Cyber Security News & Trends
This week, one city is back to using pen and paper after a ransomware attack, cybercriminals utilize popular video game Fortnite in a money laundering scam and construction industry cranes are alarmingly vulnerable to being hacked.
SonicWall Spotlight
SSL, TLS Certificates Expiring on US Government Sites During Federal Shutdown – SonicWall Blog
- SonicWall’s Brook Chelmo explains why US Government websites are starting to suffer during the ongoing Government Shutdown, explaining that security certificates are not being updated and what kind of messages you might be seeing as a result.
Cyber Security News
Hack Brief: An Astonishing 773 Million Records Exposed in Monster Breach – Wired
- Wired details the mega-breach where at least 773 million emails and 21 million unique passwords have been released in a folder called “Collection #1.” Some are calling this the largest collection of breached data ever found, although it should be noted that Collection #1 is a compilation of both old and new leaked details.
Fortnite Is Being Used by Criminals to Launder Cash Through V-Bucks – ZDNet
- Criminals have been using the in-game currency in Fortnite for laundering money from stolen cards. It is not known exactly how much profit the cybercriminals have made, but Fortnite coins sold on eBay alone have grossed over $250,000 in two months.
Defense Department Continuously Challenged on Cybersecurity – Security Week
- A report has revealed that while the U.S. Department of Defense has been making strides to improve their cybersecurity stance, they are still struggling. In September of last year there were 266 open cybersecurity‑related recommendations, some dating as far back as 2008.
NotPetya Victim Mondelez Sues Zurich Insurance for $100 Million
- Zurich insurance rejected a $100 million claim by Mondelez saying that since the NotPetya ransomware attack has been seen by some, including the UK government, as a Russian military attack it is not covered by standard insurance against malware. Mondelez are taking legal action in response.
Oklahoma Gov Data Leak Exposes FBI Investigation Records, Millions of Department Files – ZDNet
- A storage server belonging to the Oklahoma Department of Securities was found with terabytes of confidential data exposed and accessible to the public.
Yes, You Can Remotely Hack Factory, Building Site Cranes. Wait, What? – The Register
- Cybersecurity protection on cranes, drilling rigs, and other heavy machinery has been found to be severely lacking with a report into the area finding that none of the radio remote controllers investigated had “implemented any protection mechanism to prevent unattended reprogramming.”
WEF: Cyber-Attacks a Major Global Risk for Next Decade – Infosecurity Magazine
- The World Economic Forum released a reporting stating that cyberattacks remain as one of the risks facing the world today with 82 percent of those queried stating they expect data and monetary theft attacks to increase.
Ransomware Attack Sends City of Del Rio Back to the Days of Pen and Paper – ZDNet
- Officials at Del Rio, Texas, had to abandon their computers and switch to pen and paper after a ransomware attack last week. It has not been revealed who is behind the ransomware but the FBI have been informed and are investigating.
Emotet Malware Returns to Work After Holiday Break – BankInfoSecurity
- Whether coincidence or a sign that the criminals were actually on holidays, a number of malware strains including Emotet have returned in 2019 after falling out of use towards the end of the year. BankInfoSecurity trace the history and usage of Emotet, including information on where in the world it has and has not been striking.
In Case You Missed It
- December 2018 Cyber Threat Data: Ransomware Peaking Globally – John Lynch
- 2018 Holiday Cyber Threat Data: Final Analysis Shows Big Ransomware Spikes in US, UK – John Gordineer
- 4 Security Predictions for MSSPs in 2019 – Brook Chelmo
- Is 802.11ax Going Away? And What is Wi-Fi 6? – Srudi Dineshan
