Menu

Link

Threatpost News Wrap, September 1, 2017
No Fix Planned For LabVIEW Bug, Says National Instruments
US Government Site Was Hosting Ransomware
Insecure Office 365 setups could be a ticking time bomb for your business
Blonde girlfriend’s passport let dark-haired man fly from London to Germany
Instagram hacked; data of top celebrities stolen and traded
Session Hijacking Bug Exposed GitLab Users Private Tokens
Bugs in Arris Modems Distributed by AT&T Vulnerable to Trivial Attacks
Angelfire: CIA’ Undetectable Implants Infect Windows Boot Sector
FDA Recalls 465K Pacemakers Tied to MedSec Research
WikiLeaks official website hacked by OurMine hacking group
Instagram confirms hack against high-profile users’ account info
Reflected XSS Bug Patched in Popular WooCommerce WordPress Plugin
Mystery surrounds malware attack that forced German state parliament offline
No razzle-dazzle here! Hackers target Zazzle with run-of-the-mill brute-force attack
465k Pacemakers vulnerable; users must visit doctors for fix
Intel Confirms Its Much-Loathed ME Feature Has A Kill Switch
Turla APT Used WhiteBear Espionage Tools Against Defense Industry, Embassies
New Locky Variant ‘IKARUSdilapidated’ Strikes Again
Electronics retail giant CeX hacked; data of 2 million customers stolen
Siemens Fixes Session Hijacking Bug in LOGO!, Warns of Man-in-the-Middle Attacks
Spambot Contains ‘Mind-Boggling’ Amount of Email, SMTP Credentials
Hidden Kill Switch Identified in Controversial Intel ME controller chip
New Ransomware Email Scam Using FBI and IRS as Bait
711 MILLION email accounts weaponized by Onliner for spam campaigns
New ESET research uncovers Gazer, the stealthy backdoor that spies on embassies
CeX data breach impacts two million UK accounts, customers told to change passwords ASAP
Onliner Spambot dump exposes 711 Million email and passwords
Don’t fall for Hurricane Harvey charity scams!
Trump appointee says for the ‘past several years’ he has been the victim of ‘multiple cyber attacks’
Google Reminding Admins HTTP Pages Will Be Marked ‘Not Secure’ in October
Researchers Figure Out How to Blind ISPs from Smart Home Device Traffic
Revamped Nukebot Malware Changes Targets, Adds Functions
Insanely Popular White Supremacist Website Stormfront Booted Off
Telnet Credential Leak Reinforces Bleak State of IoT Security
Dangerous WireX Android DDoS Botnet Killed by Security Giants
Spyware deployed in state-sponsored attacks against India and Pakistan
DJI Launches Drone Bug Bounty Program
Selena Gomez – please tell your 125 million fans to enable two-step verification
NHS board suffers malware attack just months after falling victim to WannaCry
Fraudulent Donations Lead to Disbanding of Hutchins Legal Defense Fund
CEOs Resign from Trump’s Cybersecurity Commission
Selena Gomez’ Instagram hacked; posts nude photos of Justin Bieber
Mobile WireX DDoS Botnet ‘Neutralized’ by Collaboration of Competitors
Anonymous Messaging App Sarahah to Halt Collection of User Data With Next Update
Sarahah App Uploads Your Contacts List on Unidentified Server
“Wanna see the Game of Thrones in advance” email delivers malware
Researchers bought MacBook for $1 using critical vulnerabilities
Open Banking APIs under PSD2: What are the security threats and solutions? Download VASCO’s white paper now
DailyStormer’ new site booted off after hosting provider gets DDoSed
This App Lets Anyone with Limited Skills Create Android Ransomware
HBO hackers leak script and spoilers of Game of Thrones Season Finale
Race is On To Notify Owners After Public List of IoT Device Credentials Published
Oops! Aetna exposed 12,000 customers’ HIV statuses through envelope window
Defray Ransomware Seen Targeting Education, Healthcare Industry
New Campaign Uses Facebook Messenger to Distribute Malware
HIDS4U customers warned of free gift email attack after customer database leaks
It took 14 years for this Massachusetts hospital to detect a data breach
Vault 7 Leak: CIA Collected Biometric Data from Partner Agencies
Threatpost News Wrap, August 25, 2017
Cryptocurrency Mining Malware Hosted in Amazon S3 Bucket
Security Lacking in Previous AppleAVEDriver iOS Kernel Extension
Leaked: Private Photos of Nicole Scherzinger, Dakota Johnson and Addison Timlin 
Court Orders DreamHost to handover data on anti-Trump site
Guilty in Absence: Pirate Bay Founders to pay €405,000 to Record Labels
Adware Spreading Via Social Engineering, Facebook Messenger
Hack Telegram, WhatsApp and Signal app; get $500,000
Deprecated, Insecure Apple Authorization API Can Be Abused to Run Code at Root
Smashing Security #039: Woah – are we talking to a cyborg?
BankBot trojan tries to sneak apps onto your Android smartphone without permission
Beware; dangerous new malware ‘Joao’ hits gamers worldwide
Experts Show How Easy It Is To Hack Home & Industrial Robots Remotely
Zerodium Offers $500K for Secure Messaging App Zero Days
ROPEMAKER Exploit Allows for Changing of Email Post-Delivery
Business Email Compromise Campaign Harvesting Credentials in Numerous Industries
Hundreds of Android Apps on Google Play Store Infected with Spyware
Man gets 25 years for hacking lottery computers and winning $2.2 million
Sometimes hacks can be more about mischief than malice
Leaked: Private photos of Tiger Woods, Miley Cyrus, Kristen Stewart and others
British Intelligence Knew WannaCry Hero Would be Arrested by FBI
Neptune Exploit Kit Dropping Cryptocurrency Miners Through Malvertisements
US Navy investigating whether its crashed ship was hacked
A $500 Device can Crack iPhone 6 and 7 Passcodes within Minutes
Android Spyware Linked to Chinese SDK Forces Google to Boot 500 Apps
Anonymous hacker says they stole 1.2 million NHS patients’ data
Foxit to Fix PDF Reader Zero Days by Friday
New Fileless Cryptocurrency Miner Hits Windows Using EternalBlue Flaw
Nude photos of Anne Hathaway leaked online by hackers
Fuze Patches TPN Handset Vulnerabilities
Industrial Cobots Might Be The Next Big IoT Security Mess
The FBI is briefing US companies against using Kaspersky products, claims report
Enigma Marketplace Hacked; $500,000 in Ethereum Stolen
Beware – Smartphones Can Be Hacked With Malicious Replacement Parts
Facebook Awards $100K to Researchers for Credential Spearphishing Detection Method
Two zero-day vulnerabilities disclosed after Foxit refuses to patch PDF Reader
Meeting and Hotel Booking Provider’s Data Found in Public Amazon S3 Bucket
HBO hackers threaten to leak Game of Thrones’ season finale
Sony social media accounts hijacked as hackers claims to have stolen PSN database
GCHQ knew FBI was planning to arrest WannaCry’s ‘accidental hero’ before he travelled to the USA
Sony Hacked Again: OurMine Hacks PlayStation’ Twitter and Facebook