APT report for 2018-10-18

TRANSNATIONAL / UNKNOWN

Nil

CHINA

1. New APT Could Signal Reemergence of Notorious Comment Crew
2. Tracking Tick Through Recent Campaigns Targeting East Asia
3. Cyber Espionage Campaign Reuses Code from China's APT1
4. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
5. Oceansalt Linked To Defunct Chinese APT Comment Crew
6. 'Operation Oceansalt' Reuses Code from Chinese Group APT1
7. Tracking Tick Through Recent Campaigns Targeting East Asia
8. Operation Oceansalt research reveals cyber-attacks targeting South Korea, USA and Canada
9. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
10. ‘Operation Oceansalt’ Delivers Wave After Wave
11. New Reconnaissance Tool Uses Code from Eight-Year-Old Comment Crew Implant

INDIA

12. New Pennsylvania Law Imposes Fine for Using Drones to Spy

NORTH KOREA

13. Group-IB: 14 cyber attacks on crypto exchanges resulted in a loss of $882 million
14. Hacking Attacks On Cryptocurrency Exchanges Resulted in a Loss of $882 Million
15. Targeted attacks on crypto exchanges resulted in a loss of $882 million

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

16. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
17. GreyEnergy cyberespionage group targets Poland and Ukraine
18. GreyEnergy Spy APT Mounts Sophisticated Effort Against Critical Infrastructure
19. GreyEnergy Potential Successor of BlackEnergy
20. XBash Malware Security Advisory

SERBIA

Nil

UKRAINE

21. Group-IB: 14 cyber attacks on crypto exchanges resulted in a loss of $882 million

Platform report for 2018-10-18

WINDOWS

1. CVE-2018-8460: Exposing a Double Free in Internet Explorer for Code Execution
2. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
3. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
4. Tracking Tick Through Recent Campaigns Targeting East Asia
5. Ruby 2.4.5 released: 40 bug fixes
6. XBash Malware Security Advisory

LINUX

7. Open source web hosting software compromised with DDoS malware
8. Ruby 2.4.5 released: 40 bug fixes
9. XBash Malware Security Advisory
10. VestaCP compromised in a new supply-chain attack
11. VestaCP compromised in a new supply-chain attack

UNIX

Nil

ANDROID

12. GPlayed Trojan - .Net Playing with Google Market

IOS

13. Crypto Mining Malware Runs on iPhone
14. Cryptomining Malware Attacks On iPhones Grew By 400%

MACOS

15. Ruby 2.4.5 released: 40 bug fixes
16. XBash Malware Security Advisory

Threat report for 2018-10-18

DATA BREACH & DATA LOSS

1. 35 Million Records Of US Voters Data For Sale On The Dark Web
2. Thousands of Neoflam Clients Had Their Data Leaked After Buying Frying Pans
3. Tracking Tick Through Recent Campaigns Targeting East Asia
4. Cyber Espionage Campaign Reuses Code from China's APT1
5. The #NetSpectre vulnerability could enable a slow leak of data remotely via side channels. Expert Michael Cobb of @thehairyITdog explains
6. Tumblr Privacy Bug Could Have Exposed Sensitive Account Data
7. Apple to US users: Here's how you can now see what personal data we hold on you
8. Open source web hosting software compromised with DDoS malware
9. Anthem Settles with OCR for $16M for 2015 Data Breach
10. Card Factory Exposed Customers Photos Publicly Due To A Website Flaw
11. Hackers can use legitimate #AdminTools to compromise networks. Learn more about "living off the land" attacks from expert Michael Cobb
12. Tumblr patches bug that could have exposed user data
13. 12.5 Million Email Archives Exposed - Why would #cybercriminals go to a #darkweb market and pay for access when they
14. #NetSpectre exploits leak data remotely via side-channel attacks. Learn how to use #ThreatModeling to stop speculative execution from expert Ed
15. Tracking Tick Through Recent Campaigns Targeting East Asia
16. McAfee researchers uncover ‘significant’ espionage campaign
17. Apple to US users: Here's how you can now see what personal data we hold on you
18. Tumblr Fixes Security Bug that Leaked Private Account Info
19. Tumblr fixed a #vulnerability that could have exposed sensitive account #data, including usernames/passwords and individual IP addresses. But the company
20. The #TLBleed vulnerability uses @Intel's HTT chip feature to leak data. Learn about how hackers could use #malware to launch
21. VestaCP compromised in a new supply-chain attack
22. VestaCP compromised in a new supply-chain attack
23. Anthem to pay record £12M for 2015 data breach
24. Around 600 Computers of Anne Arundel County Public Library have been Exposed to Emotet Virus
25. In the wake of numerous high-profile data breaches and privacy incidents, consumers are more aware and concerned than ever about
26. Senate inquiry recommends locking down My Health Record by default
27. Tumblr Vulnerability Exposed User Account Information
28. The Equifax Hack Uploaded Files the Right Way
29. Bug Trio Affecting Eight D-Link Models Leads to Full Compromise
30. SEO pollution campaign affects web searches related to EU midterm elections

