Threat report for 2018-09-26

DATA BREACH

1. Uber Agrees to $148M Settlement With States Over Data Breach
2. Uber to pay $148 million to states for 2016 data breach
3. Firefox Notifies Users of Compromised Accounts
4. Uber to pay $148 million in settlment over 2016 data breach and cover-up
5. Ex-NSA employee sentenced to 5.5 years in prison for leaking confidential data
6. United Nations data found exposed on web: researcher
7. United Nations data found exposed on web: researcher
8. Former NSA TAO hacker sentenced to 66 months in prison over Kaspersky Leak
9. SHEIN Data Breach Impacts Over 6.4 Million Customers
10. SMBs face costs of up to $2.5 million after a data breach
11. United Nations data found exposed on web: researcher
12. Millions of Twitter DMs may have been exposed by year-long bug
13. Firefox Monitor tells you whether your email was compromised in a data breach
14. Alert: A remote code execution vulnerability is discovered in Microsoft Windows Jet database engine
15. United Nations Mistakenly Exposed Sensitive Data to The Public
16. oPatch community released micro patches for Microsoft JET Database Zero-Day
17. Malware campaign attacks freelancers

DENIAL-OF-SERVICE

18. Hide and Seek (HNS) IoT Botnet targets Android devices with ADB option enabled
19. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
20. Bad bots are stealing data and ruining the customer experience
21. DDoS Attack on German Energy Company RWE
22. DDoS Attack on German Energy Company RWE
23. Bots at the Gate: A Human Rights Analysis of Automated Decision Making in Canada’s Immigration and Refugee System
24. Vulnerability in Cisco routers could allow DoS attacks
25. DDoS attack on education vendor hinders access to districts’ online portals
26. Microsoft Adds New Tools to Azure DDoS Protection
27. Viro Botnet Ransomware
28. Infinite Campus DDoS attack impedes access to student data
29. Hide and Seek Botnet Adds Infection Vector for Android Devices
30. Hide and Seek IoT Botnet Learns New Tricks: Uses ADB over Internet to Exploit Thousands of Android Devices
31. Bitcoin Core Team Releases Critical Security Update to Fix DDoS Attack Vulnerability

MALVERTISING

Nothing to report

PHISHING

32. Chegg to reset passwords for 40 million users after April 2018 hack
33. Android password managers can be tricked into believing that evil apps are good
34. User login notifications
35. Beware of payroll-themed phishing. Here’s one example.
36. SHEIN breach exposes emails, encrypted passwords of 6.42M customers
37. Counter Phishing Attacks with These Five Tricks
38. Password managers can be tricked into believing that malicious Android apps are legitimate
39. Cisco patches critical default password vulnerability
40. 11:30 AM ET today: @AlexanderGTster and @illena_a from @SCmagazine share the scoop on #spearphishing and how you can go beyond the obvious defenses to protect users from email attacks.
41. Password Tips from a Pen Tester: Are 12-Character Passwords Really Stronger, or Just a Dime a Dozen?
42. #SecurityNews: Popular news aggregation site #NewsNow has been notifying its users of a potential password #breach after it found evidence of an #intrusion. Read more about this #databreach here:
43. Looking for a enterprise grade password vault solution but MUST be hosted onsite
44. #SecurityNews: New #Ofcom rules "could help tackle #vishing" (voice #phishing) scams. They come into force on Oct 1st and will ban phone companies for charging for the Caller ID service that helps users screen their calls. Read more abut this here:
45. 156 million #phishing emails are sent out every day and email users receive up to 20 phishing emails each month. Learn more about modern phishing techniques and how to address them in the @ironscales #whitepaper.
46. Microsoft is killing passwords one announcement at a time
47. Aggregate this: NewsNow has spilt a bunch of 'encrypted' passwords
48. NewsNow Ditches Passwords After Possible Breach
49. Malware steals passwords from SHEIN, 6.4 million customers impacted
50. Malware steals passwords from 6.4 million SHEIN customers
51. Backlash sees change in Chrome login and Google account behaviour
52. Chrome 70 Lets you Control Automatic Login and Deletes Google Cookies

WEB DEFACEMENT

Nothing to report

MALWARE

53. Cisco's probe of VPNFilter router malware uncovers several new hacking techniques
54. VPNFilter Malware Adds Seven New Tools For Exploiting Network Devices
55. Fraudulent shopping domain certificate issuance outstrips legitimate businesses
56. Businesses in Arkansas Hit with Ransomware
57. Malware in the Cloud: What You Need to Know
58. Businesses in Arkansas Hit with Ransomware
59. Air Gapped PCs are Still at Risk. The Rise of USB-based Crytojacking Malware
60. Crooks turn to Delphi packers to evade malware detection
61. USB malware and cryptominers are threat to emerging markets
62. DanaBot trojan sets sights on Europe, new features
63. Trojanized App In Google Play Steals Bank Customers' Euros
64. Password managers can be tricked into believing that malicious Android apps are legitimate
65. Crooks turn to Delphi packers to evade malware detection
66. Viro Botnet Ransomware
67. Freelancers baited with job offers to download malicious macros
68. Android Banking Trojan Found On Google Play with 10,000 Installs Steals User’s Banking Credentials
69. Domain flub leaves 30 million customers high and dry
70. USB malware and cryptominers are threat to emerging markets
71. WTB: Adwind Trojan Circumvents Antivirus Software To Infect Your PC
72. Android spyware in development plunders WhatsApp data, private conversations
73. The MITRE ATT&CK Framework: Exfiltration
74. Malware steals passwords from SHEIN, 6.4 million customers impacted
75. VPNFilter III: More Tools for the Swiss Army Knife of Malware
76. New Adwind RAT Attack Linux, Windows and Mac via DDE Code Injection Technique by Evading Antivirus Software
77. Malware steals passwords from 6.4 million SHEIN customers
78. Crooks leverages Kodi Media Player add-ons for malware distribution
79. Malware in the Cloud: What You Need to Know
80. Cryptocurrency mining malware increases 86%
81. 25 Malicious apps that Downloaded More Than 120,000 Times Contains Hidden Cryptomining Script
82. Malware campaign attacks freelancers
83. GandCrab v5 Ransomware Utilizing the ALPC Task Scheduler Exploit

