Top News

• TikTok, WeChat survive in US app stores — one with a deal, the other with a judge's help

"China-based TikTok and WeChat remained in U.S. app stores on Monday, surviving a Trump administration ban that was supposed to take effect at the end of the weekend."

Link

TLP¹ : Green

• Hackers leak details of 1,000 high-ranking Belarus police officers

"Hackers promise to leak more if police crackdown against anti-government protesters continues"

Link

TLP¹ : Green

• Facebook tries to make it harder to find an anti-vax group

"But it's just preventing pages that spread misinformation from showing up in its search function, rather than removing them."

Link

TLP¹ : Green

Cybersecurity State: Surveillance, Cyberwarfare, Cybercriminality and Hacktivism

• US House Passes IoT Cybersecurity Improvement Act

"The U.S. House of Representatives passed the IoT Cybersecurity Improvement Act, a bill that aims at improving the security of IoT devices"

Link

TLP¹ : Green

• German encrypted email service Tutanota suffers DDoS attacks

"The popular encrypted email service Tutanota was hit with a series of DDoS attacks this week targeting its website fist and its DNS providers later"

Link

TLP¹ : Green

• FBI hopes a more aggressive cyber strategy will disrupt foreign hackers

"Last week saw a flurry of U.S. indictments of alleged Chinese and Iranian hackers as part of a multi-agency crackdown on foreign intelligence services"

Link

TLP¹ : Green

• 'The Dark Overlord' hacking group member sentenced to five years in prison

"A US district judge has sentenced a UK National to five years in federal prison for participating in the cybercrime activities of hacking collective group "The Dark Overlord.""

Link

TLP¹ : Green

• NSA Chief Who Oversaw Sweeping Domestic Phone Surveillance Joins Amazon Board As Director

"Just days after Amazon published a scathing letter slamming President Trump for not allowing the American multinational tech company to get the $10 billion Joint Enterprise Defense Infrastructure (JEDI) contract, which instead was awarded to Microsoft, Amazon's board has just appointed former NSA head and retired general of the US Army Keith B. Alexander as a director.""

Link

TLP¹ : Green

Breaches: Data Breaches and Hacks

• Alleged Activision hack, 500,000 Call Of Duty players impacted

"Over 500,000 Activision accounts may have been hacked in a new data breach that the gaming firm suffered on September 2020"

Link

TLP¹ : Green

• Minnesota Suffers Second-Largest Data Breach

"Hundreds of thousands of Minnesotans are receiving letters warning them that their data may have been exposed in the second-largest healthcare data breach in state history"

Link

TLP¹ : Green

Vulnerabilities: Vulnerability Advisories, Zero-Days,Patches and Exploits

• Discount Rules for WooCommerce WordPress plugin gets patch once again

"It has happened again, users of the Discount Rules for WooCommerce WordPress plugin have to install a third patch to fix 2 high-severity XSS flaws"

Link

TLP¹ : Green

• Ubuntu 4527-1: Linux kernel vulnerabilities

"Several security issues were fixed in the Linux kernel"

Link

TLP¹ : Green

Incident Response: Infrastructure, Training, SIEM and Incident Handling

• FERC, NERC joint report on cyber incident response at electric utilities

"The US FERC and NERC published a study on cyber incident response at electric utilities that also includes recovery best practices"

Link

TLP¹ : Green

Technical Articles: Forensics, Reverse Engineering, Malware, Phishing, Pentesting, Software Security and Cryptography

• Unimap

"Scan Only Once By IP Address And Reduce Scan Times With Nmap For Large Amounts Of Data"

Link

TLP¹ : Green

• Moriarty-Project

"This Tool Gives Information About The Phone Number That You Entered"

Link

TLP¹ : Green

• Mozilla Discontinues Firefox Feature Abused in Malware, Phishing Attacks

"Mozilla is decommissioning Firefox Send and Firefox Notes, two legacy services that emerged out of the Firefox Test Pilot program."

Link

TLP¹ : Green

¹Traffic Light Protocol (TLP) [1] for information sharing:

• Red:Not for disclosure, restricted to participants only.
• Amber: Limited disclosure, restricted to participants organizations.
• Green: Limited disclosure, restricted to the community.

[1]https://www.first.org/tlp