DENIAL-OF-SERVICE

31. Open source web hosting software compromised with DDoS malware
32. Who and Why Make DDoS Attacks on The Site of Colleges and Universities ?
33. A10 Networks provides cloud, Internet and gaming providers with 1 RU DDoS defense appliance

MALVERTISING

Nil

PHISHING

34. The libssh “login with no password” bug – what you need to know [VIDEO]

WEB DEFACEMENT

Nil

BOTNET

35. After an attempted comeback by the Russian built #VPNFilter #botnet, home #networkdevices are at risk. Learn how this #malware targets
36. How does the resurgent VPNFilter botnet target victims?

RANSOMWARE

37. 7 best practices for negotiating ransomware payments

CRYPTOMINING & CRYPTOCURRENCIES

38. Fake Adobe Flash update hides cryptocurrency malware
39. Crooks are attempting to spread their cryptojacking malware to unsuspecting victims by disguising it as an update for Flash. The malicious
40. Top 10 Blockchain Development Companies
41. Crypto Mining Malware Runs on iPhone
42. Cryptocurrency Miners Hiding As Flash Updates
43. Cryptomining Malware Attacks On iPhones Grew By 400%
44. Hacking Attacks On Cryptocurrency Exchanges Resulted in a Loss of $882 Million
45. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
46. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
47. LuminosityLink spyware mastermind gets 30 months in the clink, forfeits $725k in Bitcoin
48. Researcher Livestreams 51% Attack on Altcoin Blockchain
49. Cryptojacking: A hidden cost for your company
50. Report: Cryptocurrency Exchanges Lost $882 Million to Hackers

MALWARE

51. Fake Adobe Flash update hides cryptocurrency malware
52. After an attempted comeback by the Russian built #VPNFilter #botnet, home #networkdevices are at risk. Learn how this #malware targets
53. Open source web hosting software compromised with DDoS malware
54. LuminosityLink Spyware Mastermind Gets 30 Months In The Clink
55. Crooks are attempting to spread their cryptojacking malware to unsuspecting victims by disguising it as an update for Flash. The malicious
56. Crypto Mining Malware Runs on iPhone
57. GPlayed Trojan - .Net Playing with Google Market
58. Cryptomining Malware Attacks On iPhones Grew By 400%
59. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
60. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
61. LuminosityLink spyware mastermind gets 30 months in the clink, forfeits $725k in Bitcoin
62. The #TLBleed vulnerability uses @Intel's HTT chip feature to leak data. Learn about how hackers could use #malware to launch
63. XBash Malware Security Advisory
64. The author of the LuminosityLink RAT sentenced to 30 Months in Prison
65. Stegware: How is #malware using #steganography techniques to avoid detection?
66. Around 600 Computers of Anne Arundel County Public Library have been Exposed to Emotet Virus
67. In order to distribute the attack payload, the code needs to be downloaded onto the PLCs & safety controllers. This

