Phishing attack bent on stealing Facebook credentials - A bad actor was able to design a very realistic-looking social login popup prompt in HTML. When a victim visits a malicious website (which an attacker could somehow convince them to visit, using social engineering tactics or otherwise), they would be prompted to log into their Facebook account via a false login prompt Once they fill out their username and password, that information is sent to the attacker.

Once they fill out their username and password, that information is sent to the attacker.

“The only way to protect yourself from this type of attack is to actually try to drag the prompt away from the window it is currently displayed in,” he said. “If dragging it out fails (part of the popup disappears beyond the edge of the window), it’s a definite sign that the popup is fake.”

In general, as a precaution users should always drag popups away from their initial position to spot for abnormal behavior.

https://threatpost.com/sneaky-phishing-scam-facebook/141869/

Equifax Breach - Strange twist in the story. The stolen data has NEVER been FOUND and the investigators have two interesting theories.

First, the foreign government is probably combining this information with other stolen data, then analyzing it using artificial intelligence or machine learning to figure out who's likely to be — or to become — a spy for the U.S. government. 

Second, credit reporting data provides compromising information that can be used to turn valuable people into agents of a foreign government.

https://www.cnbc.com/2019/02/13/equifax-mystery-where-is-the-data.html

Who's watching the watchers?, Luckily, SEC was - On more than one occasion, Gene Levoff, senior director of corporate law and corporate secretary (responsible for Apple's compliance with securities laws) disobeyed the company's "blackout" period for stock transactions, selling or buying stock worth tens of "millions of dollars", according to the SEC

Gene Levoff, senior director of corporate law and corporate secretary until September, "traded on material nonpublic information about Apple's earnings three times during 2015 and 2016," according to the SEC.

Before his termination in September, Levoff was "responsible for Apple's compliance with securities laws," the SEC complaint says.

https://www.cnbc.com/2019/02/13/sec-files-insider-trading-lawsuit-against-former-apple-lawyer.html

Attention WordPress admins - A critical vulnerability in popular WordPress plugin Simple Social Buttons enables non-admin users to modify WordPress installation options – and ultimately take over websites.

Update Simple Social Buttons to version 2.0.22


https://threatpost.com/wordpress-plugin-flaw-website-takeover/141746/

Time to PATCH (again) - Attackers can escape Linux CONTAINERS and obtain unauthorized, root-level access to the host operating system.

• Docker users should check the Docker release notes for version 18.09.2.
• Kubernetes users should consult the Kubernetes blog article entitled Runc and CVE-2019-5736, 
• Any containerization product that uses runc is probably vulnerable – if you have a version numbered runc 1.0-rc6 or earlier, you need to take action

• Patch runc if you’re using it yourself.
• Stop guest containers running as root if you can.
• Ask your provider if they’re using runc on your behalf. 

CVE-2019-5736 - This bug means that a program run with root privileges inside a guest container can make changes with root privilege outside that container.

https://nakedsecurity.sophos.com/2019/02/12/linux-container-bug-could-eat-your-server-from-the-inside-patch-now/

A "security policy" may be ineffective without a "security culture" - (Evidence) According to Ponemon’s 2019 State of Password and Authentication Security Behaviors Report, extremely poor password management habits by those in IT are making a hacker’s job much easier.

51% reuse the same password across an average of five business and/or personal accounts. It seems "Eating your own dog food" does not apply to IT


This is in line with LastPass’s 2018 findings where 50% of users use the same passwords for work and personal accounts


https://blog.knowbe4.com/a-hackers-dream-half-of-it-admins-reuse-passwords-across-multiple-accounts

Do you know how many employees in your organization use TeamViewer. More importantly, are you sure they are NOT USING a malicious version of TeamViewer?

Trend Micro researchers have discovered a Trojan spyware disguising as TeamViewer to collect and steal user data

https://www.hackread.com/hackers-using-malicious-teamviewer-tool-to-spread-malware