IT Security News Daily Summary 2020-11-18

• Want to add antivirus to your existing portfolio?

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• Addressing the Impact of the Global Cybersecurity Skills Gap

• Ransomware Operators Partner With Hackers to Attack High profile Organizations

• New Zealand Simplifies Privacy with a Data-Breach Determination Tool

• Police Cameras are Providing Facial Recognition Tracking to Criminals in Moscow

• Future of Offensive Attack Simulation: Strategies, Tools & Techniques

• Hackers Steal 46 Million Animal Jam Account Records, Dating Back 10 Years

• Hang up the Phone: MFA’s Insecure Reliance on SMS

• When Security Controls Lead to Security Issues, (Wed, Nov 18th)

• Deals: Woot Discounts AirPods Pro to $189.99 ($59 Off)

• Apple’s MagSafe Duo Charger Unable to Charge iPhones at Full 15-Watt Power

• How do I select a security assessment solution for my business?

• No, the creator of cURL didn’t morph into Elon Musk and give away Bitcoins. But his hijacked Twitter page tried to

• Manufacturing sector Operational Technology is vulnerable to Cyber Attacks

• Microsoft confirms cyber attacks on COVID-19 Vaccine manufactures across the worldwide

• Most Important Endpoint Security & Threat Intelligence Tools List for Hackers and Security Professionals

• Chaes malware strikes customers of Latin America’s largest e-commerce platform

• Multi-cloud environments leaving businesses at risk

• CISOs say a distributed workforce has critically increased security concerns

• How to Securely Dispose of Your Old Mac

• How to switch search engines on macOS and iOS (and why you should)

• Sophisticated Chinese APT Group Targets Southeast Asian Governments

• 3 Ways to Prepare Your Enterprise’s Data Security for a Future of Advanced Attacks

• CEOs Will Be Personally Liable for Cyber-Physical Security Incidents by 2024

• ISC Stormcast For Wednesday, November 18th 2020 https://isc.sans.edu/podcastdetail.html?id=7258, (Wed, Nov 18th)

• Ransomware still the most common cyber threat to SMBs

• Network traffic and consumption trends in 2020

• Firefox support for Flash ends on January 26

• Evasive Maneuvers in Data Stealing Gateways

• D-Link unveils four Wi-Fi 6 access points across its network management solutions

• Sysdig launches zero trust network security for Kubernetes to cut miscrosegmentation time

• Trump fires top DHS cyber official who debunked election misinformation

• Trump fires CISA Director Chris Krebs

• Firing Christopher Krebs Crosses a Line—Even for Trump

• Qualys CloudView app to power Armor Anywhere cloud security posture management capabilities

• Farsight DNSDB and Cortex XSOAR help gain context for all connected DNS-related digital artifacts

• Magnite supports Unified ID 2.0 to create a common transaction fabric for digital advertising

• Trump fires cybersecurity boss Chris Krebs for doing his job: Securing the election and telling the truth about it

• Enhancing Cloud Security Posture for AWS Network Firewall

• Trump fires CISA boss Chris Krebs

• Canada Proposes Major Fines on Firms That Violate Privacy Laws

• Trump Fires Head of DHS Election Security Agency

• Restoring Apple Silicon M1 Macs Leading to macOS Installation Errors

• Developers Now Able to Create Subscription Codes to Lure New and Returning Subscribers

• Google Releasing New Version of Chrome Optimized for Apple Silicon Macs

• PingCAP raises $270M to develop core technologies and advance global expansion of its offerings

• Netskope expands the Netskope NewEdge network with a new data center in Seoul, South Korea

• President Trump fires cybersecurity chief Chris Krebs

• Ransomware attack forces web hosting provider Managed.com to take servers offline

• CyberCX continues aggressive expansion with Queensland operations launch

• Nearly Two Dozen AWS APIs Are Vulnerable to Abuse

• Forget Imposters. Among Us Is a Playground for Hackers

• Apple Releases Second Betas of iOS 14.3 and iPadOS 14.3 to Developers and Public Beta Testers

• ​Artmotion​ invests in Citadelo​ to help enterprises secure their technology infrastructure

• Israeli spyware maker NSO channels Hollywood spy thrillers in appeal for legal immunity in WhatsApp battle

