A daily look at the relevant information security news from overnight.Episode 225 - 31 December 2019Not so Special - https://www.bleepingcomputer.com/news/security/special-olympics-new-york-hacked-to-send-phishing-emails/Heritage ransomed - https://www.scmagazine.com/home/security-news/ransomware/ransomware-shuts-down-the-heritage-company/Chrome SQL patch - https://threatpost.com/google-chrome-affected-by-magellan-2-0-flaws/151446/Blue Bear breach - https://www.scmagazine.com/home/security-news/data-breach/school-software-vendor-active-network-suffers-data-breach/Microsoft hits Thallium - https://www.zdnet.com/article/microsoft-takes-down-50-domains-operated-by-north-korean-hackers/

InfoSec Overnights - Daily Security News

Not so Special, Heritage ransomed, Microsoft hits Thallium, and more.

A daily look at the relevant information security news from overnight.Episode 224 - 30 December 2019FIN7 BIOLOAD - https://www.bleepingcomputer.com/news/security/fin7-hackers-bioload-malware-drops-fresher-carbanak-backdoor/Not so Wyze - https://www.zdnet.com/article/iot-vendor-wyze-confirms-server-leak/Moss Adams mess - https://www.scmagazine.com/home/security-news/data-breach/names-social-security-numbers-exposed-in-moss-adams-breach/Ryuk hits port - https://www.bleepingcomputer.com/news/security/us-coast-guard-says-ryuk-ransomware-took-down-maritime-facility/Making a Ruckus - https://techcrunch.com/2019/12/28/ruckus-wireless-routers-flaws/

FIN7 BIOLOAD, Not so Wyze, Making a Ruckus, and more.

A daily look at the relevant information security news from overnight.Episode 222 - 23 December 2019Huge citrix risk - https://www.technadu.com/citrix-vulnerability-80000-companies-around-the-world-at-risk/88242/Greta gangsters - https://threatpost.com/greta-thunberg-emotet-person-of-the-year/151351/Mozi on in - https://www.bleepingcomputer.com/news/security/new-mozi-p2p-botnet-takes-over-netgear-d-link-huawei-routers/Twitter tweak - https://www.zdnet.com/article/twitter-to-android-users-weve-just-patched-this-nasty-bug-so-update-your-app-asap/ToTok is terrible - https://www.technadu.com/apple-google-remove-totok-spying-allegations/88179/

Huge Citrix risk, Greta gangsters, ToTok is terrible, and more.

A daily look at the relevant information security news from overnight.Episode 222 - 23 December 2019Wawa whacked - https://www.scmagazine.com/home/security-news/data-breach/wawa-pos-system-compromised-for-10-months-cybersecurity-pros-weigh-in/Facebook user cache - https://threatpost.com/267m-facebook-phone-numbers-exposed-online/151327/Android malvertisers - https://www.cyberscoop.com/play-store-adware-white-ops/Olympic phishing - https://www.bleepingcomputer.com/news/security/tokyo-2020-staff-warns-of-phishing-disguised-as-official-emails/Ring roster - https://www.zdnet.com/article/hackers-keep-dumping-ring-credentials-online-for-the-giggles/

Wawa whacked, Facebook user cache, Ring roster, and more.

A daily look at the relevant information security news from overnight.Episode 221 - 20 December 2019Hornet’s nest stings - https://www.zdnet.com/article/this-grab-bag-hacking-attack-drops-six-different-types-of-malware-in-one-go/Connect(un)Wise - https://www.bleepingcomputer.com/news/security/screenconnect-msp-software-used-to-install-zeppelin-ransomware/Honda exposure - https://www.technadu.com/honda-exposes-976-million-records-containing-pii-vehicle-owners/87906/DLL hijack fixed - https://www.bleepingcomputer.com/news/software/adwcleaner-801-fixes-dll-hijacking-vulnerability/Emotet hits Germany - https://www.zdnet.com/article/frankfurt-shuts-down-it-network-following-emotet-infection/

Hornet’s Nest stings, Connect(un)Wise, Emotet hits Germany, and more.

