#hacking | #scammers | IT Security News Daily Summary 2022-02-03 | #datingscams | #russianliovescams | #lovescams

U.S. Senate Judiciary Committee Approves Another Antitrust Bill That Would Allow Sideloading on iPhone

MacRumors Exclusive: Get 20% Off Brydge’s Popular iPad Keyboards and MacBook Vertical Dock

KP Snacks hit by ransomware: Crisps and nuts firm KO’d by modern scourge

Ransomware Attack On KP Snacks Prompts Shortage Warning

Report: 79% of ML teams say they ‘lack access’ to data needed to identify bias and ethics issues

S3 Ep68: Bugs, scams, privacy …and fonts?! [Podcast + Transcript]

Businesses’ Top Concerns Operating Cloud-native Technologies

Top-Ranking Banking Trojan Ramnit Stealing Payment Card Data

Iranian Hackers Employs PowerShell Backdoor to Bypass Security Products

Wormhole hack – Hackers steal $320M in one of the largest crypto heists

iPhone Flaw Exploited By Second Israeli Spy Firm

FBI: China Attacks More Than Everywhere Else Combined

Wormhole Blockchain Bridge Taken For More Than $300 Million

KP Snacks Left With Crumbs After Ransomware Attack

Microsoft Responds to OneDrive Mac User Criticism Following Decision to Enforce Files On-Demand Feature

Sale of ‘Silent AirTags’ on eBay and Etsy Raises Privacy Concerns

Bitcoin miners are helping the Texas grid brace for winter storm impact

Conti Ransomware hits British Company KP Snacks

TMF board member says the fund can’t do everything

QR codes on Twitter deliver malicious Chrome extension

The Open Data Market and Risks to National Security

KP Snacks Hit By Ransomware – Experts Opinions

$320 milllion stolen from Wormhole crypto-trading platform

Beware bogus OperaGX sponsorship offers

Telco Penalized €9 Million for Obscuring Cyberattack Impact from Customers

More than 90% of Russians do not Finish Reading User Agreements on the Internet

Meta Stock Suffers, As Facebook Looses Daily Users For First Time

Black History Month: Diversity in Cybersecurity Is More Important than Technology

BlackCat ransomware – what you need to know

Oil terminals in Europe’s biggest ports hit by a cyberattack

Apple Launches New iPhone 13 Product Pages Highlighting Key Features

New Year, Same Risks? Six Cyber Resilience Resolutions for a Safer 2022

Over $300 Million in Cryptocurrency Stolen in Wormhole Hack

Hackers Went Wild in 2021 — Every Company Should Do These 5 Things in 2022

Critical Flaws Discovered in Cisco Small Business RV Series Routers

As major winter storm descends on Texas, bitcoin miners are helping the power grid brace for impact

Keeper Security acquires Glyptodon to enhance privileged access management platform

Fraudsters set to pounce on massive infrastructure money

Cybersecurity: Many managers just don’t want to understand the risks

A New Cyber Insurance Model: Continuous Control Validation

Deals: AirPods Pro With MagSafe Drop to $179.99 ($69 Off)

Apple Did Not Mislead Customers About iPhone Water Resistance, Federal Judge Rules

Cyber Signals: Defending against cyber threats with the latest research, insights, and trends

Microsoft: ‘Dangerous mismatch’ in security due to slow MFA adoption

PowerPoint Files Abused to Take Over Computers

Cisco plugs critical flaws in small business routers

Ransomware Attack Against KP Snacks

10 Best Laptops Under $200 in 2022 – Review and Buying Guide

Codex Exposed: Helping Hackers in Training?

Questions Raised About Future Of Microsoft HoloLens

Privacy in Practice: Securing Your Data in 2022 and Beyond

Microsoft: This Mac malware is getting smarter and more dangerous

Ransomware Attack Disrupts Manufacturing at KP Snacks

Experts Reaction On Mandiant Threat Reporting Research: 1 In 7 Ransomware Attacks Leak Critical OT Info

CISA Adds Eight More Flaws To Its Exploited Vulnerabilities Catalogue

New SEO Poisoning Campaign Is Wreaking Havoc on the Cyberthreat Landscape

10 Best Laptops Under $700 – 2022 Buying Guide & Reviews

3D printed guns, underground markets, bomb manuals: police crackdown continues

More than $8 million made from NFT wash trading: Chainalysis

Critical Vulnerabilities Found in Sealevel Device Used in ICS Environments

Interview with the Head of the NSA’s Research Directorate

Introducing Topic Exercises

Execs keep flinging money at us instead of understanding security, moan infosec pros

Shuckworm Group uses Weaponized Word Document to Infect Victims Computer

European Oil Port Terminals Hit by Cyberattack

Cisco Patches Critical Vulnerabilities in Small Business RV Routers

FBI Admits Procurement Of NSO’s Pegasus For ‘Product Testing’

Introducing Check Point Software’s new “SMB Security Suite,” targeted towards offering out-of-the-box, end-to-end security for Small to Midsized Businesses.