• House lawmaker stumps for 5-year term for CISA’s director

• OPM aide tapped as next federal CIO

• Multiple Industrial Control System Vendors Warn of Critical Bugs

• EFF, Security Experts Condemn Politicization of Election Security

• Apple Releases Second Betas of iOS 14.3 and iPadOS 14.3 to Developers

• The Remote Access Guide 2.0 — A Reality Check

• IT Security News Daily Summary 2020-11-17

• Microsoft Defender for Linux adds new security feature

• ThreatList: Pharma Mobile Phishing Attacks Turn to Malware

• Defining Security Policies to Manage Remote Insider Threats

• Google Authenticator: How to move from one iPhone or Android device to another

• 6 steps to prioritize IoT gateway security

• Vulnerability Prioritization Tops Security Pros’ Challenges

• Security + Changes!

• Top 7 Use Cases for Digital Risk Protection

• Expert publicly discloses PoC code for critical RCE issues in Cisco Security Manager

• Happy birthday, Security Affairs celebrates its ninth Anniversary today

• Twitter Launches Ephemeral Tweets Called ‘Fleets’ for All Users

• Want to Encrypt All The Things? Firefox has you covered with HTTPS-Only Mode!

• NOAA looks to modernize with EIS

• NAPA working group floats proposal to roll back Trump’s workforce orders

• Verizon Releases First Cyber-Espionage Report

• Phishing Campaigns Evolving Rapidly; Using Innovative Tactics to Avoid Detection

• 1Password Updated With macOS Big Sur Optimizations and Unlocking With Apple Watch

• Hands-On With the New HomePod Mini

• Leaked database exposed login data of 100k hacked Facebook accounts

• V8 Array Overflow Exploitation: 2019 KCTF Problem 5

• Chrome 87 brings tab throttling, Occlusion Tracking on Windows, back/forward cache on Android

• COVID-19 Antigen Firm Hit by Malware Attack

• The team behind the Essential PH-1 is back, and privacy is their focus

• New Zoom Features Tackle Meeting Disruptions

• Explore the benefits of Azure AD vs. on-prem AD

• Druva Acquires sfApex

• Cybercrime to Drain $44bn from Russian Economy in 2020

• To Pay or Not to Pay: Responding to Ransomware From a Lawyer’s Perspective

• Researchers Scan for Supply-Side Threats in Open Source

• The Joy of Tech® ‘Social Media Pitch’

• DEF CON 28 Safe Mode Voting Village Village – Kylee Zabel’s ‘Washington State’s Secretary of State Kim Wyman On Voting Security’

• You call that DevSecOps? Why your DevSecOps practice may be falling short

• Latest Version of Google Chrome for macOS Big Sur Adds Updated Icon and Other New Features

• Apple CarPlay Gains More EV Charging Info Thanks to Integration With ChargePoint

• The President’s Daily Brief and Presidents-Elect: A Primer

• CipherCloud Chronicles #7: Spot Your Insider Threats

• Microsoft brings Trusted Platform Module functionality directly to CPUs under securo-silicon architecture Pluton

• (adsbygoogle = window.adsbygoogle || []).push({});

• Americold Hit With Cyber Attack

• Sucuri Name Being Used by E-Skimmer to Avoid Detection

• New Zoom Feature Can Alert Room Owners of Possible “Zoombombing” Disruptions

• Exposed Database Reveals Compromised Facebook Accounts

• Top 10 Internet Safety Rules to Live By

• How To Keep Your Cryptocurrency Safe And Secure

• A Look into the TLDs of the Most Abused Newly Registered Domains

• Russia Denies Microsoft Claims of Healthcare Cyber Attacks

• Does Protection Help As Much As We Think In Security?

• Nibiru ransomware variant decryptor

• DEF CON 28 Safe Mode Voting Village Village – Susan Greenhalgh’s ‘Remote Online Balloting Delivery’

• Apple Silicon M1 Compiles Code as Fast as 2019 Mac Pro and With Minimal Battery Life Impact

• Apple Seeds First Beta of Upcoming macOS Big Sur 11.1 Update to Developers

• Watch the M1 Apple Silicon MacBook Air Blaze Through Opening Every Default App

• Key layers for developing a Smarter SOC with CyberProof-managed Microsoft Azure security services

• A visit to a crafted webpage would have been enough for a bad guy to munch all your Firefox for Android cookies

