APT report for 2018-10-04

TRANSNATIONAL / UNKNOWN

1. Formjacking attacks spike as Magecart sets sites on ecommerce
2. Pacific Northwest burger chain hit by FIN7
3. Burgerville customer credit card info stolen in data breach laid at Fin7's feet

CHINA

Nothing to report

INDIA

Nothing to report

NORTH KOREA

4. HIDDEN COBRA – FASTCash Campaign
5. APT38 is behind financially motivated attacks carried out by North Korea

PAKISTAN

Nothing to report

VIETNAM

Nothing to report

IRAN

Nothing to report

LEBANON

Nothing to report

PALESTINE

Nothing to report

SAUDI ARABIA

Nothing to report

UNITED ARAB EMIRATES

Nothing to report

RUSSIA

6. Virus Bulletin 2018: Turla APT Changes Shape with New Code and Targets
7. Should You Worry About Software Supply Chain Attacks?
8. Shedding Skin – Turla’s Fresh Faces
9. LoJack for computers used to attack European government bodies
10. Justice Department charges 7 Russian intelligence officers
11. APT28 turns away from election hacking and back to cyberespionage
12. Russian Fancy Bear APT Linked To Earworm Hacking Group
13. Russian Fancy Bear APT linked to Earworm hacking group
14. LoJax: First UEFI Malware seen in the Wild

UKRAINE

Nothing to report

Platform report for 2018-10-04

WINDOWS

1. Shedding Skin – Turla’s Fresh Faces
2. LoJack for computers used to attack European government bodies
3. CVE-2018-8373 Exploit Spotted
4. LoJax: First UEFI Malware seen in the Wild
5. Foxit PDF Reader fixes serious remote code execution vulnerability

LINUX

6. LoJack for computers used to attack European government bodies

UNIX

Nothing to report

ANDROID

7. .@ThreatFabric researchers uncovered an #Android malware, #MysteryBot, which uses overlay attacks to avoid detection. Learn how this #malware affects @Google's
8. How is Android Accessibility Service affected by a banking Trojan?
9. .@Trustlook Labs discovered an #Android #Trojan stealing data from messaging apps. Learn what #mobilesecurity programs should look for to detect
10. Researchers found that cheap Android devices were shipped pre-installed backdoors

IOS

11. A Remote iOS Bug

MACOS

12. Google Project Zero drops macOS exploit, calls out Apple for silent patching
13. CVE-2018-4251 – Apple did not disable Intel Manufacturing Mode in its laptops
14. macOS Flaw Allows Attackers To Hijack Installed Apps
15. Tearing Apart the Undetected (OSX)Coldroot RAT
16. An Unpatched Kernel Bug
17. OSX/MacRansom; analyzing the latest ransomware to target macs
18. Two Bugs, One Func(), part three
19. Two Bugs, One Func(), part two
20. Two Bugs, One Func(), part one
21. Analysis of an Intrusive Cross-Platform Adware; OSX/Pirrit
22. More on, "Adware for OS X Distributes Trojans"
23. A Google bug breaks the search results in Safari

