Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.

Post related to: Tool

Security breach exposes information from Docker Hub users

An unauthorized user gained access to a Docker Hub database, exposing sensitive information from approximately 190,000 users (less than 5% of total Docker Hub users). This information included...

References:

bleepingcomputer.com

zdnet.com

linuxadictos.com

eweek.com

helpnetsecurity.com

Tags:

Incident

Information leakage

Tool

Security breach in Microsoft Outlook

Microsoft was the victim of a security breach in its Outlook email service, which includes @hotmail.com and @msn.com email accounts, after attackers stole Outlook support staff credentials and used...

References:

techcrunch.com

adslzone.net

motherboard.vice.com

threatpost.com

unaaldia.hispasec.com

Tags:

Asian Embassy Attacked by a sophisticated Malware

In the fall of 2018, Kaspersky discovered what may be the most comprehensive malware known to date, which has been named TajMahal and has 80 different components.TajMahal is capable of stealing...

References:

kaspersky.es

wired.com

adslzone.net

cyberscoop.com

Tags:

Incident

Tool

Vulnerability

ASUS tool infected by Operation ShadowHammer

Kaspersky Lab has discovered a new Advanced Persistent Threat (APT) campaign that has affected more than one million users through an ASUS software supply chain attack. The investigation revealed...

References:

securelist.com

kaspersky.com

motherboard.vice.com

symantec.com

asus.com

xataka.com

unaaldia.hispasec.com

kaspersky.es

Tags:

Detected a spam campaign that distributes malware via email

Taking advantage of the dissemination of news about the Boeing 737 Max 8 accidents, a new spam campaign is being carried out that distributes malware via email.Those affected receive an email with...

References:

bleepingcomputer.com

securityaffairs.co

2-spyware.com

malware-board.com

Tags:

Malware

Tool

Transport

New vulnerability in Intel processors called SPOILER

Researchers at the Worcester Polytechnic Institute and the University of Lübeck have discovered a new vulnerability called SPOILER in Intel processors.This security flaw affects all Intel...

References:

arxiv.org

theregister.co.uk

forbes.com

vandal.elespanol.com

hardwaresfera.com

Tags:

0day

Tool

Vulnerability

Malware uses Google Drive services as its C&C server

A new variant of the RogueBin Trojan uses Google Drive as its Command & Control (C&C) server. The Trojan infects the victim's computers when the user opens a Microsoft Excel file containing...

References:

thehackernews.com

2-spyware.com

welivesecurity.com

globalnotary.es

Tags:

VisionDirect suffers data leakage caused by MageCart script

VisionDirect, an online store that sells contact lenses, has reported that it suffered a data leak from November 3-8, 2018. As indicated in their announcement, only people who logged into the...

References:

visiondirect.co.uk

theregister.co.uk

bleepingcomputer.com

sectorx.com.ar

Tags:

e-commerce

Information leakage

Tool

CamuBot, a new financial malware, attacks banking clients in Brazil

Researchers at IBM X-Force have discovered a new malware for now attacks Brazilian banks, through clients who perform operations through commercial banking. In August 2018 the first attacks were...

References:

threatpost.com

spamfighter.com

securityintelligence

techcrunch.com

cso.computerworld.es

Tags:

A captcha plugin with "backdoors" in WordPress affects 300,000 web pages

A widely used plugin that implements the verification system "captcha" for websites with WordPress, is responsible for about 300,000 websites are vulnerable with a backdoor implemented in it,...

References:

thehackernews.com

wordfence.com

bleepingcomputer.com

theregister.co.uk

wpbody.com

Tags:

Tool

Vulnerability

CMS

Corporate access

Cybersecurity Highlights

Security breach exposes information from Docker Hub users

Security breach in Microsoft Outlook

Asian Embassy Attacked by a sophisticated Malware

ASUS tool infected by Operation ShadowHammer

Detected a spam campaign that distributes malware via email

New vulnerability in Intel processors called SPOILER

Malware uses Google Drive services as its C&C server

VisionDirect suffers data leakage caused by MageCart script

CamuBot, a new financial malware, attacks banking clients in Brazil

A captcha plugin with "backdoors" in WordPress affects 300,000 web pages

Pages