Threat report for 2018-11-22

DATA BREACH & DATA LOSS

1. Almost 9,5 Million PII Records Leaked by Data Aggregator Adapt
2. China Boosted Technology and Intellectual Property Theft Operations Says USTR
3. USPS reportedly fixes website bug that exposed data of 60M users
4. Facebook 'walking dangerous line' as it appeals record fine
5. USPS finally fixes website flaw that exposed 60 million users' data
6. Furry erotica site 'High Tail Hall' exposed data of nearly 500K users
7. The July edition of Beazley Breach Insights found that business email compromise attacks have been rising steadily. Is business email
8. US Postal Service website vulnerability leaked 60 million user data
9. Amazon technical failure caused to leaks users’ email addresses
10. US Postal Service Left 60 Million Users Data Exposed For Over a Year
11. Amazon Suffered Data Breach – Customers Name & Email Addresses Exposed
12. Data breaches in schools: How should an academic institution report a security incident to comply with the GDPR?
13. 500K Italian Public Administration Email Accounts Compromised By Targeted Attack
14. New @awscloud settings will allow users to batch change permissions with the aim of avoiding accidental S3 data leaks, but

DENIAL-OF-SERVICE

15. Mirai DDoS baddies take enterprise Linux servers over consumer routers
16. Emoji Kitten Denial Of Service Attack Continues to Haunt Skype

MALVERTISING

Nil

PHISHING

17. LastPass login problems caused by cascading server failure
18. Come evitare che le tue #password diventino la chiave di accesso ai tuoi account
19. PSA: Phishing Levels Rise Ahead of Black Friday and Cyber Monday
20. Phishing Attack Compromises Health First Patients’ Data

WEB DEFACEMENT

Nil

BOTNET

Nil

RANSOMWARE

21. #DidYouKnow A single subscription of AVG Internet Security covers every PC in your family? It also includes webcam and ransomware protection,
22. Aurora / Zorro Ransomware Actively Being Distributed
23. How does @TalosSecurity's discovery change the way you or your enterprise views #ransomware?
24. The Rotexy mobile Trojan – banker and ransomware

CRYPTOMINING & CRYPTOCURRENCIES

25. Silicon Valley Hacker Swipes Millions Worth of Cryptocurrency Using SIM Swapping
26. SIM swap! Man charged after million dollar cryptocurrency theft
27. SIM swap! Man charged after million dollar cryptocurrency theft
28. Researchers recently discovered a new #MacOS #malware that targets #cryptocurrency investors through chat platforms. Discover how this is possible and
29. North Korea To Host Cryptocurrency and Blockchain Conference

MALWARE

30. Google’s Practical Action Against Malware and Its Authors
31. Rotexy Mobile Trojan Launches 70k+ Attacks in Three Months
32. Found this picture of myself doing an internal briefing on the Nimda worm in 2001. Note the size of the
33. A bypass was found by @okta researchers that allows #macOS #malware to pose as @Apple files despite needing to be
34. The Rotexy mobile Trojan – banker and ransomware
35. Researchers recently discovered a new #MacOS #malware that targets #cryptocurrency investors through chat platforms. Discover how this is possible and
36. Research reveals that 44% of industrial facilities have USB malware risks
37. Do you believe that the application #security vetting process would benefit from the addition of an entropy source?
38. Emotet malware runs on a dual infrastructure to avoid downtime and takedowns
39. Hacking Syndicate TA505 Back with Focus on Info-Stealing Trojan

EXPLOIT

40. How Dropbox's red team discovered an Apple zero-day exploit chain by accident
41. How was a black box attack used to exploit ATM vulnerabilities?

VULNERABILITY

42. USPS reportedly fixes website bug that exposed data of 60M users
43. [SingCERT] Alert on Adobe Flash Player Vulnerability (CVE-2018-15981)
44. #Irisscon: Stop Siloing Vulnerability Management to Deal with Old Bugs
45. .@radware #cybersecurity researchers found hackers to be targeting bank users via a #router vulnerability. Learn how a fake banking site
46. Cross-site search attack applied to snoop on Google’s bug tracker
47. Facebook And Instagram Went Down Due To A Server Bug
48. SSL vulnerability scanner – MassBleed
49. Flaw allowing identity spoofing affects authentication based on German eID cards
50. USPS finally fixes website flaw that exposed 60 million users' data
51. Update now! Adobe Flash has another critical security vulnerability
52. How Dropbox's red team discovered an Apple zero-day exploit chain by accident
53. How was a black box attack used to exploit ATM vulnerabilities?
54. CyberSecurity Asean security alert on Multiple Vulnerabilities in VMware vSphere Data Protection Could Allow for Remote Code Execution
55. Experts found first Mirai bot targeting Linux servers via Hadoop YARN flaw
56. VMware Releases Critical Security Updates for Multiple Vulnerabilities
57. US Postal Service website vulnerability leaked 60 million user data
58. Facebook Increases Average Bounty rewards for High Impact Vulnerabilities
59. Facebook raises rewards for a security vulnerabilities to $40,000