IT Security News Daily Summary 2020-11-20

• Tech experts call on feds to coordinate benefits solutions

• AI shows where cities need trees the most

• Can private data as a service unlock government data sharing?

• Long-awaited IoT security bill heads to president’s desk

• Long-term telework can expand recruitment pool

• Data protection impact assessment tips and templates

• Facebook Messenger Bug Could Have Let Hackers Listen To Your Conversations

• VMware addresses flaws exploited at recent Tianfu Cup

• Astropad and Luna Display Updated With M1 Mac Support

• In Praise of Chris Krebs

• 2020 Vision: Adapting Security for Office 365 Collaboration

• IBM Power9 processors beset by Cardiac Osprey data-leaking flaw as Spectre still haunts speculative chips

• Election disinformation fears came true for state officials

• Good Heavens! 10M Impacted in Pray.com Data Exposure

• VMware Fixes Critical Flaw in ESXi Hypervisor

• Google Services Weaponized to Bypass Security in Phishing, BEC Campaigns

• How Industrial IoT Security Can Catch Up With OT/IT Convergence

• Facebook Messenger Flaw Enabled Spying on Android Callees

• Deals: Nomad’s Early Black Friday Sale Takes 30% Off Sitewide Through December 2

• Leather Sleeve for iPhone 12 Models Now Available From Apple

• Once Again, Facebook Is Using Privacy As A Sword To Kill Independent Innovation

• Common Malware Families That Lead to Ransomware

• CBP wants to expand facial recognition

• Study finds 31% of third-party vendors could cause significant damage to organizations if breached

• What are the biggest hardware security threats?

• Security Pros Push for More Pervasive Threat Modeling

• DEF CON 28 Safe Mode Voting Village Village – United States Election Assistance Commission Chairman Benjamin Hovland’s Remarks

• MacRumors Giveaway: Win 30W and 65W USB-C Power Adapters From RAVPower

• Chrome for M1 Macs Runs Up to 80% Faster Than Rosetta 2 Version

• Craig Federighi: Native Windows on M1 Macs is ‘Really up to Microsoft’

• Critical Vulnerabilities in VMWare ESXi, Workstation and Fusion Patched

• Mount Locker Ransomware is Now Targeting TurboTax Returns

• Drupal sites vulnerable to double-extension attacks

• Facebook Paid Out $11.7 Million in Bug Bounties Since 2011

• Trend Micro Releases Free Tool to Tackle Misinformation

• Green Beret Passed Secrets to Russia

• Sector financiero, ciberseguridad y gestión de operaciones

• Anker’s eufyCam 2 Pro Camera With HomeKit Secure Video Now Available From Apple

• End to end encryption? In Android’s default messaging app? Don’t worry, nobody else noticed either

• Facebook Messenger bug allowed callers to listen unattended calls

• Database Authentication + Spring Security SAML

• Government-funded scientists laid the groundwork for billion-dollar vaccines

• New Grelos Skimmer Variants Siphon Credit Card Data

• Data Breach at Iowa Hospital

• Managed.com Hosting Provider Hit by REvil Ransomware, $500K Ransom Demand

• A quick look into malwares that installs ransomware : Remove them form your system immediately

• Japanese Orgs Hacked ‘by China’ in Long, Widespread Campaign

• October Mumbai power outage may have been caused by a cyber attack

• How to Apply Elite Intelligence to AWS Security Services

• Apple Lists M1-Based Mac Mini Logic Boards With 10 Gigabit Ethernet in Internal Parts Ordering System

• UK Government, Facebook, Google, Twitter To Tackle Covid Misinformation

• Major Power Outage in India Possibly Caused by Hackers: Reports

• Facebook patches Messenger audio snooping bug – update now!

