Weekly Cyber Security News 01/11/2019

A selection of this week’s more interesting vulnerability disclosures and cyber security news. Quite a bizarre selection for you this week. The first, and well, what can I say? Another example of our robot overlords failing:

• Bedside Hotel Robot Hacked to Stream In-Room Video

Even if you are not in Europe, you will have heard of GDPR, and more importantly be aware of the huge fines for breaching it. So…. In light of the risk and possible breach of privacy, I have to ask who came up with this bright idea, and then managed to get others to approve it?

• Belgian city slurps mobile data to track visitors

If that one was a serious brain bypass, the next one shows the disastrous outcome of idle curiosity.

• Medical data is being leaked by NHS pagers, and then broadcast for the world to see!

 

The other news this week…

• Some ICS Security Incidents Resulted in Injury, Loss of Life: Survey

• A Broken Random Number Generator in AMD Microcode

• City of Johannesburg Refuses to Pay Ransom to Hackers

• Murky Details Surround Bed, Bath and Beyond Breach

• UniCredit Suffers Third Breach Despite Investing Billions in Cybersecurity

• 2,000 Georgia Websites Hit by Cyber Attacks

• 21 Million Logins for Top 500 Firms Offered on the Dark Web

• Adobe Exposed Creative Cloud Customer Information

• Bed Bath & Beyond Blames Password Reuse for Hacked Accounts

• Breaches at NetworkSolutions, Register.com, and Web.com

• Cash App Twitter Giveaway a Haven for Stealing Money Scammers are targeting those hoping for #CashAppFriday _blessings._

• Cyber-attack hits Utah wind and solar energy provider

• Cyberattack Causes Serious Disruptions at German Automation Firm Pilz

• DDoS Attack Hits Amazon Web Services

• DDoS Attack on Amazon Web Services caused intermittently outage

• Facebook sues Israeli surveillance vendor over WhatsApp zero-day

• GEDmatch highlights security concerns of DNA comparison websites

• Insurance Pays Out a Sliver of Norsk Hydro’s Cyberattack Damages

• Magecart Gang Targets Skin Care Site Visitors For 5+ Months

• Python support added to Threat Stack”s Application Security Monitoring tool

• Q. Who’s triumphantly slamming barn door shut after horse bolted at warp 9? A. NordVPN

• Researchers Warn of New Cache-Poisoned DoS Attack Method

• The Threat to SoHo IoT Devices is Growing Rapidly

• Valve Source Engine, Fortnite Servers Crippled By Gafgyt Variant

• World’s First Domain Registrar Network Solutions Discloses Breach

• MikroTik Router Vulnerabilities Can Lead to Backdoor Creation

• 40 million emoji-addicted keyboard app users left with $18m bill after malware sneaks into Play Store yet again

• Confirmed: North Korean malware found on Indian nuclear plant’s network

• QSnatch Malware Infects Thousands of NAS Devices, Steals Credentials

• Raccoon Malware-as-a-Service Gains Momentum

• Researchers unearth malware that siphoned SMS texts out of telco’s network

• The count of managed service providers getting hit with ransomware mounts

• Trend Micro Patches Code Execution Vulnerability in Anti-Threat Toolkit

• Fancy Bear Targets Sporting, Anti-Doping Orgs As 2020 Olympics Loom

• Millions Download Adware-Carrying Apps From Google Play

• Samsung Rolls Out Fix For Galaxy S10 Fingerprint Sensor Glitch

• Pwn2Own Expands Into Industrial Control Systems Hacking

• Slack Offers Bigger Rewards for Serious Vulnerabilities