Daily brief for 2018-09-24

ASIA

1. Experts uncovered a new Adwind campaign aimed at Linux, Windows, and macOS systems
2. Adwind RAT Scurries By AV Software With New DDE Variant

WORLD

3. Pennsylvania Senate Democrats paid $700,000 to recover from ransomware attack
4. macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files
5. Experts uncovered a new Adwind campaign aimed at Linux, Windows, and macOS systems
6. Scottish Brewery Recovered from Ransomware Attack
7. Yubico's latest authentication keys get the jump on a 'passwordless' future
8. Scottish Brewery Recovered from Ransomware Attack  …
9. U.S. General Service Administration Launches Bug Bounty Program
10. Cybersecurity Has Become a Major Liability for Online Retailers
11. US ISP RCN stores customer passwords in cleartext
12. Operator of hackers' favorite malware scanning service gets 14 years in prison
13. Black Rose Lucy Android malware mimics user's on-screen click
14. Adwind RAT Scurries By AV Software With New DDE Variant
15. Hacker Sentenced for Running “Scan4you” Malware Scanning Service
16. Unraveling Emotet's Latest Macro Obfuscation
17. #SecurityNews: Over 90% of US retail domains analyzed recently were found to be non-compliant with #PCI DSS. The sector also performed worst out of the 18 appraised. Read more about this here:   #compliance #cyberattack #
18. Ransomware, Fileless Attacks and Cold Boot the Current Trend
19. Virobot Malware Emerges
20. Scottish brewery ransomware attack leverages job opening
21. Arran Brewery Hits Massive Ransomware Attack – Warned Other Companies to Stay Safe

ATTACKS

22. Microsoft goes password-free for Azure AD sign-in
23. Cisco: We’ve killed another critical hard-coded root password bug, patch urgently
24. Experts uncovered a new Adwind campaign aimed at Linux, Windows, and macOS systems
25. Yubico's latest authentication keys get the jump on a 'passwordless' future
26. New Adwind Campaign Targets Linux, Windows, and macOS
27. US ISP RCN stores customer passwords in cleartext
28. Zoho Suspended by Domain Registrar Over Phishy Emails
29. [SingCERT] Alert on Cisco Video Surveillance Manager Default Password Vulnerability CVE-2018-15427
30. Survey: Nearly one-third of breached companies reported job losses after data breach
31. Breaking Chrome / Google account auto login (and tracking)
32. 4 Things To Do To Get Your Smartphone Compromised
33. Microsoft Deletes Passwords for Azure Active Directory Applications
34. [SingCERT] Alert on Microsoft JET Database Engine Vulnerabilities CVE-2018-8392 and CVE-2018-8393
35. It’s an active buyer’s market for DDoS-as-a-Service - NETSCOUT
36. Tricky DoS Attack Crashes Mozilla Firefox
37. Virobot Ransomware Logs Keystrokes and Adds PC to Spam Botnet
38. Cisco: We've killed another critical hard-coded root password bug, patch urgently
39. Cisco Removes Default Password From Video Surveillance Manager
40. Credential Stuffing Attacks Are Reaching DDoS Proportions
41. Freelance workers targeted in new malware campaign
42. Viborot ransomware comes with a botnet
43. Western Digital resolves year-old password bypass bug in My Cloud NAS devices
44. Bug Exposed Direct Messages of Millions of Twitter Users
45. A bug in Twitter Account Activity API exposed users messages to wrong developers
46. Do you know who the biggest threat actors are? Check out this paper that shares our perspective on the key takeaways from the 2018 Verizon Data Breach Investigations Report. Get your copy here:   #DBIR #
47. Pervasive email #security threats have dampened adoption of #cloud-based productivity tools: #survey   #BarracudaNetworks #phishing #Office365 #fraud #AI #
48. Hackers Compromised Thousands of WordPress Sites and Redirects to Tech Support Scams

