IT Security News Weekly Summary – Week 49

• IT Security News Daily Summary 2020-12-06

• iOS 14.2 Reportedly Causing Severe Battery Drain

• Cloudflare WAF Bypass Via Padding Technique Discovered

• DEF CON 28 Safe Mode Aerospace Village – Alex Lomas’ ‘Introduction To ACARS’

• The Joy of Tech® ‘After The Vaccine’

• Rethinking Global Counterterrorist Financing

• Phishing Attacks on Your Brand are Unrelenting, AI is the Only Way to Fight Back

• Groundbreaking IoT Legislation Close to Becoming Law

• Images of Prototype Apple Macintosh With Clear Casing Shared Online

• Dental clinic learns of ransomware attack after phone call from hackers

• Kazakhstan government is intercepting HTTPS traffic in its capital

• Drug dealers are selling Pfizer COVID vaccines on the darkweb

• Middle East facing ‘cyber pandemic’ as Covid exposes security vulnerabilities, cyber chief says

• Enhancing Visibility with Bitglass and Splunk

• Thwarting Malware Attacks with Bitglass

• Cost-Effective Cloud Security for the Modern Enterprise: Part 3

• Detal clinic learns of ransomware attack after phone call from hackers

• Accelerating Security and the Cloud With Bitglass and AWS Global Accelerator

• Ransomware attack disrupts Metro Vancouver’s payment systems

• COVID-19 themed attacks October 1 – December 5, 2020

• Security Affairs newsletter Round 292

• oledump’s Indicators (video), (Sun, Dec 6th)

• Police arrest two people over stealing sensitive data from defense giant

• oledump’s Indicators, (Sun, Dec 6th)

• Week in review: Most effective security practices, worst password offenders, Patch Tuesday forecast

• How to secure a Kubernetes cluster

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Penetration testing

• U.S Files Lawsuit Against Facebook For Discriminatory Recruitment Process Against U.S Workers

• Germany’s Anti-Semitic Phonetic Alphabet

• Most Important Network Penetration Testing Checklist

• COVID-19 – Johnson & Johnson saw a 30% uptick in cyber-attacks

• Pluto TV – 3,225,080 breached accounts

• IT Security News Daily Summary 2020-12-05

• DEF CON 28 Safe Mode Aerospace Village – Matt Gaffney’s ‘MITM: The Mystery In The Middle’

• XKCD ‘Contiguous 41 States’

• DEF CON 28 Safe Mode Aerospace Village – Allan Tart’s & Fabian Landis’ ‘Low Cost VHF Receiver’

• Human resource consulting giant Randstad hit by Egregor ransomware

• Is IP 91.199.118.137 testing Access to aahwwx.52host.xyz?, (Sat, Dec 5th)

• App Store Best of 2020 Winners Begin Receiving Physical Award

• Italy Says Two Arrested for Defense Data Theft

• Acronis reports India to be third highest in terms of Malware attacks, after US and Japan

• The US Used the Patriot Act to Justify Logging Website Users

• Cyber mercenaries group DeathStalker uses a new backdoor

• Top Stories: Redesigned MacBook Pro in 2021, MagSafe Duo Released, HomePod Mini vs. Competition

• Iranian Hackers Attack Israel Water Facility, Gain Access To HMI Systems

• Ransomware hits helicopter maker Kopter

• DEF CON 28 Safe Mode Aerospace Village – Michael Vanguardia’s ‘Secure Airplane Development Lifecycle’

• IronNet’s top 10 predictions for 2021

• ‘Build’ or ‘Buy’ your own antivirus product

• Can good cybersecurity policies improve our quality of life?

• Cybersecurity Advent Calendar: Let Santa in, keep hackers out!

• MyOffice, the Russian alternative to Office 365 gains momentum in Africa

• Ransomware gangs are now cold-calling victims if they restore from backups without paying

• Zscaler CEO on Operation Warp Speed, fighting vaccine IP cyberthreats

• How to set up MFA for Office 365 on end-user devices

• Iranian hackers access unsecured HMI at Israeli Water Facility

• Apple Launches iPhone 11 Display Module Replacement Program

• Crowdstrike CEO talks fighting cyberthreats on coronavirus vaccine operations

• 7 SecOps roles and responsibilities for the modern enterprise

• Microsoft Cloud Security Exec Talks New Tech, WFH, Gamification

• Cyber News Rundown: Biological Worries Over Malware Attacks

• IT Security News Daily Summary 2020-12-04

• Body as biosensor: Faster COVID detection boosts military readiness

• DOD eyes blockchain for medical use cases

• Making Sense of the Security Sensor Landscape

• A slice of SecOps software options to counter threats

• Kmart Hit by Egregor Ransomware

• Threat Roundup for November 27 to December 4

• Ransomware attack discrupts Metro Vancouver’s payment systems

• Congress axes CMO office in 2021 defense bill

• Unemployment payments weeks late in nearly every state

• Johnson & Johnson CISO: Healthcare orgs are seeing nation-state attacks every single minute of every single day

• High-Severity Chrome Bugs Allow Browser Hacks

• Security operations center use cases, strategies vary

• BECs and EACs: What’s the Difference?

• Recently disclosed CVE-2020-4006 VMware zero-day was reported by NSA

• The 2020 Workshop on Economics and Information Security (WEIS)

• Dutch Antitrust Probe Targets Contactless Payments Like Apple Pay

• How Do You Solve a Problem Like John Durham?

• Cyber czar, CISA subpoenas included in must-pass defense bill

• Gender pay gap persists in the federal workforce

• Novel Online Shopping Malware Hides in Social-Media Buttons

• AI Collaborative Research Institute Launched

• MacRumors Giveaway: Win a Pad X3 Wireless Charger from WhyWood

• Egregor Really Wants You to See Its Ransom Demands

• Online Education Company K12 Affected by Ransomware

• Trickbot Added New Feature to Infect UEFI/BIOS and Survive OS Reinstall

• Verifying Linux Server Security: What Every Admin Needs to Know>

• New law enshrines modernization Centers of Excellence effort

• Most used passwords for 2020: The internet’s favorite curse word, name, food, and team

• VMware Patches Workspace ONE Access Vulnerability Reported by NSA

• As Hospitals Cope With a COVID-19 Surge, Cyber Threats Loom

• Italian Police Arrest Criminals Accused of Robbing ATMs with Purpose-Built Black Boxes

• Intel Doubles Down on Emerging Technologies for Sharing and Using Data Securely

• Apache Releases Security Advisory for Apache Tomcat

• Celebrating 20 Years of Cybersecurity Excellence

• DEF CON 28 Safe Mode Aerospace Village – Opening Remarks

• Presidential Middle Names

• Brazil Govt’s Huge Leak: Health Data of 243M

• Apple Confirms Family Sharing for In-App Purchases and Subscriptions is Now Available

• Apple Picks Up World Surf League Docuseries for Apple TV+

• Most Reliable Hosting Company Sites in November 2020

• Hack-for-Hire Group ‘DeathStalker’ Uses New Backdoor in Recent Attacks

• New IBM encryption tools head off quantum computing threats

• Tech CEO Pleads Guilty to Investment Fraud

• Smart Sex Toy Sales Surge Poses Security Risk

• Why Workers Aren’t Confident in their Companies’ Security (and What to Do About it)

• Apple Researching a Matte Black Finish for MacBooks

• Gift Guide for Apple Fans (2020)

• Fostering research on new web security threats

• Entisys360 Receives NetApp Americas HCI Innovation Award 2020

• Protecting the healthcare industry from cyber threats

• COVID-19 supply chain hit by Cyber Attack

• NSA warns of Russian state-sponsored hackers exploiting VMWare vulnerability

• Protect your business from DDoS attacks: Join this webinar to find out more

• Report: Despite Being Shut Down, Fraudulent Ad System Continues Scamming Facebook Users

• Secure Network Analytics (Stealthwatch) Then, Now and Beyond – Part 2: Behavioral Analytics Has its Day

• Satechi Debuts Magnetic Wireless Charger for iPhone 12 Models

• Taiwan, “Strategic Clarity” and the War Powers: A U.S. Commitment to Taiwan Requires Congressional Buy-In

• Furlough a testing time for UK employees – lack of support leads to less loyalty as many begin returning to work

• Phishing hosted on high Alexa domains: another dangerous trick in Web

• File-sharing and cloud storage sites: How safe are they?

