APT report for 2018-10-14

TRANSNATIONAL / UNKNOWN

1. DDoS Attacks Hit Games Like Assassin’s Creed and Final Fantasy XIV
2. Security Affairs newsletter Round 184 – News of the week

CHINA

Nil

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

3. Security Affairs newsletter Round 184 – News of the week

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-14

WINDOWS

1. Microsoft fixed the Zero-Day for JET flaw, but the fix is incomplete
2. Microsoft patch for JET flaw zero-day is ‘incomplete,’ Windows still vulnerable
3. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
4. Exploiting Windows Using Microsoft Office DDE Exploit (MACROLESS)

LINUX

Nil

UNIX

Nil

ANDROID

5. .@ThreatFabric researchers uncovered a #malware that uses overlay techniques to avoid detection. Learn from @lewisnic how this new #Androidmalware --

IOS

Nil

MACOS

Nil

Threat report for 2018-10-14

DATA BREACH & DATA LOSS

1. My Health Record privacy amendments 'woefully inadequate': Labor
2. #NetSpectre exploits speculative execution to leak data remotely via side-channel attacks. Learn how this #SecurityVulnerability affects the #cloud from expert
3. Web Hosting Provider Suffers Data Breach Second Time in a Year
4. Find out how #TLBleed abuses @Intel's HTT chip feature to leak data via TLB
5. Microsoft still has not completely solved the Microsoft JET database engine vulnerability
6. See how SearchLight identifies when your data is exposed, your brand is abused, or your company is mentioned on the
7. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected
8. A @Google security audit uncovered a glitch in #GooglePlus that exposed data from nearly 500,000 accounts, causing the company to
9. PHASE 4 – INFORMATION GATHERING AND PLANNING Meet Eric, a control systems engineer working for a third-party integrator. He’s guy who uploaded

DENIAL-OF-SERVICE

10. DDoS Attacks Hit Games Like Assassin’s Creed and Final Fantasy XIV

MALVERTISING

Nil

PHISHING

Nil

WEB DEFACEMENT

Nil

BOTNET

Nil

RANSOMWARE

11. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel

CRYPTOMINING & CRYPTOCURRENCIES

12. Fake Flash Updates pushing Malware to Inject XMRig Cryptocurrency Miners

MALWARE

13. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free
14. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel
15. .@ThreatFabric researchers uncovered a #malware that uses overlay techniques to avoid detection. Learn from @lewisnic how this new #Androidmalware --
16. At the 2018 @RSAConference, researchers discussed the rise of stegware -- #malware that uses #steganography techniques to avoid detection. Learn
17. How a remote access #Trojan checks for
18. Fake Flash Updates pushing Malware to Inject XMRig Cryptocurrency Miners

EXPLOIT

19. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
20. Exploiting Windows Using Microsoft Office DDE Exploit (MACROLESS)

VULNERABILITY

21. Microsoft fixed the Zero-Day for JET flaw, but the fix is incomplete
22. A2SV – SSL Vulnerability Analysis Tool
23. Microsoft patch for JET flaw zero-day is ‘incomplete,’ Windows still vulnerable
24. Microsoft still has not completely solved the Microsoft JET database engine vulnerability
25. Expert released PoC Code Microsoft Edge Remote Code Execution flaw

Region brief for 2018-10-14

ASIA

Nil

OCEANIA

1. My Health Record privacy amendments 'woefully inadequate': Labor

NORTH AMERICA

2. Security Affairs newsletter Round 184 – News of the week
3. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
4. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected

SOUTH AMERICA

Nil

EUROPE

5. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free
6. Web Hosting Provider Suffers Data Breach Second Time in a Year
7. A @Google security audit uncovered a glitch in #GooglePlus that exposed data from nearly 500,000 accounts, causing the company to

AFRICA

8. Web Hosting Provider Suffers Data Breach Second Time in a Year

Sector brief for 2018-10-14

HEALTHCARE

Nil

TRANSPORT

Nil

BANKING & FINANCE

1. Web Hosting Provider Suffers Data Breach Second Time in a Year
2. Security Affairs newsletter Round 184 – News of the week
3. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected

INFORMATION & TELECOMMUNICATION

4. Security Affairs newsletter Round 184 – News of the week
5. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
6. See how SearchLight identifies when your data is exposed, your brand is abused, or your company is mentioned on the
7. PHASE 4 – INFORMATION GATHERING AND PLANNING Meet Eric, a control systems engineer working for a third-party integrator. He’s guy who uploaded

FOOD

Nil

WATER

Nil

ENERGY

8. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free

GOVERNMENT & PUBLIC SERVICE

Nil

Daily brief for 2018-10-14

ASIA

Nil

WORLD

1. My Health Record privacy amendments 'woefully inadequate': Labor
2. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free
3. Web Hosting Provider Suffers Data Breach Second Time in a Year
4. Security Affairs newsletter Round 184 – News of the week
5. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
6. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected
7. A @Google security audit uncovered a glitch in #GooglePlus that exposed data from nearly 500,000 accounts, causing the company to

ATTACKS

8. My Health Record privacy amendments 'woefully inadequate': Labor
9. #NetSpectre exploits speculative execution to leak data remotely via side-channel attacks. Learn how this #SecurityVulnerability affects the #cloud from expert
10. Web Hosting Provider Suffers Data Breach Second Time in a Year
11. Find out how #TLBleed abuses @Intel's HTT chip feature to leak data via TLB
12. Microsoft still has not completely solved the Microsoft JET database engine vulnerability
13. See how SearchLight identifies when your data is exposed, your brand is abused, or your company is mentioned on the
14. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected
15. A @Google security audit uncovered a glitch in #GooglePlus that exposed data from nearly 500,000 accounts, causing the company to
16. PHASE 4 – INFORMATION GATHERING AND PLANNING Meet Eric, a control systems engineer working for a third-party integrator. He’s guy who uploaded

THREATS

17. Microsoft fixed the Zero-Day for JET flaw, but the fix is incomplete
18. Week in review: Enterprise cybersecurity PKIs, keeping your cloud malware-free
19. A2SV – SSL Vulnerability Analysis Tool
20. New @ESET research finds APT group dubbed #TeleBots was behind #Industroyer #malware attacks, #NotPetya #ransomware outbreaks, and a recent Exaramel
21. .@ThreatFabric researchers uncovered a #malware that uses overlay techniques to avoid detection. Learn from @lewisnic how this new #Androidmalware --
22. Microsoft patch for JET flaw zero-day is ‘incomplete,’ Windows still vulnerable
23. At the 2018 @RSAConference, researchers discussed the rise of stegware -- #malware that uses #steganography techniques to avoid detection. Learn
24. Microsoft still has not completely solved the Microsoft JET database engine vulnerability
25. Expert released PoC Code Microsoft Edge Remote Code Execution flaw
26. How a remote access #Trojan checks for
27. Fake Flash Updates pushing Malware to Inject XMRig Cryptocurrency Miners

CRIME

28. Security Affairs newsletter Round 184 – News of the week
29. Expert released PoC Code Microsoft Edge Remote Code Execution flaw

POLITICS

30. Security Affairs newsletter Round 184 – News of the week
31. Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected