APT report for 2018-10-02

TRANSNATIONAL / UNKNOWN

1. Cyber Threat Landscape: How it’s Evolving & How to Respond
2. Formjacking attacks spike as Magecart sets sites on ecommerce
3. Formjacking attacks spike as Magecart sets sights on ecommerce

CHINA

Nothing to report

INDIA

Nothing to report

NORTH KOREA

4. NOKKI Malware Sports Mysterious Link to Reaper APT Group
5. AR18-275A: MAR-10201537 – HIDDEN COBRA FASTCash-Related Malware
6. TA18-275A: HIDDEN COBRA – FASTCash Campaign
7. Dogcall Rat links NOKKI malware with Reaper group - indicators provided

PAKISTAN

Nothing to report

VIETNAM

Nothing to report

IRAN

Nothing to report

LEBANON

Nothing to report

PALESTINE

Nothing to report

SAUDI ARABIA

Nothing to report

UNITED ARAB EMIRATES

Nothing to report

RUSSIA

Nothing to report

UKRAINE

Nothing to report

Platform report for 2018-10-02

WINDOWS

1. Foxit Reader 9.3 addresses 118 Vulnerabilities, 18 of them rated as critical
2. Following a Trail of Confusion: PowerShell in Malicious Office Documents
3. AR18-275A: MAR-10201537 – HIDDEN COBRA FASTCash-Related Malware
4. Ignite 2018 highlights: passwordless sign-in, confidential computing, new threat protection, and more
5. TA18-275A: HIDDEN COBRA – FASTCash Campaign
6. Use Windows, macOS? Don’t be hacked by PDF, patch these critical Adobe flaws now
7. Windows Defender exclusions reek of malware
8. AV-TEST Rates Check Point’s SandBlast Agent as a Top Product in Corporate Endpoint Protection
9. Adobe fixes 47 critical flaws in Acrobat and Reader
10. 86 Vulnerabilities Fixed with Adobe Security Updates for Adobe Acrobat and Reader
11. Use Windows, macOS? Don't be hacked by PDF, patch these critical Adobe flaws now
12. CVE-2018-8373: Hackers’ best partner to spread Trojans
13. Adobe Patches 86 Vulnerabilities in Acrobat Products
14. Adobe security updates for Acrobat fix 86 Vulnerabilities, 46 rated as critical
15. Telegram vulnerability causes IP address leaking
16. Hackers use malicious content delivery system to target iOS device
17. Adobe Releases Security Updates for Acrobat that Fix 86 Vulnerabilities

LINUX

18. Telegram vulnerability causes IP address leaking

UNIX

19. AR18-275A: MAR-10201537 – HIDDEN COBRA FASTCash-Related Malware
20. TA18-275A: HIDDEN COBRA – FASTCash Campaign

ANDROID

21. Google Patches Critical Vulnerabilities in Android OS
22. Ignite 2018 highlights: passwordless sign-in, confidential computing, new threat protection, and more
23. Fortnite gamers targeted by data theft malware
24. Boffins Tricks Password Protection Using Imposter Apps
25. Cyber Threat Landscape: How it’s Evolving & How to Respond
26. Researchers use Android password managers to make phishing attacks more practical
27. Vulnerable Android password managers make phishing attacks easier
28. Telegram vulnerability causes IP address leaking
29. Hackers use malicious content delivery system to target iOS device

IOS

30. Ignite 2018 highlights: passwordless sign-in, confidential computing, new threat protection, and more
31. Hackers use malicious content delivery system to target iOS device

MACOS

32. Use Windows, macOS? Don’t be hacked by PDF, patch these critical Adobe flaws now
33. Adobe fixes 47 critical flaws in Acrobat and Reader
34. 86 Vulnerabilities Fixed with Adobe Security Updates for Adobe Acrobat and Reader
35. Use Windows, macOS? Don't be hacked by PDF, patch these critical Adobe flaws now
36. Adobe Patches 86 Vulnerabilities in Acrobat Products
37. Adobe security updates for Acrobat fix 86 Vulnerabilities, 46 rated as critical