• FireEye Acquires Respond Software

• Hao Projection: Chinese-Drawn World Map

• Apple Software Chief Craig Federighi Defends App Tracking Transparency Feature

• Europe Has No Strategy on Cyber Sanctions

• It’s Only a Matter of Time Before China Detains U.S. Executives

• Demystifying two common misconceptions with e-commerce security

• Black Friday 2020: How to shop safely online

• Egregor Ransomware locks down retail giant billing machines

• Facebook Messenger Bug Allows Spying on Android Users

• It’s time for banks to rethink how they secure customer information

• Implementing an SDP architecture for added network security

• Convicted SIM Swapper Gets 3 Years in Jail

• #ISSE2020: Focus on 2020’s Crypto Successes Rather than Efforts to Break it

• Bug in Facebook Messenger on Android Let Attackers Start Calls and Listen to Audio

• How Cyberattacks Work

• Within the margin of error

• Five worthy reads: The rise in credential stuffing attacks

• Mitsubishi Electric Corp. was hit by a new cyberattack

• Robot Vacuums Suck Up Sensitive Audio In LidarPhone Hack

• Tech Giants Align To Fight Covid Vaccine Conspiracies

• Dutch Police Investigate Trump Twitter Hack

• Two Romanians Arrested For Running Three Malware Services

• OWC’s Upcoming Thunderbolt Hub Adds More Thunderbolt 3 Ports to Your Mac

• US Regulators Begin Consultation On Self-Driving Car Safety

• Pray.com exposed data of millions after database mess up

• Introducing another free CA as an alternative to Let’s Encrypt

• Security Culture: Putting Digital Literacy First in Your Company

• Microsoft: These are the new privacy steps we’re taking to protect your data

• Two Romanians arrested for running three malware services

• Industry Reactions to Trump Firing CISA Director Chris Krebs: Feedback Friday

• Mercy Iowa City Discloses Highly Sensitive Data Breach Impacting Over 60,000 Iowans

• Cloud Security Alliance, Tiro Security Partner to Offer Complimentary Cloud Certification Exam to Cybersecurity Women, Minorities in nextCISO Program

• Cloud Security Alliance Opens Registration for CloudBytes Connect: From the SOC to the Boardroom

• Apple Reiterates ‘Enormous Potential’ of AR, Hints at ‘Devices That May Exist Tomorrow’

• Xbox Series X Controller Support Coming to Apple Devices

• IAM-Driven Biometrics: The Security Issues with Biometric Identity and Access Management

• Google is adding end-to-end encryption to its Android Messages app

• GO SMS Pro Exposes Messages of Millions of Users

• Hacker Closing Out Prison Sentence in Chicago Halfway House

• Industry Reactions to Trump Firing CISA Director: Feedback Friday

• CybExer Tasked With Enhancing Luxembourg’s Cyber-Defense Capabilities

• Ransomware Attack Takes Down Massive Food-Supply Chain Providing Distribution of Temperature-Sensitive COVID-19 Vaccines

• $799 M1 MacBook Air With 128GB Storage for Education Institutions Spotted Online

• Deals: Get Up to $100 Off Apple’s 2020 iPad Pro Lineup

• 10 Cross Platforms for App Development

• New Jupyter Malware Is A Blend of Infostealer And Backdoor

• Web Hosting Provider Managed.com Suffered REvil Ransomware Attack

• (adsbygoogle = window.adsbygoogle || []).push({});

• World’s Worse Passwords Revealed By NordPass

• Artificial intelligence could be used to hack connected cars, drones warn security experts

• Google is adding end-to-end encryption to Android Messages app

• New Mount Locker Ransomware Version Targeting TurboTax Files

• VMware Patches Vulnerabilities Exploited at Chinese Hacking Contest

• Faith App Pray.com Exposes Millions Through Cloud Misconfig

• Symantec Reports on Cicada APT Attacks against Japan

• First HomePod Jailbreak Stokes Speculation About Smart Speaker’s Hacking Potential

