Nov 27, 2018

Threat report for 2018-11-26

DATA BREACH & DATA LOSS

  1. Knuddels Flirt App Slapped with Hefty Fine After Data Breach
  2. When Do You Need to Report a Data Breach?
  3. USPS, Amazon Data Leaks Showcase API Weaknesses
  4. How Pirated Versions of ‘Super Smash Bros. Ultimate’ Leaked Weeks Before Release
  5. Despite growing concerns about cybersecurity and the number of data breach incidents in the news, many employees still have bad
  6. Trivial Spotify Phishing Campaign Targets Users To Steal Login Credentials
  7. Phishing Campaign targeting French Industry
  8. Russia Plans To tighten Data Protection Owing To Intelligence Leaks
  9. German Social Media Provider Fined €20K for Data Breach
  10. No need to compromise freedom for security - Europol audience told
  11. HR Software Firm PageUp Finds No Evidence of Data Theft
  12. Internal negligence to blame for most data breaches involving personal health information
  13. Sextortion 2.0: We have continued to monitor the campaigns and have seen a recent change in tactics, with some unusual
  14. An ongoing phishing campaign is targeting French industry, @FSLabs finds.
  15. Phishing Campaign targeting French Industry
  16. My Health Record opt-out officially extended to January 31

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

  1. Holiday Season: Cybercriminals are Phishing All The Way
  2. Half of all Phishing Sites Now Have the Padlock
  3. Easy as APT: Spear phishing highlighted as ongoing threat for 2019
  4. Trivial Spotify Phishing Campaign Targets Users To Steal Login Credentials
  5. Phishing Campaign targeting French Industry
  6. 50% use password managers to store login details
  7. An ongoing phishing campaign is targeting French industry, @FSLabs finds.
  8. Phishing Campaign targeting French Industry
  9. Beware!! Cyber Criminals Launching Serious Phishing Attack that Target Spotify Customers

WEB DEFACEMENT

Nil

BOTNET

  1. Democrats Introduce Bill for Stopping Automated Grinch Bots from Ruining Xmas

RANSOMWARE

  1. Ransomware attack disrupted emergency rooms at Ohio Hospital System
  2. Mobile Rotexy Malware Touts Ransomware, Banking Trojan Functions
  3. Ransomware Attack Forced Ohio Hospital System to Divert ER Patients
  4. A new ransomware -- dubbed #Thanatos #ransomware -- was found encrypting data but not decrypting it despite victims paying the

CRYPTOMINING & CRYPTOCURRENCIES

  1. Hacker backdoors popular JavaScript library to steal Bitcoin funds
  2. Harberger Taxes on Ethereum
  3. OSX.Dummy #malware has been discovered to use chat platforms in order to target #cryptocurrency investors. Learn more with expert @lewisnic
  4. Cryptocurrency threat predictions for 2019
  5. Crypto Mining Malware Infects Make-A-Wish-Foundation Website
  6. Experts found a new powerful modular Linux cryptominer

MALWARE

  1. Lenovo to Pay $7.3 Million in Settlement for Installing Adware on 800K Notebooks
  2. 13 Newly Discovered Malicious Apps, Deleted By Google From the Play Store
  3. What is Data Classification? Guidelines and Process
  4. Mobile Rotexy Malware Touts Ransomware, Banking Trojan Functions
  5. Subscribe to the relaunched Virus Bulletin eNews newsletter
  6. Play Store Malware Infects Half a Billion
  7. Microsoft PowerPoint as Malware Dropper
  8. OSX.Dummy #malware has been discovered to use chat platforms in order to target #cryptocurrency investors. Learn more with expert @lewisnic
  9. Ukrainian Police Nab Suspected RAT-Slinger
  10. Crypto Mining Malware Infects Make-A-Wish-Foundation Website

EXPLOIT

Nil

VULNERABILITY

  1. Microsoft launches review after a trio of Azure bugs locked users out of Office 365
  2. Did UK city council over-react to a vulnerability report in its recycling app or not?
  3. Linux Kernel is affected by two DoS vulnerabilities still unpatched
  4. DoS Vulnerabilities Impact Linux Kernel
  5. Apache Hadoop Spins Cracking Code Injection Vulnerability YARN
  6. Siemens patches major firewall flaw, other vulnerabilities
  7. #Bluetooth devices might be at risk after a new Bluetooth vulnerability was found targeting #firmware and #OperatingSystem software drivers. Learn
  8. U.S. Postal Service API Flaw Exposes Data of 60 Million Customers
  9. Positive Technologies researchers recently found two serious vulnerabilities that target NCR's #ATMs. Learn how a "black box attack" was involved
  10. Discover how a @DLink #router vulnerability targeted a banking site to steal #UserCredentials with expert Judith Myerson.
  11. For recent big data software vulnerabilities, botnets and coin mining are just the beginning
  12. Frost & Sullivan Commends Rapid7 for Capturing Nearly a Quarter Share of the Global Vulnerability Management Market
at
Labels: