ThreatMatch

ThreatMatch™ is a service from SecAlliance.
Follow us @SecAlliance for more updates.

[ThreatMatch @ThreatMatch]

Parts of Amazon Web Services were effectively shoved off the internet on Tuesday – at times breaking some customers' websites – after the cloud giant came under attack. https://t.co/RBjnhELi7l #CyberSecurityNews #DDoS #AWS

[ThreatMatch @ThreatMatch]

The U.S. Federal Trade Commission says that a settlement has been reached with Retina-X Studios, the company behind three 'stalkerware' mobile applications, that bars it from selling the apps unless they are used for legitimate purposes. https://t.co/EXyU8Iqh3l #CyberSecurityNews

[ThreatMatch @ThreatMatch]

Two security vulnerabilities in Microsoft's NTLM authentication protocol allow attackers to bypass the Message Integrity Code protection and downgrade NTLM security features leading to full domain compromise. https://t.co/MFYMw4l3UY #CyberSecurityNews #Vulnerability

[ThreatMatch @ThreatMatch]

Phishers behind a new campaign have switched to using compromised SharePoint sites and OneNote documents to redirect potential victims from the banking sector to their landing pages. https://t.co/Y522rgwqFC #CyberSecurityNews #Phishing #SharePoint

[ThreatMatch @ThreatMatch]

A database containing sensitive information of about 90,000 German Mastercard "Priceless Specials" loyalty program members shared online following a breach discovered on August 20. https://t.co/S1Q6DIJ8JF #CyberSecurityNews #DataBreach #Mastercard

[ThreatMatch @ThreatMatch]

Google on Thursday announced that it has discovered a number of hacked websites that have been found to be pushing malware to Apple iPhone users for at least two years. https://t.co/5FJOygU5gE #CyberSecurityNews #iPhone #Apple #Vulnerability

[ThreatMatch @ThreatMatch]

The French law enforcement agency announced the successful takedown of one of the largest wide-spread RETADUP botnet malware and how it remotely disinfected more than 850,000 computers worldwide with the help of researchers. https://t.co/yGhPGI7p37 #CyberSecurityNews

[ThreatMatch @ThreatMatch]

Security experts have discovered that Magecart hackers continue to target online stores to steal credit card data, in recent operations, they have compromised 80 more eCommerce sites. https://t.co/KBdOfKDHti #Magecart #eCommerce #Hack

[ThreatMatch @ThreatMatch]

A scammer was able to successfully fooled the City of Saskatoon into transferring them a little over $1 million. They may not enjoy the wealth, though. https://t.co/Fyzhf6LTJq #CyberSecurityNews #Saskatoon

[ThreatMatch @ThreatMatch]

The rapidly growing hacking crew dubbed Silence, has – in less than three years – gone from ransacking small regional banks in Eastern Europe to stealing millions from some of the largest international banks. https://t.co/MI8ndeWmtA #CyberSecurityNews #SilenceGroup

[ThreatMatch @ThreatMatch]

The attackers who previously breached and abused the website of free multimedia editor VSDC to distribute the Win32.Bolik.2 banking Trojan have now switched their tactic https://t.co/ouJVWiLKOi #CyberSecurityNews #VSDC #Trojan

[ThreatMatch @ThreatMatch]

A backdoor mechanism was found in Webmin, a popular web-based application used by system administrators to manage remote Unix-based systems, such as Linux, FreeBSD, or OpenBSD servers. https://t.co/1lLxrwANiz #CyberSecurityNews #OpebBSD #Linux #Backboor

[ThreatMatch @ThreatMatch]

Twenty-three local Texas governments have been infected with ransomware last week in what Texas officials have described as a coordinated attack. https://t.co/ex6cFnrUss #CyberSecurityNews #Ransomware #.jse

[ThreatMatch @ThreatMatch]

Intel released a firmware update for multiple NUC Kit models to patch a high-severity issue that could be exploited to achieve privilege escalation, cause a denial-of-service (DoS) condition, or information disclosure. https://t.co/cBg69RLt7H #CyberSecurityNews #Intel

[ThreatMatch @ThreatMatch]

A highly targeted phishing campaign was recently observed while bypassing a Microsoft email gateway using documents shared via the Google Drive service to target the staff of a company from the energy industry. https://t.co/Xj6gGSbHk4 #CyberSecurityNews #Phishing #GoogleDrive

[ThreatMatch @ThreatMatch]

A Google security researcher has just disclosed details of a 20-year-old unpatched high-severity vulnerability affecting all versions of Microsoft Windows, back from Windows XP to the latest Windows 10. https://t.co/qvIflvARhW #CyberSecurityNews #Vulnerability

[ThreatMatch @ThreatMatch]

Windows operating system contains four new critical wormable, remote code execution vulnerabilities in Remote Desktop Services, similar to the recently patched 'BlueKeep' RDP vulnerability. https://t.co/CYWiNk7upp #CyberSecurityNews #Vulnerability #PatchTuesday

[ThreatMatch @ThreatMatch]

Adobe has published their monthly Patch Tuesday updates for the month of August 2019 that resolves 119 security vulnerabilities in eight programs. https://t.co/5XfeKgDf9g #CyberSecurityNews #PatchTuesday

[ThreatMatch @ThreatMatch]

Transport for London's online Oyster travel smartcard system has been accessed by miscreants using stolen customer login credentials, forcing IT bods to pull the website offline for a second day. https://t.co/KJZpBzYWIm #CyberSecurityNews #CredentialStuffing #Password

[ThreatMatch @ThreatMatch]

A database containing 6M user accounts from the recent StockX data breach is being sold online. Bad actors have started to decrypt the passwords. It is expected for this information to be used in future attacks. https://t.co/XkrBlbKw5E #CyberSecurityNews #StockX #DataBreach