Cup of Cyber

National Guard Stops Cyber Attack!- Cup of Cyber October 26th, 2020 

Join us for an inside view of today’s Cyber News and why it matters.

November 19th is our next TRIVIA NIGHT. Join us at 7:00 PM Eastern Time for free fun and a chance to win prizes!

Congratulations to Mike Bravo for another win!

————————— News ————————————-

Is the Abaddon RAT the first malware using Discord as C&C?

https://securityaffairs.co/wordpress/109971/malware/abaddon-rat-discord-cc.html

Finland shocked by therapy center hacking, client blackmail

https://ciso.economictimes.indiatimes.com/news/finland-shocked-by-therapy-center-hacking-client-blackmail/78865636

Exclusive: National Guard called in to thwart cyberattack in Louisiana weeks before election

https://www.reuters.com/article/us-usa-election-cyber-louisiana-exclusiv/exclusive-national-guard-called-in-to-thwart-cyberattack-in-louisiana-weeks-before-election-idUSKBN27823F

————- On your own———

Attackers finding new ways to exploit and bypass Office 365 defenses

https://www.helpnetsecurity.com/2020/10/26/exploit-and-bypass-office-365-defenses/

Apple fixes 6 malicious apps posing as Adobe Flash installers

https://ciso.economictimes.indiatimes.com/news/apple-fixes-6-malicious-apps-posing-as-adobe-flash-installers/78865699

Adapt cybersecurity programs to protect remote work environments

https://www.helpnetsecurity.com/2020/10/26/protect-remote-work/

—————————-Todays Offbeat Holiday————-

Today is: National Pumpkin Day

https://ourcommunitynow.com/things-to-do/7-ways-to-celebrate-pumpkins-on-national-pumpkin-day-oct-26

_____________________Products shown today_____________

RMF& CAP Course

https://www.cyber-recon.com/courses/rmf-cap/

SWAG is at:

https://www.cyber-recon.com/swag/

Life of Maze ransomware- Cup of Cyber October 23rd, 2020 

Join us for an inside view of today’s Cyber News and why it matters.

November 19th is our next TRIVIA NIGHT. Join us at 7:00 PM Eastern Time for free fun and a chance to win prizes!

Congratulations to Mike Bravo for another win!

————————— News ————————————-

The Three Key Elements of Zero-Trust

https://www.infosecurity-magazine.com/news/infosecurityonline-zerotrust-three/

Attackers prey on Microsoft Teams accounts to steal credentials

https://www.scmagazine.com/home/security-news/vulnerabilities/attackers-prey-on-microsoft-teams-accounts-to-steal-credentials/

Life of Maze ransomware

https://securelist.com/maze-ransomware/99137/

https://ciso.economictimes.indiatimes.com/news/cyberattacks-continue-to-rise-despite-higher-security-investments/78820701

XSS to TSS: tech support scam campaign abuses cross-site scripting vulnerability

https://blog.malwarebytes.com/cybercrime/2020/10/xss-to-tss-tech-support-scam-campaign/

————- On your own———

Cyberattacks continue to rise, despite higher security investments

—————————-Todays Offbeat Holiday————-

Today is: National Mole Day

https://www.farmersalmanac.com/national-nut-day-19314

https://www.moleday.org/

_____________________Products shown today_____________

RMF& CAP Course

https://www.cyber-recon.com/courses/rmf-cap/

SWAG is at:

https://www.cyber-recon.com/swag/

Egregor Attacks Barnes and Noble- Cup of Cyber October 22nd, 2020 

Join us for an inside view of today’s Cyber News and why it matters.

November 19th is our next TRIVIA NIGHT. Join us at 7:00 PM Eastern Time for free fun and a chance to win prizes!

Congratulations to Mike Bravo for another win!

————————— News ————————————-

Exploring the prolific threats influencing the cyber landscape

https://www.helpnetsecurity.com/2020/10/22/prolific-threats-cyber-landscape

Egregor Claims Responsibility for Barnes & Noble Attack, Leaks Data

https://threatpost.com/egregor-responsibility-barnes-noble/160401/

Modern Attacks Include Supply Chain "Hopping" and Reversing Agile Environments

https://www.infosecurity-magazine.com/news/attacks-hopping-reversing-agile/

————- On your own———

LockBit uses automated attack tools to identify tasty targets

https://news.sophos.com/en-us/2020/10/21/lockbit-attackers-uses-automated-attack-tools-to-identify-tasty-targets/

Iranian Cyberattack Group Deploys New PowGoop Downloader Against Mideast Targets

https://www.darkreading.com/vulnerabilities---threats/advanced-threats/iranian-cyberattack-group-deploys-new-powgoop-downloader-against-mideast-targets/d/d-id/1339232?

