August 2019

Beberapa laman web kembali pulih

Azrul Radi

http://m.utusan.com.my/berita/jenayah/beberapa-laman-web-kembali-pulih-1.964599

Excerpt:

“Beberapa laman web yang dipercayai digodam semalam sudah kembali beroperasi seperti biasa manakala sebahagian yang lain sedang dibaik pulih hari ini.”


Hampir 300 laman web digodam

Basir Abu Bakar Dan Nuraina Hanis Abd. Halim

http://m.utusan.com.my/berita/jenayah/hampir-300-laman-web-digodam-1.964529

Excerpt:

“Keselamatan negara semakin terancam apabila dengan mudahnya pihak luar menceroboh ratusan laman web pelbagai agensi secara besar-besaran sejak Jumaat lalu.”


NASA Astronaut Accused of Identity Theft in First Criminal Allegation from Space

Jami Ganz

https://www.military.com/daily-news/2019/08/25/nasa-astronaut-accused-identity-theft-first-criminal-allegation-space.html

Excerpt:

“Anne McClain, a NASA astronaut and lieutenant colonel in the Army, is facing accusations that she committed identity theft through the "improper access" of her estranged wife's "private financial records," The New York Times reported”


City of London Hit by One Million Cyber-Attacks Per Month

Phil Muncaster

https://www.infosecurity-magazine.com/news/city-of-london-one-million/

Excerpt:

“The City of London Corporation has suffered nearly one million cyber-attacks each month for the first quarter of 2019, according to Freedom of Information (FOI) data obtained by Centrify.”


Justice Department indicts 80 individuals in a massive business email scam bust

Zack Whittaker

https://techcrunch.com/2019/08/22/fbi-arrest-doj-email-scam/

Excerpt:

“The Justice Department has indicted dozens of individuals accused of involvement in a massive business email scam and money laundering scheme.”


Cybersecurity challenges for smart cities: Key issues and top threats

https://www.helpnetsecurity.com/2019/08/21/cybersecurity-smart-cities/

Excerpt:

“Urban population is on the rise worldwide and smart city development projects are harnessing the power of the Internet of Things (IoT) to develop more intelligent, efficient, and sustainable solutions. However, digital security investments in smart cities are severely lagging thus seeding the future vulnerabilities of the IoT ecosystem.”


Silence Advanced Hackers Attack Banks All Over the World

Ionut Ilascu

https://www.bleepingcomputer.com/news/security/silence-advanced-hackers-attack-banks-all-over-the-world/

Excerpt:

“The activity of the advanced hacker group the researchers call Silence has increased significantly over the past year. Victims in the financial sector are scattered across more than 30 countries and financial losses have quintupled.”


Ransomware attacks hit 1 in 5 Americans

https://www.helpnetsecurity.com/2019/08/19/ransomware-attacks-americans/

Excerpt:

“Anomali announced the results of a survey conducted by The Harris Poll. It includes responses from more than 2,000 American adults and reveals how Americans believe business and government organizations should respond to ransomware attacks as well as their opinions on cybersecurity in general.”


Cerberus, a new banking Trojan available as malware-as-a-service in the underground

Pierluigi Paganini

https://securityaffairs.co/wordpress/89821/malware/cerberus-malware-underground.html

Excerpt:

“A new malware-as-a-service dubbed Cerberus has emerged in the threat landscape, it is an Android RAT developed from scratch that doesn’t borrow the code from other malware.”


Major breach found in biometrics system used by banks, UK police and defence firms

Josh Taylor

https://www.theguardian.com/technology/2019/aug/14/major-breach-found-in-biometrics-system-used-by-banks-uk-police-and-defence-firms

Excerpt:

“The fingerprints of over 1 million people, as well as facial recognition information, unencrypted usernames and passwords, and personal information of employees, was discovered on a publicly accessible database for a company used by the likes of the UK Metropolitan police, defence contractors and banks.”


Czech Republic ‘s committee blames foreign state for Foreign Ministry Cyberattack

Pierluigi Paganini

https://securityaffairs.co/wordpress/89864/cyber-warfare-2/czech-republic-cyber-attack.html

Excerpt:

“A parliamentary committee in the Czech Republic revealed that the National Cyber and Information Security Agency blamed a foreign state for a cyber attack that targeted the Czech Foreign Ministry.”


With warshipping, hackers ship their exploits directly to their target’s mail room

Zack Whittaker

https://techcrunch.com/2019/08/06/warshipping-hackers-ship-exploits-mail-room/

Excerpt:

“Why break into a company’s network when you can just walk right in — literally?”


North Korea reportedly stole $2B in wave of cyber attacks

Eileen Yu

https://www.zdnet.com/article/north-korea-reportedly-stole-2b-in-wave-of-cyber-attacks/

Excerpt:

“North Korea has reportedly chalked up an estimated US$2 billion from launching cyber attacks against banks and cryptocurrency exchanges, in a bid to fund its purchase of military weapons. The attacks were widespread and "increasingly sophisticated", according to a leaked draft report from the United Nations.”


Russian hackers are infiltrating companies via the office printer

https://www.technologyreview.com/f/614062/russian-hackers-fancy-bear-strontium-infiltrate-iot-networks-microsoft-report/

Excerpt:

“A group of hackers linked to Russian spy agencies are using "internet of things" devices like internet-connected phones and printers to break into corporate networks, Microsoft announced on Monday.”


Many companies don’t know the depth of their IoT-related risk exposure

https://www.helpnetsecurity.com/2019/08/02/iot-related-risk-exposure/

Excerpt:

“In the digital age, cyber is everywhere. Cyber risk now permeates nearly every aspect of how we live and work. Organizations should better understand how to manage the risks created by known and unknown Internet of Things (IoT) and Industrial IoT (IIoT) devices.”


Online sneaker marketplace failed to come clean about 6.8M record data breach

Ravie Lakshmanan

https://thenextweb.com/security/2019/08/05/online-sneaker-marketplace-failed-to-come-clean-about-6-8m-record-data-breach/

Excerpt:

“StockX — a popular online marketplace for sneakerheads and streetwear aficionados to trade apparel — is the latest company to fall victim to a massive data breach affecting millions of its users.”


Cops Are Giving Amazon's Ring Your Real-Time 911 Caller Data

Dell Cameron

https://gizmodo.com/cops-are-giving-amazons-ring-your-real-time-911-data-1836883867

Excerpt:

“Amazon-owned home security company Ring is pursuing contracts with police departments that would grant it direct access to real-time emergency dispatch data, Gizmodo has learned.”


South Korean Breach Exposes Over 1 Million Payment Cards

Stas Alforov and Christopher Thomas

https://geminiadvisory.io/south-korean-breach-exposes-over-1-million-payment-cards/

Excerpt:

“While the entire Asia Pacific (APAC) region is experiencing a noticeable uptick in attacks against brick-and-mortar and e-commerce businesses, South Korea has emerged as the largest victim of Card Present (CP) data theft by a wide margin.”