EXPLOIT

84. VPNFilter Malware Adds Seven New Tools For Exploiting Network Devices
85. NSA dev in the clink for 5.5 years after letting Kaspersky, allegedly Russia slurp US exploits
86. Rockwell Automation Buffer Overflow Vulnerability
87. Hide and Seek IoT Botnet Learns New Tricks: Uses ADB over Internet to Exploit Thousands of Android Devices
88. GandCrab v5 Ransomware Utilizing the ALPC Task Scheduler Exploit

VULNERABILITY

89. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
90. Vulnerability in Cisco routers could allow DoS attacks
91. Cisco patches critical default password vulnerability
92. New Linux Kernel “Mutagen Astronomy” Flaw Impacts Red Hat, CentOS, Debian Distributions.
93. Twitter fixes API bug that shared data with wrong developers
94. Cisco: Linux kernel FragmentSmack bug now affects 88 of our products
95. Bug? Feature? Power users baffled as BitLocker update switch-off continues
96. Braking bad: Mitsubishi recalls 68k SUVs over buggy software
97. Linux Kernel Vulnerability Affects Red Hat, CentOS, Debian
98. Millions of Twitter DMs may have been exposed by year-long bug
99. Apple pushes out Mojave 10.14, patches numerous vulnerabilities
100. Variant of patched IE vulnerability spotted in wild
101. Alert: A remote code execution vulnerability is discovered in Microsoft Windows Jet database engine
102. Rockwell Automation Buffer Overflow Vulnerability
103. Crowdfense launches Vulnerability Research Hub for top security researchers
104. oPatch community released micro patches for Microsoft JET Database Zero-Day
105. New Linux Kernel Bug Affects Red Hat, CentOS, and Debian Distributions
106. Vulnerability affects Cisco Video Surveillance Manager
107. Bitcoin Core Team Releases Critical Security Update to Fix DDoS Attack Vulnerability
108. Snyk raises $22 million to address security vulnerabilities in open source code
109. New security vulnerabilities (CVE-2018-14634) affects CentOS and Red Hat Linux
110. CVE-2018-0150: Cisco IOS XE Software Static Credential Vulnerability

Region brief for 2018-09-26

ASIA

1. Source Defense raises $10 million for website supply chain solution
2. Former NSA TAO hacker sentenced to 66 months in prison over Kaspersky Leak
3. Braking bad: Mitsubishi recalls 68k SUVs over buggy software
4. WTB: Adwind Trojan Circumvents Antivirus Software To Infect Your PC

OCEANIA

Nothing to report

NORTH AMERICA

5. Uber to pay $148 million to states for 2016 data breach
6. Bots at the Gate: A Human Rights Analysis of Automated Decision Making in Canada’s Immigration and Refugee System
7. Former NSA TAO hacker sentenced to 66 months in prison over Kaspersky Leak
8. Viro Botnet Ransomware
9. NSA dev in the clink for 5.5 years after letting Kaspersky, allegedly Russia slurp US exploits
10. Braking bad: Mitsubishi recalls 68k SUVs over buggy software
11. Rockwell Automation Buffer Overflow Vulnerability
12. Snyk raises $22 million to address security vulnerabilities in open source code

SOUTH AMERICA

Nothing to report

EUROPE

13. DDoS Attack on German Energy Company RWE
14. DDoS Attack on German Energy Company RWE
15. Ex-NSA employee sentenced to 5.5 years in prison for leaking confidential data
16. Source Defense raises $10 million for website supply chain solution
17. NSA dev in the clink for 5.5 years after letting Kaspersky, allegedly Russia slurp US exploits
18. Aggregate this: NewsNow has spilt a bunch of 'encrypted' passwords
19. WTB: Adwind Trojan Circumvents Antivirus Software To Infect Your PC
20. VPNFilter III: More Tools for the Swiss Army Knife of Malware
21. Snyk raises $22 million to address security vulnerabilities in open source code

AFRICA

Nothing to report

Sector brief for 2018-09-26

HEALTHCARE

Nothing to report

TRANSPORT

Nothing to report

BANKING & FINANCE

1. Chegg to reset passwords for 40 million users after April 2018 hack
2. Beware of payroll-themed phishing. Here’s one example.
3. Source Defense raises $10 million for website supply chain solution
4. Trojanized App In Google Play Steals Bank Customers' Euros
5. Android Banking Trojan Found On Google Play with 10,000 Installs Steals User’s Banking Credentials
6. WTB: Adwind Trojan Circumvents Antivirus Software To Infect Your PC
7. Magecart Attacks Grow Rampant in September

