Daily brief for 2018-09-18

Asia

1. NSO mobile Pegasus Spyware used in operations in 45 countries
2. Chinese-speaking cybercrime group launches destructive malware family
3. Pegasus spyware active in 45 countries, Citizen Lab says
4. Political Figures Differ Online: Names of Trump, Obama, Merkel Attached to Ransomware Campaigns

World

1. US Dept of State says attack on email system exposed employees’ personal data
2. NSO mobile Pegasus Spyware used in operations in 45 countries
3. Broadcaster ABS-CBN customer data stolen, sent to Russian servers
4. Hackers selling research phished from universities on WhatsApp
5. 91 “child friendly” Android apps accused of exploitation
6. GovPayNow Leak of 14M+ Records Dates Back to 2012
7. UK watchdog has not issued any GDPR data breach-related fines yet
8. Political Figures Differ Online: Names of Trump, Obama, Merkel Attached to Ransomware Campaigns
9. Ransomware attack causes blackout on screens of Bristol Airport
10. 900,000 Australians opt out of My Health Record

Attacks

1. US Dept of State says attack on email system exposed employees’ personal data
2. State Department email breach leaks employee PII
3. 14 million customer records exposed in GovPayNow leak
4. Xbash Malware Deletes Databases on Linux, Mines for Coins on Windows
5. Survey: Nearly one-third of breached companies reported job losses after data breach
6. Here’s a Free Turnkey Phishing Awareness Program for National Cybersecurity Awareness Month
7. Hackers selling research phished from universities on WhatsApp
8. Insiders Continue to be Data Theft’s Best Friend
9. Symantec offers political campaigns service to guard against website spoofing
10. Huge E-marketing Database that Contains 11 Million Sensitive Personal Records Exposed Online
11. GovPayNow Leak of 14M+ Records Dates Back to 2012
12. MongoDB server leaks 11 million user records from e-marketing service
13. Bizarre botnet infects your PC to scrub away cryptocurrency mining malware
14. GovPayNow payment portal may have exposed over 14 million customer records
15. New Xbash Malware Attack on Linux & Windows with Botnet, Ransomware & Coinminer Capabilities
16. New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms
17. Database with 11 Million Email Records Exposed
18. UK watchdog has not issued any GDPR data breach-related fines yet
19. Political Figures Differ Online: Names of Trump, Obama, Merkel Attached to Ransomware Campaigns
20. 900,000 Australians opt out of My Health Record

Threats

1. Facebook Bug Bounty opens to reward access token exposure
2. iOS Webkit flaw found that forces iPhone restart
3. NSO mobile Pegasus Spyware used in operations in 45 countries
4. ThreatList: Malware Samples Targeting IoT More Than Double in 2018
5. The NUUO Peekaboo vulnerability gives hackers your camera feed | Avast
6. Intel releases firmware update for ME flaw
7. Xbash Malware Deletes Databases on Linux, Mines for Coins on Windows
8. Chinese-speaking cybercrime group launches destructive malware family
9. Pegasus spyware active in 45 countries, Citizen Lab says
10. Destructive Xbash Linux Malware Targets Enterprise Intranets
11. Critical Vulnerability Impacts Hundreds of Thousands of IoT Cameras
12. Dangerous Pegasus Spyware Has Spread to 45 Countries
13. iOS 12 Brings Patches for 16 Security Vulnerabilities
14. 91 “child friendly” Android apps accused of exploitation
15. A flaw in Alpine Linux could allow executing arbitrary code
16. Windows 10 Build 17763 Released As Microsoft Continues to Squash Bugs
17. Hackers acknowledge Windows flaws but prefer social engineering tricks
18. "Lawful intercept" Pegasus spyware found deployed in 45 countries
19. Cybercrime: Ransomware remains a 'key' malware threat says Europol
20. Critical RCE Peekaboo Bug in NVR Surveillance System, PoC Available
21. Cracked Windows installations are serially infected with EternalBlue exploit code
22. HIDE AND SEEK: Tracking NSO Group’s Pegasus Spyware to Operations in 45 Countries
23. Bizarre botnet infects your PC to scrub away cryptocurrency mining malware
24. Facebook Offers Rewards for Access Token Exposure Flaws
25. Powerful Android and iOS Spyware Found Deployed in 45 Countries
26. New Xbash Malware Attack on Linux & Windows with Botnet, Ransomware & Coinminer Capabilities
27. New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms
28. Response Guide of IBM WebSphere Code Execution Vulnerability
29. Political Figures Differ Online: Names of Trump, Obama, Merkel Attached to Ransomware Campaigns
30. Ransomware attack causes blackout on screens of Bristol Airport

Crime

1. Xbash Malware Deletes Databases on Linux, Mines for Coins on Windows
2. Chinese-speaking cybercrime group launches destructive malware family
3. Destructive Xbash Linux Malware Targets Enterprise Intranets
4. Broadcaster ABS-CBN customer data stolen, sent to Russian servers
5. Insiders Continue to be Data Theft’s Best Friend
6. Cybercrime: Ransomware remains a 'key' malware threat says Europol
7. GovPayNow Leak of 14M+ Records Dates Back to 2012
8. GovPayNow payment portal may have exposed over 14 million customer records

Politics

1. Symantec offers political campaigns service to guard against website spoofing