Threat report for 2018-10-04

DATA BREACH

1. UK pins ‘reckless campaign of cyber attacks’ on Russian military intelligence
2. .@FireEye researchers tracked an aggressive #cybertheft campaign -- attributed to North Korean #APT38 -- in which threat actors attempted to
3. Campaign 2018: Cyberattacks on infrastructure could suppress voter turnout
4. Sony accidentally leaked November's PS Plus free games
5. US charges Russian military officers over international hacking and disinformation campaigns
6. Burgerville Customer Credit Card Info Stolen In Data Breach
7. HIDDEN COBRA – FASTCash Campaign
8. Database of 200 Million Records Stolen from Apollo in Data Breach
9. Irish Data Regulator Likely to Fine Facebook for Data Breach
10. 5,000 UK firms' financial details exposed in data breaches, finds @digitalshadows
11. The @UN accidentally exposed credentials on public @trello boards. Plus, #Uber is set to pay $148 million settlement following its
12. Burgerville customer credit card info stolen in data breach laid at Fin7's feet
13. How #livechatsoftware leak personal #employeedata?
14. Democratic congressional intern arrested for doxing GOP senators during Kavanaugh hearing
15. Business Email Compromise: When You Don’t Need to Phish.
16. Business email compromise made easy for cyber criminals
17. In manufacturing, almost half – 47 percent – of breaches involve the theft of intellectual property to gain competitive advantage.
18. Security Investigator who Compromised Hotel Wi-Fi, Shared Pass-Codes Online, is Fined
19. UK and allies accuse Russia of cyber attack campaign
20. Business email compromise made easy for #cybercriminals as 12.5 million company email boxes and 33,000 finance department credentials found openly
21. U.S. Capitol Police Arrest Suspect for Doxing U.S. Senators
22. DanaBot Observed in Large Campaign Targeting U.S. Organizations

DENIAL-OF-SERVICE

23. California bill bans bots during elections
24. Why It’s Time to Nuke the Password
25. Why It’s Time to Nuke the Password

MALVERTISING

Nothing to report

PHISHING

26. Exclusive: Moving away from passwords to two-factor authentication
27. Block Blocking Login Items
28. Business Email Compromise: When You Don’t Need to Phish.
29. Hackers Selling Facebook Account Logins Details On Dark Web For $3
30. Experts recommend avoiding single step logins
31. Phishing Attacks Distributed Through CloudFlare's IPFS Gateway
32. Why It’s Time to Nuke the Password
33. Why It’s Time to Nuke the Password
34. DanaBot Observed in Large Campaign Targeting U.S. Organizations

WEB DEFACEMENT

35. Hacker Pleads Guilty of Defacing 11,000 Websites, Could Get up to 20 Years
36. Hacktivist pleads guilty to defacing websites for NYC comptroller, Combating Terrorism Center

MALWARE

37. Virus Bulletin 2018: Turla APT Changes Shape with New Code and Targets
38. .@ThreatFabric researchers uncovered an #Android malware, #MysteryBot, which uses overlay attacks to avoid detection. Learn how this #malware affects @Google's
39. China allegedly infiltrated US companies through implanted hardware backdoors
40. Researchers at the 2018 @RSAConference discussed #stegware: @malware that uses #steganography. Discover how this works with expert @lewisnic.
41. Report: In Huge Hack, Chinese Manufacturer Sneaks Backdoors Onto Motherboards
42. Avast AV reclassifies cryptominers | Avast
43. Researchers at Cisco Talos (@TalosSecurity) recently discovered #GravityRAT, a remote access #Trojan. Discover how this RAT can check for
44. This is also a good time to remind that bugdoors are far more scary than backdoors.
45. Fallout Exploit Kit Now Installing the Kraken Cryptor Ransomware
46. Apple, Amazon deny claims Chinese spies implanted backdoor chips in company hardware: report
47. Researchers from @proofpoint have announced the discovery of a remote access trojan, and an upgraded version of an old banking
48. Canadian restaurant chain Recipe suffered a network outage, is it a ransomware attack?
49. Tearing Apart the Undetected (OSX)Coldroot RAT
50. Mac Malware of 2017
51. WTF is Mughthesec!? poking on a piece of undetected adware
52. OSX/MacRansom; analyzing the latest ransomware to target macs
53. Mac Malware of 2016
54. Towards Generic Ransomware Detection
55. Analysis of an Intrusive Cross-Platform Adware; OSX/Pirrit
56. Analyzing the Anti-Analysis Logic of an Adware Installer
57. Monitoring Process Creation via the Kernel (Part III)
58. Monitoring Process Creation via the Kernel (Part II)
59. Monitoring Process Creation via the Kernel (Part I)
60. More on, "Adware for OS X Distributes Trojans"
61. LoJax: First UEFI Malware seen in the Wild
62. Virus Bulletin 2018: Attack velocity ramps up
63. More than 4,000 ransomware attacks occur every day. Secure your company & build your network at #RiskSec with promo code
64. Malicious remote admin tool seemingly linked to KONNI malware, North Korea
65. Betabot trojan packed with anti-malware evasion tools
66. How is Android Accessibility Service affected by a banking Trojan?
67. How does stegware malware exploit steganography techniques?
68. .@Trustlook Labs discovered an #Android #Trojan stealing data from messaging apps. Learn what #mobilesecurity programs should look for to detect
69. Cisco Talos spotted 18 vulnerabilities in Foxit PDF Reader, 8 in Atlantis World Processor
70. A new group of #malware -- dubbed #GoScanSSH -- was recently discovered by researchers. Learn how this malware works and
71. Seriously if I could make evil semiconductors I would just replace one which is already present rather than adding it. Show
72. WATCH: Top 5 Viruses of All Time by Security Expert @mikko Hyppönen
73. New DanaBot Banking Malware Attack in Various Countries with Stealer and Remote Access Futures
74. Researchers found that cheap Android devices were shipped pre-installed backdoors
75. Google opened the .page domain
76. Most Advanced Backdoor Obfuscation and Evasion Technique That used by Hackers
77. Zoho Heavily Used by Keyloggers to Transmit Stolen Data
78. Network Outage at Some Recipe Unlimited Locations Caused by Malware
79. DanaBot Observed in Large Campaign Targeting U.S. Organizations

