Threat report for 2018-10-22

DATA BREACH & DATA LOSS

1. CMS portal breach exposes 75,000 individuals' records
2. New Ethics Guidance for Lawyers from the American Bar Association (ABA) Regarding Data Breach and Cyber-attack
3. According to the report, researchers detected 33,568 email addresses of finance departments that had been exposed by third parties. Can
4. #NetSpectre leaks data remotely via side-channel attacks. Learn from expert Michael Cobb of @thehairyITdog why data from #microprocessors is not
5. Criminals Hijacked Records of 75 000 Users from
6. A #ZeroDay in #jQuery File Upload could affect thousands of projects because the jQuery #plugin vulnerability has existed for eight
7. Enigmatic cyber espionage campaign revives source code from old foe APT1
8. 75,000 HealthCare.gov Users Exposed, Personal Information Stolen
9. US Indicts Another Russian for Role in Info Warfare Campaign
10. What are DMARC records and can they improve email security?
11. Anthem in Record $16m HIPAA Settlement
12. The Hunt - Our new data breach detection video looks like a Mission Impossible trailer. However, the threats are for
13. #NetSpectre exploits speculative execution to leak data remotely via side-channel attacks. Learn how this #SecurityVulnerability affects the #cloud from expert
14. The most interesting Internet-connected vehicle hacks on record
15. Web Hosting Software VestaCP Server Compromised With DDoS Malware
16. Find out how #TLBleed abuses @Intel's HTT chip feature to leak data via TLB
17. Are you aware of #Canada's data breach regulations? Get up to speed on the #blog:

DENIAL-OF-SERVICE

18. NSA Hacking Tools Used Against Nuke, Aerospace Worlds
19. Web Hosting Software VestaCP Server Compromised With DDoS Malware

MALVERTISING

Nil

PHISHING

20. Phishing Scheme Leverages Azure Blob Storage and Hurricane Michael
21. Strict password policy could prevent credential reuse, paper suggests
22. Natural Disaster Related Phishing Scam Abusing Microsoft Azure to Steal login Credentials & Credit Card Numbers

WEB DEFACEMENT

23. Saudi Future Investment Initiative website defaced by the hackers
24. Hackers Deface Website of Saudi Investment Forum

BOTNET

25. The Russian built #VPNFilter #botnet was taken down by the @FBI after over 500,000 routers were infected. However, VPNFilter is

RANSOMWARE

26. Gamma ransomware compromises data on 16,000 patients at California hernia institute
27. Ransomware: A cheat sheet for professionals
28. The latest variant of Satan ransomware is spreading in the wild

CRYPTOMINING & CRYPTOCURRENCIES

29. Blockchain Security and Privacy
30. Rambus Vaultify Trade: Secure transaction and storage of crypto assets on blockchain
31. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
32. iCloud Hacker Wants $175,000 Ransom to Be Paid In Bitcoin (BTC)
33. Trade.io loses $7.5Mil worth of cryptocurrency in mysterious cold wallet hack
34. Introducing Infura: Connecting DApps With Ethereum Without Setting up Ethereum Nodes
35. Business-minded hackers are testing blockchain technologies to secure their illegal operations. Here's what enterprises can learn from them:
36. India’s First Cryptocurrency ATM To Buy and Sell Cryptocurrencies

MALWARE

37. How a Canadian permanent resident and Saudi Arabian dissident was targeted with powerful spyware on Canadian soil
38. US Tops Global Malware C2 Distribution
39. Signal Upgrade Process Leaves Unencrypted Messages on Disk
40. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
41. The boom of fileless malware attacks: How can we fight it?
42. Octopus Malware
43. Maker of LuminosityLink RAT gets 30 months in the clink
44. Web Hosting Software VestaCP Server Compromised With DDoS Malware
45. Adding the EICAR string to your name as part of the visitor self-registration process is a bit of a faux

EXPLOIT

46. Apple Voiceover Exploit Allows Attackers Access to Ios Devices

VULNERABILITY

47. Cisco, F5 Networks Investigate libssh Vulnerability Impact
48. How to detect hardware-based server bugs
49. Flaw in Media Library Impacts VLC, Other Software
50. Libssh CVE-2018-10933 Scanners & Exploits Released - Apply Updates Now
51. Recent Branch.io Patch Creates New XSS Flaw
52. Critical Bug Impacts Live555 Media Streaming Libraries
53. A newly disclosed #libSSH vulnerability could allow an attacker #AdminAccess to a server with little effort. By @MT_Heller
54. Zero-day jQuery plugin vulnerability exploited for 3 years
55. CVE-2018-4013: LIVE555 streaming media RTSP Server Remote Code Execution Vulnerability
56. Popular website plugin harboured a serious 0-day for years
57. A #ZeroDay in #jQuery File Upload could affect thousands of projects because the jQuery #plugin vulnerability has existed for eight
58. It's OK, I'm verified - Libssh flaw allows attackers to bypass server authentication
59. Repairnator bot finds software bugs, successfully submits patches
60. Drupal Patched Critical RCE Vulnerabilities In Drupal 7 and 8
61. FreeRTOS flaws expose millions of IoT devices to cyber attacks
62. The .@iDefense Vulnerability Contributor Program (VCP) bug-bounty initiative continues to attract top contributors. Join them by submitting your 0-day for
63. Critical vulnerabilities on FreeRTOS expose many systems to attacks
64. WebLogic Remote Code Execution Vulnerability(CVE-2018-3245) Threat Alert
65. MPlayer and VLC media player affected by critical flaw CVE-2018-4013
66. Remote Code Execution Flaws Found in FreeRTOS - Popular OS for Embedded Systems
67. Why does Windows 10 have many bugs?