INFORMATION & TELECOMMUNICATION

Nothing to report

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

8. DDoS Attack on German Energy Company RWE
9. DDoS Attack on German Energy Company RWE
10. 25 Malicious apps that Downloaded More Than 120,000 Times Contains Hidden Cryptomining Script

GOVERNMENT & PUBLIC SERVICE

11. Beware of payroll-themed phishing. Here’s one example.

Daily brief for 2018-09-26

ASIA

1. Source Defense raises $10 million for website supply chain solution
2. Former NSA TAO hacker sentenced to 66 months in prison over Kaspersky Leak
3. Braking bad: Mitsubishi recalls 68k SUVs over buggy software
4. WTB: Adwind Trojan Circumvents Antivirus Software To Infect Your PC

WORLD

5. DDoS Attack on German Energy Company RWE
6. DDoS Attack on German Energy Company RWE
7. Uber to pay $148 million to states for 2016 data breach
8. Ex-NSA employee sentenced to 5.5 years in prison for leaking confidential data
9. Bots at the Gate: A Human Rights Analysis of Automated Decision Making in Canada’s Immigration and Refugee System
10. Source Defense raises $10 million for website supply chain solution
11. Former NSA TAO hacker sentenced to 66 months in prison over Kaspersky Leak
12. Viro Botnet Ransomware
13. NSA dev in the clink for 5.5 years after letting Kaspersky, allegedly Russia slurp US exploits
14. Aggregate this: NewsNow has spilt a bunch of 'encrypted' passwords
15. Braking bad: Mitsubishi recalls 68k SUVs over buggy software
16. WTB: Adwind Trojan Circumvents Antivirus Software To Infect Your PC
17. Rockwell Automation Buffer Overflow Vulnerability
18. VPNFilter III: More Tools for the Swiss Army Knife of Malware
19. Snyk raises $22 million to address security vulnerabilities in open source code

ATTACKS

20. Hide and Seek (HNS) IoT Botnet targets Android devices with ADB option enabled
21. Uber Agrees to $148M Settlement With States Over Data Breach
22. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
23. Chegg to reset passwords for 40 million users after April 2018 hack
24. Bad bots are stealing data and ruining the customer experience
25. DDoS Attack on German Energy Company RWE
26. DDoS Attack on German Energy Company RWE
27. Uber to pay $148 million to states for 2016 data breach
28. Android password managers can be tricked into believing that evil apps are good
29. User login notifications
30. Firefox Notifies Users of Compromised Accounts
31. Uber to pay $148 million in settlment over 2016 data breach and cover-up
32. Ex-NSA employee sentenced to 5.5 years in prison for leaking confidential data
33. Beware of payroll-themed phishing. Here’s one example.
34. Bots at the Gate: A Human Rights Analysis of Automated Decision Making in Canada’s Immigration and Refugee System
35. United Nations data found exposed on web: researcher
36. SHEIN breach exposes emails, encrypted passwords of 6.42M customers
37. United Nations data found exposed on web: researcher
38. Counter Phishing Attacks with These Five Tricks
39. Vulnerability in Cisco routers could allow DoS attacks
40. Password managers can be tricked into believing that malicious Android apps are legitimate
41. Cisco patches critical default password vulnerability
42. 11:30 AM ET today: @AlexanderGTster and @illena_a from @SCmagazine share the scoop on #spearphishing and how you can go beyond the obvious defenses to protect users from email attacks.
43. DDoS attack on education vendor hinders access to districts’ online portals
44. Microsoft Adds New Tools to Azure DDoS Protection
45. Former NSA TAO hacker sentenced to 66 months in prison over Kaspersky Leak
46. Password Tips from a Pen Tester: Are 12-Character Passwords Really Stronger, or Just a Dime a Dozen?
47. #SecurityNews: Popular news aggregation site #NewsNow has been notifying its users of a potential password #breach after it found evidence of an #intrusion. Read more about this #databreach here:
48. SHEIN Data Breach Impacts Over 6.4 Million Customers
49. Viro Botnet Ransomware
50. Looking for a enterprise grade password vault solution but MUST be hosted onsite
51. #SecurityNews: New #Ofcom rules "could help tackle #vishing" (voice #phishing) scams. They come into force on Oct 1st and will ban phone companies for charging for the Caller ID service that helps users screen their calls. Read more abut this here:
52. SMBs face costs of up to $2.5 million after a data breach
53. 156 million #phishing emails are sent out every day and email users receive up to 20 phishing emails each month. Learn more about modern phishing techniques and how to address them in the @ironscales #whitepaper.
54. Microsoft is killing passwords one announcement at a time
55. United Nations data found exposed on web: researcher
56. Aggregate this: NewsNow has spilt a bunch of 'encrypted' passwords
57. Millions of Twitter DMs may have been exposed by year-long bug
58. NewsNow Ditches Passwords After Possible Breach
59. Firefox Monitor tells you whether your email was compromised in a data breach
60. Alert: A remote code execution vulnerability is discovered in Microsoft Windows Jet database engine
61. Malware steals passwords from SHEIN, 6.4 million customers impacted
62. Infinite Campus DDoS attack impedes access to student data
63. Hide and Seek Botnet Adds Infection Vector for Android Devices
64. United Nations Mistakenly Exposed Sensitive Data to The Public
65. Hide and Seek IoT Botnet Learns New Tricks: Uses ADB over Internet to Exploit Thousands of Android Devices
66. Malware steals passwords from 6.4 million SHEIN customers
67. Backlash sees change in Chrome login and Google account behaviour
68. oPatch community released micro patches for Microsoft JET Database Zero-Day
69. Malware campaign attacks freelancers
70. Bitcoin Core Team Releases Critical Security Update to Fix DDoS Attack Vulnerability
71. Chrome 70 Lets you Control Automatic Login and Deletes Google Cookies