EXPLOIT

80. Google Project Zero drops macOS exploit, calls out Apple for silent patching
81. CVE-2018-8373 Exploit Spotted
82. Fallout Exploit Kit Now Installing the Kraken Cryptor Ransomware
83. Remote Mac Exploitation Via Custom URL Schemes
84. How does stegware malware exploit steganography techniques?
85. Secure encrypted #virtualization: How is this technology exploited?

VULNERABILITY

86. Bug bounty scheme uncovers 150 vulnerabilities in US Marine Corps websites
87. CVE-2018-4251 – Apple did not disable Intel Manufacturing Mode in its laptops
88. macOS Flaw Allows Attackers To Hijack Installed Apps
89. ICYMI - CISO @rickhholland joins @drshellface and @mazzazone in this week's ShadowTalk episode: Security Flaws Affect 50 Million Facebook Accounts
90. CVE-2018-8373 Exploit Spotted
91. Vulnerability Scanning vs. Penetration Testing by @TripwireInc
92. This is also a good time to remind that bugdoors are far more scary than backdoors.
93. A Remote iOS Bug
94. An Unpatched Kernel Bug
95. From the Top to the Bottom; Tracking down CVE-2017-7149
96. Two Bugs, One Func(), part three
97. Two Bugs, One Func(), part two
98. Two Bugs, One Func(), part one
99. CVE-2015-3673: Goodbye Rootpipe...(for now?)
100. Cisco: Two critical bugs in DNA network software need these urgent patches
101. Paper over the Kracks: New techniques can bypass WPA2 flaw mitigations
102. Hackers Earn $150,000 in Marine Corps Bug Bounty Program
103. Cisco plugs critical flaws in DNA Center and Prime Infrastructure
104. Marine Corps bug bounty program finds 150 vulnerabilities
105. Cisco Talos spotted 18 vulnerabilities in Foxit PDF Reader, 8 in Atlantis World Processor
106. Foxit PDF Reader fixes serious remote code execution vulnerability
107. A Google bug breaks the search results in Safari
108. Hacking for good uncovers over 150 Marine Corps web vulnerabilities

Region brief for 2018-10-04

ASIA

1. Should You Worry About Software Supply Chain Attacks?
2. .@FireEye researchers tracked an aggressive #cybertheft campaign -- attributed to North Korean #APT38 -- in which threat actors attempted to
3. Shedding Skin – Turla’s Fresh Faces
4. China allegedly infiltrated US companies through implanted hardware backdoors
5. Report: In Huge Hack, Chinese Manufacturer Sneaks Backdoors Onto Motherboards
6. Apple, Amazon deny claims Chinese spies implanted backdoor chips in company hardware: report
7. Canadian restaurant chain Recipe suffered a network outage, is it a ransomware attack?
8. A Remote iOS Bug
9. APT38 is behind financially motivated attacks carried out by North Korea
10. Security Investigator who Compromised Hotel Wi-Fi, Shared Pass-Codes Online, is Fined

