ASIA
- Google dorks were the root cause of a catastrophic compromise of CIA’s communications
- Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
- Persian Stalker pillages Iranian users of Instagram and Telegram
- A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3
OCEANIA
- Week in review: Volume of Australian data breaches continues unabated
- Australian shipbuilder Austal hit by data breach
- Persian Stalker pillages Iranian users of Instagram and Telegram
- A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3
- "Shipbuilder Austal Ltd said on Thursday its Australian business had detected and responded to a data breach"
NORTH AMERICA
- What were the DDoS numbers for Q2 & Q3 2018?
- Google dorks were the root cause of a catastrophic compromise of CIA’s communications
- Your personal data is widely available to hackers
- Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
- Magecart Strikes Again, and Kitronik Is Latest Victim
- Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
- Equifax Set to Share More PII with Experian
- #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
- Over 80,000 Facebook User Accounts Compromised
- Why malware attacks should no longer be a problem for businesses
- Critical 'Bleedingbit' flaws found in microcontrollers used by Wi-Fi access points
- Persian Stalker pillages Iranian users of Instagram and Telegram
- A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3
- "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me
- "Shipbuilder Austal Ltd said on Thursday its Australian business had detected and responded to a data breach"
SOUTH AMERICA
- Over 80,000 Facebook User Accounts Compromised
EUROPE
- Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
- Google dorks were the root cause of a catastrophic compromise of CIA’s communications
- Magecart Infiltrates U.K. Online Retailer Kitronik POS
- Akado Telecom Accidentally Leaks Customers' Names, Phone Numbers, And Addresses
- Magecart Strikes Again, and Kitronik Is Latest Victim
- Inception Attackers Target Europe with Year-old Office Vulnerability
- Kemp Investigates Dems, Not the Reported Vulnerability
- Over 80,000 Facebook User Accounts Compromised
- Persian Stalker pillages Iranian users of Instagram and Telegram
- Kemp Cites Voter Database Hacking Attempt, Gives No Evidence
- A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3
AFRICA
- Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
HEALTHCARE
Nil
TRANSPORT
Nil
BANKING & FINANCE
- Original Mirai botnet creator hit with hefty financial sentence
- Magecart Strikes Again, and Kitronik Is Latest Victim
- Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
- Over 80,000 Facebook User Accounts Compromised
- Why malware attacks should no longer be a problem for businesses
- Cybercriminals Using SMS Phishing Attack to Rob Cardless ATM
- Persian Stalker pillages Iranian users of Instagram and Telegram
- Phishing attacks up by 297 percent across eCommerce in Q3 2018
- A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3
- Video analysis of Android banking Trojan found on Google Play (Red Alert 2)
INFORMATION & TELECOMMUNICATION
- PoC Available for Microsoft Edge Zero-Day RCE, Exploit Under Development
- Original Mirai botnet creator hit with hefty financial sentence
- Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
- Fake Elon Musk Twitter Bitcoin Scam Earned 180K in One Day
- Another wave of Elon Musk bitcoin scams spread by verified Twitter accounts
- Inception Attackers Target Europe with Year-old Office Vulnerability
- Flaw in Icecast streaming media server allows to take off online Radio Stations
- Security firm Armis has discovered two vulnerabilities in Bluetooth Chips from several networking industry leaders.
- Over 80,000 Facebook User Accounts Compromised
- Persian Stalker pillages Iranian users of Instagram and Telegram
- Phishing attacks up by 297 percent across eCommerce in Q3 2018
- The Ultimate Guide to Bug Bounty Platforms
- Researchers discover new zero-day vulnerability in EDGE browser
- Fake malicious @RSAsecurity #SecurID malware in pre-release state on @GooglePlay:
- Currently gathering information (profiling) the mobile device it is installed
- "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me
FOOD
Nil
WATER
Nil
ENERGY
- [SingCERT] Technical Advisory on Vulnerabilities in Bluetooth Low Energy Chips by Texas Instruments (CVE-2018-16986 and CVE-2018-7080)
- Critical 'Bleedingbit' flaws found in microcontrollers used by Wi-Fi access points
GOVERNMENT & PUBLIC SERVICE
- No, blockchain isn't the answer to our voting system woes
- Google dorks were the root cause of a catastrophic compromise of CIA’s communications
- Akado Telecom Accidentally Leaks Customers' Names, Phone Numbers, And Addresses
- Inception Attackers Target Europe with Year-old Office Vulnerability
- Kemp Investigates Dems, Not the Reported Vulnerability
- Persian Stalker pillages Iranian users of Instagram and Telegram
- Phishing attacks up by 297 percent across eCommerce in Q3 2018
- Kemp Cites Voter Database Hacking Attempt, Gives No Evidence
- "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me
ASIA
- Google dorks were the root cause of a catastrophic compromise of CIA’s communications
- Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
- Persian Stalker pillages Iranian users of Instagram and Telegram
- A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3
WORLD
- Week in review: Volume of Australian data breaches continues unabated
- Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
- What were the DDoS numbers for Q2 & Q3 2018?