• Over 80% companies re-structured their cybersecurity infrastructure in 2020

• Majority of APAC firms pay up in ransomware attacks

• Chrome 87 released with fix for NAT Slipstream attacks, broader FTP deprecation

• Zoom Takes on Zoom-Bombers Following FTC Settlement

• Jupyter Trojan Steals Chrome Firefox Data and Opens Backdoor

• Chart: Undisputed Increase in Paid Claims

• RTRO Camera for iOS Gains New Real-Time Instant Film Feature

• Menlo Security and Smartworld announce partnership in Middle East

• Key layers for developing a smarter SOC with CyberProof-managed Microsoft Azure security services

• WebNavigator Chromium browser published by search hijackers

• #ISC2CONGRESS – Tuesday Keynote: Protecting Yourself During the Pandemic

• Cybersecurity Awareness Training

• Cybersecurity Awareness Training

• Quick Hits

• Linux Foundation: We’ll host Mozilla’s Rust programming language-based Servo web engine

• #ISSE2020: ‘Real’ Digital Identity Can Exist with New Technology

• #ISC2Congress: The #COVID19 Cyber-Threat Landscape for Businesses

• Security Risks Discovered in Tesla Backup Gateway

• Cisco Releases Security Updates for Security Manager

• Zero Trust for Workloads: Knowledge is Key

• PCI Pal® collaborates with Oracle to offer enhanced payment security to its contact centre customers

• Secure Your Cloud Native Applications and DevOps Pipeline in Six Steps

• Chinese APT FunnyDream targets a South East Asian government

• DisplayMate Says iPhone 12 Pro Max Has Best Smartphone Display It’s Ever Tested

• $6.6 Million Worth of Apple Products Stolen on M1 Highway in the UK

• ‘Build’ or ‘Buy’ your own antivirus product

• Twitter appoints hacker Mudge as Head of Security

• TicketMaster Slapped With $1.65 Million Fine Over 2018 Data Breach

• Introducing Rancher on NetApp HCI: Hybrid cloud multicluster Kubernetes management with push-button ease

• Ask Umi the IT dog: One system that does it all

• Twitter Launches Disappearing ‘Fleets’ Globally

• Capcom ransomware attack: Gaming details leaked; no ransom paid

• Cisco Patches Critical Flaw After PoC Exploit Code Release

• Microsoft Unveils ‘Pluton’ Security Processor for PCs

• Hundreds of Tesla Powerwall Gateways Potentially Exposed to Hacker Attacks

• An Inside Look at an Account Takeover

• How The Stadtwerke Klagenfurt Group Reduces Risk to Critical Infrastructure

• Microsoft Teams for macOS Local Privilege Escalation

• After Trump Tweets Defcon Hacking Video, Voting Security Experts Call BS

• Mudge Has Been Named Twitter’s Security Chief

• Firefox 83 Released With HTTPS-Only Mode

• Researchers Warn Of Risks With Tesla Backup Gateway

• Apple-Owned Shazam App Surpasses 200 Million Monthly Active Users Worldwide

• Beats and AMBUSH Team Up on New Glow-in-the-Dark Powerbeats

• Apple Silicon Mac Reviews: M1 Chip Delivers Exceptional Performance, Thermals, and Battery Life

• You Can Now Apply for Apple Card on the Web

• Hackers Pose As WHO Officials To Attack COVID-19 Vaccines

• Experts Reacted On Lazarus Malware Strikes South Korean Supply Chains

• Experts Reacted On News That Micropayments Company Coil Exposed Hundreds Of Customer Email Addresses

• BrandPost: Cloud Security Topics: Using Network Threat Protection to Decrease Vulnerability

• Twitter Appoints Famed Hacker As Security Head

• SpaceX, NASA: Four Astronauts Arrived Safely At ISS

• Fast and Secure Connectivity from Anywhere, Designed for Government

• Researchers warn of internet security risks connected to Tesla Backup Gateway

• Windows 10: Microsoft reveals Pluton security chip – ‘Expect Patch Tuesday-type updates’

