Cyber Security TLDR: Recent Episodes
Jon Good
Saving you valuable time by providing the "Too Long Didn't Read" summary of Cyber Security topics and news.
For years companies have tried to avoid facing accountability for their lack of cyber security. Unfortunately for them, the increase in cyber attacks has dramatically increased the spotlight on inadequate practices and the SEC is going to do something about it. Similar to what we saw with the Sarbanes-Oxley Act, companies are going to find themselves in hot water if they continue to ignore cyber security implications of their actions.
Join me in this video as we talk about a recent article regarding the SEC’s interest in forcing companies to add the CISO role to the board. This is a topic that could impact companies and Cyber Security professionals around the world.
Article: https://www.forbes.com/sites/bobzukis/2022/04/18/the-sec-is-about-to-force-cisos-into-americas-boardrooms/?sh=d2c286768a90
This episode provides a recap of Cyber Security news with expert analysis.
TOP HEADLINES:https://www.bleepingcomputer.com/news/security/new-borat-remote-access-malware-is-no-laughing-matter/
https://www.theregister.com/2022/04/01/nsa_employee_secret_data_leak/
https://threatpost.com/cyberattackers-ups-backup-power-critical-environments/179169/
https://www.theverge.com/2022/4/3/23008658/data-leak-russian-delivery-app-dining-habits-secret-police-yandex-food
https://therecord.media/state-department-launched-new-cyber-bureau/
https://www.cyberscoop.com/debate-u-s-cyber-command-lose-cyber-ops-authorities/
https://www.bleepingcomputer.com/news/legal/germany-takes-down-hydra-worlds-largest-darknet-market/
https://therecord.media/doj-charges-russian-national-with-operating-worlds-largest-darknet-market/
https://www.cybersecurity-insiders.com/anonymous-leaks-all-personal-details-of-russian-soldiers-invading-ukraine/?utm_source=feedly&utm_medium=rss&utm_campaign=anonymous-leaks-all-personal-details-of-russian-soldiers-invading-ukraine
https://www.cyberscoop.com/war-crimes-phishing-attempts-russia-ukraine/
https://www.securityweek.com/cashapp-says-ex-employee-stole-customer-stock-trading-data
https://www.cyberscoop.com/russian-botnet-disrupted-garland-doj/
https://www.theverge.com/2022/4/5/23012046/twitter-prisoner-of-war-pow-photos-rules-russian-government-accounts?scrolla=5eb6d68b7fedc32c19ef33b4
https://www.wsj.com/articles/hackers-stole-more-than-600-million-in-crypto-laundering-it-is-the-tricky-part-11649237401?mod=djemalertNEWS
https://www.wsj.com/articles/apps-with-hidden-data-harvesting-software-are-banned-by-google-11649261181?mod=djemalertNEWS
https://threatpost.com/attackers-whatsapp-voice-message/179244/
https://www.cyberscoop.com/chinese-hackers-india-power-grid-recorded-future-red-echo/
https://www.bbc.com/news/technology-61009163
CAREERS:https://www.darkreading.com/edge-articles/accelerating-onto-the-on-ramp-for-cybersecurity-jobs
VULNERABILITIES:https://threatpost.com/apple-rushes-out-patches-0-days-macos-ios/179222/
https://securityaffairs.co/wordpress/129784/apt/deep-panda-fire-chili-rootkit.html
https://www.darkreading.com/application-security/vulnerable-spring-framework-instances-estimated-at-possibly-millions
https://www.helpnetsecurity.com/2022/04/05/spring4shell-exploited/
https://www.bleepingcomputer.com/news/hardware/amd-confirms-gpu-driver-bug-overclocks-cpus-without-permission/