THREATS

72. Cisco's probe of VPNFilter router malware uncovers several new hacking techniques
73. VPNFilter Malware Adds Seven New Tools For Exploiting Network Devices
74. Fraudulent shopping domain certificate issuance outstrips legitimate businesses
75. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
76. Businesses in Arkansas Hit with Ransomware
77. Malware in the Cloud: What You Need to Know
78. Businesses in Arkansas Hit with Ransomware
79. Air Gapped PCs are Still at Risk. The Rise of USB-based Crytojacking Malware
80. Crooks turn to Delphi packers to evade malware detection
81. USB malware and cryptominers are threat to emerging markets
82. DanaBot trojan sets sights on Europe, new features
83. Trojanized App In Google Play Steals Bank Customers' Euros
84. Vulnerability in Cisco routers could allow DoS attacks
85. Password managers can be tricked into believing that malicious Android apps are legitimate
86. Cisco patches critical default password vulnerability
87. New Linux Kernel “Mutagen Astronomy” Flaw Impacts Red Hat, CentOS, Debian Distributions.
88. Crooks turn to Delphi packers to evade malware detection
89. Twitter fixes API bug that shared data with wrong developers
90. Viro Botnet Ransomware
91. Freelancers baited with job offers to download malicious macros
92. Android Banking Trojan Found On Google Play with 10,000 Installs Steals User’s Banking Credentials
93. Domain flub leaves 30 million customers high and dry
94. Cisco: Linux kernel FragmentSmack bug now affects 88 of our products
95. USB malware and cryptominers are threat to emerging markets
96. Bug? Feature? Power users baffled as BitLocker update switch-off continues
97. NSA dev in the clink for 5.5 years after letting Kaspersky, allegedly Russia slurp US exploits
98. Braking bad: Mitsubishi recalls 68k SUVs over buggy software
99. WTB: Adwind Trojan Circumvents Antivirus Software To Infect Your PC
100. Linux Kernel Vulnerability Affects Red Hat, CentOS, Debian
101. Millions of Twitter DMs may have been exposed by year-long bug
102. Apple pushes out Mojave 10.14, patches numerous vulnerabilities
103. Android spyware in development plunders WhatsApp data, private conversations
104. Variant of patched IE vulnerability spotted in wild
105. Alert: A remote code execution vulnerability is discovered in Microsoft Windows Jet database engine
106. The MITRE ATT&CK Framework: Exfiltration
107. Malware steals passwords from SHEIN, 6.4 million customers impacted
108. Rockwell Automation Buffer Overflow Vulnerability
109. Hide and Seek IoT Botnet Learns New Tricks: Uses ADB over Internet to Exploit Thousands of Android Devices
110. VPNFilter III: More Tools for the Swiss Army Knife of Malware
111. New Adwind RAT Attack Linux, Windows and Mac via DDE Code Injection Technique by Evading Antivirus Software
112. Malware steals passwords from 6.4 million SHEIN customers
113. Crooks leverages Kodi Media Player add-ons for malware distribution
114. Malware in the Cloud: What You Need to Know
115. Crowdfense launches Vulnerability Research Hub for top security researchers
116. oPatch community released micro patches for Microsoft JET Database Zero-Day
117. Cryptocurrency mining malware increases 86%
118. New Linux Kernel Bug Affects Red Hat, CentOS, and Debian Distributions
119. 25 Malicious apps that Downloaded More Than 120,000 Times Contains Hidden Cryptomining Script
120. Vulnerability affects Cisco Video Surveillance Manager
121. Malware campaign attacks freelancers
122. GandCrab v5 Ransomware Utilizing the ALPC Task Scheduler Exploit
123. Bitcoin Core Team Releases Critical Security Update to Fix DDoS Attack Vulnerability
124. Snyk raises $22 million to address security vulnerabilities in open source code
125. New security vulnerabilities (CVE-2018-14634) affects CentOS and Red Hat Linux
126. CVE-2018-0150: Cisco IOS XE Software Static Credential Vulnerability

CRIME

127. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
128. Ex-NSA employee sentenced to 5.5 years in prison for leaking confidential data
129. Source Defense raises $10 million for website supply chain solution
130. Trojanized App In Google Play Steals Bank Customers' Euros
131. Former NSA TAO hacker sentenced to 66 months in prison over Kaspersky Leak
132. SHEIN Data Breach Impacts Over 6.4 Million Customers
133. Android Banking Trojan Found On Google Play with 10,000 Installs Steals User’s Banking Credentials
134. WTB: Adwind Trojan Circumvents Antivirus Software To Infect Your PC
135. Crooks leverages Kodi Media Player add-ons for malware distribution
136. Cryptocurrency mining malware increases 86%
137. 25 Malicious apps that Downloaded More Than 120,000 Times Contains Hidden Cryptomining Script
138. Malware campaign attacks freelancers
139. Bitcoin Core Team Releases Critical Security Update to Fix DDoS Attack Vulnerability
140. Magecart Attacks Grow Rampant in September

POLITICS

141. Ex-NSA employee sentenced to 5.5 years in prison for leaking confidential data
142. Former NSA TAO hacker sentenced to 66 months in prison over Kaspersky Leak
143. United Nations Mistakenly Exposed Sensitive Data to The Public