Threat report for 2018-10-02

DATA BREACH

1. DanaBot Observed in Large Campaign Targeting U.S. Organizations
2. Financial Sector Data Breaches Soar Despite Heavy Security Spending
3. TA18-275A: HIDDEN COBRA – FASTCash Campaign
4. Gwinnett Medical Center investigating possible data breach
5. Fortnite gamers targeted by data theft malware
6. Nielsen warns of Chinese influence campaign, but not with midterms
7. Apollo Data Breach Leads To More Than 200 Million Contact Records Stolen
8. The @UN accidentally exposed credentials on public @trello boards. Plus, #Uber is set to pay $148 million settlement following its
9. DanaBot Observed in Large Campaign Targeting U.S. Organizations
10. UK Conservative Party Conference dedicated app leaks attendee data
11. Breaking bank security: Record theft rises to new heights
12. Facebook could face $1.63bn fine under GDPR over latest data breach
13. How #livechatsoftware leaked
14. UN Sensitive Information Exposed Publicly Due to Neglected Security Settings
15. #DanaBot Gains Popularity and Targets US Organizations in Large Campaigns. http://ow.ly/mJza50jiHdI via the Threat Insight research
16. Facebook Hacked: 50 Million Users' Data Exposed
17. #SecurityNews: #Tory App Snafu exposes Ministers’ personal info including phone numbers and other personal details of Cabinet ministers, as the
18. Telegram vulnerability causes IP address leaking
19. Facebook may be fined up to $1.63 billion due to data breach
20. Wait, this isn't The Onion... "FBI fitness app asks users to agree to 'all of their activities monitored and recorded'"
21. #Video: Bringing all of your #data together under a single management portfolio, under a single #database, allows your organization to

DENIAL-OF-SERVICE

22. Torii botnet, probably the most sophisticated IoT botnet of ever
23. California Governor Signs Bill Requiring Bots to Disclose Their True Identity
24. Rarely a week goes by without reports of a large and damaging #DDoS attack against a major business. Techniques are
25. Torii Botnet – A New Sophisticated IoT Botnet Attack in Wide – More Powerful Than Mirai
26. Stop DDoS Attacks In 10 Seconds – Organization’s Most Important Consideration for DDOS Attack Mitigation
27. Torii malware could be gateway to more sophisticated IoT botnet attacks

MALVERTISING

Nothing to report

PHISHING

28. Cyber criminals using lookalike online shopping domains to phish buyers
29. Nearly 50% of businesses have yet to take control of password security - report
30. Sophisticated Voice Phishing Scams
31. WifiPhisher – WiFi Crack and Phishing Framework
32. Ignite 2018 highlights: passwordless sign-in, confidential computing, new threat protection, and more
33. Hackers can use Microsoft Sway to carry out phishing attacks 'without fear of detection'
34. ThreatList: Password Hygiene Remains Lackluster in Global Businesses
35. Boffins Tricks Password Protection Using Imposter Apps
36. Strengthen your security with Avast password generator | Avast
37. Researchers use Android password managers to make phishing attacks more practical
38. Vulnerable Android password managers make phishing attacks easier
39. True password behaviors in the workplace revealed
40. Sites that use Facebook login could be affected by hack
41. ​NZ customs can now demand phone or laptop passwords
42. When you need to make a new #Password, what do you do? The easiest and most secure way is to
43. At #MSIgnite, @Microsoft declared "an end to era of passwords" with an update to its Authenticator app, which will allow

WEB DEFACEMENT

44. Case involving 'AlfabetoVirtual' website defacements ends in guilty plea
45. Hacker 'AlfabetoVirtual' Pleads Guilty to NYC Comptroller, West Point Website Defacements