OCEANIA

11. New DanaBot Banking Malware Attack in Various Countries with Stealer and Remote Access Futures

NORTH AMERICA

12. UK pins ‘reckless campaign of cyber attacks’ on Russian military intelligence
13. Bug bounty scheme uncovers 150 vulnerabilities in US Marine Corps websites
14. China allegedly infiltrated US companies through implanted hardware backdoors
15. US charges Russian military officers over international hacking and disinformation campaigns
16. Hacker Pleads Guilty of Defacing 11,000 Websites, Could Get up to 20 Years
17. Justice Department charges 7 Russian intelligence officers
18. CVE-2018-4251 – Apple did not disable Intel Manufacturing Mode in its laptops
19. ICYMI - CISO @rickhholland joins @drshellface and @mazzazone in this week's ShadowTalk episode: Security Flaws Affect 50 Million Facebook Accounts
20. HIDDEN COBRA – FASTCash Campaign
21. Pacific Northwest burger chain hit by FIN7
22. Apple, Amazon deny claims Chinese spies implanted backdoor chips in company hardware: report
23. Canadian restaurant chain Recipe suffered a network outage, is it a ransomware attack?
24. Burgerville customer credit card info stolen in data breach laid at Fin7's feet
25. LoJax: First UEFI Malware seen in the Wild
26. Hackers Earn $150,000 in Marine Corps Bug Bounty Program
27. APT38 is behind financially motivated attacks carried out by North Korea
28. U.S. Capitol Police Arrest Suspect for Doxing U.S. Senators
29. DanaBot Observed in Large Campaign Targeting U.S. Organizations

SOUTH AMERICA

30. APT38 is behind financially motivated attacks carried out by North Korea

EUROPE

31. UK pins ‘reckless campaign of cyber attacks’ on Russian military intelligence
32. Virus Bulletin 2018: Turla APT Changes Shape with New Code and Targets
33. Should You Worry About Software Supply Chain Attacks?
34. US charges Russian military officers over international hacking and disinformation campaigns
35. LoJack for computers used to attack European government bodies
36. Justice Department charges 7 Russian intelligence officers
37. Russian Fancy Bear APT Linked To Earworm Hacking Group
38. Pacific Northwest burger chain hit by FIN7
39. Irish Data Regulator Likely to Fine Facebook for Data Breach
40. Russian Fancy Bear APT linked to Earworm hacking group
41. 5,000 UK firms' financial details exposed in data breaches, finds @digitalshadows
42. Canadian restaurant chain Recipe suffered a network outage, is it a ransomware attack?
43. LoJax: First UEFI Malware seen in the Wild
44. UK and allies accuse Russia of cyber attack campaign
45. New DanaBot Banking Malware Attack in Various Countries with Stealer and Remote Access Futures
46. Experts recommend avoiding single step logins

AFRICA

Nothing to report

Sector brief for 2018-10-04

HEALTHCARE

1. Justice Department charges 7 Russian intelligence officers
2. Most Advanced Backdoor Obfuscation and Evasion Technique That used by Hackers

