News

The FBI Cyber Division issued a flash security alert earlier this month with additional indicators of compromise from recent defacement attacks operated by Iranian threat actors and info on attackers' TTPs to help administrators and users to protect their websites. Source: Bleeping Computer

A new ransomware called Ragnarok has been detected being used in targeted attacks against unpatched Citrix ADC servers vulnerable to the CVE-2019-19781 exploit. Last week, FireEye released a report about new attacks exploiting the now patched Citrix ADC vulnerability to install the new Raganarok Ransomware on vulnerable networks. Source: Bleeping Computer

More than a dozen teams in the US National Football League have had their social media accounts hacked. The teams included the San Francisco 49ers and Kansas City Chiefs, who will compete in the Super Bowl Championship on 2 February. Source: BBC

The City of Potsdam severed the administration servers' Internet connection following a cyberattack that took place earlier this week. Emergency services including the city's fire department fully operational and payments are not affected. Source: Bleeping Computer

As reported by many cybersecurity experts, using an old smartphone (either Android or iOS) can put your data on hacking risk. Security researchers urge users to upgrade from their old phones, (particularly that don't receive software updates anymore) to new safer devices and operating system, to stop any potential hacking attempt. Source: Digital Information World

PHONE scammers are targeting residents in a county town. The caller claims to represent Amazon Prime, a paid subscription service offered by the online retailer Amazon, giving people access to services such as free two day delivery, when calling homes in Malvern. Source: Worcester News

Netflix subscribers are being warned to show caution after a sophisticated phishing scam was discovered flooding inboxes across the country. The scam ironically mimics 3-step verification - a common digital safety feature used to protect sensitive data online – to trick victims into thinking the email is from Netflix. Source: 9 News

Data privacy is at the center of core issues that governments are trying to solve this year. Privacy advocates have been requesting more stringent privacy laws and governments have responded. The European Union’s General Data Protection Regulation (GDPR) has served as an effective blueprint for new privacy laws. This year, we are seeing new privacy laws come into effect, such as Brazil’s LGPD, the United States’s CCPA, and more. Under GDPR, there have been over...

German car rental company Buchbinder exposed the personal information of over 3.1 million customers including federal ministry employees, diplomats, and celebrities, all of it stored within a ten terabytes MSSQL backup database left unsecured on the Internet. Source: Bleeping Computer

A new malware called CARROTBALL, used as a second-stage payload in targeted attacks, was distributed in phishing email attachments delivered to a U.S. government agency and non-US foreign nationals professionally affiliated with current activities in North Korea. Source: Bleeping Computer