• REvil claim attack on televangelist Kenneth Copeland

• Android users could spy on others using the Facebook Messenger

• Nozomi Networks partners with Honeywell to strengthen OT cybersecurity

• Robot vacuums can allow bad actors into your home

• Security Recruiter Directory

• 10 biggest cybersecurity M&A deals in 2020

• Facebook Pays $60,000 for Vulnerability in Messenger for Android

• Microsoft Announces Pluton Processor for Better Hardware Security

• Critical Webex Bugs Let ‘Ghost’ Users Spy on Meetings

• Winners announced of Europol’s 2020 Photo Competition

• Over 2 000 participants from 132 countries logged on for the 4th Global Conference on Criminal Finances and Cryptocurrencies

• A flaw in Facebook Messenger could have allowed spying on users

• QakBot Big Game Hunting continues: the operators drop ProLock ransomware for Egregor

• Today at Apple Launches ‘Make Your Holiday’ Project Book and Virtual Creative Sessions

• Experts On New Grelos Skimmer Variant Reveals Overlap in Magecart Activities

• 2020 Black Friday/Cyber Monday – Likely Magecart Attack Increase Due To Plug-in Vulns – Experts Perspective

• VMware patches serious vulnerabilities in ESXi hypervisor, SD-WAN Orchestrator

• 1-15 October 2020 Cyber Attacks Timeline

• NCSC’s London HQ was chosen because GCHQ spies panicked at the prospect of grubby Shoreditch offices

• Check Point Software Partners with (ISC)² to Further Develop C level executives Key Cyber Security Skills

• FCW Insider: Nov. 20

• US Senate Approves New Deepfake Bill

• IT threat evolution Q3 2020 Mobile statistics

• IT threat evolution Q3 2020. Non-mobile statistics

• Apps for Customizing iOS 14 Home Screens Installed on 15% of US iPhones

• Why test data does not need to be protected

• Kali Linux 2020.4 Released with New Tools, ZSH Shell & Updates for NetHunter

• Apple to Press Ahead on Mobile Privacy, Despite Facebook Protests

• Black Friday Alert as E-Commerce Attacks Surge in 2020

• Twitter Names Hacker Mudge Head of Security | Avast

• IT threat evolution Q3 2020

• UK reveals new ‘National Cyber Force’, announces Space Command and mysterious AI agency

• Romanian duo arrested for running malware encryption service to bypass antivirus software

• Facebook Messenger Bug Lets Hackers Listen to You Before You Pick Up the Call

• Maintaining Governance and Security in Multi-Tool Environments

• Malicious Python Code and LittleSnitch Detection, (Fri, Nov 20th)

• Unprotected S3 Buckets Results In Over 80,000 ID Cards And Fingerprint Scans

• Experts Reacted On Android Chat App With 100 Million Installs Exposes Private Messages

• Holidays Are Coming – the State of Security for E-commerce in 2020

• Looking for adding new detection technologies in your security products?

• Cyber Security Jobs with Growing Demand in India – Here an Exclusive Cyber Security Job Portal

• Singapore investigating claims Muslim app developer sold user data to US military

• Weekly Update 218

• Cyber Security Predictions 2021: Experts’ Responses

• You can protect the company from hackers, but can you protect the company from the CEO?

• UK reveals new ‘National Cyber Force’, announces Space Command and mysterious AI agency

• The malware that usually installs ransomware and you need to remove right away

• New infosec products of the week: November 20, 2020

• Ransomware attacks on one in four SaaS providers

• Verizon Cyber Espionage Report

• Attacks on biotech and pharmaceutical industry escalate

• 56% of organizations faced a ransomware attack, many paid the ransom

• VMware SD-WAN Vulnerabilities Expose Enterprise Networks to Attacks

• Microsoft Boosts Security of 365 Priority Accounts

• The Ministry of Digital Development of the Russian Federation developing monitoring application to combat COVID-19

• OSINT, 3D Modeling, Geolocation & Forensic Architecture: Analysis Of The Beirut Port Explosion

• The Role of Access Control in Information Security

• CVE-2020-27995: Zoho ManageEngine RCE

• Healthcare Orgs: What You Need to Know About TrickBot and Ryuk

• Protecting Against Election Interference in 2024

• Financial services lead when it comes to fixing open source flaws

• Consumer behaviors and cyber risks of holiday shopping in 2020

• VMware reveals critical hypervisor bugs found at Chinese white hat hacking comp. One lets guests run code on hosts

• Holiday Shoppers Beware: Tips on Protecting Brand Owners and Consumers from Domain Security Threats

• Business Email Compromise Attacks: The Big Phishing Scam That’s Easily Missed

• The worst passwords of 2020: Is it time to change yours?

