APT report for 2018-11-05

TRANSNATIONAL / UNKNOWN

1. Magecart Infiltrates U.K. Online Retailer Kitronik POS
2. Magecart Strikes Again, and Kitronik Is Latest Victim

CHINA

Nil

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

3. Persian Stalker pillages Iranian users of Instagram and Telegram

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

4. OPNids Integrates Machine Learning Into Open-Source Suricata IDS

SERBIA

Nil

UKRAINE

5. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem

Platform report for 2018-11-05

WINDOWS

1. Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
2. Shellbot Botnet Targets Linux, Android Devices
3. Inception Attackers Target Europe with Year-old Office Vulnerability
4. Android Rat – TheFatRat to Hack and Gain access to Targeted Android Phone

LINUX

5. Shellbot Botnet Targets Linux, Android Devices
6. Android Rat – TheFatRat to Hack and Gain access to Targeted Android Phone

UNIX

Nil

ANDROID

7. Shellbot Botnet Targets Linux, Android Devices
8. Blockhead makes blockchain easy for developers
9. Persian Stalker pillages Iranian users of Instagram and Telegram
10. Android Rat – TheFatRat to Hack and Gain access to Targeted Android Phone
11. Video analysis of Android banking Trojan found on Google Play (Red Alert 2)
12. Recently there have been a lot of packed Android malware around, so I decided to write a blog-post on how

IOS

13. Persian Stalker pillages Iranian users of Instagram and Telegram
14. Apple Patched Multiple XNU Kernel Vulnerabilities In MacOS And iOS

MACOS

15. Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
16. Apple Patched Multiple XNU Kernel Vulnerabilities In MacOS And iOS

Threat report for 2018-11-05

DATA BREACH & DATA LOSS

1. Week in review: Volume of Australian data breaches continues unabated
2. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
3. Your personal data is widely available to hackers
4. This Tool Shows Exposed Cameras Around Your Neighborhood
5. New Side-Channel Vulnerability Leaks Sensitive Data From Intel Chips
6. Akado Telecom Accidentally Leaks Customers' Names, Phone Numbers, And Addresses
7. Australian shipbuilder Austal hit by data breach
8. Equifax Set to Share More PII with Experian
9. #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
10. National biometric database could be on the way (and in private hands)
11. Over 80,000 Facebook User Accounts Compromised
12. "If an organization created #DMARC records for the first time, it would encounter syntax and content issues -- one of
13. Kemp Cites Voter Database Hacking Attempt, Gives No Evidence
14. "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me
15. "Shipbuilder Austal Ltd said on Thursday its Australian business had detected and responded to a data breach"

DENIAL-OF-SERVICE

16. What were the DDoS numbers for Q2 & Q3 2018?
17. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3

MALVERTISING

Nil

PHISHING

18. Almost 300 Percent Increase in eCommerce Phishing Attacks in Q3 2018
19. Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
20. How to use Firefox Master Password.
21. Why you should be using a password manager
22. How did @Google eliminate successful #PhishingAttacks? Learn how employees used U2F authentication and physical #SecurityKeys to defend against phishing from
23. Password Constraints and Their Unintended Security Consequences
24. Cybercriminals Using SMS Phishing Attack to Rob Cardless ATM
25. How can U2F authentication end phishing attacks?
26. Phishing attacks up by 297 percent across eCommerce in Q3 2018

WEB DEFACEMENT

Nil

BOTNET

27. Shellbot Botnet Targets Linux, Android Devices
28. Original Mirai botnet creator hit with hefty financial sentence

RANSOMWARE

29. #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
30. Researchers found #Kraken #ransomware has become more popular after being packaged in the Fallout #ExploitKit and becoming part of an

CRYPTOMINING & CRYPTOCURRENCIES

31. No, blockchain isn't the answer to our voting system woes
32. Fake Elon Musk Twitter Bitcoin Scam Earned 180K in One Day
33. Another wave of Elon Musk bitcoin scams spread by verified Twitter accounts
34. Researchers found #Kraken #ransomware has become more popular after being packaged in the Fallout #ExploitKit and becoming part of an
35. Blockhead makes blockchain easy for developers
36. The building blocks of blockchain-based digital identity

