IT Security News Weekly Summary – Week 47

• IT Security News Daily Summary 2020-11-22

• DEF CON 28 Safe Mode Voting Village Village -Jody Westby’s ‘Policy Approach To Resolving Cybersecurity Problems’

• DEF CON 28 Safe Mode Voting Village Village – Stark Xie’s ‘Testing Can’t Tell If Ballot Devices Alter Elections’

• Robert M. Lee’s & Jeff Haas’ Little Bobby Comics – ‘WEEK 304’

• Threat actor shared a list of 49,577 IPs vulnerable Fortinet VPNs

• Rumor Claims iOS 15 to Drop Support for iPhone 6s and Original iPhone SE

• No Shortcuts to Negotiating With al-Shabaab

• A biochemical random number

• Manchester United Hit By a Cyber Attack on their Systems

• WhatsApp’s ‘disappearing messages’ now available for Indian users; here’s how you can enable disappearing messages on your WhatsApp

• Google Is Testing End-to-End Encryption in Android Messages

• Hundreds of female sports stars and celebrities have their naked photos and videos leaked online

• NIST Updates Control Baselines, Integrates Privacy

• Securing Beats at Scale

• Security Affairs newsletter Round 290

• Romanians arrested for running underground malware services

• A cyberattack crippled the IT infrastructure of the City of Saint John

• Universal Electronics Offers Alternative Apple TV Remote to Cable Companies

• iFixit Shares iPhone 12 Pro Max Teardown Revealing L-Shaped Battery and Bigger Camera Module

• Week in review: Kali Linux 2020.4, AWS Network Firewall, speeding up malware analysis

• IT Security News Daily Summary 2020-11-21

• Liquid Cryptocurrency Exchange Suffered A Security Breach

• Certified Information Systems Auditor (CISA)

• Manchester United football club discloses security breach

• DEF CON 28 Safe Mode Voting Village Village – Michael A. Specter’s ‘The Ballot Is Busted Before The Blockchain’

• XKCD ‘Viral Quiz Identity Theft’

• DEF CON 28 Safe Mode Voting Village Village – Forrest Senti’s & Mattie Gullixson’s ‘Secure The Vote Standards’

• Malware service operators arrested; offered antivirus bypassing tools

• GoDaddy Employees Used in Attacks on Multiple Cryptocurrency Services

• Black Friday 2020: Best Apple Deals to Plan For

• Network Perimeter Vulnerabilities: The Cyber-Threat Hiding in Plain Sight

• Dutch tech reporter gatecrashes EU defence secret video conference

• ‘Build’ or ‘Buy’ your own antivirus product

• Manchester United working with infosec experts to ‘minimize ongoing IT disruption’ caused by ‘cyber attack’

• Secret Service Investigates 700 Cases of Covid Relief Fraud

• Experts warn of mass-scanning for ENV files left unsecured online

• UK’s National Cyber Force Comes Out Of The Shadows

• Top Stories: Apple M1 Macs and HomePod Mini Launch, iOS 14.2.1 Bug Fixes for iPhone 12, App Store Fee Changes

• What Is E-PDR (Endpoint Prevention, Detection and Response)?

• Capcom Ransomware Attack Update: Vendors Confirmed Compromise Of Data

• Manchester United hit by ‘sophisticated’ cyber attack

• VMware privilege escalation vulnerabilities (CVE-2020-4004, CVE-2020-4005) – https://www.vmware.com/security/advisories/VMSA-2020-0026.html, (Sat, Nov 21st)

• Windows Migration Assistant Updated for macOS Big Sur

• UK reveals new National Cyber Force to improve offensive cyber capabilities

• Botnets have been silently mass-scanning the internet for unsecured ENV files

• 5 takeaways from the 2020 (ISC)2 Cybersecurity Workforce Study

• Week in security with Tony Anscombe

• Updated Apache Drill R JDBC Interface Package {sergeant.caffeinated} With {dbplyr} 2.x Compatibility

• 10 Best WiFi Hacking Apps for Android – 2020 Edition

• Asylum Ruling Halts Restrictions in New Rule

• Quantum computing: A cheat sheet

• Introducing Signal Sciences Terraform Provider

• What Exactly is CUI? (and How to Manage It)

• 2020-11-20 – TA551 (Shathak) Word docs with Japanese template push IcedID

• VA union claims victory in termination case

• Peters calls on White House to protect health care systems from cyber threats

• Why even the best free VPNs are not a risk worth taking

• Threat Roundup for November 13 to November 20

• IT Security News Daily Summary 2020-11-20

• Tech experts call on feds to coordinate benefits solutions

• AI shows where cities need trees the most

• Can private data as a service unlock government data sharing?

• Long-awaited IoT security bill heads to president’s desk

• Long-term telework can expand recruitment pool

• Data protection impact assessment tips and templates

• Facebook Messenger Bug Could Have Let Hackers Listen To Your Conversations

• VMware addresses flaws exploited at recent Tianfu Cup

• Astropad and Luna Display Updated With M1 Mac Support

• In Praise of Chris Krebs

• 2020 Vision: Adapting Security for Office 365 Collaboration

• IBM Power9 processors beset by Cardiac Osprey data-leaking flaw as Spectre still haunts speculative chips

• Election disinformation fears came true for state officials

• Good Heavens! 10M Impacted in Pray.com Data Exposure

• VMware Fixes Critical Flaw in ESXi Hypervisor

• Google Services Weaponized to Bypass Security in Phishing, BEC Campaigns

• How Industrial IoT Security Can Catch Up With OT/IT Convergence

• Facebook Messenger Flaw Enabled Spying on Android Callees

• Deals: Nomad’s Early Black Friday Sale Takes 30% Off Sitewide Through December 2

• Leather Sleeve for iPhone 12 Models Now Available From Apple

• Once Again, Facebook Is Using Privacy As A Sword To Kill Independent Innovation

• Common Malware Families That Lead to Ransomware

• CBP wants to expand facial recognition

• Study finds 31% of third-party vendors could cause significant damage to organizations if breached

• What are the biggest hardware security threats?

• Security Pros Push for More Pervasive Threat Modeling

• DEF CON 28 Safe Mode Voting Village Village – United States Election Assistance Commission Chairman Benjamin Hovland’s Remarks

• MacRumors Giveaway: Win 30W and 65W USB-C Power Adapters From RAVPower

• Chrome for M1 Macs Runs Up to 80% Faster Than Rosetta 2 Version

• Craig Federighi: Native Windows on M1 Macs is ‘Really up to Microsoft’

• Critical Vulnerabilities in VMWare ESXi, Workstation and Fusion Patched

• Mount Locker Ransomware is Now Targeting TurboTax Returns

• Drupal sites vulnerable to double-extension attacks

• Facebook Paid Out $11.7 Million in Bug Bounties Since 2011

• Trend Micro Releases Free Tool to Tackle Misinformation

• Green Beret Passed Secrets to Russia

• Sector financiero, ciberseguridad y gestión de operaciones

• Anker’s eufyCam 2 Pro Camera With HomeKit Secure Video Now Available From Apple

• End to end encryption? In Android’s default messaging app? Don’t worry, nobody else noticed either

• Facebook Messenger bug allowed callers to listen unattended calls

• Database Authentication + Spring Security SAML

• (adsbygoogle = window.adsbygoogle || []).push({});

• Government-funded scientists laid the groundwork for billion-dollar vaccines

• New Grelos Skimmer Variants Siphon Credit Card Data

• Data Breach at Iowa Hospital

• Managed.com Hosting Provider Hit by REvil Ransomware, $500K Ransom Demand

• A quick look into malwares that installs ransomware : Remove them form your system immediately

• Japanese Orgs Hacked ‘by China’ in Long, Widespread Campaign

• October Mumbai power outage may have been caused by a cyber attack

• How to Apply Elite Intelligence to AWS Security Services

• Apple Lists M1-Based Mac Mini Logic Boards With 10 Gigabit Ethernet in Internal Parts Ordering System

• UK Government, Facebook, Google, Twitter To Tackle Covid Misinformation

• Major Power Outage in India Possibly Caused by Hackers: Reports

• Facebook patches Messenger audio snooping bug – update now!