• ISC Stormcast For Friday, November 20th 2020 https://isc.sans.edu/podcastdetail.html?id=7262, (Fri, Nov 20th)

• Open Raven Cloud-Native Data Protection Platform: Automating security and privacy operations

• FireEye Acquires Respond Software, Gets $400 Million Investment Led by Blackstone

• Apple Offers Instructions on What to Do if macOS Big Sur Causes Installation Errors on 2013 and 2014 MacBook Pro

• Entrust CryptoCoE: Enabling enterprises to take command of their crypto instances

• McAfee MVISION CNAPP enhances cloud-native security by integrating with AWS

• Red River delivers simplified WAN management with Managed SD-WAN solution

• DigiCert Enterprise PKI Manager supports security for remote workforces

• In 2016 Australia’s online census failed. Preparations for the 2021 edition have been rated ‘partly effective’

• Telco carrier to tech firm: BT Global Services CEO on reshaping the company

• Aerospike unveils XDR expressions in Aerospike Database 5

• FileCloud 20.2: Protecting, tracking and controlling sensitive documents after distribution

• FireEye surges as investment firm Blackstone takes $400 million investment, board seat

• Iowa Hospital Alerts 60K Individuals Affected by June Data Breach

• Telos Goes Public

• Enzoic partners with OneLogin to eliminate the risk of compromised credentials

• PCI Pal and Oracle collaborate to add security and compliance options for CNP payments

• RepRisk and Apex partner to provide ESG risk data to private markets

• Tufin and AWS Network Firewall deploy network protections for Amazon Virtual Private Clouds

• BrandPost: Discover the Correlation Between Cybersecurity and Positive Business and Security Outcomes

• DOD, Coast Guard resume MHS Genesis deployment

• Cybercriminals Get Creative With Google Services

• ISP Security: Do We Expect Too Much?

• A flaw in GO SMS Pro App allows accessing media messages

• Apple Black Friday 2020: Deals on Macs, iPhones, iPads, and Apple Watches

• iFixit Teardown: M1 MacBook Pro and MacBook Air Internals Nearly Identical to Intel Models

• (adsbygoogle = window.adsbygoogle || []).push({});

• Watch Apple’s M1 MacBook Pro Obliterate 2020 Intel MacBook Pro in Speed Tests

• Abnormal Security raises $50M to double the size of its machine learning and data science teams

• Druva acquires sfApex to offer data protection with sandbox management and data governance

• Authenticated Resolution and Adaptive Resolution: Security and Navigational Enhancements to the DNS

• IBM CISO Perspective: Zero Trust Changes Security From Something You Do to Something You Have

• VMware Workspace Security: A Major Leap Towards Unified Endpoint Mobility & Security

• Upgraded CDM dashboard to roll out through FY2021

• FIreEye surges as investment firm Blackstone takes $400 million investment, board seat

• Robot Vacuums Suck Up Sensitive Audio in ‘LidarPhone’ Hack

• How phishing attacks are exploiting Google’s own tools and services

• Apple Releases Safari Technology Preview 116 With Bug Fixes and Performance Improvements

• IT Security News Daily Summary 2020-11-19

• How To Prepare Your Mac for macOS Big Sur – Intego Mac Podcast Episode 162

• Lawmakers probe telework’s impact on federal jobs, hiring

• German COVID-19 Contact-Tracing Vulnerability Allowed RCE

• Brave Rewards: How to disable the feature

• White House questions election security; experts do not

• Report: Facebook Did Not Enforce Its Own Rules To Stop Call To Arms Ahead Of Kenosha Shootings

