Sector brief for 2018-10-17

HEALTHCARE

1. Who is to blame for the majority of data breaches?
2. Anthem pays out record $16m over data breach

TRANSPORT

Nil

BANKING & FINANCE

3. AISA 2018: Japan's journey from a cryptocurrency hack to better regulation
4. FBI Releases Document with Measures for Defending Against Payroll Phishing Scams
5. New research highlights Vietnamese group's custom hacking tools
6. How Blockchain Is Making it Easier for Fintech Companies to Scale Up
7. 35 million voter records from 19 US states for sale
8. Alphabet in the soup for keeping quiet about Google+ data leak bug
9. WTB: MuddyWater Expands Operations
10. A crippling ransomware attack hit a water utility in the aftermath of Hurricane Florence
11. Oracle releases Critical Patch Update Advisory – October 2018: fix 301 security bugs
12. Git RCE Vulnerability (CVE-2018-17456)Security Advisory

INFORMATION & TELECOMMUNICATION

13. Tumblr Patches Security Issue that Would Leak Emails, Hashed-Salted Passwords
14. Tumblr discloses vulnerability but says 'no evidence that this bug was abused'
15. How Office 365 learned to reel in phish
16. CVE-2018-3211: Java Usage Tracker Local Elevation of Privilege on Windows
17. A hacker who used fake advertisements placed on local newspaper websites to spread malware has been sentenced to 33 months
18. Tumblr Patches A Flaw That Could Have Exposed Users’ Account Info
19. "Attackers have expanded [phishing attacks] significantly into SMS and social media, and are displaying a preference for targeting personal email
20. Millions of US Voter Records for Sale
21. How does #FacexWorm #malware use @Facebook Messenger to spread? Learn more about this new malware with expert @lewisnic.
22. #GroupIB has estimated that cryptocurrency exchanges suffered a total loss of $882 mln due to targeted attacks in 2017 and
23. Russian Hackers Attack Specialist in Customer Review Tied to Innumerable Websites
24. A crippling ransomware attack hit a water utility in the aftermath of Hurricane Florence
25. Sony has solved the crash of PS4 receiving malicious message
26. Vulnerability in Apple VoiceOver allows hackers access to user photos
27. Google Chrome 70.0.3538.67 releases: fix multiple high-risk vulnerabilities

FOOD

Nil

WATER

Nil

ENERGY

28. 3 Years After Attacks on Ukraine Power Grid, BlackEnergy Successor Poses Growing Threat
29. Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid

GOVERNMENT & PUBLIC SERVICE

30. MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
31. 35 Million US Voter Registration Records Found for Sale on Dark Web
32. New research highlights Vietnamese group's custom hacking tools
33. Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid
34. SEO Poisoning Campaign Targeting U.S. Midterm Election Keywords
35. 35 million voter records from 19 US states for sale
36. WTB: MuddyWater Expands Operations
37. Millions of US Voter Records for Sale
38. 35 Million U.S Voter Records Selling in Popular Dark web Hacking Forum from $150 USD to $12,500 USD
39. Vulnerability in voting machines has not been corrected after 11 years

Daily brief for 2018-10-17

ASIA

1. AISA 2018: Japan's journey from a cryptocurrency hack to better regulation
2. New research highlights Vietnamese group's custom hacking tools
3. Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid
4. WhiteSource raises $35 million for open source flaw detection platform
5. Top 5 Publicly Accessible Hacking Tools You Can Download Today
6. WTB: MuddyWater Expands Operations
7. Git RCE Vulnerability (CVE-2018-17456)Security Advisory

WORLD

8. LuminosityLink RAT Author Sentenced to 30 Months in Prison
9. MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
10. 'GreyEnergy' Cyberspies Target Ukraine, Poland
11. 3 Years After Attacks on Ukraine Power Grid, BlackEnergy Successor Poses Growing Threat
12. Information of 396K Users Exposed in Facepunch Data Breach
13. 35 Million US Voter Registration Records Found for Sale on Dark Web
14. Podcast: A Utility Ransomware Attack, Post-Hurricane
15. How Office 365 learned to reel in phish
16. Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid
17. 35 million US voter records up for sale on the dark web
18. Who is to blame for the majority of data breaches?
19. Attackers identified in the pre-espionage stage of CNI attack
20. SEO Poisoning Campaign Targeting U.S. Midterm Election Keywords
21. 35 million voter records from 19 US states for sale
22. Insult to injury: Malware menace soaks water-logged utility ravaged by Hurricane Florence
23. WTB: MuddyWater Expands Operations
24. US Voter Records for Sale on Hacker Forum
25. GreyEnergy group targeting critical infrastructure with espionage
26. Brazil expert discovers Oracle flaw that allows massive DDoS attacks
27. Millions of US Voter Records for Sale
28. 35 Million U.S Voter Records Selling in Popular Dark web Hacking Forum from $150 USD to $12,500 USD
29. Russian Hackers Attack Specialist in Customer Review Tied to Innumerable Websites
30. A crippling ransomware attack hit a water utility in the aftermath of Hurricane Florence
31. Sony has solved the crash of PS4 receiving malicious message
32. Vulnerability in voting machines has not been corrected after 11 years

