Just Face Identification and Verification: It’s Also Photo Clustering, Race Analysis, Real-time Tracking, and More

• Face Recognition Technology: Commonly Used Terms

• 8 Best Gaming Laptops 2021 in Philippines – Review & Buying Guide

• Younger Workers: Security Is a ‘Hindrance’

• How biometric payment cards can perfect the contactless payment experience

• Securing the edge with Zero Trust

• Network traffic analysis using Wireshark

• Aggressive Ransomware Group FIN12 Moves Fast, Targets Big Companies

• US Creates National Cryptocurrency Enforcement Team

• Mark Zuckerberg Responds To Whistleblower, Says Facebook Isn’t Putting Profits Over Safety

• New Kaspersky Service Delivers Cyberthreat Insights on Request

• Hyper’s New 6-in-1 Hub for USB-C iPads Features Media Playback Keys

• Python Ransomware hits ESXi Hypervisors Virtual Machines

• SolarWinds Hackers Stole US Sanctions Data – Report

• How does the Advent of New Technologies Impact Information Security?

• 2021 Hispanic Heritage Month Pt. 3: A Celebration of Hispanic Heritage and Hope

• A unique method of securing SSH

• #DTX2021: AI Ethics in Practice: How to Turn AI Principles Into Practical Governance and Compliance?

• CISA Releases Guidance: TIC 3.0 Remote User Use Case

• Cisco Releases Security Updates for Multiple Products

• US Navy ship Facebook page hijacked to stream video games

• Medtronic recalls insulin pump controllers over life-threatening flaws

• SSL VPN (Secure Sockets Layer virtual private network)

• Cisco Patches High-Severity Vulnerabilities in Security Appliances, Business Switches

• Iran-linked MalKamak Hackers Targeting Aerospace, Telcos With ShellClient RAT

• Apache HTTP Server vulnerability under active attack

• New Regulations Are Coming — Get a Handle on Your App Portfolio

• CISA Releases Guidance: TIC 3.0 Remote User Use Case

• Cisco Releases Security Updates for Multiple Products

• PoC exploit for 2 flaws in Dahua cameras leaked online

• With Pre-Orders Open in Less Than 24 Hours, There’s Still a Lot We Don’t Know About the Apple Watch Series 7

• Welland Park Academy IT Systems Hacked by a Former Employee Who Was Getting Bored

• Medtronic Cybersecurity Risks: Some Devices Should Be Returned to Vendor

• NSO Group’s Pegasus malware was used to spy on Dubai princess’s lawyers during child custody dispute

• The Complete Guide to Apple MagSafe Chargers, Cases, and Accessories

• Amazon Sued By Workers Over Lengthy Covid Screening Times

• The Real Cost of Ransomware

• How the cloud eased the VA’s pains during the pandemic

• BYOD security warning: You can’t do everything securely with just personal devices

• Ransom disclosure law would give firms 48 hours to disclose ransomware payments

• How Integration is Evolving: The X Factor in XDR

• Deals: Save on Apple Pencil 2 ($109), MagSafe Charger ($34), and the 512GB MacBook Air ($1,099)

• When You Can Pre-Order the Apple Watch Series 7 in Every Time Zone

• What is Spear Phishing? Definition, Examples, Prevention Strategies

• ShellClient Malware Used against Aerospace and Telco Firms

• BYOD security warning: You can’t do everything securely with personal devices, says cybersecurity body

• Microsoft: Russia Behind 58% of Detected State-Backed Hacks

• Twitch Confirms Huge Data Breach Of Confidential Data

• Gretel.ai, a platform for generating synthetic and privacy-preserving data, raises $50M

• Nigerian Man Living in U.S. Charged Over Role in BEC Scheme

• New Cybersecurity Regulations Released By TSA For Trains And Planes

• Canopy Parental Control App Wide Open To Unpatched XSS Bugs

• The Justice Department Has A New Team Of Crypto Cops

• Dubai Ruler Hacked Ex-Wife Using NSO Pegasus Spyware, High Court Finds

• The Twitch Hack Is Worse For Streamers Than For Twitch

• Adobe Launches Premiere and Photoshop Elements 2022

• Gretel.ai, a platform for generating synthetic and privacy-preserving data, raises $30M

• 4 Experts – Atom Silo grp Attacks Confluence Servers

• Comment: Facebook Locked The Doors And Left The Key Inside – Insight Into The Outage

• Apache Path Traversal & RCE 0-Day Bug in Exploited in Wild – PoC Exploit Released

• FCW Insider: October 7, 2021

• Quick Hits

• Cybercriminals threaten to hack EU hospitals in latest COVID-19 vaccine scam

• New cybersecurity regulations released by TSA for trains and planes

• Transdev denies data stolen by ransomware group, connects leak to September attack on client

• 4 Ways to Combat Modern Threats in Financial Services

• Overcoming the User Visibility Challenge

• TSA to issue cybersecurity requirements for US rail, aviation sectors

• #DTX2021: Adapt to Succeed During Times of Great Disruption, Says Astronaut Adam Steltzner

• Code Execution Bug Affects Yamale Python Package — Used by Over 200 Projects

• A Zero-Trust Future For A Hybrid Working World

• The Department of Justice Intends to Sue Contractors Who Don’t Report Cybersecurity Breaches

• UAE Ruler Hacked Ex-Wife’s Phone Using NSO Pegasus

• #DTX2021: Houston, We Have a Breach: Cyber Preparedness Advice From Lisa Forte

• iPhone 14 Unlikely to Rely on Hole-Punch Design Entirely and May Keep Notch, No Under-Screen Touch ID, Leaker Claims

• Apple Looking to Expand CarPlay With New Integrations for AC, Seats, Instrument Cluster, and More

• Stop. Do you really need another security tool?