• Stop Streaming In Ultra HD On Phones To Save Planet, Scientists Warn

• Policy Management Updates | Avast

• VMware Rolls a Fix for Formerly Critical Zero-Day Bug

• Iranian Hackers Access Unprotected ICS at Israeli Water Facility

• IRS to Make ID Protection PIN Open to All

• Google Releases Security Updates for Chrome

• My top 5 videos of the year

• Islamic imprisoned hacker Ardit Ferizi ordered to be deported

• Enigma Machine Recovered from the Baltic Sea

• Deals: Shop Discounts on Sonos, PhoneSoap Sanitizers, and Magic Keyboard for 12.9-Inch iPad Pro ($50 Off, New Low Price)

• Brazilian Aerospace And Defence Group Embraer’s Systems Affected By Cyberattack

• Royal Dutch Cycling Union Disclosed Ransomware Attack

• Vancouver Metro Disrupted by Egregor Ransomware

• Many Android Apps Expose Users to Attacks Due to Failure to Patch Google Library

• Man Pleads Guilty to Role in Malware Protection Scam

• Ransomware Set for Evolution in Attack Capabilities in 2021

• Europol predictions correct for fake COVID-19 vaccines

• Hacker Who Stole Information From Nintendo Now Sentenced

• Flash Dies but Warning Signs Persist: A Eulogy for Tech’s Terrible Security Precedent

• The Targeting of the COVID-19 Vaccine Supply Chain

• Tibet and Taiwan Targeted in Spearphishing Campaigns Using MESSAGEMANIFOLD Malware

• Google Illegally Spied On And Retaliated Against Workers, Feds Say

• Kmart, Latest Victim Of Egregor Ransomware

• UK Cyber-Warning For Festive Shoppers

• CBP’s Warrantless Use Of Cell Location Data Is Under Investigation

• ‘A Charlie Brown Christmas’ and ‘Mariah Carey’s Magical Christmas Special’ Now Streaming on Apple TV+

• Experts On Xerox DocuShare Bugs Allow Data Leaks

• The M140i project post – Part 12

• VMware Carbon Black Recognized as “Tech Exit of the Year” at New England Venture Capital Association’s 2020 NEVY Awards

• The best gifts for hackers

• Metro Vancouver Transportation Agency TransLink Hit by Ransomware

• Imprisoned Hacker Ordered to Be Released, Promptly Deported

• Experts On Clop Ransomware Attacking Retail Giant E-Land

• Hackers hiding skimming malware behind social media sharing icons

• Top 4 Best and Safest Types of Biometrics

• Egregor Ransomware Strikes Metro Vancouver’s TransLink

• US Intelligence Director Says China is Top Threat to America

• #WebSummit: Nick Clegg Claims Internet Needs Accountability, Not Rules

• Verizon Leaks Customer Conversations, Personal Data Through Flawed Chat Window on Its Website

• Nintendo Hacker Sentenced to Three Years in Prison

• Hundreds of millions of Android users exposed to hack due to CVE-2020-8913

• Payment Skimmer Hides In Social Media Buttons

• Data Protection Is Integral In Wake Of COVID-19 Vaccine ‘Cold Supply’ Chain Network Hack

• Security Expert Re: Absa Financial Services Employee Sells Customer Data To Third Parties

• Heimdal Security Announces Opening of Its Second Office in the UK

• Google Hacker Found a Way to Hack iPhones Remotely Through WiFi

• The biggest data breach fines, penalties and settlements so far

• Google Fires AI Researcher Timnit Gebru – Report

• DoJ Sues Facebook Over Immigrant Hiring

• ARSAT Migrates to Check Point Software in Record Time

• 40% of the World’s Mobile Devices are Inherently Vulnerable. Is your Corporate Data at Risk?

• Scammers stole millions last Christmas. These six tips could keep you safe online this time around

• ACLU Sues Government Over Secret Purchasing of GPS Data

• NCSC Warns of Multimillion Pound Christmas Fraud Bonanza

• Ransomware Operators Phone Victims to Announce They’ve Been Hacked

• Metro Vancouver TransLink hit by Egregor ransomware attack, travellers disrupted

• Weekly Update 220

• Clearswift Secure Email and ICAP Gateway now Available on AWS Marketplace

• Cyberattack That Shut Down London’s Hackney Council for Weeks Should Have Other Local Authorities, NHS Providers, and Government…

• Warner Bros 2021 Movies to Debut in Theater and on HBO Max at Same Time

• FTC Warns of Recent Surge in Robocall Scammers Pretending to Be Apple

• Vancouver public transport agency hit by ransomware attack

• Kmart suffers ransomware attack

• Israeli insurance company extorted by BlackShadow hackers

• TrickBot has returned with a TrickBoot

• Supreme Court Reviews CFAA | Avast

• Celebrating Holidays With Older Family Members | Avast

• Aerospace Giant Embraer Downed by Suspected Ransomware

• Hackers Targeting Companies Involved in Covid-19 Vaccine Distribution

• The chronicles of Emotet

• Twitter Ends Threaded Conversations Tests After Negative User Feedback

• Ransomware attack cripples Vancouver public transportation agency

• Hackers-For-Hire Group Develops New ‘PowerPepper’ In-Memory Malware

• How Organizations Can Prevent Users from Using Breached Passwords

• Why Hackers Love the Pandemic

• Egregor ransomware attack paralyzed for 3 days payment systems at Metro Vancouver’s transportation agency TransLink

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• The Evolution and Development of Hacking

• It’s dark out there, and if you want to keep the lights on, you need to update your cyber-security skills with SANS

• Intelligence review recommends new electronic surveillance Act for Australia

• How to take SASE from a buzzword to a plan

• ControlFlag: Machine programming research tool detects bugs in code

• December 2020 Patch Tuesday forecast: Always consider the risk

• Google acquires Actifio for Cloud Security

• US dispatches Cyber Attack Thwarting Warriors to Estonia

• Google Discloses a zero-click Wi-Fi Exploit to Hack iPhone Devices

• A Holistic Approach to Kubernetes Security and Compliance

• Holiday shopping season fraud stats revealed

• Who are the worst password offenders of 2020?

• TikTok saga will ultimately reach a ‘peaceful resolution’: Jefferies analyst

• How to enhance onboarding for digital banking services using risk management

• Fashion Forward: how technology is reshaping the fashion industry

• Stories from the SOC – Multi-layered defense detects Windows Trojan

• Detecting Actors Activity with Threat Intel, (Fri, Dec 4th)

• Consumers would like to view internet connectivity as a trusted utility

• Growth of cloud-native apps and containerization to define 2021

• 2020-12-03 – TA551 (Shathak) Word docs with Italian template send Ursnif (Gozi/ISFB) with Pushdo

• Cybersecurity Trends 2021: Staying secure in uncertain times

• iPhone hack allowed device takeover via Wi‑Fi

• Updated Malware: Vietnamese Hacking Group Targeting MacOS Users

• ISC Stormcast For Friday, December 4th 2020 https://isc.sans.edu/podcastdetail.html?id=7278, (Fri, Dec 4th)

• StoneOS 5.5R8: Helping enterprises defend all their network entry points

• Covid-related phishing is a ‘very serious attack on humanity’: Barracuda Networks

• Solving the Recurring Collection and Time Tradecraft Issues in Online Investigations

• Why is Compliance a Continual Challenge for Organizations?

• Operationalize the NIST Cybersecurity Framework Without Pulling All Your Hair Out (Part 2 of 3)

• (ISC)² adds new cybersecurity courses to its Professional Development Institute portfolio

• Veeam Backup for Microsoft Office 365: Purpose-built backup and recovery for Teams

• Two cybersecurity hygiene actions to improve your digital life in 2021

• What is Third-Party Risk Management?

• Authentic8 expands availability of Silo across Google Cloud’s infrastructure

• Thales launches double-sided ID card reader to simplify the ID verification process

• Exoprise CloudReady now available in the Microsoft Azure Marketplace

• Alkira extends cloud connectivity to any network

• Governor Cuomo: Keep Police and ICE Away from Our Contact Tracing Data

• FCW Insider: Dec. 4

• Edward Snowden asks Trump to pardon Wikileaks founder Julian Assange

• Hackers hide software skimmer in social media sharing icons

• Okta expands deployments for Canadian Western Bank, First National of Nebraska, and Nota

• DXC Technology and Microsoft help companies address rapidly evolving business challenges

• IRONSCALES unveils Teams and Slack alert integrations

• Deloitte and AWS Professional Services drive customer cloud migration and app modernization

• Hackers are launching cyberattacks targeting Covid vaccine supply chain

• Zoom CEO Eric Yuan on the challenges of adapting an enterprise product for consumers

• Potential Nation-State Actor Targets COVID-19 Vaccine Supply Chain

• Mimecast appoints Shahriar Rafimayeri as CIO

• Reed Taussig joins RSA as CEO of the Anti-Fraud Business Unit

• (ISC)² reaches 20,000 certified members and associates in Asia-Pacific

• Section 230 is Good, Actually

• Cybersecurity Considerations in the Work-From-Home Era

• Kmart, Latest Victim of Egregor Ransomware – Report

• 8 challenges every security operations center faces

• TrickBot’s New Tactic Threatens Firmware

• A ‘Magical Bug’ Exposed Any iPhone in a Hacker’s Wi-Fi Range

• VMware Releases Security Updates to Address CVE-2020-4006

• Hackers are targeting COVID-19 vaccine cold chain

• Family Sharing for App Store Subscriptions Now Available

• Hands-On With Apple’s New MagSafe Duo Charger for iPhone 12 and Apple Watch

• IT Security News Daily Summary 2020-12-03

• BrandPost: Cybersecurity Best Practices for Protecting Brand Trust

• CISA doesn’t plan to tackle COVID vaccine disinformation

• How infrastructure as code can help deliver next-level digital transformation

• Traffic estimation tool makes predictions from sparse public data

• Phishing campaign threatens coronavirus vaccine supply chain

• The challenge of addressing the IT and security skills gap

• Common Container Manager Is Vulnerable to Dangerous Exploit

• Introducing the New “Cisco Security Outcomes Study”

• Xanthe – Docker aware miner

• Amazon iOS Users Can Now Text Alexa Questions and Requests

• Family Sharing for Subscriptions Now Available

• Who Will Decide Whether to Investigate Trump?