- Google dorks were the root cause of a catastrophic compromise of CIA’s communications
- Your personal data is widely available to hackers
- Magecart Infiltrates U.K. Online Retailer Kitronik POS
- Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
- Akado Telecom Accidentally Leaks Customers' Names, Phone Numbers, And Addresses
- Magecart Strikes Again, and Kitronik Is Latest Victim
- Inception Attackers Target Europe with Year-old Office Vulnerability
- Kemp Investigates Dems, Not the Reported Vulnerability
- Australian shipbuilder Austal hit by data breach
- Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
- Equifax Set to Share More PII with Experian
- #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
- Over 80,000 Facebook User Accounts Compromised
- Why malware attacks should no longer be a problem for businesses
- Critical 'Bleedingbit' flaws found in microcontrollers used by Wi-Fi access points
- Persian Stalker pillages Iranian users of Instagram and Telegram
- Kemp Cites Voter Database Hacking Attempt, Gives No Evidence
- A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3
- "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me
- "Shipbuilder Austal Ltd said on Thursday its Australian business had detected and responded to a data breach"
ATTACKS
- Week in review: Volume of Australian data breaches continues unabated
- Almost 300 Percent Increase in eCommerce Phishing Attacks in Q3 2018
- Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
- Google dorks were the root cause of a catastrophic compromise of CIA’s communications
- Your personal data is widely available to hackers
- This Tool Shows Exposed Cameras Around Your Neighborhood
- New Side-Channel Vulnerability Leaks Sensitive Data From Intel Chips
- How to use Firefox Master Password.
- Why you should be using a password manager
- Akado Telecom Accidentally Leaks Customers' Names, Phone Numbers, And Addresses
- Australian shipbuilder Austal hit by data breach
- How did @Google eliminate successful #PhishingAttacks? Learn how employees used U2F authentication and physical #SecurityKeys to defend against phishing from
- Password Constraints and Their Unintended Security Consequences
- Equifax Set to Share More PII with Experian
- #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
- National biometric database could be on the way (and in private hands)
- Over 80,000 Facebook User Accounts Compromised
- Cybercriminals Using SMS Phishing Attack to Rob Cardless ATM
- How can U2F authentication end phishing attacks?
- Phishing attacks up by 297 percent across eCommerce in Q3 2018
- "If an organization created #DMARC records for the first time, it would encounter syntax and content issues -- one of
- Kemp Cites Voter Database Hacking Attempt, Gives No Evidence
- "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me
- "Shipbuilder Austal Ltd said on Thursday its Australian business had detected and responded to a data breach"
THREATS
- Apache warns Struts 2.3 is using a library with a two year old critical flaw
- Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
- Online Radio Stations at Risk from Icecast Flaw
- No, blockchain isn't the answer to our voting system woes
- PoC Available for Microsoft Edge Zero-Day RCE, Exploit Under Development
- Flaws In Self-Encrypting SSDs Let Attackers Bypass Encryption
- New Side-Channel Vulnerability Leaks Sensitive Data From Intel Chips
- Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
- Why Are Deserialization Vulnerabilities So Popular?