MALWARE

46. Cyber criminals using lookalike online shopping domains to phish buyers
47. Canadian restaurant chain suffers country-wide outage after malware outbreak
48. Foxit Reader 9.3 addresses 118 Vulnerabilities, 18 of them rated as critical
49. Researchers Link New NOKKI Malware to North Korean Actor
50. NOKKI Malware Sports Mysterious Link to Reaper APT Group
51. Malware 101: The Malware Tools That Attackers Use
52. Following a Trail of Confusion: PowerShell in Malicious Office Documents
53. Google taking new steps to prevent malicious Chrome extensions
54. AR18-275A: MAR-10201537 – HIDDEN COBRA FASTCash-Related Malware
55. Enabling Enterprise-Grade Hybrid Cloud Data Processing with SAP and Cisco – Part 2
56. A remote access #Trojan -- dubbed #GravityRAT -- was discovered by Cisco Talos (@TalosSecurity) to be checking for #antimalware sandboxes.
57. Danabot Banking Malware Now Targeting Banks in the U.S.
58. Dogcall Rat links NOKKI malware with Reaper group - indicators provided
59. The MITRE ATT&CK Framework: Command and Control
60. Ransomware attacks via RDP on the rise | Avast
61. Keyloggers Turn to Zoho Office Suite in Droves for Data Exfiltration
62. Keyloggers Turn to Zoho Office Suite in Droves for Data Exfiltration
63. World Cup may have distracted malware hackers
64. Microsoft Detection Tools Sniff Out Fileless Malware
65. Google Cracks Down on Malicious Chrome Extensions in Major Update
66. Fortnite gamers targeted by data theft malware
67. Windows Defender exclusions reek of malware
68. DanaBot Observed in Large Campaign Targeting U.S. Organizations
69. Report: Zoho's domain regularly exploited to move keylogger data
70. A Staggering Amount of Stolen Data is Heading to Zoho Domains
71. AV-TEST Rates Check Point’s SandBlast Agent as a Top Product in Corporate Endpoint Protection
72. Malware Less Common in Q2, Still Top Attack Method
73. Malware Less Common in Q2, Still Top Attack Method
74. Alphabet's @chroniclesec unveiled #VirusTotal Enterprise, a new version of the file scanning service designed specifically for enterprise customers. By @RobWright22
75. Fruitfly Mac malware creator used it to spy on minors; FBI discloses technique
76. CVE-2018-8373: Hackers’ best partner to spread Trojans
77. Desktop Telegram users showing off not only their silly selfies but also their IP addresses
78. New Type of Malware Developed by Russian Hackers Eludes Discovery
79. The Army is working toward a cyber domain doctrine
80. The MITRE ATT&CK Framework: Command and Control
81. Improving #mobilesecurity programs to detect
82. Adobe security updates for Acrobat fix 86 Vulnerabilities, 46 rated as critical
83. A group of #malware was discovered targeting public SSH servers. However, certain #IPaddresses are avoided. Discover how this is possible
84. Telegram vulnerability causes IP address leaking
85. Hackers use malicious content delivery system to target iOS device
86. Torii malware could be gateway to more sophisticated IoT botnet attacks

EXPLOIT

87. .@FBI, @DHSgov call on users to mitigate #RemoteDesktop Protocol vulnerabilities and handle RDP exploits on their own, even as the
88. Report: Zoho's domain regularly exploited to move keylogger data
89. Facebook Breach: Attackers Exploited Privacy Feature
90. SQL injection explained: How these attacks work and how to prevent them

