Weekly Cyber Security News 28/02/2020

A selection of this week’s more interesting vulnerability disclosures and cyber security news. For a daily selection see our twitter feed at #ionCube24. Such a wonderful selection to pick from this week, but of course, my favourite are IoT fails. While most are quite ridiculous and generally limit the risk, a new product on the market has elevated the risk of serious damage by introducing the remote control of real fire!

• Internet of Things Candle

I’m always fascinated to hear the detail of behind the scene battles between the ‘Good Guys’ and ‘Bad Guys’ , and here are two wonderful examples:

• How a Hacker’s Mom Broke Into a Prison and the Warden’s Computer

• Exaggerated Lion and Business Email Compromise – Don’t send that check!

 

In other news…

• Ordnance Survey Breach Hits Employee Data

• Samsung cops to data breach after unsolicited ‘1/1’ Find my Mobile push notification

• Slickwraps says customer trust was ‘violated’ in data breach caused by glaring security holes

• UK Financial Regulator Admits to Data Breach

• 18 Sniffers Steal Payment Card Data from Print Store Customers

• After blowing $100m to snoop on American’s phone call logs for four years, what did the NSA get? Just one lead

• Attack Campaign Leveraged Coronavirus Theme to Deliver Remcos RAT

• Australian banks targeted by DDoS extortionists

• Chrome 80 update cripples top cybercrime marketplace

• Cisco patches incoming to address Kr00k vulnerability impacting routers, firewall products

• Credit Card Skimmer Uses Fake CDNs To Evade Detection

• Facial Recognition Biz Clearview AI Suffers Data Breach

• If you”re serious about browser privacy, you should probably pass on Edge or Yandex, claims Dublin professor

• Microsoft Wants to do Away with Windows 10 Local Accounts

• Over 120 Million US Consumers Exposed in Privacy Snafu

• PayPal Users Hit With Fraudulent ‘Target’ Charges via Google Pay

• Ransomware Attack at US Power Station

• Rotherwood Healthcare AWS bucket security fail left elderly patient’s DNR choices freely readable online

• Sophos was gearing up for a private life – then someone remembered the bike scheme

• Sports Giant Decathlon Leaks 123 Million Records

• SQL Dump from BGR India Shared on Hacker Forum

• Stalkerware infections grew by 40% in 2019, says Kaspersky

• UK financial watchdog admits to leaking confidential consumer data

• Zyxel storage, firewall, VPN, security boxes have a give-anyone-on-the-internet-root hole: Patch right now

• Kr00k Vulnerability Exposed Data From Over a Billion Wi-Fi Devices

• Report identifies the most dangerous mobile app store on the internet

• Android malware can steal Google Authenticator 2FA codes

• Haken Malware Family Infests Google Play Store

• Microsoft uses its expertise in malware to help with fileless attack detection on Linux

• Sodinokibi Ransomware May Tip NASDAQ on Attacks to Hurt Stock Prices

• State-Sponsored Cyberspies Use Sophisticated Server Firewall Bypass Technique

• Apple Takes Heat Over ‘Vulnerable’ iOS Cut-and-Paste Data

• Former Microsoft engineer convicted of 18 felonies for digital currency fraud scam

• Hackers Looking for Exchange Servers Affected by Recently Patched Flaw

• Less Than Half of Vulnerabilities in Popular Docker Images Pose Risk: Study