• Not Another Linux Security Blog

• How dozens of Trump’s political appointees will stay in government after Biden takes over

• 6 security predictions that will impact healthcare in 2021

• SASE model drives improved cloud and work-from-home security

• Universities Attacked by Phishing Campaign

• Heightened Awareness for Iranian Cyber Activity

• DEF CON 28 Safe Mode Aerospace Village – Matt Murray’s ‘Satellite Orbits 101’

• 2021 Global Tech Outlook, A Red Hat Report: Digital transformation, security and hybrid cloud use stand out

• Some Android Apps Still Vulnerable After Patch Released

• Phishing Campaigns Target Multiple Organizations in COVID-19 Cold Chain

• Security Failure Exposes Health Records and Lab Results

• OGusers Hacked For a Third Time

• Security of Millions At Risk Due to Unpatched Android Apps

• Some Justice for Phone Scammers

• Intel’s ControlFlag taps AI to automatically detect errors in code

• How COVID-19 accelerated IT modernization

• COVID prompts USCIS’ pivot to video

• Lawmakers push to preserve pandemic voting access

• Dell announces new protections for its PC and server supply chain

• TrickBot Returns with a Vengeance, Sporting Rare Bootkit Functions

• TrickBot Malware Can Scan Systems for Firmware Vulnerabilities

• Dell Announces New Supply Chain Security Offerings

• GitHub Says Vulnerabilities in Some Ecosystems Take Years to Fix

• Bank Employee Sells Personal Data of 200k Clients

• Cloud Security Threats for 2021

• NCSC Releases 2020 Annual Review

• APWG Q3 Report: Four Out of Five Criminals Prefer HTTPS

• Have You Discovered Yet the 414s?

• The Joy of Tech® ‘Conversational Safety!’

• Kubernetes Security Best Practices

• Apple Seeds Second Beta of Upcoming macOS Big Sur 11.1 Update to Developers

• Apple Now Letting Developers Enroll for Reduced 15% App Store Fees

• Hillary and Chelsea Clinton to Host Apple TV+ Docuseries ‘Gutsy Women’

• Law Enforcement Purchasing Commercially-Available Geolocation Data is Unconstitutional

• Zscaler soars and Splunk tanks: A tale of two Covid stocks

• Crooks posing as COVID-19 ‘cold chain’ company phished EU for vaccine intel, says IBM

• Free CSPM Solution from CloudPassage

• We live and breathe storage on-premises… and in the cloud.

• VirusTotal += BitDefender Falx

• OGUsers Hacking Group | Avast

• Reaching Strategic Outcomes With An MDR Provider: Part 3

• DeathStalker APT Spices Things Up with PowerPepper Malware

• Cyber-Criminals Target #COVID19 Vaccine

• Cyber Criminals Tried to Gain Access to COVID-19 Vaccine ‘Cold Chain’

• Researchers Bypass Next-Generation Endpoint Protection

• US Officials Take Action Against 2,300 Money Mules

• Open Source Does Not Equal Secure

• AppleCare Memo Hints at Potential Hardware Announcement Next Tuesday

• $299 ‘Wristcam’ Adds a Pair of Cameras to Your Apple Watch

• Prevent a Pfizer-like PII Data Breach in Google Cloud

• Facebook Bans Fake Covid-19 Vaccine Claims

• Zero-Click exploit allowed attackers to hack any targeted iPhone

• API Security Weekly: Issue #112

• Reverse Engineering Tools: Evaluating the True Cost

• #WebSummit: Companies of the Future Should Focus on Data Privacy Rather than Data Collection

• Apple Releases Security Updates for iCloud for Windows

• Christmas Shopping: What Do You Look For?

• Using Akamai EdgeDNS with PCI DSS Environments

• IceRat evades antivirus by running PHP on Java VM

• Data Of 243 Million Brazilians Exposed Online

• Google Play Apps Remain Vulnerable To High-Severity Flaw

• Hackers Are Targeting The COVID Vaccine Cold Chain Supply Process

• Backdoor And Document Stealer Tied To Russia’s Turla Group

• Apple Patent Filing Reveals Dual Monitor Stand for Pro Display XDR

• Deals: StackSocial’s Cyber Monday Mac Bundle Sale Continues With 12 Apps Priced at $42

• Expert On Open Source Software Security Vulnerabilities Exist For Over Four Years Before Detection

• Industry Leader Reacted On North Korean Hackers Target Six Pharmaceutical Companies Making COVID-19 Vaccines

• Understanding influences shaping the cybersecurity landscape, enabling digital transformation, and helping to protect our planet

• VideoBytes: Is it goodbye forever to Maze ransomware?

• A Week with the New MacBook Air – Intego Mac Podcast Episode 164

• Darktrace’s Cyber Intelligence Director Justin Fier on Defending the Healthcare Sector from Rampant Ransomware

• What is Typosquatting (and how to prevent it)

• K12 online school pays ransom for ransomware attack

• Hackers Target Covid-19 Cold Chain, Warns IBM

• Open-source: Almost one in five bugs are planted for malicious purposes

• Data of 243 million Brazilians exposed online via website source code

• Build your own advanced USB condom

• Lessons From Teaching Cybersecurity: Week 9

• Clop Gang Makes Off with 2M Credit Cards from E-Land

• As Modern Mobile Enables Remote Work, It Also Demands Security

• Cyberattacks Target COVID-19 Vaccine ‘Cold-Chain’ Orgs

• Popular Android apps still vulnerable to patched security flaw

• State-Sponsored Hackers Likely Behind Attacks on COVID-19 Vaccine Cold Chain

• US, Estonia Partnered to Search Out Cyber Threat From Russia

• TrickBot Malware Scans Systems for UEFI/BIOS Vulnerabilities

• S3 Ep9: Gift card hacks, dubious doorbells and Wi-Fi tips [Podcast]

• UK Orgs Told to Prepare for New Wave of Brexit-Related Scams

• From FUD to Fix: Why the CISO-Vendor Partnership Needs to Change Now

• Prevent Catastrophic Data Loss in the Cloud

• Ensure Your Friends and Family Are Scam Savvy this Holiday Season

• Aircraft maker Embraer admits hackers breached its systems and stole data

• TrickBoot feature allows TrickBot bot to run UEFI attacks

• Egregor Ransomware, Used in a String of High-Profile Attacks, Shows Connections to QakBot

• Deals: Amazon Discounting 256GB M1 MacBook Pro to $1,199.99 ($100 Off)

• Christmas Shopping’ Sites Flooded With Millions Of Bad Bots

• Security Expert Re: Non-Profit Philadelphia Food Bank Loses Nearly A Million Dollars To BEC Scam

• Philly Food Bank Hit With $1m Cyber Attack

• Hackers are targeting the COVID-19 vaccine supply chain

• Op-ed: Why President-elect Biden needs to appoint a cybersecurity czar

• IBM uncovers global email attack on Covid vaccine supply chain

• Why the Prime Cyber Security ETF rose 20% in 2020

• Manage, govern, and get more value out of your data with Azure Purview

• Android devs: If you’re using the Google Play Core Library, update it against this remote file inclusion CVE. Pronto

• Acronis Cyberthreats Report predicts 2021 will be the “year of extortion”

• Omaha: The little-known Google technology behind automatic updates in Edge

• Code42 Incydr Series: Honing in on High-Risk Users with Code42 Incydr

• FINRA Warns Brokerage Firms of Phishing Campaign

• Bridging the Cybersecurity Skills Gap as Cyber Risk Increases

• Hacker Who Stole Information From Nintendo Sentenced

• Quarter of Firms Suffered 7+ Serious Cyber-Attacks in 2020

• Drugs in Europe: enhancing law enforcement responses to high-risk organised crime