Region brief for 2018-10-22

ASIA

1. Saudi Future Investment Initiative website defaced by the hackers
2. Hackers Deface Website of Saudi Investment Forum
3. How a Canadian permanent resident and Saudi Arabian dissident was targeted with powerful spyware on Canadian soil
4. Rambus Vaultify Trade: Secure transaction and storage of crypto assets on blockchain
5. A week in security (October 15 – 21)
6. Oceansalt Attacks Infrastructure, Finance, Universities and Telecommunications
7. Enigmatic cyber espionage campaign revives source code from old foe APT1
8. WebLogic Remote Code Execution Vulnerability(CVE-2018-3245) Threat Alert
9. India’s First Cryptocurrency ATM To Buy and Sell Cryptocurrencies

OCEANIA

Nil

NORTH AMERICA

10. How a Canadian permanent resident and Saudi Arabian dissident was targeted with powerful spyware on Canadian soil
11. US Tops Global Malware C2 Distribution
12. A week in security (October 15 – 21)
13. Oceansalt Attacks Infrastructure, Finance, Universities and Telecommunications
14. Safeguarding the Nation’s Critical Infrastructure
15. New Ethics Guidance for Lawyers from the American Bar Association (ABA) Regarding Data Breach and Cyber-attack
16. The boom of fileless malware attacks: How can we fight it?
17. Criminals Hijacked Records of 75 000 Users from
18. Enigmatic cyber espionage campaign revives source code from old foe APT1
19. 75,000 HealthCare.gov Users Exposed, Personal Information Stolen
20. US Indicts Another Russian for Role in Info Warfare Campaign
21. Anthem in Record $16m HIPAA Settlement
22. Are you aware of #Canada's data breach regulations? Get up to speed on the #blog:

SOUTH AMERICA

Nil

EUROPE

23. A week in security (October 15 – 21)
24. The Russian built #VPNFilter #botnet was taken down by the @FBI after over 500,000 routers were infected. However, VPNFilter is
25. iCloud Hacker Wants $175,000 Ransom to Be Paid In Bitcoin (BTC)
26. Repairnator bot finds software bugs, successfully submits patches
27. New APT GreyEnergy Found to Target EU Critical Systems, Linked to BlackEnergy
28. US Indicts Another Russian for Role in Info Warfare Campaign

AFRICA

Nil

Sector brief for 2018-10-22

HEALTHCARE

1. CMS portal breach exposes 75,000 individuals' records
2. Oceansalt Attacks Infrastructure, Finance, Universities and Telecommunications
3. Gamma ransomware compromises data on 16,000 patients at California hernia institute
4. Safeguarding the Nation’s Critical Infrastructure
5. Criminals Hijacked Records of 75 000 Users from
6. 75,000 HealthCare.gov Users Exposed, Personal Information Stolen
7. Critical vulnerabilities on FreeRTOS expose many systems to attacks
8. Anthem in Record $16m HIPAA Settlement

TRANSPORT

9. NSA Hacking Tools Used Against Nuke, Aerospace Worlds
10. Critical vulnerabilities on FreeRTOS expose many systems to attacks

BANKING & FINANCE

11. Rambus Vaultify Trade: Secure transaction and storage of crypto assets on blockchain
12. Oceansalt Attacks Infrastructure, Finance, Universities and Telecommunications
13. According to the report, researchers detected 33,568 email addresses of finance departments that had been exposed by third parties. Can
14. Phishing Scheme Leverages Azure Blob Storage and Hurricane Michael
15. FreeRTOS flaws expose millions of IoT devices to cyber attacks
16. Critical vulnerabilities on FreeRTOS expose many systems to attacks
17. Natural Disaster Related Phishing Scam Abusing Microsoft Azure to Steal login Credentials & Credit Card Numbers
18. India’s First Cryptocurrency ATM To Buy and Sell Cryptocurrencies

INFORMATION & TELECOMMUNICATION

19. Saudi Future Investment Initiative website defaced by the hackers
20. Blockchain Security and Privacy
21. A week in security (October 15 – 21)
22. Popular website plugin harboured a serious 0-day for years
23. The latest variant of Satan ransomware is spreading in the wild

FOOD

Nil

WATER

Nil

ENERGY

24. Safeguarding the Nation’s Critical Infrastructure
25. New APT GreyEnergy Found to Target EU Critical Systems, Linked to BlackEnergy

GOVERNMENT & PUBLIC SERVICE

26. Saudi Future Investment Initiative website defaced by the hackers
27. How a Canadian permanent resident and Saudi Arabian dissident was targeted with powerful spyware on Canadian soil
28. CMS portal breach exposes 75,000 individuals' records
29. Safeguarding the Nation’s Critical Infrastructure
30. Criminals Hijacked Records of 75 000 Users from
31. US Indicts Another Russian for Role in Info Warfare Campaign
32. Anthem in Record $16m HIPAA Settlement

Daily brief for 2018-10-22

ASIA

1. Saudi Future Investment Initiative website defaced by the hackers
2. Hackers Deface Website of Saudi Investment Forum
3. How a Canadian permanent resident and Saudi Arabian dissident was targeted with powerful spyware on Canadian soil
4. Rambus Vaultify Trade: Secure transaction and storage of crypto assets on blockchain
5. A week in security (October 15 – 21)
6. Oceansalt Attacks Infrastructure, Finance, Universities and Telecommunications
7. Enigmatic cyber espionage campaign revives source code from old foe APT1
8. WebLogic Remote Code Execution Vulnerability(CVE-2018-3245) Threat Alert
9. India’s First Cryptocurrency ATM To Buy and Sell Cryptocurrencies