EXPLOIT

Nil

VULNERABILITY

68. GitHub now warns devs about bugs that led to Equifax breach
69. Flaws in telepresence robots allow hackers access to pictures, video feeds
70. Branch.io Flaws may have affected as many as 685 million individuals
71. Critical Remote Code Execution Vulnerabilities Patched by Drupal
72. Code Execution Vulnerability Patched in Library Used by VLC, Other Media Players
73. Flaws Open Telepresence Robots to Prying Eyes
74. [SingCERT] Alert on Multiple Security Vulnerabilities in Oracle's Enterprise Products
75. The #NetSpectre vulnerability could enable a slow leak of data remotely via side channels. Expert Michael Cobb of @thehairyITdog explains
76. A newly disclosed #libSSH vulnerability could allow an attacker #AdminAccess to a server with little effort. By @MT_Heller
77. Drupal addresses multiple critical flaws with latest release
78. Tumblr Privacy Bug Could Have Exposed Sensitive Account Data
79. CVE-2018-8460: Exposing a Double Free in Internet Explorer for Code Execution
80. Wapiti – The Black Box Vulnerability Scanner for Web Applications
81. Vulnerability Spotlight: Live Networks LIVE555 streaming media RTSPServer code execution vulnerability
82. The libssh “login with no password” bug – what you need to know [VIDEO]
83. Card Factory Exposed Customers Photos Publicly Due To A Website Flaw
84. How Shodan helps identify ICS cybersecurity vulnerabilities
85. Oracle extends its thanks to Qihoo 360 for fixing the vulnerabilities of Weblogic
86. Tumblr patches bug that could have exposed user data
87. [SingCERT] Alert on Linksys E Series Routers Vulnerabilities (CVE-2018-3953, CVE-2018-3954, and CVE-2018-3955)
88. Apache Access Vulnerability Could Affect Thousands of Applications
89. Last year, D-Link flubbed a router bug-fix, so it's back with total pwnage
90. Party like it's 1989... SVGA code bug haunts VMware's house, lets guests flee to host OS
91. Oracle Patches 301 Vulnerabilities in October Update
92. Tumblr Fixes Security Bug that Leaked Private Account Info
93. Ruby 2.4.5 released: 40 bug fixes
94. Tumblr fixed a #vulnerability that could have exposed sensitive account #data, including usernames/passwords and individual IP addresses. But the company
95. The #TLBleed vulnerability uses @Intel's HTT chip feature to leak data. Learn about how hackers could use #malware to launch
96. New libSSH vulnerability gives root access to servers
97. A 4-year-old #libSSH vulnerability can allow attackers to easily log in to servers with full administrative control, but it is
98. The implications of the NetSpectre vulnerability
99. #Shodan can be a helpful tool for security professionals to locate #ICSsecurity vulnerabilities. Expert Ernie Hayden explains how Shodan works
100. Oracle security updates contains 45 critical-rated vulnerability
101. A #libSSH vulnerability that went undisclosed for almost five years could allow an attacker easy #AdminAccess to servers, @0xAmit said
102. Vulnerability Spotlight: Live Networks LIVE555 streaming media RTSPServer code execution vulnerability
103. Chaining three critical vulnerabilities allows takeover of D-Link routers
104. Tumblr Fixes Critical Security Bug That Exposes User Account Details
105. Tumblr Vulnerability Exposed User Account Information
106. Bug Trio Affecting Eight D-Link Models Leads to Full Compromise

Region brief for 2018-10-18

ASIA

1. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
2. GreyEnergy cyberespionage group targets Poland and Ukraine
3. Tracking Tick Through Recent Campaigns Targeting East Asia
4. Cyber Espionage Campaign Reuses Code from China's APT1
5. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
6. Oceansalt Linked To Defunct Chinese APT Comment Crew
7. Group-IB: 14 cyber attacks on crypto exchanges resulted in a loss of $882 million
8. Hacking Attacks On Cryptocurrency Exchanges Resulted in a Loss of $882 Million
9. 'Operation Oceansalt' Reuses Code from Chinese Group APT1
10. Oracle extends its thanks to Qihoo 360 for fixing the vulnerabilities of Weblogic
11. Tracking Tick Through Recent Campaigns Targeting East Asia
12. XBash Malware Security Advisory
13. Operation Oceansalt research reveals cyber-attacks targeting South Korea, USA and Canada
14. Targeted attacks on crypto exchanges resulted in a loss of $882 million
15. The Equifax Hack Uploaded Files the Right Way
16. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
17. ‘Operation Oceansalt’ Delivers Wave After Wave
18. New Reconnaissance Tool Uses Code from Eight-Year-Old Comment Crew Implant