• Google Security Researcher Develops ‘Zero-Click’ Exploit for iOS Flaw

• Recommended Controls for Maintaining HIPAA Security Compliance

• Netenrich Intelligent SOC-as-a-Service Right-Sizes Cybersecurity for Mid-Market Enterprises

• Aerospace firm hit by cyber attack

• Ransomware gang steals 2 million credit cards from E-Land

• Xerox DocuShare Bugs could result in major data leaks

• Duo Trust Monitor Is Here to Make Risk Detection Easy

• ACLU sues US govt, demands to know if agents are buying their way around warrants to track suspects’ smartphones

• CISSPs from Around the Globe: An Interview with Jerome Leach

• A Week with the New Apple M1 MacBook Air

• How attackers exploit Window Active Directory and Group Policy

• TrickBot gets new UEFI attack capability that makes recovery incredibly hard

• Google Violated Law By Spying On Staff, Complaint Alleges

• Critical Oracle WebLogic Vulnerability Flaw Actively Exploited by DarkIRC Malware

• 5 Ways to Accelerate Security Confidence for AWS Cloud

• New TrickBot version can tamper with UEFI/BIOS firmware

• 8% of all Google Play apps vulnerable to old security bug

• Mysterious phishing campaign targets organizations in COVID-19 vaccine cold chain

• Google Authenticator for iOS gets a much-needed feature

• Google researcher: I made this ‘magic’ iPhone Wi-Fi hack in my bedroom, imagine what others could do

• Global Phishing Campaign Sets Sights on COVID-19 Cold Chain

• Open Source Tool Helps Secure Siemens PCS 7 Control Systems

• FBI Warns of Auto-Forwarding Email Rules Abused for BEC Scams

• New Law to Crack Down on Fraudulent Foreign Firms Listed in US

• #WebSummit: Balancing Security, Privacy and Free Speech in the Digital Age

• This Notorious Botnet Has an Alarming New Trick

• Hackers Are Targeting the Covid-19 Vaccine ‘Cold Chain’

• IBM Releases Report on Cyber Actors Targeting the COVID-19 Vaccine Supply Chain

• CVE-2020-13769: SQL Injection in Ivanti Endpoint Manager

• NIST Cybersecurity Recover Function for K-12

• What Does a Unified Security Strategy in the Public Cloud Look Like?

• Adopting a BYOD policy amid the COVID-19 era

• Apple Launches Redesigned Accessibility Site and New Support Videos

• Ecobee SmartCamera Firmware Update Adds HomeKit Secure Video Support

• Apple Could Be Forced to Include a Charger with Every iPhone Sold in Brazil

• iPhone Zero-click Wi-Fi Exploit Is One Of The Most Breathtaking Hacks Ever

• Experts Reaction On Dua Lipa And Other Spotify Artists’ Pages Hacked By Taylor Swift ‘Fan’

• Expert Commentary: Thousands Of U.S. Lab Results And Medical Records Spilled Online After A Security Lapse

• Black Friday 2020 Saw Retailers Capitalising On Publicly Available Data More Than Ever Before, Finds New Research

• Open source vulnerabilities go undetected for over four years

• October 2020 Cyber Attacks Statistics

• Apple Faces European Lawsuit Over Battery Slowdown

• IBM Uncovers Global Phishing Campaign Targeting the COVID-19 Vaccine Cold Chain

• Widespread android applications still exposed to vulnerability on google play core library

• Check Point IoT Protect Firmware

• FCW Insider: Dec. 3

• Quick Hits

• Google Play Apps Remain Vulnerable to High-Severity Flaw

• Philly Food Bank Loses $1m in BEC Scam

• Lithuania to allot seven million euros to combat hackers

• Several Unpatched Popular Android Apps Put Millions of Users at Risk of Hacking

• TrickBot Malware Gets UEFI/BIOS Bootkit Feature to Remain Undetected

• Clop Ransomware gang claims to have stolen 2 million credit cards from E-Land

• APT annual review: What the world’s threat actors got up to in 2020

• Google Authenticator iOS App Gains New Export Accounts Option

• Neo Factory: The State of Industry 4.0

• New malicious NPM packages Used by Attackers Install njRAT Remote Access Trojan

• Sectigo Acquires SSL247 and Xolphin

• #WebSummit: Growing Acceptance of Ethical Hacking

• 5 Reasons Not to Rely on Bounty Programs

• What did DeathStalker hide between two ferns?

• Multiple iPhone 12 Users Report Sudden Drops in 5G and LTE Cellular Coverage

• Trump Threatens To Veto US Defence Bill Over Section 230 Protection

• Security and COVID-19: Securing the New Normal

• A scan of 4 Million Docker images reveals 51% have critical flaws

• How a nightmare wormable, wireless, automatic hijack-a-nearby-iPhone security flaw was found and fixed

• Want to add antivirus to your existing portfolio?

• U.S. Election Security (and Insecurities)

• Understanding the 2019 Capital One Attack

• Featured Use Case: Why a Large US Utility Company Turned to MixMode to Address Utility Grid Vulnerabilities

• How to reduce the risk of third-party SaaS apps

• Raising defenses against ransomware in healthcare

• AI can guess 100 billion Cyber Attacks before they take place

• Bioterrorists to trick COVID-19 Vaccine Developers with Malware

• USAF primed to launch new phase of data strategy

• Apple Shares 2020 Apple Music Highlights and Top Charts

• Face recognition software making progress at recognizing masked faces

• The challenges of keeping a strong cloud security posture

• Notable Enhancements to the New Version of NIST SP 800-53

• How to Protect Your Business From Multi-Platform Malware Systems

• Network slicing market to reach $1,284 million by 2025

• Cloud-native benefits stifled by critical security and networking issues

• Turla Crutch: Keeping the “back door” open

• Spamhaus Intelligence API: Free threat intelligence data for security developers

• Bitdefender launches cloud-based EDR solution for enterprises and MSPs

• 2020-12-03 – Pcap and malware for an ISC diary (traffic analysis quiz)

• Surveillance Bill to hand AFP and ACIC a trio of new computer warrants

• 3 Ways to Streamline Network Security Automation That Will Transform Your Organization

• ISC Stormcast For Thursday, December 3rd 2020 https://isc.sans.edu/podcastdetail.html?id=7276, (Thu, Dec 3rd)

• Traffic Analysis Quiz: Mr Natural, (Thu, Dec 3rd)

• AWS unveils three analytics capabilities to improve Amazon Redshift performance

• AWS releases four storage innovations to add storage performance, resiliency, and value to customers

• CloudBees releases first two modules of its Software Delivery Management solution

• The Statutory Authority for Barr’s Appointment of Durham as Special Counsel

• DFLabs IncMan SOAR to be available both on-premise and as a cloud package

• PagerDuty to action real-time critical observability data on AWS

• AWS offers new portfolio of compute offerings in the cloud

• Salesforce Hyperforce: Connecting customer data across systems, apps and devices

• DOJ’s China hack indictments offer businesses key threat intel, officials say

• Ivanti acquires MobileIron and Pulse Secure to deliver secure experiences across remote infrastructure

• FireMon integrates with Zscaler Internet Access to simplify enterprise adoption of SASE architectures

• Congressional leaders push back on NDAA veto threats

• Cybersecurity in the Biden Administration: Experts Weigh In

• Open Source Flaws Take Years to Find But Just a Month to Fix

• Looking forward to the 2021 cybersecurity landscape

• K12 education giant paid the ransom to the Ryuk gang

• $99 Speaker Showdown: HomePod Mini vs. Amazon Echo and Google Nest Audio

• Mastercard appoints Richard Verma as Executive VP of Global Public Policy and Regulatory Affairs

• Sherry Lowe joins Exabeam as chief marketing officer

• IT Security News Daily Summary 2020-12-02

• Implementing Your Own Spring Boot Oauth2 Authorization Server

• Ousted CISA chief would consider role in Biden administration

• Maximizing a vaccine campaign by analyzing social interactions

• How governments can craft a contingency plan for natural disasters

• Technology getting better at recognizing masked subjects

• Okta shares surge as fiscal Q3 results top expectations, forecast higher as well

• CrowdStrike revenue climbs 86% in strong Q3 results

• Xerox DocuShare Bugs Allows Data Leaks

• Think-Tanks Under Attack by Foreign APTs, CISA Warns

• Spotify Wrapped 2020 Rollout Marred by Pop Star Hacks

• Tanium HQ Moves Out of San Francisco

• Loyal Employee … or Cybercriminal Accomplice?