https://securityaffairs.co/wordpress/129942/hacking/cve-2022-22292-hack-samsung-android-devices.html
https://www.theregister.com/2022/04/07/adobe_cloud_malware/
OTHER NEWS:https://grahamcluley.com/trezor-wallets-hacked-dont-be-duped-by-phishing-attack-email/
https://www.bleepingcomputer.com/news/security/hackers-breach-mailchimps-internal-tools-to-target-crypto-customers/
https://techcrunch.com/2022/04/04/q1-crypto-losses-spike-695-on-year-following-massive-hacks/
https://www.csoonline.com/article/3655637/upstart-crime-site-woos-raid-forums-orphans.html
https://www.bleepingcomputer.com/news/technology/russians-bypass-website-blocks-to-access-western-news-sources/
https://www.theguardian.com/technology/2022/apr/01/china-accused-of-launching-cyber-attacks-on-ukraine-before-russian-invasion
https://www.infosecurity-magazine.com/news/cadbury-warns-of-easter-egg-scam/
https://www.zdnet.com/article/github-now-scans-for-secret-leaks-in-push-workflows/#ftag=RSSbaffb68
https://www.bleepingcomputer.com/news/security/microsoft-adds-on-premises-exchange-sharepoint-to-bug-bounty-program/
https://www.helpnetsecurity.com/2022/04/05/cyberattacks-healthcare-providers/
https://www.engadget.com/windows-11-file-explorer-tabs-cloud-based-redesign-154512479.html
https://www.bleepingcomputer.com/news/security/malicious-web-redirect-service-infects-16-500-sites-to-push-malware/
https://www.zdnet.com/article/israeli-officials-are-being-spied-on-by-aridviper-hackers/
https://www.zdnet.com/article/zoom-awards-1-8-million-in-bug-bounty-rewards-over-2021/
Cyber Security News // Weekly Recap (03/27/22 to 04/02/22)
MAJOR HEADLINES:
- https://www.bleepingcomputer.com/news/security/okta-we-made-a-mistake-delaying-the-lapsus-hack-disclosure/
- https://www.theregister.com/2022/03/25/honda_civic_hack/
- https://www.theregister.com/2022/03/26/lumu-ransomware-precursor-malware/
- https://www.forbes.com/sites/thomasbrewster/2022/03/28/huge-cyberattack-on-ukrtelecom-biggest-since-russian-invasion-crashes-ukraine-telecom/?sh=6329284b7dc2
- https://theintercept.com/2022/03/28/google-russia-ukraine-war-censorship/
- https://www.zdnet.com/article/ukraine-takes-out-five-bot-farms-spreading-panic-among-citizens/#ftag=RSSbaffb68
- https://www.infosecurity-magazine.com/news/yandex-is-sending-ios-users-data/
- https://www.bleepingcomputer.com/news/security/hacked-wordpress-sites-force-visitors-to-ddos-ukrainian-targets/
- https://www.cyberscoop.com/biden-fiscal-2023-budget-request-civilian-agencies-cybersecurity/
- https://arstechnica.com/information-technology/2022/03/lapsus-and-solar-winds-hackers-both-use-the-same-old-trick-to-bypass-mfa/
VULNERABILITIES:
- https://www.bleepingcomputer.com/news/security/critical-sophos-firewall-vulnerability-allows-remote-code-execution/
- https://www.securityweek.com/google-issues-emergency-fix-chrome-zero-day
- https://blogs.cisco.com/security/emotet-is-back
- https://www.zdnet.com/article/log4shell-exploited-to-infect-vmware-horizon-servers-with-backdoors-crypto-miners/#ftag=RSSbaffb68
- https://www.bleepingcomputer.com/news/security/wyze-cam-flaw-lets-hackers-remotely-access-your-saved-videos/
OTHER NEWS:
- https://securityaffairs.co/wordpress/129502/hacking/cisa-known-exploited-vulnerabilities-catalog-66.html
- https://www.bleepingcomputer.com/news/microsoft/new-windows-security-feature-blocks-vulnerable-drivers/
- https://www.npr.org/2022/03/27/1088140809/fake-linkedin-profiles