- Fake Elon Musk Twitter Bitcoin Scam Earned 180K in One Day
- Another wave of Elon Musk bitcoin scams spread by verified Twitter accounts
- Flaws in self-encrypting SSDs let attackers bypass disk encryption
- [SingCERT] Technical Advisory on Vulnerabilities in Bluetooth Low Energy Chips by Texas Instruments (CVE-2018-16986 and CVE-2018-7080)
- Inception Attackers Target Europe with Year-old Office Vulnerability
- Malware of the 1980s: Looking back at the Brain Virus and the Morris Worm
- Kemp Investigates Dems, Not the Reported Vulnerability
- Flaws in Popular SSD Drives Bypass Hardware Disk Encryption
- Flaw in Icecast streaming media server allows to take off online Radio Stations
- Security researchers exploit Intel hyperthreading flaw to break encryption
- .@ArmisSecurity researchers discovered two chip-level #Bluetooth vulnerabilities -- dubbed #Bleedingbit -- that could allow pseudo #RemoteCodeExecution on wireless access points.
- Vulnerabilities’ CVSS scores soon to be assigned by AI
- Cisco Products Affected By A Zero-Day SIP Inspection Vulnerability Exploited In The Wild
- #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
- Researchers found #Kraken #ransomware has become more popular after being packaged in the Fallout #ExploitKit and becoming part of an
- High severity XML external entity flaw affects Sauter building automation product
- Security firm Armis has discovered two vulnerabilities in Bluetooth Chips from several networking industry leaders.
- Blockhead makes blockchain easy for developers
- Why malware attacks should no longer be a problem for businesses
- Critical 'Bleedingbit' flaws found in microcontrollers used by Wi-Fi access points
- Mozilla Patched Multiple Security Vulnerabilities in Thunderbird 60.3
- Android Rat – TheFatRat to Hack and Gain access to Targeted Android Phone
- Apple Patched Multiple XNU Kernel Vulnerabilities In MacOS And iOS
- Scammers Ride on Popular Vote411 Voter Info Site to Push Scareware Alerts
- The building blocks of blockchain-based digital identity
- Companies implementing DevSecOps address vulnerabilities faster than others
- How to Get Rid of Cortana Runtime Broker CPU Miner Virus
- The Ultimate Guide to Bug Bounty Platforms
- PortSmash – A New Side Channel Vulnerability in SMT/Hyper-Threading That Allows Attackers To Steal Sensitive Data
- Security Think Tank: Three ways to safeguard against application layer vulnerabilities
- Security Bug in Icecast Puts Online Radio Stations At Risk
- Researchers discover new zero-day vulnerability in EDGE browser
- Fake malicious @RSAsecurity #SecurID malware in pre-release state on @GooglePlay:
- Currently gathering information (profiling) the mobile device it is installed
- Video analysis of Android banking Trojan found on Google Play (Red Alert 2)
- Recently there have been a lot of packed Android malware around, so I decided to write a blog-post on how
CRIME
- Week in review: Volume of Australian data breaches continues unabated
- Original Mirai botnet creator hit with hefty financial sentence
- Fake Elon Musk Twitter Bitcoin Scam Earned 180K in One Day
- Australian shipbuilder Austal hit by data breach
- Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
- Equifax Set to Share More PII with Experian
- Over 80,000 Facebook User Accounts Compromised
- Cybercriminals Using SMS Phishing Attack to Rob Cardless ATM
- Persian Stalker pillages Iranian users of Instagram and Telegram
- Phishing attacks up by 297 percent across eCommerce in Q3 2018
- The Ultimate Guide to Bug Bounty Platforms
POLITICS
- Google dorks were the root cause of a catastrophic compromise of CIA’s communications
- Kemp Investigates Dems, Not the Reported Vulnerability
- Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
- "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me
TRANSNATIONAL / UNKNOWN
- Who’s In Your Online Shopping Cart?
- Security Affairs newsletter Round 187 – News of the week
CHINA
Nil
INDIA
Nil
NORTH KOREA
- WireGuard has not been merged into the Linux kernel mainline
PAKISTAN
Nil
VIETNAM
Nil
IRAN
Nil
IRAQ
Nil
LEBANON
Nil
PALESTINE
Nil
SAUDI ARABIA
Nil
SYRIA
Nil
TURKEY
Nil
UNITED ARAB EMIRATES
Nil
YEMEN
Nil
RUSSIA
Nil
SERBIA
Nil
UKRAINE
Nil
ASIA
- Security Affairs newsletter Round 187 – News of the week
- Kraken ransomware 2.0 is available through the RaaS model
- Google logins make JavaScript mandatory, Huawei China spy shock, Mac malware, Iran gets new Stuxnet, and more
- Bluetooth chip has serious security vulnerabilities that widely affect smart electronic products
WORLD
- Who’s In Your Online Shopping Cart?