• FireEye Acquires Respond Software

• Hao Projection: Chinese-Drawn World Map

• Apple Software Chief Craig Federighi Defends App Tracking Transparency Feature

• Europe Has No Strategy on Cyber Sanctions

• It’s Only a Matter of Time Before China Detains U.S. Executives

• Demystifying two common misconceptions with e-commerce security

• Black Friday 2020: How to shop safely online

• Egregor Ransomware locks down retail giant billing machines

• Facebook Messenger Bug Allows Spying on Android Users

• It’s time for banks to rethink how they secure customer information

• Implementing an SDP architecture for added network security

• Convicted SIM Swapper Gets 3 Years in Jail

• #ISSE2020: Focus on 2020’s Crypto Successes Rather than Efforts to Break it

• Bug in Facebook Messenger on Android Let Attackers Start Calls and Listen to Audio

• How Cyberattacks Work

• Within the margin of error

• Five worthy reads: The rise in credential stuffing attacks

• Mitsubishi Electric Corp. was hit by a new cyberattack

• Robot Vacuums Suck Up Sensitive Audio In LidarPhone Hack

• Tech Giants Align To Fight Covid Vaccine Conspiracies

• Dutch Police Investigate Trump Twitter Hack

• Two Romanians Arrested For Running Three Malware Services

• OWC’s Upcoming Thunderbolt Hub Adds More Thunderbolt 3 Ports to Your Mac

• US Regulators Begin Consultation On Self-Driving Car Safety

• Pray.com exposed data of millions after database mess up

• Introducing another free CA as an alternative to Let’s Encrypt

• Security Culture: Putting Digital Literacy First in Your Company

• Microsoft: These are the new privacy steps we’re taking to protect your data

• Two Romanians arrested for running three malware services

• Industry Reactions to Trump Firing CISA Director Chris Krebs: Feedback Friday

• Mercy Iowa City Discloses Highly Sensitive Data Breach Impacting Over 60,000 Iowans

• Cloud Security Alliance, Tiro Security Partner to Offer Complimentary Cloud Certification Exam to Cybersecurity Women, Minorities in nextCISO Program

• Cloud Security Alliance Opens Registration for CloudBytes Connect: From the SOC to the Boardroom

• Apple Reiterates ‘Enormous Potential’ of AR, Hints at ‘Devices That May Exist Tomorrow’

• Xbox Series X Controller Support Coming to Apple Devices

• IAM-Driven Biometrics: The Security Issues with Biometric Identity and Access Management

• Google is adding end-to-end encryption to its Android Messages app

• GO SMS Pro Exposes Messages of Millions of Users

• Hacker Closing Out Prison Sentence in Chicago Halfway House

• Industry Reactions to Trump Firing CISA Director: Feedback Friday

• CybExer Tasked With Enhancing Luxembourg’s Cyber-Defense Capabilities

• Ransomware Attack Takes Down Massive Food-Supply Chain Providing Distribution of Temperature-Sensitive COVID-19 Vaccines

• $799 M1 MacBook Air With 128GB Storage for Education Institutions Spotted Online

• Deals: Get Up to $100 Off Apple’s 2020 iPad Pro Lineup

• 10 Cross Platforms for App Development

• New Jupyter Malware Is A Blend of Infostealer And Backdoor

• Web Hosting Provider Managed.com Suffered REvil Ransomware Attack

• World’s Worse Passwords Revealed By NordPass

• Artificial intelligence could be used to hack connected cars, drones warn security experts

• Google is adding end-to-end encryption to Android Messages app

• New Mount Locker Ransomware Version Targeting TurboTax Files

• VMware Patches Vulnerabilities Exploited at Chinese Hacking Contest

• Faith App Pray.com Exposes Millions Through Cloud Misconfig

• Symantec Reports on Cicada APT Attacks against Japan

• First HomePod Jailbreak Stokes Speculation About Smart Speaker’s Hacking Potential

• REvil claim attack on televangelist Kenneth Copeland

• Android users could spy on others using the Facebook Messenger

• Nozomi Networks partners with Honeywell to strengthen OT cybersecurity

• Robot vacuums can allow bad actors into your home

• Security Recruiter Directory

• 10 biggest cybersecurity M&A deals in 2020

• Facebook Pays $60,000 for Vulnerability in Messenger for Android

• Microsoft Announces Pluton Processor for Better Hardware Security

• Critical Webex Bugs Let ‘Ghost’ Users Spy on Meetings

• Winners announced of Europol’s 2020 Photo Competition

• Over 2 000 participants from 132 countries logged on for the 4th Global Conference on Criminal Finances and Cryptocurrencies

• A flaw in Facebook Messenger could have allowed spying on users

• QakBot Big Game Hunting continues: the operators drop ProLock ransomware for Egregor

• Today at Apple Launches ‘Make Your Holiday’ Project Book and Virtual Creative Sessions

• Experts On New Grelos Skimmer Variant Reveals Overlap in Magecart Activities

• 2020 Black Friday/Cyber Monday – Likely Magecart Attack Increase Due To Plug-in Vulns – Experts Perspective

• VMware patches serious vulnerabilities in ESXi hypervisor, SD-WAN Orchestrator

• 1-15 October 2020 Cyber Attacks Timeline

• NCSC’s London HQ was chosen because GCHQ spies panicked at the prospect of grubby Shoreditch offices

• Check Point Software Partners with (ISC)² to Further Develop C level executives Key Cyber Security Skills

• FCW Insider: Nov. 20

• US Senate Approves New Deepfake Bill

• IT threat evolution Q3 2020 Mobile statistics

• IT threat evolution Q3 2020. Non-mobile statistics

• Apps for Customizing iOS 14 Home Screens Installed on 15% of US iPhones

• Why test data does not need to be protected

• Kali Linux 2020.4 Released with New Tools, ZSH Shell & Updates for NetHunter

• Apple to Press Ahead on Mobile Privacy, Despite Facebook Protests

• Black Friday Alert as E-Commerce Attacks Surge in 2020

• Twitter Names Hacker Mudge Head of Security | Avast

• IT threat evolution Q3 2020

• UK reveals new ‘National Cyber Force’, announces Space Command and mysterious AI agency

• Romanian duo arrested for running malware encryption service to bypass antivirus software

• (adsbygoogle = window.adsbygoogle || []).push({});

• Facebook Messenger Bug Lets Hackers Listen to You Before You Pick Up the Call

• Maintaining Governance and Security in Multi-Tool Environments

• Malicious Python Code and LittleSnitch Detection, (Fri, Nov 20th)

• Unprotected S3 Buckets Results In Over 80,000 ID Cards And Fingerprint Scans

• Experts Reacted On Android Chat App With 100 Million Installs Exposes Private Messages

• Holidays Are Coming – the State of Security for E-commerce in 2020

• Looking for adding new detection technologies in your security products?

• Cyber Security Jobs with Growing Demand in India – Here an Exclusive Cyber Security Job Portal

• Singapore investigating claims Muslim app developer sold user data to US military

• Weekly Update 218

• Cyber Security Predictions 2021: Experts’ Responses

• You can protect the company from hackers, but can you protect the company from the CEO?

• UK reveals new ‘National Cyber Force’, announces Space Command and mysterious AI agency

• The malware that usually installs ransomware and you need to remove right away

• New infosec products of the week: November 20, 2020

• Ransomware attacks on one in four SaaS providers

• Verizon Cyber Espionage Report

• Attacks on biotech and pharmaceutical industry escalate

• 56% of organizations faced a ransomware attack, many paid the ransom

• VMware SD-WAN Vulnerabilities Expose Enterprise Networks to Attacks

• Microsoft Boosts Security of 365 Priority Accounts

• The Ministry of Digital Development of the Russian Federation developing monitoring application to combat COVID-19

• OSINT, 3D Modeling, Geolocation & Forensic Architecture: Analysis Of The Beirut Port Explosion

• The Role of Access Control in Information Security

• CVE-2020-27995: Zoho ManageEngine RCE

• Healthcare Orgs: What You Need to Know About TrickBot and Ryuk

• Protecting Against Election Interference in 2024

• Financial services lead when it comes to fixing open source flaws

• Consumer behaviors and cyber risks of holiday shopping in 2020

• VMware reveals critical hypervisor bugs found at Chinese white hat hacking comp. One lets guests run code on hosts

• Holiday Shoppers Beware: Tips on Protecting Brand Owners and Consumers from Domain Security Threats

• Business Email Compromise Attacks: The Big Phishing Scam That’s Easily Missed

• The worst passwords of 2020: Is it time to change yours?

• ISC Stormcast For Friday, November 20th 2020 https://isc.sans.edu/podcastdetail.html?id=7262, (Fri, Nov 20th)

• Open Raven Cloud-Native Data Protection Platform: Automating security and privacy operations

• FireEye Acquires Respond Software, Gets $400 Million Investment Led by Blackstone

• Apple Offers Instructions on What to Do if macOS Big Sur Causes Installation Errors on 2013 and 2014 MacBook Pro

• Entrust CryptoCoE: Enabling enterprises to take command of their crypto instances

• McAfee MVISION CNAPP enhances cloud-native security by integrating with AWS

• Red River delivers simplified WAN management with Managed SD-WAN solution

• DigiCert Enterprise PKI Manager supports security for remote workforces

• In 2016 Australia’s online census failed. Preparations for the 2021 edition have been rated ‘partly effective’

• Telco carrier to tech firm: BT Global Services CEO on reshaping the company

• Aerospike unveils XDR expressions in Aerospike Database 5

• FileCloud 20.2: Protecting, tracking and controlling sensitive documents after distribution

• FireEye surges as investment firm Blackstone takes $400 million investment, board seat

• Iowa Hospital Alerts 60K Individuals Affected by June Data Breach

• Telos Goes Public

• Enzoic partners with OneLogin to eliminate the risk of compromised credentials

• PCI Pal and Oracle collaborate to add security and compliance options for CNP payments

• RepRisk and Apex partner to provide ESG risk data to private markets

• Tufin and AWS Network Firewall deploy network protections for Amazon Virtual Private Clouds

• BrandPost: Discover the Correlation Between Cybersecurity and Positive Business and Security Outcomes

• DOD, Coast Guard resume MHS Genesis deployment

• Cybercriminals Get Creative With Google Services

• ISP Security: Do We Expect Too Much?

