F1TYM1

Written by Tim Starks
Apr 21, 2021 | CYBERSCOOP

Google announces upgrades to Google Meet, Amazon is bringing its palm scanner to Whole Foods and Microsoft looks at the effect of video calls on our brains. This is your Daily Crunch for April 21, 2021.

cwick (Chadwick Matlin, deputy editor): Well, a few days and several tons of schadenfreude later, the European Super League is officially dead. If it ever really lived. I’ve asked three of our finest soccer thinkers to join me to discuss what went wrong, and what it tells us about the state of global soccer. Ryan, Grace, Tony, you’re the only ones I want to form a breakaway league with. Tell me what was going through your mind when you first heard the full details of the Super League. (The main highlight for readers: 15 charter teams that would never be relegated from the league and five more that would get in based on performance.)

April 21, 2021 |

2 minute read

Written By

JJ Cranford

Three zero-day vulnerabilities helped an attacker install a backdoor, access files and emails, and move laterally into a target network.

Fraud Management & Cybercrime , Fraud Risk Management , Governance & Risk Management

Written by Shannon Vavra
Apr 21, 2021 | CYBERSCOOP

Students and staff at Stanford University, the University of California, the University of Colorado, and other institutions were warned to be on alert after a widespread security breach compromised personal data files during a nationwide cyberattack on the schools’ computer systems. 

Amazon Web Services (AWS) has released a new whitepaper, Classic intrusion analysis frameworks for AWS environments, to help organizations plan and implement a classic intrusion analysis framework for AWS environments. This whitepaper provides context that will help you understand how such frameworks are used and shows you, in detail, how to mitigate advanced attack tactics and techniques by using the AWS Cloud platform. The appendix in this paper contains a detailed example of how AWS services, features, functionality, and AWS Partner offerings can be used together to safeguard your organization’s data and cloud infrastructure by using a classic intrusion analysis framework. This will save you time and effort by providing you with a comprehensive AWS security control mapping to each phase of advanced attacks.

Written by Steve Caimi
Apr 21, 2021 | CYBERSCOOP

Pulse Secure has alerted customers to the existence of an exploitable chain of attack against its Pulse Connect Secure (PCS) appliances. PCS provides Virtual Private Network (VPN) facilities to businesses, which use them to prevent unauthorized access to their networks and services.

One of the most pressing challenges government entities and the public sector face is how to maintain existing and outdated IT systems without the budgetary, labor or infrastructure resources required to upgrade them. Hiring freezes, layoffs, talent loss and shortages, as well as up-skilling and infrastructure modernization initiatives are made even more complicated due to the ongoing impacts of COVID-19 and remote work.

Written by Tim Starks
Apr 21, 2021 | CYBERSCOOP