• Pluribus, which develops software-defined networking software, raises $20M

• Medtronic Recalls Medical Devices Due to Security Risks That Can Lead to Injury, Death

• Penetration Testing Your AWS Environment – A CTO’s Guide

• Twitch data breach updates: login credentials or card numbers not exposed

• Ransomware in the CIS

• 16-31 August 2021 Cyber Attacks Timeline

• Google to auto-enrol users, YouTubers into 2SV

• Police Crack Multimillion-Dollar Real Estate Fraud Gang

• Anker Launches Soundcore Liberty 3 Pro Earbuds With Active Noise Cancellation and a Stemless Design

• Scaled Down ‘Apple TV+’ App Now Available on 2016 and 2017 LG Smart TVs

• Twitch Was Hacked

• Honeywell Critical Vulnerabilities in Experion Process Knowledge System and ACE Controllers

• Building a Secure Remote Connection Solution for Today’s Business

• Data Breach Volumes for 2021 Already Exceed 2020 Total

• New U.S. Government Initiative Holds Contractors Accountable for Cybersecurity

• Researchers discover ransomware that encrypts virtual machines hosted on an ESXi hypervisor

• Tripwire Patch Priority Index for September 2021

• Apple Website Experiencing Errors, Briefly Reinstates Phil Schiller As Senior VP of Marketing [Updated]

• Serious Data Exposure Vulnerabilities Spotted In OnionShare Platform

• FSU’s university-wide resiliency program focuses on doing the basics better

• Top cybersecurity statistics, trends, and facts

• Avast Business Takes Home AV-TEST Top Rated Award | Avast

• Infosec Experts: Twitch Breach “As Bad as it Gets”

• Apple now requires all apps to make it easy for users to delete their accounts

• iPad mini 6, Facebook’s Time-Out, and a Contactless iPhone Rip-Off – Intego Mac Podcast Episode 208

• Former Kent police officer sentenced for downloading child sex abuse material

• Apple Requires Devs to Make it Easy for Users to Delete 3rd-Party App Accounts

• Paddle Plans to Launch Alternative In-App Purchase System on iOS That Circumvents Apple’s Fees

• Operation GhostShell: MalKamak APT targets aerospace and telco firms

• Do you know what your supply chain is and if it is secure?

• Twitch Suffers Massive 125GB Data and Source Code Leak Due to Server Misconfiguration

• What Is Lateral Movement? Lateral Movement Explained

• Fantasy Football Hub – 66,479 breached accounts

• State-sponsored Chinese crims targeted India with tax and COVID phishing

• DTA certifies four cloud providers to store sensitive government data

• Cyber Security WEBINAR — How to Ace Your InfoSec Board Deck

• Electronic warfare: The critical capability of dominating the electromagnetic spectrum

• Finding the right mix: Leveraging policy and incentives to improve healthcare cybersecurity

• Facebook releases tool to discover Security Issues and Software Bugs

• Twitch hacked, and 100GB data stolen

• Which technologies can help legal and compliance teams navigate a changing landscape of risk?

• Cybersecurity best practices lagging, despite people being aware of the risks

• Security does not end with Implementing Controls

• Through edtech, society’s cybersecurity ability is heading up a notch

• Considerations when choosing an XDR solution

• Organizations putting security and compliance at the forefront to strengthen trust perceptions

• Notorious Ransomware Gang Arrested in Ukraine With The Support of EUROPOL

• Fraudulent robocalls to cost consumers $40 billion in 2022

• CIS Control 07: Continuous Vulnerability Management

• ORM software market to reach $2.6 billion in 2026

• Does your company have a cybersecurity strategy? Is it any good?

• How Ransomware Uses Encryption – And Evolves

• Fusion Scenario Testing empowers organizations to evaluate responses under realistic conditions

• ExtraHop expands Reveal(x) Advisor services to accelerate incident response for organizations

• Citrix Secure Private Access delivers zero trust access to apps and data

• Swimlane Cloud helps security teams to overcome process and data fatigue

• Mandiant launches SaaS offerings to help cyber security teams prepare for and detect attacks

• Apple Makes ‘Celebrating Steve’ Tribute Video Available on YouTube

• VMware Tanzu provides developers with autonomy to build and deploy apps on any cloud

• Veeam updates support for cloud adoption and data protection

• VMware Edge enables organizations to manage edge-native apps across multiple clouds

• European Parliament passes non-binding resolution to ban facial recognition

• To the moon and hack: Fake SafeMoon app drops malware to spy on you

• Google to turn on 2FA by default for 150 million users, 2 million YouTubers

• Tigera now supports Calico Open Source on Amazon EKS Anywhere

• YubiKey Bio Series supports fingerprint recognition for passwordless and second factor logins

• What the CEO Saw: Colonial Pipeline, Accellion Execs Share Cyberattack War Stories

• Keysight delivers modular network cybersecurity test platform for hyperscale data centers

• Zyxel upgrades its ATP firewalls to protect networks and data from advanced cyber threats

• TSA to impose cyber mandates on major U.S. rail systems

• Zero trust and UES lead Gartner’s 2021 Hype Cycle for Endpoint Security

• Accenture acquires Advoco to scale its capabilities for intelligent asset management solutions

• Virtuozzo acquires Jelastic to strengthen its position in the cloud service market

• Moogsoft enhances IRIS’s monitoring solution with AIOps capabilities

• US Deputy Attorney General launches cryptocurrency enforcement team at DOJ

• Serverless protection for execution environments made easy

• Orca Security raises $550M to accelerate transformation of cloud security industry

• Byos appoints Rob Valiton as COO and John Bryant as Director of Enterprise Sales

• Open Systems expands its executive team with new appointments

• Otava promotes Cyndi Lyon to Chief Experience Officer

• Veritas announces Public Sector Advisory Board to solve complex challenges of government organizations

• Dee Dee Acquista joins Mandiant as VP of Channel Sales

• Ohio builds sentencing database

• Google to Fix Bug That Disables Safari AMP Search Results on iOS 15 Devices

• Commvault Backup-as-a-Service solutions now available in APJ region

• InspereX selects Avaya Cloud Office to improve communication, flexibility and reduce risk

• Cybernance provides certified audit assessments for advanced cyber security protections

• David MacKay joins Infostrux as CRO

• CISO (chief information security officer)

• America Urged to Prepare for Shift to Post-Quantum Cryptography

• Space ISAC and NY Metro InfraGard Members Alliance Announce Collaboration to Advance the Mission of Cybersecurity in Space

• Exclusive: Researchers dumped Gigabytes of data from Agent Tesla C2Cs

• IT Security News Daily Summary 2021-10-06

• Atlas VPN: DDoS attacks expected to reach 11M by end of 2021

• Canopy Parental Control App Wide Open to Unpatched XSS Bugs

• MacOS Security: What Security Teams Should Know

• 5-Year Breach May Have Exposed Billions of Text Messages

• DOD personnel now subject to ‘continuous vetting’