- PortSmash flaw in Hyper-Threading CPU could allow sensitive data theft
- Security Affairs newsletter Round 187 – News of the week
- Kraken ransomware 2.0 is available through the RaaS model
- Targeted SamSam Ransomware Attacks Continues to Breaking & Lock 67 Different Organizations Network
- Bluetooth chip has serious security vulnerabilities that widely affect smart electronic products
- Intel processors are vulnerable to new PortSmash side-channel vulnerability
- WireGuard has not been merged into the Linux kernel mainline
ATTACKS
- PortSmash flaw in Hyper-Threading CPU could allow sensitive data theft
- Beware!! Cyber Criminals Stealing Cash From Cardless ATM Using SMS Phishing Attack
THREATS
- Week in review: Bleedingbit, nastiest malware of 2018, Cisco security appliances under attack
- Vulnerability Scanners 101
- PortSmash flaw in Hyper-Threading CPU could allow sensitive data theft
- New Microsoft Edge Browser Zero-Day RCE Exploit in the Works
- Kraken ransomware 2.0 is available through the RaaS model
- Google logins make JavaScript mandatory, Huawei China spy shock, Mac malware, Iran gets new Stuxnet, and more
- Targeted SamSam Ransomware Attacks Continues to Breaking & Lock 67 Different Organizations Network
- What should you do when you realize you've click on a malicious link?
- Researchers recently found vulnerabilities within the robot controllers from @Universal_Robot. Learn what these #robot controllers are used for and how
- Why Vulnerability Management Does Not Work
- Bluetooth chip has serious security vulnerabilities that widely affect smart electronic products
- Intel processors are vulnerable to new PortSmash side-channel vulnerability
- New Intel CPU Flaw Exploits Hyper-Threading to Steal Encrypted Data
CRIME
- PortSmash flaw in Hyper-Threading CPU could allow sensitive data theft
- Security Affairs newsletter Round 187 – News of the week
- Kraken ransomware 2.0 is available through the RaaS model
POLITICS
- PortSmash flaw in Hyper-Threading CPU could allow sensitive data theft
- Google logins make JavaScript mandatory, Huawei China spy shock, Mac malware, Iran gets new Stuxnet, and more
- Bluetooth chip has serious security vulnerabilities that widely affect smart electronic products
DATA BREACH & DATA LOSS
- Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
- Business Email Compromise: Must-Have Defenses
- Radisson Suffers Global Loyalty Program Data Breach
- Android Devices Remain Unsecured, While Two Botnets Fight For Dominance
- Discover how #NetSpectre attacks leak data remotely via side-channels with Michael Cobb of @thehairyITdog.
DENIAL-OF-SERVICE
Nil
MALVERTISING
Nil
PHISHING
- New Trickbot Malware Steal Password & Other Sensitive Data From Microsoft Outlook,Chrome,Firefox, IE, Edge
WEB DEFACEMENT
Nil
BOTNET
- "The resurgence of #VPNFilter #botnet appears to be limited to the Ukraine, but given the ease of infecting targeted systems,
RANSOMWARE
- SamSam ransomware continues to make damages. Call it targeted Ransomware
- #SamSam #ransomware targeted 67 organizations in 2018, according to @symantec research. By @MaddieBacon11
- #Kraken #ransomware as a service is getting more popular after being bundled into the Fallout #ExploitKit and getting more update
- The Week in Ransomware - November 2nd 2018 - RaaS, DiskCryptor, & More
CRYPTOMINING & CRYPTOCURRENCIES
- Blockchain as a Tool for Cybersecurity
- #Kraken #ransomware as a service is getting more popular after being bundled into the Fallout #ExploitKit and getting more update
MALWARE
- Web domain owners paid EasyDNS to cloak their contact info from sight. It was blabbed via public Whois anyway
- BBC micro:bit vendor Kitronik says customers' deets nicked, fingers Magecart malware
- Gotta love how Robert Tappan Morris describes his Morris worm background in his bio: ”In 1988 his discovery of buffer
- New Trickbot Malware Steal Password & Other Sensitive Data From Microsoft Outlook,Chrome,Firefox, IE, Edge
EXPLOIT
- Intel CPUs Fall To New Hyperthreading Exploit That Pilfers Keys
VULNERABILITY
- The Responsible Disclosure of Software Vulnerabilities in the Nutshell
- .@Siemens central plant clocks were affected by six SICLOCK flaws, three have been rated "critical." Learn what these SICLOCK flaws
- Six flaws were recently found in @Siemens SICLOCK central plant clocks. Learn what these clocks do, which clocks were infected