• FBI: BEC Scammers Could Abuse Email Auto-Forwarding

• Amazon in Exclusive Talks to Buy Podcast Startup Wondery

• The many ways you can be scammed on Facebook, part I

• Testing sewage can give school districts, campuses and businesses a heads-up on the spread of COVID-19

• Xerox DocuShare Bugs Allowed Data Leaks

• Jason Sudeikis: ‘Ted Lasso’ Apple TV+ Character Inspired by Robin Williams, Mr. Miyagi and Obi-Wan Kenobi

• Hulu’s Watch Party Feature Rolling Out to All Users

• How Easy Is it to Build a Robot Assassin?

• Supreme Court Hears Oral Argument in Van Buren v. United States

• Hacker given three years for stealing secret Nintendo Switch blueprints, collecting child sex abuse vids

• Weaponizing Windows Sandbox To Bypass Defender

• Russia-linked APT Turla used a new malware toolset named Crutch

• Impressive iPhone Exploit

• Protect your SQL Server on-premises, in Azure, and in multicloud

• Wormable, Wireless iOS Exploit Granting Full iPhone, iPad Device Takeover Released

• Huntsville City Schools Shut Down Due to Ransomware Attack

• Newly Discovered Cryptomining Malware Targets Exposed Docker Containers

• Brazilian aerospace firm Embraer hit by cyberattack

• Turla’s ‘Crutch’ Backdoor Leverages Dropbox in Espionage Attacks

• Newly Discovered Turla Backdoor Used in Government Attacks

• MDR Provider GoSecure Raises $35 Million

• Security Slipup Exposes Health Records & Lab Results

• Automated Pen Testing: Can It Replace Humans?

• Apple Seeds Third Beta of tvOS 14.3 Update to Developers

• Apple Seeds Third Beta of watchOS 7.2 to Developers

• Apple Releases Third Betas of iOS 14.3 and iPadOS 14.3 to Developers

• 16-31 October 2020 Cyber Attacks Timeline

• Sen. Ron Wyden Joins EFF on December 10 for Fireside Chat About the Future of Free Speech

• 4 Proven Ways to Protect Your Crypto

• 4 Protocols That Eliminate the Security Risks of Cloud Migration

• Why Intel believes confidential computing will boost AI and machine learning

• Prepping the cyber workforce of the future

• Cyber espionage campaign opens backdoor to steal documents from infected PCs

• Healthcare 2021: Cyberattacks to Center on COVID-19 Spying, Patient Data

• Is Chasing Malware Really Helping You Reduce Fraud?

• How to steal photos off someone’s iPhone from across the street

• Fired US Cybersecurity Chief Considers Legal Action

• Customize User Portal Experience with JumpCloud

• DEF CON 28 Safe Mode Aerospace Village – Eric Escobar’s ‘Talking To Satellites’

• Niloofar Razi Howe Joins RangeForce Board of Advisors

• Quantos administradores de domínios são demais?

• Virtual Hackathon Generates Next Generation of Imperva Innovation

• Action for Egyptian Human Rights Defenders

• Protect your SQL server on premises, in Azure and in multi-cloud

• Three smart ways banks can secure instant issuance

• How to enhance access to digital banking with risk management

• Achieving a zero-carbon economy requires end to end security

• 2020 Cybersecurity Trends to Watch for in Small Businesses

• Are Businesses Currently Ready for IoT?

• Hackers steal sensitive client data in Israeli insurance firm data breach

• 10 Cyber Security Tools to Watch Out for in 2021

• Sales of CEO email accounts may give cyber criminals access to the “crown jewels” of a company

• Recent Oracle WebLogic Vulnerability Exploited to Deliver DarkIRC Malware

• Account Hijacking Site OGUsers Hacked, Again

• Hackers Are Targeting US Think Tanks

• #WebSummit: Common API Security Risks and How to Mitigate Them

• First Facebook Oversight Board Cases Handle Hate Speech, Misinformation

• A Broken Piece of Internet Backbone Might Finally Get Fixed

• Deploy (or defer) your macOS 11 Big Sur update with Desktop Central

• APT groups targets US Think Tanks, CISA, FBI warn

• Watch This Google Hacker Pwn 26 iPhones

• Taylor Swift Fan Hacks Artist Spotify Pages

• Misconfigured Docker Servers Under Attack By Xanthe Malware

• Cayman Islands Bank Records Exposed In Open Azure Blob

• Telegram Beta Becomes First Third-Party App to Use Announce Messages With Siri

• How Easy is it to Build a Robot Assassin?

• (UPDATED 2020) The most Popular Free Encryption Software Tools to Protect Your Data

• Google launches Android Enterprise Mobile Security Essentials

• Medical imaging lifecycle management

• A Look Ahead: 9 Cybersecurity Predictions for 2021

• How to securely erase hard drives (HDDs) and solid state drives (SSDs)

• Microsoft Revamps ‘Invasive’ M365 Feature After Privacy Backlash

• Productivity Score: Microsoft limits features of new tool following ‘workplace surveillance’ concerns

• UK Cybersecurity Firm Glasswall Raises £18 Million

• Why I’d Take Good IT Hygiene Over Security’s Latest Silver Bullet

• Xerox Releases Security Updates for DocuShare

• Mozilla Releases Security Update for Thunderbird

• Build Better Phishing Playbooks with ServiceNow and Recorded Future

• Apple Watch Sets New Record With Estimated 11.8 Million Shipments Last Quarter

• COMMENT: AspenPointe Warns 295K Patients Of Data Breach exposing Their Personal Identifiable Information And Health Data

• #ISC2CONGRESS ‘WE GOT THIS:’ ADAPTABILITY IS NOTHING NEW TO CYBERSECURITY

• Bitglass’ 2020 Cloud Security Report

• Bitglass Named A Leader in Gartner’s 2020 Magic Quadrant for CASB

• Founding Father HPE Leaves Silicon Valley, Moves HQ To Texas

• Open source software security vulnerabilities exist for over four years before detection

• iOS Exploit Allows ‘Unfettered Access’ to iPhone User Data Over Wi-Fi

• Analysis of 4 Million Docker Images Shows Half Have Critical Vulnerabilities

• Native Cloud Security Controls Still “Not Good Enough”

• 422 Individuals Arrested in Global Money Laundering Scheme, According to Europol

• Indian Telefraud Boss Gets 20 Years Behind Bars

• Free Mobile App Measures Your Personal Cyber Risk

• Drupal Core: Behind the Vulnerability

• Google discloses a zero-click Wi-Fi exploit to hack iPhone devices

• iPhone Upgrade Program Resumes in England

• Expert Reaction On Half Of All Docker Hub Images Have At Least One Critical Vulnerability

• Lessons Learned From PKI – Expert Insight

• Salesforce Acquires Slack For $28 Billion For Workforce Collaboration

• North Korean Hackers Targeted COVID Vaccine Maker AstraZeneca

• Verifying Linux Server Security: What Every Admin Needs to Know>

• Why You Might Need to Outsource Your Privileged Access Management Program

• iPhone Bug Allowed for Complete Device Takeover Over the Air

• DNS Filtering: A Top Battle Front Against Malware and Phishing

• Google Details iPhone Zero-Click Exploit Allowing Theft of User Data

• The U.S. Government is Creating Security Standards for IoT Devices

• Deals: Powerbeats Pro Drop to New Low Price of $149.95 ($100 Off)

• Kuo: Two Redesigned MacBook Pros in 2021 and New MacBook Air in 2022, All With Apple Silicon and Mini-LED Displays

• DarkIRC Bot Hits Oracle WebLogic vuln, Steals Bitcoin, Hijacks Browsers – Experts Perspective

• Expert Insight: Docker Malware Is Now Common – Devs Need To React Accordingly

• Cayman Islands Investment Fund Left Entire Filestore Viewable In Unsecured Azure Blob

• (UPDATED) The 12+ Internet Crime Stories That Make Cybersecurity Measures Essential

• Cybersecurity under fire: CISA’s former deputy director decries post-election vilification

• China Refuses To Apologise For Fake Aussie Solider Photo

• Most Reliable Hosting Company Sites in November 2020

• Absa bank embroiled in data leak, rogue employee accused of theft

• Email Attackers Using Auto-Forwarding Rules to Perpetrate BEC Scams

• Criminals to Favor Ransomware and BEC Over Breaches in 2021

• Cloud Security Firm iboss Appoints Matt Hartley as Chief Revenue Officer

• Cyber Attack at US Mental Health Services Provider Exposes Sensitive Info of Over 290,000 Individuals

• This Company Uses AI to Outwit Malicious AI

• Experts Uncover ‘Crutch’ Russian Malware Used in APT Attacks for 5 Years

• Consumer Group Sues Apple in Belgium and Spain Over iPhone Throttling

• Experts On Homebase CEO Scam

• Flexible Resourcing Lto Plug The IT Skills Gap

• FBI warn that email forwarding rules are being abused by hackers

• Which security practices lead to best security outcomes?