ATTACKS

33. Tumblr Patches Security Issue that Would Leak Emails, Hashed-Salted Passwords
34. MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
35. Redis 5.0 release, High-performance key-value database
36. Information of 396K Users Exposed in Facepunch Data Breach
37. 35 Million US Voter Registration Records Found for Sale on Dark Web
38. FBI Releases Document with Measures for Defending Against Payroll Phishing Scams
39. How Office 365 learned to reel in phish
40. Another Phishing Scam is Appearing in Small Business Inboxes
41. Phishers target book publishers in new campaign
42. Pentagon Disclosed Data Breach At Department Of Defense Affecting 30,000 Workers
43. Is this the simple solution to password re-use?
44. 35 million US voter records up for sale on the dark web
45. Who is to blame for the majority of data breaches?
46. Public Cloud Phishing
47. Learn how hackers used TLS certificates to launch @netflix #phishing attacks from expert Michael Cobb of @thehairyITdog
48. GreyEnergy: New malware campaign targets critical infrastructure companies
49. Tumblr Patches A Flaw That Could Have Exposed Users’ Account Info
50. Anthem pays out record $16m over data breach
51. SEO Poisoning Campaign Targeting U.S. Midterm Election Keywords
52. "Attackers have expanded [phishing attacks] significantly into SMS and social media, and are displaying a preference for targeting personal email
53. .@Google Firebase #DatabaseSecurity proved insufficient when bypassed by hackers to leak data. Learn more about this #SecurityFlaw from expert Michael
54. 35 million voter records from 19 US states for sale
55. Alphabet in the soup for keeping quiet about Google+ data leak bug
56. Anthem Mega-Breach: Record $16 Million HIPAA Settlement
57. US Voter Records for Sale on Hacker Forum
58. Millions of US Voter Records for Sale
59. 35 Million U.S Voter Records Selling in Popular Dark web Hacking Forum from $150 USD to $12,500 USD
60. Faculties and Staff of Chapman got Affected by the ‘Critical’ Phishing Attack
61. LibSSH Flaw Allows Hackers to Take Over Servers Without Password
62. Travel data for about 30,000 individuals was exposed in a Pentagon #DataBreach and experts expect that the information could be

