APT report for 2018-10-17

TRANSNATIONAL / UNKNOWN

1. WTB: MuddyWater Expands Operations
2. Russian Hackers Attack Specialist in Customer Review Tied to Innumerable Websites

CHINA

3. Top 5 Publicly Accessible Hacking Tools You Can Download Today
4. WTB: MuddyWater Expands Operations

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

5. New research highlights Vietnamese group's custom hacking tools

IRAN

6. WTB: MuddyWater Expands Operations

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

7. 'GreyEnergy' Cyberspies Target Ukraine, Poland
8. 3 Years After Attacks on Ukraine Power Grid, BlackEnergy Successor Poses Growing Threat
9. Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid
10. Attackers identified in the pre-espionage stage of CNI attack
11. GreyEnergy group targeting critical infrastructure with espionage
12. GreyEnergy: Updated arsenal of one of the most dangerous threat actors
13. GreyEnergy: Updated arsenal of one of the most dangerous threat actors
14. New GreyEnergy Malware Targets ICS, Tied with BlackEnergy and TeleBots

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-17

WINDOWS

1. MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
2. CVE-2018-3211: Java Usage Tracker Local Elevation of Privilege on Windows
3. Top 5 Publicly Accessible Hacking Tools You Can Download Today
4. WTB: MuddyWater Expands Operations
5. VMware addressed Code Execution Flaw in its ESXi, Workstation, and Fusion products
6. Git RCE Vulnerability (CVE-2018-17456)Security Advisory

LINUX

7. Git RCE Vulnerability (CVE-2018-17456)Security Advisory

UNIX

Nil

ANDROID

8. WTB: MuddyWater Expands Operations
9. VMware addressed Code Execution Flaw in its ESXi, Workstation, and Fusion products
10. Android Apps claim to mine unminable cryptocurrency, just show ads

IOS

11. VoiceOver iOS 12 Bug Creates Lock Screen Bypass Exposing User Photos
12. Vulnerability in Apple VoiceOver allows hackers access to user photos
13. Google Chrome 70.0.3538.67 releases: fix multiple high-risk vulnerabilities

MACOS

14. Git RCE Vulnerability (CVE-2018-17456)Security Advisory
15. Vulnerability in Apple VoiceOver allows hackers access to user photos

Threat report for 2018-10-17

DATA BREACH & DATA LOSS

1. Tumblr Patches Security Issue that Would Leak Emails, Hashed-Salted Passwords
2. MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
3. Redis 5.0 release, High-performance key-value database
4. Information of 396K Users Exposed in Facepunch Data Breach
5. 35 Million US Voter Registration Records Found for Sale on Dark Web
6. Phishers target book publishers in new campaign
7. Pentagon Disclosed Data Breach At Department Of Defense Affecting 30,000 Workers
8. 35 million US voter records up for sale on the dark web
9. Who is to blame for the majority of data breaches?
10. GreyEnergy: New malware campaign targets critical infrastructure companies
11. Tumblr Patches A Flaw That Could Have Exposed Users’ Account Info
12. Anthem pays out record $16m over data breach
13. SEO Poisoning Campaign Targeting U.S. Midterm Election Keywords
14. .@Google Firebase #DatabaseSecurity proved insufficient when bypassed by hackers to leak data. Learn more about this #SecurityFlaw from expert Michael
15. 35 million voter records from 19 US states for sale
16. Alphabet in the soup for keeping quiet about Google+ data leak bug
17. Anthem Mega-Breach: Record $16 Million HIPAA Settlement
18. US Voter Records for Sale on Hacker Forum
19. Millions of US Voter Records for Sale
20. 35 Million U.S Voter Records Selling in Popular Dark web Hacking Forum from $150 USD to $12,500 USD
21. Travel data for about 30,000 individuals was exposed in a Pentagon #DataBreach and experts expect that the information could be

DENIAL-OF-SERVICE

22. Brazil expert discovers Oracle flaw that allows massive DDoS attacks

MALVERTISING

Nil

PHISHING

23. FBI Releases Document with Measures for Defending Against Payroll Phishing Scams
24. How Office 365 learned to reel in phish
25. Another Phishing Scam is Appearing in Small Business Inboxes
26. Is this the simple solution to password re-use?
27. Public Cloud Phishing
28. Learn how hackers used TLS certificates to launch @netflix #phishing attacks from expert Michael Cobb of @thehairyITdog
29. "Attackers have expanded [phishing attacks] significantly into SMS and social media, and are displaying a preference for targeting personal email
30. Faculties and Staff of Chapman got Affected by the ‘Critical’ Phishing Attack
31. LibSSH Flaw Allows Hackers to Take Over Servers Without Password

