Daily brief for 2018-11-26

ASIA

1. Half of all Phishing Sites Now Have the Padlock
2. Cyberthreats to financial institutions 2019: overview and predictions
3. Ukrainian Police Nab Suspected RAT-Slinger
4. Crypto Mining Malware Infects Make-A-Wish-Foundation Website

WORLD

5. Microsoft launches review after a trio of Azure bugs locked users out of Office 365
6. Did UK city council over-react to a vulnerability report in its recycling app or not?
7. Knuddels Flirt App Slapped with Hefty Fine After Data Breach
8. When Do You Need to Report a Data Breach?
9. Democrats Introduce Bill for Stopping Automated Grinch Bots from Ruining Xmas
10. Siemens patches major firewall flaw, other vulnerabilities
11. How Pirated Versions of ‘Super Smash Bros. Ultimate’ Leaked Weeks Before Release
12. Microsoft PowerPoint as Malware Dropper
13. Recent Attacks on US Entities Attributed to APT29
14. U.S. Postal Service API Flaw Exposes Data of 60 Million Customers
15. Phishing Campaign targeting French Industry
16. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
17. German Social Media Provider Fined €20K for Data Breach
18. Cyberthreats to financial institutions 2019: overview and predictions
19. Ukrainian Police Nab Suspected RAT-Slinger
20. Crypto Mining Malware Infects Make-A-Wish-Foundation Website
21. Experts found a new powerful modular Linux cryptominer
22. HR Software Firm PageUp Finds No Evidence of Data Theft
23. An ongoing phishing campaign is targeting French industry, @FSLabs finds.
24. Phishing Campaign targeting French Industry

ATTACKS

25. Knuddels Flirt App Slapped with Hefty Fine After Data Breach
26. When Do You Need to Report a Data Breach?
27. USPS, Amazon Data Leaks Showcase API Weaknesses
28. Holiday Season: Cybercriminals are Phishing All The Way
29. How Pirated Versions of ‘Super Smash Bros. Ultimate’ Leaked Weeks Before Release
30. Half of all Phishing Sites Now Have the Padlock
31. Easy as APT: Spear phishing highlighted as ongoing threat for 2019
32. Despite growing concerns about cybersecurity and the number of data breach incidents in the news, many employees still have bad
33. Trivial Spotify Phishing Campaign Targets Users To Steal Login Credentials
34. Phishing Campaign targeting French Industry
35. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
36. German Social Media Provider Fined €20K for Data Breach
37. No need to compromise freedom for security - Europol audience told
38. 50% use password managers to store login details
39. HR Software Firm PageUp Finds No Evidence of Data Theft
40. Internal negligence to blame for most data breaches involving personal health information
41. Sextortion 2.0: We have continued to monitor the campaigns and have seen a recent change in tactics, with some unusual
42. An ongoing phishing campaign is targeting French industry, @FSLabs finds.
43. Phishing Campaign targeting French Industry
44. Beware!! Cyber Criminals Launching Serious Phishing Attack that Target Spotify Customers
45. My Health Record opt-out officially extended to January 31

THREATS

46. Microsoft launches review after a trio of Azure bugs locked users out of Office 365
47. Did UK city council over-react to a vulnerability report in its recycling app or not?
48. Ransomware attack disrupted emergency rooms at Ohio Hospital System
49. Lenovo to Pay $7.3 Million in Settlement for Installing Adware on 800K Notebooks
50. 13 Newly Discovered Malicious Apps, Deleted By Google From the Play Store
51. Hacker backdoors popular JavaScript library to steal Bitcoin funds
52. What is Data Classification? Guidelines and Process
53. Linux Kernel is affected by two DoS vulnerabilities still unpatched
54. Mobile Rotexy Malware Touts Ransomware, Banking Trojan Functions
55. Harberger Taxes on Ethereum
56. DoS Vulnerabilities Impact Linux Kernel
57. Subscribe to the relaunched Virus Bulletin eNews newsletter
58. Apache Hadoop Spins Cracking Code Injection Vulnerability YARN
59. Siemens patches major firewall flaw, other vulnerabilities
60. Play Store Malware Infects Half a Billion
61. Microsoft PowerPoint as Malware Dropper
62. #Bluetooth devices might be at risk after a new Bluetooth vulnerability was found targeting #firmware and #OperatingSystem software drivers. Learn
63. U.S. Postal Service API Flaw Exposes Data of 60 Million Customers
64. Ransomware Attack Forced Ohio Hospital System to Divert ER Patients
65. Positive Technologies researchers recently found two serious vulnerabilities that target NCR's #ATMs. Learn how a "black box attack" was involved
66. OSX.Dummy #malware has been discovered to use chat platforms in order to target #cryptocurrency investors. Learn more with expert @lewisnic
67. Cryptocurrency threat predictions for 2019
68. Ukrainian Police Nab Suspected RAT-Slinger
69. Crypto Mining Malware Infects Make-A-Wish-Foundation Website
70. Experts found a new powerful modular Linux cryptominer
71. A new ransomware -- dubbed #Thanatos #ransomware -- was found encrypting data but not decrypting it despite victims paying the
72. Discover how a @DLink #router vulnerability targeted a banking site to steal #UserCredentials with expert Judith Myerson.
73. For recent big data software vulnerabilities, botnets and coin mining are just the beginning
74. Frost & Sullivan Commends Rapid7 for Capturing Nearly a Quarter Share of the Global Vulnerability Management Market

CRIME

75. When Do You Need to Report a Data Breach?
76. Holiday Season: Cybercriminals are Phishing All The Way
77. Half of all Phishing Sites Now Have the Padlock
78. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
79. Cryptocurrency threat predictions for 2019
80. Cyberthreats to financial institutions 2019: overview and predictions
81. Ukrainian Police Nab Suspected RAT-Slinger
82. Experts found a new powerful modular Linux cryptominer
83. HR Software Firm PageUp Finds No Evidence of Data Theft
84. Sextortion 2.0: We have continued to monitor the campaigns and have seen a recent change in tactics, with some unusual

POLITICS

85. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
86. Cryptocurrency threat predictions for 2019
87. Ukrainian Police Nab Suspected RAT-Slinger