MALWARE

37. Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
38. Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
39. Malware of the 1980s: Looking back at the Brain Virus and the Morris Worm
40. Why malware attacks should no longer be a problem for businesses
41. Android Rat – TheFatRat to Hack and Gain access to Targeted Android Phone
42. Scammers Ride on Popular Vote411 Voter Info Site to Push Scareware Alerts
43. How to Get Rid of Cortana Runtime Broker CPU Miner Virus
44. Fake malicious @RSAsecurity #SecurID malware in pre-release state on @GooglePlay: - Currently gathering information (profiling) the mobile device it is installed
45. Video analysis of Android banking Trojan found on Google Play (Red Alert 2)
46. Recently there have been a lot of packed Android malware around, so I decided to write a blog-post on how

EXPLOIT

47. PoC Available for Microsoft Edge Zero-Day RCE, Exploit Under Development
48. Security researchers exploit Intel hyperthreading flaw to break encryption

VULNERABILITY

49. Apache warns Struts 2.3 is using a library with a two year old critical flaw
50. Online Radio Stations at Risk from Icecast Flaw
51. PoC Available for Microsoft Edge Zero-Day RCE, Exploit Under Development
52. Flaws In Self-Encrypting SSDs Let Attackers Bypass Encryption
53. New Side-Channel Vulnerability Leaks Sensitive Data From Intel Chips
54. Why Are Deserialization Vulnerabilities So Popular?
55. Flaws in self-encrypting SSDs let attackers bypass disk encryption
56. [SingCERT] Technical Advisory on Vulnerabilities in Bluetooth Low Energy Chips by Texas Instruments (CVE-2018-16986 and CVE-2018-7080)
57. Inception Attackers Target Europe with Year-old Office Vulnerability
58. Kemp Investigates Dems, Not the Reported Vulnerability
59. Flaws in Popular SSD Drives Bypass Hardware Disk Encryption
60. Flaw in Icecast streaming media server allows to take off online Radio Stations
61. Security researchers exploit Intel hyperthreading flaw to break encryption
62. .@ArmisSecurity researchers discovered two chip-level #Bluetooth vulnerabilities -- dubbed #Bleedingbit -- that could allow pseudo #RemoteCodeExecution on wireless access points.
63. Vulnerabilities’ CVSS scores soon to be assigned by AI
64. Cisco Products Affected By A Zero-Day SIP Inspection Vulnerability Exploited In The Wild
65. High severity XML external entity flaw affects Sauter building automation product
66. Security firm Armis has discovered two vulnerabilities in Bluetooth Chips from several networking industry leaders.
67. Critical 'Bleedingbit' flaws found in microcontrollers used by Wi-Fi access points
68. Mozilla Patched Multiple Security Vulnerabilities in Thunderbird 60.3
69. Apple Patched Multiple XNU Kernel Vulnerabilities In MacOS And iOS
70. Companies implementing DevSecOps address vulnerabilities faster than others
71. The Ultimate Guide to Bug Bounty Platforms
72. PortSmash – A New Side Channel Vulnerability in SMT/Hyper-Threading That Allows Attackers To Steal Sensitive Data
73. Security Think Tank: Three ways to safeguard against application layer vulnerabilities
74. Security Bug in Icecast Puts Online Radio Stations At Risk
75. Researchers discover new zero-day vulnerability in EDGE browser

Region brief for 2018-11-05

ASIA

1. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
2. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
3. Persian Stalker pillages Iranian users of Instagram and Telegram
4. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3

OCEANIA

5. Week in review: Volume of Australian data breaches continues unabated
6. Australian shipbuilder Austal hit by data breach
7. Persian Stalker pillages Iranian users of Instagram and Telegram
8. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3
9. "Shipbuilder Austal Ltd said on Thursday its Australian business had detected and responded to a data breach"

NORTH AMERICA

10. What were the DDoS numbers for Q2 & Q3 2018?
11. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
12. Your personal data is widely available to hackers
13. Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
14. Magecart Strikes Again, and Kitronik Is Latest Victim
15. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
16. Equifax Set to Share More PII with Experian
17. #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
18. Over 80,000 Facebook User Accounts Compromised
19. Why malware attacks should no longer be a problem for businesses
20. Critical 'Bleedingbit' flaws found in microcontrollers used by Wi-Fi access points
21. Persian Stalker pillages Iranian users of Instagram and Telegram
22. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3
23. "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me
24. "Shipbuilder Austal Ltd said on Thursday its Australian business had detected and responded to a data breach"

SOUTH AMERICA

25. Over 80,000 Facebook User Accounts Compromised

EUROPE

26. Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
27. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
28. Magecart Infiltrates U.K. Online Retailer Kitronik POS
29. Akado Telecom Accidentally Leaks Customers' Names, Phone Numbers, And Addresses
30. Magecart Strikes Again, and Kitronik Is Latest Victim
31. Inception Attackers Target Europe with Year-old Office Vulnerability
32. Kemp Investigates Dems, Not the Reported Vulnerability
33. Over 80,000 Facebook User Accounts Compromised
34. Persian Stalker pillages Iranian users of Instagram and Telegram
35. Kemp Cites Voter Database Hacking Attempt, Gives No Evidence
36. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3

