APT report for 2018-10-01

TRANSNATIONAL / UNKNOWN

1. A week in security (September 24 – 30)
2. Formjacking in the Nutshell

CHINA

3. Cyber Security Roundup for September 2018

INDIA

Nothing to report

NORTH KOREA

4. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
5. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
6. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
7. A new Browser Reaper exploit can crash or freeze Mozilla #Firefox, according to a proof of concept published by a
8. Report Ties North Korean Attacks to New Malware, Linked by Word Macros

PAKISTAN

Nothing to report

VIETNAM

Nothing to report

IRAN

Nothing to report

LEBANON

Nothing to report

PALESTINE

Nothing to report

SAUDI ARABIA

Nothing to report

UNITED ARAB EMIRATES

Nothing to report

RUSSIA

9. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
10. A week in security (September 24 – 30)
11. LoJax: Fisrt UEFI Rootkit Found In The Wild

UKRAINE

Nothing to report

Platform report for 2018-10-01

WINDOWS

1. Cyber Security Roundup for September 2018
2. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
3. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
4. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
5. GandCrab ransomware is spreading wildly through several known vulnerabilities
6. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
7. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls

LINUX

8. A week in security (September 24 – 30)
9. Nasty Linux Kernel Vulnerability Discovered, Mandatory Kernel Update Required
10. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls

UNIX

Nothing to report

ANDROID

11. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
12. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
13. Malwarebytes is a champion of National Cybersecurity Awareness Month
14. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
15. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
16. Nasty Linux Kernel Vulnerability Discovered, Mandatory Kernel Update Required
17. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls

IOS

18. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
19. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
20. A week in security (September 24 – 30)
21. Voice Phishing Scams Are Getting More Clever
22. Malwarebytes is a champion of National Cybersecurity Awareness Month
23. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system

MACOS

24. Google Bug Breaks Search Results with a Plus Sign On Mac Safari
25. A week in security (September 24 – 30)

Threat report for 2018-10-01

DATA BREACH

1. 100K Routers Hijacked for Phishing in GhostDNS Campaign
2. Picture-in-Picture Phishing Campaign Goes After Steam Credentials
3. 4 Ways to Protect Your Files from a Data Breach
4. Facebook hacked – 50 Million Users’ Data exposed in the security breach
5. Telegram Patched IP Address Leak Problem In Its Desktop Client
6. Telegram Leaks User IP Addresses
7. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
8. Flaws in Tory party conference app leak ministers' personal information
9. Facebook faces a whopping €1.4 billion penalty under GDPR for Sept. 30 data breach
10. Phishing campaign targets developers of Chrome extensions
11. 3 GOP senators doxed during Kavanaugh hearing
12. Facebook Data Breach Extended to Third-Party Applications
13. Facebook could face up to $1.6bn fine for data breach
14. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls
15. Telegram Calling Feature Leaks Your IP Addresses—Patch Released
16. High-Profile Instagram Accounts Hacked For Ransom In A Recent Campaign

DENIAL-OF-SERVICE

17. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
18. Instagram Being Used To Sell Botnets And Stolen Fortnite Accounts
19. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
20. Torii malware could be gateway to more sophisticated IoT botnet attacks
21. New vicious Torii IoT botnet discovered
22. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
23. Gigantic 100,000-strong botnet used to hijack traffic meant for Brazilian banks
24. Torii IoT Botnet Takes Mirai to the Next Level

MALVERTISING

Nothing to report

PHISHING

25. 100K Routers Hijacked for Phishing in GhostDNS Campaign
26. Picture-in-Picture Phishing Campaign Goes After Steam Credentials
27. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
28. Weak Passwords Abused for 'FruitFly' Mac Malware Distribution
29. Third-Party Apps Using Facebook Login Also Affected by Latest Hacking Incident
30. How to Orchestrate a Smarter Phishing Response
31. Voice Phishing Scams Are Getting More Clever
32. Why nearly 50% of organizations are failing at password security
33. Employees Share Average of 6 Passwords With Co-Workers
34. UK firms’ password security score ‘average’
35. Phishing campaign targets developers of Chrome extensions
36. Password Security Better, Still Poses Business Risk
37. Password Security Better, Still Poses Business Risk
38. Following a loud critical backlash to a new #Chrome login feature and cookie retention functionality, @Google will make changes in