• VMware ESXi Servers Encrypted by Lightning-Fast Python Script

• Aerospace, Telecommunications Companies Victims of Stealthy Iranian Cyber-Espionage Campaign

• Twitch source code and sensitive data leaked online

• Managing privileged access for ‘critical’ software

• Phishing Attacks Are Top Cyber Crime Threat, Easier Than Ever to Create and Deploy

• Streaming Site Twitch Confirms Hack

• Texan Imprisoned Over COVID-19 Hoax

• How to Determine the Best Managed Cybersecurity Model for You

• Over 1.5 billion Facebook users’ personal data found for sale on hacker forum

• US Poised to Go After Contractors Who Don’t Report Breaches

• DevOps Security Startup Mondoo Scores $15M Investment

• iOS 15 Features, Tips, and Tricks You Probably Don’t Know

• Everything New in iOS 15.1 Beta 3: ProRes Video and Macro Mode Toggle for iPhone 13 Pro Users

• The Telegraph newspaper exposed 10TB of subscriber data

• Dive Into OAuth Grant Types and OpenID Connect Flows

• DHS adds cyber requirements for transportation industry

• Are you making good progress with Kubernetes? Cybercriminals are progressing faster

• Becoming a new chief information security officer today: The steps for success

• ESPecter Bootkit Malware Haunts Victims with Persistent Espionage

• ESET Discovers UEFI Bootkit in Cyber Espionage Campaign

• Ransomware Risk Assessment Service Aims to Deflect Attacks

• MacRumors Giveaway: Win an iPhone 13 Pro Max and a Protection Plan From AKKO

• iOS 15: 50 Tips, Tricks and Hidden Features

• Running a recent Apache web server version? You probably need to patch it. Now

• BrandPost: DLP Still Doesn’t Work: Proofpoint Sues Former Employee

• Publishers Tackle Doctoring of Research Images

• DHS faces steep climb with financial systems modernization

• DISA reorganizes cloud office

• Singapore inks pact with Finland to mutually recognise IoT security labels

• Apache web server zero-day bug is easy to exploit – patch now!

• Apple Seeds Third Beta of tvOS 15.1 to Developers

• Apple Seeds Third Beta of watchOS 8.1 to Developers

• Apple Seeds Third Betas of iOS and iPadOS 15.1 to Developers

• Apple Seeds Ninth Beta of macOS Monterey to Developers

• A Simple Bug Is Leaving AirTag Users Vulnerable to an Attack

• Bring on the Fist Bumps and Nasal Swabs—Tech Conferences Are Back

• Apple Pay security flaw allows hackers to steal your money when your iPhone is locked

• Coinbase hackers exploit multi-factor flaw to steal from 6,000 customers

• White House to Enlist 30 Countries to Fight Ransomware

• Why Not Sharing Is Caring When It Comes to Cybersecurity

• Apache Releases Security Update for Apache HTTP Server

• Mozilla Releases Security Updates for Firefox and Firefox ESR

• Expert Quote: Apache Airflow Servers Data Leak

• Syniverse SMS Routing Firm Discloses Five-Year-long Breach

• Cybersecurity – How Confident (Complacent?) Are You?

• Introducing the Palo Alto Networks Panorama Advanced AlienApp

• What is advanced persistent threat? Explaining APT security

• Windows 11 Arrives As Free Update, But Users Should Check Compatibility

• Facebook Deletes Content Requested By Russia, But Will Still Be Fined

• Chief data officers making strides in federal agencies

• AttackIQ Named Newest Competitor in 2021 ‘ASTORS’ Awards Program

• Twitch source code, business data, gamer payouts leaked in massive hack

• How to encrypt specific sections of Google Docs with the DocSecrets add-on

• #DTX2021: How to Keep Pace with the Rising Threat Landscape

• Apache Releases Security Update for Apache HTTP Server

• Mozilla Releases Security Updates for Firefox and Firefox ESR

• Halide’s New Macro Mode Lets You Take Close-Up Photos Without an iPhone 13 Pro

• Hacker breaches Amazon’s Twitch video site, exposing future product plans

• Microsoft’s 5 guiding principles for decentralized identities

• Running an Apache web server? You probably need to patch it. Now

• A Devastating Twitch Hack Sends Streamers Reeling

• 3 focus areas for DevSecOps success

• How To Triage Leaked Credentials

• A History, Taxonomy and Qualified Defense of the Presumption of Regularity

• Things that are not PogChamp: Twitch has its source code, streamer payout data leaked

• Twitch hacked- Source code and Streamer payment figures leaked

• Databricks acquires 8080 Labs to bolster its low-code offerings

• Feds could see relief as Public Service Loan Forgiveness gets a reboot

• Best VPN for Chrome and Chromebooks 2021

• Twitch Gets Gutted: All Source Code Leaked

• Optiv Rebrands as Cyber Advisory & Solutions Leader

• New AirPods Pro Firmware Enables Conversation Boost, Here’s How to Turn It On

• Apple Says Apps Supporting Account Creation Must Offer Account Deletion Starting Early Next Year

• Heimdal™ Adds a New Product to Its Suite of Cybersecurity Solutions: Remote Desktop

• 5 Crucial Tips for Building a Mobile App for Your Business

• Mark Zuckerberg: Frances Haugen’s Allegations Don’t Make Sense

• Nvidia Offers EU Concessions Over $54bn ARM Deal

• Cybereason: Remote access Trojan targeted telecomms and aerospace

• How a phishing attack thwarted MFA to steal money from Coinbase customers

• Major SMS Routing Carrier Was Hacked For Five Years

• Ransomware Law Requires Quick Payment Disclosure

• The US Has The Largest Cybersecurity Workforce In The World

• The Telegraph Leaked 10 TB Database

• Patch now! Apache fixes zero-day vulnerability in HTTP Server

• What special needs kids need to stay safe online

• Yubico Enables Biometric Logins With New YubiKey Bio Series

• Syniverse Hack

• Deals: Woot Shares First Sale on AirTag 4-Pack and Amazon Discounts Multiple Beats Headphones