AFRICA

37. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem

Sector brief for 2018-11-05

HEALTHCARE

Nil

TRANSPORT

Nil

BANKING & FINANCE

1. Original Mirai botnet creator hit with hefty financial sentence
2. Magecart Strikes Again, and Kitronik Is Latest Victim
3. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
4. Over 80,000 Facebook User Accounts Compromised
5. Why malware attacks should no longer be a problem for businesses
6. Cybercriminals Using SMS Phishing Attack to Rob Cardless ATM
7. Persian Stalker pillages Iranian users of Instagram and Telegram
8. Phishing attacks up by 297 percent across eCommerce in Q3 2018
9. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3
10. Video analysis of Android banking Trojan found on Google Play (Red Alert 2)

INFORMATION & TELECOMMUNICATION

11. PoC Available for Microsoft Edge Zero-Day RCE, Exploit Under Development
12. Original Mirai botnet creator hit with hefty financial sentence
13. Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
14. Fake Elon Musk Twitter Bitcoin Scam Earned 180K in One Day
15. Another wave of Elon Musk bitcoin scams spread by verified Twitter accounts
16. Inception Attackers Target Europe with Year-old Office Vulnerability
17. Flaw in Icecast streaming media server allows to take off online Radio Stations
18. Security firm Armis has discovered two vulnerabilities in Bluetooth Chips from several networking industry leaders.
19. Over 80,000 Facebook User Accounts Compromised
20. Persian Stalker pillages Iranian users of Instagram and Telegram
21. Phishing attacks up by 297 percent across eCommerce in Q3 2018
22. The Ultimate Guide to Bug Bounty Platforms
23. Researchers discover new zero-day vulnerability in EDGE browser
24. Fake malicious @RSAsecurity #SecurID malware in pre-release state on @GooglePlay: - Currently gathering information (profiling) the mobile device it is installed
25. "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me

FOOD

Nil

WATER

Nil

ENERGY

26. [SingCERT] Technical Advisory on Vulnerabilities in Bluetooth Low Energy Chips by Texas Instruments (CVE-2018-16986 and CVE-2018-7080)
27. Critical 'Bleedingbit' flaws found in microcontrollers used by Wi-Fi access points

GOVERNMENT & PUBLIC SERVICE

28. No, blockchain isn't the answer to our voting system woes
29. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
30. Akado Telecom Accidentally Leaks Customers' Names, Phone Numbers, And Addresses
31. Inception Attackers Target Europe with Year-old Office Vulnerability
32. Kemp Investigates Dems, Not the Reported Vulnerability
33. Persian Stalker pillages Iranian users of Instagram and Telegram
34. Phishing attacks up by 297 percent across eCommerce in Q3 2018
35. Kemp Cites Voter Database Hacking Attempt, Gives No Evidence
36. "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me

Daily brief for 2018-11-05

ASIA

1. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
2. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
3. Persian Stalker pillages Iranian users of Instagram and Telegram
4. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3

WORLD

5. Week in review: Volume of Australian data breaches continues unabated
6. Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
7. What were the DDoS numbers for Q2 & Q3 2018?
8. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
9. Your personal data is widely available to hackers
10. Magecart Infiltrates U.K. Online Retailer Kitronik POS
11. Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
12. Akado Telecom Accidentally Leaks Customers' Names, Phone Numbers, And Addresses
13. Magecart Strikes Again, and Kitronik Is Latest Victim
14. Inception Attackers Target Europe with Year-old Office Vulnerability
15. Kemp Investigates Dems, Not the Reported Vulnerability
16. Australian shipbuilder Austal hit by data breach
17. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
18. Equifax Set to Share More PII with Experian
19. #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
20. Over 80,000 Facebook User Accounts Compromised
21. Why malware attacks should no longer be a problem for businesses
22. Critical 'Bleedingbit' flaws found in microcontrollers used by Wi-Fi access points
23. Persian Stalker pillages Iranian users of Instagram and Telegram
24. Kemp Cites Voter Database Hacking Attempt, Gives No Evidence
25. A cybersecurity lesson: educational sites suffer rise in DDoS attacks in Q3
26. "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me
27. "Shipbuilder Austal Ltd said on Thursday its Australian business had detected and responded to a data breach"

