Daily brief for 2018-10-24

ASIA

1. Cathay Pacific breach leaks personal data on 9.4 million people
2. Democratic Fundraising Firm Leaks Voter Database, Clients, Fundraisers
3. Cathay Pacific Hit by Data Leak Affecting 9.4M Passengers
4. Russia Behind Triton Malware? A Cybersecurity Consulting Firm Confirms
5. Exploit kits: fall 2018 review
6. Russian Malware Used In An Attempt To Sabotage Saudi Petrol Plant
7. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
8. Phishing for knowledge
9. Deadly Malware That Attacked Saudi Industrial Plant Came From Russia
10. Researchers: Russia is the initiator of ICS Attack Framework “TRITON” and Trisis
11. South Korea Seems Chief Target of the ‘Operation Oceansalt’ Campaign
12. Russian Government-owned research institute linked to Triton attacks
13. FireEye: Russian Research Lab Aided the Development of TRITON Industrial Malware
14. Drupal Remote Code Execution Vulnerability Threat Alert
15. China asks blockchain-based service providers to control user information

WORLD

16. ​Australian woman arrested over AU$450,000 Ripple theft
17. Warning: More iOS Devices Are Infected by Cryptocurrency Mining Malware
18. Hacker Guccifer, who exposed Clinton private email server, ready for US prison sentence
19. Magecart hackers change tactic and target vulnerable Magento extensions
20. Russia Behind Triton Malware? A Cybersecurity Consulting Firm Confirms
21. Supermarket told it must compensate 100,000 workers after payroll data deliberately leaked by rogue employee
22. New Malware Targets Industrial Control Systems
23. Meet Cryptojacking, the (not so) new kid on the block
24. Exploit kits: fall 2018 review
25. Pocket iNet Leaves 73 GB of Sensitive Data Exposed
26. Beers with Talos EP40: BWT XL feat. SuperMicro, Giant Patches, and More Mobile Malware
27. Yahoo to pay up to $85m to settle data breach lawsuit
28. Russian Malware Used In An Attempt To Sabotage Saudi Petrol Plant
29. Apple's Tim Cook: Our personal data is 'weaponized against us' by you-know-who
30. Malware Targeting Brazil Uses Legitimate Windows Components WMI and CertUtil as Part of its Routine
31. US government medical website was hacked that 75,000 personal data was stolen
32. "The resurgence of #VPNFilter #botnet appears to be limited to the Ukraine, but given the ease of infecting targeted systems,
33. Morrisons supermarket: We're taking payroll leak liability fight to UK Supreme Court
34. Pocket iNet ISP exposed 73GB of data including secret keys, plain text passwords
35. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
36. Phishing for knowledge
37. US Department of Defense Expands Bug Bounty Efforts
38. Magecart Attackers Exploit Magento Zero-Days
39. Join us, and @SentinelOne Nov 29, as we discuss fast acting #ransomware remediation, threat hunting, and #AI that stops incongruous
40. Deadly Malware That Attacked Saudi Industrial Plant Came From Russia
41. Researchers: Russia is the initiator of ICS Attack Framework “TRITON” and Trisis
42. ISP Provider Exposed 73 Gigabytes of Highly Sensitive Data Including To The Internet
43. South Korea Seems Chief Target of the ‘Operation Oceansalt’ Campaign
44. Russian Government-owned research institute linked to Triton attacks
45. FireEye: Russian Research Lab Aided the Development of TRITON Industrial Malware
46. Survey: Nearly Half of U.S. Adults Experienced a Data Breach in the Past Three Years
47. Marine diesel engines software developed by Auto Maskin has serious vulnerabilities
48. China asks blockchain-based service providers to control user information

