Threat report for 2018-10-14

DATA BREACH & DATA LOSS

1. My Health Record privacy amendments 'woefully inadequate': Labor
2. #NetSpectre exploits speculative execution to leak data remotely via side-channel attacks. Learn how this #SecurityVulnerability affects the #cloud from expert
3. Web Hosting Provider Suffers Data Breach Second Time in a Year
4. Find out how #TLBleed abuses @Intel's HTT chip feature to leak data via TLB
5. Microsoft still has not completely solved the Microsoft JET database engine vulnerability
6. See how SearchLight identifies when your data is exposed, your brand is abused, or your company is mentioned on the
7. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected
8. A @Google security audit uncovered a glitch in #GooglePlus that exposed data from nearly 500,000 accounts, causing the company to
9. PHASE 4 – INFORMATION GATHERING AND PLANNING Meet Eric, a control systems engineer working for a third-party integrator. He’s guy who uploaded

DENIAL-OF-SERVICE

10. DDoS Attacks Hit Games Like Assassin’s Creed and Final Fantasy XIV

MALVERTISING

Nil

PHISHING

Nil

WEB DEFACEMENT

Nil

BOTNET

Nil

RANSOMWARE

11. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel

CRYPTOMINING & CRYPTOCURRENCIES

12. Fake Flash Updates pushing Malware to Inject XMRig Cryptocurrency Miners

MALWARE

13. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free
14. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel
15. .@ThreatFabric researchers uncovered a #malware that uses overlay techniques to avoid detection. Learn from @lewisnic how this new #Androidmalware --
16. At the 2018 @RSAConference, researchers discussed the rise of stegware -- #malware that uses #steganography techniques to avoid detection. Learn
17. How a remote access #Trojan checks for
18. Fake Flash Updates pushing Malware to Inject XMRig Cryptocurrency Miners

EXPLOIT

19. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
20. Exploiting Windows Using Microsoft Office DDE Exploit (MACROLESS)

VULNERABILITY

21. Microsoft fixed the Zero-Day for JET flaw, but the fix is incomplete
22. A2SV – SSL Vulnerability Analysis Tool
23. Microsoft patch for JET flaw zero-day is ‘incomplete,’ Windows still vulnerable
24. Microsoft still has not completely solved the Microsoft JET database engine vulnerability
25. Expert released PoC Code Microsoft Edge Remote Code Execution flaw