THREATS

63. AISA 2018: Japan's journey from a cryptocurrency hack to better regulation
64. Cisco Patches Remotely Exploitable High Risk Security Bugs in Multiple Products
65. Libssh Vulnerability Exposes Servers to Attacks
66. Chrome 70 Updates Sign-In Options, Patches 23 Flaws
67. VoiceOver iOS 12 Bug Creates Lock Screen Bypass Exposing User Photos
68. LuminosityLink RAT Author Sentenced to 30 Months in Prison
69. MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
70. Tumblr discloses vulnerability but says 'no evidence that this bug was abused'
71. Oracle Fixes 301 Flaws in October Critical Patch Update
72. Podcast: A Utility Ransomware Attack, Post-Hurricane
73. Serious SSH bug lets crooks log in just by asking nicely
74. Oracle Patched Over 300 Vulnerabilities in Its Q3 2018 Critical Patch Update
75. LibSSH Flaw Leaves Thousands Of Servers At Risk Of Hijacking
76. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
77. CVE-2018-10933: Libssh Server Side Authentication Bypass Vulnerability Alert
78. Thousands of servers easy to hack due to a LibSSH Flaw
79. Take a Bite out of the Vulnerability Remediation Backlog with InsightVM
80. How Blockchain Is Making it Easier for Fintech Companies to Scale Up
81. WhiteSource raises $35 million for open source flaw detection platform
82. CVE-2018-3211: Java Usage Tracker Local Elevation of Privilege on Windows
83. Oracle CPU October 2018: 301 vulnerabilities patched
84. A hacker who used fake advertisements placed on local newspaper websites to spread malware has been sentenced to 33 months
85. Thousands Of Servers Vulnerable To Hacking Due To libssh Flaw
86. Im Interview erläutert Georgeta Toth, Regional Director bei dem Security-Spezialisten #Proofpoint, den Einfluss der Crypto-Mining-#Malware auf Endgeräte in Unternehmen.
87. GreyEnergy: New malware campaign targets critical infrastructure companies
88. Critical Vulnerabilities Allow Takeover of D-Link Routers
89. Tumblr Patches A Flaw That Could Have Exposed Users’ Account Info
90. Remote Code Implantation Flaw Found in Medtronic Cardiac Programmers
91. Insult to injury: Malware menace soaks water-logged utility ravaged by Hurricane Florence
92. Alphabet in the soup for keeping quiet about Google+ data leak bug
93. Hacker: I'm logged in. New LibSSH Vulnerability: OK! I believe you.
94. Brazil expert discovers Oracle flaw that allows massive DDoS attacks
95. Endpoint security solutions challenged by zero-day and fileless attacks
96. VMware addressed Code Execution Flaw in its ESXi, Workstation, and Fusion products
97. Flaws in Branch.io Affected Over 685 Million Users
98. How does #FacexWorm #malware use @Facebook Messenger to spread? Learn more about this new malware with expert @lewisnic.
99. Ransomware attack hits North Carolina water utility following hurricane
100. Android Apps claim to mine unminable cryptocurrency, just show ads
101. #GroupIB has estimated that cryptocurrency exchanges suffered a total loss of $882 mln due to targeted attacks in 2017 and
102. New GreyEnergy Malware Targets ICS, Tied with BlackEnergy and TeleBots
103. Security flaw in libssh leaves thousands of servers at risk of hijacking
104. How does #MassMiner #malware infect systems across the web?
105. A crippling ransomware attack hit a water utility in the aftermath of Hurricane Florence
106. Oracle patches 301 vulnerabilities, including 46 with a 9.8+ severity rating
107. VMware Patches Code Execution Flaw in Virtual Graphics Card
108. Avast scores high in malware protection | Avast
109. CVE-2018-3245: Weblogic Remote Code Execution Vulnerability Alert
110. Oracle releases Critical Patch Update Advisory – October 2018: fix 301 security bugs
111. Git RCE Vulnerability (CVE-2018-17456)Security Advisory
112. Sony has solved the crash of PS4 receiving malicious message
113. LibSSH Flaw Allows Hackers to Take Over Servers Without Password
114. Abandoned Tweet Counter Hijacked With Malicious Script
115. 21-year-old Hacker Sentenced to 30 Months Prison for Creating Popular Hacking Tool LumunosityLink RAT
116. Vulnerability in voting machines has not been corrected after 11 years
117. Vulnerability in Apple VoiceOver allows hackers access to user photos
118. Google Chrome 70.0.3538.67 releases: fix multiple high-risk vulnerabilities
119. The attackers learn that due to the complexity and fluctuations of the pulping process, any changes could take up to
120. The Qihoo @360CoreSec team found a @Microsoft vulnerability -- named Double Kill -- that affects applications through #MicrosoftOffice documents. Learn

CRIME

121. LuminosityLink RAT Author Sentenced to 30 Months in Prison
122. Information of 396K Users Exposed in Facepunch Data Breach
123. FBI Releases Document with Measures for Defending Against Payroll Phishing Scams
124. Another Phishing Scam is Appearing in Small Business Inboxes
125. Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid
126. Who is to blame for the majority of data breaches?
127. How Blockchain Is Making it Easier for Fintech Companies to Scale Up
128. A hacker who used fake advertisements placed on local newspaper websites to spread malware has been sentenced to 33 months
129. SEO Poisoning Campaign Targeting U.S. Midterm Election Keywords
130. WTB: MuddyWater Expands Operations
131. Millions of US Voter Records for Sale
132. Abandoned Tweet Counter Hijacked With Malicious Script
133. 21-year-old Hacker Sentenced to 30 Months Prison for Creating Popular Hacking Tool LumunosityLink RAT
134. Vulnerability in Apple VoiceOver allows hackers access to user photos

POLITICS

135. Cisco Patches Remotely Exploitable High Risk Security Bugs in Multiple Products
136. MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
137. 'GreyEnergy' Cyberspies Target Ukraine, Poland
138. New research highlights Vietnamese group's custom hacking tools
139. Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid
140. GreyEnergy: New malware campaign targets critical infrastructure companies
141. Attackers identified in the pre-espionage stage of CNI attack
142. SEO Poisoning Campaign Targeting U.S. Midterm Election Keywords
143. GreyEnergy group targeting critical infrastructure with espionage
144. A crippling ransomware attack hit a water utility in the aftermath of Hurricane Florence
145. Vulnerability in voting machines has not been corrected after 11 years

APT report for 2018-10-16

TRANSNATIONAL / UNKNOWN

1. CVE-2018-8453 Zero-Day Flaw Exploited by FruityArmor APT

CHINA

Nil

INDIA

Nil

NORTH KOREA

2. New ShadowTalk Episode 45 This week, CISO @rickhholland, @drshellface, & Simon Hall join Rafael Amado to cover the

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

3. Russia-linked APT group DustSquad targets diplomatic entities in Central Asia
4. NotPetya linked to the Industroyer attack against energy infrastructure in Ukraine