WORLD

10. How a Canadian permanent resident and Saudi Arabian dissident was targeted with powerful spyware on Canadian soil
11. US Tops Global Malware C2 Distribution
12. A week in security (October 15 – 21)
13. Oceansalt Attacks Infrastructure, Finance, Universities and Telecommunications
14. Safeguarding the Nation’s Critical Infrastructure
15. New Ethics Guidance for Lawyers from the American Bar Association (ABA) Regarding Data Breach and Cyber-attack
16. The boom of fileless malware attacks: How can we fight it?
17. Criminals Hijacked Records of 75 000 Users from
18. The Russian built #VPNFilter #botnet was taken down by the @FBI after over 500,000 routers were infected. However, VPNFilter is
19. Enigmatic cyber espionage campaign revives source code from old foe APT1
20. iCloud Hacker Wants $175,000 Ransom to Be Paid In Bitcoin (BTC)
21. Repairnator bot finds software bugs, successfully submits patches
22. 75,000 HealthCare.gov Users Exposed, Personal Information Stolen
23. New APT GreyEnergy Found to Target EU Critical Systems, Linked to BlackEnergy
24. US Indicts Another Russian for Role in Info Warfare Campaign
25. Anthem in Record $16m HIPAA Settlement
26. Are you aware of #Canada's data breach regulations? Get up to speed on the #blog:

ATTACKS

27. CMS portal breach exposes 75,000 individuals' records
28. New Ethics Guidance for Lawyers from the American Bar Association (ABA) Regarding Data Breach and Cyber-attack
29. According to the report, researchers detected 33,568 email addresses of finance departments that had been exposed by third parties. Can
30. #NetSpectre leaks data remotely via side-channel attacks. Learn from expert Michael Cobb of @thehairyITdog why data from #microprocessors is not
31. Phishing Scheme Leverages Azure Blob Storage and Hurricane Michael
32. Criminals Hijacked Records of 75 000 Users from
33. Strict password policy could prevent credential reuse, paper suggests
34. A #ZeroDay in #jQuery File Upload could affect thousands of projects because the jQuery #plugin vulnerability has existed for eight
35. Enigmatic cyber espionage campaign revives source code from old foe APT1
36. 75,000 HealthCare.gov Users Exposed, Personal Information Stolen
37. US Indicts Another Russian for Role in Info Warfare Campaign
38. What are DMARC records and can they improve email security?
39. Anthem in Record $16m HIPAA Settlement
40. The Hunt - Our new data breach detection video looks like a Mission Impossible trailer. However, the threats are for
41. #NetSpectre exploits speculative execution to leak data remotely via side-channel attacks. Learn how this #SecurityVulnerability affects the #cloud from expert
42. The most interesting Internet-connected vehicle hacks on record
43. Web Hosting Software VestaCP Server Compromised With DDoS Malware
44. Find out how #TLBleed abuses @Intel's HTT chip feature to leak data via TLB
45. Natural Disaster Related Phishing Scam Abusing Microsoft Azure to Steal login Credentials & Credit Card Numbers
46. Are you aware of #Canada's data breach regulations? Get up to speed on the #blog:

THREATS

47. Cisco, F5 Networks Investigate libssh Vulnerability Impact
48. How to detect hardware-based server bugs
49. Flaw in Media Library Impacts VLC, Other Software
50. Libssh CVE-2018-10933 Scanners & Exploits Released - Apply Updates Now
51. How a Canadian permanent resident and Saudi Arabian dissident was targeted with powerful spyware on Canadian soil
52. Blockchain Security and Privacy
53. Recent Branch.io Patch Creates New XSS Flaw
54. Rambus Vaultify Trade: Secure transaction and storage of crypto assets on blockchain
55. US Tops Global Malware C2 Distribution
56. Signal Upgrade Process Leaves Unencrypted Messages on Disk
57. Gamma ransomware compromises data on 16,000 patients at California hernia institute
58. Critical Bug Impacts Live555 Media Streaming Libraries
59. A newly disclosed #libSSH vulnerability could allow an attacker #AdminAccess to a server with little effort. By @MT_Heller
60. Zero-day jQuery plugin vulnerability exploited for 3 years
61. .@alienvault researchers recently discovered #MassMiner, a #cryptocurrency mining #malware that has the ability to infect systems across the web. Discover
62. CVE-2018-4013: LIVE555 streaming media RTSP Server Remote Code Execution Vulnerability
63. The boom of fileless malware attacks: How can we fight it?
64. Ransomware: A cheat sheet for professionals
65. Popular website plugin harboured a serious 0-day for years
66. A #ZeroDay in #jQuery File Upload could affect thousands of projects because the jQuery #plugin vulnerability has existed for eight
67. It's OK, I'm verified - Libssh flaw allows attackers to bypass server authentication
68. Octopus Malware
69. iCloud Hacker Wants $175,000 Ransom to Be Paid In Bitcoin (BTC)
70. Repairnator bot finds software bugs, successfully submits patches
71. Drupal Patched Critical RCE Vulnerabilities In Drupal 7 and 8
72. Trade.io loses $7.5Mil worth of cryptocurrency in mysterious cold wallet hack
73. FreeRTOS flaws expose millions of IoT devices to cyber attacks
74. The latest variant of Satan ransomware is spreading in the wild
75. The .@iDefense Vulnerability Contributor Program (VCP) bug-bounty initiative continues to attract top contributors. Join them by submitting your 0-day for
76. Maker of LuminosityLink RAT gets 30 months in the clink
77. Introducing Infura: Connecting DApps With Ethereum Without Setting up Ethereum Nodes
78. Critical vulnerabilities on FreeRTOS expose many systems to attacks
79. WebLogic Remote Code Execution Vulnerability(CVE-2018-3245) Threat Alert
80. MPlayer and VLC media player affected by critical flaw CVE-2018-4013
81. Web Hosting Software VestaCP Server Compromised With DDoS Malware
82. Adding the EICAR string to your name as part of the visitor self-registration process is a bit of a faux
83. Business-minded hackers are testing blockchain technologies to secure their illegal operations. Here's what enterprises can learn from them:
84. Remote Code Execution Flaws Found in FreeRTOS - Popular OS for Embedded Systems
85. India’s First Cryptocurrency ATM To Buy and Sell Cryptocurrencies
86. Why does Windows 10 have many bugs?

