Sector brief for 2018-11-15

HEALTHCARE

1. Phishing Attack Causes Breach at Southwest Washington Regional Surgery Center
2. WannaCry Still Impacts Thousands of Systems Every Month

TRANSPORT

3. Compromising vital infrastructure: air traffic control
4. Bots on a plane? Bad bots cause unique cyber-security issues for airlines

BANKING & FINANCE

5. Proofpoint: Hackers testing new reconnaissance malware on financial institutions
6. Survey Says: Bad PR Due to Data Breach News, Very Bad for Businesses
7. Compromising vital infrastructure: air traffic control
8. Phishing Attack Causes Breach at Southwest Washington Regional Surgery Center
9. 20% of MageCart-compromised merchants get reinfected within days
10. 20% of MageCart-compromised merchants get reinfected within days
11. RiskIQ’s 2018 Black Friday E-commerce Blacklist: Key Intel for This Year’s Mega Shopping Weekend
12. Phishing Emails with .COM Extensions Are Hitting Finance Departments
13. Brazilian Users Under Attack From Metamorfo Banking Trojan
14. Today #GroupIB detected a massive phishing campaign sent to Russian banks from a fake email address purporting to belong to
15. Massive Data Leaks Keep Happening Because Big Companies Can Afford to Lose Your Data
16. 14 Malware Families Targeting E-Commerce Brands Ahead of Black Friday
17. Phishing fraudsters set their sights on online storage portals
18. Skimmed BA and Newegg Customer Card Details Up for Sale
19. InfoWars online store hit by Magecart
20. Alex Jones's InfoWars online store hit by Magecart
21. Cryptocurrency fraud is the exception, not the rule
22. Ransomware Attack Strikes Media Prima
23. Access Control Acronyms: ACL, RBAC, ABAC, PBAC, RAdAC, and a Dash of CBAC

INFORMATION & TELECOMMUNICATION

24. Suspected Russian cybercriminal arrested in Bulgaria at U.S. request, lawyer says
25. Vulnerability: Emojis can kill Skype for Business
26. 5 Ways #Cybercriminals Can Access Your Emails Without #Phishing [Infographic]:
27. Massive Data Leaks Keep Happening Because Big Companies Can Afford to Lose Your Data
28. Official Google Twitter account hacked in Bitcoin scam
29. Law firm uncovers exposed sensitive details about top attorney online. @mazzazone gives the details:
30. #ThreatHuntThursday: How to hunt for lateral movement by #PSExec. Check out our new blog post by @sp1nl0ck on how remote
31. Two whitehats receive $60,000 in rewards for successfully finding iOS 12.1 vulnerabilities
32. #tRat: New modular #RAT appears in multiple email campaigns: http://ow.ly/1nsX50jHzgd via the Proofpoint @threatinsight research team.
33. Cryptocurrency fraud is the exception, not the rule
34. Nordstrom is notifying employees of a data breach that exposed their personal information, including names, Social Security numbers, dates of
35. Facebook fixed a new security bug
36. I forgot to follow up on this… According to Apple, the process could take up to 7 days. It

FOOD

Nil

WATER

Nil

ENERGY

Nil

GOVERNMENT & PUBLIC SERVICE

37. My Health Record extension highlights lingering security, privacy concerns
38. Compromising vital infrastructure: air traffic control
39. Suspected Russian cybercriminal arrested in Bulgaria at U.S. request, lawyer says
40. Report: Microsoft’s enterprise products covertly gather personal data on users
41. Chinese TEMP.Periscope cyberespionage group was using TTPs associated with Russian APTs
42. Cryptocurrency fraud is the exception, not the rule
43. My Health Record remains opt-out as Senate passes privacy amendments
44. Symantec Honored for its Collaboration With Leading Industry Group to Protect Against Business Email Compromise Scams