• A flaw in GO SMS Pro App allows accessing media messages

• Apple Black Friday 2020: Deals on Macs, iPhones, iPads, and Apple Watches

• iFixit Teardown: M1 MacBook Pro and MacBook Air Internals Nearly Identical to Intel Models

• Watch Apple’s M1 MacBook Pro Obliterate 2020 Intel MacBook Pro in Speed Tests

• Abnormal Security raises $50M to double the size of its machine learning and data science teams

• Druva acquires sfApex to offer data protection with sandbox management and data governance

• Authenticated Resolution and Adaptive Resolution: Security and Navigational Enhancements to the DNS

• IBM CISO Perspective: Zero Trust Changes Security From Something You Do to Something You Have

• VMware Workspace Security: A Major Leap Towards Unified Endpoint Mobility & Security

• Upgraded CDM dashboard to roll out through FY2021

• FIreEye surges as investment firm Blackstone takes $400 million investment, board seat

• Robot Vacuums Suck Up Sensitive Audio in ‘LidarPhone’ Hack

• How phishing attacks are exploiting Google’s own tools and services

• Apple Releases Safari Technology Preview 116 With Bug Fixes and Performance Improvements

• IT Security News Daily Summary 2020-11-19

• How To Prepare Your Mac for macOS Big Sur – Intego Mac Podcast Episode 162

• Lawmakers probe telework’s impact on federal jobs, hiring

• German COVID-19 Contact-Tracing Vulnerability Allowed RCE

• Brave Rewards: How to disable the feature

• White House questions election security; experts do not

• Report: Facebook Did Not Enforce Its Own Rules To Stop Call To Arms Ahead Of Kenosha Shootings

• Go SMS Pro Messaging App Exposed Users’ Private Media Files

• Nation-state actors from Russia, China, Iran, and North Korea target Canada

• The Death of Ayman Al-Zawahri and the Future of Al-Qaida

• Mac and iOS Keychain Tutorial: How Apple’s iCloud Keychain Works

• How to Prepare Your Mac to Upgrade to macOS Big Sur: the Ultimate Guide

• The Netflix streaming model can obviate your employee’s computer security

• Cloud operations are the latest target for ransomware groups

• Cyber threat to Canada from its adversary nations

• Online purchase scams spike since the start of COVID-19, reports BBB

• Ransomware attack on Managed.com disrupts websites across the world

• UK To Create National Cyber Force, Amid £16.5bn Defence Rise

• Facebook Messenger bug could have allowed hackers to spy on users

• Neo-Noir Psychological Thriller ‘Losing Alice’ Launching on Apple TV+ on January 22

• Apple Releases Revised Version of macOS 11.0.1 Big Sur

• Apple and Verizon Debut ‘5G Fleet Swap’ Enterprise iPhone Trade-In Program

• US Senate approves deepfake bill to defend against manipulated media

• REvil Ransomware Hits Managed[.]com

• Liquid Crypto-Exchange Accessed by Unauthorized Party

• New Strain of Skimming Malware Attacking E-Commerce Sites

• Panda Security does it again: 100% detection in AV-C’s Real-World Test

• Brosix – Keep Your Employees Connected With This Secure Messaging App

• Mozilla Has Released Firefox 83 With FreeType Zero-day Fix and HTTPS-Only

• Google Released Chrome 87 With Performance Updates; Disables FTP

• (adsbygoogle = window.adsbygoogle || []).push({});

• What is the dark web? How to access it and what you’ll find

• 7 dumb ways to be a ransomware victim, and how to avoid them

• EU’s DORA regulation explained: New risk management requirements for financial firms

• China’s exclusion from US 5G market likely to continue with Biden administration

• Red Hat and NetApp integrate Kubernetes app-data management for OpenShift and Project Astra customers

• Medical imaging lifecycle management

• Why is similarity so relevant when investigating attacks

• Elon Musk To Overtake Zuckerberg As Third Richest Person

• Apple Pays $113 Million To Settle iPhone Slowdown Probe

• Amazon Sacks Staff At Drone Division – Report

• Russia Readies Law So Moscow Can Block Social Networking Giants

• Fortnite To Return To iPhones Via Cloud Gaming Service

• Vulnerability in Bumble dating app risked data of 100 million users

• How to Optimize Your App Settings for Privacy

• Android messaging app with 100M users found exposing messages

• Microsoft hopes Windows PCs protection with Pluton security chip

• List of 2020’s most used passwords is here and it’s appalling

• Firefox 83.0 Released – Improved Page Load Performance, HTTPS-Only Mode & 0-Day Fix – Update Now!!

• Surprising Differences Between TLS and SSL Protocol

• Chrome 87 Released with Improved Performance and Security Updates

• Multiple Critical Flaws in Cisco Security Manager Let Attackers to Execute Remote Code

• Businesses Need Automated Web Application Security Scanners to Detect Web Vulnerabilities

• Cloud Workload Security: Part 2 – Security Features of AWS

• API Security Weekly: Issue #110

• Locking Down Smart Home Security | Avast

• Privacy In The Age Of Pandemic | Avast

• Turn Off iPhone Location Tracking | Avast

• Application Security Book Review | Avast

• IBM Works With Cisco to Exorcise Ghosts From Webex Meetings

• Ransomware Response: Time is More Than Just Money

• Cybersecurity Framework: How To Create A Resilience Strategy

• Data Destruction: Importance and Best Practices

• Stay Calm: Your Supply Chain Cybersecurity Is Solid

• Defining Cloud Workload Protection

• VMware Carbon Black Announces Splunk Integration to Streamline and Modernize SOC Workflows

• Risk Score 101: What to look for in a Risk Score

• Anti-adversarial machine learning defenses start to take root

• Achieving K8 Security @ The Speed & Scale of DevOps

• Who’s Calling? How to Avoid Being Hooked by Vishing – the New Old-School Phone Scam

• IBM acquires Instana for its AI-powered app performance monitoring

• How The Trevor Project uses AI to help LGBTQ+ youth and train its counselors

• ControlUp raises $27 million to apply AI to remote machine monitoring

• What enterprise CISOs need to know about AI and cybersecurity

• Forter raises $125 million at a $1.3 billion valuation to combat ecommerce fraud with AI

• Army to evaluate facial recognition in day care centers

• DOD fails third audit, but sees progress with cost-savings

• Making software more than an ‘IT thing’

• CMMC countdown is on but are there enough assessors to do the job?

• New Grelos skimmer variant reveals overlap in Magecart group activities, malware infrastructure

• Windows 10 Expert’s Guide: Everything you need to know about BitLocker

• LidarPhone attack converts smart vacuums into microphones

• The UK’s new offensive cyber unit takes on organised crime and hostile states

• Best VPNs in 2020

• Bumble bugs could have exposed personal data of all users

• WebNavigator Browser Released by Well-Known Search Hijackers

• Adventures in MQTT Part II: Identifying MQTT Brokers in the Wild

• Phishers Using Redirector Sites with Custom Subdomains for Evasion

• Egregor Ransomware Attack Hijacks Printers to Spit Out Ransom Notes

• IoT Cybersecurity Improvement Act Passed, Heads to President’s Desk

• Food-Supply Giant Americold Admits Cyberattack

• Code42 Incydr Series: Protect IP with Code42 Incydr

• Tis’ the Season for Online Holiday Shopping; and Phishing

• GO SMS Pro Android App Exposes Private Photos, Videos and Messages

• Consumers share their top frustrations about online retail purchasing

• Linux servers: How to encrypt files with gocryptfs

• How to use Mozilla’s VPN service across mobile and desktop platforms

• Thunderbird: How to use the built-in GPG feature

• How to use the built-in GPG feature for Thunderbird

• Google Announces Major Google Chrome Extensions Privacy Update

• Google Launches Strong Encryption for Android Messages

• Cybersecurity Workforce Study Needs to be Taken with a Pinch of Salt

• E-Commerce Fraud Prevention Firm Forter Raises $125M at $1.3B Valuation

• 5G Security Risk vs. Reward

• Chinese Hackers Target Japanese Organizations in Large-Scale Campaign

• Application, database and data security quiz

• Sophos: Ransomware ‘heavyweights’ demand sky-high payments

• President Trump fires CISA director Christopher Krebs

• Sophos 2021 Threat Report: Navigating cybersecurity in an uncertain world

• S3 Ep7: When ransomware crooks get a big fat zero! [Podcast]