Threat report for 2018-09-25

DATA BREACH

1. Ex-NSA Hacker Sentenced to Jail Over Kaspersky Leak
2. Malware on SHEIN Servers Compromises Data of 6.4M Customers
3. Mozilla Launches Firefox Monitor Data Breach Notification Service
4. Third-Party Patch Available for Microsoft JET Database Zero-Day
5. 130 Million Hotel Customers Breached Due to Exposed Database
6. State Department data breach exposes employee info (w/ commentary from @TripwireInc’s @craigtweets http://bit.ly/2MTcplE
7. New Adwind RAT Campaign Targets Windows, Linux and Mac Users
8. Shein Data Breach Exposes Personal Data and Email Address of 6.42 Million Customers
9. SHEIN Data breach affected 6.42 million users
10. Security In The Crypto World: Exchanges, Wallets, Personal Data. Kiev To Host The Largest Cybersecurity Forum In Eastern Europe
11. Symantec accountancy audit uncovers customer transaction recorded as revenue
12. NewsNow suffers security breach - passwords should be considered compromised
13. First known malicious cryptomining campaign targeting Kodi discovered
14. SHEIN-Fashion Shopping Site Suffers Data Breach Affecting 6.5 Million Users
15. macOS zero-day vulnerability leads to user data leaks
16. How Long Does it Take to Find Compromised Data
17. DBeaver Community Edition 5.2.1 Releases: Free universal database tool and SQL client

DENIAL-OF-SERVICE

18. DDoS Attack on Infinite Campus Limits Parent Access http://dlvr.it/QlL12Z
19. DDoS Attack on Infinite Campus Limits Parent Access https://www.infosecurity-magazine.com/news/ddos-attacks-infinite-campus?utm_source=twitterfeed&utm_medium=twitter …
20. DDoS attack on education vendor hinders access to districts’ online portals
21. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
22. Some credential-stuffing botnets don't care about being noticed any more
23. Advanced DDoS Detection and Defense
24. ZombieBoy
25. Bitcoin Core Software Patches a Critical DDoS Attack Vulnerability

MALVERTISING

Nothing to report

PHISHING

26. Firefox Monitor provides password breach alerts, Would it convince you to set up a Firefox Account
27. GrrCon Augusta 2018, Rachel Giacobozzi’s ‘The Hybrid Analyst: How Phishing Created A New Type Of Intel Analyst’
28. Tomorrow: Go beyond the usual defenses and *really* protect your email from #spearphishing attacks. Find out how with @AlexanderGTster and @illena_a from @SCmagazine. http://www.workcast.com/register?cpak=2026696370909275&referrer=valimailA …
29. Cisco patches critical default password vulnerability
30. Security researcher fined for hacking hotel Wi-Fi and putting passwords on the internet
31. Users fret over Chrome auto-login change
32. Security Engineer Hacks Hotel WiFi, Fined for Exposing Admin Password
33. AdGuard adblocker resets passwords after credential-stuffing attack
34. 5 Notable Security Incidents that Recently Affected Federal Entities https://tripwire.me/2xGwKoH
35. Anti-Phishing Requires A Three-Pronged Strategy https://www.infosecurity-magazine.com/white-papers/antiphishing-requires-threepronged?utm_source=twitterfeed&utm_medium=twitter …
36. Microsoft: Here's why we're declaring end of password era
37. Microsoft 'kills' passwords, throws up threat manager, APIs Graph Security
38. Baddies just need one email account with clout to unleash phishing hell
39. Why Was Equifax So Stupid About Passwords?
40. NewsNow suffers security breach - passwords should be considered compromised
41. Cisco patches critical default password vulnerability
42. 5 Notable Security Incidents that Recently Affected Federal Entities https://tripwire.me/2xGwKoH

WEB DEFACEMENT

Nothing to report

MALWARE

43. The MITRE ATT&CK Framework: Exfiltration https://tripwire.me/2NDbSJV
44. Malware on SHEIN Servers Compromises Data of 6.4M Customers
45. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
46. New Adwind RAT Campaign Targets Windows, Linux and Mac Users
47. Cryptomining Malware Continues Rapid Growth: Report
48. Freelancers baited with job offers to download malicious macros
49. DanaBot trojan sets sights on Europe, new features
50. Crooks turn to Delphi packers to evade malware detection
51. Mac Mojave Zero-Day Allows Malicious Apps to Access Sensitive Info
52. Astaroth Trojan Resurges in South America
53. BrandPost: Malicious Tactics Have Evolved: Your DNS Needs to, Too
54. Bloodhound – A Tool For Exploring Active Directory Domain Security
55. #SecurityNews: #Cryptocurrency mining soars 459% from 2017 to 2018 with no indication of slowing down. Read more about this story here: https://bit.ly/2PXYSew
56. #SecurityNews: Scottish #Brewery recovers from #ransomware attack. #Arran Brewery in Scotland, received what they thought was a cover letter as part of a job application, but the email attachment contained malware. Read more here: https://bit.ly/2PYAR7k
57. Man gets two years in prison for sabotaging US Army servers with 'logic bomb'
58. Malware Analysis using Osquery Part 2
59. Off-the-shelf RATs Targeting Pakistan
60. Malware Analysis using Osquery Part 1
61. Malicious Documents from Lazarus Group Targeting South Korea
62. GZipDe: An Encrypted Downloader Serving Metasploit
63. Satan Ransomware Spawns New Methods to Spread
64. MassMiner Malware Targeting Web Servers
65. 14 years prison for man who helped hackers evade detection by anti-virus software
66. USB threats from malware to miners
67. DanaBot trojan sets sights on Europe, new features
68. Stealthy cryptomining apps still on Google Play
69. New Version of GandCrab Ransomware Appends 5 Character Extension To Encrypted Files
70. First known malicious cryptomining campaign targeting Kodi discovered
71. 14 years prison for man who helped hackers evade detection by anti-virus software
72. New malware-as-a-service, Black Rose Lucy targets Android devices
73. Domain registrar oversteps taking down Zoho domain, impacts over 30Mil users

