Cyber for the intelligent….
Talos is publishing a glimpse into the most prevalent threats we’ve observed between Sep. 6. to Sep 13. As with previous roundups, this post isn’t meant to be an in-depth analysis. Instead, this post will summarize the threats we’ve observed by highlighting key behavioural characteristics, indicators of compromise, and discussing how our customers are automatically protected from these threats.
Source: Threat Roundup for September 6 to September 13
OWASP’s new list of API weaknesses focuses on issues that have caused recent data breaches and pose common security hazards in modern cloud-based applications.
A new threat report from Netscout identifies an increased level of APT activity targeting the airline and airport industries.
Their findings highlight that APT groups from China, Iran and Russia are targeting this sector to gather intelligence data from airports, airlines and aeroplane manufacturers.
The types of intelligence data and outcomes are:
More Detail: Air APT
Unlike previous side-channel vulnerabilities disclosed in Intel CPUs, researchers have discovered a new flaw that can be exploited remotely over the network without requiring an attacker to have physical access or any malware installed on a targeted computer.
Source: NetCAT: New Attack Lets Hackers Remotely Steal Data From Intel CPUs
It’s monthly Microsoft patching time, with the software giant releasing updates to fix 79 vulnerabilities across their product range, with 17 critical and 61 important.
A couple of these were to fix vulnerabilities with a public exploit. One of these is probably CVE-2019-1235, the privilege escalation in Windows Text Service Framework (TSF), which was disclosed by Google.
Another two fixed vulnerabilities reported as actively exploited in the wild, which are both privilege escalations problems.
They also fixed four remote code execution bugs in the RDP client built-in to Windows (CVE-2019-0787 / CVE-2019-0788 / CVE-2019-1290 / CVE-2019-1291).
Other notable critical patches were for:
Another busy month for the MS team, and another busy month for operational teams deploying the fixes.
Good luck!
Mozilla has officially launched a new privacy-focused VPN service, called Firefox Private Network, as a browser extension that aims to encrypt your online activity and limit what websites and advertisers know about you.
Firefox Private Network service is currently in beta and available only to desktop users in the United States as part of Mozilla’s recently expunged “Firefox Test Pilot”
Source: Mozilla Launches ‘Firefox Private Network’ VPN Service as a Browser Extension
It’s Patch Tuesday again—the day of the month when both Adobe and Microsoft release security patches for vulnerabilities in their software. Adobe has just released its monthly security updates to address a total of 3 security vulnerabilities in only two of its products this time—Adobe Flash Player and Adobe Application Manager (AAM).
Source: Adobe Releases Security Patches For Critical Flash Player Vulnerabilities
Coders release a working exploit for the dangerous Bluekeep bug that was found and patched earlier this year in Microsoft’s Remote Desktop Protocol implementation
Source: Metasploit Project publishes exploit for Bluekeep bug
The Instagram account of Robert Downey Jr. has been hacked. He is the last celebrity to have their social media accounts compromised.
This time the attacker did not publish offensive content but attempted to monetize their efforts by posting fake giveaways for Apple products.
Source: Robert Downey Jr’s Instagram account has been hacked
Talos is publishing a glimpse into the most prevalent threats we’ve observed between Aug. 30 and Sep. 6. As with previous roundups, this post isn’t meant to be an in-depth analysis. Instead, this post will summarize the threats we’ve observed by highlighting key behavioural characteristics, indicators of compromise, and discussing how our customers are automatically protected from these threats.
