Weekly Cyber Security News 12/07/2019

A selection of this week’s more interesting vulnerability disclosures and cyber security news. And Magecart is back…. In a big way too. Need to watch out even if you don’t have Magento as their new approach could just leave the dodgy JS all over the place:

• New Magecart attacks leverage misconfigured S3 buckets to infect over 17K sites (ZDNet)

Here is a staggering tale of two wrongs definitely not making a right!

• Troll lawyer uploads porn to Pirate Bay, extorts downloaders to settle ‘copyright’ claims

After those revelations, why not some out right geek action? So much fun can still be had in old tech 🙂

• Computer from NASA’s Apollo program reprogrammed to mine bitcoin

 

Other exciting news…

• BA’s Magecart Breach Lands it £183m GDPR Fine

• Hackers breached Greece’s top-level domain registrar (ZDNet)

• Marriott Faces $123 Million Fine in UK for Data Breach

• 5G: If you want it this year, Huawei is the only game in town, says Three (ZDNet)

• Amazon asks for clarification of data retention requirements under Australia’s encryption laws (ZDNet)

• AMD”s SEV tech that protects cloud VMs from rogue servers may as well stand for… Still Extremely Vulnerable (The Register)

• Apple says its Walkie-Talkie app could be exploited to spy on iPhones

• Bug in Anesthesia Machines Allows Changing Gas Mix Levels

• Canonical GitHub Account Hijacked

• Croatian government targeted by mysterious hackers (ZDNet)

• Dridex Banking Trojan, RMS RAT Dropped via Fake eFax Messages

• EFF, OTI Respond to UK’s Online Harms Legislative Proposal

• Estonia’s new e-residency security focus: “You can’t launder money with a digital ID” (ZDNet)

• Fake eFax emails are now spreading Dridex Trojan, RMS RAT

• Flaw in Rockwell PanelView Allows Root-Level Access to Devices

• GE Aviation Passwords, Source Code Exposed in Open Jenkins Server A DNS misconfiguration resulted in an open Jenkins server being available to all.

• Google says leaked assistant recordings are a violation of data security policies (ZDNet)

• Google suspends Trends email alerts in NZ after breaching murder trial order (ZDNet)

• InfoSec Europe 2019 Compendium (InfoRiskToday)

• Jira Server and Data Center Update Patches Critical Vulnerability

• Latest FinSpy Modules Lift Data from Secure Messaging Apps The espionage tool is capable of eavesdropping on calls and messages sent via Signal, Telegram, WhatsApp and more.

• Libra Cryptocurrency Scams Already Active Ahead Of 2020 Launch

• Logitech wireless USB dongles vulnerable to new hijacking flaws

• Magecart Blitz Stuns 962 E-commerce Sites in 24 Hours

• Malicious campaign targets South Korean users with backdoor-laced torrents

• Medway Council reforms eforms to stop blurting out resident’s details (The Register)

• Microsoft admitted to private Linux developer security list (ZDNet)

• Microsoft stirs suspicions by adding telemetry files to security-only update (ZDNet)

• Misconfigured ElasticSearch Cluster Exposed Over 90 Million Records

• Mozilla bans surveillance vendor from Firefox certificate whitelist

• Mozilla: No plans to enable DNS-over-HTTPS by default in the UK (ZDNet)

• OneLogin Appoints Joanne Bradford to Board of Directors

• Over 90 Million Records Leaked by Chinese Public Security Department

• Ransomware Hits Over a Quarter of UK Firms

• Recent Windows zero-day used by Buhtrap gang for cyber-espionage (ZDNet)

• Remember Stuxnet; You’ll endure its hated-by-critics sequel if you don’t patch your holey Siemens industrial kit (The Register)

• Research on Human Honesty

• Scots NHS symptom checker pings Facebook, Google and other ad peddlers

• The world”s most famous and dangerous APT (state-developed) malware

• Two pentesters, one glitch: Firefox browser menaced by ancient file-snaffling bug, er, feature

• UK Firms Hit By Attacks Every 50 Seconds

• UK Spy Agency Decrypts Some Secrets With New Exhibition

• UK”s largest police forensics lab paid ransom demand to recover locked data

• UK: Security Medway Council reforms eforms to stop blurting out resident’s details

• Zoom defends use of local web server on Macs after security report (ZDNet)

• Hackers Infect Pale Moon Archive Server With a Malware Dropper

• Beware of Fake Microsoft OneNote Audio Note Phishing Emails

• Agent Smith Malware Infects 25M Android Phones to Push Rogue Ads Researchers say malware infects phones in order to sneak ads on devices for profit.

• Anubis Android banking malware returns with extensive financial app hit list

• Meet the Great Duke of… DLL: Microsoft shines light on Astaroth, a devilishly sneaky strain of fileless malware

• Did a hacked smart TV upload footage of couple having sofa sex to a porn website?

• Researchers Find 17,490 Anubis Android Malware Samples

• Bad McAfee Exploit Prevention Update Blocked Windows Logins

• Mozilla Introduces Grizzly Browser Fuzzing Framework

• Open Source Genomic Analysis Software Flaw Patched (InfoRiskToday)

• Prototype Pollution flaw discovered in all versions of Lodash Library

• Zoom Mac flaw allows webcams to be hijacked – because they wanted to save you a click

• Zoom Pushes Emergency Patch for Webcam Hijack Flaw After media scrutiny, the collaboration service has decided to address the zero-day after initially dismissing its severity.