• Trump Fires Security Chief Christopher Krebs

• HMRC Records 73% Growth in Email Phishing Attacks During #COVID19

• Raytheon Employee Jailed for Exporting Missile Data to China

• #DxPsummit: CISOs Discuss Ransomware Strategies for Recovery and Resistance

• Hard Rock Stadium Ups Cybersecurity

• Oregon County Hit by Ransomware Attack

• Facebook Grilled By Lawmakers Over Moderation, Censorship Concerns

• Zoom Releases Security Features to Fend off Zoom Bombers and Disruptive Participants

• Capcom Ransomware Attack Compromised Personal Information of 350,000 Individuals

• DarkSide Ransomware Operators Plan to Open Distributed Storage System for Stolen Files

• Hundreds of Thousands of SMBGhost and BlueKeep Infected Systems Are Still Up and Running

• Experts meet to identify victims of child sexual abuse

• Three victims of child abuse put to safety in France

• New report finds that criminals leverage AI for malicious use – and it’s not just deep fakes

• ESET has revealed a new series of Lazarus attacks

• Factories have become a major target for malware attacks

• New €4.2 Million fund to empower internet innovators to develop blockchain-based solutions

• White House Declares Guidelines to U.S Federal Agencies for AI Applications

• Unpatched Browsers Abound, Study Shows

• 2021 Cybersecurity Spending: How to Maximize Value

• New Proposed DNS Security Features Released

• (adsbygoogle = window.adsbygoogle || []).push({});

• COVID-19: Latest Security News & Commentary

• The Yellow Brick Road to Risk Management

• 6 Tips for a More Cyber-Secure Holiday Season

• Telegram Still Hasn’t Removed an AI Bot That’s Abusing Women

• Ghostery’s Making a Privacy Browser—and Ad-Free Search Engine

• A Facebook Messenger Flaw Could Have Let Hackers Listen In

• Cisco Releases Security Updates for Multiple Products

• Drupal Releases Security Updates

• Google Releases Security Updates for Chrome

• Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

• VMware Releases Security Updates for VMware SD-WAN Orchestrator

• Inside the Cit0Day Breach Collection

• Apple Lets Some of its Big Sur macOS Apps Bypass Firewall and VPNs

• Use This Ultimate Template to Plan and Monitor Your Cybersecurity Budgets

• Researchers Warn of Critical Flaw Affecting Industrial Automation Systems

• Evolution of Emotet: From Banking Trojan to Malware Distributor

• WARNING: Unpatched Bug in GO SMS Pro App Exposes Millions of Media Messages

• Ransomware Groups Break Promises, Leak Data Anyway

• Back from vacation: Analyzing Emotet’s activity in 2020

• ISE 3.0 Dynamic Visibility: Step into zero trust for the workplace

• IT and OT Cybersecurity: United We Stand, Divided We Fall

• DEF CON 28 Safe Mode Voting Village Village – Nimit Sawhney’s ‘Analysis Of Data From Mobile Voting Pilots’

• Digital Defense, Inc. Receives 2020 HIRE Vets Platinum Medallion Award for Second Consecutive Year

• What is a Data Classification Policy and Why it’s Important to Keep it Up to Date

• XKCD ‘Blair Witch’

• DEF CON 28 Safe Mode Voting Village Village – Cordero Delgadillo’s ‘A Lawyer’s Reflections On Elections’

• Criminal Activities in Times of a Global Pandemic

• Cisco fixed flaws in WebEx that allow ghost participants in meetings

• REvil ransomware demands 500K ransom to Managed.com hosting provider

• New Grelos skimmer variant reveals murkiness in tracking Magecart operations

• We infiltrated an IRC botnet. Here’s what we found

• Drupal addressed CVE-2020-13671 Remote Code Execution flaw

• Advanced Threat predictions for 2021

• Michael Ellis as NSA General Counsel

• The US Military Buys Commercial Location Data

• ISC Stormcast For Thursday, November 19th 2020 https://isc.sans.edu/podcastdetail.html?id=7260, (Thu, Nov 19th)

• PowerShell Dropper Delivering Formbook, (Thu, Nov 19th)

• How security and compliance automation can help achieve a more secure hybrid cloud

• A guide to security technologies in Red Hat Enterprise Linux

• Mass Migration of Users to Parler Prompts Concerns Over Security and Disinformation

• Perception Point X-Ray

• Introducing the Industry’s First 5G-Native Security

• Congratulations to Our 2020 Global Partners of the Year!

• The Worst Passwords Of 2020 Are Here And They Are Horrifying

• LAPD Bans Facial Recognition, Citing Privacy Concerns

• Cisco Webex Bugs Allow Attackers To Join Meetings As Ghost Users

• Liquid Crypto Exchange Compromised By Hackers

• Massive, China-State-Funded Hack Hits Companies Around The World, Report Says

• Wireless CarPlay Expands to More New Vehicles Amid Rumors of Portless iPhone Next Year

• Joanna Stern and John Gruber Discuss Apple M1 Transition and ‘Craptastic’ 720p FaceTime Cameras

• Google Bringing Stadia Cloud Gaming Service to iOS Through Web App

• Apple Releases iOS 14.2.1 With Fix for Text Message Bug and iPhone 12 Mini Lock Screen Issues

• Apple Confirms Commitment to App Tracking Transparency in Letter Condemning Facebook’s Data Collection

• Where’s the U.S. Strategy for Counternarcotics in Afghanistan?

• Understanding Trump’s Invocation of the Defense Production Act for Meat

• What Expert Says On New Canadian Privacy Law

• Firefox Update Offers Always-on HTTPS – Response From Industry Expert.

• A New Data Reveals Phishing Related To Amazon Is Up 106% Vs. Last Year – Expert Reaction

• Experts On Report: HMRC Reports 75% Surge In Email Attacks During Covid-19 Outbreak

• Expert Advice In Reference Of Chaes Malware Strikes MercadoLivre

• Phishing attacks set to spike ahead of Black Friday

• The US Senate has passed a bill to secure internet devices

• Major global hack found to be state-funded by China

• Cisco Webex flaw leaves meetings open to snooping

• People who have WOWED us over 25 years

• A perspective on security threats and trends, from inception to impact

• The effectiveness of vulnerability disclosure and exploit development

• Group-IB launches Fraud Hunting Platform, a digital identity protection and fraud prevention solution

• Google forces devs to reveal Chrome extensions’ data use, privacy practices

• Cisco Webex vulnerabilities may enable attackers to covertly join meetings

• Complete Our Survey and Redeem an Extended 60-Day Trial of Thor Foresight Enterprise [EXTENDED]

• IAM-Driven Biometrics: The Security Issues with Biometric Identity and Access Management (IAM)

• Cit0day (unverified) – 226,883,414 breached accounts

• Google Chromebooks & Duo — Powering Remote Workforce Security

• macOS Leaks Application Usage, Forces Apple to Make Hard Decisions

• Find Out How Ad Trackers Follow You On the Web With EFF’s “Cover Your Tracks” Tool

• Introducing Cover Your Tracks!

• Presidential transition is rocky as the Trump administration resists President-elect Joe Biden

• Gartner names Microsoft a Leader in the 2020 Magic Quadrant for Cloud Access Security Brokers

• Cyberattacks targeting health care must stop

• Modernize secure access for your on-premises resources with Zero Trust

• Chris Krebs, director of Cybersecurity and Infrastructure Security Agency, fired by President

• IoT forecast: Running antivirus on your smart device?

• Running code in the context of iOS Kernel: Part I + LPE POC on iOS 13.7

• Heads up: A new strain of card-skimming Grelos malware is on the loose

• China-linked hacking gang ‘APT10’ named as probable actor behind extended attacks on Japanese companies

• Compsci guru wants ‘right to be forgotten’ for old email, urges Google and friends to expire, reveal crypto-keys

• Cyberup campaign: 80% of infosec pros fear they might fall foul of UK’s outdated Computer Misuse Act

• AWS includes open-source Suricata for stateful inspection with Network Firewall service

• #ISC2Congress: Recruiter: COVID Had a Minimal Impact on the Cybersecurity Job Market

• Until Further Notice: #ISC2Congress Keynote Prescribes Adaptive Recovery and Resilience in Cybersecurity to Deal With Ongoing Pandemic

• #ISC2CONGRESS: Post-Incident Reviews As Prevention

• The Center wants to send you to college. Interested?

• #ISC2CONGRESS ‘We Got This:’ Adaptability Is Nothing New to Cybersecurity

• Penetration testing

• There is a long history of cybersecurity issues in the automotive history

• Looking for adding new detection technologies in your security products?

• IT Security News Daily Summary 2020-11-18

• Want to add antivirus to your existing portfolio?

