Threat report for 2018-11-23

DATA BREACH & DATA LOSS

1. NUI Galway’s Problem: Misplaced USB Flash Drive Containing Unencrypted Student Records
2. Data breach in OSIsoft
3. Brazil's largest professional association suffers massive data leak
4. Amazon Snafu Exposed Customers' Names and Email Addresses
5. “Back in Black” – Article 13 has YouTube threatening to pull the plug over upload filter
6. New Emotet Thanksgiving campaign differs from previous ones
7. US Postal Service Website Left Data Exposed for Over a Year
8. .@Amazon unveils new settings to help users avoid S3 data leaks, but UpGuard's Chris Vickery, who uncovered most #AWS exposures,
9. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits
10. A #phishing campaign was recently found to be hijacking the traffic of @Trezor user #cryptocurrency wallets. Learn how such an
11. Software company OSIsoft has suffered a data breach
12. SAVE 50% FOR BLACK FRIDAY! Get half off FREEDOME VPN and TOTAL with coupon code BLACKFRIDAY.
13. DNS Shell – Tool to Compromise and Maintain Control Over Victim Machine
14. @FSecure fait son #BlackFriday ! Profitez de 50% de remise sur une sélection de produits !
15. 60 million users’ data were exposed by the US Postal Service

DENIAL-OF-SERVICE

16. Why e-commerce needs DDoS protection for Cyber Monday

MALVERTISING

Nil

PHISHING

17. 8 tips for avoiding phishing, malware, scams, and hacks while holiday shopping online
18. New Linux crypto-miner steals your root password and disables your antivirus
19. Attackers Are Landing Email Inboxes Without the Need to Phish
20. Do you know the top myths and facts of #mobile #phishing? If not, don't worry, we've compiled a list of
21. Phishing Used to Launch GreyEnergy's ICS Attacks
22. Southwest Washington Regional Surgery Center suffered a Phishing attack
23. A #phishing campaign was recently found to be hijacking the traffic of @Trezor user #cryptocurrency wallets. Learn how such an

WEB DEFACEMENT

Nil

BOTNET

24. Malware scum want to build a Linux botnet using Mirai
25. Deep Instinct recently blogged about a new #botnet -- dubbed #Mylobot -- that has shown new, complex tools and techniques.

RANSOMWARE

26. SMBs suffered the brunt of ransomware attacks in 2018
27. The number of ransomware attacks on individuals has come down as it has become harder to get them to pay,

CRYPTOMINING & CRYPTOCURRENCIES

28. Cryptocurrency ‘minting’ flaw could have leached money from exchanges
29. A #phishing campaign was recently found to be hijacking the traffic of @Trezor user #cryptocurrency wallets. Learn how such an

MALWARE

30. 8 tips for avoiding phishing, malware, scams, and hacks while holiday shopping online
31. New Crypto-Miner Attacks Linux Machines, Kills Other Miners and Anti-Malware
32. Malware scum want to build a Linux botnet using Mirai
33. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
34. Black Friday special by Emotet: Filling inboxes with infected XML macros
35. Black Friday special by Emotet: Filling inboxes with infected XML macros
36. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
37. VMware patches guest-to-host malware vulnerability
38. #WebCache poisoning poses a serious threat to #BrowserSecurity. Learn how #hackers can use unkeyed inputs for malicious intent from expert
39. Best way to Remove Malware on Mac, Including Other Unwanted Apps
40. New Crypto Malware Spreading that Infects Linux Machines & Removes Anti-Virus
41. Over 500k Play Store users have installed 13 games that contain malware

EXPLOIT

Nil

VULNERABILITY

42. DoS Vulnerabilities Found in Linux Kernel, Unpatched
43. Apache Hadoop spins cracking code injection vulnerability YARN
44. German e-government SDK patched against ID spoofing vulnerability
45. US Postal Service Plugs API Flaw - One Year Later
46. VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition
47. Adobe Flash Player Remote Code Execution Vulnerability Threat Alert
48. Old Printer Vulnerabilities Die Hard
49. VMware Patches Workstation Flaw Disclosed at Hacking Contest
50. Cryptocurrency ‘minting’ flaw could have leached money from exchanges
51. USPS Bug affects 60 Million Users, Finally Fixed.
52. German eID vulnerability allows hackers to change identities
53. VMware patches guest-to-host malware vulnerability
54. Internet connected devices might be the hot item for Christmas this year, but are they secure?
55. Hacker says USPS ignored serious security flaw for over a year
56. CVE-2018-6983: integer overflow vulnerability in VMware Workstation and Fusion