• Go SMS Pro Messaging App Exposed Users’ Private Media Files

• Nation-state actors from Russia, China, Iran, and North Korea target Canada

• The Death of Ayman Al-Zawahri and the Future of Al-Qaida

• Mac and iOS Keychain Tutorial: How Apple’s iCloud Keychain Works

• How to Prepare Your Mac to Upgrade to macOS Big Sur: the Ultimate Guide

• The Netflix streaming model can obviate your employee’s computer security

• Cloud operations are the latest target for ransomware groups

• Cyber threat to Canada from its adversary nations

• Online purchase scams spike since the start of COVID-19, reports BBB

• Ransomware attack on Managed.com disrupts websites across the world

• UK To Create National Cyber Force, Amid £16.5bn Defence Rise

• Facebook Messenger bug could have allowed hackers to spy on users

• Neo-Noir Psychological Thriller ‘Losing Alice’ Launching on Apple TV+ on January 22

• Apple Releases Revised Version of macOS 11.0.1 Big Sur

• Apple and Verizon Debut ‘5G Fleet Swap’ Enterprise iPhone Trade-In Program

• US Senate approves deepfake bill to defend against manipulated media

• REvil Ransomware Hits Managed[.]com

• Liquid Crypto-Exchange Accessed by Unauthorized Party

• New Strain of Skimming Malware Attacking E-Commerce Sites

• Panda Security does it again: 100% detection in AV-C’s Real-World Test

• Brosix – Keep Your Employees Connected With This Secure Messaging App

• Mozilla Has Released Firefox 83 With FreeType Zero-day Fix and HTTPS-Only

• Google Released Chrome 87 With Performance Updates; Disables FTP

• What is the dark web? How to access it and what you’ll find

• 7 dumb ways to be a ransomware victim, and how to avoid them

• EU’s DORA regulation explained: New risk management requirements for financial firms

• China’s exclusion from US 5G market likely to continue with Biden administration

• Red Hat and NetApp integrate Kubernetes app-data management for OpenShift and Project Astra customers

• Medical imaging lifecycle management

• Why is similarity so relevant when investigating attacks

• Elon Musk To Overtake Zuckerberg As Third Richest Person

• Apple Pays $113 Million To Settle iPhone Slowdown Probe

• Amazon Sacks Staff At Drone Division – Report

• Russia Readies Law So Moscow Can Block Social Networking Giants

• Fortnite To Return To iPhones Via Cloud Gaming Service

• Vulnerability in Bumble dating app risked data of 100 million users

• How to Optimize Your App Settings for Privacy

• Android messaging app with 100M users found exposing messages

• Microsoft hopes Windows PCs protection with Pluton security chip

• List of 2020’s most used passwords is here and it’s appalling

• Firefox 83.0 Released – Improved Page Load Performance, HTTPS-Only Mode & 0-Day Fix – Update Now!!

• Surprising Differences Between TLS and SSL Protocol

• Chrome 87 Released with Improved Performance and Security Updates

• Multiple Critical Flaws in Cisco Security Manager Let Attackers to Execute Remote Code

• Businesses Need Automated Web Application Security Scanners to Detect Web Vulnerabilities

• Cloud Workload Security: Part 2 – Security Features of AWS

• API Security Weekly: Issue #110

• Locking Down Smart Home Security | Avast

• Privacy In The Age Of Pandemic | Avast

• Turn Off iPhone Location Tracking | Avast

• Application Security Book Review | Avast

• IBM Works With Cisco to Exorcise Ghosts From Webex Meetings

• Ransomware Response: Time is More Than Just Money

• Cybersecurity Framework: How To Create A Resilience Strategy

• Data Destruction: Importance and Best Practices

• Stay Calm: Your Supply Chain Cybersecurity Is Solid

• Defining Cloud Workload Protection

• VMware Carbon Black Announces Splunk Integration to Streamline and Modernize SOC Workflows