WEB DEFACEMENT

Nothing to report

MALWARE

39. Top Cloud Domain Controller for MSPs
40. Multiple Code Execution Vulnerabilities Found in Atlantis Word Processor
41. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
42. GrandCrab Ransomware Spreads Using Multiple Known Vulnerabilities
43. Fileless Malware Attacks on the Rise, Microsoft Says
44. 'Short, Brutal Lives': Life Expectancy for Malicious Domains
45. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
46. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
47. Google Adds New Rules To End Malicious Chrome Extensions
48. Code Execution Vulnerabilities Uncovered In Atlantis Word Processor
49. Deep Dive Into iTranslator - MITM Malware
50. LoJax: Fisrt UEFI Rootkit Found In The Wild
51. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
52. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
53. Telegram Patched IP Address Leak Problem In Its Desktop Client
54. Weak Passwords Abused for 'FruitFly' Mac Malware Distribution
55. Code execution vulnerabilities uncovered in Atlantis Word Processor
56. Malwarebytes is a champion of National Cybersecurity Awareness Month
57. Monitor privileged execution to defend against
58. Telegram Leaks User IP Addresses
59. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
60. TrickBot Banking Trojan Takes Center Stage in 2018
61. More on the Five Eyes Statement on Encryption and Backdoors
62. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
63. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
64. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
65. GandCrab ransomware is spreading wildly through several known vulnerabilities
66. Docs reveal how Fruitfly Mac spyware initially spread
67. Torii malware could be gateway to more sophisticated IoT botnet attacks
68. SamSam ransomware: How is this version different from others?
69. Ransomware Casts Anchor at the Port of San Diego
70. Hackers Hijacked More Than 100,000 Routers DNS Settings and Redirecting Users to Malicious WebSites
71. Ransomware Casts Anchor at the Port of San Diego
72. #VPNFilter #malware: How can users protect themselves?
73. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
74. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls
75. Telegram Calling Feature Leaks Your IP Addresses—Patch Released
76. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

EXPLOIT

77. A new Browser Reaper exploit can crash or freeze Mozilla #Firefox, according to a proof of concept published by a
78. Python-based attack tools are the most common vector for launching exploit attempts
79. Several Bugs Exploited in Massive Facebook Hack
80. Sophos recently discovered a #Samsam extortion code that performs whole-company attacks through a variety of vulnerability exploits. Discover how this
81. How can attackers exploit a buffer underflow #vulnerability?
82. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

VULNERABILITY

83. Adobe Patches 47 Critical Flaws in Acrobat and DC
84. Multiple Code Execution Vulnerabilities Found in Atlantis Word Processor
85. CVE-2018-11776 and why you need Black Duck Security Advisories
86. Nine NAS Bugs Open LenovoEMC, Iomega Devices to Attack
87. GrandCrab Ransomware Spreads Using Multiple Known Vulnerabilities
88. Google Bug Breaks Search Results with a Plus Sign On Mac Safari
89. Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
90. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
91. Code Execution Vulnerabilities Uncovered In Atlantis Word Processor
92. Facebook: How to minimize the risk of vulnerabilities
93. Code execution vulnerabilities uncovered in Atlantis Word Processor
94. Attackers chained three bugs to breach into the Facebook platform
95. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
96. Monero fixes major ‘burning bug’ flaw, preventing mass devaluation
97. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
98. Flaws in Tory party conference app leak ministers' personal information
99. Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
100. GandCrab ransomware is spreading wildly through several known vulnerabilities
101. Several Bugs Exploited in Massive Facebook Hack
102. Sophos recently discovered a #Samsam extortion code that performs whole-company attacks through a variety of vulnerability exploits. Discover how this
103. Nasty Linux Kernel Vulnerability Discovered, Mandatory Kernel Update Required
104. How can attackers exploit a buffer underflow #vulnerability?
105. CISO @rickhholland joins @drshellface and @mazzazone to discuss the latest #cybersecurity news: Security Flaws Affect 50 Million Facebook Accounts and
106. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
107. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls

Region brief for 2018-10-01

ASIA

1. Cyber Security Roundup for September 2018
2. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
3. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
4. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
5. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
6. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
7. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
8. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
9. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
10. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers

OCEANIA

11. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
12. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT

