You've Already Been Hacked

Since its the holidays, we are skipping the news this week, and doing a tweaked version of A Christmas Carol. I hope you enjoy it Special Thanks to my family for lending their voices. 

FireEye's intrusion was just the tip of the iceberg. Solarwinds is the real nightmare. This week we dig a bit deeper than normal, and talk about Solarwinds, but wait...more than that happened this past week too!  - arstechnica.com: ~18,000 organizations downloaded backdoor planted by Cozy Bear hackers - www.govtech.com: Federal Agencies, Think Tank Targeted in Russian Hacking Spree - www.cybe...

The hack that has shaken the cybersecurity industry, COVID vaccine information stolen, Congress brings national cyber back, all happened this past week - www.fireeye.com : FireEye Shares Details of Recent Cyber Attack, Actions to Protect Community - www.darkreading.com : Nation-State Hackers Breached FireEye, Stole Its Red Team Tools - www.zdnet.com : Hackers leak data from Embraer, world's third-...

CISA and the FBI Issue warnings to Think Tanks, The Cold Chain is being attacked, and MacOS vulnerabilities are being attacked buy APTs all this week Articles: - www.bleepingcomputer.com : FBI and Homeland Security warn of APT attacks on US think tanks - www.securityweek.com : FBI Warns of Auto-Forwarding Email Rules Abused for BEC Scams - www.politico.com : Justices express qualms about sweeping...

The Managed.com hack impacts local governments, Google adding E2EE to RCS, and Manchester United was hacked, all this week Links to the Stories - www.securityweek.com : Attack on Vendor Affects Website of Arizona Court System - arstechnica.com : Google is testing end-to-end encryption in Android Messages - www.europol.europa.eu : Over 2 000 Participants from 132 Countries Logged on for the 4th Glo...

Capcom did lose customer data, Russia and North Korea going after COVID-19 research, and 28 million had information stolen in Texas. - www.bleepingcomputer.com : Capcom confirms data breach after gamers' data stolen in cyberattack - arstechnica.com : Hackers sponsored by Russia and North Korea are targeting COVID-19 researchers - threatpost.com : Food-Supply Giant Americold Admits Cyberattack - th...

So much Health Care news its astounding - healthitsecurity.com : ‘Security Threat’ Forces Hendrick Health to EHR Downtime Procedures - www.zdnet.com : Australian government warns of possible ransomware attacks on health sector - www.securityweek.com : Encryption Vulnerabilities Allow Hackers to Take Control of Schneider Electric PLCs - threatpost.com : Millions of Hotel Guests Worldwide Caught Up...

- www.securityweek.com : U.S. Says Iranian Hackers Accessed Voter Information - www.securityweek.com : Guard Cyber Team to Help Respond to Hospitals Cyberattack - chathamjournal.com : Chatham County government experienced cybersecurity attack on October 28 - arstechnica.com : The feds just seized Silk Road’s $1 billion stash of bitcoin - www.securityweek.com : Private Prison Operator GEO Group Dis...

Medical systems still underweight, COVID-19 Vaccine Manufacture Hacked, Elections hacked with Ransomeware, Louisiana calls in the National Guard for help, and an insider threat, all this week closing out Cybersecurity Awareness Month - threatpost.com : 2 More Hospitals Hit by Growing Wave of Ransomware Attacks, As Feds Issue Warning - www.bleepingcomputer.com : Montreal's STM public transport syst...

The EU goes after the GRU, a plan for the supply chain, schools still under siege, phishing burn out, and our sweet, sweet coffee gets hacked, all this week. - www.scmagainze.com BN Cyber Attack calls into question business segmentation- www.darkreading.com Flurry of warnings highlight cyber threats to us elections - www.cyberscoop.com : EU slaps sanctions on GRU leader, Fancy Bear, FBI-wanted hac...

Carnival makes it official, Magento holes patched, Congress cares about the UHS hack, and International governments are looking for way around encryption, all this week - www.bleepingcomputer.com: Largest cruise line operator Carnival confirms ransomware data theft - threatpost.com: Critical Magento Holes Open Online Shops to Code Execution - www.scmagazine.com: Here are the questions Congress ask...

Hospitals pay ransom in bitcoin, illegitimate news sites, clinical trials were hacked, so as the UN, and an ISP Apologies, all this week. - www.uhsinc.com: Statement from Universal Health Services: Updated Monday, October 5, 2020, 12:30 PM ET - www.zdnet.com: Microsoft's Azure AD authentication outage: What went wrong - www.bleepingcomputer.com: New Jersey hospital paid ransomware gang $670K to pr...