ATTACKS

49. Cathay Pacific breach leaks personal data on 9.4 million people
50. Cathay Pacific data breach hits 9.4 million people
51. Hacker Guccifer, who exposed Clinton private email server, ready for US prison sentence
52. Democratic Fundraising Firm Leaks Voter Database, Clients, Fundraisers
53. Cathay Pacific Hit by Data Leak Affecting 9.4M Passengers
54. Supermarket told it must compensate 100,000 workers after payroll data deliberately leaked by rogue employee
55. Information-Stealing Malware Campaign Evades Anti-Virus Detection
56. Cathay Pacific Suffers Data Breach Impacting 9.4 Million Passengers
57. Pocket iNet Leaves 73 GB of Sensitive Data Exposed
58. Yahoo to pay up to $85m to settle data breach lawsuit
59. Tim Cook Blasts Weaponization Of Personal Data And Praises GDPR
60. Pocket iNet Left All Of Its Corporate Passwords, Keys, And Data Exposed
61. Apple's Tim Cook: Our personal data is 'weaponized against us' by you-know-who
62. A #ZeroDay in #jQuery File Upload could affect thousands of projects because the jQuery #plugin vulnerability has existed for eight
63. Phishing Attack Tip 1: Beware of Unsettling Content An email containing unsettling, startling, or urgent content that requires immediate action on
64. Last year the @USAgov required agencies to implement #DMARC records and policies by October 2018. Learn just how hard DMARC
65. Discover how #NetSpectre attacks leak data remotely via side-channels with Michael Cobb of @thehairyITdog.
66. Yahoo Agrees to Pay $50 Million in Damages to Settle Data Breach Lawsuit
67. Business Email Compromise: Gift Cards
68. The Enduring Password Conundrum
69. US government medical website was hacked that 75,000 personal data was stolen
70. Morrisons supermarket: We're taking payroll leak liability fight to UK Supreme Court
71. Pocket iNet ISP exposed 73GB of data including secret keys, plain text passwords
72. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
73. Phishing for knowledge
74. Phishing attacks: Why is email still such an easy target for hackers?
75. Yahoo agrees to pay $50 million to settle data breach lawsuit
76. My Health Record opt-outs now sit at over 1.1 million
77. ISP Provider Exposed 73 Gigabytes of Highly Sensitive Data Including To The Internet
78. South Korea Seems Chief Target of the ‘Operation Oceansalt’ Campaign
79. Office 365 for Business - from May to September - has been Recorded Lowest Phish Miss Rate Versus Rivals
80. Again Hacker Exposed New Microsoft Unpatched Zero-day Bug In Twitter With PoC
81. Yahoo to pay at least $85m for data breach settlement
82. Area 1 Security releases Pay-Per-Phish, the performance-based cybersecurity solution
83. Survey: Nearly Half of U.S. Adults Experienced a Data Breach in the Past Three Years
84. A recent @HealthCareGov #breach exposed unknown types of data on 75,000 people, but a lack of information in the disclosure

