Cybersecurity

The US trade ban against Huawei has affected the company in a variety of ways, as its membership status with various interest groups has also come under fire. Now, the Wall Street Journal (paywall) reports that the company’s membership to the Forum of Incident Response and Security Teams (First) has been suspended.

Security scans of a WeWork building in New York’s Financial District uncovered security vulnerabilities in the company’s WiFi network that exposed financial records and devices of companies in the building. https://www.scmagazine.com/home/security-news/wework-unsecured-wifi-exposes-documents/

https://www.securitymagazine.com/articles/90960-preparing-for-physical-and-cybersecurity-convergenceff Cybersecurity has to be evolving to enhance physical security. The convergence of cyber and physical security still needs to be invested in more, in order to reach the intended level of security.

https://latesthackingnews.com/2019/09/19/simjacker-is-being-actively-exploited-in-the-wild-to-steal-location-data/ The attack exploits the presence of the S@T Browser in the UICC. This is done by a maliciously crafted SMS which triggers this component to let the SIM takeover to happen to the target device.

https://latesthackingnews.com/2019/09/20/police-warn-of-scammers-targeting-venmo-users-via-malicious-sms/ New smishing attack targets vinmo users. A message is sent saying that their account will be charged and that they need to sign into their account to cancel the transaction. A link is provided which will bring them to a fake login website which will steal their login credentials.

Facebook has suspended about 400 app developers due to the threats that can be posed by these developers of the apps. The suspicious apps forced Facebook to ban them because they found evidence that the shared personal data about the persons identity of their Facebook profile. Facebook is able to detect the malicious attacks of…

https://thehackernews.com/2019/08/hacker-phishing-bitcoin.html Hacker from England carries out numerous amounts of phishing scams towards companies, he took more then 60,000 debit card details and 78 million individuals username and passwords. After a two year long investigation he is ordered to pay back $1.1 million to the victims.

More than10 years ago, I was deployed to Iraq as a U.S. Air Force intelligence analyst, assigned to the Joint Special Operations Command (JSOC) Task Force with one clear objective: disrupt terrorist activities by targeting and capturing al-Qaeda insurgents. In constant pursuit of dangerous individuals with nefarious intentions, we sought to uncover the identities of…

https://threatpost.com/these-hacks-require-literally-sneaking-in-the-backdoor/148484/ This article goes over how Chris Pritchard and team are paid to sneak into Company owned buildings and try to see just how secure their information is by the actual company themselves.

Lots of new vulnerabilities have been found in a lot of the popular router brands people are using today. This is allowing attackers to gain full control over some of them https://thehackernews.com/2019/09/hacking-soho-routers.html

Cyber attacks are costing businesses millions of dollars. For instance, a cyber attack in Baltimore ended up costing a business 18 million dollars which hurt the company tremendously. This article discusses the urgency for businesses to invest more in cyber security. Although cybersecurity is not cheap it has the potential to save a company millions…

chrome removed 2 add blockers that after over 3/4 of a million downloads was found to sniff for cookies. https://www.zdnet.com/article/google-removes-two-chrome-ad-blocker-extensions-caught-cookie-stuffing/

20,000 batch of payment card details were found on the dark web and they are traced back to local governments through the Click2gov web-based portals. https://www.zdnet.com/article/two-years-later-hackers-are-still-breaching-local-government-payment-portals/

An ongoing investigation in regards to a recent data breach that made 20 million people's personal information available online is being investigated in Ecuador. The server was owned by a company in Ecuador called "Novaestrat".

The google chrome browser has been updated, after critical vulnerabilities were found in the browser which would allow remote attackers to access the system and redirect users to websites without any consent. Google has yet to release all details while users update, but the severity of the problem was was quite clear. https://thehackernews.com/2019/09/google-chrome-update.html

A remote access trojan (RAT) named InnfiRAT is stealing bitcoin and cryptocurrency wallet data stored on the infected devices. Bitcoin And Crypto Wallets Are Now Being Targeted By Malware

the popular AdBlock and uBlock have been stuffing user cookie without the user permission or knowledge. it has effected over million of google chrome user. https://cyware.com/news/over-1-million-google-chrome-users-affected-by-cookie-stuffing-from-two-popular-adblockers-5bd6dbcc

Adblock, and Ublock two popular ad block extensions for chrome where found to be stuffing cookies to generate revenue. On Monday, Google removed the two ad blockers that where involved in the extensive fraudulent activity.

Tells about we can use less knowledge for data and things in practice.