NORTH AMERICA

13. Cyber Security Roundup for September 2018
14. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
15. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
16. A week in security (September 24 – 30)
17. 4 Ways to Protect Your Files from a Data Breach
18. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
19. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
20. Voice Phishing Scams Are Getting More Clever
21. Malwarebytes is a champion of National Cybersecurity Awareness Month
22. Formjacking in the Nutshell
23. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
24. CISO @rickhholland joins @drshellface and @mazzazone to discuss the latest #cybersecurity news: Security Flaws Affect 50 Million Facebook Accounts and

SOUTH AMERICA

25. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
26. 4 Ways to Protect Your Files from a Data Breach
27. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
28. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
29. Gigantic 100,000-strong botnet used to hijack traffic meant for Brazilian banks
30. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

EUROPE

31. Cyber Security Roundup for September 2018
32. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
33. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
34. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
35. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
36. Facebook: How to minimize the risk of vulnerabilities
37. Voice Phishing Scams Are Getting More Clever
38. Formjacking in the Nutshell
39. TrickBot Banking Trojan Takes Center Stage in 2018
40. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
41. Facebook faces a whopping €1.4 billion penalty under GDPR for Sept. 30 data breach
42. UK firms’ password security score ‘average’

AFRICA

43. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
44. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT

Sector brief for 2018-10-01

HEALTHCARE

1. Malwarebytes is a champion of National Cybersecurity Awareness Month

TRANSPORT

2. Cyber Security Roundup for September 2018
3. A week in security (September 24 – 30)
4. Ransomware Casts Anchor at the Port of San Diego
5. Ransomware Casts Anchor at the Port of San Diego

BANKING & FINANCE

6. Cyber Security Roundup for September 2018
7. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
8. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
9. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
10. A week in security (September 24 – 30)
11. 4 Ways to Protect Your Files from a Data Breach
12. Facebook: How to minimize the risk of vulnerabilities
13. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
14. Voice Phishing Scams Are Getting More Clever
15. Malwarebytes is a champion of National Cybersecurity Awareness Month
16. Formjacking in the Nutshell
17. Attackers chained three bugs to breach into the Facebook platform
18. TrickBot Banking Trojan Takes Center Stage in 2018
19. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
20. Hackers Hijacked More Than 100,000 Routers DNS Settings and Redirecting Users to Malicious WebSites
21. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
22. Gigantic 100,000-strong botnet used to hijack traffic meant for Brazilian banks
23. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

INFORMATION & TELECOMMUNICATION

24. Cyber Security Roundup for September 2018
25. Top Cloud Domain Controller for MSPs
26. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
27. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
28. Fileless Malware Attacks on the Rise, Microsoft Says
29. Google Bug Breaks Search Results with a Plus Sign On Mac Safari
30. A week in security (September 24 – 30)
31. Google Adds New Rules To End Malicious Chrome Extensions
32. Facebook hacked – 50 Million Users’ Data exposed in the security breach
33. Instagram Being Used To Sell Botnets And Stolen Fortnite Accounts
34. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
35. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
36. Facebook: How to minimize the risk of vulnerabilities
37. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
38. Third-Party Apps Using Facebook Login Also Affected by Latest Hacking Incident
39. Voice Phishing Scams Are Getting More Clever
40. Attackers chained three bugs to breach into the Facebook platform
41. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
42. Facebook faces a whopping €1.4 billion penalty under GDPR for Sept. 30 data breach
43. Ransomware Casts Anchor at the Port of San Diego
44. Ransomware Casts Anchor at the Port of San Diego
45. Password Security Better, Still Poses Business Risk
46. Several Bugs Exploited in Massive Facebook Hack
47. Password Security Better, Still Poses Business Risk
48. Facebook Data Breach Extended to Third-Party Applications
49. Nasty Linux Kernel Vulnerability Discovered, Mandatory Kernel Update Required
50. CISO @rickhholland joins @drshellface and @mazzazone to discuss the latest #cybersecurity news: Security Flaws Affect 50 Million Facebook Accounts and
51. Following a loud critical backlash to a new #Chrome login feature and cookie retention functionality, @Google will make changes in
52. Facebook could face up to $1.6bn fine for data breach
53. Torii IoT Botnet Takes Mirai to the Next Level

