September 17, 2023
- Israeli Spyware Infects Using Ads
- SatelliteMap.Space Says Starlink Lost Over 200 Satellites in Two Months
- Signal Open Source Messaging App Adopts New Key Agreement Protocol
- SEC Continues Enforcement of Crypto Industry-Finds Another NFT to be a Security
- Apple is Getting into the Zero-Day Business
- FreeDownManager.Org Distributed Linux Malware for 3+ Years
- Crypto Lovers Fund North Korea to the Tune of $250 Million in 3 Months
- DoJ False Claims Act (FCA) Prosecution Nets $377 Million from Booz – One of Several
- UK Parliament Passes Online Safety Bill
- EU Fines TikTOk 345 Million Euros for Child Settings
- MOVEit (Cl0p) Ransomware Count
- Human Error, Bad Design – The Result is the Same – 38 TB of Private Data Leaked by Microsoft
Security News for the Week Ending September 22nd, 2023
This week’s news bites: Dallas Mavericks owner and crypto guru lost $1m to crypto scam,
Google won’t bargain with YouTube music worker’s union, MGM restores operations 10 days
after being hacked, Dallas said attack started with stolen account and Cisco buys Splunk for
$28 billion
Read the details here.
Is your helpdesk immune from being socially engineered? When was the last time that
you tested that? If you can’t confidently say that hackers won’t succeed, maybe you
need us to review the state of your universe. Please contact us.
Mitch
September 17, 2023
- New Cyber Insurance Policy Amendment
- Say Goodbye to Third-Party Cookies as Chrome Rolls Out Privacy Sandbox
- On Patch Tuesday Apple, Adobe, Google and Microsoft Patch Zero-Days
- California Passes the DELETE Act
- Courts Allow Pixel Tracking Lawsuit Against Meta to Proceed
- President Signs EO Restricting More Investments in Tech in China
- Manchester Police Data Stolen Following Ransomware Attack on Supplier
- Will the FDA Actually Regulate Medical Device Makers
- MOVEit (Cl0p) Ransomware Count
- MGM Resorts Shuts Down Systems After Cyberattack
- Software Tool Maker Retool, Used by Crypto Devs, Hit by Social Engineering Attack
- Crypto Exchange CoinEx Suspends All Withdrawals After Breach
Security News for the Week Ending September 15th, 2023
This week’s news bites: Ex-NSA director General Alexander’s security company near
bankruptcy, do not assume Twitter is secure – it was never designed to be that, MGM hackers
say they abused Okta client-side software agent, Google agrees to pay $93 million to make Cali
location lawsuit go away and Binance CEO resigns after 3 months on the job.
Read the details here.
Need help sorting out how to protect your company in an AI driven world? Contact us.
Mitch
www.CyberCecurity.com
September 10, 2023
- CEO of Blockchain Capital Loses $6 Million to Cyber Attack
- Colorado Consumer Privacy Act Thoughts
- Service Desks Under Attack – Requires Extra Training and Better Procedures
- Open Source Distributed Platform to Protect Communications
- More Apple Zero Days
- Some House Republicans Complain About New SEC Breach Disclosure Rules
- US Emulates Communist China in Efforts to Control Tech Platform
- UK Drops (Sort Of) Requirement to Scan Encrypted Messages for Illegal Content
- Cyber Safety Review Board – Lapsus$ “Activities”
- MOVEit (Cl0p) Ransomware Count
- UK Firm Using Windows 7 Hit by LockBit-Exfiltrated 10 GB of Sensitive Military Data
- Golf Club Maker Callaway Says 1 Million Affected by Breach
- Freecycle Confirms Breach of 7 Million Users
Security News for the Week Ending September 8th, 2023
This week’s news bites: want a .US domain? Just lie. Well, this qualifies as super
embarrassing. Bad week for crypto scammers, good one for the rest of us. CISA says they are
wrapping up the cyber incident reporting guide ahead of schedule and is that encrypted app
really secure?
Read the details here.
In light of hackers attacking Okta customers, are you sure your help desk can repel a
similar attack? Need help training your help desk – contact us.
Mitch
www.CyberCecurity.com
September 1, 2023
- Polish Trains Hackable for $30 – What Else is Easily Hackable?
- Late to the Party but Still Coming – Gemini
- Seeing Windows BLUE SCREENS OF DEATH?
- Breach Notification Timelines Get Shorter and Shorter
- Judge Blocks Texas and Arkansas Government ID Requirement to Access Adult Websites
- MOVEit (Cl0p) Ransomware Count
- Not a Good Year for Ernst & Young (E&Y) Cybersecurity
- Prince George’s County, MD Hit by Cyberattack – Hackers Already Selling the Data
- Rapattoni, MLS Hosting Provider in 12 Markets, Hit by Ransomware
- University of Michigan Shuts Down Systems the Night Before Classes Start
Security News for the Week Ending September 2nd, 2023
This week’s news bites: what does $50,000 in iPads get you, the FBI is getting good at this,
Apple releases the most UNlocked iPhone ever – to security researchers, reminder, Windows 11
will force-update if you are running 21H2 – next month and the US, like China, is collecting DNA
on up to 10 percent of the population.
Read the details here.
Vendor breaches continue to dominate the news and likely who will get sued is you. You
can additionally sue your vendor, but it can take years to recover any money. A better
plan is to do a better job of managing vendor risk. Need help in this area? Please
contact us.
Mitch
www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com
