Crooked Bough News Round-up

— One-Third of Black Friday Shoppers Were Bots, Fake Users

 

at 12/3/21 2:30pm

Fake traffic observed on Nov. 26 included malicious scrapers, sophisticated botnets, fake accounts, and click farms.

[Link to media]

— NSO Group Spyware Used to Breach US State Dept. Phones

 

at 12/3/21 2:07pm

At least nine US State Department employee iPhones were targeted with sophisticated spyware developed by the Israeli firm NSO Group.

[Link to media]

— IGI Cybersecurity Introduces CISO Team-as-a-Service

 

at 12/3/21 1:40pm

Service gives customers access to a CISO-led team of practitioners with a variety of skills and expertise.

— How Criminals Are Using Synthetic Identities for Fraud

 

at 12/3/21 11:50am

Organizations must improve their cybersecurity protocols to detect fraudulent identities and make sure they're safeguarding their consumers’ personal information.

[Link to media]

— Logiq.ai Tackles Observability Problem With LogFlow

 

at 12/3/21 10:39am

LogFlow addresses data risks associated with machine data pipelines.

[Link to media]

— USB Devices the Common Denominator in All Attacks on Air-Gapped Systems

 

at 12/3/21 8:19am

A new study of 17 malware frameworks shows threat actors always use USB drives to sneak malware into air-gapped environments and then steal data from there.

[Link to media]

— An Insider's Account of Disclosing Vulnerabilities

 

at 12/3/21 8:00am

Vendors drag their heels when it comes to identifying software vulnerabilities and are often loath to expedite the fixes.

[Link to media]

— Ransomware, Carding, and Initial Access Brokers: Group-IB Presents Report on Trending Crimes

 

at 12/2/21 4:15pm

Report explores cybercrime developments from the second half of 2020 through the first half of 2021.

— Darktrace Reports 30% More Ransomware Attacks Targeting Organizations During the Holiday Period

 

at 12/2/21 4:00pm

Researchers also observed a 70% average increase in attempted ransomware attacks.

— Remote Browser Isolation Stars in Content Protection Role

 

at 12/2/21 3:45pm

The entertainment industry has long had to deal with the challenge of protecting their high-value content and intellectual property. Enter remote browser isolation (RBI).

— Top 5 Reasons to Get 'SASE' With Security

 

at 12/2/21 2:07pm

Proactively updating and integrating technology, and ensuring tight collaboration between IT and security … it's simple, right? Well, not always – especially for organizations with limited resources.

[Link to media]

— Planned Parenthood LA Breach Compromises 400,000 Patients' Data

 

at 12/2/21 12:50pm

The breach, which compromised data such as insurance details and prescription information, took place between Oct. 9 and Oct. 17.

[Link to media]

— Develop 'Foursight' — Keep Your Post-COVID Transformation on Track

 

at 12/2/21 11:53am

For IT organizations, the global health crisis didn't make meeting current and future compliance obligations easier. Here are four content protection focus areas that help the enterprise maintain compliance today, and stay on course for future digital transformation.

— Key Characteristics of Malicious Domains: Report

 

at 12/2/21 10:01am

Newer top-level domains and certain hosting providers are frequent sources of malicious content, while newly registered domains and free SSL certificates are not any more likely than average to be risky, new research shows.

[Link to media]

— When Will a Cloud Infrastructure Heavyweight Launch a SASE?

 

at 12/2/21 9:33am

There's been a veritable gold rush of security vendors getting into secure access service edge. Now will any of the major IaaS vendors enter the market? Rik Turner makes the case.

[Link to media]

— Breaking the Black Mirror and Other Lessons From Day of Shecurity

 

at 12/2/21 8:00am

Diversity brings more varied solutions to major challenges in cybersecurity, just as it does in every other industry.

[Link to media]

— Military Vets Share Lessons That Helped Them Build Infosec Startups

 

at 12/1/21 4:19pm

Startup founders say serving in the military taught them how to defend against cyberattacks and how to build teams. These lessons are serving them well as they run their own companies.

[Link to media]

— APT Groups Adopt New Phishing Method. Will Cybercriminals Follow?

 

at 12/1/21 4:15pm

APT actors from Russia, China, and India have been observed using the RTF-template injection technique that researchers say is poised for wider adoption.

[Link to media]

— Russian Man Sentenced to 60 Months in Prison for Running 'Bulletproof' Hosting for Cybercrime

 

at 12/1/21 3:55pm

Service hosted Zeus, SpyEye, Citadel, Blackhole Exploit Kit malware aimed at US companies and financial institutions.

[Link to media]

— Neustar Security Services Spins Out as Own Company

 

at 12/1/21 3:45pm

The company plans to offer newly integrated services into its Ultra Secure portfolio and expand its sales, marketing, and service capabilities.

[Link to media]

— VMware Carbon Black MDR Helps Analysts Respond to Attacks

 

at 12/1/21 3:18pm

Carbon Black’s new managed detection and response solution monitors endpoints and workloads, freeing up security teams to understand the different types of attacks that might be heading their way.

[Link to media]

As of 12/6/21 2:09am. Last new 12/3/21 3:42pm.