November 2018 - Securezoo

Marriott’s Starwood hotels data breach

Data Breach / Frank Crast / November 30, 2018 / Data Breach, Hotels, Marriott, SPG, Starwood

Marriott Hotels issued a statement that a breach at its subsidiary Starwood Hotels reservation system exposed personal data on nearly 500 million customers.

Marriott’s Starwood hotels data breach Read More »

DNSpionage campaign threat targets Middle East

Leave a Comment / Cryptography, Cybersecurity Attacks, Network Security / Frank Crast / November 29, 2018 / Cisco, Cyberattack, Cyberesionage, DNS, DNSpionage, Lebanon, Middle East, Talos, UAE

Cisco’s Talos security group has discovered a new cyber campaign dubbed “DNSpionage” that targets organizations in the Middle East. The cyber attacks have impacted .gov domains in Lebanon and the United Arab Emirates (UAE), as well as a Lebanese airline company. “This particular campaign utilizes two fake, malicious websites containing job postings that are used to compromise targets via

DNSpionage campaign threat targets Middle East Read More »

Data leaks at ElasticSearch and Atrium Health

Data Breach, Data Privacy / Frank Crast / November 28, 2018 / Atrium Health, Data Breach, Data Leak, ElasticSearch

Two notable data loss incidents were reported on Wednesday, to include ElasticSearch data leak and Atrium Health data breach.

Data leaks at ElasticSearch and Atrium Health Read More »

Samba security updates

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / November 28, 2018 / CVE-2018-14629, CVE-2018-16841, CVE-2018-16851, CVE-2018-16852, CVE-2018-16853, CVE-2018-16857, Samba, Vulnerabilities

Samba has released security updates to address multiple vulnerabilities.

Samba security updates Read More »

Worm uses removable drives to install BLADABINDI backdoor

Malware / Frank Crast / November 27, 2018 / AdobeMX, AutoIT, BLADABINDI, C2, DNS, malware, Trend Micro

Last week, a worm was used to spread via removable drives and install a fileless version of the BLADABINDI backdoor. BLADABINDI is notable as a remote access tool (RAT) used for multiple backdoor capabilities and used for keylogging and DDoS threats.

Worm uses removable drives to install BLADABINDI backdoor Read More »

Germany Publishes New Broadband Router Security Guidelines

Network Security, Standards & Guidelines / Frank Crast / November 26, 2018 / 2FA, BSI TR-03148, Germany, Guidelines, LAN, Network, Router, Secure Broadband Router, SOHO, WAN, WiFi

The German government Federal Office for Information Security published technical security guidelines for broadband routers commonly used in Small Office and Home Office (SOHO) environments. The new guideline provides recommendations to manufacturers on designing and implementing routing products with “adequate state-of-the -art security features.”

Germany Publishes New Broadband Router Security Guidelines Read More »