EXPLOIT

74. New CVE-2018-8373 Exploit Spotted in the Wild

VULNERABILITY

75. Open-source reuse has left Android’s most-popular apps laced with critical vulnerabilities
76. Monero bug could have allowed hackers to steal massive amounts of cryptocurrency
77. New Linux 'Mutagen Astronomy' security flaw impacts Red Hat and CentOS distros
78. Third-Party Patch Available for Microsoft JET Database Zero-Day
79. Over 80 Cisco Products Affected by FragmentSmack DoS Bug
80. MacOS Mojave zero-day privacy vulnerability uncovered
81. Snyk gets $22 million for platform that tracks security flaws in open source projects
82. Cisco patches critical default password vulnerability
83. Twitter fixes API bug that shared data with wrong developers
84. Mac Mojave Zero-Day Allows Malicious Apps to Access Sensitive Info
85. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
86. No Takers for Zero-Day Vulnerabilities on the Dark Web
87. macOS Mojave Patches Vulnerabilities, But New Flaws Already Emerge
88. New CVE-2018-8373 Exploit Spotted in the Wild
89. More Details on an ActiveX Vulnerability Recently Used to Target Users in South Korea
90. Vulnerability Spotlight: Epee Levin Packet Deserialization Code Execution Vulnerability
91. Twitter fixes API bug that shared data with wrong developers
92. Cisco patches critical default password vulnerability
93. White hat hacker found a macOS Mojave privacy bypass 0-day flaw on release day
94. macOS zero-day vulnerability leads to user data leaks
95. Bitcoin Core Software Patches a Critical DDoS Attack Vulnerability
96. Vulnerability in macOS Mojave allows access to protected files
97. Firefox bugs can cause browsers and even the entire operating system to crash directly
98. Why the market for zero-day vulnerabilities on the dark web is vanishing

Region brief for 2018-09-25

ASIA

1. Snyk gets $22 million for platform that tracks security flaws in open source projects
2. Security Engineer Hacks Hotel WiFi, Fined for Exposing Admin Password
3. Off-the-shelf RATs Targeting Pakistan
4. Malicious Documents from Lazarus Group Targeting South Korea
5. GZipDe: An Encrypted Downloader Serving Metasploit
6. More Details on an ActiveX Vulnerability Recently Used to Target Users in South Korea
7. USB threats from malware to miners

OCEANIA

Nothing to report

NORTH AMERICA

8. Ex-NSA Hacker Sentenced to Jail Over Kaspersky Leak
9. Astaroth Trojan Resurges in South America
10. Man gets two years in prison for sabotaging US Army servers with 'logic bomb'
11. Malware Analysis using Osquery Part 1
12. MassMiner Malware Targeting Web Servers
13. 14 years prison for man who helped hackers evade detection by anti-virus software
14. SHEIN-Fashion Shopping Site Suffers Data Breach Affecting 6.5 Million Users
15. 14 years prison for man who helped hackers evade detection by anti-virus software

SOUTH AMERICA

Nothing to report

EUROPE

16. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
17. Snyk gets $22 million for platform that tracks security flaws in open source projects
18. Security In The Crypto World: Exchanges, Wallets, Personal Data. Kiev To Host The Largest Cybersecurity Forum In Eastern Europe
19. #SecurityNews: Scottish #Brewery recovers from #ransomware attack. #Arran Brewery in Scotland, received what they thought was a cover letter as part of a job application, but the email attachment contained malware. Read more here: https://bit.ly/2PYAR7k
20. Baddies just need one email account with clout to unleash phishing hell
21. 14 years prison for man who helped hackers evade detection by anti-virus software
22. New malware-as-a-service, Black Rose Lucy targets Android devices

AFRICA

23. BrandPost: Malicious Tactics Have Evolved: Your DNS Needs to, Too

Sector brief for 2018-09-25

HEALTHCARE

1. macOS zero-day vulnerability leads to user data leaks

TRANSPORT

Nothing to report

BANKING & FINANCE

2. Porous portals, Newegg is a broken egg, and Mirai’s creators have new hats
3. Symantec accountancy audit uncovers customer transaction recorded as revenue
4. Malware Analysis using Osquery Part 2
5. Malware Analysis using Osquery Part 1
6. Malicious Documents from Lazarus Group Targeting South Korea
7. MassMiner Malware Targeting Web Servers
8. DanaBot trojan sets sights on Europe, new features

INFORMATION & TELECOMMUNICATION

Nothing to report

FOOD

Nothing to report

WATER

Nothing to report

ENERGY

9. Off-the-shelf RATs Targeting Pakistan
10. USB threats from malware to miners
11. Stealthy cryptomining apps still on Google Play

