Daily NCSC-FI news followup 2019-08-27

US GOV: DHS stored data from bioterrorism defense on an insecure website for a decade


Nato: a serious cyberattack could trigger Article 5 of our founding treaty.

www.prospectmagazine.co.uk/world/nato-will-defend-itself We have designated cyberspace a domain in which Nato will operate and defend itself as effectively as it does in the air, on land, and at sea. This means we will deter and defend against any aggression towards allies, whether it takes place in the physical world or the virtual one.

Cybersecurity Firm Imperva Discloses Breach (Data from 2017)

krebsonsecurity.com/2019/08/cybersecurity-firm-imperva-discloses-breach/ Imperva, a provider of Internet firewall services that help Web sites block malicious cyberattacks, alerted customers on Tuesday that a recent data breach exposed email addresses, scrambled passwords, API keys and SSL certificates for a subset of its firewall users.

NZ: Passports, licenses of 300 leaked in Ministry for Culture and Heritage data breach


Recent HIPAA settlements highlight the weaknesses in healthcare security

www.zdnet.com/article/recent-hipaa-settlements-highlight-the-weaknesses-in-healthcare-security/ In the past, device loss and theft were top causes of HIPAA settlements, but this is no longer the case as healthcare providers mature their security practices. We now see hacking/IT incidents as the top cause of breaches leading to HIPAA investigations.

GitHub improves security by enabling WebAuthn


How I Hacked Instagram Again (and got $10’000 via bug bounty)


Huawei in Talks To Install Russian Aurora OS On Tablets For Russia’s Population Census

www.reuters.com/article/us-huawei-russia-partnership/huawei-in-talks-to-install-russian-operating-system-on-tablets-for-countrys-population-census-sources-idUSKCN1VG1VN Russia is discussing the use of Aurora OS on 360,000 Huawei tablets by August 2020.

US Officials Fear Ransomware Attack Against 2020 Election


Security researchers warn that the WS-Discovery protocol is currently being abused for massive DDoS attacks.

www.zdnet.com/article/protocol-used-by-630000-devices-can-be-abused-for-devastating-ddos-attacks/ Currently, according to internet search engine BinaryEdge, there are now nearly 630,000 devices that support the WS-Discovery protocol and are ripe for abuse.

New Lyceum APT is targeting oil and gas companies in the Middle East, and telecoms across Africa and Asia.

www.zdnet.com/article/middle-east-cyber-espionage-is-heating-up-with-a-new-group-joining-the-fold/ Also:


China Chopper still active 9 years later


Malicious Android app CamScanner had more than 100 million downloads in Google Play

www.kaspersky.com/blog/camscanner-malicious-android-app/28156/ CamScanner was actually a legitimate app for quite some time. However, at some point, that changed, and recent versions of the app shipped with an advertising library containing a malicious module.

Transport for London asked passenger to write down password on paper form.


Australia to ban mobile phone usage in schools from next year


You might be interested in …

Daily NCSC-FI news followup 2020-01-22

The Guardian: Amazonin perustajan puhelimeen lähetetty hakkerointitiedosto näyttää tulleen Saudi-Arabian kruununprinssiltä yle.fi/uutiset/3-11169416 Verkkokauppa Amazonin perustajan Jeff Bezosin puhelimen hakkerointiin käytetty tiedosto vaikuttaa tulleen Saudi-Arabian kruununprinssin Mohammed bin Salmanin henkilökohtaiselta tililtä, brittiläinen The Guardian -sanomalehti kirjoittaa. The Guardian artikkeli: www.theguardian.com/technology/2020/jan/21/amazon-boss-jeff-bezoss-phone-hacked-by-saudi-crown-prince Glenn Greenwald Charged With Cybercrimes in Brazil www.nytimes.com/2020/01/21/world/americas/glenn-greenwald-brazil-cybercrimes.html Federal prosecutors in Brazil on Tuesday charged the […]

Read More

Daily NCSC-FI news followup 2020-12-26

SolarWinds releases updated advisory for new SUPERNOVA malware www.bleepingcomputer.com/news/security/solarwinds-releases-updated-advisory-for-new-supernova-malware/ SolarWinds has released an updated advisory for the additional SuperNova malware discovered to have been distributed through the company’s network management platform.. see also www.solarwinds.com/securityadvisory. and kb.cert.org/vuls/id/843464 Apple iCloud outage prevents device activations, access to data www.bleepingcomputer.com/news/apple/apple-icloud-outage-prevents-device-activations-access-to-data/ Apple users are experiencing problems setting up new devices […]

Read More

Daily NCSC-FI news followup 2021-08-14

Russian cyberspies targeted the Slovak government for months therecord.media/russian-cyberspies-targeted-slovak-government-for-months/ A Russian cyber-espionage group linked to one of Russia’s intelligence forces has targeted the Slovak government for months, Slovak security firms ESET and IstroSec said this week. The attacks were attributed to a group known as the Dukes, Nobelium, or APT29, which cyber-security agencies from the […]

Read More

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.