OCEANIA

19. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
20. Thousands of Neoflam Clients Had Their Data Leaked After Buying Frying Pans
21. The author of the LuminosityLink RAT sentenced to 30 Months in Prison
22. Senate inquiry recommends locking down My Health Record by default

NORTH AMERICA

23. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
24. Branch.io Flaws may have affected as many as 685 million individuals
25. 35 Million Records Of US Voters Data For Sale On The Dark Web
26. Cyber Espionage Campaign Reuses Code from China's APT1
27. Apple to US users: Here's how you can now see what personal data we hold on you
28. CVE-2018-8460: Exposing a Double Free in Internet Explorer for Code Execution
29. New Pennsylvania Law Imposes Fine for Using Drones to Spy
30. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
31. Crypto Mining Malware Runs on iPhone
32. 'Operation Oceansalt' Reuses Code from Chinese Group APT1
33. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
34. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
35. Apple to US users: Here's how you can now see what personal data we hold on you
36. XBash Malware Security Advisory
37. Anthem to pay record £12M for 2015 data breach
38. The author of the LuminosityLink RAT sentenced to 30 Months in Prison
39. Operation Oceansalt research reveals cyber-attacks targeting South Korea, USA and Canada
40. ‘Operation Oceansalt’ Delivers Wave After Wave
41. SEO pollution campaign affects web searches related to EU midterm elections
42. New Reconnaissance Tool Uses Code from Eight-Year-Old Comment Crew Implant

SOUTH AMERICA

Nil

EUROPE

43. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
44. GreyEnergy cyberespionage group targets Poland and Ukraine
45. After an attempted comeback by the Russian built #VPNFilter #botnet, home #networkdevices are at risk. Learn how this #malware targets
46. GreyEnergy Potential Successor of BlackEnergy
47. The author of the LuminosityLink RAT sentenced to 30 Months in Prison
48. Chaining three critical vulnerabilities allows takeover of D-Link routers

AFRICA

49. The author of the LuminosityLink RAT sentenced to 30 Months in Prison

Sector brief for 2018-10-18

HEALTHCARE

1. Anthem to pay record £12M for 2015 data breach

TRANSPORT

Nil

BANKING & FINANCE

2. Anthem Settles with OCR for $16M for 2015 Data Breach
3. Top 10 Blockchain Development Companies
4. Group-IB: 14 cyber attacks on crypto exchanges resulted in a loss of $882 million

INFORMATION & TELECOMMUNICATION

5. Tumblr Privacy Bug Could Have Exposed Sensitive Account Data
6. CVE-2018-8460: Exposing a Double Free in Internet Explorer for Code Execution
7. Group-IB: 14 cyber attacks on crypto exchanges resulted in a loss of $882 million
8. Tumblr patches bug that could have exposed user data
9. [SingCERT] Alert on Linksys E Series Routers Vulnerabilities (CVE-2018-3953, CVE-2018-3954, and CVE-2018-3955)
10. 12.5 Million Email Archives Exposed - Why would #cybercriminals go to a #darkweb market and pay for access when they
11. Tumblr Fixes Security Bug that Leaked Private Account Info
12. Tumblr fixed a #vulnerability that could have exposed sensitive account #data, including usernames/passwords and individual IP addresses. But the company
13. In the wake of numerous high-profile data breaches and privacy incidents, consumers are more aware and concerned than ever about
14. Report: Cryptocurrency Exchanges Lost $882 Million to Hackers
15. Tumblr Fixes Critical Security Bug That Exposes User Account Details
16. Tumblr Vulnerability Exposed User Account Information
17. Who and Why Make DDoS Attacks on The Site of Colleges and Universities ?

