Daily brief for 2018-10-12

ASIA

1. Cyber News Rundown: Windows 10 Update Deletes Files
2. Threat Brief: FASTCash ATM Cash Out Tactics
3. Five Eyes Intelligence agencies warn of popular hacking tools
4. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million

WORLD

5. Facebook Data Breach Update: attackers accessed data of 29 Million users
6. Pentagon Reveals Cyber Breach of Travel Records
7. FDA Issues Warning about Security Vulnerabilities in Pacemaker Programmers
8. Detecting Malicious Campaigns with Machine Learning
9. Almost 12K MikroTik Routers Are Hunting Around for Cryptojacking Opportunities
10. Cyber News Rundown: Windows 10 Update Deletes Files
11. Fake browser update seeks to compromise more MikroTik routers
12. An Examination of a Phishing Kit Dubbed Luis
13. Five Eyes Intelligence agencies warn of popular hacking tools
14. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million
15. DOM-XSS Bug Affecting Tinder, Shopify, Yelp, and More
16. UK's NCSC to monitor internet routing to stop DDoS and hijacks
17. Largest Cyber Attack Against Iceland Driven by Complex Phishing Scheme
18. ​Labor seeks updated My Health Record legislation to prevent privatisation
19. Senator asked Google to explain why the revealing of the Google+ vulnerability was postponed

ATTACKS

20. Facebook Data Breach Update: attackers accessed data of 29 Million users
21. Pentagon Reveals Cyber Breach of Travel Records
22. NEW BETABOT CAMPAIGN UNDER THE MICROSCOPE
23. Detecting Malicious Campaigns with Machine Learning
24. Fitmetrix fitness software company may have exposed millions of customer records
25. Fake browser update seeks to compromise more MikroTik routers
26. Threat Announcement: Phishing Sites Detected on Emoji Domains
27. Phishing Campaign uses Hijacked Emails to Deliver URSNIF by Replying to Ongoing Threads
28. #TLBleed abuses @Intel's HTT chip feature to leak data and obtain sensitive memory information. Learn more about this new side-channel
29. An Examination of a Phishing Kit Dubbed Luis
30. Mindbody’s FitMetrix leaked millions of Users’ Personal Details
31. Is Google Sync a Vector for Data Breaches?
32. Do you know the top myths and facts of #mobile #phishing? If not, don't worry, we've compiled a list of
33. Facebook Revises Data Breach Impact Downward, Provides New Details
34. How #livechatsoftware leak personal #employeedata?
35. Largest Cyber Attack Against Iceland Driven by Complex Phishing Scheme
36. Spring Security With Radius Login
37. ​Labor seeks updated My Health Record legislation to prevent privatisation

THREATS

38. Windows 10 October 2018 Update: Release – Halt – Bug Identified – Fix!
39. FDA Issues Warning about Security Vulnerabilities in Pacemaker Programmers
40. Detecting Malicious Campaigns with Machine Learning
41. Almost 12K MikroTik Routers Are Hunting Around for Cryptojacking Opportunities
42. The Week in Ransomware - October 12th 2018 - NotPetya, GandCrab, and More
43. Microsoft Zero-Day Patch for JET Bug Incomplete, Claims Firm
44. Three Industries That Blockchain Will Impact the Most
45. Proof-of-Concept Available for Edge Remote Code Execution Vulnerability
46. Facebook States 30 Million People Affected by Last Month's "View As" Bug
47. Fake Adobe Flash Updates Hide Malicious Crypto Miners
48. Learn how the #NetSpectre vulnerability affects the #cloud from expert Ed Moyle of @securitycurve.
49. What's keeping the #CISO up at night? The vulnerabilities caused by third-party vendors, finds @forrester research. 65% of organizations say
50. Micropatch Released to Correct Partially Fixed JET DB Engine RCE Vulnerability
51. Obfuscated JavaScript Cryptominer
52. FDA warns users of cyber vulnerability in pacemaker programmers
53. In 2008, @nokia dominated the mobile phone universe. Four years later, the company was on the verge of extinction. Discover
54. .@ThreatFabric researchers uncovered an #Android malware, #MysteryBot, which uses overlay attacks to avoid detection. Learn how this #malware affects @Google's
55. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel
56. Ryan Kalember, Senior VP of #Cybersecurity Strategy at Proofpoint, discussing why humans are a company’s biggest cybersecurity vulnerability.
57. Researchers at the 2018 @RSAConference discussed #stegware: @malware that uses #steganography. Discover how this works with expert @lewisnic.
58. Sony Patched Three Critical Vulnerabilities In Smart TV Bravia
59. Hackers targeting Drupal vulnerabilities to install the Shellbot Backdoor
60. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million
61. GandCrab ransomware operators team up with crypter service
62. Now, watch this... Network time protocol bugs sting Juniper operating system
63. GandCrab Ransomware Partners With Crypter Service
64. This is how much the WannaCry ransomware attack cost the NHS
65. Researchers at Cisco Talos (@TalosSecurity) recently discovered #GravityRAT, a remote access #Trojan. Discover how this RAT can check for
66. GPlayed trojan seeks to play users out of their data
67. This Trojan masquerades as Google Play to hide on your phone in plain sight
68. DOM-XSS Bug Affecting Tinder, Shopify, Yelp, and More
69. Facebook's WhatsApp says it has fixed a video call security bug that let hackers hijack accounts.
70. Marion County Jail’s Reporting System Fall Prey to Virus Attack
71. Some 10% of user-reported emails malicious
72. Cryptomining software is hidden as Flash update
73. ThreatFabric on stage @bsidesdelft talking about the evolution of
74. Vulnerability allows hijacking of software installed in macOS
75. Fortnite for Android Released, But Make Sure You Don't Download Malware
76. Senator asked Google to explain why the revealing of the Google+ vulnerability was postponed
77. Proof-of-concept code published for Microsoft Edge remote code execution bug

CRIME

78. Facebook Data Breach Update: attackers accessed data of 29 Million users
79. Facebook States 30 Million People Affected by Last Month's "View As" Bug
80. Fake browser update seeks to compromise more MikroTik routers
81. Threat Brief: FASTCash ATM Cash Out Tactics
82. Hackers targeting Drupal vulnerabilities to install the Shellbot Backdoor
83. 360 Total Security has intercepted more than 50,000 Clipboard Wallet Hijacker attacks, helping users recover over 40 million
84. PoC exploit for Windows Shell RCE released
85. DOM-XSS Bug Affecting Tinder, Shopify, Yelp, and More
86. UK's NCSC to monitor internet routing to stop DDoS and hijacks
87. Largest Cyber Attack Against Iceland Driven by Complex Phishing Scheme

POLITICS

Nil