C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 32/18

- Roderick Mooi

  1. Security Think Tank: Almost all security can be outsourced, but not the risk [ComputerWeekly]
  2. Your online privacy resource center
    - “You are being watched, tracked, and recorded by private and state-sponsored entities whenever you go online. Here you will find the tools and information you need to restore your privacy, secure your devices, and defeat online censorship.”
  3. We had a security incident. Here’s what you need to know. [reddit]
    - More: krebsonsecurity.com/2018/08/reddit-breach-highlights-limits-of-sms-based-authentication/
    - And: www.darkreading.com/endpoint/authentication/is-sms-2fa-enough-login-protection/d/d-id/1332479
  4. GDPR: What’s really changed so far? [ZDNet]
  5. Mass MikroTik Router Infection – First we cryptojack Brazil, then we take the World? [Trustwave]
    - More: nakedsecurity.sophos.com/2018/08/03/routers-turned-into-zombie-cryptojackers-is-yours-one-of-them/
    - And: threatpost.com/huge-cryptomining-attack-on-isp-grade-routers-spreads-globally/134667/
  6. BGP/DNS Hijacks Target Payment Systems [ORACLE+Dyn]
    - More: www.armis.com/dns-rebinding-exposes-half-a-billion-iot-devices-in-the-enterprise/
  7. CCleaner Adds Data Collection Feature With No Way to Opt-Out [The Hacker News]
  8. Multiple Cobalt Personality Disorder [Cisco Talos]
  9. SamSam: The (Almost) Six Million Dollar Ransomware [SOPHOS]
    - TL;DR: thehackernews.com/2018/07/samsam-ransomware-attacks.html