Daily brief for 2018-10-26

ASIA

1. GreyEnergy cyberespionage group targets Poland and Ukraine
2. Facebook removes Iranian influence campaign as midterms near
3. Exploits Block List Grows 50% Because of Spambot, Avalanche/Gamarue botnet
4. CVE-2018-14665 privilege escalation flaw affects popular Linux distros
5. 23-year-old woman charged with stealing $320,000 worth of cryptocurrency
6. Tracking Tick Through Recent Campaigns Targeting East Asia
7. .@FireEye #security researchers claimed the Russian government was 'most likely' behind the #Triton #malware attack on an industrial control system
8. North Korea regime using and exploiting cryptocurrencies
9. North Korea Backed Two Cryptocurrency Scams This Year, Says Report
10. LIVE NETWORKS LIVE555 Streaming Media RTSP Server Remote Code Execution Vulnerability(CVE-2018-4013) Threat Alert
11. New Privilege Escalation Flaw Affects Most Linux Distributions
12. Operation Oceansalt
13. Hackers attack Cathay Pacific
14. China’s Alibaba Cloud Expands Enterprise Blockchain Offering to Global Markets
15. Russian sabotage in Saudi petrochemicals

WORLD

16. British Airways: additional 185,000 passengers may have been affected
17. University DDoS attack leads to $8.6 million fine, house arrest for New Jersey man
18. GreyEnergy cyberespionage group targets Poland and Ukraine
19. British Airways: 185K Affected in Second Data Breach
20. BA Website Hijacked by Magecart. Again. | Avast
21. British Airways Data Breach Takes Off Again with 185K More Victims
22. 23-year-old woman charged with stealing $320,000 worth of cryptocurrency
23. 23-year-old woman charged with stealing $320,000 worth of cryptocurrency
24. US Counters Russian Influence & Magecart Hacks Magento | Avast
25. .@FireEye #security researchers claimed the Russian government was 'most likely' behind the #Triton #malware attack on an industrial control system
26. BA website and data breach by Magecart deeper than first thought
27. North Korea Backed Two Cryptocurrency Scams This Year, Says Report
28. What a crane in the ass: Bug leaves construction machinery vulnerable to evil command injection
29. No Place for Security as Cryptocurrency Skills Demand Soars
30. BA Breach: An Extra 185K Customers Notified
31. British Airways data breach worse than thought
32. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
33. Hackers attack Cathay Pacific
34. China’s Alibaba Cloud Expands Enterprise Blockchain Offering to Global Markets
35. Second attack against British Airways is disclosed
36. Russian sabotage in Saudi petrochemicals

ATTACKS

37. ThreatList: 1 Out of 5 Would Ditch a Business After a Data Breach
38. Facebook removes Iranian influence campaign as midterms near
39. Bushido-Powered DDoS Service Whipped Up from Leaked Code
40. British Airways: 185K Affected in Second Data Breach
41. British Airways Data Breach Takes Off Again with 185K More Victims
42. Microsoft bug makes phishing easy, says cybersecurity firm
43. Settlement in Yahoo data breach leaves company to pay $50M
44. Pocket iNET ISP Exposed 73GB of Sensitive Data On Misconfigured S3 Bucket
45. Campaign 2018: New malware attacks target voters in key battleground states
46. Cathay Pacific Hacked, Personal Data For 9.4 Million Passengers Compromised
47. PhishX –Spear Phishing Tool for Capturing Credentials
48. Tracking Tick Through Recent Campaigns Targeting East Asia
49. Details of 9mil compromised in Cathay Pacific data leak
50. Cathay Pacific Suffered Data Breach Affecting 9.4 Million Customers
51. BA website and data breach by Magecart deeper than first thought
52. Malicious actors attacked a back-end insurance system and the resulting @HealthCareGov #breach exposed an unknown amount of data on 75,000
53. Cathay Pacific hack: Personal data of up to 9.4 million airline passengers laid bare
54. Cathay Pacific Says 9.4 Million Affected by Data Breach
55. A #ZeroDay in the popular #jQuery File Upload plugin could affect thousands of projects and the jQuery #plugin vulnerability may
56. Airline Discovers Trove of Frequent Flyer Accounts Compromised and Posted for Sale Online:
57. British Airways data breach worse than thought
58. Spammers Behind Historic Data Breach Affecting Millions of Facebook Users
59. Cathay Pacific Airways Confirm Data Breach of its Customers
60. “Advanced attacks, spear-phishing and data breaches are the norm, instead of the exception. We need to address these issues with
61. New Malware Abusing Two Legitimate Windows Files to Steal Victims Personal Data

