Platform report for 2018-11-08

WINDOWS

1. Attack uses malicious InPage document and outdated VLC media player to give attackers backdoor access to targets
2. Active Exploitation of Newly Patched ColdFusion Vulnerability (CVE-2018-15961)
3. Flaws in several self-encrypting SSDs allows attackers to decrypt data they contain
4. VirtualBox zero-day flaw released on Github; working exploit available but no patch
5. Cryptocurrency Mining Malware uses Various Evasion Techniques, Including Windows Installer, as Part of its Routine
6. Microsoft Bug is Deactivating Windows 10 Pro Licenses and Downgrading to Home
7. Metamorfo Banking Trojan Keeps Its Sights on Brazil
8. XSS flaw in Evernote allows attackers to execute commands and steal files

LINUX

Nil

UNIX

9. Symantec Uncovers North Korean Group's ATM Attack Malware
10. Lazarus Group Targets Bank Networks to Rob ATMs

ANDROID

11. Google: Newer Android versions are less affected by malware
12. Spyware disguised as Spanish banking apps removed from Google Play
13. A year later, @amarekano's Android overlay bug has been included in the AOSP November 2018 patched notes as CVE-2018-9524

IOS

14. iOS 12.1 Vulnerability

MACOS

Nil