Daily brief for 2018-10-31

ASIA

1. More Information about July 2018’s Singapore SingHealth Data Breach Revealed
2. Was the Triton Malware Attack Russian in Origin?
3. Chinese Intel Agents Indicted for 5-Year IP Theft Campaign
4. Many States Reject DHS Offer to Check Election Systems for Flaws, Saying They’re Safe from Hackers
5. Ramped-up phishing attacks target universities around the world
6. NTT Security targets botnet infrastructure
7. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
8. Fresh SamSam Ransomware Campaign Across the U.S
9. DDoS Attacks in Q3 2018
10. Microsoft continues to push the KB4464455 patch for fixing ZIP bug

WORLD

11. 85 Millions of voter records available for sale ahead of the 2018 US Midterm Elections
12. Eurostar Resets Users' Passwords After Potential Data Breach
13. Prioritizing the fundamentals of coordinated vulnerability disclosure
14. 2018’s Most Prevalent Ransomware – We Took it for a Ride
15. Was the Triton Malware Attack Russian in Origin?
16. Many States Reject DHS Offer to Check Election Systems for Flaws, Saying They’re Safe from Hackers
17. Ramped-up phishing attacks target universities around the world
18. Nigerian Airline Arik Air May Have Leaked Customer Data
19. Whiteboard Wednesday: Common Vulnerabilities as Personified by Halloween Costumes
20. Vulnerability Spotlight: Multiple Vulnerabilities in Yi Technology Home Camera
21. “Brazilian Election” Themed Phish Target Users with South American-Targeted Malware, Astaroth Trojan
22. Australian companies failing to slow the tide of data breaches: OAIC
23. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
24. Recently found GPlayed trojan spinoff analysed
25. Fresh SamSam Ransomware Campaign Across the U.S
26. Nigerian airline Arik Air may have leaked customer data
27. Federal employee infects gov't network with Russian malware through adult video websites
28. Businesses unprepared for Windows 10 migration, fear vulnerability to cyber threats
29. DDoS Attacks in Q3 2018
30. A Report on Data Breaches in Australia
31. 12 malicious libraries found in Python PyPI
32. OIG’s Take On Healthcare.gov Patient Record Breach

ATTACKS

33. 85 Millions of voter records available for sale ahead of the 2018 US Midterm Elections
34. More Information about July 2018’s Singapore SingHealth Data Breach Revealed
35. Software bugs could compromise midterm votes in Texas
36. Eurostar Resets Users' Passwords After Potential Data Breach
37. Why data security is a priority for political campaigns
38. The Radisson Hotel Group has suffered a data breach
39. Social Security Numbers, PII Stolen in NorthBay Healthcare Data Breach
40. Healthcare.gov website suffers data breach affecting 75,000 enrollees
41. Tomorrowland festival goers affected by data breach
42. Chinese Intel Agents Indicted for 5-Year IP Theft Campaign
43. Emotet malware gang is mass-harvesting millions of emails in mysterious campaign
44. Re: The Zombie Phish
45. Ramped-up phishing attacks target universities around the world
46. Nigerian Airline Arik Air May Have Leaked Customer Data
47. Cyber Attacks Up Prior To Midterms, 81.5 Million Voter Records Threatened
48. “Brazilian Election” Themed Phish Target Users with South American-Targeted Malware, Astaroth Trojan
49. Average data breach fines have doubled as ICO hints at higher fines
50. Australian companies failing to slow the tide of data breaches: OAIC
51. Assault and battery: Malvertising campaign checks user device' charge as anti-detection technique
52. Live Webinar | Identity Proofing in the Era of Data Breaches and Social Networking
53. Come fermare i data breach con i servizi di Detection&Response #MDR: il caso di un'importante media company finlandese
54. Fresh SamSam Ransomware Campaign Across the U.S
55. Nigerian airline Arik Air may have leaked customer data
56. Emotet malware gang is mass-harvesting millions of emails in mysterious campaign
57. SamSam Ransomware Campaigns Highly Active in 2018 and Heavily Targets Organizations
58. [Infographic] 5 Ways #Cybercriminals Can Access Your Emails Without #Phishing:
59. A Report on Data Breaches in Australia
60. A DHCPv6 package could compromise a vulnerable Linux system
61. OIG’s Take On Healthcare.gov Patient Record Breach
62. Exploit Chain Modified to Slip Antivirus Detection in a New Malware Campaign