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-16

WINDOWS

1. Russia-linked APT group DustSquad targets diplomatic entities in Central Asia
2. CVE-2018-8453 Zero-Day Flaw Exploited by FruityArmor APT
3. NotPetya linked to the Industroyer attack against energy infrastructure in Ukraine
4. Leveraging Falcon Sandbox to Detect and Analyze Malicious PDFs Containing Zero-Day Exploits

LINUX

5. 7 Useful Android Vulnerability Scanners

UNIX

Nil

ANDROID

6. Chrome 70 arrives with fingerprint login for websites, extension controls, and 23 security fixes
7. Russia-linked APT group DustSquad targets diplomatic entities in Central Asia
8. 7 Useful Android Vulnerability Scanners
9. .@Trustlook Labs discovered an #Android #Trojan stealing data from messaging apps. Learn what #mobilesecurity programs should look for to detect

IOS

10. Bug in New iOS Lets Attacker Access iPhone Pics
11. Report: near-400% increase in crypto-mining malware attacks against iPhones
12. Cryptomining attacks against Apple devices increase sharply
13. Cryptojacking attacks against iPhone devices increase
14. New iPhone Bug Gives Anyone Access to Your Private Photos

MACOS

15. Chrome 70 arrives with fingerprint login for websites, extension controls, and 23 security fixes

Threat report for 2018-10-16

DATA BREACH & DATA LOSS

1. Insurer Anthem Will Pay Record $16M for Massive Data Breach
2. Pentagon data breach exposed travel data for 30,000 individuals
3. A Russian cyber vigilante is patching outdated MikroTik routers exposed online
4. A Pentagon #DataBreach exposed data on at least 30,000 individuals, but other details about the incident are still scarce. By
5. Personal Records Of 30,000 US Department Of Defense Workers Swiped By Miscreants
6. Anthem Agrees To Pay $16 Million In Data Breach Privacy Settlement
7. The Donald Daters Trump Dating App Exposed Its Users Data
8. 2018 US voter records offered for sale on hacking forum
9. #TLBleed exploits abuse Intel's HTT chip feature to leak data. Find out how hackers could launch side-channel attacks to obtain
10. 35 million US voter records available for sale in a hacking forum
11. Anthem agrees to pay $16 million in data breach privacy settlement
12. Dating App for Trump Supporters Exposed Members’ Information
13. After originally disclosing its latest data breach last month, Facebook revealed that hackers obtained data from some 30 million users. Here’s
14. Dating app for Trump loners commits YUGE blunder: It leaks more than the West Wing
15. Penta-gone! Personal records of 30,000 US Dept of Defense workers swiped by miscreants
16. Estimated 35 Million Voter Records For Sale on Popular Hacking Forum
17. Pentagon Travel Provider Data Breach Counts 30,000 Victims
18. UK’s MoD Exposed in 37 Security Breaches: Report
19. 35 million voter records from 19 states for sale on hacking forum
20. Pentagon data breach puts personal details of 30,000 staff at risk
21. Facebook says fewer users affected by data breach
22. Pentagon data breach puts personal details of 30,000 staff at risk
23. Data breach in Pentagon’s service provider affected 30k people

DENIAL-OF-SERVICE

24. Importance of DNS in Protecting Your Business from DDoS Attacks

MALVERTISING

Nil

PHISHING

25. Chrome 70 arrives with fingerprint login for websites, extension controls, and 23 security fixes
26. Chrome 70 released with revamped Google account login system
27. Phishing Site Impersonates Financial Services Institution: https://www.digitalshadows.com/blog-and-research/phishing-site-impersonates-financial-services-institution/ … (via @mazzazone)
28. Recent @Proofpoint research shows that #German-speaking regions are facing targeted #phishing, #malware, and #BEC attacks.
29. Phishing and Facebook – a test of reputation

WEB DEFACEMENT

Nil

BOTNET

Nil

RANSOMWARE

30. In County Crippled by Hurricane, Water Utility Targeted in Ransomware Attack
31. Madison County computer system infected with ransomware
32. NC Water Utility Fights Post-Hurricane Ransomware
33. A “critical water utility” in a county crippled by Hurricane #Florence was hit by a #ransomware attack. The #cyberattack has
34. APT group called #TeleBots linked to #Industroyer #malware and #NotPetya #ransomware, according to @ESET researchers. By @MaddieBacon11

CRYPTOMINING & CRYPTOCURRENCIES

35. SAP Boosts Blockchain Integration and Customer Flexibility
36. How to Create Blockchain Applications
37. Report: near-400% increase in crypto-mining malware attacks against iPhones
38. Line lists cryptocurrency on Bitbox exchange
39. You are who you say you are: Establishing digital trust with the blockchain
40. Cryptomining attacks against Apple devices increase sharply
41. Cryptojacking attacks against iPhone devices increase