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• (adsbygoogle = window.adsbygoogle || []).push({});

• Addressing the Impact of the Global Cybersecurity Skills Gap

• Ransomware Operators Partner With Hackers to Attack High profile Organizations

• New Zealand Simplifies Privacy with a Data-Breach Determination Tool

• Police Cameras are Providing Facial Recognition Tracking to Criminals in Moscow

• Future of Offensive Attack Simulation: Strategies, Tools & Techniques

• Hackers Steal 46 Million Animal Jam Account Records, Dating Back 10 Years

• Hang up the Phone: MFA’s Insecure Reliance on SMS

• When Security Controls Lead to Security Issues, (Wed, Nov 18th)

• Deals: Woot Discounts AirPods Pro to $189.99 ($59 Off)

• Apple’s MagSafe Duo Charger Unable to Charge iPhones at Full 15-Watt Power

• How do I select a security assessment solution for my business?

• No, the creator of cURL didn’t morph into Elon Musk and give away Bitcoins. But his hijacked Twitter page tried to

• Manufacturing sector Operational Technology is vulnerable to Cyber Attacks

• Microsoft confirms cyber attacks on COVID-19 Vaccine manufactures across the worldwide

• Most Important Endpoint Security & Threat Intelligence Tools List for Hackers and Security Professionals

• Chaes malware strikes customers of Latin America’s largest e-commerce platform

• Multi-cloud environments leaving businesses at risk

• CISOs say a distributed workforce has critically increased security concerns

• How to Securely Dispose of Your Old Mac

• How to switch search engines on macOS and iOS (and why you should)

• Sophisticated Chinese APT Group Targets Southeast Asian Governments

• 3 Ways to Prepare Your Enterprise’s Data Security for a Future of Advanced Attacks

• CEOs Will Be Personally Liable for Cyber-Physical Security Incidents by 2024

• ISC Stormcast For Wednesday, November 18th 2020 https://isc.sans.edu/podcastdetail.html?id=7258, (Wed, Nov 18th)

• Ransomware still the most common cyber threat to SMBs

• Network traffic and consumption trends in 2020

• Firefox support for Flash ends on January 26

• Evasive Maneuvers in Data Stealing Gateways

• D-Link unveils four Wi-Fi 6 access points across its network management solutions

• Sysdig launches zero trust network security for Kubernetes to cut miscrosegmentation time

• Trump fires top DHS cyber official who debunked election misinformation

• Trump fires CISA Director Chris Krebs

• Firing Christopher Krebs Crosses a Line—Even for Trump

• Qualys CloudView app to power Armor Anywhere cloud security posture management capabilities

• Farsight DNSDB and Cortex XSOAR help gain context for all connected DNS-related digital artifacts

• Magnite supports Unified ID 2.0 to create a common transaction fabric for digital advertising

• Trump fires cybersecurity boss Chris Krebs for doing his job: Securing the election and telling the truth about it

• Enhancing Cloud Security Posture for AWS Network Firewall

• Trump fires CISA boss Chris Krebs

• Canada Proposes Major Fines on Firms That Violate Privacy Laws

• Trump Fires Head of DHS Election Security Agency

• Restoring Apple Silicon M1 Macs Leading to macOS Installation Errors

• Developers Now Able to Create Subscription Codes to Lure New and Returning Subscribers

• Google Releasing New Version of Chrome Optimized for Apple Silicon Macs

• PingCAP raises $270M to develop core technologies and advance global expansion of its offerings

• Netskope expands the Netskope NewEdge network with a new data center in Seoul, South Korea

• President Trump fires cybersecurity chief Chris Krebs

• Ransomware attack forces web hosting provider Managed.com to take servers offline

• CyberCX continues aggressive expansion with Queensland operations launch

• Nearly Two Dozen AWS APIs Are Vulnerable to Abuse

• Forget Imposters. Among Us Is a Playground for Hackers

• Apple Releases Second Betas of iOS 14.3 and iPadOS 14.3 to Developers and Public Beta Testers

• ​Artmotion​ invests in Citadelo​ to help enterprises secure their technology infrastructure

• Israeli spyware maker NSO channels Hollywood spy thrillers in appeal for legal immunity in WhatsApp battle

• House lawmaker stumps for 5-year term for CISA’s director

• OPM aide tapped as next federal CIO

• Multiple Industrial Control System Vendors Warn of Critical Bugs

• EFF, Security Experts Condemn Politicization of Election Security

• Apple Releases Second Betas of iOS 14.3 and iPadOS 14.3 to Developers

• The Remote Access Guide 2.0 — A Reality Check

• IT Security News Daily Summary 2020-11-17

• Microsoft Defender for Linux adds new security feature

• ThreatList: Pharma Mobile Phishing Attacks Turn to Malware

• Defining Security Policies to Manage Remote Insider Threats

• Google Authenticator: How to move from one iPhone or Android device to another

• 6 steps to prioritize IoT gateway security

• Vulnerability Prioritization Tops Security Pros’ Challenges

• Security + Changes!

• Top 7 Use Cases for Digital Risk Protection

• Expert publicly discloses PoC code for critical RCE issues in Cisco Security Manager

• Happy birthday, Security Affairs celebrates its ninth Anniversary today

• Twitter Launches Ephemeral Tweets Called ‘Fleets’ for All Users

• Want to Encrypt All The Things? Firefox has you covered with HTTPS-Only Mode!

• NOAA looks to modernize with EIS

• NAPA working group floats proposal to roll back Trump’s workforce orders

• Verizon Releases First Cyber-Espionage Report

• Phishing Campaigns Evolving Rapidly; Using Innovative Tactics to Avoid Detection

• 1Password Updated With macOS Big Sur Optimizations and Unlocking With Apple Watch

• Hands-On With the New HomePod Mini

• Leaked database exposed login data of 100k hacked Facebook accounts

• V8 Array Overflow Exploitation: 2019 KCTF Problem 5

• Chrome 87 brings tab throttling, Occlusion Tracking on Windows, back/forward cache on Android

• COVID-19 Antigen Firm Hit by Malware Attack

• The team behind the Essential PH-1 is back, and privacy is their focus

• New Zoom Features Tackle Meeting Disruptions

• Explore the benefits of Azure AD vs. on-prem AD

• Druva Acquires sfApex

• Cybercrime to Drain $44bn from Russian Economy in 2020

• To Pay or Not to Pay: Responding to Ransomware From a Lawyer’s Perspective

• Researchers Scan for Supply-Side Threats in Open Source

• The Joy of Tech® ‘Social Media Pitch’

• DEF CON 28 Safe Mode Voting Village Village – Kylee Zabel’s ‘Washington State’s Secretary of State Kim Wyman On Voting Security’

• You call that DevSecOps? Why your DevSecOps practice may be falling short

• Latest Version of Google Chrome for macOS Big Sur Adds Updated Icon and Other New Features

• Apple CarPlay Gains More EV Charging Info Thanks to Integration With ChargePoint

• The President’s Daily Brief and Presidents-Elect: A Primer

• CipherCloud Chronicles #7: Spot Your Insider Threats

• Microsoft brings Trusted Platform Module functionality directly to CPUs under securo-silicon architecture Pluton

• Americold Hit With Cyber Attack

• Sucuri Name Being Used by E-Skimmer to Avoid Detection

• (adsbygoogle = window.adsbygoogle || []).push({});

• New Zoom Feature Can Alert Room Owners of Possible “Zoombombing” Disruptions

• Exposed Database Reveals Compromised Facebook Accounts

• Top 10 Internet Safety Rules to Live By

• How To Keep Your Cryptocurrency Safe And Secure

• A Look into the TLDs of the Most Abused Newly Registered Domains

• Russia Denies Microsoft Claims of Healthcare Cyber Attacks

• Does Protection Help As Much As We Think In Security?

• Nibiru ransomware variant decryptor

• DEF CON 28 Safe Mode Voting Village Village – Susan Greenhalgh’s ‘Remote Online Balloting Delivery’

• Apple Silicon M1 Compiles Code as Fast as 2019 Mac Pro and With Minimal Battery Life Impact

• Apple Seeds First Beta of Upcoming macOS Big Sur 11.1 Update to Developers

• Watch the M1 Apple Silicon MacBook Air Blaze Through Opening Every Default App

• Key layers for developing a Smarter SOC with CyberProof-managed Microsoft Azure security services

• A visit to a crafted webpage would have been enough for a bad guy to munch all your Firefox for Android cookies

• Over 80% companies re-structured their cybersecurity infrastructure in 2020

• Majority of APAC firms pay up in ransomware attacks

• Chrome 87 released with fix for NAT Slipstream attacks, broader FTP deprecation

• Zoom Takes on Zoom-Bombers Following FTC Settlement

• Jupyter Trojan Steals Chrome Firefox Data and Opens Backdoor

• Chart: Undisputed Increase in Paid Claims

• RTRO Camera for iOS Gains New Real-Time Instant Film Feature

• Menlo Security and Smartworld announce partnership in Middle East

• Key layers for developing a smarter SOC with CyberProof-managed Microsoft Azure security services

• WebNavigator Chromium browser published by search hijackers

• #ISC2CONGRESS – Tuesday Keynote: Protecting Yourself During the Pandemic

• Cybersecurity Awareness Training

• Cybersecurity Awareness Training

• Quick Hits

• Linux Foundation: We’ll host Mozilla’s Rust programming language-based Servo web engine