FOOD

Nil

WATER

Nil

ENERGY

18. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
19. GreyEnergy cyberespionage group targets Poland and Ukraine
20. New Pennsylvania Law Imposes Fine for Using Drones to Spy
21. GreyEnergy Potential Successor of BlackEnergy

GOVERNMENT & PUBLIC SERVICE

22. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
23. 35 Million Records Of US Voters Data For Sale On The Dark Web
24. Cyber Espionage Campaign Reuses Code from China's APT1
25. New Pennsylvania Law Imposes Fine for Using Drones to Spy
26. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
27. Operation Oceansalt research reveals cyber-attacks targeting South Korea, USA and Canada
28. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
29. SEO pollution campaign affects web searches related to EU midterm elections

Daily brief for 2018-10-18

ASIA

1. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
2. GreyEnergy cyberespionage group targets Poland and Ukraine
3. Tracking Tick Through Recent Campaigns Targeting East Asia
4. Cyber Espionage Campaign Reuses Code from China's APT1
5. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
6. Oceansalt Linked To Defunct Chinese APT Comment Crew
7. Group-IB: 14 cyber attacks on crypto exchanges resulted in a loss of $882 million
8. Hacking Attacks On Cryptocurrency Exchanges Resulted in a Loss of $882 Million
9. 'Operation Oceansalt' Reuses Code from Chinese Group APT1
10. Oracle extends its thanks to Qihoo 360 for fixing the vulnerabilities of Weblogic
11. Tracking Tick Through Recent Campaigns Targeting East Asia
12. XBash Malware Security Advisory
13. Operation Oceansalt research reveals cyber-attacks targeting South Korea, USA and Canada
14. Targeted attacks on crypto exchanges resulted in a loss of $882 million
15. The Equifax Hack Uploaded Files the Right Way
16. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
17. ‘Operation Oceansalt’ Delivers Wave After Wave
18. New Reconnaissance Tool Uses Code from Eight-Year-Old Comment Crew Implant

WORLD

19. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
20. Branch.io Flaws may have affected as many as 685 million individuals
21. GreyEnergy cyberespionage group targets Poland and Ukraine
22. 35 Million Records Of US Voters Data For Sale On The Dark Web
23. Thousands of Neoflam Clients Had Their Data Leaked After Buying Frying Pans
24. Cyber Espionage Campaign Reuses Code from China's APT1
25. After an attempted comeback by the Russian built #VPNFilter #botnet, home #networkdevices are at risk. Learn how this #malware targets
26. Apple to US users: Here's how you can now see what personal data we hold on you
27. CVE-2018-8460: Exposing a Double Free in Internet Explorer for Code Execution
28. New Pennsylvania Law Imposes Fine for Using Drones to Spy
29. GreyEnergy Potential Successor of BlackEnergy
30. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
31. Crypto Mining Malware Runs on iPhone
32. 'Operation Oceansalt' Reuses Code from Chinese Group APT1
33. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
34. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
35. Apple to US users: Here's how you can now see what personal data we hold on you
36. XBash Malware Security Advisory
37. Anthem to pay record £12M for 2015 data breach
38. The author of the LuminosityLink RAT sentenced to 30 Months in Prison
39. Operation Oceansalt research reveals cyber-attacks targeting South Korea, USA and Canada
40. Chaining three critical vulnerabilities allows takeover of D-Link routers
41. Senate inquiry recommends locking down My Health Record by default
42. ‘Operation Oceansalt’ Delivers Wave After Wave
43. SEO pollution campaign affects web searches related to EU midterm elections
44. New Reconnaissance Tool Uses Code from Eight-Year-Old Comment Crew Implant

