Cyber Bites

Cisco acknowledged yesterday that it bungled a crucial patch for a vulnerability in two router models. The company's shoddy initial patches allowed hackers to continue attacks throughout the past two months.The security flaws impact Cisco RV320 and RV325 WAN VPN routers, two models popular with internet service providers and large enterprises. Source: ZDNet

The parking garage used by employees of the Canadian Internet Registration Authority (CIRA) allowed people to park for free after computer systems were infected by ransomware. CIRA is a not-for-profit organization that manages the .CA country code top-level domain (ccTLD) and represents the Canadian domains internationally. Source: BleepingComputer

The Mozilla Foundation yesterday issued a security update for its Thunderbird open-source email client, fixing two critical vulnerabilities involving its IonMonkey JavaScript JIT (just-in-time) compiler. The first of the two flaws, CVE-2019-9810, consists of incorrect alias information when using the Array.prototype.slice method, which could result in a missing bound check and buffer overflow. The second issue, CVE-2019-9813, is described as the mishandling of __proto__ mutations of, which can lead to type confusion in IonMonkey JIT code, allowing...

A new ransomware called Unnam3d R@nsomware is being distributed via email that will move a victim's files into password protected RAR archives.  The ransomware then demands a $50 Amazon gift card code in order to get the archive password. Source: BleepingComputer

Google has set up an advisory council to advise it on ethical issues surrounding artificial intelligence (AI), automation and other emerging technologies. The so-called Advanced Technology External Advisory Council (ATEAC) consists of eight members and includes technology experts and 'digital ethicists'. Source: Computing

Federal Reserve Bank (FRB) systems are exposed to an increased risk of unauthorized access because of security weaknesses found in the U.S. Treasury Department's computing systems according to a management report issued by the U.S. Government Accountability Office (GAO). Source: Bleeping Computer

ASUS released today a new version of the Live Update tool that contains fixes for vulnerabilities that were exploited by a nation-state group to deploy the ShadowHammer backdoor on up to one million Windows PCs. Source: ZDNet

The European Parliament has backed controversial copyright laws critics say could change the nature of the net. The new rules include holding technology companies responsible for material posted without proper copyright permission. Many musicians and creators say the new rules will compensate artists fairly - but others say they will destroy user-generated content. Source: BBC

Facebook has removed over 2,600 fake pages, groups, and accounts from the social network and Instagram which have been involved in "inauthentic" behaviour designed to stir up political tension worldwide. Source: ZD Net

Low-key but effective, steganography is an old-school trick of hiding code within a normal-looking image, where many cybersecurity pros may not think to look. A recent Fortinet report found that one of these threats in need of monitoring is the recent revival of the “old school” trick of steganography. Source: Threatpost