As vendors and security teams recover from Black Hat and Defcon, news continues to be thin. Holidays, however, aren’t stopping cyberattacks. Workday is the latest high-profile company to admit it was breached. It has told customers that the breach was not on its software but was a third-party breach. Researchers have pointed to the ShinyHunters group, which tricks people into connecting malicious OAuth apps to Salesforce. This gives them access to CRM data, which is stolen and used for extortion.
Dragos
Dragos Inc. has announced the appointment of Eric Cross as Chief Revenue Officer (CRO). Cross will lead all global go-to-market functions, including sales, customer success, partner and channel ecosystems, and marketing, as the company continues to deliver on its mission to safeguard industrial and critical infrastructure.
FBI
The FBI IC3 team are warning of an increased threat from Russia’s FSB Center 16. It has detected Russian FSB cyber actors exploiting Simple Network Management Protocol (SNMP) and end-of-life networking devices running an unpatched vulnerability (CVE-2018-0171) in Cisco Smart Install (SMI) to broadly target entities in the United States and globally.
noyb
The Austrian Federal Administrative Court (BVwG) has confirmed an earlier decision by the Austrian Data Protection Authority (DSB) that the Austrian newspaper DerStandard violated the GDPR when introducing “Pay or Okay”. The DSB and the Court both held that users must be able to selectively consent or object to each processing purpose. This case will now likely hit the Austrian Supreme Administrative Court – and potentially the Court of Justice.
Xalient
Xalient has published a blog titled, “Manufacturing’s Hidden Cyber Threat: The Growing Danger of Unsecured Machine Identities”. It looks at the rise of unmanaged identities across manufacturing from sensors through to PLCs and other devices. The challenge it addresses in the blog is that these machine identities are often unsecured. This is not a new problem but this is still an article worth reading as the problem is getting worse.