WEB DEFACEMENT

Nil

BOTNET

Nil

RANSOMWARE

32. Podcast: A Utility Ransomware Attack, Post-Hurricane
33. Ransomware attack hits North Carolina water utility following hurricane
34. A crippling ransomware attack hit a water utility in the aftermath of Hurricane Florence

CRYPTOMINING & CRYPTOCURRENCIES

35. AISA 2018: Japan's journey from a cryptocurrency hack to better regulation
36. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
37. How Blockchain Is Making it Easier for Fintech Companies to Scale Up
38. Im Interview erläutert Georgeta Toth, Regional Director bei dem Security-Spezialisten #Proofpoint, den Einfluss der Crypto-Mining-#Malware auf Endgeräte in Unternehmen.
39. Android Apps claim to mine unminable cryptocurrency, just show ads
40. #GroupIB has estimated that cryptocurrency exchanges suffered a total loss of $882 mln due to targeted attacks in 2017 and

MALWARE

41. LuminosityLink RAT Author Sentenced to 30 Months in Prison
42. MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
43. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
44. A hacker who used fake advertisements placed on local newspaper websites to spread malware has been sentenced to 33 months
45. Im Interview erläutert Georgeta Toth, Regional Director bei dem Security-Spezialisten #Proofpoint, den Einfluss der Crypto-Mining-#Malware auf Endgeräte in Unternehmen.
46. GreyEnergy: New malware campaign targets critical infrastructure companies
47. Insult to injury: Malware menace soaks water-logged utility ravaged by Hurricane Florence
48. How does #FacexWorm #malware use @Facebook Messenger to spread? Learn more about this new malware with expert @lewisnic.
49. New GreyEnergy Malware Targets ICS, Tied with BlackEnergy and TeleBots
50. How does #MassMiner #malware infect systems across the web?
51. Avast scores high in malware protection | Avast
52. Sony has solved the crash of PS4 receiving malicious message
53. Abandoned Tweet Counter Hijacked With Malicious Script
54. 21-year-old Hacker Sentenced to 30 Months Prison for Creating Popular Hacking Tool LumunosityLink RAT
55. The attackers learn that due to the complexity and fluctuations of the pulping process, any changes could take up to

EXPLOIT

Nil

VULNERABILITY

56. Cisco Patches Remotely Exploitable High Risk Security Bugs in Multiple Products
57. Libssh Vulnerability Exposes Servers to Attacks
58. Chrome 70 Updates Sign-In Options, Patches 23 Flaws
59. VoiceOver iOS 12 Bug Creates Lock Screen Bypass Exposing User Photos
60. Tumblr discloses vulnerability but says 'no evidence that this bug was abused'
61. Oracle Fixes 301 Flaws in October Critical Patch Update
62. Serious SSH bug lets crooks log in just by asking nicely
63. Oracle Patched Over 300 Vulnerabilities in Its Q3 2018 Critical Patch Update
64. LibSSH Flaw Leaves Thousands Of Servers At Risk Of Hijacking
65. CVE-2018-10933: Libssh Server Side Authentication Bypass Vulnerability Alert
66. Thousands of servers easy to hack due to a LibSSH Flaw
67. Take a Bite out of the Vulnerability Remediation Backlog with InsightVM
68. WhiteSource raises $35 million for open source flaw detection platform
69. CVE-2018-3211: Java Usage Tracker Local Elevation of Privilege on Windows
70. Oracle CPU October 2018: 301 vulnerabilities patched
71. Thousands Of Servers Vulnerable To Hacking Due To libssh Flaw
72. Critical Vulnerabilities Allow Takeover of D-Link Routers
73. Tumblr Patches A Flaw That Could Have Exposed Users’ Account Info
74. Remote Code Implantation Flaw Found in Medtronic Cardiac Programmers
75. Alphabet in the soup for keeping quiet about Google+ data leak bug
76. Hacker: I'm logged in. New LibSSH Vulnerability: OK! I believe you.
77. Brazil expert discovers Oracle flaw that allows massive DDoS attacks
78. Endpoint security solutions challenged by zero-day and fileless attacks
79. VMware addressed Code Execution Flaw in its ESXi, Workstation, and Fusion products
80. Flaws in Branch.io Affected Over 685 Million Users
81. Security flaw in libssh leaves thousands of servers at risk of hijacking
82. Oracle patches 301 vulnerabilities, including 46 with a 9.8+ severity rating
83. VMware Patches Code Execution Flaw in Virtual Graphics Card
84. CVE-2018-3245: Weblogic Remote Code Execution Vulnerability Alert
85. Oracle releases Critical Patch Update Advisory – October 2018: fix 301 security bugs
86. Git RCE Vulnerability (CVE-2018-17456)Security Advisory
87. LibSSH Flaw Allows Hackers to Take Over Servers Without Password
88. Vulnerability in voting machines has not been corrected after 11 years
89. Vulnerability in Apple VoiceOver allows hackers access to user photos
90. Google Chrome 70.0.3538.67 releases: fix multiple high-risk vulnerabilities
91. The Qihoo @360CoreSec team found a @Microsoft vulnerability -- named Double Kill -- that affects applications through #MicrosoftOffice documents. Learn