GOVERNMENT & PUBLIC SERVICE

Nothing to report

Daily brief for 2018-09-25

ASIA

1. Snyk gets $22 million for platform that tracks security flaws in open source projects
2. Security Engineer Hacks Hotel WiFi, Fined for Exposing Admin Password
3. Off-the-shelf RATs Targeting Pakistan
4. Malicious Documents from Lazarus Group Targeting South Korea
5. GZipDe: An Encrypted Downloader Serving Metasploit
6. More Details on an ActiveX Vulnerability Recently Used to Target Users in South Korea
7. USB threats from malware to miners

WORLD

8. Ex-NSA Hacker Sentenced to Jail Over Kaspersky Leak
9. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
10. Snyk gets $22 million for platform that tracks security flaws in open source projects
11. Astaroth Trojan Resurges in South America
12. BrandPost: Malicious Tactics Have Evolved: Your DNS Needs to, Too
13. Security In The Crypto World: Exchanges, Wallets, Personal Data. Kiev To Host The Largest Cybersecurity Forum In Eastern Europe
14. #SecurityNews: Scottish #Brewery recovers from #ransomware attack. #Arran Brewery in Scotland, received what they thought was a cover letter as part of a job application, but the email attachment contained malware. Read more here: https://bit.ly/2PYAR7k
15. Man gets two years in prison for sabotaging US Army servers with 'logic bomb'
16. Baddies just need one email account with clout to unleash phishing hell
17. Malware Analysis using Osquery Part 1
18. MassMiner Malware Targeting Web Servers
19. 14 years prison for man who helped hackers evade detection by anti-virus software
20. SHEIN-Fashion Shopping Site Suffers Data Breach Affecting 6.5 Million Users
21. 14 years prison for man who helped hackers evade detection by anti-virus software
22. New malware-as-a-service, Black Rose Lucy targets Android devices

ATTACKS

23. Firefox Monitor provides password breach alerts, Would it convince you to set up a Firefox Account
24. Ex-NSA Hacker Sentenced to Jail Over Kaspersky Leak
25. Malware on SHEIN Servers Compromises Data of 6.4M Customers
26. GrrCon Augusta 2018, Rachel Giacobozzi’s ‘The Hybrid Analyst: How Phishing Created A New Type Of Intel Analyst’
27. Mozilla Launches Firefox Monitor Data Breach Notification Service
28. Tomorrow: Go beyond the usual defenses and *really* protect your email from #spearphishing attacks. Find out how with @AlexanderGTster and @illena_a from @SCmagazine. http://www.workcast.com/register?cpak=2026696370909275&referrer=valimailA …
29. Third-Party Patch Available for Microsoft JET Database Zero-Day
30. 130 Million Hotel Customers Breached Due to Exposed Database
31. State Department data breach exposes employee info (w/ commentary from @TripwireInc’s @craigtweets http://bit.ly/2MTcplE
32. DDoS Attack on Infinite Campus Limits Parent Access http://dlvr.it/QlL12Z
33. DDoS Attack on Infinite Campus Limits Parent Access https://www.infosecurity-magazine.com/news/ddos-attacks-infinite-campus?utm_source=twitterfeed&utm_medium=twitter …
34. New Adwind RAT Campaign Targets Windows, Linux and Mac Users
35. Cisco patches critical default password vulnerability
36. DDoS attack on education vendor hinders access to districts’ online portals
37. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
38. Shein Data Breach Exposes Personal Data and Email Address of 6.42 Million Customers
39. Security researcher fined for hacking hotel Wi-Fi and putting passwords on the internet
40. SHEIN Data breach affected 6.42 million users
41. Security In The Crypto World: Exchanges, Wallets, Personal Data. Kiev To Host The Largest Cybersecurity Forum In Eastern Europe
42. Users fret over Chrome auto-login change
43. Security Engineer Hacks Hotel WiFi, Fined for Exposing Admin Password
44. AdGuard adblocker resets passwords after credential-stuffing attack
45. Symantec accountancy audit uncovers customer transaction recorded as revenue
46. 5 Notable Security Incidents that Recently Affected Federal Entities https://tripwire.me/2xGwKoH
47. Anti-Phishing Requires A Three-Pronged Strategy https://www.infosecurity-magazine.com/white-papers/antiphishing-requires-threepronged?utm_source=twitterfeed&utm_medium=twitter …
48. Microsoft: Here's why we're declaring end of password era
49. Microsoft 'kills' passwords, throws up threat manager, APIs Graph Security
50. Baddies just need one email account with clout to unleash phishing hell
51. Some credential-stuffing botnets don't care about being noticed any more
52. Advanced DDoS Detection and Defense
53. Why Was Equifax So Stupid About Passwords?
54. ZombieBoy
55. NewsNow suffers security breach - passwords should be considered compromised
56. Cisco patches critical default password vulnerability
57. First known malicious cryptomining campaign targeting Kodi discovered
58. SHEIN-Fashion Shopping Site Suffers Data Breach Affecting 6.5 Million Users
59. macOS zero-day vulnerability leads to user data leaks
60. How Long Does it Take to Find Compromised Data
61. Bitcoin Core Software Patches a Critical DDoS Attack Vulnerability
62. 5 Notable Security Incidents that Recently Affected Federal Entities https://tripwire.me/2xGwKoH
63. DBeaver Community Edition 5.2.1 Releases: Free universal database tool and SQL client