• Risk Score 101: What to look for in a Risk Score

• Anti-adversarial machine learning defenses start to take root

• Achieving K8 Security @ The Speed & Scale of DevOps

• Who’s Calling? How to Avoid Being Hooked by Vishing – the New Old-School Phone Scam

• IBM acquires Instana for its AI-powered app performance monitoring

• How The Trevor Project uses AI to help LGBTQ+ youth and train its counselors

• ControlUp raises $27 million to apply AI to remote machine monitoring

• What enterprise CISOs need to know about AI and cybersecurity

• Forter raises $125 million at a $1.3 billion valuation to combat ecommerce fraud with AI

• Army to evaluate facial recognition in day care centers

• DOD fails third audit, but sees progress with cost-savings

• Making software more than an ‘IT thing’

• CMMC countdown is on but are there enough assessors to do the job?

• New Grelos skimmer variant reveals overlap in Magecart group activities, malware infrastructure

• Windows 10 Expert’s Guide: Everything you need to know about BitLocker

• LidarPhone attack converts smart vacuums into microphones

• The UK’s new offensive cyber unit takes on organised crime and hostile states

• Best VPNs in 2020

• Bumble bugs could have exposed personal data of all users

• WebNavigator Browser Released by Well-Known Search Hijackers

• Adventures in MQTT Part II: Identifying MQTT Brokers in the Wild

• Phishers Using Redirector Sites with Custom Subdomains for Evasion

• Egregor Ransomware Attack Hijacks Printers to Spit Out Ransom Notes

• IoT Cybersecurity Improvement Act Passed, Heads to President’s Desk

• (adsbygoogle = window.adsbygoogle || []).push({});

• Food-Supply Giant Americold Admits Cyberattack

• Code42 Incydr Series: Protect IP with Code42 Incydr

• Tis’ the Season for Online Holiday Shopping; and Phishing

• GO SMS Pro Android App Exposes Private Photos, Videos and Messages

• Consumers share their top frustrations about online retail purchasing

• Linux servers: How to encrypt files with gocryptfs

• How to use Mozilla’s VPN service across mobile and desktop platforms

• Thunderbird: How to use the built-in GPG feature

• How to use the built-in GPG feature for Thunderbird

• Google Announces Major Google Chrome Extensions Privacy Update

• Google Launches Strong Encryption for Android Messages

• Cybersecurity Workforce Study Needs to be Taken with a Pinch of Salt

• E-Commerce Fraud Prevention Firm Forter Raises $125M at $1.3B Valuation

• 5G Security Risk vs. Reward

• Chinese Hackers Target Japanese Organizations in Large-Scale Campaign

• Application, database and data security quiz

• Sophos: Ransomware ‘heavyweights’ demand sky-high payments

• President Trump fires CISA director Christopher Krebs

• Sophos 2021 Threat Report: Navigating cybersecurity in an uncertain world

• S3 Ep7: When ransomware crooks get a big fat zero! [Podcast]

• Trump Fires Security Chief Christopher Krebs

• HMRC Records 73% Growth in Email Phishing Attacks During #COVID19

• Raytheon Employee Jailed for Exporting Missile Data to China

• #DxPsummit: CISOs Discuss Ransomware Strategies for Recovery and Resistance

• Hard Rock Stadium Ups Cybersecurity

• Oregon County Hit by Ransomware Attack

• Facebook Grilled By Lawmakers Over Moderation, Censorship Concerns

• Zoom Releases Security Features to Fend off Zoom Bombers and Disruptive Participants

• Capcom Ransomware Attack Compromised Personal Information of 350,000 Individuals

• DarkSide Ransomware Operators Plan to Open Distributed Storage System for Stolen Files

• Hundreds of Thousands of SMBGhost and BlueKeep Infected Systems Are Still Up and Running

• Experts meet to identify victims of child sexual abuse

• Three victims of child abuse put to safety in France

• New report finds that criminals leverage AI for malicious use – and it’s not just deep fakes