Region brief for 2018-10-17

ASIA

1. AISA 2018: Japan's journey from a cryptocurrency hack to better regulation
2. New research highlights Vietnamese group's custom hacking tools
3. Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid
4. WhiteSource raises $35 million for open source flaw detection platform
5. Top 5 Publicly Accessible Hacking Tools You Can Download Today
6. WTB: MuddyWater Expands Operations
7. Git RCE Vulnerability (CVE-2018-17456)Security Advisory

OCEANIA

Nil

NORTH AMERICA

8. LuminosityLink RAT Author Sentenced to 30 Months in Prison
9. MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
10. 35 Million US Voter Registration Records Found for Sale on Dark Web
11. Podcast: A Utility Ransomware Attack, Post-Hurricane
12. How Office 365 learned to reel in phish
13. Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid
14. 35 million US voter records up for sale on the dark web
15. SEO Poisoning Campaign Targeting U.S. Midterm Election Keywords
16. 35 million voter records from 19 US states for sale
17. Insult to injury: Malware menace soaks water-logged utility ravaged by Hurricane Florence
18. WTB: MuddyWater Expands Operations
19. US Voter Records for Sale on Hacker Forum
20. Brazil expert discovers Oracle flaw that allows massive DDoS attacks
21. Millions of US Voter Records for Sale
22. 35 Million U.S Voter Records Selling in Popular Dark web Hacking Forum from $150 USD to $12,500 USD
23. A crippling ransomware attack hit a water utility in the aftermath of Hurricane Florence
24. Vulnerability in voting machines has not been corrected after 11 years

SOUTH AMERICA

25. Brazil expert discovers Oracle flaw that allows massive DDoS attacks

EUROPE

26. MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
27. 'GreyEnergy' Cyberspies Target Ukraine, Poland
28. 3 Years After Attacks on Ukraine Power Grid, BlackEnergy Successor Poses Growing Threat
29. Information of 396K Users Exposed in Facepunch Data Breach
30. Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid
31. Who is to blame for the majority of data breaches?
32. Attackers identified in the pre-espionage stage of CNI attack
33. WTB: MuddyWater Expands Operations
34. GreyEnergy group targeting critical infrastructure with espionage
35. Millions of US Voter Records for Sale
36. Russian Hackers Attack Specialist in Customer Review Tied to Innumerable Websites
37. Sony has solved the crash of PS4 receiving malicious message

AFRICA

38. WTB: MuddyWater Expands Operations

Sector brief for 2018-10-17

HEALTHCARE

1. Who is to blame for the majority of data breaches?
2. Anthem pays out record $16m over data breach

TRANSPORT

Nil

BANKING & FINANCE

3. AISA 2018: Japan's journey from a cryptocurrency hack to better regulation
4. FBI Releases Document with Measures for Defending Against Payroll Phishing Scams
5. New research highlights Vietnamese group's custom hacking tools
6. How Blockchain Is Making it Easier for Fintech Companies to Scale Up
7. 35 million voter records from 19 US states for sale
8. Alphabet in the soup for keeping quiet about Google+ data leak bug
9. WTB: MuddyWater Expands Operations
10. A crippling ransomware attack hit a water utility in the aftermath of Hurricane Florence
11. Oracle releases Critical Patch Update Advisory – October 2018: fix 301 security bugs
12. Git RCE Vulnerability (CVE-2018-17456)Security Advisory