• OLED 12.9-Inch iPad Pro Rumored to Feature Brighter, More Durable Display

• EU Plans to Hit Apple With Antitrust Charges Over Apple Pay

• Apache HTTP Server Zero-day Vulnerability Exploited in the Wild, Users Should Patch ASAP

• Things that are not PogChamp: Twitch appearing to have its source code, streamer payout data leaked

• Box taps deep learning to detect sophisticated malware

• Best security key 2021: Protect your online accounts

• Get maximum security and unlimited bandwidth with a 2-year subscription to IPVanish

• Box adds new integrations with Microsoft, Slack, steps up security

• A Culture of Unity Is Key to Solving the Cyber Challenge

• Emerging trends from a year of cybersecurity threats

• Cybersecurity Jobs: 5 Tips to Help You Get Hired

• Mental Health & Burnout in Cybersecurity: Tips, Stories and Insights

• Arizona governor announces the launch of Command Center to protect state computer systems

• Facebook Outage Highlights Urgency For Third-Party Risk Management

• Eutelsat Raises Stake In OneWeb

• How Can You Use A VPN On Netflix?

• Banking and Finance Data Breaches: Costs, Risks and More To Know

• Microsec.ai Exits Stealth With Cloud Application Runtime Protection Platform

• Police raid takes fake flat listings offline

• 150 Million Google User Accounts Will Automatically Be Enrolled Into 2FA

• Looking ahead to the API economy

• Apache HTTP Server Project patches exploited zero-day vulnerability

• Gravwell Emerges From Stealth With Data Fusion Platform for Security Teams

• The New Paradigm for Work from Anywhere: Zero Trust Network Access (ZTNA)

• Hackers Could Disrupt Industrial Processes via Flaws in Widely Used Honeywell DCS

• #DTX2021: Louis Theroux Discusses the Coalescence of Tech and Human Behavior

• Iranian Hackers Abuse Dropbox in Cyberattacks Against Aerospace and Telecom Firms

• A company spotted a security breach. Then investigators found this new mysterious malware

• Facebook’s algorithm problems go well beyond the company: LightShed’s Greenfield

• ‘Twitch compromised’: What we know so far, and what you need to do

• Meet the Chapters Being Honored at the 2021 (ISC)² Global Achievement Awards

• 3 Ways the Government Can Track Your Phone

• Firefox 93 Improves Protection Against Tracking, Insecure Downloads

• Nokia Tablet Unveiled By HMD Global

• What’s in a Threat Group Name? An Inside Look at the Intricacies of Nation-State Attribution

• Over 100,000 Apache HTTP Servers Affected by Actively Exploited Zero-Day Flaw

• Op-Ed: Congress must create a standard to encourage companies to report cyberattacks

• As battle against cybercrime continues during Cybersecurity Awareness Month, Check Point Research reports 40% increase in cyberattacks

• Asean champions regional efforts in cybersecurity, urges international participation

• Audit: Cybersecurity Weak for Many Kansas School Districts

• Europol’s ‘Say No!’ campaign travels to the Western Balkans

• Iranian APT targets aerospace and telecom firms with stealthy ShellClient Trojan

• FCW Insider: October 6, 2021

• Superhero Passwords Pose Serious Risk to Personal, Enterprise Accounts

• Iranian hackers abusing Dropbox in cyberespionage campaign

• NCSC: Revoke Admin Access for BYOD Users Immediately

• iPad Mini 6 Screen Distortion Complaints Surface, But No Evidence Yet That It’s a Widespread Issue

• Element celebrates The Great Facebook Outage with a Signal bridge for Matrix

• Atom Silo Uses DLL Side-Loading to Deploy Ransomware

• Afghan smuggling network dismantled in Romania and Germany

• Synopsys’ BSIMM12 reveals 61% Increase in Open Source Identification and Management

• 5 steps toward real zero trust security

• Microsoft Exchange Emergency Mitigation: What admins need to know

• Google to turn on 2-factor authentication by default for 150 million users

• Tim Cook Wants Apple Devices to Be Used for Creativity, Not ‘Endless, Mindless Scrolling’

• Here’s What Caused Facebook’s Global Outage

• Misconfigured Apache Airflow Instances Expose Sensitive Information

• Patch Apache HTTP Servers Now to Avoid Zero Day Exploit

• Google to turns on 2-factor authentication by default for 150 million users

• Neiman Marcus Customer Data Breach – Expert Comments

• Is Free Wi-Fi Really Safe? | Avast

• Safari 15 Extension for Mac Helps You Tell Which Tab Is Active

• 18 arrested as police across Europe seize 350 firearms

• Expert Insight: Amnesty Int’l Being Exploited In Malware Campaign

• Windows 11: The Latest Security “Fun” For IT Professionals

• Republican Party of Texas – 72,596 breached accounts

• Build your own Android security product

• Multiple Critical Flaws Discovered in Honeywell Experion PKS and ACE Controllers

• UK newspaper The Telegraph exposed a 10TB database with subscriber data

• Facebook CEO Mark Zuckerberg on putting profit before safety: ‘That’s just not true’

• Critical infrastructure IoT security: Going back to basics

• Google announces perks for developers to prevent major vulnerabilities

• Interpol offers online Cybersecurity Campaign

• Digital key builds on past practices to create a more secure future

• Obstacles and threats organizations face when protecting AD

• LANtenna attack allows exfiltrating data from Air-Gapped systems via Ethernet cables

• 91.5% of malware arrived over encrypted connections during Q2 2021

• The meaning behind XDR: A beginner’s guide to extended detection and response

• ATO attacks increased 307% between 2019 and 2021

• Organizations must reevaluate IT investments to advance their digital transformation

• One in three IT security managers don’t have a formal cybersecurity incident response plan

• 4 Types of MSPs that Can Help You Meet Your Cybersecurity Needs

• Abnormal Security ICES platform protects against the full spectrum of email attacks

• Facebook CEO Mark Zuckerberg on putting profit before safety: “That’s just not true”

• Don’t Miss the Public Sector Ignite Cybersecurity Conference!