CRIME

87. Blockchain Security and Privacy
88. Rambus Vaultify Trade: Secure transaction and storage of crypto assets on blockchain
89. A week in security (October 15 – 21)
90. Oceansalt Attacks Infrastructure, Finance, Universities and Telecommunications
91. The boom of fileless malware attacks: How can we fight it?
92. Phishing Scheme Leverages Azure Blob Storage and Hurricane Michael
93. iCloud Hacker Wants $175,000 Ransom to Be Paid In Bitcoin (BTC)
94. 75,000 HealthCare.gov Users Exposed, Personal Information Stolen
95. The latest variant of Satan ransomware is spreading in the wild
96. US Indicts Another Russian for Role in Info Warfare Campaign
97. Natural Disaster Related Phishing Scam Abusing Microsoft Azure to Steal login Credentials & Credit Card Numbers

POLITICS

98. Saudi Future Investment Initiative website defaced by the hackers
99. New Ethics Guidance for Lawyers from the American Bar Association (ABA) Regarding Data Breach and Cyber-attack
100. Enigmatic cyber espionage campaign revives source code from old foe APT1
101. Octopus Malware
102. New APT GreyEnergy Found to Target EU Critical Systems, Linked to BlackEnergy
103. US Indicts Another Russian for Role in Info Warfare Campaign

APT report for 2018-10-21

TRANSNATIONAL / UNKNOWN

1. DarkPulsar and other NSA hacking tools used in hacking operations in the wild

CHINA

2. Security Affairs newsletter Round 185 – News of the week

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

3. GreyEnergy Malware Targets Energy and Transport Providers
4. Security Affairs newsletter Round 185 – News of the week

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-21

WINDOWS

1. DarkPulsar and other NSA hacking tools used in hacking operations in the wild

LINUX

Nil

UNIX

Nil

ANDROID

Nil

IOS

2. Security Affairs newsletter Round 185 – News of the week

MACOS

Nil

Threat report for 2018-10-21

DATA BREACH & DATA LOSS

1. HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
2. Week in review: Pentagon data breach, cybersecurity workforce gap, who gets spear phished?
3. Another US Voters Data Leak Via Tea Party PAC Misconfigured S3 Bucket
4. Travel data for about 30,000 individuals was exposed in a Pentagon #DataBreach and experts expect that the information could be
5. A combination of #SecurityFlaws and inadequate back-end development of the @Google Firebase database led to #DataLeaks and #SecurityVulnerabilities including HospitalGown.
6. Hackers Breach HealthCare.gov System and Steals Sensitive Personal Data of 75,000 Customers

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

7. Hackers launched @netflix #phishing attacks by obtaining TLS certificates. Learn how hackers mimic popular websites to spoof users and steal

WEB DEFACEMENT

Nil

BOTNET

Nil

RANSOMWARE

8. Kraken Cryptor Ransomware Connecting to BleepingComputer During Encryption
9. Banking trojans, not #ransomware, are the biggest threat to the enterprise now.

CRYPTOMINING & CRYPTOCURRENCIES

10. Kraken Cryptor Ransomware Connecting to BleepingComputer During Encryption

MALWARE

11. GreyEnergy Malware Targets Energy and Transport Providers
12. Then a vendor calls. A quality control system is running a hidden process. That shouldn’t be happening. The vendor rep

EXPLOIT

Nil

VULNERABILITY

13. Multiple Vulnerabilities In Telepresence Robots Patched
14. Tumblr Patched Privacy Bug That Could Expose Sensitive Account Details
15. WizCase Report: Vulnerabilities found in WD My Book, NetGear Stora, SeaGate Home, Medion LifeCloud NAS
16. 2 Million Network Storage Devices From WD, SeaGate, NetGear Affected by Unpatched Zero-Day Vulnerabilities

Region brief for 2018-10-21

ASIA

1. DarkPulsar and other NSA hacking tools used in hacking operations in the wild
2. Security Affairs newsletter Round 185 – News of the week

OCEANIA

Nil

NORTH AMERICA

3. HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
4. Another US Voters Data Leak Via Tea Party PAC Misconfigured S3 Bucket
5. Security Affairs newsletter Round 185 – News of the week
6. WizCase Report: Vulnerabilities found in WD My Book, NetGear Stora, SeaGate Home, Medion LifeCloud NAS

SOUTH AMERICA

7. Security Affairs newsletter Round 185 – News of the week

EUROPE

8. DarkPulsar and other NSA hacking tools used in hacking operations in the wild
9. GreyEnergy Malware Targets Energy and Transport Providers
10. Security Affairs newsletter Round 185 – News of the week

AFRICA

Nil

Sector brief for 2018-10-21

HEALTHCARE

1. HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
2. Hackers Breach HealthCare.gov System and Steals Sensitive Personal Data of 75,000 Customers

TRANSPORT

3. DarkPulsar and other NSA hacking tools used in hacking operations in the wild
4. GreyEnergy Malware Targets Energy and Transport Providers

BANKING & FINANCE

5. Another US Voters Data Leak Via Tea Party PAC Misconfigured S3 Bucket
6. Banking trojans, not #ransomware, are the biggest threat to the enterprise now.