—————————-Todays Offbeat Holiday————-

Today is: National Nut Day

https://www.farmersalmanac.com/national-nut-day-19314

_____________________Products shown today_____________

RMF& CAP Course

https://www.cyber-recon.com/courses/rmf-cap/

SWAG is at:

https://www.cyber-recon.com/swag/

Ransomware Gang Donates to Charities - October 20th, 2020 

Join us for an inside view of today’s Cyber News and why it matters.

November 19th is our next TRIVIA NIGHT. Join us at 7:00 PM Eastern Time for free fun and a chance to win prizes!

Congratulations to Mike Bravo for another win!

————————— News ————————————-

Microsoft disables most of cybercriminals' control over massive computer network

https://www.reuters.com/article/us-usa-election-cyber-botnet/microsoft-disables-most-of-cybercriminals-control-over-massive-computer-network-idUSKBN2752JK

NSA Reveals the Top 25 Vulnerabilities Exploited by Chinese Nation-State Hackers

https://www.darkreading.com/threat-intelligence/nsa-reveals-the-top-25-vulnerabilities-exploited-by-chinese-nation-state-hackers/d/d-id/1339226

https://media.defense.gov/2020/Oct/20/2002519884/-1/-1/0/CSA_CHINESE_EXPLOIT_VULNERABILITIES_UOO179811.PDF

Ransomware gang donates part of ransom demands to charity organizations

https://www.zdnet.com/article/ransomware-gang-donates-part-of-ransom-demands-to-charity-organizations/

—————————-Todays Offbeat Holiday————-

Today is: International and National Nacho Day

https://www.internationalchefsday.worldchefs.org/

__________________Products shown today_____________

RMF& CAP Course

https://www.cyber-recon.com/courses/rmf-cap/

SWAG is at:

https://www.cyber-recon.com/swag/

Join us for an inside view of today’s Cyber News and why it matters.

November 19th is our next TRIVIA NIGHT. Join us at 7:00 PM Eastern Time for free fun and a chance to win prizes!

Congratulations to Mike Bravo for another win!

————————— News ————————————-

IoT Security Foundation unveils online platform to help IoT vendors report and manage vulerabilities

https://www.helpnetsecurity.com/2020/10/20/iot-security-foundation-online-platform/

Coinbase phishing hijacks Microsoft 365 accounts via OAuth app

https://www.bleepingcomputer.com/news/microsoft/coinbase-phishing-hijacks-microsoft-365-accounts-via-oauth-app/

US Treasury hits bitcoin mixer with $60 million penalty

https://www.bleepingcomputer.com/news/security/us-treasury-hits-bitcoin-mixer-with-60-million-penalty/

—————————-Todays Offbeat Holiday————-

Today is: International Chefs Day

https://www.internationalchefsday.worldchefs.org/

_____________________Products shown today_____________

RMF& CAP Course

https://www.cyber-recon.com/courses/rmf-cap/

SWAG is at:

https://www.cyber-recon.com/swag/

Microsoft Issues Out of Band Patches- October 19th, 2020 

Join us for an inside view of today’s Cyber News and why it matters.

November 19th is our next TRIVIA NIGHT. Join us at 7:00 PM Eastern Time for free fun and a chance to win prizes!

Congratulations to Mike Bravo for another win!

————————— News ————————————-

Microsoft adds option to disable JScript in Internet Explorer

https://www.zdnet.com/article/microsoft-adds-option-to-disable-jscript-in-internet-explorer/#ftag=RSSbaffb68

FIN11 gang started deploying ransomware to monetize its operations

https://securityaffairs.co/wordpress/109681/cyber-crime/fin11-clop-ransomware.html

Microsoft released out-of-band Windows fixes for 2 RCE issues

https://securityaffairs.co/wordpress/109665/security/microsoft-windows-rce.html

—————————-Todays Offbeat Holiday————-

Today is: Evaluate Your Life Day

https://chrisguillebeau.com/7-alternative-ways-to-evaluate-your-life-every-day/

_____________________Products shown today_____________

RMF& CAP Course

https://www.cyber-recon.com/courses/rmf-cap/

SWAG is at:

https://www.cyber-recon.com/swag/

10th Year of Cyber Skills Shortage! - October 16th, 2020 

Join us for an inside view of today’s Cyber News and why it matters.

November 16th is our next TRIVIA NIGHT. Join us at 7:00 PM Eastern Time for free fun and a chance to win prizes!