MALWARE

42. Author of LuminosityLink Remote Access Trojan Gets 30 Months Sentence
43. .@Trustlook Labs discovered an #Android #Trojan stealing data from messaging apps. Learn what #mobilesecurity programs should look for to detect
44. Malicious RTF Documents Deliver Information Stealers
45. Recent @Proofpoint research shows that #German-speaking regions are facing targeted #phishing, #malware, and #BEC attacks.
46. #Stegware: it's #Malware that uses #steganography techniques to avoid detection
47. Report: near-400% increase in crypto-mining malware attacks against iPhones
48. Octopus malware wraps tentacles around former Telegram users in Central Asia
49. Mikko didn't put Brain -- the first PC virus -- on his list but he did track down its authors
50. Now Surfing about your Favourite Celebrities can make you Vulnerable to Virus Attack
51. Malware Attack Popular Amongst the Hackers, Even though it Dips in Q2 in 2018
52. APT group called #TeleBots linked to #Industroyer #malware and #NotPetya #ransomware, according to @ESET researchers. By @MaddieBacon11
53. Cybercriminals Advertising Godzilla Loader Malware On Dark Web Forums
54. Most Important Considerations with Malware Analysis Cheats And Tools list
55. Leveraging Falcon Sandbox to Detect and Analyze Malicious PDFs Containing Zero-Day Exploits

EXPLOIT

56. Sony Fixed PlayStation 4 Message Exploit Leasing to a DoS Condition
57. Hackers tamper with exploit chain to drop Agent Tesla, circumvent antivirus solutions
58. Numerous PlayStation 4 users reported that a PlayStation Network message exploit is crashing their consoles, requiring a factory reset in

VULNERABILITY

59. [SingCERT] Alert on Multiple Vulnerabilities in PHP
60. Multiple Vulnerabilities Allow Attackers to Take Full Control of Linksys Routers
61. 7 Useful Android Vulnerability Scanners
62. Vulnerability Spotlight: Linksys ESeries Multiple OS Command Injection Vulnerabilities
63. Bug in New iOS Lets Attacker Access iPhone Pics
64. Info of 685 Million Users at Risk Because of Multiple Branch.io XSS Flaws
65. CVE-2018-8453 Zero-Day Flaw Exploited by FruityArmor APT
66. Learn about the #NetSpectre vulnerability and the benefits of #ThreatModeling for cloud deployments from expert Ed Moyle of @securitycurve.
67. Tinder profiles were 'at risk' due to XSS vulnerability
68. 685 million users may be affected by the Branch.io service XSS vulnerability
69. Vulnerability Spotlight: Linksys ESeries Multiple OS Command Injection Vulnerabilities
70. Hackers can use known security vulnerabilities with new technology to bypass Antivirus Software
71. RiskSense cloud service protects against cyber threats and vulnerabilities ahead of midterm elections
72. #Shodan, a device search engine, can help identify #ICS security vulnerabilities. Learn more about how Shodan works and how it
73. "It is no secret that the #RemoteDesktop Protocol has long been a source of exploitable vulnerabilities, and it is well
74. 685 million users may be affected by the Branch.io service XSS vulnerability
75. Juniper Networks launches multiple solutions for Junos OS vulnerabilities
76. New iPhone Bug Gives Anyone Access to Your Private Photos
77. Leveraging Falcon Sandbox to Detect and Analyze Malicious PDFs Containing Zero-Day Exploits

Region brief for 2018-10-16

ASIA

1. Russia-linked APT group DustSquad targets diplomatic entities in Central Asia
2. New ShadowTalk Episode 45 This week, CISO @rickhholland, @drshellface, & Simon Hall join Rafael Amado to cover the
3. Hackers can use known security vulnerabilities with new technology to bypass Antivirus Software
4. Line lists cryptocurrency on Bitbox exchange

OCEANIA

Nil

NORTH AMERICA

5. Author of LuminosityLink Remote Access Trojan Gets 30 Months Sentence
6. Insurer Anthem Will Pay Record $16M for Massive Data Breach
7. New ShadowTalk Episode 45 This week, CISO @rickhholland, @drshellface, & Simon Hall join Rafael Amado to cover the
8. Madison County computer system infected with ransomware
9. Personal Records Of 30,000 US Department Of Defense Workers Swiped By Miscreants
10. 2018 US voter records offered for sale on hacking forum
11. 35 million US voter records available for sale in a hacking forum
12. Anthem agrees to pay $16 million in data breach privacy settlement
13. Dating App for Trump Supporters Exposed Members’ Information
14. Dating app for Trump loners commits YUGE blunder: It leaks more than the West Wing
15. Penta-gone! Personal records of 30,000 US Dept of Defense workers swiped by miscreants
16. Estimated 35 Million Voter Records For Sale on Popular Hacking Forum
17. Pentagon Travel Provider Data Breach Counts 30,000 Victims
18. UK’s MoD Exposed in 37 Security Breaches: Report
19. Report: near-400% increase in crypto-mining malware attacks against iPhones
20. 35 million voter records from 19 states for sale on hacking forum
21. Pentagon data breach puts personal details of 30,000 staff at risk
22. Data breach in Pentagon’s service provider affected 30k people

