Cyber Bites

  Managing complex multivendor environments is a reality for companies today — and it's become chief information security officers' (CISO) worst enemy. To help solve this problem, Cisco has developed SecureX, a cloud-native platform that increases the productivity of security teams. SecureX unifies visibility, identifies unknown threats, and automates workflows to strengthen customers' security across network, endpoint, cloud, and applications. Source: Business Insider

A new backdoor malware called Mozart is using the DNS protocol to communicate with remote attackers to evade detection by security software and intrusion detection systems. Typically when a malware phones home to receive commands that should be executed, it will do so over the HTTP/S protocols for ease of use and communication. Source: Bleeping Computer  

  Fortnite star Tyler "Ninja" Blevins' Twitter account is the latest high profile account to get taken over by hackers. After gaining control of Ninja's Twitter account, the majority of the tweets were posted related to promoting the hacker's Twitter account, telling Ninja's followers to go and follow the account @OwenBreh - an account that has since been suspended by Twitter and hurling insults at the popular streamer, Tfue, and DramaAlert host, KEEMSTAR. Source: Gadgets...

Researchers identified eight malicious Android apps, mostly camera utilities, and children’s games, that were spreading a new data-stealing malware strain that also signs victims up for expensive premium services. The malware, named Haken, was found in apps is in the Google Play marketplace. Since it was discovered, victims have claimed that the malware signs them up for premium subscription services without permission and covertly. The eight apps have since been removed from the Play Marketplace,...

  Google has brought its popular Lighthouse extension used by over 400,000 users to Mozilla Firefox so that web developers can test the browser's performance against submitted web pages. Lighthouse is an open-source tool for testing the performance of web pages through Google's PageSpeed Insights API and was released as an extension for Google Chrome in 2016. Source: Bleeping Computer

With the release of Google Chrome 80, Google quietly slipped in a new feature that allows users to create a link directly to a specific word or phrase on a page. A Brave Browser researcher, though, sees this as a potential privacy risk and is concerned Google added it too quickly. Source: Bleeping Computer

Slickwraps has revealed a data breach impacting over 850,000 user accounts, admitting its mistake in permitting customer records to become public. Slickwraps is an online store that offers skins for a variety of smartphones, tablets, gaming consoles, and laptops. Last week, the company said in a blog post that on February 21, Slickwraps discovered that customer records were available and "mistakenly made public via an exploit." Source: ZD Net

A default password would let anyone access the Cisco Smart Software Manager On-Prem Base platform, even if it’s not directly connected to the internet.  A critical flaw in the High Availability (HA) service of Cisco Smart Software Manager On-Prem Base has been uncovered, which would open the door to remote attackers thanks to its use of a static, default password, even if the platform isn’t directly connected to the internet. Source: Threatpost

Neebs Gaming, a highly popular YouTube gaming channel boasting of 1.88 million subscribers, was hacked over the weekend by unidentified crypto scammers, who changed its name and banner to Coinbase Pro to collect Bitcoin from its viewers/subscribers. Source: HackRead

The US Department of Defence confirmed that computer systems controlled by the Defence Information Systems Agency (DISA) had been hacked, exposing the personal data of about 200,000 people.The agency oversees military communications including calls for US President Donald Trump. The data exposed included names and social security numbers. Source: BBC