- Researchers say #Bleedingbit vulnerabilities could allow #RemoteCodeExecution on wireless access points, medical devices and any other products using the affected
ASIA
- Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
- SamSam ransomware continues to make damages. Call it targeted Ransomware
WORLD
- BBC micro:bit vendor Kitronik says customers' deets nicked, fingers Magecart malware
- Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
- SamSam ransomware continues to make damages. Call it targeted Ransomware
- "The resurgence of #VPNFilter #botnet appears to be limited to the Ukraine, but given the ease of infecting targeted systems,
ATTACKS
- Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
- Business Email Compromise: Must-Have Defenses
- Radisson Suffers Global Loyalty Program Data Breach
- Android Devices Remain Unsecured, While Two Botnets Fight For Dominance
- Discover how #NetSpectre attacks leak data remotely via side-channels with Michael Cobb of @thehairyITdog.
- New Trickbot Malware Steal Password & Other Sensitive Data From Microsoft Outlook,Chrome,Firefox, IE, Edge
THREATS
- The Responsible Disclosure of Software Vulnerabilities in the Nutshell
- Web domain owners paid EasyDNS to cloak their contact info from sight. It was blabbed via public Whois anyway
- BBC micro:bit vendor Kitronik says customers' deets nicked, fingers Magecart malware
- Blockchain as a Tool for Cybersecurity
- .@Siemens central plant clocks were affected by six SICLOCK flaws, three have been rated "critical." Learn what these SICLOCK flaws
- Six flaws were recently found in @Siemens SICLOCK central plant clocks. Learn what these clocks do, which clocks were infected
- SamSam ransomware continues to make damages. Call it targeted Ransomware
- Gotta love how Robert Tappan Morris describes his Morris worm background in his bio: ”In 1988 his discovery of buffer
- New Trickbot Malware Steal Password & Other Sensitive Data From Microsoft Outlook,Chrome,Firefox, IE, Edge
- Researchers say #Bleedingbit vulnerabilities could allow #RemoteCodeExecution on wireless access points, medical devices and any other products using the affected
- #SamSam #ransomware targeted 67 organizations in 2018, according to @symantec research. By @MaddieBacon11
- #Kraken #ransomware as a service is getting more popular after being bundled into the Fallout #ExploitKit and getting more update
- The Week in Ransomware - November 2nd 2018 - RaaS, DiskCryptor, & More
CRIME
- Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
- Business Email Compromise: Must-Have Defenses
- Radisson Suffers Global Loyalty Program Data Breach
POLITICS
- Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
- Android Devices Remain Unsecured, While Two Botnets Fight For Dominance
- SamSam ransomware continues to make damages. Call it targeted Ransomware
DATA BREACH & DATA LOSS
- Two botnets are fighting over control of thousands of unsecured Android devices
- Joshua Adam Schulte, ex CIA employee, accused of continuing leaks from prison
- Spam campaign targets Exodus Mac Users
- 120 Million Facebook Accounts Compromised, Private Messages of 81,000 for Sale
- #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
- 85 Millions of voter records available for sale ahead of the 2018 US Midterm Elections
- ePHI of 8,000 Patients Exposed in Health Plan Breach
- Facebook has experienced a number of security-related issues lately, but it doesn't appear to be at fault for the leak
- This Week in Security News: Spam Campaigns and Vulnerable Infrastructures
- Russian hackers compromise 120 million Facebook accounts; private messages on sale online
- SamSam ransomware campaigns continue to target U.S. in 2018
- Feds Accuse Ex-CIA Employee of Continuing Leaks From Prison
- Radisson Hotel Group Hit by Data Breach
- Spam campaign targets Exodus Mac Users
- Shipbuilder, defense contractor Austal reveals data breach
- Data theft at Radisson Hotel Group
- 85 million voter records on sale
- Iran has become victim of a cyberattack campaign
- Apache HBase 2.1.1 release, distributed database
- FIFA admits hack and braces for new leaks
DENIAL-OF-SERVICE
- ThreatList: Fewer Big DDoS Attacks in Q3, Overall Rate Holds Steady
- Bushido Botnet and DDoS-for-Hire
MALVERTISING
Nil
PHISHING
- SMS Phishing + Cardless ATM = Profit
- "While most phishing attacks on desktop and laptop computers come via email... a mobile device attack vector can be in
