Security News Update for the Week Ending February 27, 2022

This week’s news items includes: Sextortion is on the Rise Again FBI Guide on Lessening Digital Exhaust Watchguard Issues Patch for Cyclops Blink Vulnerability FCC Proposes Largest Ever Fine for Robocalling – $45 Million Does Your Identity Theft Protection Policy Cover Theft of Cryptocurrency Assets? Getting Your SOC 2 as a SaaS Company 7 Steps…

Security News for the Week Ending February 20, 2022

This week’s news items include: Beware when Superbowl ads use QR codes While India bans Chinese apps due to security, the U.S. … Hackers planted fake digital evidence on devices belonging to activists CISA releases list of free cybersecurity tools and services Google Chrome enhanced safe browsing mode Google issues emergency Chrome patch for active…

CMMC 2.1

I don’t think this is what DoD is calling it, but in a public town hall meeting last week they changed the rules again. Defense contractors are just going to have to wait and see how this turns out. In the mean time, there is a very clear path that contractors need to take, so…

Security News for the Week Ending February 13, 2022

This week’s items include: Puma-Kronos Breach Continues Focus on Third Party Risk Management WSJ Reports that Two Months After Log4j, Developers are Still Downloading Thousands of Packages a Day Vulnerable to Attack Ford Will Shut Down or Cut Production at 8 North America Plants Due to Lack of Chips Apple Releases Patch for Active Zero-Day…

Security News for the Week Ending February 6, 2022

This week’s items include: FBI and CIA purchased NSO Group’s Pegasus spyware Microsoft continues to enhance Edge Chromium security Facebook learns that people do care about their privacy and it will cost them $10 B this year FCC revokes China Unicom’s license to operate in the U.S. Kronos is still dealing with the effects of…

Security News for the Week Ending January 30, 2022

DHS says U.S. on heightened alert for Russian cyberattack Apple updates personal safety guide in wake of stalkers using AirTags to track victims Missing MS Intune cert breaks email, VPN on Samsung devices on Android 12 Apple fixes Safari data leak after being outed Apple patches actively exploited iOS security flaw Workers file lawsuits in…

Security News for the Week Ending January 16, 2022

Here is the security news for the week ending January 16, 2022: January 16, 2022 Gettr, the Alt-Tech, Uses Trackers, Features from Facebook and Google Chrome to Limit Access to Private Networks (via browser, finally) Remotely Executable NetUSB Bug Puts Millions of Devices at Risk Ivanti Updates Log4j Security Advisory for Multiple Products NYDFS Delays…