THREATS

63. Software bugs could compromise midterm votes in Texas
64. Yi Technology Home Cameras Exploitable Using Multiple Vulnerabilities
65. Prioritizing the fundamentals of coordinated vulnerability disclosure
66. Vulnerability Spotlight: Multiple Vulnerabilities in Yi Technology Home Camera
67. SamSam Ransomware Goes on a Tear
68. Apple Patches Multiple Major Security Flaws
69. 2018’s Most Prevalent Ransomware – We Took it for a Ride
70. Actively Exploited High Impact DoS Vulnerability Found in Cisco ASA and FTD
71. Was the Triton Malware Attack Russian in Origin?
72. Apple Fixes Multiple macOS, iOS Bugs Including a Quirky FaceTime Vulnerability
73. Emotet malware gang is mass-harvesting millions of emails in mysterious campaign
74. Many States Reject DHS Offer to Check Election Systems for Flaws, Saying They’re Safe from Hackers
75. Kraken Ransomware Upgrades Distribution with RaaS Model
76. Security Code AutoFill Flaw Exposes iOS, macOS Users to Banking Fraud Attacks
77. GandCrab ransomware crew loses $1M after Bitdefender releases free decrypter
78. Whiteboard Wednesday: Common Vulnerabilities as Personified by Halloween Costumes
79. Vulnerability Spotlight: Multiple Vulnerabilities in Yi Technology Home Camera
80. Promethium/StrongPity Malware
81. “Brazilian Election” Themed Phish Target Users with South American-Targeted Malware, Astaroth Trojan
82. "The presence of the insecure remote access software on systems used for election management raised concerns that malicious #ThreatActors --
83. Double-Gun Trojan which uses game plug-in to spread, is updated to V4.0 and looking for trouble
84. Kraken Cryptor ransomware merges with Fallout exploit kit, fees slashed to gain followers
85. Emotet Trojan Begins Stealing Victim's Email Using New Module
86. Kraken Ransomware Now Being Distributed by Fallout Exploit Kit
87. Several vulnerabilities were found in controllers made by @Universal_Robot. Discover what these #robot controllers are used for and how
88. It's a front? Mac cryptocurrency ticker actually installs backdoors
89. Weekly Threat Briefing: New Security Flaw Impacts Most Linux And BSD Distros
90. Emotet trojan starts stealing full emails from infected machines
91. Recently found GPlayed trojan spinoff analysed
92. Fresh SamSam Ransomware Campaign Across the U.S
93. Apple Patches Passcode Bypass, FaceTime Flaws in iOS
94. Federal employee infects gov't network with Russian malware through adult video websites
95. All You Need to Know About Blockchain Testing
96. Businesses unprepared for Windows 10 migration, fear vulnerability to cyber threats
97. Apple Patches Critical Flaws in iOS 12.1, macOS 10.14.1 Updates
98. Canonical Releases Ubuntu 16.04 LTS Kernel Patch, Fixed 4 Security Vulnerabilities
99. Emotet malware gang is mass-harvesting millions of emails in mysterious campaign
100. CVE-2018-18649: Gitlab Wiki API Remote Code Execution Vulnerability Alert
101. SamSam Ransomware Campaigns Highly Active in 2018 and Heavily Targets Organizations
102. What do you think the combination of the #TrickBot banking Trojan to #IcedID means for the future of banking #Trojans?
103. Apple Released Security Updates for iOS, watchOS, Safari , tvOS, iTunes & Fixed Several Vulnerabilities
104. Windows 10 Universal Windows Platform Vulnerability
105. 12 malicious libraries found in Python PyPI
106. 5 Types of Malware Currently Affecting macOS
107. Webroot Unveils Nastiest Malware of 2018
108. Microsoft continues to push the KB4464455 patch for fixing ZIP bug
109. Exploit Chain Modified to Slip Antivirus Detection in a New Malware Campaign

CRIME

110. 85 Millions of voter records available for sale ahead of the 2018 US Midterm Elections
111. The Radisson Hotel Group has suffered a data breach
112. Social Security Numbers, PII Stolen in NorthBay Healthcare Data Breach
113. Tomorrowland festival goers affected by data breach
114. Chinese Intel Agents Indicted for 5-Year IP Theft Campaign
115. Re: The Zombie Phish
116. “Brazilian Election” Themed Phish Target Users with South American-Targeted Malware, Astaroth Trojan
117. NTT Security targets botnet infrastructure
118. Fresh SamSam Ransomware Campaign Across the U.S
119. All You Need to Know About Blockchain Testing
120. DDoS Attacks in Q3 2018

POLITICS

121. 85 Millions of voter records available for sale ahead of the 2018 US Midterm Elections
122. More Information about July 2018’s Singapore SingHealth Data Breach Revealed
123. Many States Reject DHS Offer to Check Election Systems for Flaws, Saying They’re Safe from Hackers
124. “Brazilian Election” Themed Phish Target Users with South American-Targeted Malware, Astaroth Trojan
125. "The presence of the insecure remote access software on systems used for election management raised concerns that malicious #ThreatActors --