• Mosyle Encrypted DNS Filtering & Security Solution automates web filtering for Apple devices

• ActZero MDR delivers detections and response actions for cloud-based services

• Qualys Ransomware Risk Assessment Service helps organizations to proactively combat ransomware attacks

• Updated CDR rules to allow accredited participants to appoint representatives

• Firefox 93 arrives with tab unloading, insecure download blocks and enforced referrer trim

• Unbound Security unveils code signing key protection capabilities to prevent supply chain attacks

• Integreon expands CIR capabilities to now include Cyber Incident Notification Services

• How to help your DevOps teams become integral to your cybersecurity strategy

• Coviant Software Diplomat MFT SFTP Server offers secure file transfer automation

• WatchGuard’s mid-range firewalls protect small and midsize businesses against encrypted malware

• Stratasys ProtectAM helps safeguard sensitive information across DoD networked 3D printers

• ADVA aPNT+ platform defends critical network infrastructure from cyber threats

• Google to auto-enroll 150m users, 2m YouTubers with two-factor authentication

• How to Check if Someone is Using Your Identity

• By end of 2021, Google plans to auto-enroll 150 million users in two-step verification and require 2 million YouTube creators to turn it on

• 5 Good Reasons to Hire a Ransomware Recovery Expert

• CISA Releases Security Advisory for Honeywell Experion and ACE Controllers

• FileCloud integrates with Microsoft Teams to simplify file and link sharing from a single workspace

• CommScope introduces ARRIS SURFboard G34 and G36 DOCSIS 3.1 cable modem and Wi-Fi 6 routers

• Keysight unveils Industrial Visibility solutions to meet monitoring requirements worldwide

• Mandiant Tackles Ransomware and Breaches With New Tools

• CISA Releases Security Advisory for Honeywell Experion and ACE Controllers

• Inspector General Reform on the Table

• Come Work With Lawfare, As Our Digital Media Specialist!

• The FBI’s FISA Mess

• Sepio Systems integrates with Guardicore Centra to defend Tier-1 bank against cyber attacks

• Scanco partners with CoreChain to automate the payment process with blockchain technology

• Cisco and Tata Communications expand strategic global partnership to help create new services

• Tobii ehances security features for new line of Acer PCs with Tobii Aware

• How to Recover From a Ransomware Attack

• Mandia Alerted NSA on FireEye’s SolarWinds Breach

• Misconfigured Apache Airflow Platforms Threaten Organizations

• Apple Crediting 3% Daily Cash to Apple Card Users Who Experienced Issues With iPhone 13 Purchases

• Adaptive Shield raises $30M to enable companies to secure their SaaS stacks

• Convergint acquires Keyotel to expand its footprint across Germany

• Dragos partners with Xylem to bring industrial cybersecurity in the water sector

• Researcher finds vulnerability in popular parental control app Canopy

• Hong Kong firm becomes latest marketing company hit with REvil ransomware

• VigiTrust launches VigiQuiz to provide interactive training for cybersecurity awareness

• BT and Toshiba build commercially available quantum-secured metro network in London

• JFrog receives CNA certification to help security researchers verify and triage their vulnerabilities

• SynSaber appoints Michael Quigley as Chief Architect

• Mauro Carobene joins Kaleyra as Chief Business Officer

• Bring on the Publicity Trolls: Federal Appeal Court Ruling Drastically Undermines Online Speech

• Google to Enable Two-Factor Authentication for 150M More Users

• TangleBot Android malware hijacks phone to steal login credentials

• Cyren: 300% rise in phishing attacks on bank customers

• Facebook Whistleblower Set To Testify Before Congress, Ask Government To Regulate Facebook

• Best Ransomware Removal and Recovery Services

• IT Security News Daily Summary 2021-10-05

• Nominee to lead USAF acquisition names software, IT as top priorities

• Axis releases updates for three new vulnerabilities found by security company

• Analysis of a Parental Control System

• IP Surveillance Bugs in Axis Gear Allow RCE, Data Theft

• Why Windows 11’s security is such a big deal

• New AirPods Pro and AirPods Max Firmware Adds Updated Find My Integration

• The Biggest Cybersecurity Threats Facing Healthcare Organizations—and How to Protect Yourself

• The Top 6 Cyber Attacks Of 2021 So Far

• It’s Cybersecurity Awareness Month. Does your business have a viable plan yet?

• How the cloud eased VA’s COVID pains

• One Identity Acquires OneLogin

• Apple Users Underwhelmed by iPhone 13 and Apple Watch Series 7, Survey Shows

• Enhance Network Security for AWS Transit Gateway

• Apache Web Server Zero-Day Exposes Sensitive Data

• Squid Game Scenes Cut Over Data Exposure

• What Happens to Victims When a Ransomware Gang Vanishes?

• Cybersecurity risk assessment: Does Your Company Need It?

• DISA restructures cloud office

• BlackBerry ties malware campaign targeting victims in India to Chinese cyberespionage group

• What, exactly, is cybersecurity? And why does it matter?

• Chase Bank Heavily Targeted Via XBALTI Phishing Kit

• Apple CEO Tim Cook Reflects on Steve Jobs in Heartfelt Memo to Employees

• Apple Updates AirPods 2, AirPods Pro and AirPods Max Firmware to Version 4A400

• White House Dark Web Marketplace Shuts Down its Operations

• Is accidental data deletion the biggest threat to data protection?

• Apache Fixes Actively Exploited Zero-Day Vulnerability, Patch Now

• One Identity acquires OneLogin in bid to offer consolidated IAM suite

• Reolink RLC-811A security camera review: Pan tilt, zoom and an extra loud siren

• Adaptive Shield Raises $30M for SaaS Security Posture Management

• Northern Irish Voucher Scheme Marred by Identity Snag

• Apache patch a zero-day flaw exploited in the wild

• Apple Responds to Report Saying Company’s Health Team Has Faced Several Internal Issues

• Banks Pressuring Visa to Cut Back on Apple Pay Fees

• AT&T Business Summit is virtual Oct. 27-28 and free!

• Whistleblower Says Facebook Knows It Is Harming People

• How Does Hashgraph Work – A Simple Guide for Beginners

• Executive Spotlight: Q&A with Vice President, Global Commercial, Britt Norwood

• IRS solidifies relationship with management group

• Facebook whistleblower: ‘Morally bankrupt’ social giant will have to ‘hook kids’ to grow

• Why Access Control Has Become an Important Front in the War Against Cybercrime

• Researchers Discover UEFI Bootkit Targeting Windows Computers Since 2012

• Facebook shoots own foot, hits Instagram and WhatsApp too

• Tesla Ordered To Pay $130 Million To Former Worker

• UK To Base Its ‘National Cyber Force’ In Lancashire

• Mobile security: It’s time for a little tough love for Android users

• Unnamed Ransomware gang uses a Python script to encrypt VMware ESXi servers

• Practical tips on how to use application security testing and testing standards

• Cyber Attack fear for abandoned US Vehicles and Aircrafts in Afghanistan

• McAfee Enterprise Is Ready for Windows 11, Are You?