A daily look at the relevant information security news from overnight.Episode 220 - 19 December 2019Another blackmail ransom - https://www.zdnet.com/article/another-ransomware-strain-is-now-stealing-data-before-encrypting-it/Data lost and found - https://www.androidpolice.com/2019/12/17/google-fixes-chrome-bug-that-broke-local-storage-for-some-web-and-android-apps-no-data-is-lost/Dumb smart tracker - https://techcrunch.com/2019/12/18/cloud-flaws-millions-child-watch-trackers/More cities ransomed - https://www.scmagazine.com/home/security-news/ransomware/galt-st-lucie-police-hit-with-ransomware/Beware free wifi - https://www.zdnet.com/article/fbi-warns-against-using-free-wifi-networks-while-traveling/

Another blackmail ransom, Data lost and found, Beware free wifi, and more.

A daily look at the relevant information security news from overnight.Episode 219 - 18 December 2019Botnet gains Momentum - https://www.scmagazine.com/home/security-news/malware/momentum-botnet-spotted-in-the-wild/Lazarus Dacls trojan - https://www.zdnet.com/article/lazarus-pivots-to-linux-attacks-through-dacls-trojan/Intel RST patch - https://www.bleepingcomputer.com/news/security/update-intels-rapid-storage-app-to-fix-bug-letting-malware-evade-av/ACER, ASUS oops - https://www.securityweek.com/privilege-escalation-flaws-found-preinstalled-acer-asus-softwareDudell Asian attack - https://www.bleepingcomputer.com/news/security/chinese-rancor-apt-refreshes-malware-kit-for-espionage-attacks/

Botnet gains Momentum, Lazarus Dacls trojan, Dudell Asian attack, and more.

A daily look at the relevant information security news from overnight.Episode 218 - 17 December 2019TP-Link Archer flaw - https://www.bleepingcomputer.com/news/security/tp-link-router-bug-lets-attackers-login-without-passwords/Firefox forces 2FA - https://www.zdnet.com/article/mozilla-to-force-all-add-on-devs-to-use-2fa-to-prevent-supply-chain-attacks/Conor leaks - https://www.zdnet.com/article/south-african-it-firm-conor-behind-the-leak-of-1-million-web-browsing-records/LightInTheBox loses data - https://www.scmagazine.com/home/security-news/data-breach/1-6-billion-lightinthebox-customer-records-left-exposed/Ugly sweater Emotet - https://www.bleepingcomputer.com/news/security/emotet-trojan-is-inviting-you-to-a-malicious-christmas-party/

TP-Link Archer flaw, Firefox forces 2FA, Ugly sweater Emotet, and more.

A daily look at the relevant information security news from overnight.Episode 217 - 16 December 2019WordPress vulnerability - https://threatpost.com/critical-bug-in-wordpress-plugins-open-sites-to-hacker-takeovers/151123/Visa warning - https://www.scmagazine.com/home/retail/visa-warns-against-new-pos-attacks-fin8-fingered-as-the-culprit/Rooster Teeth breached - https://www.bleepingcomputer.com/news/security/attackers-steal-credit-cards-in-rooster-teeth-data-breach/Facebook leak - https://www.theregister.co.uk/2019/12/13/facebook_data_loss/New Orleans ransom - https://www.zdnet.com/article/new-orleans-hit-by-ransomware-city-employees-told-to-turn-off-computers/

WordPress vulnerability, Visa warning, New Orleans ransom, and more.

A daily look at the relevant information security news from overnight.Episode 216 - 13 December 2019EchoBot widens attack - https://www.bleepingcomputer.com/news/security/new-echobot-variant-exploits-77-remote-code-execution-flaws/Process hollowing trick - https://www.zdnet.com/article/monero-miners-can-lurk-undetected-through-new-process-hollowing-technique/Siemens power plant bugs - https://threatpost.com/critical-remote-code-execution-global-power-plants/151087/Smishing smasher - https://www.zdnet.com/article/google-rolls-out-verified-sms-and-spam-protection-in-android/Ransom / blackmail - https://www.bleepingcomputer.com/news/security/another-ransomware-will-now-publish-victims-data-if-not-paid/

EchoBot widens attack, Process hollowing trick, Ransom / blackmail, and more.

