Author: Eric English

Cybersecurity

https://www.securityweek.com/attack-combines-phishing-steganography-powershell-deliver-malware

https://www.techrepublic.com/article/slack-vulnerability-allows-attackers-to-intercept-modify-downloads/

UK Human Rights Group Sues Police over Facial Recognition Software Use

https://www.engadget.com/2019/05/21/california-bill-to-ban-facial-recognition-tech-police-body-cameras/

OneDrive integrations in O365

Cryptocurrency

Crypto Startup Circle Lays Off 30 Employees Citing Market, Regulatory Conditions

At Blockchain Week, Maturity Is the Motto as Ethereum Organizations Push Toward 2.0 Upgrade

https://medium.com/bittrex/bittrex-partners-with-identitymind-for-anti-money-laundering-aml-support-16079d3597ec

$19 Million: Ethereum Foundation to Fund Work on 2.0 Upgrade, Plasma and More

Podcast: Play in new window | Download

Subscribe: Android | RSS

Cybersecurity:

Canada’s Freedom Mobile Elasticsearch database exposed

‘LightNeuron’ backdoor receives secret commands via Microsoft Exchange email servers; Russian link suspected

https://www.darkreading.com/endpoint/microsoft-debuts-electionguard-to-secure-voting-processes/d/d-id/1334623

Cryptocurrency:

What a Bitcoin ‘Reorg’ Is and What Binance Has to Do With It

Executive hacked competitor’s website to steal students meal preferences

Hackers Steal $40.7 Million in Bitcoin From Crypto Exchange Binance

Binance Considered Pushing for Bitcoin ‘Rollback’ Following $40 Million Hack

Staking, Ethereum’s Mining Alternative, Will Be Profitable – But Barely

Podcast: Play in new window | Download

Subscribe: Android | RSS

Cyber:

PAM Solutions, Thycotic, Cyberark, SailPoint

St. Ambrose Catholic Parish BEC scam nets $1.75M

Denial of service event impacted U.S. power utility last month

IT service provider refuses to pay ransom, hackers publish stolen data online

https://krebsonsecurity.com/2019/05/credit-union-sues-fintech-giant-fiserv-over-security-claims/

https://www.zdnet.com/article/cartoon-network-websites-hacked-to-show-arabic-memes-and-brazilian-male-stripper/?ftag=COS-05-10aaa0g&utm_campaign=trueAnthem%3A+Trending+Content&utm_content=5ccb30443730d20001351b87&utm_medium=trueAnthem&utm_source=twitter

Job recruitment site Ladders exposed 13 million user profiles

Crypto:

Central Banks Settle Cross-Border Payments With Blockchain for First Time

US Stock Broker E*Trade to Launch Bitcoin and Ether Trading: Report

Jaguar Land Rover Plans to Give Drivers Crypto in Return for Their Data

Brave rolls out its own ads that pay users a 70% cut

Podcast: Play in new window | Download

Subscribe: Android | RSS

Cybersecurity:

https://www.zdnet.com/article/fbi-us-companies-lost-1-3-billion-in-2018-due-to-bec-scams/?ftag=COS-05-10aaa0g&utm_campaign=trueAnthem:+Trending+Content&utm_content=5cc0374916ce3f000141f01c&utm_medium=trueAnthem&utm_source=twitter

Bodybuilding.com suffers data breach; issues password reset for all users

Cryptocurrency:

Bitcoin’s Price Climbs Above $5,500 to Reach 5-Month High

Ether Thief Found Stealing Funds With Weak Private Keys

Samsung Invests $2.9 Million in Crypto Hardware Startup Ledger

Samsung Developing Ethereum-Based Blockchain, May Issue Own Token

Crossover story:

Brave rolls out its own ads that pay users a 70% cut

Podcast: Play in new window | Download

Subscribe: Android | RSS

Cybersecurity:

https://thehackernews.com/2019/04/instagram-password-plaintext.html

Warren bill would send execs to jail for data breaches

https://thehackernews.com/2019/04/apache-tomcat-security-flaw.html

https://thehackernews.com/2019/04/microsoft-outlook-email-hack.html

https://www.zdnet.com/article/microsoft-publishes-seccon-framework-for-securing-windows-10/

https://www.bloomberg.com/news/articles/2019-04-10/is-anyone-listening-to-you-on-alexa-a-global-team-reviews-audio

Cryptocurrency:

https://blog.coinbase.com/spend-your-crypto-instantly-with-coinbase-card-4c840e59a8d8

Coinbase Expands Crypto-to-Crypto Trading to 11 More Countries

https://www.forbes.com/sites/rachelwolfson/2019/04/11/albertsons-joins-ibm-food-trust-blockchain-network-to-track-romaine-lettuce-from-farm-to-store/

