Security News

1. New infosec products of the week: January 21, 2022   Help Net Security, January 21, 2022
2. The importance of securing machine-to-machine and human-to-machine interaction   Help Net Security, January 21, 2022
3. How do IT leaders plan to overcome remote work security challenges?   Help Net Security, January 21, 2022
4. Cybersecurity industry trends from 2021 bound to shape this year’s threat landscape   Help Net Security, January 21, 2022
5. Exposed records exceeded 40 billion in 2021   Help Net Security, January 21, 2022
6. What is opening EV charging stations to cyberattacks?   Help Net Security, January 21, 2022
7. Cybersecurity market to reach $346 billion by 2027   Help Net Security, January 21, 2022
8. Axonius SaaS Management identifies misconfigurations and data security risks   Help Net Security, January 21, 2022
9. MXDR by Deloitte helps organizations against emerging cyber threats   Help Net Security, January 21, 2022
10. Arcserve updates ShadowXafe and OneXafe Solo to protect evolving data workloads   Help Net Security, January 21, 2022
11. 2FA Bypassed in $34.6M Crypto.com Heist   Threat Post, January 20, 2022
12. Critical Cisco StarOS Bug Grants Root Access via Debug Mode   Threat Post, January 20, 2022
13. Microsoft: Attackers Tried to Login to SolarWinds Serv-U Via Log4j Bug   Threat Post, January 20, 2022
14. Microsoft lists the Windows 10 group policies to avoid   Bleeping Computer, January 20, 2022
15. ‘Anomalous’ spyware stealing credentials in industrial firms   Bleeping Computer, January 20, 2022
16. FBI links Diavol ransomware to the TrickBot cybercrime group   Bleeping Computer, January 20, 2022
17. Egress appoints Laura Probert as CPO   Help Net Security, January 20, 2022
18. Cyberwrite hires Tim Olson as CRO   Help Net Security, January 20, 2022
19. Datadog appoints Sean Walters as CRO and Kerry Acocella as General Counsel   Help Net Security, January 20, 2022
20. Biden Broadens NSA Oversight of National Security Systems   Dark Reading, January 20, 2022
21. (ISC)² Appoints Jon France, CISSP, as Chief Information Security Officer   Dark Reading, January 20, 2022
22. Researchers Discover Dangerous Firmware-Level Rootkit   Dark Reading, January 20, 2022
23. Automating Response Is a Marathon, Not a Sprint   Dark Reading, January 20, 2022
24. Red Cross Hit via Third-Party Cyberattack   Dark Reading, January 20, 2022
25. BrandPost: 5 Lessons Learned from Log4j   CSO from IDG, January 20, 2022
26. BrandPost: Financial Services Malware Just Won’t Die. What to Do About It.   CSO from IDG, January 20, 2022
27. BrandPost: 3 Measures to Stifle the Ransomware Crisis   CSO from IDG, January 20, 2022
28. MoonBounce: the dark side of UEFI firmware   Secure List, January 20, 2022
29. Pervasive Apple Safari Bug Exposes Web-Browsing Data, Google IDs   Threat Post, January 20, 2022
30. Red Cross Begs Attackers Not to Leak Stolen Data for 515K People   Threat Post, January 20, 2022
31. SEC Filing Reveals Fortune 500 Firm Targeted in Ransomware Attack   Threat Post, January 20, 2022
32. US sanctions former Ukrainian official for helping Russian cyberspies   Bleeping Computer, January 20, 2022
33. ProtonMail introduces a new email tracker blocking system   Bleeping Computer, January 20, 2022
34. WordPress plugin flaw puts users of 20,000 sites at phishing risk   Bleeping Computer, January 20, 2022
35. Indonesia's central bank confirms ransomware attack, Conti leaks data   Bleeping Computer, January 20, 2022
36. Biden signs memo to boost US national security systems’ defenses   Bleeping Computer, January 20, 2022
37. Cisco bug gives remote attackers root privileges via debug mode   Bleeping Computer, January 20, 2022
38. New MoonBounce UEFI malware used by APT41 in targeted attacks   Bleeping Computer, January 20, 2022
39. Microsoft fixes Outlook search issues for Windows 10 users   Bleeping Computer, January 20, 2022
40. Crypto.com confirms 483 accounts hacked, $34 million withdrawn   Bleeping Computer, January 20, 2022
41. New SolarWinds Serv-U vulnerability exploited in Log4j-related attacks   Help Net Security, January 20, 2022
42. Enterprises Are Sailing Into a Perfect Storm of Cloud Risk   Dark Reading, January 20, 2022
43. 4 Ways to Develop Your Team's Cyber Skills   Dark Reading, January 20, 2022
44. Cisco's Kenna Security Research Shows the Relative Likelihood of an Organization Being Exploited   Dark Reading, January 20, 2022
45. Cyber Gang Targets Users with Password Expiration Scam   Phish Me, January 20, 2022
46. Verity IT’s Top 5 Data Privacy Tips for 2022   Stay Safe Online, January 20, 2022
47. S3 Ep66: Cybercrime busts, wormable Windows, and the crisis of featuritis [Podcast + Transcript]   Naked Security - Sophos, January 20, 2022
48. Biden memo aims to bolster cybersecurity in national security systems   CSO from IDG, January 20, 2022
49. In Order to Have Good Security Culture, Behaviour Comes First   KnowBe4, January 20, 2022
50. DHL is Now the Most Spoofed Brand in Phishing   KnowBe4, January 20, 2022
51. Ransomware Attacks are Growing in Number, But Not in Sophistication   KnowBe4, January 20, 2022
52. Google Docs Comment Feature is the Key to a New Wave of Phishing Campaigns   KnowBe4, January 20, 2022
53. Half of All Organizations Hit by Ransomware Experience Productivity Loss   KnowBe4, January 20, 2022
54. New STRRAT RAT Phishing Campaign   Fortinet Blog, January 20, 2022
55. Fortinet Scores Highest in Three Use Cases in the 2022 Gartner Critical Capabilities for Network Firewalls Report   Fortinet Blog, January 20, 2022
56. Red Cross Hack Leaks Data Of 515,000 Vulnerable People   Information Security Buzz, January 20, 2022
57. QR Code Scams Are On The Rise, InfoSec Experts Weigh In   Information Security Buzz, January 20, 2022
58. The Aftermath Of Log4j: What Can Be Done To Protect Companies From The Security Implications After Log4j?   Information Security Buzz, January 20, 2022
59. Research: Why Employees Violate Cybersecurity Policies   Harvard Business Review, January 20, 2022