TRANSPORT

3. Shedding Skin – Turla’s Fresh Faces

BANKING & FINANCE

4. Should You Worry About Software Supply Chain Attacks?
5. China allegedly infiltrated US companies through implanted hardware backdoors
6. Burgerville Customer Credit Card Info Stolen In Data Breach
7. HIDDEN COBRA – FASTCash Campaign
8. Pacific Northwest burger chain hit by FIN7
9. Database of 200 Million Records Stolen from Apollo in Data Breach
10. Apple, Amazon deny claims Chinese spies implanted backdoor chips in company hardware: report
11. 5,000 UK firms' financial details exposed in data breaches, finds @digitalshadows
12. Researchers from @proofpoint have announced the discovery of a remote access trojan, and an upgraded version of an old banking
13. Canadian restaurant chain Recipe suffered a network outage, is it a ransomware attack?
14. Burgerville customer credit card info stolen in data breach laid at Fin7's feet
15. How is Android Accessibility Service affected by a banking Trojan?
16. APT38 is behind financially motivated attacks carried out by North Korea
17. Business email compromise made easy for #cybercriminals as 12.5 million company email boxes and 33,000 finance department credentials found openly
18. New DanaBot Banking Malware Attack in Various Countries with Stealer and Remote Access Futures

INFORMATION & TELECOMMUNICATION

19. Google Project Zero drops macOS exploit, calls out Apple for silent patching
20. .@ThreatFabric researchers uncovered an #Android malware, #MysteryBot, which uses overlay attacks to avoid detection. Learn how this #malware affects @Google's
21. Shedding Skin – Turla’s Fresh Faces
22. ICYMI - CISO @rickhholland joins @drshellface and @mazzazone in this week's ShadowTalk episode: Security Flaws Affect 50 Million Facebook Accounts
23. CVE-2018-8373 Exploit Spotted
24. Irish Data Regulator Likely to Fine Facebook for Data Breach
25. 5,000 UK firms' financial details exposed in data breaches, finds @digitalshadows
26. Canadian restaurant chain Recipe suffered a network outage, is it a ransomware attack?
27. More than 4,000 ransomware attacks occur every day. Secure your company & build your network at #RiskSec with promo code
28. Business Email Compromise: When You Don’t Need to Phish.
29. In manufacturing, almost half – 47 percent – of breaches involve the theft of intellectual property to gain competitive advantage.
30. Hackers Selling Facebook Account Logins Details On Dark Web For $3
31. Business email compromise made easy for #cybercriminals as 12.5 million company email boxes and 33,000 finance department credentials found openly
32. WATCH: Top 5 Viruses of All Time by Security Expert @mikko Hyppönen
33. Experts recommend avoiding single step logins
34. A Google bug breaks the search results in Safari
35. Phishing Attacks Distributed Through CloudFlare's IPFS Gateway
36. Google opened the .page domain
37. Why It’s Time to Nuke the Password
38. Why It’s Time to Nuke the Password

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

39. Should You Worry About Software Supply Chain Attacks?
40. Shedding Skin – Turla’s Fresh Faces
41. Justice Department charges 7 Russian intelligence officers
42. Most Advanced Backdoor Obfuscation and Evasion Technique That used by Hackers

GOVERNMENT & PUBLIC SERVICE

43. UK pins ‘reckless campaign of cyber attacks’ on Russian military intelligence
44. Justice Department charges 7 Russian intelligence officers
45. APT28 turns away from election hacking and back to cyberespionage
46. Irish Data Regulator Likely to Fine Facebook for Data Breach

Daily brief for 2018-10-04

ASIA

1. Should You Worry About Software Supply Chain Attacks?
2. .@FireEye researchers tracked an aggressive #cybertheft campaign -- attributed to North Korean #APT38 -- in which threat actors attempted to
3. Shedding Skin – Turla’s Fresh Faces
4. China allegedly infiltrated US companies through implanted hardware backdoors
5. Report: In Huge Hack, Chinese Manufacturer Sneaks Backdoors Onto Motherboards
6. Apple, Amazon deny claims Chinese spies implanted backdoor chips in company hardware: report
7. Canadian restaurant chain Recipe suffered a network outage, is it a ransomware attack?
8. A Remote iOS Bug
9. APT38 is behind financially motivated attacks carried out by North Korea
10. Security Investigator who Compromised Hotel Wi-Fi, Shared Pass-Codes Online, is Fined