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

54. GrandCrab Ransomware Spreads Using Multiple Known Vulnerabilities
55. Malwarebytes is a champion of National Cybersecurity Awareness Month

GOVERNMENT & PUBLIC SERVICE

56. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
57. Malwarebytes is a champion of National Cybersecurity Awareness Month

Daily brief for 2018-10-01

ASIA

1. Cyber Security Roundup for September 2018
2. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
3. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
4. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
5. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
6. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
7. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
8. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
9. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
10. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers

WORLD

11. Cyber Security Roundup for September 2018
12. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
13. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
14. A week in security (September 24 – 30)
15. 4 Ways to Protect Your Files from a Data Breach
16. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
17. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
18. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
19. Facebook: How to minimize the risk of vulnerabilities
20. Voice Phishing Scams Are Getting More Clever
21. Malwarebytes is a champion of National Cybersecurity Awareness Month
22. Formjacking in the Nutshell
23. TrickBot Banking Trojan Takes Center Stage in 2018
24. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
25. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
26. Facebook faces a whopping €1.4 billion penalty under GDPR for Sept. 30 data breach
27. UK firms’ password security score ‘average’
28. CISO @rickhholland joins @drshellface and @mazzazone to discuss the latest #cybersecurity news: Security Flaws Affect 50 Million Facebook Accounts and
29. Gigantic 100,000-strong botnet used to hijack traffic meant for Brazilian banks
30. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

ATTACKS

31. 100K Routers Hijacked for Phishing in GhostDNS Campaign
32. Picture-in-Picture Phishing Campaign Goes After Steam Credentials
33. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
34. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
35. 4 Ways to Protect Your Files from a Data Breach
36. Facebook hacked – 50 Million Users’ Data exposed in the security breach
37. Instagram Being Used To Sell Botnets And Stolen Fortnite Accounts
38. Telegram Patched IP Address Leak Problem In Its Desktop Client
39. Weak Passwords Abused for 'FruitFly' Mac Malware Distribution
40. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
41. Third-Party Apps Using Facebook Login Also Affected by Latest Hacking Incident
42. How to Orchestrate a Smarter Phishing Response
43. Voice Phishing Scams Are Getting More Clever
44. Why nearly 50% of organizations are failing at password security
45. Employees Share Average of 6 Passwords With Co-Workers
46. Telegram Leaks User IP Addresses
47. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
48. Flaws in Tory party conference app leak ministers' personal information
49. Facebook faces a whopping €1.4 billion penalty under GDPR for Sept. 30 data breach
50. UK firms’ password security score ‘average’
51. Torii malware could be gateway to more sophisticated IoT botnet attacks
52. Phishing campaign targets developers of Chrome extensions
53. Password Security Better, Still Poses Business Risk
54. New vicious Torii IoT botnet discovered
55. Password Security Better, Still Poses Business Risk
56. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
57. 3 GOP senators doxed during Kavanaugh hearing
58. Facebook Data Breach Extended to Third-Party Applications
59. Following a loud critical backlash to a new #Chrome login feature and cookie retention functionality, @Google will make changes in
60. Facebook could face up to $1.6bn fine for data breach
61. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls
62. Telegram Calling Feature Leaks Your IP Addresses—Patch Released
63. Gigantic 100,000-strong botnet used to hijack traffic meant for Brazilian banks
64. Torii IoT Botnet Takes Mirai to the Next Level
65. High-Profile Instagram Accounts Hacked For Ransom In A Recent Campaign