INFORMATION & TELECOMMUNICATION

7. Tumblr Patched Privacy Bug That Could Expose Sensitive Account Details
8. WizCase Report: Vulnerabilities found in WD My Book, NetGear Stora, SeaGate Home, Medion LifeCloud NAS

FOOD

Nil

WATER

Nil

ENERGY

9. DarkPulsar and other NSA hacking tools used in hacking operations in the wild
10. GreyEnergy Malware Targets Energy and Transport Providers

GOVERNMENT & PUBLIC SERVICE

11. HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
12. Another US Voters Data Leak Via Tea Party PAC Misconfigured S3 Bucket

Daily brief for 2018-10-21

ASIA

1. DarkPulsar and other NSA hacking tools used in hacking operations in the wild
2. Security Affairs newsletter Round 185 – News of the week

WORLD

3. HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
4. DarkPulsar and other NSA hacking tools used in hacking operations in the wild
5. Another US Voters Data Leak Via Tea Party PAC Misconfigured S3 Bucket
6. GreyEnergy Malware Targets Energy and Transport Providers
7. Security Affairs newsletter Round 185 – News of the week
8. WizCase Report: Vulnerabilities found in WD My Book, NetGear Stora, SeaGate Home, Medion LifeCloud NAS

ATTACKS

9. HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
10. Week in review: Pentagon data breach, cybersecurity workforce gap, who gets spear phished?
11. Another US Voters Data Leak Via Tea Party PAC Misconfigured S3 Bucket
12. Travel data for about 30,000 individuals was exposed in a Pentagon #DataBreach and experts expect that the information could be
13. Hackers launched @netflix #phishing attacks by obtaining TLS certificates. Learn how hackers mimic popular websites to spoof users and steal
14. A combination of #SecurityFlaws and inadequate back-end development of the @Google Firebase database led to #DataLeaks and #SecurityVulnerabilities including HospitalGown.
15. Hackers Breach HealthCare.gov System and Steals Sensitive Personal Data of 75,000 Customers

THREATS

16. Multiple Vulnerabilities In Telepresence Robots Patched
17. Tumblr Patched Privacy Bug That Could Expose Sensitive Account Details
18. GreyEnergy Malware Targets Energy and Transport Providers
19. Kraken Cryptor Ransomware Connecting to BleepingComputer During Encryption
20. Banking trojans, not #ransomware, are the biggest threat to the enterprise now.
21. Then a vendor calls. A quality control system is running a hidden process. That shouldn’t be happening. The vendor rep
22. WizCase Report: Vulnerabilities found in WD My Book, NetGear Stora, SeaGate Home, Medion LifeCloud NAS
23. 2 Million Network Storage Devices From WD, SeaGate, NetGear Affected by Unpatched Zero-Day Vulnerabilities

CRIME

24. Security Affairs newsletter Round 185 – News of the week

POLITICS

25. Security Affairs newsletter Round 185 – News of the week

APT report for 2018-10-20

TRANSNATIONAL / UNKNOWN

1. DarkPulsar – A Shadow Brokers Group’s New Hacking Tool Leak To Open Backdoor & Provide Remote Control
2. Spotted: Miscreants use pilfered NSA hacking tools to pwn boxes in nuke, aerospace worlds

CHINA

Nil

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

3. .@RobertMLee said #GreyEnergy is a threat, but people shouldn't conclude from @ESET research that the group will only target

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-20

WINDOWS

1. Fake Flash Player Installer Embeds Monero Coin Miner, Wreaking Havoc in the Wild
2. Java Usage Tracker Critical Flaw Enable Hackers to Inject Arbitrary Files on Windows Systems

LINUX

3. Fake Flash Player Installer Embeds Monero Coin Miner, Wreaking Havoc in the Wild
4. Heads-Up: Patch 'Comically Bad' libSSH Flaw Now
5. Xerosploit – Toolkit to Perform MITM, Spoofing, DOS, Images Sniffing/Replacement, WD Attacks

UNIX

Nil

ANDROID

6. Fake Flash Player Installer Embeds Monero Coin Miner, Wreaking Havoc in the Wild

IOS

7. Fake Flash Player Installer Embeds Monero Coin Miner, Wreaking Havoc in the Wild

MACOS

8. Fake Flash Player Installer Embeds Monero Coin Miner, Wreaking Havoc in the Wild

Threat report for 2018-10-20

DATA BREACH & DATA LOSS

1. DarkPulsar – A Shadow Brokers Group’s New Hacking Tool Leak To Open Backdoor & Provide Remote Control
2. Anthem to Pay Record $16M as Settlement for Privacy Violations
3. If it's only able to leak data at 15 bits per hour, is #NetSpectre a serious threat? Learn more about
4. Thousands of applications affected by a zero-day issue in jQuery File Upload plugin
5. #TLBleed abuses @Intel's HTT chip feature to leak data and obtain sensitive memory information. Learn more about this new side-channel

DENIAL-OF-SERVICE

6. Spotted: Miscreants use pilfered NSA hacking tools to pwn boxes in nuke, aerospace worlds

MALVERTISING

Nil

PHISHING

Nil

WEB DEFACEMENT

Nil

BOTNET

7. The Russian built #VPNFilter #botnet was previously taken down after 500,000 routers were infected. However, recently it attempted a comeback.

