Today's Headlines and the latest #cybernews from the desk of the #CISO:
BillQuick Billing Software Exploited to Hack U.S. Engineering Company
Millions of Android users targeted in subscription fraud campaign
New Attack Lets Hackers Collect and Spoof Browser's Digital Fingerprints
Conti Ransom Gang Starts Selling Access to Victims US State Department Sets Up Cyber Bureau, Envoy Amid Hacking Alarm
Story Links:
https://www.securityweek.com/billquick-billing-software-exploited-hack-us-engineering-company
https://www.bleepingcomputer.com/news/security/millions-of-android-users-targeted-in-subscription-fraud-campaign/
https://thehackernews.com/2021/10/new-attack-let-attacker-collect-and.html
https://krebsonsecurity.com/2021/10/conti-ransom-gang-starts-selling-access-to-victims/#more-57318
https://www.securityweek.com/us-state-department-sets-cyber-bureau-envoy-amid-hacking-alarm
“The Microsoft Doctrine” by James Azar now on Substack https://jamesazar.substack.com/p/the-microsoft-doctrine
VeteraNovember is back!! Apply now to be a featured guest on the show https://mailchi.mp/cyberhubpodcast/93rzgm5a7n
The Practitioner Brief is sponsored by:
KnowBe4: https://info.knowbe4.com/phishing-security-test-cyberhub
Find James Azar Host of CyberHub Podcast, CISO Talk, Goodbye Privacy, Tech Town Square, and Other Side of Cyber
James on Linkedin: https://www.linkedin.com/in/james-j-azar/
James on Parler: @realjamesazar
Telegram: CyberHub Podcast
Locals: https://cyberhubpodcast.locals.com
Sign up for our newsletter with the best of CyberHub Podcast delivered to your inbox once a month: http://bit.ly/cyberhubengage-newsletter
Website: https://www.cyberhubpodcast.com
Youtube: https://www.youtube.com/channel/UCPoU8iZfKFIsJ1gk0UrvGFw
Facebook: https://www.facebook.com/CyberHubpodcast/
Linkedin: https://www.linkedin.com/company/cyberhubpodcast/
Twitter: https://twitter.com/cyberhubpodcast
Instagram: https://www.instagram.com/cyberhubpodcast
Listen here: https://linktr.ee/cyberhubpodcast
The Hub of the Infosec Community.
Our mission is to provide substantive and quality content that’s more than headlines or sales pitches. We want to be a valuable source to assist those cybersecurity practitioners in their mission to keep their organizations secure.