Weekly Cyber Security News 15/06/2018

A selection of this week’s more interesting vulnerability disclosures and cyber security news. Now I’m always interested by automotive hacks, but what really grabbed my attention was messing around with ships. I’ve had some exposure to navigation systems and I can quite believe it to be honest:

• Hackers Can Hijack, Sink Ships: Researchers

• Shipping Industry Cybersecurity: A Shipwreck Waiting to Happen Pen Test Partners demonstrates how to send vessels off-course or even onto a path to collision- fairly easily.

Have you checked what Docker containers you have running recently?

• Malicious Docker Containers Earn Cryptomining Criminals $90K Researchers said over a dozen malicious docker images available on Docker Hub allowed hackers to earn $90,000 in cryptojacking profits.

And finally, a curios and catastrophic attack which leaves many more questions open such as (apart from how it spread so quickly), given that the system was completely out why only take so little compared to other SWIFT attacks? Did they just strike ‘lucky’ in that the outage was bigger than they thought?

• Banco de Chile Wiper Attack Just a Cover for $10M SWIFT Heist The wiper malware affecting 9,000 workstations and 500 servers inside Chile’s largest financial institution turns out to have been a distraction.

The rest of the news:

• Drupal Refutes Reports of 115,000 Sites Still Affected by Drupalgeddon2

• 5.9 Million Card Details Accessed in Dixons Carphone Hack

• 74 Arrested in International Operation Targeting BEC Scams

• Adobe Issues Emergency Patch for Flash Zero-Day

• Bitcoin Declines After Coinrail Cryptocurrency Exchange Hack

• Cryptocurrency Theft Tops $1 Billion in Past Six Months

• DDoS Amped Up: DNS, Memcached Attacks Rise

• Dixons Carphone Hack Compromises 5.9M Payment Cards The UK electronics retailer says the hack, which began last July, also involves 1.2M personal data records.

• European Parliament Votes to Ban Kaspersky Products

• Exploit Kits Target Recent Flash, Internet Explorer Zero-Days

• Facebook Admits Privacy Settings ‘Bug’ Affecting 14 Million Users

• Facebook Bug Sets 14M Users’ Settings to ‘Public’ The default sharing setting was accidentally changed for millions of accounts during a four-day period last month.

• Foscam Issues Patches For Vulnerabilities in IP Cameras Researchers found three vulnerabilities in Foscam connected security cameras that could enable a bad actor to gain root access knowing only the camera’s IP address.

• Google Removes Inline Installation of Chrome Extensions

• Google Won’t Use Artificial Intelligence for Weapons

• Group That Caused Power Outage Stops Focusing Exclusively on Ukraine

• In Pursuit of Cryptography’s Holy Grail Homomorphic encryption eliminates the need for data exposure at any point something that certainly would be welcome these days.

• Intel Discloses Yet Another Side Channel Vulnerability

• Lenovo Finally Patches Ancient BlueBorne Bugs in Tab and Yoga Tablets Lenovo patches several popular tablet models to protect against BlueBorne vulnerabilities first identified in September 2017.

• Major Vulnerabilities in Foscam IP Cameras

• Microsoft Fixes 11 Critical, 39 Important Vulns The most critical vulnerability, experts say, affects Windows Domain Name Systems, while another lets attackers hack Cortana from the lock screen.

• MIT’s AI can now ‘see’ and track people through walls using wireless signals

• Operation Prowli Profits On Weak IoT Devices, Servers A new malicious campaign has compromised more than 40,000 machines globally to monetize via traffic hijacking and cryptomining.

• Unprotected Server Exposes Weight Watchers Internal IT Infrastructure Researchers found that a critical Weight Watchers server revealed its IT internal infrastructure.

• VPNFilter Malware Impact Larger Than Previously Thought Researchers said they now believe the malware has infected twice the number of router brands than previously stated and that the malware packs a much deadlier punch. 

• $175 Million in Monero Mined via Malicious Programs

• ‘RedEye’ Ransomware Destroys Files, Rewrites MBR

• 7 Variants (So Far) of Mirai Mirai is an example of the newest trend in rapidly evolving, constantly improving malware. These seven variants show how threat actors are making bad malware worse.

• New KillDisk Variant Hits Latin America

• Triton ICS Malware Developed Using Legitimate Code

• Facebook bug set 14 million users sharing settings to public Heather Kelly reports

• Facebook Software Bug Made Some Private Posts Public: 14 Million Affected A Facebook glitch in May set millions of posts that users composed to public_ for ten days.

• Hackers can summon Cortana to break into Windows 10 PCs Tom Warren reports

• Microsoft Releases Mitigations for Spectre-Like ‘Variant 4’ Attack

• Adobe Patches Critical Flash Player Bug With Active Exploit A critical Adobe flaw is being exploited in targeted attacks against Windows users.

• Code Signing Flaw Affects all Mac OS Versions Since 2005

• MY: Putrajaya’s exam portal shut down, after data breach affecting millions Zurairi Ar reports

• New ‘PyRoMineIoT’ Malware Spreads via NSA-Linked Exploit

• New Hack Weaponizes the Web Cache Researcher exploits design flaws in Web caching to take control of popular websites, frameworks and the Mozilla Firefox browser infrastructure.

• Serious Flaws Found in Philips Patient Monitoring Devices

• Two Bugs in WordPress Tooltipy Plugin Patched The bugs include a reflected cross-site scripting glitch and a cross-site request forgery vulnerability.