RANSOMWARE

8. Syrian victims of the GandCrab ransomware can decrypt their files for free

CRYPTOMINING & CRYPTOCURRENCIES

9. Fake Flash Player Installer Embeds Monero Coin Miner, Wreaking Havoc in the Wild

MALWARE

10. DarkPulsar – A Shadow Brokers Group’s New Hacking Tool Leak To Open Backdoor & Provide Remote Control
11. Man Sentenced to 30 Months in Jail For Creating LuminosityLink RAT
12. Here's how the hack works: Temperatures used in the pulp cooking process begin to vary random intervals. The fluctuations in temperature

EXPLOIT

13. Vendors confirm products affected by libssh bug as PoC code pops up on GitHub

VULNERABILITY

14. Oracle Critical Patch Update October 2018 Addressed 301 Flaws Including 47 High-Rated Flaws
15. Two Critical RCE Bugs Patched in Drupal 7 and 8
16. Vendors confirm products affected by libssh bug as PoC code pops up on GitHub
17. A #libSSH vulnerability that went undisclosed for almost five years could allow an attacker easy #AdminAccess to servers, @0xAmit said
18. Heads-Up: Patch 'Comically Bad' libSSH Flaw Now
19. Thousands of applications affected by a zero-day issue in jQuery File Upload plugin
20. OpenSSH 7.9 released: fixed bugs
21. Learn how the #NetSpectre vulnerability affects the #cloud from expert Ed Moyle of @securitycurve.
22. Critical Code Execution Vulnerability Found in Libraries Used By VLC and Other Media Players
23. Vulnerabilities in telepresence robots allow access to image and video
24. Java Usage Tracker Critical Flaw Enable Hackers to Inject Arbitrary Files on Windows Systems

Region brief for 2018-10-20

ASIA

1. Syrian victims of the GandCrab ransomware can decrypt their files for free

OCEANIA

Nil

NORTH AMERICA

2. Anthem to Pay Record $16M as Settlement for Privacy Violations

SOUTH AMERICA

Nil

EUROPE

3. Syrian victims of the GandCrab ransomware can decrypt their files for free
4. The Russian built #VPNFilter #botnet was previously taken down after 500,000 routers were infected. However, recently it attempted a comeback.

AFRICA

Nil

Sector brief for 2018-10-20

HEALTHCARE

1. Anthem to Pay Record $16M as Settlement for Privacy Violations
2. Vulnerabilities in telepresence robots allow access to image and video

TRANSPORT

3. Spotted: Miscreants use pilfered NSA hacking tools to pwn boxes in nuke, aerospace worlds

BANKING & FINANCE

4. Syrian victims of the GandCrab ransomware can decrypt their files for free
5. Anthem to Pay Record $16M as Settlement for Privacy Violations

INFORMATION & TELECOMMUNICATION

6. Syrian victims of the GandCrab ransomware can decrypt their files for free
7. Thousands of applications affected by a zero-day issue in jQuery File Upload plugin

FOOD

Nil

WATER

Nil

ENERGY

8. Spotted: Miscreants use pilfered NSA hacking tools to pwn boxes in nuke, aerospace worlds

GOVERNMENT & PUBLIC SERVICE

9. Anthem to Pay Record $16M as Settlement for Privacy Violations

Daily brief for 2018-10-20

ASIA

1. Syrian victims of the GandCrab ransomware can decrypt their files for free

WORLD

2. Syrian victims of the GandCrab ransomware can decrypt their files for free
3. Anthem to Pay Record $16M as Settlement for Privacy Violations
4. The Russian built #VPNFilter #botnet was previously taken down after 500,000 routers were infected. However, recently it attempted a comeback.

ATTACKS

5. DarkPulsar – A Shadow Brokers Group’s New Hacking Tool Leak To Open Backdoor & Provide Remote Control
6. Anthem to Pay Record $16M as Settlement for Privacy Violations
7. If it's only able to leak data at 15 bits per hour, is #NetSpectre a serious threat? Learn more about
8. Thousands of applications affected by a zero-day issue in jQuery File Upload plugin
9. #TLBleed abuses @Intel's HTT chip feature to leak data and obtain sensitive memory information. Learn more about this new side-channel

THREATS

10. Oracle Critical Patch Update October 2018 Addressed 301 Flaws Including 47 High-Rated Flaws
11. Syrian victims of the GandCrab ransomware can decrypt their files for free
12. Fake Flash Player Installer Embeds Monero Coin Miner, Wreaking Havoc in the Wild
13. DarkPulsar – A Shadow Brokers Group’s New Hacking Tool Leak To Open Backdoor & Provide Remote Control
14. Two Critical RCE Bugs Patched in Drupal 7 and 8
15. Vendors confirm products affected by libssh bug as PoC code pops up on GitHub
16. A #libSSH vulnerability that went undisclosed for almost five years could allow an attacker easy #AdminAccess to servers, @0xAmit said
17. Heads-Up: Patch 'Comically Bad' libSSH Flaw Now
18. Man Sentenced to 30 Months in Jail For Creating LuminosityLink RAT
19. Thousands of applications affected by a zero-day issue in jQuery File Upload plugin
20. OpenSSH 7.9 released: fixed bugs
21. Learn how the #NetSpectre vulnerability affects the #cloud from expert Ed Moyle of @securitycurve.
22. Critical Code Execution Vulnerability Found in Libraries Used By VLC and Other Media Players
23. Vulnerabilities in telepresence robots allow access to image and video
24. Java Usage Tracker Critical Flaw Enable Hackers to Inject Arbitrary Files on Windows Systems
25. Here's how the hack works: Temperatures used in the pulp cooking process begin to vary random intervals. The fluctuations in temperature

CRIME

26. Syrian victims of the GandCrab ransomware can decrypt their files for free
27. Anthem to Pay Record $16M as Settlement for Privacy Violations
28. Man Sentenced to 30 Months in Jail For Creating LuminosityLink RAT
29. Thousands of applications affected by a zero-day issue in jQuery File Upload plugin