• FireEye Predicts Ransomware Will Evolve and Expand in 2021

• Be Very Sparing in Allowing Site Notifications

• Employees Have Access to an Average of 10 Million Files

• Cyber Attacks in India At A Steady Rise as Per India’s Cybersecurity Chief

• Ransomware Operator Promotes Distributed Storage for Stolen Data

• Unixfreaxjp at #R2CON2020 presented shellcode basics for radare2

• Water Wars: Shadowboxing in Taiwan and the Senkakus

• Podcast Episode: Fixing a Digital Loophole in the Fourth Amendment

• Navigating the K8s journey…second star to the right, and straight on ‘til morning…

• Cato Networks raises $130 million as demand for remote workforce security soars

• Firefox 83 arrives with HTTPS-Only Mode and faster performance

• Firefox 83 released with ‘HTTPS-Only Mode’ that only loads HTTPS sites

• Some Apple Apps on macOS Big Sur Bypass Content Filters, VPNs

• Legendary hacker and L0pht member Peiter Zatko joins Twitter as security chief

• Cisco Patches Publicly Disclosed Vulnerabilities in Security Manager

• #ISC2Congress: Modern Security Pros Are Much More than Technologists, Says Bruce Schneier

• #ISSE2020: Look to Decentralized (Rather than Legacy) Identity Approvals

• What’s the deal with security product testing anyway?

• Microsoft’s Making a Secure PC Chip—With Intel and AMD’s Help

• Why Your OT/IoT Network Needs “Always On” Security and Visibility

• Belkin Announces Boost Charge TrueFreedom Pro Wireless Charger and Boost Charge UV Sanitizer

• Watch: Apple Silicon Mac Reviews and Unboxing Videos

• The Remote Access Guide 3.0 — A Reality Check

• Meet the Microsoft Pluton processor – The security chip designed for the future of Windows PCs

• Huawei Sells Honor Smartphone Unit To Chinese Consortium

• Zoom Releases New Security Features to Counter Zoombombing

• Peiter ‘Mudge’ Zatko Named Head of Security at Twitter

• Donald Trump Could Still Launch Nuclear Weapons at Any Time

• The U.S. Government’s Response to Election-Related Cyber Threats

• (adsbygoogle = window.adsbygoogle || []).push({});

• 246869 Windows systems are still vulnerable to the BlueKeep flaw

• From Sam Morse To John Postel, What Did We Learn? Apparently Nothing!

• Experts Insight On Jupyter Trojan – Newly Discovered Malware Stealthily Steals Usernames And Passwords

• What is The Clean Network?

• 9 types of malware and how to recognize them

• REvil ransomware explained: A widespread extortion operation

• Apple Hits Back At iPhone Tracking Complaints By Privacy Group

• New TroubleGrabber Malware Steals Credentials and System Information

• FMC raises $20 million to mass-produce ferroelectric computer memory

• Cisco reveals this critical bug in Cisco Security Manager after exploits are posted – patch now

• Cryptocurrency platform dangles ‘bug bounty’ carrot to hacker who stole $2 million

• Over 80,000 ID Cards and Fingerprint Scans Exposed in Cloud Leak

• Google Maps Gains Real-Time ‘Crowdedness’ Transit Data, Live Food Delivery Status, and More

• COVID-19 vaccine research firms targeted by Russian and North Korean hackers

• US military mining data from Muslim prayer app

• Channel News: Corelight partners with Redington Group to bring powerful open NDR solutions to businesses in the Middle East and Africa

• Hacker ‘Mudge’ to head up Twitter’s security

• Critical vulnerabilities in Cisco Security Manager fixed, researcher discloses PoCs

• 16 hardware and software platforms hacked in minutes. A contest or business reality?

• Phishing emails double in November in run-up to Black Friday and Cyber Monday

• FCW Insider: Nov. 17

• UK Firms Least Likely to Pay Ransom Globally

• First M1 Apple Silicon Macs Now Available for In-Store Pickup Across Europe, Asia, and Australia

• Apple Celebrates 40 Years of Community At Its Cork Campus in Ireland

• How to speed up malware analysis

• Avast Chief Privacy Officer Q&A | Avast

• Avast Secure Browser For iOS | Avast

• Putting Privacy Values Into Practice | Avast

• Capcom Confirms Hackers Stole Data in Recent Attack

• Capcom Ransomware Breach May Have Hit 350,000

• Chinese APT Hackers Target Southeast Asian Government Institutions

• VoltPillager: Hardware-based fault injection attacks against Intel SGX enclaves

• Singapore to pilot common data platform in bid to plug supply chain gaps

• More than 200 systems infected by new Chinese APT ‘FunnyDream’