VULNERABILITY

91. PDF patch time: fixes land for over 100 flaws in Adobe's and Foxit's PDF software
92. Foxit PDF Reader Fixes High-Severity Remote Code Execution Flaws
93. Foxit Reader 9.3 addresses 118 Vulnerabilities, 18 of them rated as critical
94. Google Patches Critical Vulnerabilities in Android OS
95. Vulnerability Spotlight: Adobe Acrobat Reader DC Collab reviewServer Remote Code Execution Vulnerability
96. Foxit Reader Update Patches Over 100 Vulnerabilities
97. Use Windows, macOS? Don’t be hacked by PDF, patch these critical Adobe flaws now
98. New study finds 5 of every 6 routers are inadequately updated for security flaws
99. .@FBI, @DHSgov call on users to mitigate #RemoteDesktop Protocol vulnerabilities and handle RDP exploits on their own, even as the
100. Adobe Releases Updates For 85 PDF Related CVEs
101. Nine NAS Bugs Open LenovoEMC, Iomega Devices To Attack
102. Rep. Speier: Congress needs a hack demo to understand election vulnerabilities
103. Cisco Talos discloses serious vulnerabilities in Foxit PDF Reader
104. Adobe fixes 47 critical flaws in Acrobat and Reader
105. 86 Vulnerabilities Fixed with Adobe Security Updates for Adobe Acrobat and Reader
106. Use Windows, macOS? Don't be hacked by PDF, patch these critical Adobe flaws now
107. CVE-2018-8373: Hackers’ best partner to spread Trojans
108. Vulnerability Spotlight: Adobe Acrobat Reader DC Collab reviewServer Remote Code Execution Vulnerability
109. Adobe Patches 86 Vulnerabilities in Acrobat Products
110. Adobe security updates for Acrobat fix 86 Vulnerabilities, 46 rated as critical
111. Telegram vulnerability causes IP address leaking
112. Security Update for Foxit PDF Reader Fixes 118 Vulnerabilities
113. Adobe Releases Security Updates for Acrobat that Fix 86 Vulnerabilities

Region brief for 2018-10-02

ASIA

1. Case involving 'AlfabetoVirtual' website defacements ends in guilty plea
2. Researchers Link New NOKKI Malware to North Korean Actor
3. TA18-275A: HIDDEN COBRA – FASTCash Campaign
4. Nielsen warns of Chinese influence campaign, but not with midterms
5. Report: Zoho's domain regularly exploited to move keylogger data
6. A Staggering Amount of Stolen Data is Heading to Zoho Domains
7. Hackers use malicious content delivery system to target iOS device

OCEANIA

8. Danabot Banking Malware Now Targeting Banks in the U.S.

NORTH AMERICA

9. Case involving 'AlfabetoVirtual' website defacements ends in guilty plea
10. Canadian restaurant chain suffers country-wide outage after malware outbreak
11. DanaBot Observed in Large Campaign Targeting U.S. Organizations
12. California Governor Signs Bill Requiring Bots to Disclose Their True Identity
13. AR18-275A: MAR-10201537 – HIDDEN COBRA FASTCash-Related Malware
14. Ignite 2018 highlights: passwordless sign-in, confidential computing, new threat protection, and more
15. TA18-275A: HIDDEN COBRA – FASTCash Campaign
16. Danabot Banking Malware Now Targeting Banks in the U.S.
17. Ransomware attacks via RDP on the rise | Avast
18. Rep. Speier: Congress needs a hack demo to understand election vulnerabilities
19. Fortnite gamers targeted by data theft malware
20. Nielsen warns of Chinese influence campaign, but not with midterms
21. DanaBot Observed in Large Campaign Targeting U.S. Organizations
22. Cyber Threat Landscape: How it’s Evolving & How to Respond
23. #DanaBot Gains Popularity and Targets US Organizations in Large Campaigns. http://ow.ly/mJza50jiHdI via the Threat Insight research
24. Facebook may be fined up to $1.63 billion due to data breach

SOUTH AMERICA

25. Case involving 'AlfabetoVirtual' website defacements ends in guilty plea

EUROPE

26. Torii botnet, probably the most sophisticated IoT botnet of ever
27. World Cup may have distracted malware hackers
28. Microsoft Detection Tools Sniff Out Fileless Malware
29. Gwinnett Medical Center investigating possible data breach
30. Rep. Speier: Congress needs a hack demo to understand election vulnerabilities
31. Fortnite gamers targeted by data theft malware
32. Cyber Threat Landscape: How it’s Evolving & How to Respond
33. UK Conservative Party Conference dedicated app leaks attendee data
34. New Type of Malware Developed by Russian Hackers Eludes Discovery
35. Sites that use Facebook login could be affected by hack