• ESET has revealed a new series of Lazarus attacks

• Factories have become a major target for malware attacks

• New €4.2 Million fund to empower internet innovators to develop blockchain-based solutions

• White House Declares Guidelines to U.S Federal Agencies for AI Applications

• Unpatched Browsers Abound, Study Shows

• 2021 Cybersecurity Spending: How to Maximize Value

• New Proposed DNS Security Features Released

• COVID-19: Latest Security News & Commentary

• The Yellow Brick Road to Risk Management

• 6 Tips for a More Cyber-Secure Holiday Season

• Telegram Still Hasn’t Removed an AI Bot That’s Abusing Women

• Ghostery’s Making a Privacy Browser—and Ad-Free Search Engine

• A Facebook Messenger Flaw Could Have Let Hackers Listen In

• Cisco Releases Security Updates for Multiple Products

• Drupal Releases Security Updates

• Google Releases Security Updates for Chrome

• Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

• VMware Releases Security Updates for VMware SD-WAN Orchestrator

• Inside the Cit0Day Breach Collection

• Apple Lets Some of its Big Sur macOS Apps Bypass Firewall and VPNs

• Use This Ultimate Template to Plan and Monitor Your Cybersecurity Budgets

• Researchers Warn of Critical Flaw Affecting Industrial Automation Systems

• Evolution of Emotet: From Banking Trojan to Malware Distributor

• WARNING: Unpatched Bug in GO SMS Pro App Exposes Millions of Media Messages

• Ransomware Groups Break Promises, Leak Data Anyway

• Back from vacation: Analyzing Emotet’s activity in 2020

• ISE 3.0 Dynamic Visibility: Step into zero trust for the workplace

• IT and OT Cybersecurity: United We Stand, Divided We Fall

• DEF CON 28 Safe Mode Voting Village Village – Nimit Sawhney’s ‘Analysis Of Data From Mobile Voting Pilots’

• Digital Defense, Inc. Receives 2020 HIRE Vets Platinum Medallion Award for Second Consecutive Year

• What is a Data Classification Policy and Why it’s Important to Keep it Up to Date

• XKCD ‘Blair Witch’

• DEF CON 28 Safe Mode Voting Village Village – Cordero Delgadillo’s ‘A Lawyer’s Reflections On Elections’

• Criminal Activities in Times of a Global Pandemic

• Cisco fixed flaws in WebEx that allow ghost participants in meetings

• REvil ransomware demands 500K ransom to Managed.com hosting provider

• New Grelos skimmer variant reveals murkiness in tracking Magecart operations

• We infiltrated an IRC botnet. Here’s what we found

• Drupal addressed CVE-2020-13671 Remote Code Execution flaw

• Advanced Threat predictions for 2021

• Michael Ellis as NSA General Counsel

• The US Military Buys Commercial Location Data

• ISC Stormcast For Thursday, November 19th 2020 https://isc.sans.edu/podcastdetail.html?id=7260, (Thu, Nov 19th)

• PowerShell Dropper Delivering Formbook, (Thu, Nov 19th)

• How security and compliance automation can help achieve a more secure hybrid cloud

• A guide to security technologies in Red Hat Enterprise Linux

• Mass Migration of Users to Parler Prompts Concerns Over Security and Disinformation

• Perception Point X-Ray

• Introducing the Industry’s First 5G-Native Security

• Congratulations to Our 2020 Global Partners of the Year!

• The Worst Passwords Of 2020 Are Here And They Are Horrifying

• LAPD Bans Facial Recognition, Citing Privacy Concerns

• Cisco Webex Bugs Allow Attackers To Join Meetings As Ghost Users

• Liquid Crypto Exchange Compromised By Hackers

• Massive, China-State-Funded Hack Hits Companies Around The World, Report Says

• Wireless CarPlay Expands to More New Vehicles Amid Rumors of Portless iPhone Next Year

• Joanna Stern and John Gruber Discuss Apple M1 Transition and ‘Craptastic’ 720p FaceTime Cameras

• Google Bringing Stadia Cloud Gaming Service to iOS Through Web App

• Apple Releases iOS 14.2.1 With Fix for Text Message Bug and iPhone 12 Mini Lock Screen Issues

• Apple Confirms Commitment to App Tracking Transparency in Letter Condemning Facebook’s Data Collection

• Where’s the U.S. Strategy for Counternarcotics in Afghanistan?

