Weekly Cyber Security News 09/02/2018

A selection of this week’s more interesting vulnerability disclosures and cyber security news. Much in the news this week ,though the trend seems to be focused on crypto heist and mining. This appears to be the new normal now. Away from those I was, and I’m not sure if the word excited is right, but I was excited in a way to see a rare CVE for OpenVMS. The inner geek in me remembers the old VMS days and I’ve added a revisit to my to-do list for old time’s sake. Doubt this CVE will affect that many but here you go: for

• CVE-2017-17482 An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later

However this CVE may be of serious interest as it affects WordPress and seeing how much attention that CMS gets I suspect if you’ve not been hit by it yet, you certainly will be as its not going to be fixed by the core team this article says… 

• CVE-2018-6389 In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times.

And here is one quite possibly non-viable air-gap attack which caught my eye because they claim they are breaching Faraday cages too…

• Stealthy Data Exfiltration Possible via Magnetic Fields

 

The other news is here… 

• 3 leaked NSA exploits work on all Windows versions since Windows 2000

• ‘Ransomware’ Added to Oxford English Dictionary The term is one of 1,100 new entries added to the Oxford English Dictionary this week.

• Abusing X.509 Digital Certificates for Covert Data Exchange

• Adobe Patches Flash Zero-Day Used in South Korean Attacks

• Adobe to Patch Flash Zero-Day Discovered in South Korean Attacks

• AutoSploit: Automated Hacking Tool Set to Wreak Havoc or a Tempest in a Teapot?

• Bangladesh to File U.S. Suit Over Central Bank Heist

• Business Wire Hit by Ongoing DDoS Attack

• Crypto-Mining Attacks Emerge as the New Big Threat to Enterprises

• Crypto-Mining Botnet Ensnares 500,000 Windows Machines

• Data stealing hacking tool ‘Luminosity Link’ taken out of use

• Flash Zero-Day Attacks Analyzed by FireEye, Cisco

• Flaws Affecting Top-Selling Netgear Routers Disclosed

• Hack The Box discloses email gaffe

• Intel Releases New Spectre Patches for Skylake CPUs

• Japan Raids Hacked Crypto Exchange, Bitcoin Plunges Further

• Kaspersky Patches Vulnerabilities in Secure Mail Gateway

• New Botnet Is Recruiting IoT Devices

• Philippine Bank Threatens Counter-Suit Over World’s Biggest Cyber-Heist

• Shoot the messenger, Thursday edition: Botched ICO leaks user’s passport data, calls police on guy who found the bug MIX reports

• US, International Law Enforcement Shut Down Massive Cybercrime Marketplace 

• Capable Luminosity RAT Apparently Killed in 2017

• Cryptocurrency Mining Malware Hits Monitoring Systems at European Water Utility

• MacUpdate Distributes Mac Crypto-Mining Malware

• New Zero-Day Ransomware Evades Microsoft, Google Cloud Malware Detection

• Hackers breached BeeToken’s email list and stole $1M worth of Ethereum TNW reports

• Apple iOS iBoot Secure Bootloader Code Leaked Online Lawyers for Apple called for the source code to be removed from GitHub.

• Crypto-mining Botnet Targets Android Devices

• Microsoft Anti Ransomware mitigation bypass

• Automation Software Flaws Expose Gas Stations to Hacker Attacks

• Cisco Aware of Attacks Exploiting Critical Firewall Flaw

• Cisco Reissues Patches for Critical Firewall Flaw

• Grammarly Rushes to Patch Flaw Exposing User Data

• Web Server Used in 100 ICS Products Affected by Critical Flaw