- #Phishing targets data that lives outside your enterprise perimeter—putting your entire enterprise at risk. Learn how post-perimeter security enables you
- How to password protect a folder or file in Windows | Avast
- Just half of Fortune 500 companies have installed DMARC, a tool that guards against email phishing scams, according to new
- Multiple #phishing pages on multiple domains targeting Canadian citizens posing as Canadian Revenue Agency, Interac, and others
192.99.86.132 (@OVH)
cc: @cybercentre_ca
- YAPBS – Yet Another Password Breach Scam
WEB DEFACEMENT
Nil
BOTNET
- Shellbot Variant Used in New Botnet, Spreads Using IoT and Linux Vulnerabilities
- Bushido Botnet and DDoS-for-Hire
- Outlaw Hacking Group Using Command Injection Flow To Attack Organizations Network using Botnet via C&C Server
- BCMUPnP_Hunter: 100,000-node botnet is abusing routers for spam
- 'Outlaw' threat actor uses Shellbot variant to form new botnet
RANSOMWARE
- New Ransomware using DiskCryptor With Custom Ransom Message
- #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
- Researchers found #Kraken #ransomware has become more popular after being packaged in the Fallout #ExploitKit and becoming part of an
- SamSam ransomware campaigns continue to target U.S. in 2018
- Kraken ransomware gets packaged into Fallout EK
- Giant ransomware bundle threatens to make malware attacks easier for crooks
CRYPTOMINING & CRYPTOCURRENCIES
- Researchers found #Kraken #ransomware has become more popular after being packaged in the Fallout #ExploitKit and becoming part of an
- Kraken ransomware gets packaged into Fallout EK
- Blockwatch: The aeternity Blockchain
- Trading with cryptocurrencies without losing self control
- EY launches the world's first secure private transactions over the Ethereum public blockchain
- Another packed room for .@idefense analyst Mei Nelson discussing China and cryptocurrency. #codeblue_jp @AccentureSecure @AccentureJPNews
MALWARE
- Facebook Blames Malicious Extensions in Breach of 81K Private Messages
- The day computer security turned real: The Morris Worm turns 30
- Worst Malware and Threat Actors of 2018
- Adversaries Distribute Malware Via Rarely Used Extensions
- Can you spot a malicious email?
Take the quiz at
- Antimalware Day: The evolution of malicious code
- Outlaw Hacking Group Using Command Injection Flow To Attack Organizations Network using Botnet via C&C Server
- Beware this malware: it can even survive operating systems being reinstalled
- Emotet Trojan Changes Tactics…Again
- Giant ransomware bundle threatens to make malware attacks easier for crooks
- If you think you have been hacked or got #malware installed, disconnect the internet, leave your device running and connected
- U.S. Geological Survey Network got Infected with Malware
- Search for “Installing Chrome” on Bing can lead to malicious content
- Previous malware attacks: When more than 7,5000 of the #Mikrotik routes were reportedly being spied on by attackers
EXPLOIT
- Kraken ransomware gets packaged into Fallout EK
- How to Perform Manual SQL Injection With Double quotes Error Based String Method
- Researchers recently found vulnerabilities in #robot controllers from @Universal_Robot. Learn what these robot controllers do and how #ThreatActors exploit these
VULNERABILITY
- Shellbot Variant Used in New Botnet, Spreads Using IoT and Linux Vulnerabilities
- Cisco Security Appliance Zero-Day Found Actively Exploited in the Wild
- BLEEDINGBIT – Two Zero Day Vulnerabilities Affecting Wireless Access Point Bluetooth Chips
- Hackers actively exploiting vulnerabilities in Cisco security appliances
- Cisco fixed the high-risk security vulnerabilities in variant products
- Bluetooth Bugs Speak to Lack of Security in DevOps
- Sauter Quickly Patches Flaw in Building Automation Software
- Bleedingbit vulnerabilities put Wi-Fi access points at risk
- Test IO introduces Bug Fix Confirmation, leveraging network of software testers to verify bug fixes
- Flaw in Sophos HitmanPro.Alert could enable hackers to gain privileges over systems
- Intel CPUs impacted by new PortSmash side-channel vulnerability
- CISCO warn of a zero-day DoS flaw that is being actively exploited in attacks
- Systemd Vulnerability In Linux Could Trigger Remote Attacks And System Crashes
- .@ArmisSecurity researchers discovered two chip-level #Bluetooth vulnerabilities -- dubbed #Bleedingbit -- that could allow pseudo #RemoteCodeExecution on wireless access points.