THREATS

64. Open-source reuse has left Android’s most-popular apps laced with critical vulnerabilities
65. The MITRE ATT&CK Framework: Exfiltration https://tripwire.me/2NDbSJV
66. Monero bug could have allowed hackers to steal massive amounts of cryptocurrency
67. New Linux 'Mutagen Astronomy' security flaw impacts Red Hat and CentOS distros
68. Once Popular Online Ad Format Opens Top Tier Sites to XSS Attacks
69. Malware on SHEIN Servers Compromises Data of 6.4M Customers
70. Third-Party Patch Available for Microsoft JET Database Zero-Day
71. Over 80 Cisco Products Affected by FragmentSmack DoS Bug
72. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
73. MacOS Mojave zero-day privacy vulnerability uncovered
74. New Adwind RAT Campaign Targets Windows, Linux and Mac Users
75. Cryptomining Malware Continues Rapid Growth: Report
76. Freelancers baited with job offers to download malicious macros
77. Snyk gets $22 million for platform that tracks security flaws in open source projects
78. Cisco patches critical default password vulnerability
79. Twitter fixes API bug that shared data with wrong developers
80. DanaBot trojan sets sights on Europe, new features
81. Crooks turn to Delphi packers to evade malware detection
82. Mac Mojave Zero-Day Allows Malicious Apps to Access Sensitive Info
83. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
84. Astaroth Trojan Resurges in South America
85. BrandPost: Malicious Tactics Have Evolved: Your DNS Needs to, Too
86. Bloodhound – A Tool For Exploring Active Directory Domain Security
87. No Takers for Zero-Day Vulnerabilities on the Dark Web
88. macOS Mojave Patches Vulnerabilities, But New Flaws Already Emerge
89. #SecurityNews: #Cryptocurrency mining soars 459% from 2017 to 2018 with no indication of slowing down. Read more about this story here: https://bit.ly/2PXYSew
90. New CVE-2018-8373 Exploit Spotted in the Wild
91. #SecurityNews: Scottish #Brewery recovers from #ransomware attack. #Arran Brewery in Scotland, received what they thought was a cover letter as part of a job application, but the email attachment contained malware. Read more here: https://bit.ly/2PYAR7k
92. Man gets two years in prison for sabotaging US Army servers with 'logic bomb'
93. Malware Analysis using Osquery Part 2
94. Off-the-shelf RATs Targeting Pakistan
95. Malware Analysis using Osquery Part 1
96. Malicious Documents from Lazarus Group Targeting South Korea
97. GZipDe: An Encrypted Downloader Serving Metasploit
98. More Details on an ActiveX Vulnerability Recently Used to Target Users in South Korea
99. Satan Ransomware Spawns New Methods to Spread
100. MassMiner Malware Targeting Web Servers
101. Vulnerability Spotlight: Epee Levin Packet Deserialization Code Execution Vulnerability
102. 14 years prison for man who helped hackers evade detection by anti-virus software
103. USB threats from malware to miners
104. DanaBot trojan sets sights on Europe, new features
105. Twitter fixes API bug that shared data with wrong developers
106. Stealthy cryptomining apps still on Google Play
107. New Version of GandCrab Ransomware Appends 5 Character Extension To Encrypted Files
108. Cisco patches critical default password vulnerability
109. White hat hacker found a macOS Mojave privacy bypass 0-day flaw on release day
110. First known malicious cryptomining campaign targeting Kodi discovered
111. 14 years prison for man who helped hackers evade detection by anti-virus software
112. macOS zero-day vulnerability leads to user data leaks
113. New malware-as-a-service, Black Rose Lucy targets Android devices
114. Bitcoin Core Software Patches a Critical DDoS Attack Vulnerability
115. Vulnerability in macOS Mojave allows access to protected files
116. Firefox bugs can cause browsers and even the entire operating system to crash directly
117. Domain registrar oversteps taking down Zoho domain, impacts over 30Mil users
118. Why the market for zero-day vulnerabilities on the dark web is vanishing

CRIME

119. Ex-NSA Hacker Sentenced to Jail Over Kaspersky Leak
120. Porous portals, Newegg is a broken egg, and Mirai’s creators have new hats
121. Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison
122. Cryptomining Malware Continues Rapid Growth: Report
123. Bitcoin Core Team fixes a critical DDoS flaw in wallet software
124. SHEIN Data breach affected 6.42 million users
125. #SecurityNews: #Cryptocurrency mining soars 459% from 2017 to 2018 with no indication of slowing down. Read more about this story here: https://bit.ly/2PXYSew
126. Man gets two years in prison for sabotaging US Army servers with 'logic bomb'
127. Microsoft: Here's why we're declaring end of password era
128. Malware Analysis using Osquery Part 2
129. Malware Analysis using Osquery Part 1
130. ZombieBoy
131. Malicious Documents from Lazarus Group Targeting South Korea
132. MassMiner Malware Targeting Web Servers
133. 14 years prison for man who helped hackers evade detection by anti-virus software
134. DanaBot trojan sets sights on Europe, new features
135. Stealthy cryptomining apps still on Google Play
136. First known malicious cryptomining campaign targeting Kodi discovered
137. 14 years prison for man who helped hackers evade detection by anti-virus software
138. Bitcoin Core Software Patches a Critical DDoS Attack Vulnerability

POLITICS

139. Ex-NSA Hacker Sentenced to Jail Over Kaspersky Leak
140. Man gets two years in prison for sabotaging US Army servers with 'logic bomb'
141. Vulnerability in macOS Mojave allows access to protected files