A daily look at the relevant information security news from overnight.Episode 215 - 12 December 2019Zeppelin attack - https://www.zdnet.com/article/this-new-ransomware-is-targeting-health-and-tech-companies-across-europe-and-north-america/iKrampus - https://threatpost.com/krampus-3pc-malware-iphone-users/151043/Lazarus rents TrickBot - https://www.zdnet.com/article/trickbot-gang-is-now-a-malware-supplier-for-north-korean-hackers/Turkey card sale - https://www.bleepingcomputer.com/news/security/batch-of-460-000-payment-cards-sold-on-black-market-forum/KeyWe (un)smart lock - https://www.theregister.co.uk/2019/12/11/f_secure_keywe/

Zeppelin attack, iKrampus, KeyWe (un)smart lock, and more.

A daily look at the relevant information security news from overnight.Episode 214 - 11 December 2019OAuth phishing - https://www.bleepingcomputer.com/news/security/phishing-attack-hijacks-office-365-accounts-using-oauth-apps/SGX vs PlunderVolt - https://www.zdnet.com/article/new-plundervolt-attack-impacts-intel-cpus/Don’t Blink - https://threatpost.com/amazon-blink-smart-camera-flaws/150962/AirDoS patch - https://techcrunch.com/2019/12/10/ios-airdrop-lock-up-iphones/WIndows zero-day patch - https://www.zdnet.com/article/microsoft-december-2019-patch-tuesday-plugs-windows-zero-day/Adobe critical patches - https://threatpost.com/adobe-fixes-critical-acrobat-photoshop-brackets-flaws/150970/

OAuth phishing, SGX vs PlunderVolt, Adobe critical patches, and more.

A daily look at the relevant information security news from overnight.Episode 213 - 10 December 2019Ryuk flaw - https://www.zdnet.com/article/ryuk-ransomware-contains-a-bug-causing-data-loss-for-some-victims/Snatch trick - https://www.bleepingcomputer.com/news/security/snatch-ransomware-reboots-to-windows-safe-mode-to-bypass-av-tools/iPR nightmare - https://threatpost.com/ge-dunkin-forever21-internal-doc-leak/150920/Birth to death exposed - https://techcrunch.com/2019/12/09/birth-certificate-applications-exposed/Pensacola attack - https://www.scmagazine.com/home/security-news/pensacola-hit-with-cyberattack-hours-after-shooting-at-naval-base/

Ryuk flaw, Snatch trick, Pensacola attack, and more.

A daily look at the relevant information security news from overnight.Episode 212 - 09 December 2019Car makers targeted - https://www.zdnet.com/article/bmw-and-hyundai-hacked-by-vietnamese-hackers-report-claims/Info stealing VPN - https://www.bleepingcomputer.com/news/security/fake-vpn-site-pushes-cryptbot-and-vidar-info-stealing-trojans/Facebook sues - https://www.scmagazine.com/home/security-news/legal-security-news/company-sued-for-allegedly-hijacking-facebook-accounts-to-serve-ads/NVIDIA patches - https://www.bleepingcomputer.com/news/security/nvidia-patches-severe-flaws-in-mercedes-infotainment-system-chips/MacOS trojan - https://threatpost.com/stealthy-macos-malware-lazarus-apt/150881/

Car makers targeted, Info stealing VPN, MacOS trojan, and more.

A daily look at the relevant information security news from overnight.Episode 211 - 06 December 2019VPN hijack - https://www.bleepingcomputer.com/news/security/new-linux-vulnerability-lets-attackers-hijack-vpn-connections/CyrusOne ransomed - https://www.zdnet.com/article/ransomware-attack-hits-major-us-data-center-provider/HackerOne pays bounty - https://www.scmagazine.com/home/security-news/vulnerabilities/cookie-leak-allows-white-hat-researcher-to-access-hackerone-vulnerability-reports/OpenBSD quick patch - https://www.zdnet.com/article/openbsd-patches-severe-authentication-bypass-privilege-escalation-vulnerabilities/VC BEC SOL - https://www.theregister.co.uk/2019/12/05/vcs_tricked_mitm/

VPN hijack, CyrusOne ransomed, VC BEC SOL, and more.

Cyber Security moves much too quickly to wait for a weekly news recap. That’s why we’re here each and every weekday bringing you the relevant Information Security stories from overnight. Make InfoSec Overnights part of your daily routine to ensure you and your team are up to the minute on the threats attacking your organization.

hubhopper

InfoSec Overnights - Daily Security News

hubhopper