SBS CyberSecurity - In The Wild 206

 

In The Wild - CyberSecurity Newsletter Welcome to the 206th issue of In The Wild, SBS' weekly CyberSecurity newsletter. The objective of this newsletter is to share threat intelligence, news articles that are relevant, new and updated guidance, and other information to help you make better cybersecurity decisions. Below, you will find some of the latest-and-greatest news stories, articles, videos, and links from the past week in cybersecurity. Some of the following stories have been shared by consultants, others by the SBS Institute, and others yet simply been found in the far corners of the internet. We hope you find the following stories relevant, interesting, and – most of all – useful. Enjoy. Follow SBS CyberSecurity on Social Media for more articles, stories, news, and resources!           {PRESS RELEASE} SBS CYBERSECURITY ANNOUNCES THE PASSING OF CHAIRMAN AND CEO SBS CyberSecurity Aaron Gamewell, Chairman and CEO of SBS CyberSecurity, passed away Wednesday, January 13th, 2021 in his hometown of Little Rock, Arkansas after a courageous battle with cancer. Read Here »   Hacker Hour: 7 Steps to Build and Incident Response Playbook SBS Educational Resources Join SBS as we walk through the seven steps to creating an Incident Response Playbook tailored to your organization. Read Here »   SolarWinds: What Hit Us Could Hit Others Krebs on Security New research into the malware that set the stage for the megabreach at IT vendor SolarWinds shows the perpetrators spent months inside the company’s software development labs honing their attack before inserting malicious code into updates that SolarWinds then shipped to thousands of customers. Read Here »   If FireEye And The U.S. Government Can Be Hacked, What About Me? Forbes Remembering that you are most likely to fall prey to a common-variety attack, this is a good time to review 7 things that you should be doing to protect your organization. Read Here »   Microsoft warns of incoming Windows Zerologon patch enforcement BleepingComputer Microsoft today warned admins that updates addressing the Windows Zerologon vulnerability will transition into the enforcement phase starting next month. Read Here »   Do you know which SBS Institute Certification Programs are coming up? Check out the Certification Calendar and share with your clients. Find Out Here! » Ransomware attacks now to blame for half of healthcare data breaches ZDNet Almost half of data breaches at hospitals were because of ransomware attacks – and those attacks could've been prevented with timely patching. Read Here »   The Before, During, and After of Successful Enterprise Incident Response CPO Magazine The sophistication and frequency of cyberattacks is increasing every day. In this year alone, major hotel chains MGM and Marriott suffered huge data breaches and dumps. Read Here »   NSA advises companies to avoid third party DNS resolvers BleepingComputer The US National Security Agency (NSA) says that companies should avoid using third party DNS resolvers to block threat actors' DNS traffic eavesdropping and manipulation attempts and to block access to internal network information. Read Here »   5 Common Mistakes Managers Make, According to Their Workers Inc. Over the past five years, I have conducted several workplace surveys to get to the bottom of what mistakes managers make more frequently than others. Read Here » 10 Other Interesting Links From This Week There were too many fantastic reads from this past weeks' worth of cybersecurity and technology news, so here are a few additional quick-hit links for your reading pleasure:      Krebs on Security: Microsoft Patch Tuesday, January 2021 Edition      Krebs on Security: Ubiquiti: Change Your Password, Enable 2FA      ZDNet: Phishing warning- These are the brands most likely to be impersonated by crooks, so stay alert      ZDNet: Cisco says it won't patch 74 security bugs in older RV routers that reached EOL      ThreatPost: Cloud Attacks Are Bypassing MFA, Feds Warn      Harvard Business Review: Cybersecurity Insurance Has a Big Problem      The Hacker News: Joker's Stash, The Largest Carding Marketplace, Announces Shutdown      The Hacker News: Authorities Take Down World's Largest Illegal Dark Web Marketplace      CPO Magazine: Proposed New FinCEN Rules for Crypto Wallets      The New York Times: Lost Passwords Lock Millionaires Out of Their Bitcoin Fortunes