WEEKLY CYBERSECURITY NEWSLETTER NO: 240
#WeeklyCybersecurityTip: Explore the Security Tools You Use!
1- Regulating DAOs
In August, the US Treasury’s Office of Foreign Assets Control (OFAC) sanctioned the cryptocurrency platform Tornado Cash, a virtual currency “mixer” designed to make it harder to trace cryptocurrency transactions—and a worldwide favorite money-laundering platform. Americans are now forbidden from us…Read more
2- Patch Tuesday in brief – one 0-day fixed, but no patches for Exchange!
Two weeks ago we reported on two zero-days in Microsoft Exchange that had been reported to Microsoft three weeks before that by a Vietnamese company that claimed to have stumbled across the bugs on an incident response engagement on a customer’s network. (You may need to read that twice.) As you pro…Read more
3- Fashion brand SHEIN fined $1.9m for lying about data breach
Chinese company Zoetop, former owner of the wildly popular SHEIN and ROMWE “fast fashion” brands, has been fined $1,900,000 by the State of New York. As Attorney General Letitia James put it in a statement last week: SHEIN and ROMWE’s weak digital security measures made it easy for hackers to shopli…Read more
4- SHARED INTEL: Poll highlights the urgency to balance digital resiliency, cybersecurity
The pace and extent of digital transformation that global enterprise organizations have undergone cannot be overstated. Related: The criticality of ‘attack surface management’ Massive global macro-economic shifts have fundamentally changed the way companies operate. Remote work already had an impact…Read more