AFRICA

Nothing to report

Sector brief for 2018-10-02

HEALTHCARE

1. Gwinnett Medical Center investigating possible data breach

TRANSPORT

2. TA18-275A: HIDDEN COBRA – FASTCash Campaign
3. UN Sensitive Information Exposed Publicly Due to Neglected Security Settings

BANKING & FINANCE

4. DanaBot Observed in Large Campaign Targeting U.S. Organizations
5. Financial Sector Data Breaches Soar Despite Heavy Security Spending
6. AR18-275A: MAR-10201537 – HIDDEN COBRA FASTCash-Related Malware
7. TA18-275A: HIDDEN COBRA – FASTCash Campaign
8. Danabot Banking Malware Now Targeting Banks in the U.S.
9. World Cup may have distracted malware hackers
10. DanaBot Observed in Large Campaign Targeting U.S. Organizations
11. Cyber Threat Landscape: How it’s Evolving & How to Respond
12. Strengthen your security with Avast password generator | Avast
13. Breaking bank security: Record theft rises to new heights

INFORMATION & TELECOMMUNICATION

14. Torii botnet, probably the most sophisticated IoT botnet of ever
15. Following a Trail of Confusion: PowerShell in Malicious Office Documents
16. Google taking new steps to prevent malicious Chrome extensions
17. Google Patches Critical Vulnerabilities in Android OS
18. AR18-275A: MAR-10201537 – HIDDEN COBRA FASTCash-Related Malware
19. Ignite 2018 highlights: passwordless sign-in, confidential computing, new threat protection, and more
20. Hackers can use Microsoft Sway to carry out phishing attacks 'without fear of detection'
21. TA18-275A: HIDDEN COBRA – FASTCash Campaign
22. Ransomware attacks via RDP on the rise | Avast
23. Microsoft Detection Tools Sniff Out Fileless Malware
24. Google Cracks Down on Malicious Chrome Extensions in Major Update
25. Fortnite gamers targeted by data theft malware
26. Boffins Tricks Password Protection Using Imposter Apps
27. Cyber Threat Landscape: How it’s Evolving & How to Respond
28. Researchers use Android password managers to make phishing attacks more practical
29. Malware Less Common in Q2, Still Top Attack Method
30. Facebook could face $1.63bn fine under GDPR over latest data breach
31. Malware Less Common in Q2, Still Top Attack Method
32. CVE-2018-8373: Hackers’ best partner to spread Trojans
33. Facebook Breach: Attackers Exploited Privacy Feature
34. UN Sensitive Information Exposed Publicly Due to Neglected Security Settings
35. #DanaBot Gains Popularity and Targets US Organizations in Large Campaigns. http://ow.ly/mJza50jiHdI via the Threat Insight research
36. Vulnerable Android password managers make phishing attacks easier
37. Facebook Hacked: 50 Million Users' Data Exposed
38. Rarely a week goes by without reports of a large and damaging #DDoS attack against a major business. Techniques are
39. #SecurityNews: #Tory App Snafu exposes Ministers’ personal info including phone numbers and other personal details of Cabinet ministers, as the
40. Sites that use Facebook login could be affected by hack
41. Facebook may be fined up to $1.63 billion due to data breach
42. Wait, this isn't The Onion... "FBI fitness app asks users to agree to 'all of their activities monitored and recorded'"
43. When you need to make a new #Password, what do you do? The easiest and most secure way is to
44. #Video: Bringing all of your #data together under a single management portfolio, under a single #database, allows your organization to
45. At #MSIgnite, @Microsoft declared "an end to era of passwords" with an update to its Authenticator app, which will allow

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

46. Malware 101: The Malware Tools That Attackers Use

GOVERNMENT & PUBLIC SERVICE

47. California Governor Signs Bill Requiring Bots to Disclose Their True Identity
48. Rep. Speier: Congress needs a hack demo to understand election vulnerabilities

Daily brief for 2018-10-02

ASIA

1. Case involving 'AlfabetoVirtual' website defacements ends in guilty plea
2. Researchers Link New NOKKI Malware to North Korean Actor
3. TA18-275A: HIDDEN COBRA – FASTCash Campaign
4. Nielsen warns of Chinese influence campaign, but not with midterms
5. Report: Zoho's domain regularly exploited to move keylogger data
6. A Staggering Amount of Stolen Data is Heading to Zoho Domains
7. Hackers use malicious content delivery system to target iOS device