Ransomware Often Hits Industrial Systems, With Significant Impact: Survey

Apple’s Proposal to Allow Third-Party Payment Methods in App Store ‘Lacks Detail,’ Says South Korean Regulatory Commission

9 out of 10 Security Leaders Warn of Skills Shortage

KP snacks hit with ransomware attack

China condemns US ban on telco, urges need for fair treatment

Home Improvement Firm Fined £200k for Nuisance Calls

Growing Number of Phish Kits Bypass MFA

They Were ‘Calling to Help.’ Then They Stole Thousands

New SEO Poisoning Campaign Distributing Trojanized Versions of Popular Software

Wormhole cryptocurrency platform hacked, crooks stole $326 million, the second-biggest hack of a DeFi platform

Heimdal CyberSecurity & Threat Intelligence Report 2021

Online Thieves Steal $320m from Crypto Firm Wormhole

How SSPM Simplifies Your SOC2 SaaS Security Posture Audit

CARROT Weather Gets Redesigned Maps With 3D Globe View, Forecast Layers, and More

Hackers steal $326 million from blockchain platform Wormhole

[updated]Cyberattack on fuel supplier causes supply chain disruption

Welsh home improvement biz fined £200,000 over campaign of 675,478 nuisance calls

Face ID with a Mask; Barcodes with Stamps; and Problems with OneDrive – Intego Mac Podcast Episode 225

Financially Motivated Hackers Use Leaked Conti Ransomware Techniques in Attacks

Obrela acquires Encode to become one of Europe’s largest MDR players

New Variant of UpdateAgent Malware Infects Mac Computers with Adware

Apple’s Privacy Measures to Cost Facebook $10 Billion in 2022

Stolen Netflix Accounts | Avast

Over 100,000 Files with Student Records from the British Council were Discovered Online

SolarMarker Malware Utilize Cutting-Edge Techniques

Apple Awards Bounty of $100,500 for Finding Flaws in MacBook

Do you know what your supply chain is and if it is secure?

New Wave of Cyber Attacks Target Palestine with Political Bait and Malware

Building confidence in your system’s security with chaos engineering

eSafety worried proposed anti-trolling laws may be used in vigilante-style justice

Trend Micro fixed 2 flaws in Hybrid Cloud Security products

AI technology is redefining surveillance

People working in IT related roles equally susceptible to phishing attempts as the general population

How organizations are arming themselves to combat threats

FBI says more cyber attacks come from China than everywhere else combined

Apple Inc pays $100,500 to hacker for hacking MacBook Webcam

Malware news trending on Google

DHS official to chair Biden-ordered cyber safety review board

How are collaboration apps fairing in remote work environments?

Companies woefully unprepared for CCPA compliance

Supply chain situation: All the numbers are working in our favor, says Port of Los Angeles

Unsecure Amazon S3 bucket Exposes IDs of Airport Security Employees

A Cybersecurity Role Has Topped List of Best Jobs

Cloud computing market to reach $287.03B by 2025

Cybersecurity in Competitive Online Gaming (Cheating, Mitigation, and Vulnerabilities)

Appgate secures Kubernetes workloads with cloud-native zero trust functionality

Codenotary Cloud identifies vulnerabilities in software development lifecycle

Mandiant Advantage Attack Surface Management allows security teams to operationalize intelligence

Limelight Layer0 Security protects against malicious website attacks

Cynamics launches cloud NDR to strengthen network monitoring and detection capabilities

UEFI firmware vulnerabilities affecting Fujitsu, Intel and more discovered

FBI Confirms It Bought Spyware From Israel’s NSO Group

Keepit for Azure AD offers protection against accidental deletions and ransomware

Qualys minimizes vulnerability risk for organizations with new remediation feature

Gretel’s privacy engineering toolkit guards synthetic data against adversarial attacks

PingOne DaVinci provides no-code identity orchestration capabilities for enterprises

Juniper Secure Edge empowers customers to protect remote workforces from anywhere