WORLD

11. UK pins ‘reckless campaign of cyber attacks’ on Russian military intelligence
12. Virus Bulletin 2018: Turla APT Changes Shape with New Code and Targets
13. Should You Worry About Software Supply Chain Attacks?
14. Bug bounty scheme uncovers 150 vulnerabilities in US Marine Corps websites
15. China allegedly infiltrated US companies through implanted hardware backdoors
16. US charges Russian military officers over international hacking and disinformation campaigns
17. LoJack for computers used to attack European government bodies
18. Hacker Pleads Guilty of Defacing 11,000 Websites, Could Get up to 20 Years
19. Justice Department charges 7 Russian intelligence officers
20. CVE-2018-4251 – Apple did not disable Intel Manufacturing Mode in its laptops
21. Russian Fancy Bear APT Linked To Earworm Hacking Group
22. ICYMI - CISO @rickhholland joins @drshellface and @mazzazone in this week's ShadowTalk episode: Security Flaws Affect 50 Million Facebook Accounts
23. HIDDEN COBRA – FASTCash Campaign
24. Pacific Northwest burger chain hit by FIN7
25. Irish Data Regulator Likely to Fine Facebook for Data Breach
26. Russian Fancy Bear APT linked to Earworm hacking group
27. Apple, Amazon deny claims Chinese spies implanted backdoor chips in company hardware: report
28. 5,000 UK firms' financial details exposed in data breaches, finds @digitalshadows
29. Canadian restaurant chain Recipe suffered a network outage, is it a ransomware attack?
30. Burgerville customer credit card info stolen in data breach laid at Fin7's feet
31. LoJax: First UEFI Malware seen in the Wild
32. Hackers Earn $150,000 in Marine Corps Bug Bounty Program
33. APT38 is behind financially motivated attacks carried out by North Korea
34. UK and allies accuse Russia of cyber attack campaign
35. New DanaBot Banking Malware Attack in Various Countries with Stealer and Remote Access Futures
36. Experts recommend avoiding single step logins
37. U.S. Capitol Police Arrest Suspect for Doxing U.S. Senators
38. DanaBot Observed in Large Campaign Targeting U.S. Organizations

ATTACKS

39. UK pins ‘reckless campaign of cyber attacks’ on Russian military intelligence
40. .@FireEye researchers tracked an aggressive #cybertheft campaign -- attributed to North Korean #APT38 -- in which threat actors attempted to
41. Campaign 2018: Cyberattacks on infrastructure could suppress voter turnout
42. Sony accidentally leaked November's PS Plus free games
43. US charges Russian military officers over international hacking and disinformation campaigns
44. Hacker Pleads Guilty of Defacing 11,000 Websites, Could Get up to 20 Years
45. Burgerville Customer Credit Card Info Stolen In Data Breach
46. Exclusive: Moving away from passwords to two-factor authentication
47. HIDDEN COBRA – FASTCash Campaign
48. Database of 200 Million Records Stolen from Apollo in Data Breach
49. Irish Data Regulator Likely to Fine Facebook for Data Breach
50. 5,000 UK firms' financial details exposed in data breaches, finds @digitalshadows
51. The @UN accidentally exposed credentials on public @trello boards. Plus, #Uber is set to pay $148 million settlement following its
52. Burgerville customer credit card info stolen in data breach laid at Fin7's feet
53. Block Blocking Login Items
54. How #livechatsoftware leak personal #employeedata?
55. Democratic congressional intern arrested for doxing GOP senators during Kavanaugh hearing
56. California bill bans bots during elections
57. Hacktivist pleads guilty to defacing websites for NYC comptroller, Combating Terrorism Center
58. Business Email Compromise: When You Don’t Need to Phish.
59. Business email compromise made easy for cyber criminals
60. In manufacturing, almost half – 47 percent – of breaches involve the theft of intellectual property to gain competitive advantage.
61. Hackers Selling Facebook Account Logins Details On Dark Web For $3
62. Security Investigator who Compromised Hotel Wi-Fi, Shared Pass-Codes Online, is Fined
63. UK and allies accuse Russia of cyber attack campaign
64. Business email compromise made easy for #cybercriminals as 12.5 million company email boxes and 33,000 finance department credentials found openly
65. Experts recommend avoiding single step logins
66. Phishing Attacks Distributed Through CloudFlare's IPFS Gateway
67. Why It’s Time to Nuke the Password
68. Why It’s Time to Nuke the Password
69. U.S. Capitol Police Arrest Suspect for Doxing U.S. Senators
70. DanaBot Observed in Large Campaign Targeting U.S. Organizations