WORLD

8. Case involving 'AlfabetoVirtual' website defacements ends in guilty plea
9. Canadian restaurant chain suffers country-wide outage after malware outbreak
10. Torii botnet, probably the most sophisticated IoT botnet of ever
11. DanaBot Observed in Large Campaign Targeting U.S. Organizations
12. California Governor Signs Bill Requiring Bots to Disclose Their True Identity
13. AR18-275A: MAR-10201537 – HIDDEN COBRA FASTCash-Related Malware
14. Ignite 2018 highlights: passwordless sign-in, confidential computing, new threat protection, and more
15. TA18-275A: HIDDEN COBRA – FASTCash Campaign
16. Danabot Banking Malware Now Targeting Banks in the U.S.
17. Ransomware attacks via RDP on the rise | Avast
18. World Cup may have distracted malware hackers
19. Microsoft Detection Tools Sniff Out Fileless Malware
20. Gwinnett Medical Center investigating possible data breach
21. Rep. Speier: Congress needs a hack demo to understand election vulnerabilities
22. Fortnite gamers targeted by data theft malware
23. Nielsen warns of Chinese influence campaign, but not with midterms
24. DanaBot Observed in Large Campaign Targeting U.S. Organizations
25. Cyber Threat Landscape: How it’s Evolving & How to Respond
26. UK Conservative Party Conference dedicated app leaks attendee data
27. New Type of Malware Developed by Russian Hackers Eludes Discovery
28. #DanaBot Gains Popularity and Targets US Organizations in Large Campaigns. http://ow.ly/mJza50jiHdI via the Threat Insight research
29. Sites that use Facebook login could be affected by hack
30. Facebook may be fined up to $1.63 billion due to data breach

ATTACKS

31. Cyber criminals using lookalike online shopping domains to phish buyers
32. Nearly 50% of businesses have yet to take control of password security - report
33. Case involving 'AlfabetoVirtual' website defacements ends in guilty plea
34. Sophisticated Voice Phishing Scams
35. Torii botnet, probably the most sophisticated IoT botnet of ever
36. DanaBot Observed in Large Campaign Targeting U.S. Organizations
37. California Governor Signs Bill Requiring Bots to Disclose Their True Identity
38. Financial Sector Data Breaches Soar Despite Heavy Security Spending
39. WifiPhisher – WiFi Crack and Phishing Framework
40. Ignite 2018 highlights: passwordless sign-in, confidential computing, new threat protection, and more
41. Hackers can use Microsoft Sway to carry out phishing attacks 'without fear of detection'
42. TA18-275A: HIDDEN COBRA – FASTCash Campaign
43. Hacker 'AlfabetoVirtual' Pleads Guilty to NYC Comptroller, West Point Website Defacements
44. Gwinnett Medical Center investigating possible data breach
45. Fortnite gamers targeted by data theft malware
46. Nielsen warns of Chinese influence campaign, but not with midterms
47. Apollo Data Breach Leads To More Than 200 Million Contact Records Stolen
48. ThreatList: Password Hygiene Remains Lackluster in Global Businesses
49. The @UN accidentally exposed credentials on public @trello boards. Plus, #Uber is set to pay $148 million settlement following its
50. Boffins Tricks Password Protection Using Imposter Apps
51. DanaBot Observed in Large Campaign Targeting U.S. Organizations
52. Strengthen your security with Avast password generator | Avast
53. UK Conservative Party Conference dedicated app leaks attendee data
54. Researchers use Android password managers to make phishing attacks more practical
55. Breaking bank security: Record theft rises to new heights
56. Facebook could face $1.63bn fine under GDPR over latest data breach
57. How #livechatsoftware leaked
58. UN Sensitive Information Exposed Publicly Due to Neglected Security Settings
59. #DanaBot Gains Popularity and Targets US Organizations in Large Campaigns. http://ow.ly/mJza50jiHdI via the Threat Insight research
60. Vulnerable Android password managers make phishing attacks easier
61. Facebook Hacked: 50 Million Users' Data Exposed
62. True password behaviors in the workplace revealed
63. Rarely a week goes by without reports of a large and damaging #DDoS attack against a major business. Techniques are
64. #SecurityNews: #Tory App Snafu exposes Ministers’ personal info including phone numbers and other personal details of Cabinet ministers, as the
65. Torii Botnet – A New Sophisticated IoT Botnet Attack in Wide – More Powerful Than Mirai
66. Telegram vulnerability causes IP address leaking
67. Sites that use Facebook login could be affected by hack
68. Facebook may be fined up to $1.63 billion due to data breach
69. Wait, this isn't The Onion... "FBI fitness app asks users to agree to 'all of their activities monitored and recorded'"
70. ​NZ customs can now demand phone or laptop passwords
71. Stop DDoS Attacks In 10 Seconds – Organization’s Most Important Consideration for DDOS Attack Mitigation
72. When you need to make a new #Password, what do you do? The easiest and most secure way is to
73. #Video: Bringing all of your #data together under a single management portfolio, under a single #database, allows your organization to
74. At #MSIgnite, @Microsoft declared "an end to era of passwords" with an update to its Authenticator app, which will allow
75. Torii malware could be gateway to more sophisticated IoT botnet attacks

