June 23, 2023

• Cops Still Hide the Fact that they are Intercepting Cell Calls
• China is Exploiting VMWare Zero-Day
• Apple Releases Patches For More Actively Exploited Zero-Day Flaws in iOS, macOS and Safari
• SEC Says SolarWinds CFO, CISO Violated Securities Laws
• Lawmakers Are Considering Even More Restrictions on Use of FISA 702 Database
• Google to Give $20 Million for Free Cybersecurity Clinics Across the Country
• Fayetteville, AR. Hit By Cyberattack
• Law Firm Bryan Cave Loses Information on 50,000 Chips Ahoy Cookies Employees

Security News for the Week Ending June 23rd, 2023

This week’s news bites: Western Digital blocks unpatched systems from accessing their cloud,
FTC sues Amazon over dark patterns, surprise: companies don’t always reveal breaches, DNA
testing company lied about dumping samples and the largest public pension fund in US affected
by MOVEit breach.

Read the details here.

If you are concerned about your incident response program, your strategy for breach
disclosure, your desire to stay out of prison, and are not sure if your program is up to the
task, please contact us.

Mitch

www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com

Mitch@CyberCecurity.com

June 16, 2023

• CISA Issues Binding Operational Directive 2 for This Year (BOD 23-02)
• Researchers Say Owners of Zyxel Firewalls Should Assume Compromised if Not Already Patched
• Microsoft Rolls Out Patches in Azure Bastion and Container Registry
• Progress Telerik Vulnerability Impacts Several Federal Agencies
• Bipartisan Bill Would Prohibit Export of US Data to Unfriendly Countries
• Federal Acquisition Regulation Bans Contractor Having TikTok Installed on Employee Owned (BYOD) Devices Used in Support of Contract
• Second, Third Bugs Affect All Versions of MOVEit Bulk File Transfer Software
• The Very Real Impact of Ransomware

Security News for the Week Ending June 9th, 2023
News bites for the week ending June 16, 2023: White House cyber official to depart, UPDATE:
Atomic Wallet hack now netted $100 million, feds side with carmakers against consumers’ right
to repair, crypto exchange decides to leave U.S. rather than being regulated and legal tech firm
Casepoint breached – hackers get terabytes of data.

Read the details here.

If you want to be proactive about your company’s security and need assistance
implementing CISA’s Binding Operational Directive 23-02 (see first alert above) for your
company, please contact us.

Mitch

www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com

Mitch@CyberCecurity.com

June 11, 2023

• Feds Issue Ban on TikTik on Contractors’ Employee Owned Devices
• Feds Go After Coinbase Next
• New FTC Safeguards Rule in Effect Now
• Guide to Securing Remote Access Software
• Scrubs & Beyond leave 400 GB of Data Exposed – Stays Mum on Breach
• The Island of Martinique Hit by Cyberattack Which Disrupts Government Services
• Enzo Biochem Confirms Breach of 2.5 Million Client’s Data

Security News for the Week Ending June 9th, 2023
News bites for the week ending June 9, 2023: feds remind folks that money stored in fintech
platforms like eBay are at risk, crypto catastrophe- Atomic Wallet is next, non-competes may be
unenforceable, Putin declares martial law – deep fakes hit Russia and counterfeit network gear –
its real.

Read the details here.

It appears that Scrubs & Beyond is not prepared even to deal with a call that says your
jewels are exposed. If you are concerned that you might not be fully prepared to respond
effectively to an incident, please contact us.

Mitch

www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com

Mitch@CyberCecurity.com

June 4, 2023

• Judge Says Customs Needs a Search Warrant to Search US Citizen’s Phone at the Border
• Millions of Gigabyte PC Motherboards Have Vulnerable Backdoor
• Microsoft to Require SMB Signing to Prevent NTLM Relay Attacks
• Microsoft Finds MacOS Bug to Bypass System Integrity Protection (SIP)
• Twitter Pulls Out of EU’s Voluntary Pact Against Disinformation – Except
• Judge Bans AI-Generated Filings in Court Because it Just Makes Stuff Up
• The Long Road to Ransomware Recovery, Dallas Version
• MCNA Dental Ransomware Attack Affects 8.9 Million
• After the Horse is Out of the Barn and the Barn is Burned to the Ground, Toyota Says They will Improve Security
• Russia Accuses US of Spying on Them by Hacking iPhones

News bites for the week ending June 2, 2023: Dutch data protection authorities (DPA) are
looking into alleged Tesla data breach, Suffolk County uses ransomware attack to bypass
legislature, spyware maker NSO gets new owner, shocker: you don’t get what you don’t pay for
and Russia wants to replace iPhones with home-grown Aurora OS phones.

Read the details here.

If you are concerned that you might not be prepared to respond, effectively, to a
ransomware attack, please contact us.

Mitch

www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com

Mitch@CyberCecurity.com