January 30, 2022
- DHS says U.S. on heightened alert for Russian cyberattack
- Apple updates personal safety guide in wake of stalkers using AirTags to track victims
- Missing MS Intune cert breaks email, VPN on Samsung devices on Android 12
- Apple fixes Safari data leak after being outed
- Apple patches actively exploited iOS security flaw
- Workers file lawsuits in wake of Kronos payroll ransomware attack-are you ready?
- Feds release zero trust strategy document for federal agencies
- OpenSubtitles hacked, tells users after 5 months
- Auto parts market Denso hit by ransomware attack
- UEFI BootKit virtually impossible to remove
- News flash: Google tracks your location
- When did you last patch your smart refrigerator?
- Security news bites for the week ending January 28th, 2022
Read the newsletter here
January 23, 2022
- Critical SAP vulnerability allows for supply chain attacks
- US Olympians told to use burner phones in China
- Google details two zero-days in Zoom clients
- It has not been a good couple of months for Zoho
- Court to Europol – delete all that data
- K-12 cybersecurity act signed into law
- Merck awarded $1.4 billion insurance payout over NotPetya
- McMenamins breach affects 12 years of employee data
- Neo-Nazi group Patriot Front has 400 gigabytes of data exposed
- It’s to protect the children
- Governments struggle to deliver secure online services to citizens
- The future of authentication – more secure but more difficult
- Security news bites for the week ending January 21, 2022: (a) Russia arrests some REvil gang members, (b) gas or electric, which is better when you are on a Virginia highway in a blizzard, (c ) Europe wants to create its own DNS infrastructure, (d) more than half of connected medical devices have critical vulnerabilities and (e ) some Russian hackers worried about being arrested.
Read the newsletter here.
January 16, 2022
- Gettr, the Alt-Tech, Uses Trackers, Features from Facebook and Google
- Chrome to Limit Access to Private Networks (via browser, finally)
- Remotely Executable NetUSB Bug Puts Millions of Devices at Risk
- Ivanti Updates Log4j Security Advisory for Multiple Products
- NYDFS Delays Disclosure Requirements for Commercial Financing
- ISPs Unhappy that Apple is Slowing Down Their Snooping
- Software Bill of Materials Good for Business
- More than the Average Breach – Be Afraid and Expect Worse
- Thailand hospital Data Leak Exposes 39 million Records
- Your Valley is Grass
- Side Effect of Ransomware – Albuquerque Jail in Lockdown
- Neenah, Wisconsin Schools Closed Due to Ransomware
- Bad Week in Albuquerque
- The Latest Supply Chain Risk – Your Desk Phone
- The Layers of Effective Endpoint Security
- Researcher Demonstrates How to Melt Power Lines in New York
- Security News Bites for the Week Ending January 14th, 2022: (a) hackers sending malware filled USB sticks in the mail, (b) Norton installs cryptomining software on users’ computers, (c ) White House hosts open source security summit, (d) Canon’s printer DRM comes back to haunt them and (e ) car makers say giving owners data from their cars will embolden sexual predators
Read the newsletter here
January 9, 2022
Here are the titles of items in this week’s Security News Update:
Son of Log4j rears its ugly head
Model warns women to check your belongings after being tracked by Apple AirTag
AMD releases new chip with Microsoft’s Pluton processor
New consumer protection laws in 2022
SonicWall is the most recent vendor to have Y2K22 bug
Over 1,200 man-in-the-middle toolkits available to bypass 2FA
Broward Health loses data on 1,357, 879 people to hackers
Illinois agency that oversees insurance company liquidation hacked for millions
FinalSite ransomware shuts down thousands of school websites
Albuquerque and other Bernalillo county systems down due to ransomware
Apple iOS in the doghouse again
Supply chain attacks are rampant
New attack exploits Microsoft software signing verification
Security news bites for this week including (a) Don’t copy-past commands from a web page, you can get hacked, (b) German chip factory fire could make shortage worse, (c ) CISA says manufacturing at increased threat during pandemic, (d) don’t get sucked into Instagram copyright infringement scams and (e ) cyberattack in space.
Read the newsletter here.