DOD debuts office to help It ‘move faster’ on AI

Linux Legend “maddog” Shares Exclusive Security Insights with LinuxSecurity>

Tell the Copyright Office Who Is Really Affected by Filters

More than $320 million stolen in latest apparent crypto hack

Worried about occasional npm malware scares? They’re more common than you may think

$324 million stolen from blockchain platform Wormhole

CoreStack collaborates with Maureen Data Systems to offer cloud governance for managed services

Contrast Security partners with GitHub to deliver pipeline-native security to developers

Cybellum integrates with Siemens Polarion to drive vulnerability management under one platform

Shoulder surfing: Watch out for eagle‑eyed snoopers peeking at your phone

Sideloading Bill Would Allow ‘Malware, Scams and Data-Exploitation to Proliferate,’ Says Apple

DataRobot hires Debanjan Saha as COO

Aaron Ansari joins RangeForce as CRO

Arctic Wolf acquires Tetra Defense to expand incident readiness solutions

Vaultree joins Global Cyber Alliance to create a safer online community

Anjuna Security expands executive team with four industry executives

Veritas Technologies appoints Lawrence Wong as SVP and CSO

Lockheed Martin names Jay Malave as CFO

DOD health record system still faces cyber, training issues

Water Wars: Japan Focused on Defense Expansion, while U.S. Makes a Soft-Power Push

Remi Poujeaux joins Odaseva as SVP of Innovation

White House cyber office ‘expects to lead’ on workforce strategy

If My Organization Is Mostly in the Cloud, Do I Need a Firewall?

IT Security News Daily Summary 2022-02-02

KP Snacks Left with Crumbs After Ransomware Attack

Google One Disappears From App Store a Day After VPN Launch [Update: Google One is Back in the App Store]

Face ID With a Mask: How It Works and What You Need to Know

Microsoft adds ‘critical’ feature for GitHub security

Facebook Celebrates Data Privacy Day By Recapping Year Of Efforts

WhiteSource Threat Report Reveals Massive Uptick In Cyberattacks Related To JavaScript npm

INKY Completes Email Security Offering With Launch of Outbound Mail Protection

Cato Networks Delivers Instant Visibility and Control of Cloud Application Data Risk

Projects I Support

The wrong data privacy strategy could cost you billions

Why Security Pros Are Frustrated With Cloud Security

Welcome to the Burner Phone Olympics

Cloud-Native Threats in 2022

Russia May Employ Cyberattacks For Destablisation, US Warns

NordVPN and Surfshark announce merger

Purple Teaming Security Management Firm PlexTrac Raises $70 Million

Top cybersecurity leadership challenges and how to solve them

A day in the life of a cybersecurity manager

Google One Disappears From App Store a Day After VPN Launch

Emerging NFT frauds: ‘Wash trading’ and money laundering

Defense industry struggles with capacity, report says

NY spearheads regional, data-driven approach to tracing illegal guns

How agencies propel decision-making with data

Thousands of Data Center Management Apps Exposed to Internet

Threating hunting: Your best defense against unknown threats

Register Today! By Popular Demand, More Entry-Level Cybersecurity Certification Pilot Exam Review Offerings Now Available

Market research & conferencing service Civicom exposed 8TB of Data

Supply-Chain Security Is Not a Problem…It’s a Predicament

Managing Detections is Not the Same as Stopping Breaches

Researcher found an Information Disclosure in the Brave browser

The Flawed Claims About Bias in Facial Recognition

Japan Focused on Defense Expansion, while U.S. Makes a Soft-Power Push

KP Snacks hit with ransomware attack

Orange County Launches Cybercrime Initiative

Sugar Ransomware, a new RaaS in the threat landscape

Cyber Defense Media Group – 10 Year Anniversary – Daily Celebration in 2022

Alphabet Posts Record Results, Announces 20 for 1 Stock Split

TrickBot Gang Uses Template-Based Metaprogramming in Bazar Malware

Report: 75% of security leaders seek to implement edge use cases

Paying for the shift to zero trust

SolarMarker malware spread through advanced SEO poisoning

Fake Influencer Flags Hacking Tactics

The Real-World Impact of the Global Cybersecurity Workforce Gap on Cyber Defenders

Remote code execution vulnerability in Samba due to macOS interop module

Over 100 Million android users fall under Dark Herring Trap

The definition of modern Zero Trust

Elementor WordPress plugin has a gaping security hole – update now

Online Ad Association Fined for Privacy Violation

Metaverse tech could exacerbate today’s privacy problems, says Superset’s Tom Chavez