THREATS

62. Due to Misconfigured Component: DemonBot Malware Infects Multiple Apache Hadoop Servers
63. PoC Attack Leverages Microsoft Office and YouTube to Deliver Malware
64. CVE-2018-14665 privilege escalation flaw affects popular Linux distros
65. Cloudflare WAF Bypass Vulnerability Discovered
66. Code Execution Vulnerability Patched in Cross-Platform MKVToolNix Toolset
67. The Week in Ransomware - October 26th 2018 - Decryptors, RaaS, and More
68. Vulnerability Spotlight: Talos-2018-0694 – MKVToolNix mkvinfo read_one_element Code Execution Vulnerability
69. ICMP Shell- Secret Command and Control Channel to Control Victims Machine Using Ping
70. Microsoft bug makes phishing easy, says cybersecurity firm
71. Scammers use old browser trick to create fake virus download
72. A flaw in @Cisco Webex -- called WebExec -- can allow #RemoteCodeExecution. And while experts don't agree on how dangerous
73. Campaign 2018: New malware attacks target voters in key battleground states
74. 23-year-old woman charged with stealing $320,000 worth of cryptocurrency
75. 23-year-old woman charged with stealing $320,000 worth of cryptocurrency
76. Pentagon Expands Bug Bounty To Include Physical Systems
77. WebExec vulnerability leaves Webex open to insider attacks
78. DeepPhish: Simulating Malicious AI to Act Like an Adversary
79. Trivial Bug in X.Org Gives Root Permission on Linux and BSD Systems
80. .@FireEye #security researchers claimed the Russian government was 'most likely' behind the #Triton #malware attack on an industrial control system
81. North Korea regime using and exploiting cryptocurrencies
82. Researchers discovered a vulnerability in Cisco #Webex, called #WebExec, which allows local attackers to issue commands as privileged users. @iagox86
83. Malicious actors attacked a back-end insurance system and the resulting @HealthCareGov #breach exposed an unknown amount of data on 75,000
84. 3 Keys to Reducing the Threat of Ransomware
85. Cisco patches command injection bug in Webex Meetings Desktop App for Windows
86. North Korea Backed Two Cryptocurrency Scams This Year, Says Report
87. CVE-2018-9206 was maliciously exploited that multiple websites were linked to the search page to jump to the betting site
88. CVE-2018-14665: Xorg X Server privilege escalation vulnerabilities
89. What a crane in the ass: Bug leaves construction machinery vulnerable to evil command injection
90. An innovative partnership could help Cyber Command fight malware
91. Researchers report vulnerability in Microsoft Word's online video feature
92. A #ZeroDay in the popular #jQuery File Upload plugin could affect thousands of projects and the jQuery #plugin vulnerability may
93. No Place for Security as Cryptocurrency Skills Demand Soars
94. Vulnerability Spotlight: Talos-2018-0694 - MKVToolNix mkvinfo read_one_element Code Execution Vulnerability
95. What Is Gridcoin and How Can It Advance Science?
96. LIVE NETWORKS LIVE555 Streaming Media RTSP Server Remote Code Execution Vulnerability(CVE-2018-4013) Threat Alert
97. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
98. New Privilege Escalation Flaw Affects Most Linux Distributions
99. Top 5 Application Vulnerabilities: How to Prevent Risks
100. 7 places to find threat intel beyond vulnerability databases
101. New Malware Abusing Two Legitimate Windows Files to Steal Victims Personal Data
102. China’s Alibaba Cloud Expands Enterprise Blockchain Offering to Global Markets
103. Zero-day vulnerability in Windows allows privileges escalation
104. How to become a Monero million(th)aire in just 20 minutes [PODCAST]

CRIME

105. British Airways: additional 185,000 passengers may have been affected
106. University DDoS attack leads to $8.6 million fine, house arrest for New Jersey man
107. GreyEnergy cyberespionage group targets Poland and Ukraine
108. BA Website Hijacked by Magecart. Again. | Avast
109. Scammers use old browser trick to create fake virus download
110. 23-year-old woman charged with stealing $320,000 worth of cryptocurrency
111. 23-year-old woman charged with stealing $320,000 worth of cryptocurrency
112. North Korea Backed Two Cryptocurrency Scams This Year, Says Report
113. No Place for Security as Cryptocurrency Skills Demand Soars
114. BA Breach: An Extra 185K Customers Notified
115. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
116. Hackers attack Cathay Pacific
117. Second attack against British Airways is disclosed
118. Russian sabotage in Saudi petrochemicals

POLITICS

119. GreyEnergy cyberespionage group targets Poland and Ukraine
120. ICMP Shell- Secret Command and Control Channel to Control Victims Machine Using Ping
121. Campaign 2018: New malware attacks target voters in key battleground states
122. Tracking Tick Through Recent Campaigns Targeting East Asia
123. US Counters Russian Influence & Magecart Hacks Magento | Avast
124. Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol
125. Russian sabotage in Saudi petrochemicals