Security News for the Week Ending May 22, 2022

This week’s security news includes: When is your iPhone really off? SF police use autonomous cars for surveillance Two business grade Netgear routers are vulnerable and can’t be fixed Home title fraud monitoring And now we have five – zero-days for Apple so far this year Microsoft end-of-life’s Windows Server 20H2 Judge okays first cryptocurrency…

Security news for the Week Ending May 15, 2022

This week’s security news includes: College closes after 157 years after ransomware attack A really bad idea Ya can’t tell the players without a scorecard Microsoft to offer human-based security services This month’s patch Tuesday NIST plans to ask for comments on updates to Controlled Unclassified Information publications UK Sanctions Russian chip makers Prince Charles…

Security news for the Week Ending May 8, 2022

This week’s security news includes: White House releases orders to deploy quantum computing resistant encryption CISA releases secure cloud business applications (SCBA) technical reference architecture And now there are five – Connecticut joins the club Dark patterns – continued SEC doubles the size of its cryptocurrency fraud unit President signs better cybercrime metrics act NIST…

Security news for the Week Ending May 1, 2022

This week’s security news includes: French fiber cables cut in acts of sabotage Apple launches self-service repair store Google Play Store adds App Data Safety section Microsoft Announces Edge Secure Network Google will now let you remove some PII from their search results Breach reporting: 30 days? 4 days? 6 hours? get ready CFPB to…

Security News for the Week Ending April 17th, 2022

This week’s security news includes: Lakeview Loan Servicing reports breach Police pull over driverless vehicle – not sure what comes next Hackers are exploiting Spring4Shell to spread Mirai NIST plans to update the NIST Cybersecurty Frameword Cisco patches wireless controller login bypass Apache says Struts 2 patch – well not really patched Login.gov to hold…

Security News for the Week Ending April 10th, 2022

This week’s security news includes: ATMs and medical devices at risk due to Access:7 bugs NSA says OpenSSL vulnerability can ‘definitely be weaponized’ Windows Autopatch coming this summer PHP package manager PEAR had critical flaw undiscovered for 15 years VMWare patches Spring4Shell RCE flaw in multiple products Senate confirms Maj. Gen. Maria Barrett as head…

Security News Update for the Week Ending April 3, 2022

This week’s security news includes: Kaspersky deemed national security threat Administrator at Yale admitted to stealing tens of millions of dollars – insider threat on steroids Opt-out from major credit bureaus selling your data Hacked WordPress sites make visitors DDoS Ukrainian targets SonicWall releases critical patch for some of its firewalls Gitlab patches critical account…

Security News Update for the Week Ending March 6, 2022

This week’s news items include: Russian hacking group hacked by Ukraine NSA Technical Report on Network Infrastructure Security CISA releases another 95 patches to install now Russia prepares to disconnect from the Internet Amex suspends operations in Russia and Belarus Samsung is suspending shipments into Russia Layering network security through segmentation Toyota shuts down 14…

Security News Update for the Week Ending February 27, 2022

This week’s news items includes: Sextortion is on the Rise Again FBI Guide on Lessening Digital Exhaust Watchguard Issues Patch for Cyclops Blink Vulnerability FCC Proposes Largest Ever Fine for Robocalling – $45 Million Does Your Identity Theft Protection Policy Cover Theft of Cryptocurrency Assets? Getting Your SOC 2 as a SaaS Company 7 Steps…

Security News for the Week Ending February 13, 2022

This week’s items include: Puma-Kronos Breach Continues Focus on Third Party Risk Management WSJ Reports that Two Months After Log4j, Developers are Still Downloading Thousands of Packages a Day Vulnerable to Attack Ford Will Shut Down or Cut Production at 8 North America Plants Due to Lack of Chips Apple Releases Patch for Active Zero-Day…