The evolution of a Mac trojan: UpdateAgent’s progression

Cyberattack on fuel supplier causes supply chain disruption

North Korea Hacked Him. So He Took Down Its Internet

German Petrol Company Oiltanking Suffers Cyberattack

Salt Security brings API security to the channel

AI-powered tools to fend off ransomware attacks

Tribal broadband effort gets $1.5 million federal investment

AT&T completes first 5G demonstration for ‘smart warehouse’ effort

Meet CoinStomp: New cryptojacking malware targets Asian cloud service providers

Trend Micro Patches Vulnerabilities in Hybrid Cloud Security Products

Charming Kitten Sharpens Its Claws With PowerShell Backdoor

DMCA-dot-com XSS Flaw Ignored For Over A Year

Notorious Spyware Firm Reportedly Offered Bags Of Cash For Access To US Networks

Samba Fruit Bug Allows RCE, Full Root User Access

Deals: Get Up to $50 Off Apple Watch Series 7 Models on Amazon

The MacRumors Show: Jon Prosser Talks iPhone 14 Design and Controversial Flat-Edged Apple Watch Rumors

UK think tank proposes Online Safety Bill reviewer to keep tabs on Ofcom decisions

Insider Threat Alert as employees take data while leaving a Job

Amazon To Create 1,500 Apprenticeships In UK

Security automation startup Cerby raises $12M to secure non-IT-managed apps

BlackCat ransomware implicated in attack on German oil companies

1,300 Malicious Packages Found in Popular npm JavaScript Package Manager

Finding Vulnerabilities in Open Source Projects

Shadow Sanctions for Immigration Violations

What’s ‘Politicizing’ the 2022 Winter Olympics?

Ransomware Attackers Are The Modern Day Bank Robbers

Alexa Chung’s Twitter Account Hacked By NFT Community

Expert Insights: SAP & Yale Team Up To Promote Diversity In Cybersecurity Hiring

The Moscow Kremlin and the Russian Government Have Estimated the Russian Cryptocurrency Market at $214 Billion

2,77,000 Routers Vulnerable to ‘Eternal Silence’ Assaults via UPnP

Iranian APT MuddyWater Targets Turkish Public and Government Entities

Introduction to Overhide-Ledger and Ledger-Based Authentication

Thousands of Malicious npm Packages Threaten Web Apps

Tennessee Community College Suffers Ransomware Attack

Olympic Athletes Advised by FBI to Bring ‘Burner’ Phones to Beijing

8 Security Dinosaurs and What Filled Their Footprints

Walmart Dissects New ‘Sugar’ Ransomware

TikTok’s Roland Cloutier: How CISOs Can Foster a Culture of Security & Transparency

More Than Half Of Ransomware Attacks Target Three Industries

What You Need to Do Today to Protect Against Account Takeover Attacks

Cloudflare launches paid public bug bounty program

Meet CoinStomp: new cryptojacking malware targets Asian cloud service providers

More than 1,000 malware packages found in NPM repository

Tens of Thousands of Websites Vulnerable to RCE Flaw in WordPress Plug-in

Telegram Gains Better Reactions, Video Stickers, Interactive Emoji, and More

REvil took a hit by Russia’s FSB but may not be shut down yet

Lacework expands capabilities for fixing Log4j flaw

Arid Viper hackers strike Palestine with political lures – and Trojans

Charming Kitten Sharpens Its Claws with PowerShell Backdoor

Announcing the public preview of Microsoft Azure Payment HSM service

FTC To Review Microsoft Activision Buy, As Sony Acquires Bungie

4 Essential Facets of Brand Protection

Passage Emerges From Stealth With Biometric User Authentication Platform

#Enigma2022: Pandemic Misinformation Reveals Challenges for Online Health Information

ESET releases fixes for local privilege escalation bug in Windows Applications

Cato Networks delivers first CASB for instant visibility and control of cloud application data risk

Security Through Obscurity. It Doesn’t Work.

PlexTrac lands $70M to automate mundane tasks for security teams

More than 100,000 Files Containing Student Records Exposed

In 2021, Ransomware Threats were Self-Installed

SureMDM Vulnerabilities Expose Organizations to Supply Chain Attacks

FBI warning: Scammers are posting fake job ads on networking sites to steal your money and identity

Microsoft Defender for Endpoint now spots unpatched bugs in iOS and Android devices

Cloudflare Launches Public Bug Bounty Program

Third of Employees Admit to Exfiltrating Data When Leaving Their Job

Out-of-Control Cybercrime Will Cause More Real-World Harm

New Malware Used by SolarWinds Attackers Went Undetected for Years

WhatsApp Readies Message Reactions for iPhone and Android

Citrix Merges With Tibco In $16.5bn Deal

Samba Patches Critical Flaws That Earned Researchers Big Rewards

FBI Warns of Potential Cyberattacks Targeting 2022 Winter Olympics

Cynet’s Keys to Extend Threat Visibility

Experts warn of a spike in APT35 activity and a possible link to Memento ransomware op