THREATS

85. ​Australian woman arrested over AU$450,000 Ripple theft
86. Warning: More iOS Devices Are Infected by Cryptocurrency Mining Malware
87. Windows ‘Deletebug’ Zero-Day Allows Privilege Escalation, Destruction
88. Russia Behind Triton Malware? A Cybersecurity Consulting Firm Confirms
89. Vulnerabilities in Linksys Routers May Grant Attackers Full Control
90. Information-Stealing Malware Campaign Evades Anti-Virus Detection
91. New Malware Targets Industrial Control Systems
92. FlawedAmmyy Remote Access Trojan
93. Exploit for New Windows Zero-Day Published on Twitter
94. Cisco Patches Local WebEx Vulnerability, Remotely Exploitable in AD Deployments
95. Meet the malware which turns your smartphone into a mobile proxy
96. CVE-2018-4338: Triggering an Information Disclosure on macOS Through a Broadcom AirPort Kext
97. Meet Cryptojacking, the (not so) new kid on the block
98. sLoad Banking Trojan Downloader Displays Sophisticated Recon and Targeting
99. ThreatList: Ransomware, EKs and Trojans lead the Way in Q3 Malware Trends
100. Another Windows 0-day flaw has been published on Twitter
101. .@Siemens disclosed six SICLOCK flaws that were found within its central plant clocks. Discover why three flaws have been rated
102. Beers with Talos EP40: BWT XL feat. SuperMicro, Giant Patches, and More Mobile Malware
103. Mac malware intercepts encrypted web traffic for ad injection
104. SandboxEscaper expert is back and disclosed a new Windows Zero-Day
105. Pentagon Launches Continuous Bug Bounty Program
106. Russian Malware Used In An Attempt To Sabotage Saudi Petrol Plant
107. [SingCERT] Alert on Drupal Critical Vulnerabilities
108. A Windows 0day vulnerability was made public on Twitter
109. Organizations with strong DevSecOps find flaws 11x faster than those without
110. New Microsoft Windows Zero-Day Dropped on Twitter, Micropatch Available
111. A #ZeroDay in #jQuery File Upload could affect thousands of projects because the jQuery #plugin vulnerability has existed for eight
112. Most enterprise vulnerabilities remain unpatched a month after discovery
113. WizCase Found Critical Firmware Vulnerabilities In Leading NAS Devices
114. New Windows Zero-Day Bug Helps Delete Any File, Exploit Available
115. Twitter User Discloses Second Microsoft Zero-Day
116. Malware Targeting Brazil Uses Legitimate Windows Components WMI and CertUtil as Part of its Routine
117. Firefox 63 Released with Enhanced Tracking Protection and Fixes 14 Security Vulnerabilities
118. Most applications 'suffer from information leakage bugs'
119. DoD bug bounty program to expand to more sensitive systems
120. LuminosityLink RAT author sentenced to 2.5 years in jail
121. 3-year-old jQuery plugin vulnerability finally patched
122. US Department of Defense Expands Bug Bounty Efforts
123. The Qihoo @360CoreSec team found a @Microsoft vulnerability -- named Double Kill -- that affects applications through #MicrosoftOffice documents. Learn
124. Join us, and @SentinelOne Nov 29, as we discuss fast acting #ransomware remediation, threat hunting, and #AI that stops incongruous
125. Deadly Malware That Attacked Saudi Industrial Plant Came From Russia
126. FBI: Call of Duty gamers helped steal $3.3 million in cryptocurrency hacking scheme
127. Good initiative. Would be even better if you would pay bounties for the bugs, too.
128. Learn about the #NetSpectre vulnerability and the benefits of #ThreatModeling for cloud deployments from expert Ed Moyle of @securitycurve.
129. Crytojacking 101; why cryptojacking is bad for business
130. A summer intern took a look at tinc VPN, they found some nice authentication bypass and message tampering flaws
131. Beyond Your Bank Account: Ten Astounding Finds Uncovered by Financial Malware
132. FireEye: Russian Research Lab Aided the Development of TRITON Industrial Malware
133. Again Hacker Exposed New Microsoft Unpatched Zero-day Bug In Twitter With PoC
134. How Microsoft's Controlled Folder Access can help stop ransomware
135. Marine diesel engines software developed by Auto Maskin has serious vulnerabilities
136. Drupal Remote Code Execution Vulnerability Threat Alert
137. China asks blockchain-based service providers to control user information
138. A Digital Currency for Everyone: 5 Easy Way Steps to Follow for Buying Bitcoin
139. Hacker Discloses New Windows Zero-Day Exploit On Twitter
140. Securing Blockchain with Privileged Access Management

CRIME

141. ​Australian woman arrested over AU$450,000 Ripple theft
142. Warning: More iOS Devices Are Infected by Cryptocurrency Mining Malware
143. Hacker Guccifer, who exposed Clinton private email server, ready for US prison sentence
144. Magecart hackers change tactic and target vulnerable Magento extensions
145. Federal Legislation Enables Consumers to Obtain Security Freezes on Credit Reports Free of Charge
146. Yahoo to pay up to $85m to settle data breach lawsuit
147. Business Email Compromise: Gift Cards
148. US government medical website was hacked that 75,000 personal data was stolen
149. Morrisons supermarket: We're taking payroll leak liability fight to UK Supreme Court
150. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
151. LuminosityLink RAT author sentenced to 2.5 years in jail
152. Phishing for knowledge
153. FBI: Call of Duty gamers helped steal $3.3 million in cryptocurrency hacking scheme
154. Beyond Your Bank Account: Ten Astounding Finds Uncovered by Financial Malware
155. Survey: Nearly Half of U.S. Adults Experienced a Data Breach in the Past Three Years
156. China asks blockchain-based service providers to control user information
157. Securing Blockchain with Privileged Access Management

POLITICS

158. New Malware Targets Industrial Control Systems
159. Meet Cryptojacking, the (not so) new kid on the block
160. Russian Malware Used In An Attempt To Sabotage Saudi Petrol Plant
161. Pocket iNet ISP exposed 73GB of data including secret keys, plain text passwords
162. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
163. Phishing for knowledge
164. Deadly Malware That Attacked Saudi Industrial Plant Came From Russia
165. ISP Provider Exposed 73 Gigabytes of Highly Sensitive Data Including To The Internet
166. South Korea Seems Chief Target of the ‘Operation Oceansalt’ Campaign
167. Russian Government-owned research institute linked to Triton attacks