ATTACKS

28. Week in review: Volume of Australian data breaches continues unabated
29. Almost 300 Percent Increase in eCommerce Phishing Attacks in Q3 2018
30. Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
31. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
32. Your personal data is widely available to hackers
33. This Tool Shows Exposed Cameras Around Your Neighborhood
34. New Side-Channel Vulnerability Leaks Sensitive Data From Intel Chips
35. How to use Firefox Master Password.
36. Why you should be using a password manager
37. Akado Telecom Accidentally Leaks Customers' Names, Phone Numbers, And Addresses
38. Australian shipbuilder Austal hit by data breach
39. How did @Google eliminate successful #PhishingAttacks? Learn how employees used U2F authentication and physical #SecurityKeys to defend against phishing from
40. Password Constraints and Their Unintended Security Consequences
41. Equifax Set to Share More PII with Experian
42. #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
43. National biometric database could be on the way (and in private hands)
44. Over 80,000 Facebook User Accounts Compromised
45. Cybercriminals Using SMS Phishing Attack to Rob Cardless ATM
46. How can U2F authentication end phishing attacks?
47. Phishing attacks up by 297 percent across eCommerce in Q3 2018
48. "If an organization created #DMARC records for the first time, it would encounter syntax and content issues -- one of
49. Kemp Cites Voter Database Hacking Attempt, Gives No Evidence
50. "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me
51. "Shipbuilder Austal Ltd said on Thursday its Australian business had detected and responded to a data breach"

THREATS

52. Apache warns Struts 2.3 is using a library with a two year old critical flaw
53. Inception Group Uses POWERSHOWER Backdoor in Two-Stage Spear Phishing Attacks
54. Online Radio Stations at Risk from Icecast Flaw
55. No, blockchain isn't the answer to our voting system woes
56. PoC Available for Microsoft Edge Zero-Day RCE, Exploit Under Development
57. Flaws In Self-Encrypting SSDs Let Attackers Bypass Encryption
58. New Side-Channel Vulnerability Leaks Sensitive Data From Intel Chips
59. Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
60. Why Are Deserialization Vulnerabilities So Popular?
61. Fake Elon Musk Twitter Bitcoin Scam Earned 180K in One Day
62. Another wave of Elon Musk bitcoin scams spread by verified Twitter accounts
63. Flaws in self-encrypting SSDs let attackers bypass disk encryption
64. [SingCERT] Technical Advisory on Vulnerabilities in Bluetooth Low Energy Chips by Texas Instruments (CVE-2018-16986 and CVE-2018-7080)
65. Inception Attackers Target Europe with Year-old Office Vulnerability
66. Malware of the 1980s: Looking back at the Brain Virus and the Morris Worm
67. Kemp Investigates Dems, Not the Reported Vulnerability
68. Flaws in Popular SSD Drives Bypass Hardware Disk Encryption
69. Flaw in Icecast streaming media server allows to take off online Radio Stations
70. Security researchers exploit Intel hyperthreading flaw to break encryption
71. .@ArmisSecurity researchers discovered two chip-level #Bluetooth vulnerabilities -- dubbed #Bleedingbit -- that could allow pseudo #RemoteCodeExecution on wireless access points.
72. Vulnerabilities’ CVSS scores soon to be assigned by AI
73. Cisco Products Affected By A Zero-Day SIP Inspection Vulnerability Exploited In The Wild
74. #SamSam #ransomware continues to be a thorn in the side of organizations in the U.S. with targeted ransomware campaigns continuing,
75. Researchers found #Kraken #ransomware has become more popular after being packaged in the Fallout #ExploitKit and becoming part of an
76. High severity XML external entity flaw affects Sauter building automation product
77. Security firm Armis has discovered two vulnerabilities in Bluetooth Chips from several networking industry leaders.
78. Blockhead makes blockchain easy for developers
79. Why malware attacks should no longer be a problem for businesses
80. Critical 'Bleedingbit' flaws found in microcontrollers used by Wi-Fi access points
81. Mozilla Patched Multiple Security Vulnerabilities in Thunderbird 60.3
82. Android Rat – TheFatRat to Hack and Gain access to Targeted Android Phone
83. Apple Patched Multiple XNU Kernel Vulnerabilities In MacOS And iOS
84. Scammers Ride on Popular Vote411 Voter Info Site to Push Scareware Alerts
85. The building blocks of blockchain-based digital identity
86. Companies implementing DevSecOps address vulnerabilities faster than others
87. How to Get Rid of Cortana Runtime Broker CPU Miner Virus
88. The Ultimate Guide to Bug Bounty Platforms
89. PortSmash – A New Side Channel Vulnerability in SMT/Hyper-Threading That Allows Attackers To Steal Sensitive Data
90. Security Think Tank: Three ways to safeguard against application layer vulnerabilities
91. Security Bug in Icecast Puts Online Radio Stations At Risk
92. Researchers discover new zero-day vulnerability in EDGE browser
93. Fake malicious @RSAsecurity #SecurID malware in pre-release state on @GooglePlay: - Currently gathering information (profiling) the mobile device it is installed
94. Video analysis of Android banking Trojan found on Google Play (Red Alert 2)
95. Recently there have been a lot of packed Android malware around, so I decided to write a blog-post on how