4 Top Cyber Threats to the Finance and Insurance Industries

ESET Patches High-Severity Vulnerability in Windows Applications

FBI warns of scam job listings

Samba Vulnerability Can Trigger RCE and Complete Root User Access

German Fuel Supplier Oiltanking Hit with Cyberattack

How to speed up your computer or laptop

The 2022 Workforce Security Report

CVSS 9.9-Rated Samba Bug Requires Immediate Patching

Samba bug may allow code execution as root on Linux machines, NAS devices (CVE-2021-44142)

FBI Urges Olympic Athletes To Use Burner Phones

Scottish Agency Still Recovering from 2020 Ransomware Attack

Ninety Percent of Security Leaders Warn of Skills Shortage

Man Who Duped Apple into Replacing Fake iPhones for Authentic Devices Worth $1 Million Convicted and Sentenced

DMCA-dot-com XSS vuln reported in 2020 still live today and firm has shrugged it off

How To Ensure Your Kubernetes Cloud OS Security

Google Patches 27 Vulnerabilities With Release of Chrome 98

Business leaders are confident in their defences, despite over half falling victim to ransomware

How Dangerous Is Log4Shell and How it Affects the Java Industry?

Build your own Android security product

The Samba Vulnerability: What is CVE-2021-44142 and How to Fix It

Experts found 23 flaws in UEFI firmware potentially impact millions of devices

68K People Who Received Services from Advocates were Affected by Data Theft

How to measure security efforts and have your ideas approved

What are real organisations doing with zero trust?

Q4 2021 Threat Report | Avast

Dozens of Security Flaws Discovered in UEFI Firmware Used by Several Vendors

Two initiatives that can move the needle for cybersecurity in 2022

Hacker Group ‘Moses Staff’ Using New StrifeWater RAT in Ransomware Attacks

Top concerns for operating cloud-native technologies

Product showcase: Cybellum’s Product Security Lifecycle Platform

Cyber Attack affects fuel supply in Germany

NSO Group of Pegasus Spyware wanted to access global signaling network

Rush to remote work left sysadmins struggling to keep businesses safe

Critical Bug Found in WordPress Plugin for Elementor with Over a Million Installations

What is driving NaaS adoption?

Persistent data breaches fueling developer interest in cybersecurity

Immutability Specialist Codenotary Now Offers Trusted Software Supply Chain Assurance in a Fast, Easy, Inexpensive Cloud

No Excuses: Get Your (ISC)² Certification Done in 2022

Help Shape The CSSLP Exam

Three ways banks can ensure a sustainable future

Stories from the SOC – Inactive Account Exploitation

Automotive cybersecurity market size to reach $5.3 billion by 2026

Forescout Acquires Healthcare Cybersecurity Firm CyberMDX

Cymulate Amplify helps companies eliminate critical security blind spots

DrawnApart – A New Fingerprinting Technique Used to Track Your Activities Online

Guardsquare extends protection offering for Flutter to prevent tampering and reverse engineering

Cato CASB protects enterprises against data breach and cloud-delivered threats

GuidePoint Security unveils Zero Trust Workshops to improve zero trust adoption for customers

RIPTA Data Breach Affected About 22,000 People

Quantifind Graphyte platform now available on Microsoft Azure

Picus Security joins MISA to protect critical data and assets against cyber attacks

Eseye and Armis launch a solution to secure connected devices on cellular networks

Nucleus Security partners with Mandiant to accelerate security and risk decision-making for organizations

Accenture names Manish Sharma as COO and Yusuf Tayob as Group Chief Executive of Operations

Talon Cyber Security raises $43 million to support the high demand for secure hybrid work

Pixm raises $4.3 million to protect enterprises from phishing attacks

Cengage Group acquires Infosec to expand into the cybersecurity professional training market

Update now: Samba prior to 4.13.17 hit with remote root code execution bug

Secure Web Browsers Tackle Ransomware, Insider Threat in Enterprises

Noname Security appoints Filip Verloy as Technical Evangelist for EMEA

Eric Guerin joins Skyworks Solutions Board of Directors

SecurID names Laura Marx as CMO

Cadence appoints Mary Louise Krakauer to Board of Directors

Joe Sexton joins Aqua Security Board of Directors