THREATS

71. Google Project Zero drops macOS exploit, calls out Apple for silent patching
72. Virus Bulletin 2018: Turla APT Changes Shape with New Code and Targets
73. .@ThreatFabric researchers uncovered an #Android malware, #MysteryBot, which uses overlay attacks to avoid detection. Learn how this #malware affects @Google's
74. Bug bounty scheme uncovers 150 vulnerabilities in US Marine Corps websites
75. China allegedly infiltrated US companies through implanted hardware backdoors
76. Researchers at the 2018 @RSAConference discussed #stegware: @malware that uses #steganography. Discover how this works with expert @lewisnic.
77. Report: In Huge Hack, Chinese Manufacturer Sneaks Backdoors Onto Motherboards
78. Avast AV reclassifies cryptominers | Avast
79. Researchers at Cisco Talos (@TalosSecurity) recently discovered #GravityRAT, a remote access #Trojan. Discover how this RAT can check for
80. CVE-2018-4251 – Apple did not disable Intel Manufacturing Mode in its laptops
81. macOS Flaw Allows Attackers To Hijack Installed Apps
82. ICYMI - CISO @rickhholland joins @drshellface and @mazzazone in this week's ShadowTalk episode: Security Flaws Affect 50 Million Facebook Accounts
83. CVE-2018-8373 Exploit Spotted
84. Vulnerability Scanning vs. Penetration Testing by @TripwireInc
85. This is also a good time to remind that bugdoors are far more scary than backdoors.
86. Fallout Exploit Kit Now Installing the Kraken Cryptor Ransomware
87. Apple, Amazon deny claims Chinese spies implanted backdoor chips in company hardware: report
88. Researchers from @proofpoint have announced the discovery of a remote access trojan, and an upgraded version of an old banking
89. Canadian restaurant chain Recipe suffered a network outage, is it a ransomware attack?
90. Remote Mac Exploitation Via Custom URL Schemes
91. A Remote iOS Bug
92. Tearing Apart the Undetected (OSX)Coldroot RAT
93. An Unpatched Kernel Bug
94. Mac Malware of 2017
95. From the Top to the Bottom; Tracking down CVE-2017-7149
96. WTF is Mughthesec!? poking on a piece of undetected adware
97. OSX/MacRansom; analyzing the latest ransomware to target macs
98. Two Bugs, One Func(), part three
99. Two Bugs, One Func(), part two
100. Two Bugs, One Func(), part one
101. Mac Malware of 2016
102. Towards Generic Ransomware Detection
103. Analysis of an Intrusive Cross-Platform Adware; OSX/Pirrit
104. Analyzing the Anti-Analysis Logic of an Adware Installer
105. Monitoring Process Creation via the Kernel (Part III)
106. Monitoring Process Creation via the Kernel (Part II)
107. Monitoring Process Creation via the Kernel (Part I)
108. CVE-2015-3673: Goodbye Rootpipe...(for now?)
109. More on, "Adware for OS X Distributes Trojans"
110. LoJax: First UEFI Malware seen in the Wild
111. Cisco: Two critical bugs in DNA network software need these urgent patches
112. Virus Bulletin 2018: Attack velocity ramps up
113. Paper over the Kracks: New techniques can bypass WPA2 flaw mitigations
114. Hackers Earn $150,000 in Marine Corps Bug Bounty Program
115. More than 4,000 ransomware attacks occur every day. Secure your company & build your network at #RiskSec with promo code
116. Malicious remote admin tool seemingly linked to KONNI malware, North Korea
117. Betabot trojan packed with anti-malware evasion tools
118. Cisco plugs critical flaws in DNA Center and Prime Infrastructure
119. Marine Corps bug bounty program finds 150 vulnerabilities
120. How is Android Accessibility Service affected by a banking Trojan?
121. How does stegware malware exploit steganography techniques?
122. .@Trustlook Labs discovered an #Android #Trojan stealing data from messaging apps. Learn what #mobilesecurity programs should look for to detect
123. Cisco Talos spotted 18 vulnerabilities in Foxit PDF Reader, 8 in Atlantis World Processor
124. A new group of #malware -- dubbed #GoScanSSH -- was recently discovered by researchers. Learn how this malware works and
125. Secure encrypted #virtualization: How is this technology exploited?
126. Seriously if I could make evil semiconductors I would just replace one which is already present rather than adding it. Show
127. WATCH: Top 5 Viruses of All Time by Security Expert @mikko Hyppönen
128. New DanaBot Banking Malware Attack in Various Countries with Stealer and Remote Access Futures
129. Foxit PDF Reader fixes serious remote code execution vulnerability
130. A Google bug breaks the search results in Safari
131. Researchers found that cheap Android devices were shipped pre-installed backdoors
132. Google opened the .page domain
133. Most Advanced Backdoor Obfuscation and Evasion Technique That used by Hackers
134. Zoho Heavily Used by Keyloggers to Transmit Stolen Data
135. Hacking for good uncovers over 150 Marine Corps web vulnerabilities
136. Network Outage at Some Recipe Unlimited Locations Caused by Malware
137. DanaBot Observed in Large Campaign Targeting U.S. Organizations