THREATS

66. Adobe Patches 47 Critical Flaws in Acrobat and DC
67. Top Cloud Domain Controller for MSPs
68. Multiple Code Execution Vulnerabilities Found in Atlantis Word Processor
69. CVE-2018-11776 and why you need Black Duck Security Advisories
70. GhostDNS malware already infected over 100K+ devices and targets 70+ different types of home routers
71. Nine NAS Bugs Open LenovoEMC, Iomega Devices to Attack
72. GrandCrab Ransomware Spreads Using Multiple Known Vulnerabilities
73. Fileless Malware Attacks on the Rise, Microsoft Says
74. 'Short, Brutal Lives': Life Expectancy for Malicious Domains
75. Google Bug Breaks Search Results with a Plus Sign On Mac Safari
76. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
77. Roaming Mantis Group Adds Phishing and Web Crypto Mining for iOS Devices
78. Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
79. Google Adds New Rules To End Malicious Chrome Extensions
80. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
81. Code Execution Vulnerabilities Uncovered In Atlantis Word Processor
82. Deep Dive Into iTranslator - MITM Malware
83. LoJax: Fisrt UEFI Rootkit Found In The Wild
84. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
85. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
86. Telegram Patched IP Address Leak Problem In Its Desktop Client
87. Weak Passwords Abused for 'FruitFly' Mac Malware Distribution
88. Facebook: How to minimize the risk of vulnerabilities
89. Code execution vulnerabilities uncovered in Atlantis Word Processor
90. A new Browser Reaper exploit can crash or freeze Mozilla #Firefox, according to a proof of concept published by a
91. Malwarebytes is a champion of National Cybersecurity Awareness Month
92. Monitor privileged execution to defend against
93. Attackers chained three bugs to breach into the Facebook platform
94. Telegram Leaks User IP Addresses
95. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
96. TrickBot Banking Trojan Takes Center Stage in 2018
97. More on the Five Eyes Statement on Encryption and Backdoors
98. Monero fixes major ‘burning bug’ flaw, preventing mass devaluation
99. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
100. Telegram not really anonymous? Researcher reports bug that leaks IP addresses
101. Flaws in Tory party conference app leak ministers' personal information
102. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
103. Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader
104. GandCrab ransomware is spreading wildly through several known vulnerabilities
105. Python-based attack tools are the most common vector for launching exploit attempts
106. Docs reveal how Fruitfly Mac spyware initially spread
107. Torii malware could be gateway to more sophisticated IoT botnet attacks
108. SamSam ransomware: How is this version different from others?
109. Ransomware Casts Anchor at the Port of San Diego
110. Hackers Hijacked More Than 100,000 Routers DNS Settings and Redirecting Users to Malicious WebSites
111. Ransomware Casts Anchor at the Port of San Diego
112. Several Bugs Exploited in Massive Facebook Hack
113. Sophos recently discovered a #Samsam extortion code that performs whole-company attacks through a variety of vulnerability exploits. Discover how this
114. #VPNFilter #malware: How can users protect themselves?
115. Nasty Linux Kernel Vulnerability Discovered, Mandatory Kernel Update Required
116. How can attackers exploit a buffer underflow #vulnerability?
117. CISO @rickhholland joins @drshellface and @mazzazone to discuss the latest #cybersecurity news: Security Flaws Affect 50 Million Facebook Accounts and
118. Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor
119. Telegram CVE-2018-17780 flaw causes the leak of IP addresses when initiating calls
120. Telegram Calling Feature Leaks Your IP Addresses—Patch Released
121. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

CRIME

122. Cyber Security Roundup for September 2018
123. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
124. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
125. 4 Ways to Protect Your Files from a Data Breach
126. Gemalto ID Card Provider Sued for €152 Million in eID Vulnerability Case
127. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
128. NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
129. Facebook: How to minimize the risk of vulnerabilities
130. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
131. How to Orchestrate a Smarter Phishing Response
132. Voice Phishing Scams Are Getting More Clever
133. Formjacking in the Nutshell
134. Attackers chained three bugs to breach into the Facebook platform
135. TrickBot Banking Trojan Takes Center Stage in 2018
136. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system
137. Hackers Hijacked More Than 100,000 Routers DNS Settings and Redirecting Users to Malicious WebSites
138. Sophos recently discovered a #Samsam extortion code that performs whole-company attacks through a variety of vulnerability exploits. Discover how this
139. GhostDNS: New DNS Changer Botnet Hijacked Over 100,000 Routers
140. New Banking Malware Steal Money From Victim’s Bank Accounts Using Weaponized Adobe Reader

POLITICS

141. Hacking Week Call for Pitches: Who Is the Weakest Link In Cybersecurity?
142. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
143. A week in security (September 24 – 30)
144. Facebook: How to minimize the risk of vulnerabilities
145. Hackers Are Selling Botnets and Stolen ‘Fortnite’ Accounts Over Instagram
146. Malwarebytes is a champion of National Cybersecurity Awareness Month
147. Report Ties North Korean Attacks to New Malware, Linked by Word Macros
148. Roaming Mantis part III: iOS crypto-mining and spreading via malicious content delivery system