CRIME

96. Week in review: Volume of Australian data breaches continues unabated
97. Original Mirai botnet creator hit with hefty financial sentence
98. Fake Elon Musk Twitter Bitcoin Scam Earned 180K in One Day
99. Australian shipbuilder Austal hit by data breach
100. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
101. Equifax Set to Share More PII with Experian
102. Over 80,000 Facebook User Accounts Compromised
103. Cybercriminals Using SMS Phishing Attack to Rob Cardless ATM
104. Persian Stalker pillages Iranian users of Instagram and Telegram
105. Phishing attacks up by 297 percent across eCommerce in Q3 2018
106. The Ultimate Guide to Bug Bounty Platforms

POLITICS

107. Google dorks were the root cause of a catastrophic compromise of CIA’s communications
108. Kemp Investigates Dems, Not the Reported Vulnerability
109. Cyber-Attacks: How to Stop a Multibillion-Dollar Problem
110. "A lot of people in Congress are concerned that the Facebook influence campaigns are about the midterms, but to me

APT report for 2018-11-04

TRANSNATIONAL / UNKNOWN

1. Who’s In Your Online Shopping Cart?
2. Security Affairs newsletter Round 187 – News of the week

CHINA

Nil

INDIA

Nil

NORTH KOREA

3. WireGuard has not been merged into the Linux kernel mainline

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

Nil

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-11-04

WINDOWS

1. Security Affairs newsletter Round 187 – News of the week

LINUX

2. Security Affairs newsletter Round 187 – News of the week
3. WireGuard has not been merged into the Linux kernel mainline

UNIX

Nil

ANDROID

Nil

IOS

4. Security Affairs newsletter Round 187 – News of the week

MACOS

Nil

Threat report for 2018-11-04

DATA BREACH & DATA LOSS

1. PortSmash flaw in Hyper-Threading CPU could allow sensitive data theft

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

2. Beware!! Cyber Criminals Stealing Cash From Cardless ATM Using SMS Phishing Attack

WEB DEFACEMENT

Nil

BOTNET

Nil

RANSOMWARE

3. Kraken ransomware 2.0 is available through the RaaS model
4. Targeted SamSam Ransomware Attacks Continues to Breaking & Lock 67 Different Organizations Network

CRYPTOMINING & CRYPTOCURRENCIES

5. Kraken ransomware 2.0 is available through the RaaS model

MALWARE

6. Week in review: Bleedingbit, nastiest malware of 2018, Cisco security appliances under attack
7. Google logins make JavaScript mandatory, Huawei China spy shock, Mac malware, Iran gets new Stuxnet, and more
8. What should you do when you realize you've click on a malicious link?

EXPLOIT

9. New Microsoft Edge Browser Zero-Day RCE Exploit in the Works

VULNERABILITY

10. Vulnerability Scanners 101
11. PortSmash flaw in Hyper-Threading CPU could allow sensitive data theft
12. New Microsoft Edge Browser Zero-Day RCE Exploit in the Works
13. Researchers recently found vulnerabilities within the robot controllers from @Universal_Robot. Learn what these #robot controllers are used for and how
14. Why Vulnerability Management Does Not Work
15. Bluetooth chip has serious security vulnerabilities that widely affect smart electronic products
16. Intel processors are vulnerable to new PortSmash side-channel vulnerability
17. New Intel CPU Flaw Exploits Hyper-Threading to Steal Encrypted Data

Region brief for 2018-11-04

ASIA

1. Security Affairs newsletter Round 187 – News of the week
2. Kraken ransomware 2.0 is available through the RaaS model
3. Google logins make JavaScript mandatory, Huawei China spy shock, Mac malware, Iran gets new Stuxnet, and more
4. Bluetooth chip has serious security vulnerabilities that widely affect smart electronic products