CRIME

138. Bug bounty scheme uncovers 150 vulnerabilities in US Marine Corps websites
139. Shedding Skin – Turla’s Fresh Faces
140. Avast AV reclassifies cryptominers | Avast
141. Hacker Pleads Guilty of Defacing 11,000 Websites, Could Get up to 20 Years
142. Justice Department charges 7 Russian intelligence officers
143. CVE-2018-4251 – Apple did not disable Intel Manufacturing Mode in its laptops
144. Burgerville Customer Credit Card Info Stolen In Data Breach
145. HIDDEN COBRA – FASTCash Campaign
146. Pacific Northwest burger chain hit by FIN7
147. Database of 200 Million Records Stolen from Apollo in Data Breach
148. Researchers from @proofpoint have announced the discovery of a remote access trojan, and an upgraded version of an old banking
149. Canadian restaurant chain Recipe suffered a network outage, is it a ransomware attack?
150. Burgerville customer credit card info stolen in data breach laid at Fin7's feet
151. Remote Mac Exploitation Via Custom URL Schemes
152. How is Android Accessibility Service affected by a banking Trojan?
153. Hacktivist pleads guilty to defacing websites for NYC comptroller, Combating Terrorism Center
154. Business Email Compromise: When You Don’t Need to Phish.
155. Business email compromise made easy for cyber criminals
156. APT38 is behind financially motivated attacks carried out by North Korea
157. In manufacturing, almost half – 47 percent – of breaches involve the theft of intellectual property to gain competitive advantage.
158. Business email compromise made easy for #cybercriminals as 12.5 million company email boxes and 33,000 finance department credentials found openly
159. New DanaBot Banking Malware Attack in Various Countries with Stealer and Remote Access Futures
160. Experts recommend avoiding single step logins

POLITICS

161. UK pins ‘reckless campaign of cyber attacks’ on Russian military intelligence
162. Justice Department charges 7 Russian intelligence officers
163. APT28 turns away from election hacking and back to cyberespionage
164. Apple, Amazon deny claims Chinese spies implanted backdoor chips in company hardware: report
165. Hacktivist pleads guilty to defacing websites for NYC comptroller, Combating Terrorism Center
166. APT38 is behind financially motivated attacks carried out by North Korea