THREATS

49. Hackers Use Cloud Hosting Services To Deliver Malware That Steals Cryptocurrency Wallet Details
50. Pennsylvania Senate Democrats paid $700,000 to recover from ransomware attack
51. macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files
52. Adwind RAT Scurries By AV Software With New DDE Variant
53. Cisco: We’ve killed another critical hard-coded root password bug, patch urgently
54. Join our LIVE Webcast with @SCMagazine on 9/25: #Cryptomining: The Next #Malware Attack >>> register now   <<<
55. Scottish Brewery Recovered from Ransomware Attack
56. Cybercriminals Target Kodi Media Player for Malware Distribution
57. Scottish Brewery Recovered from Ransomware Attack  …
58. U.S. General Service Administration Launches Bug Bounty Program
59. Zoho Suspended by Domain Registrar Over Phishy Emails
60. Operator of hackers' favorite malware scanning service gets 14 years in prison
61. Cisco patches 'critical' credential bug in video surveillance software
62. Black Rose Lucy Android malware mimics user's on-screen click
63. Adwind RAT Scurries By AV Software With New DDE Variant
64. [SingCERT] Alert on Cisco Video Surveillance Manager Default Password Vulnerability CVE-2018-15427
65. Hacker Sentenced for Running “Scan4you” Malware Scanning Service
66. Apple MacOS Mojave zero-day privacy bypass vulnerability revealed
67. The MyCloud Auth Vulnerability Fixed by Western Digital with a Hotfix
68. Blocking ransomware for free with honeypots
69. Unraveling Emotet's Latest Macro Obfuscation
70. [SingCERT] Alert on Microsoft JET Database Engine Vulnerabilities CVE-2018-8392 and CVE-2018-8393
71. Adwind Trojan circumvents antivirus software to infect your PC
72. Cisco Patches Critical Flaw in Cisco Video Surveillance Manager (VSM) Software
73. #SecurityNews: Over 90% of US retail domains analyzed recently were found to be non-compliant with #PCI DSS. The sector also performed worst out of the 18 appraised. Read more about this here:   #compliance #cyberattack #
74. Researchers warn of iTranslator man-in-the-middle malware
75. New Bug Crashes Mozilla Firefox on Windows, Linux, and Mac Systems
76. Virobot Ransomware Logs Keystrokes and Adds PC to Spam Botnet
77. Cisco Patched Critical Vulnerability With Video Surveillance Manager Appliance
78. [SingCERT] Alert on Critical Out-Of-Band Adobe Acrobat Vulnerability (CVE-2018-12848)
79. Critical flaw affects Cisco Video Surveillance Manager
80. Pennsylvania Senate Democrats paid $700,000 to recover from ransomware attack
81. Ransomware, Fileless Attacks and Cold Boot the Current Trend
82. macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files
83. Cisco: We've killed another critical hard-coded root password bug, patch urgently
84. Virobot Malware Emerges
85. Report: Microsoft misses disclosure deadline to patch RCE bug in JET
86. Freelance workers targeted in new malware campaign
87. Viborot ransomware comes with a botnet
88. Scottish brewery ransomware attack leverages job opening
89. Arran Brewery Hits Massive Ransomware Attack – Warned Other Companies to Stay Safe
90. Western Digital resolves year-old password bypass bug in My Cloud NAS devices
91. Cisco Patched Critical Vulnerability In Its Video Surveillance Manager Software
92. Bug Exposed Direct Messages of Millions of Twitter Users
93. A bug in Twitter Account Activity API exposed users messages to wrong developers
94. Thousands of WordPress sites are infected with the malicious code

CRIME

95. Pennsylvania Senate Democrats paid $700,000 to recover from ransomware attack
96. Join our LIVE Webcast with @SCMagazine on 9/25: #Cryptomining: The Next #Malware Attack >>> register now   <<<
97. Cybercriminals Target Kodi Media Player for Malware Distribution
98. Cybersecurity Has Become a Major Liability for Online Retailers
99. Operator of hackers' favorite malware scanning service gets 14 years in prison
100. Hacker Sentenced for Running “Scan4you” Malware Scanning Service
101. Unraveling Emotet's Latest Macro Obfuscation
102. Ransomware, Fileless Attacks and Cold Boot the Current Trend
103. Arran Brewery Hits Massive Ransomware Attack – Warned Other Companies to Stay Safe

POLITICS

104. macOS Mojave Privacy Bypass Flaw Allows Access to Protected Files