US Energy Department Eyes Blockchain to Prevent Power Plant Cyberattacks

In First, FinCEN Penalizes Bitcoin Trader for Violating AML Laws

South Korean Crypto Exchange Coinnest Announces Closure

NYDFS: Why We Rejected Bittrex’s Application for a BitLicense

Podcast: Play in new window | Download

Subscribe: Android | RSS

Cybersecurity

Pharma firm Bayer hit with WINNTI malware

https://www.zdnet.com/google-amp/article/over-540-million-facebook-records-found-on-exposed-aws-servers

https://www.zdnet.com/google-amp/article/researcher-publishes-google-chrome-exploit

https://thehackernews.com/2019/04/apache-web-server-security.html?m=1

https://thehackernews.com/2019/04/facebook-email-password.html

Arizona Beverages ransomware attack exacerbated by unpatched servers, poorly configured back-up system

https://www.cnet.com/google-amp/news/cloudflare-offers-mobile-vpn-to-hide-more-of-your-browsing-history

Cryptocurrency

Over 40 Central Banks Are Considering Blockchain Applications: Davos Report

https://blog.coinbase.com/coinbase-custody-launches-staking-support-for-tezos-makerdao-governance-to-follow-68f7bc51bc53

Proof of stake the new normal

Coinbase, Paradigm Invest $15 Million in Startup Behind Disappearing Blockchain

Twitter: @cybercryptoguy

Podcast: Play in new window | Download

Subscribe: Android | RSS

Cybersecurity

Watering hole attacks
https://www.scmagazine.com/home/security-news/phishing/south-korean-websites-hit-with-rare-waterhole-phishing-scheme/

https://gizmodo.com/hud-charges-facebook-for-enabling-housing-discriminatio-1833632844

https://thehackernews.com/2019/03/apt33-cyber-espionage-hacking.html

https://www.zdnet.com/article/norsk-hydro-ransomware-incident-losses-reach-40-million-after-one-week/

https://thehackernews.com/2019/03/facebook-whitehat-setting-hackers.html

https://thehackernews.com/2019/03/asus-computer-hacking.html

Paper: Leaked authentication secrets rampant across GitHub

https://www.darkreading.com/attacks-breaches/toyota-customer-information-exposed-in-data-breach/d/d-id/1334291

Cryptocurrency

Bittrex-Backed Euro Stablecoin Can Be Staked for 8% Interest

https://www.coinbase.com/earn/stellar

Binance Tightens Compliance, Turning to IdentityMind for KYC

Amazon-Owned Twitch Removes Crypto Payments for Subscriptions

Crossover Story

https://www.zdnet.com/article/cryptocurrency-platforms-dragonex-and-coinbene-disclose-hacks/

Podcast: Play in new window | Download

Subscribe: Android | RSS

ybersecurity

https://nakedsecurity.sophos.com/2019/03/21/researcher-finds-new-way-to-sniff-windows-bitlocker-encryption-keys/amp/

https://thehackernews.com/2019/03/libssh2-vulnerabilities.html

Cryptocurrency

IBM Signs 6 Banks to Issue Stablecoins and Use Stellar’s XLM Cryptocurrency

Facebook Seeks Counsel to Forge Blockchain Partnerships for New Products

Welcome to Athens: Tezos Completes ‘Historic’ First Blockchain Vote

The New York Times Is Planning to Experiment With Blockchain Publishing

Podcast: Play in new window | Download

Subscribe: Android | RSS

Cybersecurity

Google SIEM
https://www.engadget.com/2019/03/05/alphabet-chronicle-backstory-cybersecurity-moonshot/

Verifications.io breach: Database with 2 billion records leaked

https://www.zdnet.com/google-amp/article/georgia-county-pays-a-whopping-400000-to-get-rid-of-a-ransomware-infection/

https://www.zdnet.com/article/companies-are-leaking-sensitive-files-via-box-accounts/

Threatlist: IMAP-Based Attacks Compromising Accounts at ‘Unprecedented Scale’

https://thehackernews.com/2019/03/citrix-data-breach.html

Cryptocurrency

A Blockchain ETF Is Launching on the London Stock Exchange Today

Samsung Unveils Cryptocurrency Wallet, Dapps for Galaxy S10 Phone

Coinbase Completes First OTC Crypto Trade Directly From ‘Cold’ Storage

I Got the Mark of the Beast – And It Will Hold My Bitcoin

8 ways to harden Office 365 Environments

Follow me on Twitter @eenglish34

Podcast: Play in new window | Download

Subscribe: Android | RSS

Cyber:
https://www.zdnet.com/article/researchers-uncover-ring-of-github-accounts-promoting-300-backdoored-apps/

https://github.com/dfir-it/supreme-backdoor-factory/blob/master/github_repositories.txt

https://www.zdnet.com/article/googles-project-zero-discloses-zero-day-macos-vulnerability/

https://nakedsecurity.sophos.com/2019/03/04/tiktok-to-pay-record-fine-for-collecting-childrens-data/amp/

Crypto:
https://www.databreachtoday.com/facebooks-cryptocoin-disguised-paypal-on-blockchain-a-12060?rf=2019-03-04_ENEWS_SUB_DBT__Slot1_ART12060

Follow me on Twitter @eenglish34

Podcast: Play in new window | Download

Subscribe: Android | RSS