THREATS

76. Cyber criminals using lookalike online shopping domains to phish buyers
77. PDF patch time: fixes land for over 100 flaws in Adobe's and Foxit's PDF software
78. Canadian restaurant chain suffers country-wide outage after malware outbreak
79. Foxit PDF Reader Fixes High-Severity Remote Code Execution Flaws
80. Foxit Reader 9.3 addresses 118 Vulnerabilities, 18 of them rated as critical
81. Researchers Link New NOKKI Malware to North Korean Actor
82. NOKKI Malware Sports Mysterious Link to Reaper APT Group
83. Malware 101: The Malware Tools That Attackers Use
84. Following a Trail of Confusion: PowerShell in Malicious Office Documents
85. Google taking new steps to prevent malicious Chrome extensions
86. Google Patches Critical Vulnerabilities in Android OS
87. AR18-275A: MAR-10201537 – HIDDEN COBRA FASTCash-Related Malware
88. Vulnerability Spotlight: Adobe Acrobat Reader DC Collab reviewServer Remote Code Execution Vulnerability
89. Enabling Enterprise-Grade Hybrid Cloud Data Processing with SAP and Cisco – Part 2
90. Foxit Reader Update Patches Over 100 Vulnerabilities
91. A remote access #Trojan -- dubbed #GravityRAT -- was discovered by Cisco Talos (@TalosSecurity) to be checking for #antimalware sandboxes.
92. Danabot Banking Malware Now Targeting Banks in the U.S.
93. Dogcall Rat links NOKKI malware with Reaper group - indicators provided
94. The MITRE ATT&CK Framework: Command and Control
95. Ransomware attacks via RDP on the rise | Avast
96. Use Windows, macOS? Don’t be hacked by PDF, patch these critical Adobe flaws now
97. Keyloggers Turn to Zoho Office Suite in Droves for Data Exfiltration
98. Keyloggers Turn to Zoho Office Suite in Droves for Data Exfiltration
99. World Cup may have distracted malware hackers
100. New study finds 5 of every 6 routers are inadequately updated for security flaws
101. Microsoft Detection Tools Sniff Out Fileless Malware
102. .@FBI, @DHSgov call on users to mitigate #RemoteDesktop Protocol vulnerabilities and handle RDP exploits on their own, even as the
103. Adobe Releases Updates For 85 PDF Related CVEs
104. Nine NAS Bugs Open LenovoEMC, Iomega Devices To Attack
105. Rep. Speier: Congress needs a hack demo to understand election vulnerabilities
106. Google Cracks Down on Malicious Chrome Extensions in Major Update
107. Cisco Talos discloses serious vulnerabilities in Foxit PDF Reader
108. Fortnite gamers targeted by data theft malware
109. Windows Defender exclusions reek of malware
110. DanaBot Observed in Large Campaign Targeting U.S. Organizations
111. Report: Zoho's domain regularly exploited to move keylogger data
112. A Staggering Amount of Stolen Data is Heading to Zoho Domains
113. AV-TEST Rates Check Point’s SandBlast Agent as a Top Product in Corporate Endpoint Protection
114. Adobe fixes 47 critical flaws in Acrobat and Reader
115. 86 Vulnerabilities Fixed with Adobe Security Updates for Adobe Acrobat and Reader
116. Malware Less Common in Q2, Still Top Attack Method
117. Malware Less Common in Q2, Still Top Attack Method
118. Alphabet's @chroniclesec unveiled #VirusTotal Enterprise, a new version of the file scanning service designed specifically for enterprise customers. By @RobWright22
119. Fruitfly Mac malware creator used it to spy on minors; FBI discloses technique
120. Use Windows, macOS? Don't be hacked by PDF, patch these critical Adobe flaws now
121. CVE-2018-8373: Hackers’ best partner to spread Trojans
122. Man-in-the-middle attacks allow hackers to intercept, send and receive data to and from your device undetected until the transaction is
123. Desktop Telegram users showing off not only their silly selfies but also their IP addresses
124. Facebook Breach: Attackers Exploited Privacy Feature
125. New Type of Malware Developed by Russian Hackers Eludes Discovery
126. The Army is working toward a cyber domain doctrine
127. Vulnerability Spotlight: Adobe Acrobat Reader DC Collab reviewServer Remote Code Execution Vulnerability
128. The MITRE ATT&CK Framework: Command and Control
129. SQL injection explained: How these attacks work and how to prevent them
130. Improving #mobilesecurity programs to detect
131. Adobe Patches 86 Vulnerabilities in Acrobat Products
132. Adobe security updates for Acrobat fix 86 Vulnerabilities, 46 rated as critical
133. A group of #malware was discovered targeting public SSH servers. However, certain #IPaddresses are avoided. Discover how this is possible
134. Telegram vulnerability causes IP address leaking
135. Security Update for Foxit PDF Reader Fixes 118 Vulnerabilities
136. Hackers use malicious content delivery system to target iOS device
137. Adobe Releases Security Updates for Acrobat that Fix 86 Vulnerabilities
138. Torii malware could be gateway to more sophisticated IoT botnet attacks