POLITICS

30. Spotted: Miscreants use pilfered NSA hacking tools to pwn boxes in nuke, aerospace worlds
31. Vulnerabilities in telepresence robots allow access to image and video

APT report for 2018-10-19

TRANSNATIONAL / UNKNOWN

Nil

CHINA

1. Secret Comment Crew Code Spotted in New Attack
2. #GroupIB is a platinum sponsor @Gartner_inc Security & Risk Management Summit (Dubai, UAE, 22-23 October 2018) Visit us at Stand
3. Attackers behind Operation Oceansalt reuse code from Chinese Comment Crew
4. Latest Hacking News Podcast
5. APT Group Uses Datper Malware To Launch Cyber Attack on Asia Countries by Executing Shell Commands
6. Authorities seize properties of creators of “Infamous” cheat code, for GTA V

INDIA

Nil

NORTH KOREA

7. "World-renowned cybersecurity unit #GroupIB is prepping to release its annual report on trends in hi-tech cybercrime...Group-IB expects the number of

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

8. GreyEnergy
9. GreyEnergy threat group detected attacking high-value targets
10. .@ESET researchers claim the #GreyEnergy group has taken up the mantle of ICS-targeting #BlackEnergy, but @MalwareJake said the evidence wasn't
11. .@ESET researchers claim a new threat group called #GreyEnergy is the successor to #BlackEnergy, but experts are unsure if the
12. Week in security with Tony Anscombe

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-10-19

WINDOWS

1. This Week in Security News: Apex One™ Release and Java Usage Tracker Flaws
2. SettingContent-ms can be Abused to Drop Complex DeepLink and Icon-based Payload
3. Inside Safari Extensions | Malware’s Golden Key to User Data

LINUX

4. VestaCP users warned about possible server compromise

UNIX

Nil

ANDROID

5. Authorities seize properties of creators of “Infamous” cheat code, for GTA V

IOS

Nil

MACOS

6. Inside Safari Extensions | Malware’s Golden Key to User Data

Threat report for 2018-10-19

DATA BREACH & DATA LOSS

1. AWS FreeRTOS Bugs Allow Compromise of IoT Devices
2. Campaign 2018: Artificial intelligence is automating attacks on political campaigns
3. Chinese Hackers Use 'Datper' Trojan in Recent Campaign
4. A Pentagon #DataBreach exposed data on at least 30,000 individuals, but other details about the incident are still scarce. By
5. Campaign 2018: Artificial Intelligence Is Automating Attacks On Political Campaigns
6. New RTF-based Campaign Distributing Agent Tesla and Loki Malware
7. Did you know? Corporate email accounts can be compromised for as little as $150. Read more key findings from our
8. US Voter Leak Hits Tea Party Organization
9. VestaCP users warned about possible server compromise
10. jQuery File Upload Plugin Vulnerable for 8 Years and Only Hackers Knew
11. Recent phishing campaign against the Office of the First Deputy Prime Minister - Kingdom of Bahrain. Targeting Aysha Bukhelli, spoofed
12. Campaign launched to protect ethical hackers in the Americas
13. The blogging site Tumblr has disclosed and fixed a security flaw that could have exposed sensitive account information.
14. Facepunch 2016 breach exposed 343,000 users
15. Today we're explaining #Canada's Data Breach Regulations on the #blog. Jet on over to find out if your organization complies
16. ADHA's non-process for releasing My Health Record data revealed
17. MikroTik routers targeted by cryptomining campaign | Avast
18. Vulnerability in Tumblr could have compromise users’ account data
19. Poor security practices and access to hacking services are making it easy for #cybercriminals to compromise business email, research reveals:

DENIAL-OF-SERVICE

20. New DDoS Malware Infects Open-Source Web Hosting Software
21. Lawfare editor on persistent DDoS attack: 'We wish they'd knock it off'
22. DDoS Attack Prevention Method on Your Enterprise’s Systems – A Detailed Report

MALVERTISING

Nil

PHISHING

23. Password and credit card-stealing Azorult malware adds new tricks
24. AISA 2018: Hunting for phishing kits
25. Hackers launched #phishing attacks against @netflix users via malicious sites with TLS certificates. Learn how hackers mimic popular websites to
26. Recent phishing campaign against the Office of the First Deputy Prime Minister - Kingdom of Bahrain. Targeting Aysha Bukhelli, spoofed
27. #HurricaneMichael #phishing schemes leverage Azure blob storage to rake in credentials. http://ow.ly/J6m850js1sk via the @threatinsight research team.

WEB DEFACEMENT

Nil

BOTNET

28. Ok now, which one of you is running this Twitter botnet of fake infosec professionals?

RANSOMWARE

29. City Pays $2,000 in Computer Ransomware Attack
30. Water Utility ONWASA Hit by Ransomware Attack
31. Madison County Computer Systems Face a Ransomware Attack
32. The Week in Ransomware - October 19th 2018 - GandCrab, Birbware, and More
33. Top 4 tips to avoid getting hit by ransomware
34. Onslow County Utility Hit with Ransomware Attack

CRYPTOMINING & CRYPTOCURRENCIES

35. Report: Cryptocurrency Exchanges Lost $882 Million to Hackers
36. MikroTik routers targeted by cryptomining campaign | Avast
37. Fraudster Targets Cryptocurrency Wallets with a Variety of Info Stealers

