Weekly Cyber Security News 25/10/2019

A selection of this week’s more interesting vulnerability disclosures and cyber security news. A great choice in the news this week. I have to start with a huge breach of another hotel chain with the added misfortune that it also reaped US military bookings. Ouch.

• Open database leaked 179GB in customer, US government, and military records

Second breach again for Avast but they are not giving up:

• Avast: No plans to discontinue CCleaner following second hack in two years

• Avast says hackers breached internal network through compromised VPN profile

Out of pure love for geek treasure an insight into ancient (OK, I’m not really that young !) technology  still hanging in there:

• US stopped using floppy disks to manage nuclear weapons arsenal

 

And the other news…

• Hacker Breached Servers Belonging to Multiple VPN Providers

• Alexa and Google Home abused to eavesdrop and phish passwords

• Cryptocurrency executives charged with running $11 million Ponzi scheme

• Equifax used ‘admin’ as username and password for sensitive data: lawsuit

• If there were almost a million computer misuse crimes last year, Action Fraud is only passing 2% of cases to cops

• Italians Rocked by Ransomware

• Just say the “magic password”: Boffins turn up potential backdoor in SQL Server 2012, 2014

• Major German manufacturer still down a week after getting hit by ransomware

• Mercedes-Benz app glitch exposed car owner’s information to other users

• Microsoft 365 Authentication Outage, Users Unable to Login

• No ‘Silver Bullet’ Fix for Alexa, Google Smart Speaker Hacks Karsten Nohl, who was behind this week’s research that outlined new eavesdropping hacks for Alexa and Google Home, says that privacy for smart home assistants still has a ways to go.

• Researchers find stealthy MSSQL server backdoor developed by Chinese cyberspies

• Row erupts over who to blame after NordVPN says: One of our servers was hacked via remote management tool

• Samsung Galaxy S10 Banned by Banks Due to Buggy Fingerprint Reader

• Should all connected cars have a physical network kill switch?

• Thousands Warned Over Home Group Data Breach

• Tuesday: UK High Court will hear extradition appeal from alleged member of thedarkoverlord

• Four-Year-Old Critical Linux Wi-Fi Bug Allows System Compromise A patch is currently under revision but has not yet been incorporated into the Linux kernel.

• Ingredients Giant Ingredion Hit by Malwar

• Major Airport Malware Attack Shines a Light on OT Security A cryptomining infection spread to half of the workstations at a major international airport.

• Fake WordPress Plugin Comes with Cryptocurrency Mining Function