• COVID-19: the impact of the pandemic in three IT areas

• Google DeepMind Solves 50 Year Old Folding Protein Problem

• 2020 Year In Review | Avast

• CISA, FBI Warn of Attacks Targeting U.S. Think Tanks

• Half of Docker Hub Images Feature Critical Flaws

• Two Essential Defenses that Baltimore County School District (and All Districts) Should Adopt to Keep the Next Ransomware Attack…

• Education predictions 2021

• ICS threat predictions for 2021

• Healthcare security in 2021

• iOS 14.2 Quietly Added FaceTime 1080p Support to iPhone 8 and Later Models

• Malicious npm packages were installing remote access trojans

• 4 tips for partnering with marketing on social media security

• Telecommunication Service Providers Secure Businesses Using Check Point’s Comprehensive Portfolio of Security Services

• FCW Insider: Dec. 2

• Salesforce Set to Acquire Slack for $27bn

• Spotify’s Annual ‘Wrapped’ Feature Looks Back on Your 2020 Listening Habits

• New exploit could let hackers remotely access iPhones

• Supreme Court to rule on outdated anti-hacking law

• Royal Dutch Cycling Union Disclosed Ransomware Attack

• Openreach Moves Customers Away From Copper Network In Salisbury

• Malware attack can trick biologists into producing dangerous toxins

• Ivanti announces double acquisition of MobileIron, Pulse Secure in zero-trust security push

• 2020: A Unique Year for Data Privacy Issues

• FBI: Block Email Forwarding to Stop BEC Attackers

• Multiple Botnets Exploiting Critical Oracle WebLogic Bug — PATCH NOW

• CVE-2020-17051: Wormable RCE in Windows NFS server

• iOS Wi-Fi Exploit Could Have Let Hackers Remotely Access Nearby iPhones

• Amazon DevOps Guru: An ML-powered operations service that improves application availability

• (UPDATED 2020) JavaScript Malware – a Growing Trend Explained for Everyday Users

• 422 arrested and 4 031 money mules identified in global crackdown on money laundering

• Web App Security: Don’t Let the Code Injection Grinch Steal Holiday Joy

• Multi-Vector Miner+Tsunami Botnet with SSH Lateral Movement

• Looking for adding new detection technologies in your security products?

• Google Hacker Details Zero-Click ‘Wormable’ Wi-Fi Exploit to Hack iPhones

• CISO with a small security team? Learn from your peers’ experience with this free e-book

• California Federal Court Weighs In (Again) on Social Media Scraping

• Gift Card Hacking Now A Part of Every Holiday

• Salesforce to acquire Slack

• China Seizes $4B in Cryptocurrency from Scammers

• Top 3 Recommendations to Avoid Online Holiday Fraud and Scams

• A Russian-speaking hacker put up for sale the accounts of the heads of the world’s largest companies

• The three stages of security risk reprioritization

• FedRAMP updates Cloud Security standards to align with NIST rules

• Cyber Attack news headlines trending on Google

• What Happens to Your Personal Data after Deleting an App

• Wakeout! Named Apple’s Best App of 2020, While Zoom Earns the Title for Best iPad App

• Apple Shares Top 20 Most Downloaded Games and Apps of 2020

• IT leaders on 2021 opportunities, challenges and key technology trends

• Cloud native security: A maturing and expanding arena

• A Look at the Computer Security Act of 1987

• Demand for private network deployments will be driven by heavy industry verticals

• Consumers vastly misjudge the vulnerability of their home networks

• Red Team Research Discovered 6 new zero-day Vulnerabilities in Schneider Electric StruxureWare

• Cyberattackers could trick scientists into producing dangerous substances

• FERC Releases Staff Report on Lessons Learned from CIP Audits

• ISC Stormcast For Wednesday, December 2nd 2020 https://isc.sans.edu/podcastdetail.html?id=7274, (Wed, Dec 2nd)

• Kanguru Defender secure devices help orgs protect, manage, and secure their data

• Aerospike provides its Cloud Managed Service to Experian’s digital identity and fraud risk platform

• ADTRAN expands its NetVanta access routers to improve speed, capacity and price performance

• AWS unveils Mac instances for Amazon Elastic Compute Cloud

• Unmanaged Devices Heighten Risks for School Networks

• IPAM Security Policy App: gain consistent security policy management; and Vulnerability Mitigation App Enhancements

• CyrusOne adds options for direct connectivity to Google Cloud to simplify hybrid cloud deployments

• Zoom selects AWS as its preferred cloud provider to grow its core video meeting platform

• Cyber Security Cloud WafCharm now available on Microsoft Azure

• AWS and BlackBerry to develop and market BlackBerry’s Intelligent Vehicle Data Platform

• CyberMDX integrates its Healthcare Security Suite into Philips Cybersecurity Services

• SWAP Detector: Preventing API Errors from Swapped Arguments

• “Free” Symchanger Malware Tricks Users Into Installing Backdoor

• MagSafe Duo Charger for iPhone 12 and Apple Watch Now Available for Purchase

• EclecticIQ raises €20M to expand its portfolio and increase its global footprint

• GoSecure raises $35M to continue growth

• SingleStore gives Nucleus Security needed scale and speed

• Ransomware Attacks Can Be Prevented, Really

• Not Even William Barr Buys Trump’s Election Nonsense

• David Yakimischak joins Apervita as chief technology officer

• Internet Governance and the Universal Declaration of Human Rights, Part 6: Articles 18-19

• An Overview of Security Testing Tools in DevOps

• How to protect your personal data from being sold on the Dark Web

• Ransomware attack shuts down Baltimore County schools

• Malicious or Vulnerable Docker Images Widespread, Firm Says

• Inside North Korea’s Rapid Evolution to Cyber Superpower

• French pharmaceuticals distribution platform Apodis Pharma leaking 1.7+ TB of confidential data

• IT Security News Daily Summary 2020-12-01

• DISA refreshes strategic plan for 2022

• DOD’s ‘virtual hospital’ features remote-controlled IVs, ventilators

• Digitizing licensing and permitting a win-win for local governments and constituents

• Android Messenger App Still Leaking Photos, Videos

• Misconfigured Docker Servers Under Attack by Xanthe Malware

• SASE 101: Why All the Buzz?

• Memory of Marie A

• Malicious npm packages spotted delivering njRAT Trojan

• Apple Releases Tool for Calibrating Apple Pro Display XDR

• Ever had a bogus call from someone claiming to be the IRS? A tax scam ringleader just got sent down for 20 years

• BrandPost: Why You Shouldn’t Pay for Dark Web Scans and What to Do Instead

• GO SMS Pro app still exposing millions of users’ sensitve data

• FedRAMP transitioning to meet latest NIST controls

• County’s telework success built on cloud foundation

• Online education vendor K12 hit with ransomware, pays ransom

• Bomb Threat Hacker Gets 8-Year Prison Sentence

• Using Speakeasy Emulation Framework Programmatically to Unpack Malware

• CVE-2020-17084: Buffer Overflow in Microsoft Exchange Server

• Cyber Security Roundup for December 2020

• How the human immune system inspired a new approach to email security

• Leadership push needed in category management, GAO finds

• Malicious npm packages caught installing remote access trojans

• Cayman Islands Bank Records Exposed in Open Azure Blob

• Cyber Crime Unit Arrests Five in Louisiana

• The Cybersecurity Skills Gap: It Doesn’t Have to Be This Way

• DEF CON 28 Safe Mode Aerospace Village – James Pavur’s ‘Trust And Truth In SSA’

• XKCD ‘Cyber Cafe’

• DEF CON 28 Safe Mode Aerospace Village – Alex Lomas’ ‘TCAS And ILS Spoofing Demonstration’

• DarkIRC botnet is targeting the critical Oracle WebLogic CVE-2020-14882

• Apple Shares Picks for Best Books, Audiobooks, and Podcasts in 2020

• Come Work With Us—As Our New Research Assistant

• The Mistake of Designating the Houthis as a Foreign Terrorist Organization

• AspenPointe Data Breach

• Vietnamese Threat Actor APT32 Linked to Crypto-mining Operation

• Unsecure ElasticSearch Database Leaks 1.7TB of Data Belonging to Apodis Pharma

• FBI warns of email forwarding rules being abused in recent hacks

• EclecticIQ Closes $24 Million Series C Funding Round

• Cyber-Attack Exposes Data of 295,000 Colorado Springs Patients

• Call Fraud Operator Ordered to Pay $9M to Victims

• Easy to Deceive, Difficult to Detect, Impersonation Dominates Attacks

• VMware Horizon Architecture: Planning Your Deployment

• Double the Impact of Every Donation

• Podcast Episode: From Your Face to Their Database

• Five Questions with… Ganesh Pai, CEO, Uptycs

• Cyberbiohacking Attacks Can Target Scientists To Produce Malicious DNA Sequences

• Stop putting off those upgrades. Active IQ is here to help.