- Cisco Reports SIP Inspection Vulnerability
- Mozilla exorcises five bugs on Halloween
- Researchers recently found vulnerabilities in #robot controllers from @Universal_Robot. Learn what these robot controllers do and how #ThreatActors exploit these
- BLEEDINGBIT – Two Bluetooth Chip-level Vulnerabilities Affected Millions of Enterprise Wi-Fi Access Point Devices
- GNOME 3.30.2 released: bugs fix
- Attackers Use Zero-Day That Can Restart Cisco Security Appliances
ASIA
- Shellbot Variant Used in New Botnet, Spreads Using IoT and Linux Vulnerabilities
- Stuxnet Returns, Striking Iran with New Variant
- This Week in Security News: Spam Campaigns and Vulnerable Infrastructures
- Outlaw Hacking Group Using Command Injection Flow To Attack Organizations Network using Botnet via C&C Server
- BCMUPnP_Hunter: 100,000-node botnet is abusing routers for spam
- Iran has become victim of a cyberattack campaign
- Another packed room for .@idefense analyst Mei Nelson discussing China and cryptocurrency. #codeblue_jp @AccentureSecure @AccentureJPNews
OCEANIA
Nil
NORTH AMERICA
- Joshua Adam Schulte, ex CIA employee, accused of continuing leaks from prison
- New Data Affirms Cyber Threat for Industrial Control Systems
- #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
- 85 Millions of voter records available for sale ahead of the 2018 US Midterm Elections
- SMS Phishing + Cardless ATM = Profit
- Stuxnet Returns, Striking Iran with New Variant
- Bluetooth Bugs Speak to Lack of Security in DevOps
- This Week in Security News: Spam Campaigns and Vulnerable Infrastructures
- Russian hackers compromise 120 million Facebook accounts; private messages on sale online
- SamSam ransomware campaigns continue to target U.S. in 2018
- BCMUPnP_Hunter: 100,000-node botnet is abusing routers for spam
- Multiple #phishing pages on multiple domains targeting Canadian citizens posing as Canadian Revenue Agency, Interac, and others
192.99.86.132 (@OVH)
cc: @cybercentre_ca
- U.S. Geological Survey Network got Infected with Malware
- 85 million voter records on sale
- Iran has become victim of a cyberattack campaign
- EY launches the world's first secure private transactions over the Ethereum public blockchain
SOUTH AMERICA
- Russian hackers compromise 120 million Facebook accounts; private messages on sale online
EUROPE
- Shellbot Variant Used in New Botnet, Spreads Using IoT and Linux Vulnerabilities
- Magecart cybergang targeting e-commerce credit card data
- 120 Million Facebook Accounts Compromised, Private Messages of 81,000 for Sale
- Stuxnet Returns, Striking Iran with New Variant
- Sauter Quickly Patches Flaw in Building Automation Software
- This Week in Security News: Spam Campaigns and Vulnerable Infrastructures
- Russian hackers compromise 120 million Facebook accounts; private messages on sale online
- Beware this malware: it can even survive operating systems being reinstalled
- Magecart claims fresh victim in electronics kit seller Kitronik
- Iran has become victim of a cyberattack campaign
- EY launches the world's first secure private transactions over the Ethereum public blockchain
AFRICA
Nil