OCEANIA

5. Security Affairs newsletter Round 187 – News of the week

NORTH AMERICA

6. Who’s In Your Online Shopping Cart?
7. PortSmash flaw in Hyper-Threading CPU could allow sensitive data theft
8. Security Affairs newsletter Round 187 – News of the week
9. Targeted SamSam Ransomware Attacks Continues to Breaking & Lock 67 Different Organizations Network
10. Intel processors are vulnerable to new PortSmash side-channel vulnerability
11. WireGuard has not been merged into the Linux kernel mainline

SOUTH AMERICA

12. Kraken ransomware 2.0 is available through the RaaS model

EUROPE

13. Who’s In Your Online Shopping Cart?
14. PortSmash flaw in Hyper-Threading CPU could allow sensitive data theft
15. Security Affairs newsletter Round 187 – News of the week
16. Kraken ransomware 2.0 is available through the RaaS model
17. Bluetooth chip has serious security vulnerabilities that widely affect smart electronic products
18. Intel processors are vulnerable to new PortSmash side-channel vulnerability

AFRICA

19. Who’s In Your Online Shopping Cart?

Sector brief for 2018-11-04

HEALTHCARE

1. Bluetooth chip has serious security vulnerabilities that widely affect smart electronic products

TRANSPORT

2. Vulnerability Scanners 101
3. Security Affairs newsletter Round 187 – News of the week

BANKING & FINANCE

4. Who’s In Your Online Shopping Cart?
5. Kraken ransomware 2.0 is available through the RaaS model
6. Beware!! Cyber Criminals Stealing Cash From Cardless ATM Using SMS Phishing Attack

INFORMATION & TELECOMMUNICATION

7. Who’s In Your Online Shopping Cart?
8. Security Affairs newsletter Round 187 – News of the week
9. Kraken ransomware 2.0 is available through the RaaS model

FOOD

Nil

WATER

Nil

ENERGY

10. Security Affairs newsletter Round 187 – News of the week

GOVERNMENT & PUBLIC SERVICE

11. Security Affairs newsletter Round 187 – News of the week

Daily brief for 2018-11-04

ASIA

1. Security Affairs newsletter Round 187 – News of the week
2. Kraken ransomware 2.0 is available through the RaaS model
3. Google logins make JavaScript mandatory, Huawei China spy shock, Mac malware, Iran gets new Stuxnet, and more
4. Bluetooth chip has serious security vulnerabilities that widely affect smart electronic products

WORLD

5. Who’s In Your Online Shopping Cart?
6. PortSmash flaw in Hyper-Threading CPU could allow sensitive data theft
7. Security Affairs newsletter Round 187 – News of the week
8. Kraken ransomware 2.0 is available through the RaaS model
9. Targeted SamSam Ransomware Attacks Continues to Breaking & Lock 67 Different Organizations Network
10. Bluetooth chip has serious security vulnerabilities that widely affect smart electronic products
11. Intel processors are vulnerable to new PortSmash side-channel vulnerability
12. WireGuard has not been merged into the Linux kernel mainline

ATTACKS

13. PortSmash flaw in Hyper-Threading CPU could allow sensitive data theft
14. Beware!! Cyber Criminals Stealing Cash From Cardless ATM Using SMS Phishing Attack

THREATS

15. Week in review: Bleedingbit, nastiest malware of 2018, Cisco security appliances under attack
16. Vulnerability Scanners 101
17. PortSmash flaw in Hyper-Threading CPU could allow sensitive data theft
18. New Microsoft Edge Browser Zero-Day RCE Exploit in the Works
19. Kraken ransomware 2.0 is available through the RaaS model
20. Google logins make JavaScript mandatory, Huawei China spy shock, Mac malware, Iran gets new Stuxnet, and more
21. Targeted SamSam Ransomware Attacks Continues to Breaking & Lock 67 Different Organizations Network
22. What should you do when you realize you've click on a malicious link?
23. Researchers recently found vulnerabilities within the robot controllers from @Universal_Robot. Learn what these #robot controllers are used for and how
24. Why Vulnerability Management Does Not Work
25. Bluetooth chip has serious security vulnerabilities that widely affect smart electronic products
26. Intel processors are vulnerable to new PortSmash side-channel vulnerability
27. New Intel CPU Flaw Exploits Hyper-Threading to Steal Encrypted Data

CRIME

28. PortSmash flaw in Hyper-Threading CPU could allow sensitive data theft
29. Security Affairs newsletter Round 187 – News of the week
30. Kraken ransomware 2.0 is available through the RaaS model