INFORMATION & TELECOMMUNICATION

13. Tumblr Patches Security Issue that Would Leak Emails, Hashed-Salted Passwords
14. Tumblr discloses vulnerability but says 'no evidence that this bug was abused'
15. How Office 365 learned to reel in phish
16. CVE-2018-3211: Java Usage Tracker Local Elevation of Privilege on Windows
17. A hacker who used fake advertisements placed on local newspaper websites to spread malware has been sentenced to 33 months
18. Tumblr Patches A Flaw That Could Have Exposed Users’ Account Info
19. "Attackers have expanded [phishing attacks] significantly into SMS and social media, and are displaying a preference for targeting personal email
20. Millions of US Voter Records for Sale
21. How does #FacexWorm #malware use @Facebook Messenger to spread? Learn more about this new malware with expert @lewisnic.
22. #GroupIB has estimated that cryptocurrency exchanges suffered a total loss of $882 mln due to targeted attacks in 2017 and
23. Russian Hackers Attack Specialist in Customer Review Tied to Innumerable Websites
24. A crippling ransomware attack hit a water utility in the aftermath of Hurricane Florence
25. Sony has solved the crash of PS4 receiving malicious message
26. Vulnerability in Apple VoiceOver allows hackers access to user photos
27. Google Chrome 70.0.3538.67 releases: fix multiple high-risk vulnerabilities

FOOD

Nil

WATER

Nil

ENERGY

28. 3 Years After Attacks on Ukraine Power Grid, BlackEnergy Successor Poses Growing Threat
29. Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid

GOVERNMENT & PUBLIC SERVICE

30. MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
31. 35 Million US Voter Registration Records Found for Sale on Dark Web
32. New research highlights Vietnamese group's custom hacking tools
33. Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid
34. SEO Poisoning Campaign Targeting U.S. Midterm Election Keywords
35. 35 million voter records from 19 US states for sale
36. WTB: MuddyWater Expands Operations
37. Millions of US Voter Records for Sale
38. 35 Million U.S Voter Records Selling in Popular Dark web Hacking Forum from $150 USD to $12,500 USD
39. Vulnerability in voting machines has not been corrected after 11 years

Daily brief for 2018-10-17

ASIA

1. AISA 2018: Japan's journey from a cryptocurrency hack to better regulation
2. New research highlights Vietnamese group's custom hacking tools
3. Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid
4. WhiteSource raises $35 million for open source flaw detection platform
5. Top 5 Publicly Accessible Hacking Tools You Can Download Today
6. WTB: MuddyWater Expands Operations
7. Git RCE Vulnerability (CVE-2018-17456)Security Advisory

WORLD

8. LuminosityLink RAT Author Sentenced to 30 Months in Prison
9. MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
10. 'GreyEnergy' Cyberspies Target Ukraine, Poland
11. 3 Years After Attacks on Ukraine Power Grid, BlackEnergy Successor Poses Growing Threat
12. Information of 396K Users Exposed in Facepunch Data Breach
13. 35 Million US Voter Registration Records Found for Sale on Dark Web
14. Podcast: A Utility Ransomware Attack, Post-Hurricane
15. How Office 365 learned to reel in phish
16. Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid
17. 35 million US voter records up for sale on the dark web
18. Who is to blame for the majority of data breaches?
19. Attackers identified in the pre-espionage stage of CNI attack
20. SEO Poisoning Campaign Targeting U.S. Midterm Election Keywords
21. 35 million voter records from 19 US states for sale
22. Insult to injury: Malware menace soaks water-logged utility ravaged by Hurricane Florence
23. WTB: MuddyWater Expands Operations
24. US Voter Records for Sale on Hacker Forum
25. GreyEnergy group targeting critical infrastructure with espionage
26. Brazil expert discovers Oracle flaw that allows massive DDoS attacks
27. Millions of US Voter Records for Sale
28. 35 Million U.S Voter Records Selling in Popular Dark web Hacking Forum from $150 USD to $12,500 USD
29. Russian Hackers Attack Specialist in Customer Review Tied to Innumerable Websites
30. A crippling ransomware attack hit a water utility in the aftermath of Hurricane Florence
31. Sony has solved the crash of PS4 receiving malicious message
32. Vulnerability in voting machines has not been corrected after 11 years

