Categories
NCSC-FI News followup

Daily NCSC-FI news followup 2020-06-20

Cyberbullying: Adults can be victims too

www.welivesecurity.com/2020/06/19/cyberbullying-adults-can-be-victims-too/ Whenever cyberbullying is mentioned, our minds usually associate the topic with children or teenagers. Much has been said about cyberbullying by psychologists, organizations, public figures, as well as other concerned parties. However, we often fail to realize that adults can be the victims of cyberbullying too.

Former DIA Analyst Sentenced to Prison Over Data Leak

threatpost.com/former-dia-analyst-sentenced-to-prison-over-data-leak/156775/ A former analyst for the U.S. Defense Intelligence Agency (DIA) has been sentenced to more than two years in prison after sharing highly classified, national defense intelligence with two reporters. The sentencing comes after the 32-year-old analyst, Henry Kyle Frese, pleaded guilty in February to leaking the data, regarding foreign countries weapons systems, in 2018 and 2019. Frese worked as a counterterrorism analyst from February 2018 to October 2019 at the DIA, the intelligence agency of the U.S. federal government, specializing in defense and military intelligence.

Adobe wants users to uninstall Flash Player by the end of the year

www.zdnet.com/article/adobe-wants-users-to-uninstall-flash-player-by-the-end-of-the-year/ Adobe plans to prompt users and ask them to uninstall Flash Player from their computers by the end of the year when the software is scheduled to reach End-Of-Life (EOL), on December 31, 2020. The move was announced in a new Flash Player EOL support page that Adobe published earlier this month, six months before the EOL date.

Discord modified to steal accounts by new NitroHack malware

www.bleepingcomputer.com/news/security/discord-modified-to-steal-accounts-by-new-nitrohack-malware/ New malware is being distributed that pretends to be a hack that gets you the premium Discord Nitro service for free but instead steals user tokens saved in the various browsers, credit card information, and then tries to spread it to others. When you have an open platform like Discord that makes it easy to modify the JavaScript files utilized by the client, threat actors commonly abuse it to modify the client to perform malicious behavior. These modifications are precisely what a new malware called NitroHack is doing to steal Discord user tokens, steal saved credit cards, and spread the malware to your friends via Discord DMs.

Australia’s Lion brewery hit by second cyber attack as nation staggers under suspected Chinese digital assault

www.theregister.com/2020/06/19/lion_brewery_second_cyber_attack_australia/ As Australia reels under sustained cyber attacks following increased Chinese diplomatic hostility, the country’s Lion brewery and dairy conglomerate has been hit for the second time. The Sydney Morning Herald reported that Lion told its staff today “it had been hit by a second cyber attack that had further disrupted its IT systems.”. “The company is now focusing on defence efforts over restoration from the previous attack, its chief executive officer Stuart Irvine told employees during the briefing,” said the newspaper, citing a source who had listened to the call.

Turn on MFA Before Crooks Do It For You

krebsonsecurity.com/2020/06/turn-on-mfa-before-crooks-do-it-for-you/ Hundreds of popular websites now offer some form of multi-factor authentication (MFA), which can help users safeguard access to accounts when their password is breached or stolen. But people who dont take advantage of these added safeguards may find it far more difficult to regain access when their account gets hacked, because increasingly thieves will enable multi-factor options and tie the account to a device they control. Heres the story of one such incident.

IBM Maximo Asset Management servers patched against attacks

nakedsecurity.sophos.com/2020/06/19/ibm-maximo-asset-management-servers-patched-against-attacks/ Details are hazy but the overall story is clear: if you use IBMs Maximo Asset Management, make sure youre patched. As you can imagine, an asset management tools called Maximo isnt aimed at small businesses such as local bike shops or at parochial bodies such as parish councils. Those organisations definitely have assets to keep track of, such as tools and spare parts, but Maximos aim is much bigger than that.

How the pandemic affected DDoS attack patterns, global internet traffic

www.helpnetsecurity.com/2020/06/19/internet-traffic-patterns-ddos/ There has been a shift in internet traffic patterns coinciding with an increase in DDoS and other types of network attacks in recent months as organizations across industries quickly transitioned to remote workforces and individuals under stay-at-home orders began relying on the internet more heavily, according to Neustar.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.