POLITICS

31. PortSmash flaw in Hyper-Threading CPU could allow sensitive data theft
32. Google logins make JavaScript mandatory, Huawei China spy shock, Mac malware, Iran gets new Stuxnet, and more
33. Bluetooth chip has serious security vulnerabilities that widely affect smart electronic products

APT report for 2018-11-03

TRANSNATIONAL / UNKNOWN

1. BBC micro:bit vendor Kitronik says customers' deets nicked, fingers Magecart malware

CHINA

2. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

3. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-11-03

WINDOWS

1. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
2. New Trickbot Malware Steal Password & Other Sensitive Data From Microsoft Outlook,Chrome,Firefox, IE, Edge

LINUX

3. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records

UNIX

Nil

ANDROID

4. Android Devices Remain Unsecured, While Two Botnets Fight For Dominance

IOS

5. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records

MACOS

Nil

Threat report for 2018-11-03

DATA BREACH & DATA LOSS

1. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
2. Business Email Compromise: Must-Have Defenses
3. Radisson Suffers Global Loyalty Program Data Breach
4. Android Devices Remain Unsecured, While Two Botnets Fight For Dominance
5. Discover how #NetSpectre attacks leak data remotely via side-channels with Michael Cobb of @thehairyITdog.

DENIAL-OF-SERVICE

Nil

MALVERTISING

Nil

PHISHING

6. New Trickbot Malware Steal Password & Other Sensitive Data From Microsoft Outlook,Chrome,Firefox, IE, Edge

WEB DEFACEMENT

Nil

BOTNET

7. "The resurgence of #VPNFilter #botnet appears to be limited to the Ukraine, but given the ease of infecting targeted systems,

RANSOMWARE

8. SamSam ransomware continues to make damages. Call it targeted Ransomware
9. #SamSam #ransomware targeted 67 organizations in 2018, according to @symantec research. By @MaddieBacon11
10. #Kraken #ransomware as a service is getting more popular after being bundled into the Fallout #ExploitKit and getting more update
11. The Week in Ransomware - November 2nd 2018 - RaaS, DiskCryptor, & More

CRYPTOMINING & CRYPTOCURRENCIES

12. Blockchain as a Tool for Cybersecurity
13. #Kraken #ransomware as a service is getting more popular after being bundled into the Fallout #ExploitKit and getting more update

MALWARE

14. Web domain owners paid EasyDNS to cloak their contact info from sight. It was blabbed via public Whois anyway
15. BBC micro:bit vendor Kitronik says customers' deets nicked, fingers Magecart malware
16. Gotta love how Robert Tappan Morris describes his Morris worm background in his bio: ”In 1988 his discovery of buffer
17. New Trickbot Malware Steal Password & Other Sensitive Data From Microsoft Outlook,Chrome,Firefox, IE, Edge

EXPLOIT

18. Intel CPUs Fall To New Hyperthreading Exploit That Pilfers Keys

VULNERABILITY

19. The Responsible Disclosure of Software Vulnerabilities in the Nutshell
20. .@Siemens central plant clocks were affected by six SICLOCK flaws, three have been rated "critical." Learn what these SICLOCK flaws
21. Six flaws were recently found in @Siemens SICLOCK central plant clocks. Learn what these clocks do, which clocks were infected
22. Researchers say #Bleedingbit vulnerabilities could allow #RemoteCodeExecution on wireless access points, medical devices and any other products using the affected

Region brief for 2018-11-03

ASIA

1. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
2. SamSam ransomware continues to make damages. Call it targeted Ransomware

OCEANIA

3. SamSam ransomware continues to make damages. Call it targeted Ransomware

NORTH AMERICA

4. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
5. SamSam ransomware continues to make damages. Call it targeted Ransomware

SOUTH AMERICA

Nil

EUROPE

6. BBC micro:bit vendor Kitronik says customers' deets nicked, fingers Magecart malware
7. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
8. SamSam ransomware continues to make damages. Call it targeted Ransomware
9. "The resurgence of #VPNFilter #botnet appears to be limited to the Ukraine, but given the ease of infecting targeted systems,

AFRICA

Nil

Sector brief for 2018-11-03

HEALTHCARE

1. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
2. SamSam ransomware continues to make damages. Call it targeted Ransomware
3. Researchers say #Bleedingbit vulnerabilities could allow #RemoteCodeExecution on wireless access points, medical devices and any other products using the affected