ATTACKS

45. 35 Million Records Of US Voters Data For Sale On The Dark Web
46. Thousands of Neoflam Clients Had Their Data Leaked After Buying Frying Pans
47. Tracking Tick Through Recent Campaigns Targeting East Asia
48. Cyber Espionage Campaign Reuses Code from China's APT1
49. The #NetSpectre vulnerability could enable a slow leak of data remotely via side channels. Expert Michael Cobb of @thehairyITdog explains
50. Tumblr Privacy Bug Could Have Exposed Sensitive Account Data
51. Apple to US users: Here's how you can now see what personal data we hold on you
52. Open source web hosting software compromised with DDoS malware
53. Anthem Settles with OCR for $16M for 2015 Data Breach
54. The libssh “login with no password” bug – what you need to know [VIDEO]
55. Card Factory Exposed Customers Photos Publicly Due To A Website Flaw
56. Hackers can use legitimate #AdminTools to compromise networks. Learn more about "living off the land" attacks from expert Michael Cobb
57. Tumblr patches bug that could have exposed user data
58. 12.5 Million Email Archives Exposed - Why would #cybercriminals go to a #darkweb market and pay for access when they
59. #NetSpectre exploits leak data remotely via side-channel attacks. Learn how to use #ThreatModeling to stop speculative execution from expert Ed
60. Tracking Tick Through Recent Campaigns Targeting East Asia
61. McAfee researchers uncover ‘significant’ espionage campaign
62. Apple to US users: Here's how you can now see what personal data we hold on you
63. Tumblr Fixes Security Bug that Leaked Private Account Info
64. Tumblr fixed a #vulnerability that could have exposed sensitive account #data, including usernames/passwords and individual IP addresses. But the company
65. The #TLBleed vulnerability uses @Intel's HTT chip feature to leak data. Learn about how hackers could use #malware to launch
66. VestaCP compromised in a new supply-chain attack
67. VestaCP compromised in a new supply-chain attack
68. Anthem to pay record £12M for 2015 data breach
69. Around 600 Computers of Anne Arundel County Public Library have been Exposed to Emotet Virus
70. In the wake of numerous high-profile data breaches and privacy incidents, consumers are more aware and concerned than ever about
71. Senate inquiry recommends locking down My Health Record by default
72. Tumblr Vulnerability Exposed User Account Information
73. The Equifax Hack Uploaded Files the Right Way
74. Bug Trio Affecting Eight D-Link Models Leads to Full Compromise
75. SEO pollution campaign affects web searches related to EU midterm elections

THREATS

76. GitHub now warns devs about bugs that led to Equifax breach
77. Flaws in telepresence robots allow hackers access to pictures, video feeds
78. Fake Adobe Flash update hides cryptocurrency malware
79. Branch.io Flaws may have affected as many as 685 million individuals
80. Critical Remote Code Execution Vulnerabilities Patched by Drupal
81. Code Execution Vulnerability Patched in Library Used by VLC, Other Media Players
82. Flaws Open Telepresence Robots to Prying Eyes
83. [SingCERT] Alert on Multiple Security Vulnerabilities in Oracle's Enterprise Products
84. The #NetSpectre vulnerability could enable a slow leak of data remotely via side channels. Expert Michael Cobb of @thehairyITdog explains
85. A newly disclosed #libSSH vulnerability could allow an attacker #AdminAccess to a server with little effort. By @MT_Heller
86. After an attempted comeback by the Russian built #VPNFilter #botnet, home #networkdevices are at risk. Learn how this #malware targets
87. Drupal addresses multiple critical flaws with latest release
88. Tumblr Privacy Bug Could Have Exposed Sensitive Account Data
89. CVE-2018-8460: Exposing a Double Free in Internet Explorer for Code Execution
90. Open source web hosting software compromised with DDoS malware
91. Wapiti – The Black Box Vulnerability Scanner for Web Applications
92. Vulnerability Spotlight: Live Networks LIVE555 streaming media RTSPServer code execution vulnerability
93. LuminosityLink Spyware Mastermind Gets 30 Months In The Clink
94. Crooks are attempting to spread their cryptojacking malware to unsuspecting victims by disguising it as an update for Flash. The malicious
95. Top 10 Blockchain Development Companies
96. Crypto Mining Malware Runs on iPhone
97. The libssh “login with no password” bug – what you need to know [VIDEO]
98. Cryptocurrency Miners Hiding As Flash Updates
99. GPlayed Trojan - .Net Playing with Google Market
100. Card Factory Exposed Customers Photos Publicly Due To A Website Flaw
101. How Shodan helps identify ICS cybersecurity vulnerabilities
102. Cryptomining Malware Attacks On iPhones Grew By 400%
103. Hacking Attacks On Cryptocurrency Exchanges Resulted in a Loss of $882 Million
104. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
105. Oracle extends its thanks to Qihoo 360 for fixing the vulnerabilities of Weblogic
106. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
107. Tumblr patches bug that could have exposed user data
108. [SingCERT] Alert on Linksys E Series Routers Vulnerabilities (CVE-2018-3953, CVE-2018-3954, and CVE-2018-3955)
109. Apache Access Vulnerability Could Affect Thousands of Applications
110. LuminosityLink spyware mastermind gets 30 months in the clink, forfeits $725k in Bitcoin
111. Last year, D-Link flubbed a router bug-fix, so it's back with total pwnage
112. Party like it's 1989... SVGA code bug haunts VMware's house, lets guests flee to host OS
113. Oracle Patches 301 Vulnerabilities in October Update
114. Tumblr Fixes Security Bug that Leaked Private Account Info
115. Ruby 2.4.5 released: 40 bug fixes
116. Tumblr fixed a #vulnerability that could have exposed sensitive account #data, including usernames/passwords and individual IP addresses. But the company
117. The #TLBleed vulnerability uses @Intel's HTT chip feature to leak data. Learn about how hackers could use #malware to launch
118. XBash Malware Security Advisory
119. New libSSH vulnerability gives root access to servers
120. A 4-year-old #libSSH vulnerability can allow attackers to easily log in to servers with full administrative control, but it is
121. The implications of the NetSpectre vulnerability
122. Researcher Livestreams 51% Attack on Altcoin Blockchain
123. The author of the LuminosityLink RAT sentenced to 30 Months in Prison
124. #Shodan can be a helpful tool for security professionals to locate #ICSsecurity vulnerabilities. Expert Ernie Hayden explains how Shodan works
125. Oracle security updates contains 45 critical-rated vulnerability
126. A #libSSH vulnerability that went undisclosed for almost five years could allow an attacker easy #AdminAccess to servers, @0xAmit said
127. Vulnerability Spotlight: Live Networks LIVE555 streaming media RTSPServer code execution vulnerability
128. Stegware: How is #malware using #steganography techniques to avoid detection?
129. Cryptojacking: A hidden cost for your company
130. Chaining three critical vulnerabilities allows takeover of D-Link routers
131. Around 600 Computers of Anne Arundel County Public Library have been Exposed to Emotet Virus
132. Report: Cryptocurrency Exchanges Lost $882 Million to Hackers
133. Tumblr Fixes Critical Security Bug That Exposes User Account Details
134. In order to distribute the attack payload, the code needs to be downloaded onto the PLCs & safety controllers. This
135. Tumblr Vulnerability Exposed User Account Information
136. Bug Trio Affecting Eight D-Link Models Leads to Full Compromise
137. 7 best practices for negotiating ransomware payments