• Understanding Trump’s Invocation of the Defense Production Act for Meat

• What Expert Says On New Canadian Privacy Law

• Firefox Update Offers Always-on HTTPS – Response From Industry Expert.

• A New Data Reveals Phishing Related To Amazon Is Up 106% Vs. Last Year – Expert Reaction

• Experts On Report: HMRC Reports 75% Surge In Email Attacks During Covid-19 Outbreak

• (adsbygoogle = window.adsbygoogle || []).push({});

• Expert Advice In Reference Of Chaes Malware Strikes MercadoLivre

• Phishing attacks set to spike ahead of Black Friday

• The US Senate has passed a bill to secure internet devices

• Major global hack found to be state-funded by China

• Cisco Webex flaw leaves meetings open to snooping

• People who have WOWED us over 25 years

• A perspective on security threats and trends, from inception to impact

• The effectiveness of vulnerability disclosure and exploit development

• Group-IB launches Fraud Hunting Platform, a digital identity protection and fraud prevention solution

• Google forces devs to reveal Chrome extensions’ data use, privacy practices

• Cisco Webex vulnerabilities may enable attackers to covertly join meetings

• Complete Our Survey and Redeem an Extended 60-Day Trial of Thor Foresight Enterprise [EXTENDED]

• IAM-Driven Biometrics: The Security Issues with Biometric Identity and Access Management (IAM)

• Cit0day (unverified) – 226,883,414 breached accounts

• Google Chromebooks & Duo — Powering Remote Workforce Security

• macOS Leaks Application Usage, Forces Apple to Make Hard Decisions

• Find Out How Ad Trackers Follow You On the Web With EFF’s “Cover Your Tracks” Tool

• Introducing Cover Your Tracks!

• Presidential transition is rocky as the Trump administration resists President-elect Joe Biden

• Gartner names Microsoft a Leader in the 2020 Magic Quadrant for Cloud Access Security Brokers

• Cyberattacks targeting health care must stop

• Modernize secure access for your on-premises resources with Zero Trust

• Chris Krebs, director of Cybersecurity and Infrastructure Security Agency, fired by President

• IoT forecast: Running antivirus on your smart device?

• Running code in the context of iOS Kernel: Part I + LPE POC on iOS 13.7

• Heads up: A new strain of card-skimming Grelos malware is on the loose

• China-linked hacking gang ‘APT10’ named as probable actor behind extended attacks on Japanese companies

• Compsci guru wants ‘right to be forgotten’ for old email, urges Google and friends to expire, reveal crypto-keys

• Cyberup campaign: 80% of infosec pros fear they might fall foul of UK’s outdated Computer Misuse Act

• AWS includes open-source Suricata for stateful inspection with Network Firewall service

• #ISC2Congress: Recruiter: COVID Had a Minimal Impact on the Cybersecurity Job Market

• Until Further Notice: #ISC2Congress Keynote Prescribes Adaptive Recovery and Resilience in Cybersecurity to Deal With Ongoing Pandemic

• #ISC2CONGRESS: Post-Incident Reviews As Prevention

• The Center wants to send you to college. Interested?

• #ISC2CONGRESS ‘We Got This:’ Adaptability Is Nothing New to Cybersecurity

• Penetration testing

• There is a long history of cybersecurity issues in the automotive history

• Looking for adding new detection technologies in your security products?

• (adsbygoogle = window.adsbygoogle || []).push({});

Generated on 2020-11-20 23:55:13.904607

The post IT Security News Daily Summary 2020-11-20 first appeared on IT Security News.