- https://www.infosecurity-magazine.com/news/ransomware-attacks-soar-100-2021/
- https://isc.sans.edu/diary/rss/28492
- https://www.securitymagazine.com/articles/97321-1-in-4-employees-who-fell-victim-to-cyberattacks-lost-their-jobs
- https://www.infosecurity-magazine.com/news/dental-upi-shared-patient-data/
Cyber Security News // Weekly Recap (03/20/22 to 03/26/22)
UKRAINE & RUSSIA CONFLICT:
- https://www.cyberscoop.com/satellite-cybersecurity-cisa-fbi-ukraine/
- https://www.darkreading.com/risk/white-house-warns-of-new-intel-on-russia-mulling-cyberattack-options-against-us
- https://www.csoonline.com/article/3654298/developer-sabotages-own-npm-module-prompting-open-source-supply-chain-security-questions.html
- https://www.bleepingcomputer.com/news/security/more-conti-ransomware-source-code-leaked-on-twitter-out-of-revenge/
- https://www.reuters.com/technology/meta-asks-russian-court-dismiss-proceedings-extremism-case-reports-2022-03-21/
- https://securityaffairs.co/wordpress/129382/hacktivism/anonymous-hacked-nestle-leaked-data.html?utm_source=feedly&utm_medium=rss&utm_campaign=anonymous-hacked-nestle-leaked-data
- https://threatpost.com/russia-cyberattacks-us-infrastructure/179037/
- https://www.msn.com/en-us/news/world/israel-blocked-ukraine-from-getting-potent-pegasus-spyware/ar-AAVpB74
- https://www.infosecurity-magazine.com/news/west-blocks-russias-weather-data/
- https://securityaffairs.co/wordpress/129431/hacktivism/anonymous-hacked-central-bank-of-russia.html
- https://www.zdnet.com/article/mustang-panda-hacking-group-takes-advantage-of-ukraine-crisis-in-new-attacks/
LAPSUS$ ATTACKS:
- https://www.cybersecurity-insiders.com/lapsus-ransomware-attack-on-okta-leads-to-a-data-breach/?utm_source=feedly&utm_medium=rss&utm_campaign=lapsus-ransomware-attack-on-okta-leads-to-a-data-breach
- https://www.darkreading.com/attacks-breaches/okta-says-366-customers-impacted-via-third-party-breach
- https://www.bleepingcomputer.com/news/microsoft/lapsus-hackers-leak-37gb-of-microsofts-alleged-source-code/
- https://www.theverge.com/2022/3/22/22991409/lapsus-microsoft-security-windows-source-code
- https://techcrunch.com/2022/03/24/london-police-lapsus-arrests/
OTHER NOTABLE ATTACK TTPS:
- https://thehackernews.com/2022/03/new-browser-in-browser-bitb-attack.html
- https://www.darkreading.com/attacks-breaches/threat-actor-using-unique-attack-chain-to-drop-backdoor-in-new-phishing-campaign
- https://www.bleepingcomputer.com/news/security/hackers-steal-from-hackers-by-pushing-fake-malware-on-forums/
- https://threatpost.com/deadbolt-ransomware-qnap-again/179057/
- https://www.bleepingcomputer.com/news/security/north-korean-hackers-exploit-chrome-zero-day-weeks-before-patch/
CYBER CAREERS & EDUCATION:
- https://www.protocol.com/bulletins/microsofts-cybersecurity-skilling-initiative-is-going-global
- https://www.darkreading.com/remote-workforce/pandemic-leaves-firms-scrambling-for-cybersecurity-specialists
OTHER CYBER NEWS:
- https://www.infosecurity-magazine.com/news/cloudbased-email-threats-surge-2021/
- https://www.infosecurity-magazine.com/news/ftc-cafepress-data-cover-up/
- https://www.theverge.com/2022/3/20/22988183/telegrams-ban-brazil-lifted-president-bolsonaro
- https://gizmodo.com/scripps-national-spelling-bee-website-hacked-1848669629
- https://www.cnet.com/tech/computing/internet-crime-cost-people-more-than-6-9b-in-2021-fbi-says/
- https://www.infosecurity-magazine.com/news/ransomware-encrypts-100k-files/