A Microsoft Major outrage, 911 went down, the 2nd Largest HIPPA penalty ever, Russian Hacker goes to Jail, and a Teenager hacked a school all this week.   - arstechnica.com: Paying ransomware demands could land you in hot water  - home.treasury.gov: Advisory on Potential Sanctions Risks for Facilitating Ransomware Payments - www.reuters.com: Universal Health Services says its network is...

Ransomeware attacks on federal contractors, Iranian Dissidents targeted, the Dark Overload pleads guilty..and an 10 out of 10 vulnerability in windows all this week. Links to all the Stories - www.zdnet.com : CISA says a hacker breached a federal agency - www.wired.com : 179 Arrested in Massive Global Dark Web Takedown - www.theregister.com : Contractor convicted of pinching supercomputer cycles t...

News of the Week for 19 September 2020. The DOJ had a big week, the first death related to ransomware, schools still under siege, and an update that warns you are compromised, all this week. - www.zdnet.com : US charges two Russians for stealing cryptocurrency - www.zdnet.com : First death reported following a ransomware attack on a hospital - www.zdnet.com : Hackers are launching fresh attacks ag...

Hacking the Election, Banks, Schools, and Semiconductors...all this week. - www.wired.com : Hackers Are Hitting US Campaign Targets Again - www.cnet.com : Phones for low-income users hacked before they're turned on - www.bleepingcomputer.com : Netwalker ransomware hits Argentinian government, - www.politico.eu : Facebook to stop moving data from EU to US - www.bleepingcomputer.com : Netwalker rans...

A data breach, kids hacking schools, and foreign nationals stealing secrets, all happened this past week. - www.darkreading.com Warner Music Group Admits Breach - www.theregister.com :Voting app maker roasted by computer boffins for poor security - www.zdnet.com : European ISPs report mysterious wave of DDoS attacks - www.nbcnews.com : Miami-Dade Public Schools'  endures days of cyberattacks...

Telsa Hacked, The DNC wars staffers about Dating Apps, and the electric grid is a prime target, and more this week. Links to the Articles - www.wired.com : A Former Uber Exec's Indictment Is a Warning Shot - www.zdnet.com : Elon Musk confirms Russian hacking plot targeted Tesla factory - www.reuters.com : New Zealand's stock exchange not to reopen on Thursday after cyber attacks - threatpost.com :...

Ransomeware and Universities, Government Authorities, and CSOs going to Trial all this week. - www.cyberscoop.com: FBI, DHS expose North Korean government malware used in fake job posting campaign - www.theregister.com: Australian government wants power to run cyber-response for businesses under attack - threatpost.com: Cyberattacks Hit Thousands of Canadian Tax, Benefit Accounts - attheu.utah.edu...

threatpost.com Mac Users Targeted by Spyware Spreading via Xcode Projects threatpost.com Instagram Retained Deleted User Data Despite GDPR Rules scmagazine.com SANS Institute breach proves anyone can fall victim to a ‘consent phishing’ scam Scmagazine.com California under counted COVID-19 cases after certificate expired www.zdnet.com : A mysterious group has hijacked Tor exit nodes threatpost.com...

Referenced Articles: www.bleepingcomputer.com : Canon confirms ransomware attack in internal memo www.wired.com : Chinese Hackers Have Pillaged Taiwan's Semiconductor Industry www.wired.com : Voting Machine Makers Are Finally Playing Nice With Hackers www.zdnet.com : Capital One fined $80 million for 2019 hack arstechnica.com : More than 20GB of Intel source code and proprietary data dumped online...

- www.bleepingcomputer.com : New ‘Meow’ attack has deleted almost 4,000 unsecured databases - us-cert.cisa.gov : Alert (AA20-209A) | Potential Legacy Risk from Malware Targeting QNAP NAS Devices - www.theregister.com : If you own one of these 45 Netgear devices, replace it: Firm won't patch vulnerable gear despite live proof-of-concept code - threatpost.com : Lazarus Group Brings APT Tactics to Ra...

In this week's podcast, hacks abound in multiple sectors, some of which happened months back, and we are only getting details on now. www.justice.gov: Two Alleged Criminals – A Hezbollah Associated Narco-Money Launderer and a Computer Hacker - Extradited from Cyprus to the United States www.wired.com: Chinese Hackers Charged in Decade-Long Crime and Spying Spree www.bbc.com: Blackbaud Hack: Univer...

In this episode, we go over cybersecurity news that stuck out to me over the past week, as things we all need to pay attention to. Article links listed below. This episode's format is based on a segment I teach in my class on cybersecurity risk management, to help students better understand the reading materials by using world events that are current and topical. www.ncsc.gov.uk : Advisory: APT29...