CRIME

138. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
139. GreyEnergy cyberespionage group targets Poland and Ukraine
140. Thousands of Neoflam Clients Had Their Data Leaked After Buying Frying Pans
141. New Pennsylvania Law Imposes Fine for Using Drones to Spy
142. Group-IB: 14 cyber attacks on crypto exchanges resulted in a loss of $882 million
143. Hacking Attacks On Cryptocurrency Exchanges Resulted in a Loss of $882 Million
144. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
145. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
146. Tumblr patches bug that could have exposed user data
147. 12.5 Million Email Archives Exposed - Why would #cybercriminals go to a #darkweb market and pay for access when they
148. XBash Malware Security Advisory
149. VestaCP compromised in a new supply-chain attack
150. VestaCP compromised in a new supply-chain attack
151. The author of the LuminosityLink RAT sentenced to 30 Months in Prison
152. Targeted attacks on crypto exchanges resulted in a loss of $882 million
153. 7 best practices for negotiating ransomware payments

POLITICS

154. Threat Report: BlackEnergy APT Group Becomes GreyEnergy
155. GreyEnergy cyberespionage group targets Poland and Ukraine
156. New APT Could Signal Reemergence of Notorious Comment Crew
157. Cyber Espionage Campaign Reuses Code from China's APT1
158. New Pennsylvania Law Imposes Fine for Using Drones to Spy
159. GreyEnergy Spy APT Mounts Sophisticated Effort Against Critical Infrastructure
160. GreyEnergy Potential Successor of BlackEnergy
161. Oceansalt cyberattack wave linked to defunct Chinese APT Comment Crew
162. 'Operation Oceansalt' Reuses Code from Chinese Group APT1
163. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
164. RAT author jailed for 30 months, ordered to hand over $725k worth of Bitcoin
165. Tracking Tick Through Recent Campaigns Targeting East Asia
166. McAfee researchers uncover ‘significant’ espionage campaign
167. Operation Oceansalt research reveals cyber-attacks targeting South Korea, USA and Canada
168. New Reconnaissance Tool Uses Code from Eight-Year-Old Comment Crew Implant