SOUTH AMERICA

23. A Russian cyber vigilante is patching outdated MikroTik routers exposed online

EUROPE

24. Russia-linked APT group DustSquad targets diplomatic entities in Central Asia
25. A Russian cyber vigilante is patching outdated MikroTik routers exposed online
26. Bug in New iOS Lets Attacker Access iPhone Pics
27. Sony Fixed PlayStation 4 Message Exploit Leasing to a DoS Condition
28. 2018 US voter records offered for sale on hacking forum
29. Recent @Proofpoint research shows that #German-speaking regions are facing targeted #phishing, #malware, and #BEC attacks.
30. 35 million US voter records available for sale in a hacking forum
31. Estimated 35 Million Voter Records For Sale on Popular Hacking Forum
32. UK’s MoD Exposed in 37 Security Breaches: Report
33. Hackers can use known security vulnerabilities with new technology to bypass Antivirus Software
34. Octopus malware wraps tentacles around former Telegram users in Central Asia
35. Phishing and Facebook – a test of reputation
36. NotPetya linked to the Industroyer attack against energy infrastructure in Ukraine
37. New iPhone Bug Gives Anyone Access to Your Private Photos

AFRICA

Nil

Sector brief for 2018-10-16

HEALTHCARE

Nil

TRANSPORT

Nil

BANKING & FINANCE

1. New ShadowTalk Episode 45 This week, CISO @rickhholland, @drshellface, & Simon Hall join Rafael Amado to cover the
2. Phishing Site Impersonates Financial Services Institution: https://www.digitalshadows.com/blog-and-research/phishing-site-impersonates-financial-services-institution/ … (via @mazzazone)
3. 35 million US voter records available for sale in a hacking forum
4. Estimated 35 Million Voter Records For Sale on Popular Hacking Forum
5. UK’s MoD Exposed in 37 Security Breaches: Report
6. Hackers can use known security vulnerabilities with new technology to bypass Antivirus Software
7. Pentagon data breach puts personal details of 30,000 staff at risk
8. Pentagon data breach puts personal details of 30,000 staff at risk
9. Data breach in Pentagon’s service provider affected 30k people
10. NotPetya linked to the Industroyer attack against energy infrastructure in Ukraine

INFORMATION & TELECOMMUNICATION

11. Multiple Vulnerabilities Allow Attackers to Take Full Control of Linksys Routers
12. 7 Useful Android Vulnerability Scanners
13. Bug in New iOS Lets Attacker Access iPhone Pics
14. Sony Fixed PlayStation 4 Message Exploit Leasing to a DoS Condition
15. Phishing Site Impersonates Financial Services Institution: https://www.digitalshadows.com/blog-and-research/phishing-site-impersonates-financial-services-institution/ … (via @mazzazone)
16. Recent @Proofpoint research shows that #German-speaking regions are facing targeted #phishing, #malware, and #BEC attacks.
17. After originally disclosing its latest data breach last month, Facebook revealed that hackers obtained data from some 30 million users. Here’s
18. Vulnerability Spotlight: Linksys ESeries Multiple OS Command Injection Vulnerabilities
19. Numerous PlayStation 4 users reported that a PlayStation Network message exploit is crashing their consoles, requiring a factory reset in
20. Facebook says fewer users affected by data breach
21. Phishing and Facebook – a test of reputation
22. Mikko didn't put Brain -- the first PC virus -- on his list but he did track down its authors
23. Line lists cryptocurrency on Bitbox exchange

FOOD

Nil

WATER

Nil

ENERGY

24. NotPetya linked to the Industroyer attack against energy infrastructure in Ukraine

GOVERNMENT & PUBLIC SERVICE

25. Russia-linked APT group DustSquad targets diplomatic entities in Central Asia
26. Insurer Anthem Will Pay Record $16M for Massive Data Breach
27. 2018 US voter records offered for sale on hacking forum
28. 35 million US voter records available for sale in a hacking forum
29. Anthem agrees to pay $16 million in data breach privacy settlement
30. Estimated 35 Million Voter Records For Sale on Popular Hacking Forum
31. UK’s MoD Exposed in 37 Security Breaches: Report
32. RiskSense cloud service protects against cyber threats and vulnerabilities ahead of midterm elections
33. 35 million voter records from 19 states for sale on hacking forum
34. Pentagon data breach puts personal details of 30,000 staff at risk
35. Pentagon data breach puts personal details of 30,000 staff at risk
36. Data breach in Pentagon’s service provider affected 30k people
37. NotPetya linked to the Industroyer attack against energy infrastructure in Ukraine