• 2021 Hispanic Heritage Month Pt. 2: A Celebration of Hispanic Heritage and Hope

• When your VPN is a matter of life or death, don’t rely on reviews

• UEFI threats moving to the ESP: Introducing ESPecter bootkit

• Water Wars: ‘AUKUS Is Born’

• Multi-Factor Authentication Best Practices & Solutions

• Be Cyber Smart During Cybersecurity Awareness Month

• Illegal Activities Endure on China’s Dark Web Despite Strict Internet Control

• Certified Information Systems Auditor (CISA)

• How to Build an Incident-Response Plan, Before Security Disaster Strikes

• Phishing campaigns against Chase Bank customers are on the rise

• Qualys Ransomware Risk Assessment service aims to help you thwart potential attacks

• Be Cyber Smart During Cybersecurity Awareness Month

• Apache Warns of Zero-Day Exploit in the Wild — Patch You Web Servers Now!

• Criminals were inside Syniverse for 5 years before anyone noticed

• How to Use Multitasking on the iPad

• Ransomware gang behind attacks on 100+ companies busted

• New Attack Let Hackers Steal Data From Air-Gapped Networks Using Ethernet Cable

• Earning trust from others — a CIA veteran’s suggestions

• YubiKey Bio builds biometric authentication into a security key

• First look at the YubiKey Bio

• New Python ransomware targets virtual machines, ESXi hypervisors to encrypt disks

• Oops! Compound DeFi Platform Gives Out $90M, Would Like it Back, Please

• Facebook Blames Outage on Faulty Router Configuration

• Secure Data Collaboration Firm Duality Technologies Raises $30 Million

• Arizona Launches Command Center to Combat Cyberattacks

• Cloud Security Company Orca Raises $550 Million in Extended Series C Round

• CVE Data Is Often Misinterpreted: Here’s What to Look For

• Telegraph Newspaper Bares 10TB Of Subscriber Data And Server Logs To World+Dog

• Senate Committee Drops New FISMA Reform Bill

• iPad Pro Could Adopt OLED Display With ProMotion Down to 10Hz in 2023 or 2024

• Deals: VMware Kicks Off 15% Storewide Sale, Including New Savings on Fusion 12 Software

• Apple Now Most Popular Watch Brand Among Upper-Income U.S. Teens, Unseating Rolex

• Europol announces two more ransomware busts in Ukraine

• New Ransomware Dubbed Atom Silo Targets Confluence Servers

• Heimdal™ Security Is a Finalist at the Network Computing Awards 2021 in Five Categories

• Telegraph newspaper bares 10TB of subscriber data and server logs to world+dog

• CTO 3.0: The Neo Chief Technology Officer

• Donald Trump Asks US Judge To Reinstate Twitter Account

• New Study Links Seemingly Disparate Malware Attacks to Chinese Hackers

• Deals: Adorama Introduces New Low Prices on 32GB Apple TV 4K ($159) and AirPods Max ($449)

• Google Protects Your Accounts – Even When You No Longer Use Them

• Harassment and the Skills Gap: Improving Retention in the Security Community

• Developer-focused infrastructure security platform Mondoo raises $15M

• Cloud Services Providers Introduce Trusted Cloud Principles

• Privacy-preserving data platform Duality Technologies raises $30M

• Cloud security provider Orca Security nabs $550M

• Telecoms Giant Syniverse Discloses Years-Long Data Breach

• Microsoft Releases Windows 11, Mac Virtualization Support Still Seems Unlikely

• Be on the Lookout for These Five Common Network Security Threats

• VMware Edge launched to service enterprises developing multi-cloud apps

• Google Patches Over 50 Serious Vulnerabilities in Android

• VAT fraud with cash registers uncovered in Germany

• How to Get Your Family to Actually Use a Password Manager

• Apache Airflow Servers Leak Thousands of Credentials

• Global Telecom Company Syniverse Reveals Five-year Breach

• ICS Security Experts Share Tales From the Trenches – Part 2

• 8 Best Gaming Laptops 2021 in Philippines – Review & Buying Guide

• Atom Silo ransomware operators target vulnerable Confluence servers

• Facebook Blames Configuration Change For Global Outage

• Misconfigured, old Airflow instances leak Slack, AWS credentials

• Third-party September patch roundup: Another heavy month of fixes

• Google Pledges $1m to Secure Open Source Project

• Device identity: The overlooked insider threat

• FCC asks carriers to step up to stop SIM swapping, port-out fraud

• FCW Insider: October 5, 2021

• Text Message Giant Reveals Five-Year Breach

• Telco service provider giant Syniverse had unauthorized access since 2016

• Windows 11 is out. Is it any good for security?

• Facebook Blames Global Outage on Configuration Error

• Facebook, Instagram, WhatsApp, Messenger Are Back Online After Hours of Outage

• Labour in vineyards and farms checked across Europe

• Dark web marketplace White House announces end to its operations

• Apple’s A15 Chip Faster Than Company’s Own Claims in Independent Tests

• Apple Commemorates 10th Anniversary of Steve Jobs’ Passing

• Ransomware Hackers Who Attacked Over 100 Companies Arrested in Ukraine

• Misconfigured Apache Airflow servers leak thousands of credentials

• Looking for adding new detection technologies in your security products?

• Social Media Surveillance By Law Enforcement | Avast

• For adapting to new cloud security threats, look to “old” technology

• Five proven techniques for building effective fraud management

• Facebook October 2021 downtime could result from a revolting Cyber Attack

• Details of Pandora Papers data leak

• Large ransom demands and password-guessing attacks escalate

• How CISOs plan to accelerate the adoption of automation

• Apple Agrees to Pay $95 Million to Settle Lawsuit Claiming Refurbished Devices Aren’t ‘Equivalent to New’

• The cybersecurity issues organizations deal with remain complex and numerous

• Domain security remains an underutilized component to curb attacks

• WhatsApp, Instagram, Facebook & Messenger Down More than an Hour Globally – Back to Live Now!!