• #ISSE2020: ‘Real’ Digital Identity Can Exist with New Technology

• #ISC2Congress: The #COVID19 Cyber-Threat Landscape for Businesses

• Security Risks Discovered in Tesla Backup Gateway

• Cisco Releases Security Updates for Security Manager

• Zero Trust for Workloads: Knowledge is Key

• PCI Pal® collaborates with Oracle to offer enhanced payment security to its contact centre customers

• Secure Your Cloud Native Applications and DevOps Pipeline in Six Steps

• Chinese APT FunnyDream targets a South East Asian government

• DisplayMate Says iPhone 12 Pro Max Has Best Smartphone Display It’s Ever Tested

• $6.6 Million Worth of Apple Products Stolen on M1 Highway in the UK

• ‘Build’ or ‘Buy’ your own antivirus product

• Twitter appoints hacker Mudge as Head of Security

• TicketMaster Slapped With $1.65 Million Fine Over 2018 Data Breach

• Introducing Rancher on NetApp HCI: Hybrid cloud multicluster Kubernetes management with push-button ease

• Ask Umi the IT dog: One system that does it all

• Twitter Launches Disappearing ‘Fleets’ Globally

• Capcom ransomware attack: Gaming details leaked; no ransom paid

• Cisco Patches Critical Flaw After PoC Exploit Code Release

• Microsoft Unveils ‘Pluton’ Security Processor for PCs

• Hundreds of Tesla Powerwall Gateways Potentially Exposed to Hacker Attacks

• An Inside Look at an Account Takeover

• How The Stadtwerke Klagenfurt Group Reduces Risk to Critical Infrastructure

• Microsoft Teams for macOS Local Privilege Escalation

• After Trump Tweets Defcon Hacking Video, Voting Security Experts Call BS

• Mudge Has Been Named Twitter’s Security Chief

• Firefox 83 Released With HTTPS-Only Mode

• Researchers Warn Of Risks With Tesla Backup Gateway

• Apple-Owned Shazam App Surpasses 200 Million Monthly Active Users Worldwide

• Beats and AMBUSH Team Up on New Glow-in-the-Dark Powerbeats

• Apple Silicon Mac Reviews: M1 Chip Delivers Exceptional Performance, Thermals, and Battery Life

• You Can Now Apply for Apple Card on the Web

• Hackers Pose As WHO Officials To Attack COVID-19 Vaccines

• Experts Reacted On Lazarus Malware Strikes South Korean Supply Chains

• Experts Reacted On News That Micropayments Company Coil Exposed Hundreds Of Customer Email Addresses

• BrandPost: Cloud Security Topics: Using Network Threat Protection to Decrease Vulnerability

• Twitter Appoints Famed Hacker As Security Head

• SpaceX, NASA: Four Astronauts Arrived Safely At ISS

• Fast and Secure Connectivity from Anywhere, Designed for Government

• Researchers warn of internet security risks connected to Tesla Backup Gateway

• Windows 10: Microsoft reveals Pluton security chip – ‘Expect Patch Tuesday-type updates’

• FireEye Predicts Ransomware Will Evolve and Expand in 2021

• Be Very Sparing in Allowing Site Notifications

• Employees Have Access to an Average of 10 Million Files

• Cyber Attacks in India At A Steady Rise as Per India’s Cybersecurity Chief

• Ransomware Operator Promotes Distributed Storage for Stolen Data

• Unixfreaxjp at #R2CON2020 presented shellcode basics for radare2

• Water Wars: Shadowboxing in Taiwan and the Senkakus

• Podcast Episode: Fixing a Digital Loophole in the Fourth Amendment

• Navigating the K8s journey…second star to the right, and straight on ‘til morning…

• Cato Networks raises $130 million as demand for remote workforce security soars

• Firefox 83 arrives with HTTPS-Only Mode and faster performance

• Firefox 83 released with ‘HTTPS-Only Mode’ that only loads HTTPS sites

• Some Apple Apps on macOS Big Sur Bypass Content Filters, VPNs

• Legendary hacker and L0pht member Peiter Zatko joins Twitter as security chief

• Cisco Patches Publicly Disclosed Vulnerabilities in Security Manager

• #ISC2Congress: Modern Security Pros Are Much More than Technologists, Says Bruce Schneier

• #ISSE2020: Look to Decentralized (Rather than Legacy) Identity Approvals

• What’s the deal with security product testing anyway?

• Microsoft’s Making a Secure PC Chip—With Intel and AMD’s Help

• Why Your OT/IoT Network Needs “Always On” Security and Visibility

• Belkin Announces Boost Charge TrueFreedom Pro Wireless Charger and Boost Charge UV Sanitizer

• Watch: Apple Silicon Mac Reviews and Unboxing Videos

• The Remote Access Guide 3.0 — A Reality Check

• Meet the Microsoft Pluton processor – The security chip designed for the future of Windows PCs

• Huawei Sells Honor Smartphone Unit To Chinese Consortium

• Zoom Releases New Security Features to Counter Zoombombing

• Peiter ‘Mudge’ Zatko Named Head of Security at Twitter

• Donald Trump Could Still Launch Nuclear Weapons at Any Time

• The U.S. Government’s Response to Election-Related Cyber Threats

• 246869 Windows systems are still vulnerable to the BlueKeep flaw

• From Sam Morse To John Postel, What Did We Learn? Apparently Nothing!

• (adsbygoogle = window.adsbygoogle || []).push({});

• Experts Insight On Jupyter Trojan – Newly Discovered Malware Stealthily Steals Usernames And Passwords

• What is The Clean Network?

• 9 types of malware and how to recognize them

• REvil ransomware explained: A widespread extortion operation

• Apple Hits Back At iPhone Tracking Complaints By Privacy Group

• New TroubleGrabber Malware Steals Credentials and System Information

• FMC raises $20 million to mass-produce ferroelectric computer memory

• Cisco reveals this critical bug in Cisco Security Manager after exploits are posted – patch now

• Cryptocurrency platform dangles ‘bug bounty’ carrot to hacker who stole $2 million

• Over 80,000 ID Cards and Fingerprint Scans Exposed in Cloud Leak

• Google Maps Gains Real-Time ‘Crowdedness’ Transit Data, Live Food Delivery Status, and More

• COVID-19 vaccine research firms targeted by Russian and North Korean hackers

• US military mining data from Muslim prayer app

• Channel News: Corelight partners with Redington Group to bring powerful open NDR solutions to businesses in the Middle East and Africa

• Hacker ‘Mudge’ to head up Twitter’s security

• Critical vulnerabilities in Cisco Security Manager fixed, researcher discloses PoCs

• 16 hardware and software platforms hacked in minutes. A contest or business reality?

• Phishing emails double in November in run-up to Black Friday and Cyber Monday

• FCW Insider: Nov. 17

• UK Firms Least Likely to Pay Ransom Globally

• First M1 Apple Silicon Macs Now Available for In-Store Pickup Across Europe, Asia, and Australia

• Apple Celebrates 40 Years of Community At Its Cork Campus in Ireland

• How to speed up malware analysis

• Avast Chief Privacy Officer Q&A | Avast

• Avast Secure Browser For iOS | Avast

• Putting Privacy Values Into Practice | Avast

• Capcom Confirms Hackers Stole Data in Recent Attack

• Capcom Ransomware Breach May Have Hit 350,000

• Chinese APT Hackers Target Southeast Asian Government Institutions

• VoltPillager: Hardware-based fault injection attacks against Intel SGX enclaves

• Singapore to pilot common data platform in bid to plug supply chain gaps

• More than 200 systems infected by new Chinese APT ‘FunnyDream’

• Implementing ZTNA: 4 Reasons Why Mobile is a Good Place to Start

• “At-Risk Meeting Notifier Zoom” feature alerts meeting organizers of Zoombombing risk

• Interview with experts who lead the project ONTOCHAIN

• Banks offered the Central Bank of Russia to create a centralized mechanism to combat fraudsters

• Researcher Discloses Critical RCE Flaws In Cisco Security Manager

• 4 Things Every CISO Must Include in Their Board Presentation

• Adobe Photoshop for Apple Silicon is Now Available in Beta

• Qualys provides out-of-the-box support for Google Cloud Artifact Registry

• Netiquette Rules: Definition and 10 Basic Rules To Dramatically Improve your Safety [Updated 2020]

• End the year as you mean to go on… with world-class cyber-security training

• Apple’s privacy pledges: We sent dev checks over plain HTTP, logged IP addresses. We bypass firewall apps

• Aussie BitConnect promoter charged over his involvement with alleged crypto scam

• More than 245,000 Windows systems still remain vulnerable to BlueKeep RDP bug

• Why biometrics will not fix all your authentication woes

• Zoom upgrades its Cybersecurity features to block Zoombombers

• Nearly 350,000 Capcom customer information stolen in Ransomware Attack

• ModPipe Malware Steals Sensitive Information from Oracle POS Software used by Hundreds of Thousands of Hotels