Daily brief for 2018-10-16

ASIA

1. Russia-linked APT group DustSquad targets diplomatic entities in Central Asia
2. New ShadowTalk Episode 45 This week, CISO @rickhholland, @drshellface, & Simon Hall join Rafael Amado to cover the
3. Hackers can use known security vulnerabilities with new technology to bypass Antivirus Software
4. Line lists cryptocurrency on Bitbox exchange

WORLD

5. Russia-linked APT group DustSquad targets diplomatic entities in Central Asia
6. Author of LuminosityLink Remote Access Trojan Gets 30 Months Sentence
7. Insurer Anthem Will Pay Record $16M for Massive Data Breach
8. A Russian cyber vigilante is patching outdated MikroTik routers exposed online
9. Bug in New iOS Lets Attacker Access iPhone Pics
10. Sony Fixed PlayStation 4 Message Exploit Leasing to a DoS Condition
11. New ShadowTalk Episode 45 This week, CISO @rickhholland, @drshellface, & Simon Hall join Rafael Amado to cover the
12. Madison County computer system infected with ransomware
13. Personal Records Of 30,000 US Department Of Defense Workers Swiped By Miscreants
14. 2018 US voter records offered for sale on hacking forum
15. Recent @Proofpoint research shows that #German-speaking regions are facing targeted #phishing, #malware, and #BEC attacks.
16. 35 million US voter records available for sale in a hacking forum
17. Anthem agrees to pay $16 million in data breach privacy settlement
18. Dating App for Trump Supporters Exposed Members’ Information
19. Dating app for Trump loners commits YUGE blunder: It leaks more than the West Wing
20. Penta-gone! Personal records of 30,000 US Dept of Defense workers swiped by miscreants
21. Estimated 35 Million Voter Records For Sale on Popular Hacking Forum
22. Pentagon Travel Provider Data Breach Counts 30,000 Victims
23. UK’s MoD Exposed in 37 Security Breaches: Report
24. Report: near-400% increase in crypto-mining malware attacks against iPhones
25. Hackers can use known security vulnerabilities with new technology to bypass Antivirus Software
26. 35 million voter records from 19 states for sale on hacking forum
27. Octopus malware wraps tentacles around former Telegram users in Central Asia
28. Phishing and Facebook – a test of reputation
29. Pentagon data breach puts personal details of 30,000 staff at risk
30. Data breach in Pentagon’s service provider affected 30k people
31. NotPetya linked to the Industroyer attack against energy infrastructure in Ukraine
32. New iPhone Bug Gives Anyone Access to Your Private Photos

ATTACKS

33. Chrome 70 arrives with fingerprint login for websites, extension controls, and 23 security fixes
34. Chrome 70 released with revamped Google account login system
35. Insurer Anthem Will Pay Record $16M for Massive Data Breach
36. Pentagon data breach exposed travel data for 30,000 individuals
37. A Russian cyber vigilante is patching outdated MikroTik routers exposed online
38. A Pentagon #DataBreach exposed data on at least 30,000 individuals, but other details about the incident are still scarce. By
39. Personal Records Of 30,000 US Department Of Defense Workers Swiped By Miscreants
40. Anthem Agrees To Pay $16 Million In Data Breach Privacy Settlement
41. The Donald Daters Trump Dating App Exposed Its Users Data
42. Phishing Site Impersonates Financial Services Institution: https://www.digitalshadows.com/blog-and-research/phishing-site-impersonates-financial-services-institution/ … (via @mazzazone)
43. 2018 US voter records offered for sale on hacking forum
44. Recent @Proofpoint research shows that #German-speaking regions are facing targeted #phishing, #malware, and #BEC attacks.
45. #TLBleed exploits abuse Intel's HTT chip feature to leak data. Find out how hackers could launch side-channel attacks to obtain
46. 35 million US voter records available for sale in a hacking forum
47. Anthem agrees to pay $16 million in data breach privacy settlement
48. Dating App for Trump Supporters Exposed Members’ Information
49. After originally disclosing its latest data breach last month, Facebook revealed that hackers obtained data from some 30 million users. Here’s
50. Dating app for Trump loners commits YUGE blunder: It leaks more than the West Wing
51. Penta-gone! Personal records of 30,000 US Dept of Defense workers swiped by miscreants
52. Estimated 35 Million Voter Records For Sale on Popular Hacking Forum
53. Pentagon Travel Provider Data Breach Counts 30,000 Victims
54. UK’s MoD Exposed in 37 Security Breaches: Report
55. 35 million voter records from 19 states for sale on hacking forum
56. Pentagon data breach puts personal details of 30,000 staff at risk
57. Facebook says fewer users affected by data breach
58. Phishing and Facebook – a test of reputation
59. Pentagon data breach puts personal details of 30,000 staff at risk
60. Data breach in Pentagon’s service provider affected 30k people