• Don’t Warn Your Co-Workers About That Phishing Test

• Security and trust in software remains top priority for buyers

• Streamline Customer Screening Today. Here’s How.

• AbleDocs ADWeb delivers manual and automated compliance auditing of websites

• IriusRisk Community Edition offers free threat knowledge base for developers

• Software AG adds new functionalities for ARIS to help automate key transformation initiatives

• Equinix expands support for Kubernetes to help companies scale their apps across any infrastructure

• Software AG updates webMethods platform to serve up data insights and automate business

• More Than 90 Percent of Malware in Q2 Came Via Encrypted Traffic: WatchGuard

• Ori Industries parters with VMware to advance telco and multi-cloud adoption for enterprises

• Amartus and MEF launch MEF LSO API Onboarding and Interop Testing Service

• One Identity acquires OneLogin to help organizations enhance their identity security

• Allot provides Asahi Net with comprehensive network analytics and real-time traffic management

• Periculus partners with Merchants Information Solutions to help SMBs protect their business

• Voyager Digital partners with Fundstrat to deliver crypto market intelligence to customers

• Intelligent Waves collaborates with Teradici to provide secure environment for government agencies

• JFrog becomes latest organization authorized as numbering authority for vulnerabilities exposure

• Midwest health system implements CynergisTek’s additional controls for more stringent requirements

• DigitalBridge extends Vantage SDC platform with the acquisition of CA22

• NetApp to acquire CloudCheckr to improve cloud infrastructure for the organizations

• Peak Fintech acquires Cubeler to expand its global footprint

• Facebook Whistleblower Slams Company For Prioritizing Profits Over Safety

• Facebook Is Down

• Cirrus Logic appoints Raghib Hussain to Board of Directors

• Cihan Tuncay joins Payfare as Head of Investor Relations and Corporate Development

• ATM bombing suspect blew himself up while filming tutorial

• Cyberattacks are getting worse, but most people aren’t taking basic security steps

• Windows 11 Available: What Security Pros Should Know

• Logicali joins MISA to expand its security solutions for customers

• i-PRO EMEA becomes independent from Panasonic to bring new products to the market

• Ivanti names Jeff Abbott as CEO

• Certified Information Security Manager (CISM)

• One Identity Acquires OneLogin to Boost Identity Security Portfolio

• IT Security News Daily Summary 2021-10-04

• Why Facebook, Instagram, and WhatsApp All Went Down Today

• Intel’s Latest PC vs. Mac Ad Involves a ‘Social Experiment’ With Apple Fans

• Bipartisan FISMA update drops

• OPM director talks federal recruitment with students

• National Smart Coalitions Partnership unites regional efforts

• Facebook Outage Drags Down Instagram, WhatsApp, Messenger, Oculus VR

• 2 suspected ransomware operators arrested in Ukraine

• Encrypted & Fileless Malware Sees Big Growth

• Windows 11 offers chip to cloud protection to meet the new security challenges of hybrid work

• Ransomware threats calls for tough conversations

• DeepMind Technologies Sued Over Data Sharing

• Pandora Spills Secrets of Super Rich

• Law Enforcement Agencies Seize $375K in Ukraine Ransomware Bust

• New Atom Silo Ransomware Group Targets Confluence Servers

• Facebook, Instagram, WhatsApp Go Down

• Neiman Marcus data breach affects millions

• Peraton wins $2.7B DHS cloud award

• What Happened to Facebook, Instagram, & WhatsApp?

• Apple Adding Its AA Battery Charger and Third-Generation Apple TV to Vintage Products List

• Lawsuit claims hospital ransomware infection cost baby her life

• It’s time to start taking digital identity seriously

• ‘Zero-day’ cyber attacks are destructive, becoming more common, says expert

• BrandPost: Think You Are Prepared for Ransomware? You’re Probably Not.

• Facebook, WhatsApp, Instagram Suffer Global Outage

• 2021 Hispanic Heritage Month Pt. 1: A Celebration of Hispanic Heritage and Hope

• Police take a piece out of a ransomware gang, but won’t say which one

• 5 principles for AppSec program maturity

• Facebook, WhatsApp, and Instagram are down worldwide, it’s panic online

• MacRumors Giveaway: Win an Apple-Themed T-Shirt From Throwboy

• Safari 15 Users Say New Tab Design is Counterintuitive

• #BeCyberSmart: When we learn together, we’re more secure together

• (ISC)² Celebrates Cybersecurity Awareness Month With Treasure Trove of Knowledge Building Resources

• Google Patched Two Further Zero-Day Vulnerabilities With Latest Chrome Browser Release

• DHS financial systems modernization still years away

• Facebook down with Messenger, Instagram, WhatsApp service disruption

• WhatsApp, Instagram, Facebook & Messenger Down More than an Hour Globally

• Latest TMF awards underscore cybersecurity

• Mandiant Confirms Name Change from FireEye, Inc. to Mandiant, Inc.

• CISA Kicks Off Cybersecurity Awareness Month

• Vulnerability Summary for the Week of September 27, 2021

• Tough conversations on ransomware ahead

• Facebook Whistleblower to Testify Before Senate

• Vulnerability Summary for the Week of September 27, 2021

• Ransomware Remains a Serious Threat

• How Continuous Monitoring is a Driver of Effective Risk Management

• How to better secure user authentication protocols

• A Journey in Organizational Resilience: Crisis Management

• Facebook goes down, along with Instagram and WhatsApp

• Jony Ive Writes Touching Letter About Steve Jobs a Decade After His Passing

• McAfee and FireEye $2 billion merger details

• Ransomware in a global context

• Ex-army admin jailed for 12 years over US military health data theft

• Prolific Ransomware Operators Arrested in Joint Law Enforcement Action

• MFA Glitch Leads To 6K+ Coinbase Customers Getting Robbed

• Researcher Refuses Telegram’s Bounty Award, Discloses Bug

• Ukrainian Cops Cuff Two Over $150m Ransomware Gang Allegations, Seize $1.3m In Cryptocurrency

• Fraudster Jailed For Stealing Military Records, Benefits

• China’s New Climate Pledge: Is Geopolitical Competition Good for the Climate?