Congratulations to Mike Bravo for another win!

————————— News ————————————-

US Cyber Command Urges Users to Patch New 'Ping of Death' Windows Flaw

https://www.securityweek.com/us-cyber-command-urges-users-patch-new-ping-death-windows-flaw

Iranian state hacker group linked to ransomware deployments

https://www.zdnet.com/article/iranian-state-hacker-group-linked-to-ransomware-deployments/

Just What Cyber Security Executives Don’t Want to Hear: The Skills Shortage is Worsening

https://securityboulevard.com/2020/10/just-what-cyber-security-executives-dont-want-to-hear-the-skills-shortage-is-worsening/

—————————-Todays Offbeat Holiday————-

Today is: Boss's Day

https://en.wikipedia.org/wiki/Boss%27s_Day

_____________________Products shown today_____________

RMF& CAP Course

https://www.cyber-recon.com/courses/rmf-cap/

SWAG is at:

https://www.cyber-recon.com/swag/

Critical SonicWall Vulnerability! - October 15th, 2020 

Join us for an inside view of today’s Cyber News and why it matters.

TODAY (the 15th) is our next TRIVIA NIGHT. Join us at 7:00 PM Eastern Time for free fun and a chance to win prizes!

————————— News ————————————-

'Network access' sold on hacker forums estimated at $500,000 in September 2020

https://www.zdnet.com/article/network-access-sold-on-hacker-forums-estimated-at-500000-in-september-2020/

Ransomware Victims Struggle to Recover, Hire and Spend on Threat Prevention

https://www.infosecurity-magazine.com/news/ransomware-victims-recover-hire/

Critical SonicWall VPN Portal Bug Allows DoS, Worming RCE

https://threatpost.com/critical-sonicwall-vpn-bug/160108/

—————————-Todays Offbeat Holiday————-

Today is: National Grouch Day

https://www.daytondailynews.com/news/don-worry-grumpy-national-grouch-day/lcJlcWSB1exCBtJRKcYCyJ/

_____________________Products shown today_____________

RMF& CAP Course

https://www.cyber-recon.com/courses/rmf-cap/

SWAG is at:

https://www.cyber-recon.com/swag/

TrickBot Survives Takedown! - October 14th, 2020 

Join us for an inside view of today’s Cyber News and why it matters.

Thursday (the 15th) is our next TRIVIA NIGHT. Join us at 7:00 PM Eastern Time for free fun and a chance to win prizes!

————————— News ————————————-

Microsoft October 2020 Patch Tuesday fixes 87 vulnerabilities

https://www.zdnet.com/article/microsoft-october-2020-patch-tuesday-fixes-87-vulnerabilities/

Software AG Data Released After Clop Ransomware Strike – Report

https://threatpost.com/software-ag-data-clop-ransomware/160042

TrickBot botnet survives takedown attempt, but Microsoft sets new legal precedent

https://www.zdnet.com/article/trickbot-botnet-survives-takedown-attempt-but-microsoft-sets-new-legal-precedent/

—————————-Todays Offbeat Holiday————-

Today is: National Dessert Day

hhttps://www.newsweek.com/national-dessert-day-promo-deals-1464142

_____________________Products shown today_____________

RMF& CAP Course

https://www.cyber-recon.com/courses/rmf-cap/

SWAG is at:

https://www.cyber-recon.com/swag/

US Cyber Command Tricking TrickBot! - October 13th, 2020 

Join us for an inside view of today’s Cyber News and why it matters.

Thursday (the 15th) is our next TRIVIA NIGHT. Join us at 7:00 PM Eastern Time for free fun and a chance to win prizes!

————————— News ————————————-

The seven deadly sins letting hackers hijack America's govt networks: These unpatched bugs leave systems open

https://www.theregister.com/2020/10/12/cisa_fbi_warning/

Ransomware operators now outsource network access exploits to speed up attacks

https://www.zdnet.com/article/ransomware-operators-buy-network-access-from-the-underground-to-speed-up-infection/

P2P Botnets are all the Rage

https://cyware.com/news/p2p-botnets-are-all-the-rage-edb3844c

Hackers Publish Public School District's Stolen Data Online

https://www.securityweek.com/hackers-publish-public-school-districts-stolen-data-online

—————————-Todays Offbeat Holiday————-

Today is: International Skeptics Day

http://www.holidayinsights.com/moreholidays/October/internationalskepticsday.htm

_____________________Products shown today_____________

RMF& CAP Course

https://www.cyber-recon.com/courses/rmf-cap/

SWAG is at:

https://www.cyber-recon.com/swag/