Oct 29, 2018

Daily brief for 2018-10-28

ASIA

  1. Apple Made Apology Due to Apple ID Phishing Attacks
  2. Security Affairs newsletter Round 186 – News of the week
  3. Russian Research Lab Involved in the Development of TRITON Malware, Says FireEye

WORLD

  1. Consulting Firm Leaked Data Of Democratic Party Fundraisers In Unsecured NAS Device
  2. On Phishing Attacks and the Companies That are Targeted the Most
  3. Security Affairs newsletter Round 186 – News of the week
  4. Russian Research Lab Involved in the Development of TRITON Malware, Says FireEye
  5. New ShadowTalk is out! @TheHVanRiper and Rafael Amado join @mazzazone to discuss #ransomware surges in October, Cathay Pacific Breach, and
  6. After an attempted comeback by the Russian built #VPNFilter #botnet, home #networkdevices are at risk. Learn how this #malware targets

ATTACKS

  1. Consulting Firm Leaked Data Of Democratic Party Fundraisers In Unsecured NAS Device
  2. Apple Made Apology Due to Apple ID Phishing Attacks
  3. On Phishing Attacks and the Companies That are Targeted the Most
  4. Yahoo To Pay $50M, Other Costs For Massive Data Breach
  5. A recent @HealthCareGov #breach exposed unknown types of data on 75,000 people, but a lack of information in the disclosure
  6. "If an organization created #DMARC records for the first time, it would encounter syntax and content issues -- one of
  7. The #NetSpectre vulnerability could enable a slow leak of data remotely via side channels. Expert Michael Cobb of @thehairyITdog explains

THREATS

  1. Is blockchain a solution to IoT security problems?
  2. Cisco Patched Privilege Escalation Vulnerability In Webex Meetings Desktop App
  3. A flaw in @Cisco Webex -- called WebExec -- can allow #RemoteCodeExecution. And while experts don't agree on how dangerous
  4. 12 Malicious Python Libraries Found And Removed From PyPi
  5. Russian Research Lab Involved in the Development of TRITON Malware, Says FireEye
  6. .@Siemens central plant clocks were affected by six SICLOCK flaws, three have been rated "critical." Learn what these SICLOCK flaws
  7. How to deliver malware using weaponized Microsoft Office docs embedding YouTube video
  8. New ShadowTalk is out! @TheHVanRiper and Rafael Amado join @mazzazone to discuss #ransomware surges in October, Cathay Pacific Breach, and
  9. The #NetSpectre vulnerability could enable a slow leak of data remotely via side channels. Expert Michael Cobb of @thehairyITdog explains
  10. Critical Code Execution Vulnerability Found in MKVToolNix Tools that Parses MKV Files
  11. After an attempted comeback by the Russian built #VPNFilter #botnet, home #networkdevices are at risk. Learn how this #malware targets
  12. Bingo. Investigators find the same remote access trojan deployed to several other machines. Now the responders know what to look for.
  13. "My name is Mikko and I've been working with viruses and malware all my freaking life."

CRIME

  1. Apple Made Apology Due to Apple ID Phishing Attacks
  2. On Phishing Attacks and the Companies That are Targeted the Most
  3. Security Affairs newsletter Round 186 – News of the week

POLITICS

  1. Security Affairs newsletter Round 186 – News of the week