Weekly News Roundup January 19-24, 2020


Posted on by Kacy Zurkus

We are officially one month out from Conference! If you haven’t already done so, now is a good time to check out the full agenda and start reserving your seat for your must-see session. In other exciting news, RSAC officially announced the closing keynotes for this year’s Conference. It’s sure to be magical!

There’s lots going on in technology and education this week. ZDNet reported, “the 2030 generation of students, according to Microsoft, will be a squad of high-achieving "super-humans," able to amplify and unleash their full potential thanks to hybrid intelligence.” KnowBe4 pledged to make a generous donation of $250,000 to Stetson University College of Law, and Pacific Gas & Electric Co. (PG&E) also announced that it awarded nearly $500,000 in scholarships for students pursuing higher education in engineering, computer science, cybersecurity or environmental sciences.

While not all industry news this week was positive, it’s Friday, so why not try to see the silver lining? Here’s a rundown of other cybersecurity headlines you might have missed while you were busy thinking about how to secure the next decade.

Jan. 24: After issuing a statement that its older products will no longer receive software updates or new features, Sonos CEO Patrick Spence wrote a blog post explaining, “While legacy Sonos products won’t get new software features, we pledge to keep them updated with bug fixes and security patches for as long as possible.”

Jan. 24: Nearly a gigabyte of sensitive data including passwords and encrypted keys was accidently leaked by an Amazon Web Services engineer, Gizmodo reported.  

Jan. 23: According to a report from CNBC, the Food and Drug Administration has warned healthcare providers about a flaw in GE medical equipment that could allow a malicious actor to interfere with, silence or even create false alarms on patient monitors connected to the devices.

Jan. 22: A misconfiguration of security rules at Microsoft left an internal customer database containing almost 250 million customer service and support records exposed.

Jan. 22: Two noteworthy acquisitions from this week: Rockwell Automation announced plans to acquire Israeli-based provider Avnet Data Security, and FireEye said it will acquire Texas-based Cloudvisory.

Jan. 21: According to an exclusive report from Reuters, “Apple Inc dropped plans to let iPhone users fully encrypt backups of their devices in the company’s iCloud service after the FBI complained that the move would harm investigations.”

Jan. 21: A group of nefarious actors identified as the 16Shop phishing gang targeted PayPal customers in an attempt to steal personally identifiable information (PII), Threatpost reported.

Jan. 20: With mounting privacy and cybersecurity concerns over the use of the Chinese-owned TikTok app, many creators that use the app are moving to other social media platforms, according to Fox Business Network.

Jan. 20: KrebsonSecurity reported, “A Georgia man who co-founded a service designed to protect companies from crippling distributed denial-of-service (DDoS) attacks has pleaded to paying a DDoS-for-hire service to launch attacks against others.”

Jan. 19: Hackers continue to target mobile and IoT devices, then turn to the dark net to sell stolen data to the highest bidder. 

Contributors
Kacy Zurkus

Director of Content, RSAC

RSAC Insights

Blogs posted to the RSAConference.com website are intended for educational purposes only and do not replace independent professional judgment. Statements of fact and opinions expressed are those of the blog author individually and, unless expressly stated to the contrary, are not the opinion or position of RSAC™ Conference, or any other co-sponsors. RSAC™ Conference does not endorse or approve, and assumes no responsibility for, the content, accuracy or completeness of the information presented in this blog.


Share With Your Community

Related Blogs