Daily NCSC-FI news followup 2019-08-27

US GOV: DHS stored data from bioterrorism defense on an insecure website for a decade


Nato: a serious cyberattack could trigger Article 5 of our founding treaty.

www.prospectmagazine.co.uk/world/nato-will-defend-itself We have designated cyberspace a domain in which Nato will operate and defend itself as effectively as it does in the air, on land, and at sea. This means we will deter and defend against any aggression towards allies, whether it takes place in the physical world or the virtual one.

Cybersecurity Firm Imperva Discloses Breach (Data from 2017)

krebsonsecurity.com/2019/08/cybersecurity-firm-imperva-discloses-breach/ Imperva, a provider of Internet firewall services that help Web sites block malicious cyberattacks, alerted customers on Tuesday that a recent data breach exposed email addresses, scrambled passwords, API keys and SSL certificates for a subset of its firewall users.

NZ: Passports, licenses of 300 leaked in Ministry for Culture and Heritage data breach


Recent HIPAA settlements highlight the weaknesses in healthcare security

www.zdnet.com/article/recent-hipaa-settlements-highlight-the-weaknesses-in-healthcare-security/ In the past, device loss and theft were top causes of HIPAA settlements, but this is no longer the case as healthcare providers mature their security practices. We now see hacking/IT incidents as the top cause of breaches leading to HIPAA investigations.

GitHub improves security by enabling WebAuthn


How I Hacked Instagram Again (and got $10’000 via bug bounty)


Huawei in Talks To Install Russian Aurora OS On Tablets For Russia’s Population Census

www.reuters.com/article/us-huawei-russia-partnership/huawei-in-talks-to-install-russian-operating-system-on-tablets-for-countrys-population-census-sources-idUSKCN1VG1VN Russia is discussing the use of Aurora OS on 360,000 Huawei tablets by August 2020.

US Officials Fear Ransomware Attack Against 2020 Election


Security researchers warn that the WS-Discovery protocol is currently being abused for massive DDoS attacks.

www.zdnet.com/article/protocol-used-by-630000-devices-can-be-abused-for-devastating-ddos-attacks/ Currently, according to internet search engine BinaryEdge, there are now nearly 630,000 devices that support the WS-Discovery protocol and are ripe for abuse.

New Lyceum APT is targeting oil and gas companies in the Middle East, and telecoms across Africa and Asia.

www.zdnet.com/article/middle-east-cyber-espionage-is-heating-up-with-a-new-group-joining-the-fold/ Also:


China Chopper still active 9 years later


Malicious Android app CamScanner had more than 100 million downloads in Google Play

www.kaspersky.com/blog/camscanner-malicious-android-app/28156/ CamScanner was actually a legitimate app for quite some time. However, at some point, that changed, and recent versions of the app shipped with an advertising library containing a malicious module.

Transport for London asked passenger to write down password on paper form.


Australia to ban mobile phone usage in schools from next year


You might be interested in …

Daily NCSC-FI news followup 2020-09-28

Researchers Uncover Cyber Espionage Operation Aimed At Indian Army thehackernews.com/2020/09/cyberattack-indian-army.html Cybersecurity researchers uncovered fresh evidence of an ongoing cyberespionage campaign against Indian defense units and armed forces personnel at least since 2019 with an aim to steal sensitive information. Dubbed “Operation SideCopy” by Indian cybersecurity firm Quick Heal, the attacks have been attributed to an […]

Read More

Daily NCSC-FI news followup 2020-08-21

Outlook mail issues phishing dont fall for this scam! nakedsecurity.sophos.com/2020/08/21/outlook-mail-issues-phishing-dont-fall-for-this-scam/ Heres a phish that our own security team received themselves. Apart from some slightly clumsy wording (but when was the last time you received an email about a technical matter that was plainly written in perfect English?) and a tiny error of grammar, we thought […]

Read More

Daily NCSC-FI news followup 2019-12-30

Uusi viranomainen alkaa välittää suomalaisten potilastietoja eteenpäin, mutta lupaa yksityisyyden suojan olevan turvattu yle.fi/uutiset/3-11133001 Vuodenvaihteessa toimintansa aloittaa uusi viranomainen, Findata. Se kerää ja välittää suomalaisten terveystietoja niistä kiinnostuneille tahoille. Taustalla on vappuna 2019 voimaan tullut toisiolaki. Satakunnassa erittäin vakava tietoliikennekatkos sairaaloissa käyttäjän vahinko katkaisi yhteyden potilastietojärjestelmiin yle.fi/uutiset/3-11138205 Satakunnassa erikoissairaanhoitoa tuottavan Satasairaalan tietoverkoissa oli maanantaina päivällä […]

Read More

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.