• Implementing ZTNA: 4 Reasons Why Mobile is a Good Place to Start

• “At-Risk Meeting Notifier Zoom” feature alerts meeting organizers of Zoombombing risk

• Interview with experts who lead the project ONTOCHAIN

• Banks offered the Central Bank of Russia to create a centralized mechanism to combat fraudsters

• Researcher Discloses Critical RCE Flaws In Cisco Security Manager

• 4 Things Every CISO Must Include in Their Board Presentation

• Adobe Photoshop for Apple Silicon is Now Available in Beta

• Qualys provides out-of-the-box support for Google Cloud Artifact Registry

• Netiquette Rules: Definition and 10 Basic Rules To Dramatically Improve your Safety [Updated 2020]

• End the year as you mean to go on… with world-class cyber-security training

• Apple’s privacy pledges: We sent dev checks over plain HTTP, logged IP addresses. We bypass firewall apps

• Aussie BitConnect promoter charged over his involvement with alleged crypto scam

• More than 245,000 Windows systems still remain vulnerable to BlueKeep RDP bug

• Why biometrics will not fix all your authentication woes

• Zoom upgrades its Cybersecurity features to block Zoombombers

• Nearly 350,000 Capcom customer information stolen in Ransomware Attack

• ModPipe Malware Steals Sensitive Information from Oracle POS Software used by Hundreds of Thousands of Hotels

• Facebook and Google refuse 1 in 5 Australian law enforcement data access requests

• Accept your IT security limits and call in the experts

• 2021 predictions for the Everywhere Enterprise

• Splunk Appoints Four-Star U.S. Army General Dennis Via to its Board of Directors

• CynergisTek Reports Third Quarter 2020 Financial Results

• McAfee Announces MVISION Marketplace and MVISION API to Enable Organizations to Quickly and Easily Adapt to Security Gaps

• SecTor 2020, Canada’s Biggest Cybersecurity Event: Day Two

• Service NSW expecting cyber attack to set it back AU$7m in legal and investigation costs

• ISC Stormcast For Tuesday, November 17th 2020 https://isc.sans.edu/podcastdetail.html?id=7256, (Tue, Nov 17th)

• Apple Silicon M1 MacBook Air SSD Really Is Twice as Fast as Previous Model

• Risk professionals expect a dynamic risk environment in 2021

• Explosion in digital commerce pushed fraud incentive levels sky-high

• Micropayments company Coil distributes new privacy policy with email that puts users’ addresses in the ‘To:’ field

• How to manage iTunes Store and App Store Subscriptions

• How to Enter and Exit Full Screen Mode and Use Split Screen in macOS

• Lazarus supply‑chain attack in South Korea

• LexisNexis Emailage: Reimagining fraud detection by using email intelligence as a core risk identifier

• COVID-19-Related Data Breach Affects Thousands in Delaware

• Masergy boosts its SD-WAN Secure solution with SASE capabilities

• VMware launches Modern Network framework to help businesses adapt to a new normal

• Google ties ‘Smart’ features up in a bow for Gmail

• Mastercard adds A2A payments functionality to Mastercard Track Business Payment Service

• Zyxel adds enhancements and two new firewalls to its USG FLEX family of mid-range firewalls for SMBs

• TrilioVault for Kubernetes 2.0: Managing data protection and migration across clouds

• New acquisition provides security from hackers’ view, Palo Alto Networks CEO says

• How to secure your Zoom account with two-factor authentication

• Codefresh GitOps 2.0: Helping companies confidently ship code faster

• Avanan announces availability of its security application for Microsoft Teams

• Palo Alto Networks CEO talks Q1 earnings, fundamental transformations in cybersecurity

• Palo Alto Networks CEO talks $800 million Expanse acquisition

• Why Creating A Cybersecurity Framework Is Essential

• VPNs for Secure Remote Work: The Do’s and Don’ts

• Thrift Board taps Accenture for consolidated records contract

• GSA explains lowered DEOS price tag

• Tanium and IBM join forces to create a security and compliance monitoring solution for hybrid cloud

• (adsbygoogle = window.adsbygoogle || []).push({});

Generated on 2020-11-18 23:55:10.085700

The post IT Security News Daily Summary 2020-11-18 first appeared on IT Security News.