ATTACKS

33. Tumblr Patches Security Issue that Would Leak Emails, Hashed-Salted Passwords
34. MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
35. Redis 5.0 release, High-performance key-value database
36. Information of 396K Users Exposed in Facepunch Data Breach
37. 35 Million US Voter Registration Records Found for Sale on Dark Web
38. FBI Releases Document with Measures for Defending Against Payroll Phishing Scams
39. How Office 365 learned to reel in phish
40. Another Phishing Scam is Appearing in Small Business Inboxes
41. Phishers target book publishers in new campaign
42. Pentagon Disclosed Data Breach At Department Of Defense Affecting 30,000 Workers
43. Is this the simple solution to password re-use?
44. 35 million US voter records up for sale on the dark web
45. Who is to blame for the majority of data breaches?
46. Public Cloud Phishing
47. Learn how hackers used TLS certificates to launch @netflix #phishing attacks from expert Michael Cobb of @thehairyITdog
48. GreyEnergy: New malware campaign targets critical infrastructure companies
49. Tumblr Patches A Flaw That Could Have Exposed Users’ Account Info
50. Anthem pays out record $16m over data breach
51. SEO Poisoning Campaign Targeting U.S. Midterm Election Keywords
52. "Attackers have expanded [phishing attacks] significantly into SMS and social media, and are displaying a preference for targeting personal email
53. .@Google Firebase #DatabaseSecurity proved insufficient when bypassed by hackers to leak data. Learn more about this #SecurityFlaw from expert Michael
54. 35 million voter records from 19 US states for sale
55. Alphabet in the soup for keeping quiet about Google+ data leak bug
56. Anthem Mega-Breach: Record $16 Million HIPAA Settlement
57. US Voter Records for Sale on Hacker Forum
58. Millions of US Voter Records for Sale
59. 35 Million U.S Voter Records Selling in Popular Dark web Hacking Forum from $150 USD to $12,500 USD
60. Faculties and Staff of Chapman got Affected by the ‘Critical’ Phishing Attack
61. LibSSH Flaw Allows Hackers to Take Over Servers Without Password
62. Travel data for about 30,000 individuals was exposed in a Pentagon #DataBreach and experts expect that the information could be

