Daily brief for 2018-09-17

Asia

1. Zero day in popular video surveillance technology goes public, unpatched
2. APT10 targets Japanese media company with upgraded UPPERCUT
3. Deterrence or waste of time? Experts at odds over DOJ's actions on North Korea
4. Amazon Probing Staff Data Leaks

World

1. Zero day in popular video surveillance technology goes public, unpatched
2. Ransomware Disrupts Flight Boards at U.K. Airport
3. UK Airport Won’t Negotiate With Ransomware Attackers; Falls Back to Whiteboards
4. Deterrence or waste of time? Experts at odds over DOJ's actions on North Korea
5. Ransomware Takes Down Airport's Flight Information Screens
6. Google Android team found high severity flaw in Honeywell Android-based handheld computers
7. Ransomware Attack Hits Bristol Airport, Flight Display Screens Went Offline

Attacks

1. iOS 12 Patches Memory Bugs, Safari 12 Fixes Data Leaks
2. New XBash malware combines ransomware, coinminer, botnet, and worm features in deadly combo
3. Apple iOS 12 security update tackles Safari spoofing, data leaks, kernel memory flaws
4. Survey: Nearly one-third of breached companies reported job losses after data breach
5. New Botnet Hides in Blockchain DNS Mist and Removes Cryptominer
6. Survey: Nearly one-third of breached companies reported job losses after data breach
7. Amazon Probing Staff Data Leaks
8. Xbash Combines Botnet, Ransomware, Coinmining in Worm that Targets Linux and Windows
9. On the hook! Phishing trip nets “Barbara” 5 years and whopping fine
10. This new phishing attack uses an old trick to steal passwords and credit card details
11. Amazon staff said to be taking bribes to leak data

Threats

1. Zero-Day Bug Allows Hackers to Access CCTV Surveillance Cameras
2. iOS 12 Patches Memory Bugs, Safari 12 Fixes Data Leaks
3. New XBash malware combines ransomware, coinminer, botnet, and worm features in deadly combo
4. Apple iOS 12 security update tackles Safari spoofing, data leaks, kernel memory flaws
5. Proofpoint: One month out from deadline, half of agency domains are DMARC compliant
6. Colorado firm claims ransomware attack behind closure
7. Zero day in popular video surveillance technology goes public, unpatched
8. New Botnet Hides in Blockchain DNS Mist and Removes Cryptominer
9. Old WordPress Plugin Being Exploited in RCE Attacks
10. New Xbash Malware a Cocktail of Malicious Functions
11. Cyber scammers using Hurricane Florence as a hook for malicious emails
12. Bristol airport hit with ransomware attack
13. Colorado firm claims ransomware attack behind closure
14. Facebook bolsters bug bounty program with rewards for user token exposure
15. Hackers hijack surveillance camera footage with 'Peekaboo' zero-day vulnerability
16. Ransomware Disrupts Flight Boards at U.K. Airport
17. Privilege Escalation Vulnerability Found in Honeywell Android Computers
18. UK Airport Won’t Negotiate With Ransomware Attackers; Falls Back to Whiteboards
19. Uptick in malware designed to size up targets before launching full payload
20. Ransomware Takes Down Airport's Flight Information Screens
21. Xbash Combines Botnet, Ransomware, Coinmining in Worm that Targets Linux and Windows
22. Why the 'fixed' Windows EternalBlue exploit won't die
23. Google Android team found high severity flaw in Honeywell Android-based handheld computers
24. Google's Android Team Finds Serious Flaw in Honeywell Devices
25. Ransomware Attack Takes Down Bristol Airport's Flight Display Screens
26. Wannamine Malware Still Penetrate the Unpatched SMB Computers using NSA’s EternalBlue Exploit
27. Ransomware Attack Hits Bristol Airport, Flight Display Screens Went Offline
28. Watch Out! This New Web Exploit Can Crash and Restart Your iPhone

Crime

1. Zero day in popular video surveillance technology goes public, unpatched
2. New Xbash Malware a Cocktail of Malicious Functions
3. On the hook! Phishing trip nets “Barbara” 5 years and whopping fine
4. This new phishing attack uses an old trick to steal passwords and credit card details
5. Wannamine Malware Still Penetrate the Unpatched SMB Computers using NSA’s EternalBlue Exploit

Politics

1. Amazon Probing Staff Data Leaks