• Private Data/Public Regulation

• UK’s £5bn National Cyber Force HQ to be sited in Lancashire beside Defence Secretary’s constituency

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Ransomware: Police arrest two in operation against ‘prolific’ gang that targeted big businesses

• Cybersecurity budgets for industrial control systems and operational tech increasing: SANS Institute

• Transnational Fraud Ring Bilks U.S. Military Service Members Out of Millions

• Two ‘Prolific’ Ransomware Operators Arrested in Ukraine

• Remote access vs. site-to-site VPN: What’s the difference?

• DevSecOps tools, culture and misconceptions: Advice from Red Hatters

• Today Marks the 10th Anniversary of Apple Introducing the iPhone 4S With Siri

• Deals: Get $10 Amazon Credit When Purchasing a $100 Apple Gift Card

• Apple Watch Series 6 vs. Apple Watch Series 7: Should You Upgrade?

• Hackers Try To Steal OTP Via Malicious Telegram Bots In Recent Campaigns

• Chinese Hackers Attack & Spy Windows Users Using Rootkits

• Data Regulations: HIPAA vs. GDPR vs. PCI

• Creating Wireless Signals with Ethernet Cable to Steal Data from Air-Gapped Systems

• Cheating on Tests

• Let’s Encrypt Root Certificate Expiration – Expert Source

• Ukrainian cops cuff two over $150m ransomware gang allegations, seize $1.3m in cryptocurrency

• Deals: New Sales Hit Every AirPods Model, Starting at $109 for Regular AirPods

• Staking Protocol Compound Users Mistakenly Receive $90M

• House Delays U.S. Infrastructure Bill Vote – Cybersecurity Funding in Jeopardy? And What Security Practitioners Say Needs to be Prioritized

• Misconfigured Airflows Leak Thousands of Credentials from Popular Services

• Do your part and #BeCyberSmart with these online safety tips

• Cybersecurity Awareness: The Basics Are the Foundation

• Poorly Configured Apache Airflow Instances Leak Credentials for Popular Services

• Pottawatomie County paid the ransom to recover its systems

• BrandPost: How to Automate Configuration Review

• Most Reliable Hosting Company Sites in September 2021

• Open source: Google is going to pay developers to make projects more secure

• Hackers Stole Cryptocurrency From Thousands of Coinbase Accounts

• Two ransomware operators were arrested in Kyiv with EUROPOL’s support

• Apple Watch Series 7 Pre-Orders to Start This Friday, Available on October 15

• Sandhills Shut Down by Ransomware Attack

• Expired Let’s Encrypt Root Certificate Causes Problems for Many Companies

• Top 5 Skills Modern SOC Teams Need to Succeed

• The Shortfalls of Mean Time Metrics in Cybersecurity

• A New APT Hacking Group Targeting Fuel, Energy, and Aviation Industries

• Google commits $1M to new Linux Foundation open source security rewards program

• Cybersecurity Awareness Month: #BeCyberSmart

• ‘Report a Problem’ App Store Option Returns to Combat Scams

• One Identity completes acquisition of OneLogin

• New offensive cyber force will “confront aggressive behaviour”, says Foreign Secretary

• Fraudster jailed for stealing US military health records, millions in benefits

• Pottawatomie County Fixing Systems After Ransomware Attack

• Expert Reacted On Hackers Steal Funds Of 6,000 Coinbase Customers

• Cybersecurity Experts Comment On Pandora Papers

• Cybersecurity M&A Roundup: 43 Deals Announced in September 2021

• New APT ChamelGang Targets energy and aviation companies in Russia

• Apple Ramps Up iPhone 13 Chip Orders, Scales Down Orders for Older iPhones

• Biden Administration Gathers 30 Countries for a Meeting on Cybercrime and Ransomware

• 7 Best Motherboard For I5 9400F 2021 – Top Picks

• Does Cybersecurity Awareness Month actually improve security?

• PoC Exploit Released for macOS Gatekeeper Bypass

• Former Army Contractor Received 12.5 Years Sentence for Fraud Scheme

• Apple ‘May Be Working On Mobile Advertising Platform’

• US-Led International Group Takes Aim At Ransomware Gangs

• One Identity acquires OneLogin to unify identity security for enterprises

• Quick Hits

• FCW Insider: October 4, 2021

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the week of September 27, 2021

• Researchers Discover How Hackers Were Stealing Money Via Apple Pay From iPhones

• Top Search On Bing Is ‘Google’, Google Tells Court

• Waze Pushes Crowdsourcing For Petrol Pump Data

• A week in security (Sept 27 – Oct 3)

• Ex-Army Technician Gets 12 Years for Role in Fraud Scheme

• Apple Makes iCloud Safari Bookmarks End-To-End Encrypted

• iPhone 13 Pro Costs Around $20 More to Build Compared to the iPhone 12 Pro, Despite Being the Same Price for the Customer

• Why today’s cybersecurity threats are more dangerous

• Google Pledges $1 Million to Secure Open Source Program

• UK’s National Cyber Force Heads to the Northwest

• Coinbase Attackers Bypassed Account Authentication

• Ransomware gang arrested in Ukraine with Europol’s support

• DeepMind Hit By Legal Action Over NHS Deal

• Experimental AI Hones Forecasts For Short-Term Weather Events

• Sir Tim Berners-Lee and the BBC stage a very British coup to rescue our data from Facebook and friends

• Apple Makes Safari Bookmarks End-To-End Encrypted

• Trying to register your antivirus in Windows Security Center?

• E-Scooter Company Looks To Thwart QR Code Theft

• Firewalls? Pfft – it’s no match for my mighty spares-bin PC

• LockBit 2.0 ransomware hit Israeli defense firm E.M.I.T. Aviation Consulting

• Combating vulnerability fatigue with automated security validation

• Google Play hosts malware that offers click baits to users

• Joe Biden to unite 30 countries against Ransomware Cyber Threats

• How collaboration between IT pros and senior leaders could drive the future of risk mitigation

• Do you have a plan for your cybersecurity career? Time to skill up!

• Infosec products of the month: September 2021

• McAfee Enterprise Sees Proliferation of REvil and DarkSide Ransomware Surge in Q2 2021

Generated on 2021-10-10 23:59:18.315487