TRANSPORT

4. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records

BANKING & FINANCE

Nil

INFORMATION & TELECOMMUNICATION

5. The Responsible Disclosure of Software Vulnerabilities in the Nutshell

FOOD

Nil

WATER

Nil

ENERGY

6. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records

GOVERNMENT & PUBLIC SERVICE

7. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records

Daily brief for 2018-11-03

ASIA

1. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
2. SamSam ransomware continues to make damages. Call it targeted Ransomware

WORLD

3. BBC micro:bit vendor Kitronik says customers' deets nicked, fingers Magecart malware
4. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
5. SamSam ransomware continues to make damages. Call it targeted Ransomware
6. "The resurgence of #VPNFilter #botnet appears to be limited to the Ukraine, but given the ease of infecting targeted systems,

ATTACKS

7. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
8. Business Email Compromise: Must-Have Defenses
9. Radisson Suffers Global Loyalty Program Data Breach
10. Android Devices Remain Unsecured, While Two Botnets Fight For Dominance
11. Discover how #NetSpectre attacks leak data remotely via side-channels with Michael Cobb of @thehairyITdog.
12. New Trickbot Malware Steal Password & Other Sensitive Data From Microsoft Outlook,Chrome,Firefox, IE, Edge

THREATS

13. The Responsible Disclosure of Software Vulnerabilities in the Nutshell
14. Web domain owners paid EasyDNS to cloak their contact info from sight. It was blabbed via public Whois anyway
15. BBC micro:bit vendor Kitronik says customers' deets nicked, fingers Magecart malware
16. Blockchain as a Tool for Cybersecurity
17. .@Siemens central plant clocks were affected by six SICLOCK flaws, three have been rated "critical." Learn what these SICLOCK flaws
18. Six flaws were recently found in @Siemens SICLOCK central plant clocks. Learn what these clocks do, which clocks were infected
19. SamSam ransomware continues to make damages. Call it targeted Ransomware
20. Gotta love how Robert Tappan Morris describes his Morris worm background in his bio: ”In 1988 his discovery of buffer
21. New Trickbot Malware Steal Password & Other Sensitive Data From Microsoft Outlook,Chrome,Firefox, IE, Edge
22. Researchers say #Bleedingbit vulnerabilities could allow #RemoteCodeExecution on wireless access points, medical devices and any other products using the affected
23. #SamSam #ransomware targeted 67 organizations in 2018, according to @symantec research. By @MaddieBacon11
24. #Kraken #ransomware as a service is getting more popular after being bundled into the Fallout #ExploitKit and getting more update
25. The Week in Ransomware - November 2nd 2018 - RaaS, DiskCryptor, & More

CRIME

26. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
27. Business Email Compromise: Must-Have Defenses
28. Radisson Suffers Global Loyalty Program Data Breach

POLITICS

29. Weekly Threat Briefing: HealthCare.gov Suffered Data Breach As Hackers Stole 75,000 Records
30. Android Devices Remain Unsecured, While Two Botnets Fight For Dominance
31. SamSam ransomware continues to make damages. Call it targeted Ransomware

APT report for 2018-11-02

TRANSNATIONAL / UNKNOWN

1. Magecart cybergang targeting e-commerce credit card data
2. Magecart claims fresh victim in electronics kit seller Kitronik

CHINA

3. Beware this malware: it can even survive operating systems being reinstalled

INDIA

Nil

NORTH KOREA

Nil

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

4. New Data Affirms Cyber Threat for Industrial Control Systems
5. Beware this malware: it can even survive operating systems being reinstalled

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-11-02

WINDOWS

1. Shellbot Variant Used in New Botnet, Spreads Using IoT and Linux Vulnerabilities
2. Spam campaign targets Exodus Mac Users
3. New Data Affirms Cyber Threat for Industrial Control Systems
4. This Week in Security News: Spam Campaigns and Vulnerable Infrastructures
5. How to password protect a folder or file in Windows | Avast
6. Beware this malware: it can even survive operating systems being reinstalled
7. Search for “Installing Chrome” on Bing can lead to malicious content

LINUX

8. Shellbot Variant Used in New Botnet, Spreads Using IoT and Linux Vulnerabilities
9. Outlaw Hacking Group Using Command Injection Flow To Attack Organizations Network using Botnet via C&C Server
10. Systemd Vulnerability In Linux Could Trigger Remote Attacks And System Crashes

UNIX

Nil

ANDROID

11. Two botnets are fighting over control of thousands of unsecured Android devices
12. Shellbot Variant Used in New Botnet, Spreads Using IoT and Linux Vulnerabilities

IOS

Nil

MACOS

13. Spam campaign targets Exodus Mac Users
14. This Week in Security News: Spam Campaigns and Vulnerable Infrastructures