MALWARE

38. Small or Big Business, Malware Hits Everyone
39. Kaspersky says it detected infections with DarkPulsar, alleged NSA malware
40. Chinese Hackers Use 'Datper' Trojan in Recent Campaign
41. Password and credit card-stealing Azorult malware adds new tricks
42. SettingContent-ms can be Abused to Drop Complex DeepLink and Icon-based Payload
43. New DDoS Malware Infects Open-Source Web Hosting Software
44. America’s First: US Leads in Global Malware C2 Distribution
45. New RTF-based Campaign Distributing Agent Tesla and Loki Malware
46. Hackers launched #phishing attacks against @netflix users via malicious sites with TLS certificates. Learn how hackers mimic popular websites to
47. The Golden Age of Malware
48. LuminosityLink RAT author sentenced to 30 years in prison
49. Inside Safari Extensions | Malware’s Golden Key to User Data
50. .@TrendMicro researchers discovered a malicious #ChromeExtension spreading #malware. Learn more with expert @lewisnic.
51. ADHA's non-process for releasing My Health Record data revealed
52. APT Group Uses Datper Malware To Launch Cyber Attack on Asia Countries by Executing Shell Commands
53. Canberra competence shines in day of PM domain lapses and tortured analogies

EXPLOIT

54. NSA-Linked 'DarkPulsar' Exploit Tool Detailed

VULNERABILITY

55. libssh Vulnerability: Is WatchGuard Affected?
56. 0-Day in jQuery Plugin Impacts Thousands of Applications
57. Fixing a CSRF Vulnerability
58. This Week in Security News: Apex One™ Release and Java Usage Tracker Flaws
59. AWS FreeRTOS Bugs Allow Compromise of IoT Devices
60. Drupal dev team fixed Remote Code Execution flaws in the popular CMS
61. Flaw in Libssh Grants Admin Control to Servers
62. FreeRTOS Vulnerabilities Expose Many Systems to Attacks
63. Linksys E Series Vulnerabilities
64. Google warns Apple: Missing bugs in your security bulletins are 'disincentive to patch'
65. jQuery Zero-Day Was Exploited For At Least Three Years
66. A Serious Security Flaw Found in LibSSH
67. In this week's Risk & Repeat podcast, editors discuss the #GAOreport on vulnerabilities and weaknesses in military weapons systems and
68. Splunk addressed several vulnerabilities in Enterprise and Light products
69. Serious D-Link router security flaws may never be patched
70. Scams and flaws: Why we get duped
71. Remote Code Execution Flaws Patched in Drupal
72. Tumblr bug bounty program detects flaw, no user info lost
73. .@Google Firebase's lack of #DatabaseSecurity and inadequate #BackendDevelopment led to #DataLeaks and vulnerabilities, including HospitalGown. Learn more about this
74. The blogging site Tumblr has disclosed and fixed a security flaw that could have exposed sensitive account information.
75. Critical Flaw Found in Streaming Library Used by VLC and Other Media Players
76. Drupal Remote Code Execution Vulnerability Alert
77. Business emails could represent a major security flaw for UK companies, after it was revealed millions of account details are
78. Splunk Patches Several Flaws in Enterprise, Light Products
79. Vulnerability in Tumblr could have compromise users’ account data
80. Three critical vulnerabilities can be chained to take full control of D-Link routers
81. Zero-day in popular jQuery plugin actively exploited for at least three years
82. Tumblr serious vulnerability can reveal everyone information
83. Critical Flaws Found in Amazon FreeRTOS IoT Operating System

Region brief for 2018-10-19

ASIA

1. Kaspersky says it detected infections with DarkPulsar, alleged NSA malware
2. The Week in Ransomware - October 19th 2018 - GandCrab, Birbware, and More
3. Chinese Hackers Use 'Datper' Trojan in Recent Campaign
4. Recent phishing campaign against the Office of the First Deputy Prime Minister - Kingdom of Bahrain. Targeting Aysha Bukhelli, spoofed
5. Secret Comment Crew Code Spotted in New Attack
6. Attackers behind Operation Oceansalt reuse code from Chinese Comment Crew
7. APT Group Uses Datper Malware To Launch Cyber Attack on Asia Countries by Executing Shell Commands

OCEANIA

8. AISA 2018: Hunting for phishing kits
9. ADHA's non-process for releasing My Health Record data revealed
10. Authorities seize properties of creators of “Infamous” cheat code, for GTA V
11. Canberra competence shines in day of PM domain lapses and tortured analogies

NORTH AMERICA

12. Small or Big Business, Malware Hits Everyone
13. America’s First: US Leads in Global Malware C2 Distribution
14. In this week's Risk & Repeat podcast, editors discuss the #GAOreport on vulnerabilities and weaknesses in military weapons systems and
15. US Voter Leak Hits Tea Party Organization
16. Secret Comment Crew Code Spotted in New Attack
17. #GroupIB is a platinum sponsor @Gartner_inc Security & Risk Management Summit (Dubai, UAE, 22-23 October 2018) Visit us at Stand
18. Attackers behind Operation Oceansalt reuse code from Chinese Comment Crew
19. Today we're explaining #Canada's Data Breach Regulations on the #blog. Jet on over to find out if your organization complies
20. Inside Safari Extensions | Malware’s Golden Key to User Data
21. Lawfare editor on persistent DDoS attack: 'We wish they'd knock it off'

SOUTH AMERICA

Nil

EUROPE

22. Small or Big Business, Malware Hits Everyone
23. This Week in Security News: Apex One™ Release and Java Usage Tracker Flaws
24. Kaspersky says it detected infections with DarkPulsar, alleged NSA malware
25. GreyEnergy
26. Onslow County Utility Hit with Ransomware Attack
27. Report: Cryptocurrency Exchanges Lost $882 Million to Hackers
28. Business emails could represent a major security flaw for UK companies, after it was revealed millions of account details are
29. Three critical vulnerabilities can be chained to take full control of D-Link routers
30. Lawfare editor on persistent DDoS attack: 'We wish they'd knock it off'

AFRICA

31. Lawfare editor on persistent DDoS attack: 'We wish they'd knock it off'