CRIME

139. Case involving 'AlfabetoVirtual' website defacements ends in guilty plea
140. DanaBot Observed in Large Campaign Targeting U.S. Organizations
141. Google taking new steps to prevent malicious Chrome extensions
142. TA18-275A: HIDDEN COBRA – FASTCash Campaign
143. Danabot Banking Malware Now Targeting Banks in the U.S.
144. Hacker 'AlfabetoVirtual' Pleads Guilty to NYC Comptroller, West Point Website Defacements
145. World Cup may have distracted malware hackers
146. Fortnite gamers targeted by data theft malware
147. DanaBot Observed in Large Campaign Targeting U.S. Organizations
148. Cyber Threat Landscape: How it’s Evolving & How to Respond
149. Strengthen your security with Avast password generator | Avast
150. Report: Zoho's domain regularly exploited to move keylogger data
151. A Staggering Amount of Stolen Data is Heading to Zoho Domains
152. Breaking bank security: Record theft rises to new heights
153. Fruitfly Mac malware creator used it to spy on minors; FBI discloses technique

POLITICS

154. Case involving 'AlfabetoVirtual' website defacements ends in guilty plea
155. Ignite 2018 highlights: passwordless sign-in, confidential computing, new threat protection, and more
156. Rep. Speier: Congress needs a hack demo to understand election vulnerabilities
157. Fruitfly Mac malware creator used it to spy on minors; FBI discloses technique
158. UN Sensitive Information Exposed Publicly Due to Neglected Security Settings