• Facebook and Google refuse 1 in 5 Australian law enforcement data access requests

• Accept your IT security limits and call in the experts

• 2021 predictions for the Everywhere Enterprise

• Splunk Appoints Four-Star U.S. Army General Dennis Via to its Board of Directors

• CynergisTek Reports Third Quarter 2020 Financial Results

• McAfee Announces MVISION Marketplace and MVISION API to Enable Organizations to Quickly and Easily Adapt to Security Gaps

• SecTor 2020, Canada’s Biggest Cybersecurity Event: Day Two

• Service NSW expecting cyber attack to set it back AU$7m in legal and investigation costs

• ISC Stormcast For Tuesday, November 17th 2020 https://isc.sans.edu/podcastdetail.html?id=7256, (Tue, Nov 17th)

• Apple Silicon M1 MacBook Air SSD Really Is Twice as Fast as Previous Model

• Risk professionals expect a dynamic risk environment in 2021

• Explosion in digital commerce pushed fraud incentive levels sky-high

• Micropayments company Coil distributes new privacy policy with email that puts users’ addresses in the ‘To:’ field

• How to manage iTunes Store and App Store Subscriptions

• How to Enter and Exit Full Screen Mode and Use Split Screen in macOS

• Lazarus supply‑chain attack in South Korea

• LexisNexis Emailage: Reimagining fraud detection by using email intelligence as a core risk identifier

• COVID-19-Related Data Breach Affects Thousands in Delaware

• Masergy boosts its SD-WAN Secure solution with SASE capabilities

• VMware launches Modern Network framework to help businesses adapt to a new normal

• Google ties ‘Smart’ features up in a bow for Gmail

• Mastercard adds A2A payments functionality to Mastercard Track Business Payment Service

• Zyxel adds enhancements and two new firewalls to its USG FLEX family of mid-range firewalls for SMBs

• TrilioVault for Kubernetes 2.0: Managing data protection and migration across clouds

• New acquisition provides security from hackers’ view, Palo Alto Networks CEO says

• How to secure your Zoom account with two-factor authentication

• Codefresh GitOps 2.0: Helping companies confidently ship code faster

• Avanan announces availability of its security application for Microsoft Teams

• Palo Alto Networks CEO talks Q1 earnings, fundamental transformations in cybersecurity

• Palo Alto Networks CEO talks $800 million Expanse acquisition

• Why Creating A Cybersecurity Framework Is Essential

• VPNs for Secure Remote Work: The Do’s and Don’ts

• Thrift Board taps Accenture for consolidated records contract

• GSA explains lowered DEOS price tag

• Tanium and IBM join forces to create a security and compliance monitoring solution for hybrid cloud

• How To Run A Cybersecurity Audit At Your Business

• Rising Star: Liz Dean

• Get to know the 2020 Rising Stars

• Rising Star: George Nicol

• Rising Star: Nicholas Shields

• Rising Star: Kelsey Werder Monaghan

• Dating Site Bumble Leaves Swipes Unsecured for 100M Users

• 4 ways to keep your company’s and customers’ data private and build trust

• Cult videogame company Capcom pays a big round $0.00 to ransomware crooks

• Global Pandemic Fuels Cyber-Threat Workload for National Cyber Security Centre, Shows Annual Review

• Breakdown of a Break-in: A Manufacturer’s Ransomware Response

• Financial Crime Analysts vs. IT: Finding investigation solutions to make both parties happy

• New American Express Users Can Add Card Instantly to Apple Pay After Being Approved

• #ISC2Congress Panel: Finding The Balance Between Skill and Usability

• IT Security News Daily Summary 2020-11-16

• Use Spring Security and Feature Flags to Test in Production

• (adsbygoogle = window.adsbygoogle || []).push({});

• Attackers Target Porn Site Goers in ‘Malsmoke’ Zloader Attack

• Data is worth its weight in gold

• 7-step pandemic return-to-work IT infrastructure checklist

• Facebook Will Begin Using AI To Sort Content For Moderation

• DEF CON 28 Safe Mode Voting Village Village – Forrest Senti’s & Caleb Gardner’s ‘Secure The Vote – Hack A Fax’

• State of Software Security v11: How to Use the Findings

• Java Crypto Catchup

• Unprotected database exposed a scam targeting 100K+ Facebook accounts

• First M1 Apple Silicon Macs Now Arriving to Customers

• Apple Silicon M1 MacBook Pro Earns 7508 Multi-Core Score in Cinebench Benchmark

• Computer scientists launch counteroffensive against video game cheaters

• EFF Publishes New Research on Real-Time Crime Centers in the U.S.

• Citrix SD-WAN Bugs Allow Remote Code Execution

• Twitter Taps Mudge

• New Zoom feature can alert room owners of possible Zoombombing disruptions

• Cybersecurity: Top hackers make big money from bug bounties

• VoltPillager: New Hardware-Based Voltage Manipulation Attack Against Intel SGX

• Austria Privacy NGO Takes on Apple Over ‘Tracking Code’

• Zoom Debuts New Tools to Fight Meeting Disruptions

• EFF Urges Universities to Commit to Transparency and Privacy Protections For COVID-19 Tracing Apps

• Street Fighter maker says soz after ransomware hadoukens servers, puts 350,000 folks’ data at risk of theft

• #ISC2CONGRESS 5G Security: Two Sides of One Coin

• Cencosud Infected by Egregor Ransomware

• Citrix Releases Patches for Critical RCE Vulnerabilities in SD-WAN Center

• Lazarus Supply‑Chain Attack in South Korea

• ShinyHunters Target Numerous Firms In A Recent Wave Of Data Breaches

• Mirosoft advises ditching voice, SMS multi-factor authentication

• Hacked Security Software Used in Novel South Korean Supply-Chain Attack

• Healthcare Data Breaches to Triple in 2021

• Vulnerability Summary for the Week of November 9, 2020

• XKCD ‘Final Exam’

• Apple Podcasts Can Now Be Embedded on the Web

• Check, Please! Adding up the Costs of a Financial Data Breach

• Malsmoke operators abandon exploit kits in favor of social engineering scheme

• 5G Security: Two Sides of One Coin

• App helps manage work for remote staff

• Making data analysis accessible across the Army

• Employee surveillance software demand increased as workers transitioned to home working

• How to do cybersecurity – join us online for the Sophos Evolve event

• Naked Security Live – Don’t get hoaxed (pass it on)!

• #ISC2Congress: How 5G is Expanding the Attack Surface

• Teen Wins Peace Prize for Fighting Cyber-Bullying

• WOW64!Hooks: WOW64 Subsystem Internals and Hooking Techniques

• Vertafore Leak: Private Data of 28M Texans

• Crooks use software skimmer that pretends to be a security firm

• HomePod Mini Now Available for In-Store Pickup

• Apple Shares Trailer for Upcoming ‘Earth At Night In Color’ Docuseries

• Internet freedom in Asian countries: an analysis

• Forrester TEI study: Azure Sentinel delivers 201 percent ROI over 3 years and a payback of less than 6 months

• Security Awareness Training Won’t Give CISOs or Employees Peace of Mind

• A week in security (November 9 – November 15)

• #ISC2CONGRESS Opening Keynote Speaker: Policy and Technology Must Work Together

• How AI Can Make Cybersecurity Jobs Less Stressful and More Fulfilling

• 21 Public Sector Innovation award winners

• AF VAULT holds decision-making toolkit

• Cyber-attack disruption could last for months, says council

• Exposed Database Reveals 100K+ Compromised Facebook Accounts

• Meet the hackers who earn millions for saving the web. How bug bounties are changing everything about security

• Lazarus Group Targets South Korea via Supply Chain Attack

• Cyber-criminal Fined $300k for Pipeline Attacks

• IT Leaders Reliant on Data for Threat Insight

• State Actors Attack COVID-19 Research Efforts, Microsoft Says

• R2con 2020 Review

• Mainak Mazumdar, Nielsen’s Chief Data Officer, joins Satori’s Board of Advisors

• Inside the World of Cyber Venture Capital

• Apple Retains Fourth Place for Q3 Notebook PC Shipments, Industry Growth Limited by Supply Constraints

• First Impressions From HomePod Mini Customers: ‘The Sound Quality is Great’

• Demand forces companies to increase salaries of Cybersecurity Professionals

• BrandPost: 5 Tips to Help Security Teams Work Smarter, Not Harder

• BrandPost: How Cybersecurity Became a Business Issue in 2020

• Mozilla Says Intermediate CA Preloading Reduces Connection Errors in Firefox

• How to do cybersecurity – join us online for the Sophos Evolve event!