• Google launches Android Enterprise Essentials aimed at SMBs

• Zoom Impersonation Attacks Aim to Steal Credentials

• Advanced Persistent Threat Actors Targeting U.S. Think Tanks

• Apple Inks Deal for English/Spanish Comedy ‘Acapulco’

• Microsoft Teams Getting CarPlay Integration and Device Swapping Support for Calls

• Glasswall successfully raises £18 million from leading investors to fund continued expansion

• The Challenge of Secure Wi-Fi

• API Security Weekly: Issue #111

• Microsoft removes 18 malicious Edge extensions for injecting ads into web pages

• Best VPN service in 2020: Safe and fast don’t come for free

• Electronic Medical Records Cracked Open by OpenClinic Bugs

• Flaws in Rockwell Automation Product Expose Engineering Workstations to Attacks

• Sophos 2021 Threat Report: Navigating Cybersecurity in an Uncertain World

• Ivanti Acquires MobileIron & Pulse Secure

• Xanthe – Docker aware miner

• Securing the Office of the Future

• Cyware Launches CTIX Lite, a Lightweight Threat Intelligence Solution for Small to Mid-sized Security Teams

• Baltimore County Schools close after a ransomware attack

• Trump Attorney Calls For Execution Of Former DHS Official

• Magecart Attack Convincingly Hijacks PayPal Transactions At Checkout

• Bitcoin Peaks At Record High Close To $20,000

• The Biggest Hacks, Data Breaches Of 2020

• Apple Adds First iMac Models With Retina 5K Display to Vintage Products List

• Deals: B&H Photo’s Cyber Week Apple Deals Include Sales on 16-Inch MacBook Pro, 2020 iPad Pro, and More

• Samsung Reportedly Developing ‘Galaxy Smart Tag’ Rival to Apple AirTags

• Azure Sentinel achieves a Leader placement in Forrester Wave, with top ranking in Strategy

• Phillips launches Cybersecurity Services to Connected Medical Devices

• What’s the secret to SAP HANA success?

• Canada Plans Digital Services Tax In 2022

• That email about your delivery could be fake: Phishing scammers increase their attack on online shoppers

• Delivery scams surge to ring in the holiday season

• Webinar Today: Advanced Tips for Securing Large AWS Environments

• #thinkcybersec: Don’t Presume Legacy Tech is a Negative Thing

• Only 14% of Online Users Frequently Use Biometric Authentication

• Microsoft discovers Vietnamese Govt sponsored threat actor deploying cryptocurrancy malware

• Can’t Afford a Full-time CISO? Try the Virtual Version

• Former NSS Labs CEO Launches New Security Testing Organization

• Adaptavist Offers Enterprise DevSecOps Solution With Sonatype Partnership

• 2021 Global Tech Outlook, A Red Hat Report: Digital transformation, security and hybrid cloud use stand out

• Deals: AirPods Pro Available for $189.99 on Woot ($60 Off)

• Deep learning: An explanation and a peek into the future

• Apple Fined $12 Million In Italy Over Waterproof Claims

• Not Another Linux Security Blog

• Brazilian Plane Maker Embraer Targeted in Cyberattack

• Baltimore County Schools Still Closed Following Cyber Attack

• Cybercriminals Already Targeting, Selling Leaked GO SMS Pro Data

• Bomb Threat, DDoS Purveyor Gets Eight Years

• Personal Info Available on Dark Web for as Little as 50 Cents

• 7 Simple Ways to Make Your Android Phone More Secure

• Incomplete ‘Go SMS Pro’ Patch Left Millions of Users’ Data Still Exposed Online

• FireMon Partners with Zscaler to Ensure Security and Compliance across the Entire Hybrid Network

• FireMon Integration with Zscaler Internet Access Streamlines Enterprise Moves to Cloud-Centric Security Architectures

• What Vulnerability Intelligence Means for Your Organization

• BlueMail Antitrust Case Against Apple Dismissed

• Apple Lists Deadlines for Ordering Holiday Gifts, Offers Discounted Same-Day Delivery on In-Store Items

• Experts Reaction On Ipsos Mori Internet Survey Could Be A Privacy Risk For UK Consumers

• How prevalent is DNS spoofing? Could a repeat of the Dyn/Mirai DDoS attack have the same results?

• As if Productivity Score wasn’t creepy enough, Microsoft has patented tech for ‘meeting quality monitoring devices’

• Half of all Docker Hub images have at least one critical vulnerability

• Magecart Attack Convincingly Hijacks PayPal Transactions at Checkout

• Nation-State Cyberspy Group Drops Coin Miners as Distraction Technique

• #thinkcybersec: Reconsider Hiring Strategies to Meet 2021’s Digital Challenges

• Experts Discover New macOS Backdoor, Link Attack Campaign to Vietnamese Hackers

• 2020 Cybersecurity Holiday Gift Guide for Kids

• Introducing the New “Cisco Security Outcomes Study”

• 2021 Cybersecurity Trends: The Emergence of the Personalized Attack Chain

• Zens Launches Modular Wireless Charging System for iPhone, AirPods, and Apple Watch

• New Zealand’s Privacy Laws 2020 – Expert Insight

• Experts On Delaware County Pays $500,000 Ransom To DoppelPaymer Gang

• Expert Insight: 5 Key Takeaways From ESG’s Report: The Impact Of XDR In The Modern SOC

• Experts Insight On Baltimore County Public Schools Fall Victim To A Ransomware Attack

• VirusTotal += BitDefender Falx

• FCC Head Ajit Pai Stepping Down, Raises Net Neutrality Hopes

• Indian National to Spend 20 Years in Prison for Call Center Scheme

• Hacker Gets 8 Years in Prison for Threats to Schools, Airlines

• Vietnamese State Hackers Deploy Coin Miners to Victims

• Manipulating Systems Using Remote Lasers

• Supreme Court mulls whether a cop looking up a license plate for cash is equivalent to watching Instagram at work

• 2020 security priorities: Pandemic changing short- and long-term approaches to risk

• UK Government To Ban Installation Of New Huawei 5G Kit

• Canon Finally Confirms August Attack Exposed Staff Data

• Indian job portal IIMJobs hacked; database leaked online

• Signed Bandook Malware Attacks Against Multiple Industrial Sectors

• What is cyber insurance? Everything you need to know about what it covers and how it works

• Online Learning Company K12 Paying Ransom Following Ransomware Attack

• Cybersecurity Lessons from the Pandemic: Protection

• Vietnam-linked Bismuth APT leverages coin miners to stay under the radar

• Swiss Apple Reseller Suggests MagSafe Duo Charger Launches This Month

• MacOS users targeted with updated malware

• Security flaw could manipulate scientists into creating viruses

• Cayman Islands investment fund left entire filestore viewable by world+dog in unsecured Azure blob

• SIEM Trends: What to Look for in a Security Analytics Provider

• The Future of Cybersecurity: How to Prepare for a Crisis in 2020 and Beyond

• Where’s the package I’m expecting? Watch out for shipping and delivery-related phishing emails that try to track YOUR details

• The Must See List. A Look at AWS re:Invent 2020

• ‘Hacker_R_US’ gets eight years in prison for bomb threats and DDoS extortion

• Cybersecurity Flaws Could Lead to Biological Attacks: Report

• Carrefour Handed $3.7m GDPR Fine

• How Data Classification Helps Organizations Maintain a Strong Data Security Posture

• IceRat evades antivirus by running PHP on Java VM

• UK gov bans new Huawei equipment installs after Sept 2021

• Apple Expands Partnership With (RED) to Combat HIV/AIDS and COVID-19

• WhatsApp Update Adds Custom Wallpapers for Individual Chats, Sticker Search, and More

• Vietnamese state-backed hackers linked to crypto-mining malware campaign by Microsoft

• Yes, we’re all going to be at home for the foreseeable future. Does that leave you feeling insecure?

• 2020’s worst cryptocurrency breaches, thefts, and exit scams

• Remote Workers Admit Lack of Security Training

• Apple Highlights PPE Donations to Zambia in Fight Against COVID-19 and HIV

• Interview with founder of the copyright timestamped entity Digital Witnessor

• 4 Free Online Cyber Security Testing Tools For 2021

• Nation-State Hackers Caught Hiding Espionage Activities Behind Crypto Miners

• How to Spot Razy Malware Undetected By AV Systems

• Talos reported WebKit flaws in WebKit that allow Remote Code Execution

• Dox, steal, reveal. Where does your personal data end up?