THREATS

61. SAP Boosts Blockchain Integration and Customer Flexibility
62. Author of LuminosityLink Remote Access Trojan Gets 30 Months Sentence
63. [SingCERT] Alert on Multiple Vulnerabilities in PHP
64. Multiple Vulnerabilities Allow Attackers to Take Full Control of Linksys Routers
65. In County Crippled by Hurricane, Water Utility Targeted in Ransomware Attack
66. 7 Useful Android Vulnerability Scanners
67. Vulnerability Spotlight: Linksys ESeries Multiple OS Command Injection Vulnerabilities
68. .@Trustlook Labs discovered an #Android #Trojan stealing data from messaging apps. Learn what #mobilesecurity programs should look for to detect
69. Bug in New iOS Lets Attacker Access iPhone Pics
70. Malicious RTF Documents Deliver Information Stealers
71. Info of 685 Million Users at Risk Because of Multiple Branch.io XSS Flaws
72. Madison County computer system infected with ransomware
73. CVE-2018-8453 Zero-Day Flaw Exploited by FruityArmor APT
74. How to Create Blockchain Applications
75. NC Water Utility Fights Post-Hurricane Ransomware
76. Learn about the #NetSpectre vulnerability and the benefits of #ThreatModeling for cloud deployments from expert Ed Moyle of @securitycurve.
77. Recent @Proofpoint research shows that #German-speaking regions are facing targeted #phishing, #malware, and #BEC attacks.
78. Tinder profiles were 'at risk' due to XSS vulnerability
79. 685 million users may be affected by the Branch.io service XSS vulnerability
80. A “critical water utility” in a county crippled by Hurricane #Florence was hit by a #ransomware attack. The #cyberattack has
81. #Stegware: it's #Malware that uses #steganography techniques to avoid detection
82. Vulnerability Spotlight: Linksys ESeries Multiple OS Command Injection Vulnerabilities
83. Report: near-400% increase in crypto-mining malware attacks against iPhones
84. Hackers can use known security vulnerabilities with new technology to bypass Antivirus Software
85. RiskSense cloud service protects against cyber threats and vulnerabilities ahead of midterm elections
86. #Shodan, a device search engine, can help identify #ICS security vulnerabilities. Learn more about how Shodan works and how it
87. Octopus malware wraps tentacles around former Telegram users in Central Asia
88. Mikko didn't put Brain -- the first PC virus -- on his list but he did track down its authors
89. Line lists cryptocurrency on Bitbox exchange
90. "It is no secret that the #RemoteDesktop Protocol has long been a source of exploitable vulnerabilities, and it is well
91. You are who you say you are: Establishing digital trust with the blockchain
92. Now Surfing about your Favourite Celebrities can make you Vulnerable to Virus Attack
93. Malware Attack Popular Amongst the Hackers, Even though it Dips in Q2 in 2018
94. Cryptomining attacks against Apple devices increase sharply
95. APT group called #TeleBots linked to #Industroyer #malware and #NotPetya #ransomware, according to @ESET researchers. By @MaddieBacon11
96. Cybercriminals Advertising Godzilla Loader Malware On Dark Web Forums
97. 685 million users may be affected by the Branch.io service XSS vulnerability
98. Cryptojacking attacks against iPhone devices increase
99. Juniper Networks launches multiple solutions for Junos OS vulnerabilities
100. Most Important Considerations with Malware Analysis Cheats And Tools list
101. New iPhone Bug Gives Anyone Access to Your Private Photos
102. Leveraging Falcon Sandbox to Detect and Analyze Malicious PDFs Containing Zero-Day Exploits

CRIME

103. Author of LuminosityLink Remote Access Trojan Gets 30 Months Sentence
104. A Russian cyber vigilante is patching outdated MikroTik routers exposed online
105. How to Create Blockchain Applications
106. Recent @Proofpoint research shows that #German-speaking regions are facing targeted #phishing, #malware, and #BEC attacks.
107. 35 million US voter records available for sale in a hacking forum
108. Dating app for Trump loners commits YUGE blunder: It leaks more than the West Wing
109. Estimated 35 Million Voter Records For Sale on Popular Hacking Forum
110. UK’s MoD Exposed in 37 Security Breaches: Report
111. Report: near-400% increase in crypto-mining malware attacks against iPhones
112. Facebook says fewer users affected by data breach
113. Pentagon data breach puts personal details of 30,000 staff at risk

POLITICS

114. Russia-linked APT group DustSquad targets diplomatic entities in Central Asia
115. A Russian cyber vigilante is patching outdated MikroTik routers exposed online
116. Estimated 35 Million Voter Records For Sale on Popular Hacking Forum
117. UK’s MoD Exposed in 37 Security Breaches: Report
118. RiskSense cloud service protects against cyber threats and vulnerabilities ahead of midterm elections
119. Octopus malware wraps tentacles around former Telegram users in Central Asia
120. "It is no secret that the #RemoteDesktop Protocol has long been a source of exploitable vulnerabilities, and it is well