• The Art of Storytelling in Cybersecurity

• Lazarus malware delivered to South Korean users via supply chain attacks

• On Blockchain Voting

• Hackers Can Use Just-Fixed Intel Bugs To Install Malicious Firmware On PCs

• Scams Ramp Up Ahead Of Black Friday Cyber Criminal Craze

• Up To 350,000 People’s Information Stolen In Capcom Hack

• Microsoft Is Working On The Kerberos Authentication Bug

• Lazarus Malware Strikes South Korean Supply Chains

• On Appeal, House Republicans Press Forward With Legal Challenge to Proxy Voting

• Account Takeover Fraud Is Up 300%. What You Need to Know

• Street Fighter maker says soz after ransomware hadoukens servers leaving 350,000 folks’ data at risk of compromise

• Tom Siebel-Founded AI Start-Up C3.ai Files For Public Offering

• New Jupyter backdoor malware steals Chrome, Firefox data

• A good sign from the new administration about USDS

• Meet the hackers who earn millions for saving the web: How bug bounties are changing cybersecurity

• Hacked Websites, Hate Speech Hit Suburban Chicago Schools

• Cryptocurrency Service Proposes Bug Bounty to Attacker Who Stole $2 Million

• A Call for Change in Physical Security

• The 5 best WordPress security plugins for complete site security

• [Updated 2020] Hacked Email Account: What to Do If It Happens to You or Your Business

• Accelerating Security and the Cloud With Bitglass and AWS Global Accelerator

• Enhancing Visibility with Bitglass and Splunk

• Déjà vu – macOS hits OCSP hurdles

• Gmail users get new controls for data used to personalize Google’s ‘smart’ features

• VMware plots ‘modern network’ strategy with Project Antrea, new features for Tanzu service mesh

• Jupyter trojan: Newly discovered malware stealthily steals usernames and passwords

• David’s guide to surviving Thanksgiving 2020: Stay safe, stay home

• The ransomware landscape is more crowded than you think

• (adsbygoogle = window.adsbygoogle || []).push({});

• Microsoft hits the brakes on Windows 10 updates in December 2020

• Biotech Company Miltenyi Biotec Discloses Malware Attack

• Cybersecurity Lessons from the Pandemic: Prevention

• Deals: Apple Watch Series 6 and SE Discounted by $50, Starting at $230 for 40mm GPS SE

• M1 Chip Beats GeForce GTX 1050 Ti and Radeon RX 560 for Graphics Performance

• Make It Your Own: Brand Customization With Our Universal Prompt

• Bitcoin Exchanger – Overview, Importance, and More!

• Tackling Data Regulations As A Business for Employees

• Defining data protection standards could be a hot topic in state legislation in 2021

• Lessons from Teaching Cybersecurity: Week 7

• Lazarus Group Used Supply Chain Attack to Target South Korean Users with Malware

• Cybercrime Moves to the Cloud to Accelerate Attacks Amid Data Glut

• macOS Big Sur 11.0.1 Patches 60 Vulnerabilities

• Apple Has Sent Folding iPhones to Foxconn for Testing, According to Chinese Report

• It’s Time to Test Your CISSP Knowledge!

• 6 security shortcomings that COVID-19 exposed

• Windows 10 update problem: We’re fixing Kerberos authentication bug, says Microsoft

• What Is SCM (Security Configuration Management)?

• Privacy Activists in EU File Complaints Over iPhone Tracking

• Crypto Firm Offers $200,000 Bug Bounty to Hacker Who Stole $2m

• Printers Spit Out Egregor Ransom Notes at Cencosud Retail Stores in Latin America

• The North Face Disables Shopper Account Passwords after Credential-Stuffing Attack

• Clothing Brand ‘The North Face’ Hit By Credential Stuffing Attack, Suffers Data Breach

• iFixit’s iPhone 12 Mini Teardown Reveals Apple’s Miniaturized Components

• International Fraud Awareness Week (w/c 16th November) – Expert Commentary

• WEF report that we may need to change our approach to cybersecurity

• DTX Manchester 2020

• Pluto TV suffer a major security breach with users data posted online

• DarkSide placed on restricted list following Iranian hosting announcement

• Pandemic To Redefine Security Landscape Next Year, Researchers Say

• US Offers Reprieve In TikTok Legal Battle

• Google Apologises Over Leaked EU Strategy Document

• Google, Justice Department Clash On Data Protection Order

• Silicon In Focus Podcast: Cornish Lithium

• Facebook Privacy Refresh | Avast

• Lazarus malware strikes South Korean supply chains

• Russian and North Korean Groups Still Targeting #COVID19 Vaccine Firms

• Trojanized Security Software Hits South Korea Users in Supply-Chain Attack

• Privacy Group Files Legal Complaints in Europe Targeting Apple’s Device Identifier Service for Advertisers

• Security Flaw In Smart TVs Grants Hackers Access

• US Mental Health Provider Email Breach; Experts Reaction

• Expert Insight: Info Of 27.7 Million Texas Drivers Exposed In Vertafore Data Breach

• InternetLab’s Report Sets Direction for Telecom Privacy in Brazil

• Your organization doesn’t have time and resources to do research, POCs, evaluations?

• Scammers Expose Facebook Data Haul of 13 Million Records

• Microsoft Warns Of Russia, North Korea Attacks On Vaccine Research

• Security Essential as Electric Vehicles Accelerate

• Targeted Spear-Phishing on the Rise

• New Jupyter information stealer appeared in the threat landscape

• New skimmer attack uses WebSockets to evade detection

• Heartbleed, BlueKeep and other vulnerabilities that didn’t disappear just because we don’t talk about them anymore, (Mon, Nov 16th)

• International infosec rules delivered to make nations and non-state actors behave themselves online

• Healthcare organizations are sitting ducks for attacks and breaches

• How a move to the cloud can improve disaster recovery plans

• Singapore’s pilot data sharing initiative needs to ensure cybersecurity: Minister

• Cyber Attack news headlines trending on Google

• Verizon introduces Mobile Security for Small Businesses

• Blockchain voting risks undetectable nation-scale failures: MIT researchers

• CSIRO and Austrade prescribe digital and R&D to create ‘roaring 2020s’

• This year’s biggest innovators? Hackers and cybercriminals. Again

• Stolen Source Code, Apple Zero-Days, Biden’s Privacy and Cybersecurity Policies

• Managing risk remains a significant challenge

• Researchers break Intel SGX by creating $30 device to control CPU voltage

• ISC Stormcast For Monday, November 16th 2020 https://isc.sans.edu/podcastdetail.html?id=7254, (Mon, Nov 16th)

• Apple Addresses Privacy Concerns Surrounding App Authentication in macOS

• eBook: The security certification healthcare relies on

• Security teams need visibility into the threats targeting remote workers

• Wireless Penetration Testing Checklist – A Detailed Cheat Sheet

• SEC’s Office of Compliance Inspection and Examinations Warns of a Sudden Increase in Credential Stuffing Hack

• 7 Challenges that Stand in the Way of Your Compliance Efforts

• Hackers attacked major Telegram channels via video on Yandex

• McAfee’s open API framework enables orgs to respond faster to threats while reducing cost

• 15 Asia Pacific countries sign world’s largest free trade agreement

• Australia to track Coronavirus encounters with payment card records

• HomePod Mini Begins Arriving to Customers

• Immuta and Starburst help orgs automate data governance, access control, and privacy management

• ENISA: Top 15 Threats: Spam, Phishing, and Malware!

• Making software more than ‘IT thing’

• Apple Silicon M1 Emulating x86 is Still Faster Than Every Other Mac in Single Core Benchmark

• The ENISA Cybersecurity Threat Landscape

• ENISA: Top 15 Threats

• IT Security News Weekly Summary – Week 46

• IT Security News Daily Summary 2020-11-15

• How to address inefficiencies of using multiple cybersecurity systems

• Federal panel sides with VA on union contract

• Robert M. Lee’s & Jeff Haas’ Little Bobby Comics – ‘WEEK 303’

• DEF CON 28 Safe Mode Voting Village Village – Ben Dubow’s ‘How Influence Warfare Subverts Democracy’

• DEF CON 28 Safe Mode Voting Village Village – Martin Mickos’ ‘See Something, Say Something’

• The Most Common API Vulnerabilities

• Apple Shares New ‘Everyday Experiments’ Shot on iPhone 12 Video

• Code42 Incydr Delivers Evolved Data Protection for Channel Partners

• New Book By Clearwater Founder and Executive Chairman Provides Healthcare Board Members and Executives With Practical Guidance for Overseeing an Enterprise Cyber Risk Management Program

• Tangoe Reveals its 2021 Technology Trends

• AuditBoard Survey: 81% of Audit and Risk Professionals Believe Risk Will Be Unpredictable In 2021

• QuoLab Technologies Announces Partnership with QGroup GmbH

• oledump’s ! Indicator, (Sun, Nov 15th)

• How Politics at Home Shapes Kuwait’s Foreign Policy

• Apple Unveils Security Features in New M1 Chip

• The North Face website suffered a credential stuffing attack

• Security Affairs newsletter Round 289

• (adsbygoogle = window.adsbygoogle || []).push({});

Generated on 2020-11-22 23:58:25.093819

The post IT Security News Weekly Summary – Week 47 first appeared on IT Security News.