• Application security testing is not just buzzwords

• Transnational access to electronic evidence for criminal cases: trends and latest developments within the EU and beyond

• Indian National Gets 20-Year Jail in United States for Running Scam Call Centers

• Old Vulnerabilities Open the Door for WannaCry Ransomware

• New study: DNS spoofing doubles in six years … albeit from the point of naff all

• The biggest hacks, data breaches of 2020

• Why microlearning is the key to cybersecurity education

• Ransomware news headlines trending on Google

• Cyber Attack on AstraZeneca COVID-19 Vaccine Research

• Group-IB presents patented-technologies to protect against cyber threats

• Apple Developers Now Able to Natively Run macOS Within AWS With Amazon EC2 Mac Instances

• Retail CISOs and the areas they must focus on

• Foiling RaaS attacks via active threat hunting

• ​​​​​​​The perfect storm: How digital transformation is reshaping security and networking

• Theoretical Attack on Synthetic DNA Orders Highlights Need for Better Cyber-Biosecurity

• Insider Threats: Risk Assessment Considerations for Remote Work

• Worldwide SD-WAN market to reach $43 billion by 2030

• Malware may trick biologists into generating dangerous toxins in their labs

• Web Application Penetration Testing Checklist – A Detailed Cheat Sheet

• Hackers Steal 800,000€ from ATMs in Italy Using Black Box attack

• Microsoft links Vietnamese state hackers to crypto-mining malware campaign

• Mobile payment apps: How to stay safe when paying with your phone

• The CISO’s guide to rapid vendor due diligence

• ISC Stormcast For Tuesday, December 1st 2020 https://isc.sans.edu/podcastdetail.html?id=7272, (Tue, Dec 1st)

• Computer Services and Featurespace partner to launch anti-money laundering solution

• Forget Snow Day: Baltimore’s 115,000+ public school kids get Ransomware Day, must check Win PCs for infection

• Report: Holocaust Denial Content Still Spreading On Facebook Despite Ban

• Internet Society and IETF agreement ensures the continuity of critical work in creating open standards

• Dynatrace and SAP expand partnership to help retailers drive better business outcomes

• 5 Issues the Security Industry Needs to Resolve in 2021

• Spanning Release Notes: Office 365 Backup MSP Edition

• Notable Developer Starts Patreon to Fund Apple Silicon Linux Port

• SS8 awarded two multi-million dollar Lawful Intelligence contracts

• Fuze awarded new patent for processing heterogeneous data streams in real time

• Driven by Ransomware, Cyber Claims Rise in Number & Value

• Upcoming Apple TV+ Show ‘Surface’ to Star Gugu Mbatha-Raw

• Totum Labs raises $13M to drive commercialization of its DMSS technology

• Apple’s M1 MacBook Air has that Apple Silicon magic

• Growl, once a staple of the Mac desktop experience, has been retired

• EFF Condemns Egypt’s Latest Crackdown

• Manage and Secure Notifications on Your iPhone, iPad, and Mac

• Safari for iOS 14 and Big Sur: How to prevent websites from tracking your moves online

• How to create strong passwords: 5 tips

• Top 5 tips for choosing strong passwords

• Companies are relaxing cybersecurity during the pandemic to boost productivity

• Baltimore County Public Schools Closed Due to Ransomware Attack

• Exclusive: Experts from TIM’s Red Team Research (RTR) found 6 zero-days

• Hands-On With the Leather Sleeve for iPhone 12 Models

• Threat actor leverages coin miner techniques to stay under the radar – here’s how to spot them

• IT Security News Monthly Summary – December

• IT Security News Daily Summary 2020-11-30

• 4 steps to turn CMMC compliance into a competitive advantage

• House chairs seek ‘full accounting’ of Schedule F conversions

• Budget boost would trim CISA’s risk assessment backlog

• Top cyber threats agencies should have on their radar

• Building real cyber resiliency in government

• Docker malware is now common, so devs need to take Docker security seriously

• Conti Gang Hits IoT Chipmaker Advantech with $14M Ransom Demand

• Post-Cyberattack, UVM Health Network Still Picking Up Pieces

• Safari for iOS 14 and macOS 11: How to prevent websites from tracking your moves online

• Cisco WebexOne

• Exploring malware to bypass DNA screening and lead to ‘biohacking’ attacks

• Developer Delves Into Reasons Why Apple’s M1 Chip is So Fast

• What’s in the Lead Inspector General’s Quarterly Report on Afghanistan?

• The GSA Delayed Biden’s Transition. Future Presidents-Elect Could Sue to Speed Things Up.

• OceanLotus hackers hit macOS users with new malware

• JAIC focuses on warfighting capabilities

• Census workers from across US are raising big concerns about this year’s count

• When remote doesn’t work

• Practice AWS Certified Security – Specialty exam questions

• How to pass the AWS Certified Security – Specialty exam

• The Multi-Million Pound Manchester United Hack

• Comcast RISE Awards Over 700 Black-Owned, Small Businesses with Marketing and Technology Resources and Makeovers

• Coalition Against Stalkerware’s One Year Anniversary Recognizes Milestones, New Members and Celebrates UN’s International Day for the Elimination of Violence Against Women

• DefenseStorm Secures $12M in Series B Capital Raise

• Critical Event Management Category Leader Everbridge Makes Key Appointments to Expand its Global Marketing and Communications Functions

• Can good cybersecurity policies improve our quality of life?

• Digitally Signed Bandook Trojan Reemerges in Global Spy Campaign

• How to get Linux to see the FEITIAN fingerprint reader for FIDO2 security

• Cybersecurity report: Average household hit with 104 threats each month

• UK to Ban New Huawei Gear Installations After Sept

• Denmark News Agency Refuses to Pay Hacker’s Ransom

• Industrial Computer Maker Confirms Ransomware, Data Theft

• Second Swiss Firm Said to Be CIA Encryption Puppet

• Functional Apple-1 With Original Box Signed by Steve Wozniak Goes to Auction

• EFF Urges Federal Appeals Court to Rehear Case Involving Unconstitutional Baltimore Aerial Surveillance Program

• Following DynDNS attacks, DNS Dependencies Have Only Gone Up

• DoppelPaymer Claims Attack on Banijay SAS-owned Endemol Shine Group

• Pennsylvania County Pays $500K Ransom to DoppelPaymer Ransomware.

• USAF primed to launch new phase of data strategy

• The next normal is about managing remote, autonomous, distributed and digitally enabled workforce

• WebKit Vulnerabilities Allow Remote Code Execution via Malicious Websites

• Data Stolen from America’s Largest Fertility Clinic Operator

• Ransomware Attack on Baltimore County Schools

• 3 Reasons to Pentest with Brave

• Baltimore gets hit by ransomware again, the schools this time

• BrandPost: Getting Strategic with Security Budget Planning

• VMware Carbon Black Cloud Adds Device Control

• Pandemic, A Driving Force in 2021 Financial Crime

• MacOS Users Targeted By OceanLotus Backdoor

• The CEO’s chuckling at their email… you better check your security defenses

• Vulnerability Summary for the Week of November 23, 2020

• Apple One Marked as Expired for Some Customers and Other Billing Issues Emerge as 30-Day Trial Ends

• Introducing Anthos on bare metal with NetApp

• Improving Data Security in Schools Part 1: Hybrid Learning

• VMware Carbon Black Cloud Adds Device Control for USB Storage Devices

• Creating an infrastructure for procurement innovation at DHS

• COVID-19 Is Requiring Us to Implement Cyber Distancing

• Embedding Trust at the Core of Critical Infrastructure

• Countering 5G Conspiracy Theories

• Apple Moving Forward With Plans for ‘Folded’ Periscope Cameras to Significantly Increase iPhone’s Optical Zoom

• Apple Cyber Monday 2020: Save on Mac Software, Apple Accessories, and More

• Zerologon is now detected by Microsoft Defender for Identity

• German users targeted with Gootkit banker or REvil ransomware

• Tips to help healthcare service providers keep ransomware at bay

• Virtual events help NetApp employees innovate and collaborate

• Hackers are targeting MacOS users with this updated malware

• Tens of Dormant North American Networks Suspiciously Resurrected at Once

• CyberMDX Announces Partnership with Philips to Integrate CyberMDX into Newly Announced Integrated Cybersecurity Services

• Check Washing

• Ransomware Halts Classes For 115,000 Baltimore Pupils

• WarGames For Real: How One 1983 Exercise Nearly Triggered WWIII

• Hackers Are Targeting MacOS Users With Updated Malware

• The Supreme Court Will Hear Its First Big CFAA Case

Generated on 2020-12-06 23:58:24.542212