IT-Sentinel

> TODAY'S SUMMARY (13 articles)

Today's cyber news highlights significant threats and trends in the cybersecurity landscape. A major cyber heist at French bank Crédit Mutuel Arkéa resulted in fraudulent transactions amounting to $133 million, showcasing the risks posed by service provider vulnerabilities. Additionally, scammers are exploiting trusted brands through fake gift card schemes to harvest personal information, emphasizing the need for consumer vigilance. The rise in hacks targeting Internet of Things (IoT) devices has raised alarms about critical infrastructure vulnerabilities. Meanwhile, SonicWall has issued patches for multiple vulnerabilities, including a serious SSL-VPN authentication bypass flaw that has already been exploited. Lastly, sensitive credentials, such as passwords and API keys, have been found exposed in public GitHub repositories, highlighting the persistent issue of poor security practices among developers.

// AI-powered summary generated at 16:00

> Louisiana Hospitals Report Data Breach

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2020-11-23 16:55]

Cyber-attack exposes data of thousands of hospital patients of LSU Medical Centers

> Anonymous Hacks Uganda Police Website

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2020-11-23 16:12]

Uganda Police website downed by hacking collective in the wake of Bobi Wine’s arrest

> CVE-2020-28360: npm private-ip SSRF Bypass (IP Phone Home)

[SOURCE] John J Hacking [LANGUAGE: EN] [DATE: 2020-11-23 07:00]

Credits Sick.Codes Github: (https://github.com/sickcodes) Twitter: (https://twitter.com/sickcodes) John Github: (https://github.com/johnjhacking) Nick Sahler Github: (https://github.com/nicksahler) Twitter: (https://twitter.com/tensor_bodega) With Collaboration from: Harold Hunt LinkedIn: (https://w...

> A Fifth of Consumers Affected by Identity Fraud in 2020

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2020-11-23 15:01]

A third of consumers are more concerned about fraud due to COVID-19

> #COVID19 Drives Massive Multi-Cloud Adoption

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2020-11-23 14:01]

AWS regional centers in the US and EU were top targets for attackers

> The elephant in the data centre

[SOURCE] NCSC UK [LANGUAGE: EN] [DATE: 2020-11-13 10:15]

A new white paper from the NCSC explains the potential benefits of adopting a cloud-system.

> Google Rolls Out End-to-End Encryption for Android Messages

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2020-11-23 12:00]

Making users more secure will also make governments angrier

> NCSC Issues Warning About Expected #BlackFriday Scams

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2020-11-23 11:05]

As Black Friday and Cyber Monday loom, the NCSC warns about common scam tactics

> Knowledge Base Digest - October 2020

[SOURCE] Watchguard Support Alerts [LANGUAGE: EN] [DATE: 2020-11-11 23:25]

Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in October: Articles Where can I download Visio icons of WatchGuard devices? WatchGuard Cloud Service Cookie Notice Are WatchGuard products compliant with NDAA Section 88...

> MPs Bombarded by Nearly Three Million Monthly Email Attacks

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2020-11-23 10:25]

Parliament’s defenses have blocked more than 22 million this year

> Ransomware Suspected in Man United Attack

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2020-11-23 09:22]

Club forced to shut down affected systems

> Machine Learning Attack Series: Repudiation Threat and Auditing

[SOURCE] Embrace The Red [LANGUAGE: EN] [DATE: 2020-11-10 23:00]

This post is part of a series about machine learning and artificial intelligence. Click on the blog tag “huskyai” to see related posts. Overview: How Husky AI was built, threat modeled and operationalized Attacks: The attacks I want to investigate, learn about, and try out In this post we are going...

> Green Beret Passed Secrets to Russia

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2020-11-20 18:27]

Former US Army Green Beret pleads guilty to role in Russian espionage conspiracy

> Data Breach at Iowa Hospital

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2020-11-20 17:33]

Social Security numbers and medical information of 60k patients exposed in Mercy Iowa City data breach

> TDR Outage in Preparation for WatchGuard Cloud Integration

[SOURCE] Watchguard Support Alerts [LANGUAGE: EN] [DATE: 2020-11-10 19:41]

BLUF: TDR Outage – 30 minutes EU – 30 November 2020 at 5PM PST NA – 1 December 2020 at 11PM PST We have listened to your feedback and we are excited to announce that with the release of TDR 6.0.0, WatchGuard will deploy a TDR UI integrated into WatchGuard Cloud. To prepare for this, WatchGuard mu...

> FireEye Acquires Respond Software

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2020-11-20 16:03]

Respond Software acquired by FireEye for nearly $200m

> #ISSE2020: Focus on 2020's Crypto Successes Rather than Efforts to Break it

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2020-11-20 15:22]

Despite calls to break encryption, 2020 has brought successes for cryptography

> CybExer Tasked With Enhancing Luxembourg’s Cyber-Defense Capabilities

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2020-11-20 13:30]

Cyber-range will enhance the skills of the Luxembourg Directorate of Defense's cyber-personnel

> Faith App Pray.com Exposes Millions Through Cloud Misconfig

[SOURCE] Infosecurity Magazine [LANGUAGE: EN] [DATE: 2020-11-20 12:05]

Researchers at vpnMentor claim most of those affected weren’t even users