THREATS

63. AISA 2018: Japan's journey from a cryptocurrency hack to better regulation
64. Cisco Patches Remotely Exploitable High Risk Security Bugs in Multiple Products
65. Libssh Vulnerability Exposes Servers to Attacks
66. Chrome 70 Updates Sign-In Options, Patches 23 Flaws
67. VoiceOver iOS 12 Bug Creates Lock Screen Bypass Exposing User Photos
68. LuminosityLink RAT Author Sentenced to 30 Months in Prison
69. MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
70. Tumblr discloses vulnerability but says 'no evidence that this bug was abused'
71. Oracle Fixes 301 Flaws in October Critical Patch Update
72. Podcast: A Utility Ransomware Attack, Post-Hurricane
73. Serious SSH bug lets crooks log in just by asking nicely
74. Oracle Patched Over 300 Vulnerabilities in Its Q3 2018 Critical Patch Update
75. LibSSH Flaw Leaves Thousands Of Servers At Risk Of Hijacking
76. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
77. CVE-2018-10933: Libssh Server Side Authentication Bypass Vulnerability Alert
78. Thousands of servers easy to hack due to a LibSSH Flaw
79. Take a Bite out of the Vulnerability Remediation Backlog with InsightVM
80. How Blockchain Is Making it Easier for Fintech Companies to Scale Up
81. WhiteSource raises $35 million for open source flaw detection platform
82. CVE-2018-3211: Java Usage Tracker Local Elevation of Privilege on Windows
83. Oracle CPU October 2018: 301 vulnerabilities patched
84. A hacker who used fake advertisements placed on local newspaper websites to spread malware has been sentenced to 33 months
85. Thousands Of Servers Vulnerable To Hacking Due To libssh Flaw
86. Im Interview erläutert Georgeta Toth, Regional Director bei dem Security-Spezialisten #Proofpoint, den Einfluss der Crypto-Mining-#Malware auf Endgeräte in Unternehmen.
87. GreyEnergy: New malware campaign targets critical infrastructure companies
88. Critical Vulnerabilities Allow Takeover of D-Link Routers
89. Tumblr Patches A Flaw That Could Have Exposed Users’ Account Info
90. Remote Code Implantation Flaw Found in Medtronic Cardiac Programmers
91. Insult to injury: Malware menace soaks water-logged utility ravaged by Hurricane Florence
92. Alphabet in the soup for keeping quiet about Google+ data leak bug
93. Hacker: I'm logged in. New LibSSH Vulnerability: OK! I believe you.
94. Brazil expert discovers Oracle flaw that allows massive DDoS attacks
95. Endpoint security solutions challenged by zero-day and fileless attacks
96. VMware addressed Code Execution Flaw in its ESXi, Workstation, and Fusion products
97. Flaws in Branch.io Affected Over 685 Million Users
98. How does #FacexWorm #malware use @Facebook Messenger to spread? Learn more about this new malware with expert @lewisnic.
99. Ransomware attack hits North Carolina water utility following hurricane
100. Android Apps claim to mine unminable cryptocurrency, just show ads
101. #GroupIB has estimated that cryptocurrency exchanges suffered a total loss of $882 mln due to targeted attacks in 2017 and
102. New GreyEnergy Malware Targets ICS, Tied with BlackEnergy and TeleBots
103. Security flaw in libssh leaves thousands of servers at risk of hijacking
104. How does #MassMiner #malware infect systems across the web?
105. A crippling ransomware attack hit a water utility in the aftermath of Hurricane Florence
106. Oracle patches 301 vulnerabilities, including 46 with a 9.8+ severity rating
107. VMware Patches Code Execution Flaw in Virtual Graphics Card
108. Avast scores high in malware protection | Avast
109. CVE-2018-3245: Weblogic Remote Code Execution Vulnerability Alert
110. Oracle releases Critical Patch Update Advisory – October 2018: fix 301 security bugs
111. Git RCE Vulnerability (CVE-2018-17456)Security Advisory
112. Sony has solved the crash of PS4 receiving malicious message
113. LibSSH Flaw Allows Hackers to Take Over Servers Without Password
114. Abandoned Tweet Counter Hijacked With Malicious Script
115. 21-year-old Hacker Sentenced to 30 Months Prison for Creating Popular Hacking Tool LumunosityLink RAT
116. Vulnerability in voting machines has not been corrected after 11 years
117. Vulnerability in Apple VoiceOver allows hackers access to user photos
118. Google Chrome 70.0.3538.67 releases: fix multiple high-risk vulnerabilities
119. The attackers learn that due to the complexity and fluctuations of the pulping process, any changes could take up to
120. The Qihoo @360CoreSec team found a @Microsoft vulnerability -- named Double Kill -- that affects applications through #MicrosoftOffice documents. Learn

CRIME

121. LuminosityLink RAT Author Sentenced to 30 Months in Prison
122. Information of 396K Users Exposed in Facepunch Data Breach
123. FBI Releases Document with Measures for Defending Against Payroll Phishing Scams
124. Another Phishing Scam is Appearing in Small Business Inboxes
125. Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid
126. Who is to blame for the majority of data breaches?
127. How Blockchain Is Making it Easier for Fintech Companies to Scale Up
128. A hacker who used fake advertisements placed on local newspaper websites to spread malware has been sentenced to 33 months
129. SEO Poisoning Campaign Targeting U.S. Midterm Election Keywords
130. WTB: MuddyWater Expands Operations
131. Millions of US Voter Records for Sale
132. Abandoned Tweet Counter Hijacked With Malicious Script
133. 21-year-old Hacker Sentenced to 30 Months Prison for Creating Popular Hacking Tool LumunosityLink RAT
134. Vulnerability in Apple VoiceOver allows hackers access to user photos

POLITICS

135. Cisco Patches Remotely Exploitable High Risk Security Bugs in Multiple Products
136. MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
137. 'GreyEnergy' Cyberspies Target Ukraine, Poland
138. New research highlights Vietnamese group's custom hacking tools
139. Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid
140. GreyEnergy: New malware campaign targets critical infrastructure companies
141. Attackers identified in the pre-espionage stage of CNI attack
142. SEO Poisoning Campaign Targeting U.S. Midterm Election Keywords
143. GreyEnergy group targeting critical infrastructure with espionage
144. A crippling ransomware attack hit a water utility in the aftermath of Hurricane Florence
145. Vulnerability in voting machines has not been corrected after 11 years