El Diario del CISO El Diario del CISO (THE CISO JOURNAL) EDICIÓN 2/19

EL DIARIO DEL CISO (THE CISO JOURNAL) Pensando y Trabajando por un Líder de Seguridad Digital International InfoSec & Cybersecurity News Airbus personal data of employees, contacts accessed in cyber incident | SC Media Lloyds Of London And Aon Report: Cyber Attack Could Cause Damages Of $193bn | Information Security Buzz The French aircraft manufacturer Airbus reported it detected a cyber incident on its commercial aircraft business information systems, which resulted in unauthorized access to personal data. Lloyds of London and Aon have today released a report suggesting that a coordinated global cyber attack, spread through malicious email, could cause economic damages anywhere between $85 billion and $193bn. 12th annual Data Privacy Day advice: complicated passwords, VPNs and fines 2.2 billion emails found in new Collection data dumps Attackers scanning unpatched Cisco small business routers after exploit code published Attorney claims Apple FaceTime eavesdropping glitch “allowed” recording of deposition Bullish on cybercrime February 2019 cybercrime stats GreyEnergy’s linked to Zebrocy Hackers pounce on honeypot gateway to a ‘power station’ Hacking Back Home improvement website Houzz discloses breach Intel community assessment: Cyberattacks threat to U.S. security Japanese gov't to hack civilian IoT devices in security push before Olympics Mac and Chrome info stealer and cryptomining malware in the wild OceanLotus group uses new Kerrdown downloader to deliver payloads Phishing campaign throws Shade ransomware at Russians Possible ransomware attack disturbs Altran Technologies' operations Remexi spyware campaign targeted diplomatic institutions based in Iran SS7 exploited to intercept 2FA bank confirmation codes to raid accounts To catch a cyberthief True crime: SamSam ransomware I am How CISOs Can Demonstrate Business Value | SecurityWeek.Com Nicola (Nick) Sanna is the CEO of RiskLens.In 2015, he championed the creation of a nonprofit expert organization, the FAIR Institute, 5 New Year's Resolutions for Your IoT Security Strategy Apple Partially Fixes FaceTime Spying Bug Apple Working on Patch to Prevent FaceTime Spying Employee Data Compromised in Airbus Breach Hackers Target Cisco Routers via Recently Patched Flaws Home Design Website Houzz Alerts Users of Data Breach Industry Reactions to Data Privacy Day Israel Seeks to Beat Election Cyber Bots Japan to Survey 200 Million Gadgets for Cyber Security Malicious Hackers Can Abuse Siri Shortcuts: IBM Medical Device Security Firm Medigate Raises $15 Million Minnesota Department of Human Services Reports Data Breach U.S. Intel Community: Russia, China Can Disrupt Critical Infrastructure U.S. Takes Aim at North Korea's Joanap Botnet UK Data Watchdog Fines Leave.EU, Eldon Insurance Where To Begin With MITRE ATT&CK Matrix Top 10 CISO concerns for 2019 span a wide range of issues Top 10 CISO concerns for 2019 span a wide range of issues CISO tackles banking cybersecurity and changing roles Cybersecurity maturity model lays out four readiness levels Facebook and Google exploit Enterprise Certificate loophole on iOS How can synthetic clicks aid a privilege escalation attack? Man-in-the-disk attack: How are Android products affected? New DDoS attack technique puts CSPs at risk What are the best ways to prevent a SIM swapping attack? £34.6 Million Was Lost To cybercriminals In Second Half Of 2018 5 Tips Every CIO Must Follow To Prevent Costly Data Breaches Apple Fixes Grouop FaceTime 'Eavesdropping' Bug Authorities Across The World Going After Users Of DDoS-For-Hire Website Being Intuitive With The Intelligent Future DailyMotion Credential Stuffing Attack; Intl Data Privacy Day Discover Card Breach Experts Reaction On State Bank Of India Exposes Millions Of Customers' Data....More Leaks Trading On The Dark Web LocalBitcoin Blames Security Breach On Third Party Software Mega Leak Of 2.2 Billion Records Microsoft Exchange Vuln Enables Attackers To Gain Domain Admin Privileges Most Of The Fortune 100 Still Use The Flawed Software That Led To The Equifax Breach Phishing Campaign Targets Australian Netflix Users Python Network Tool Is Vulnerable To DoS Attack Rubrik Leaks Massive Database Of Client Data The State Of Web Application Vulnerabilities In 2018 World Economic Forum: Cyber Attacks And Critical Infrastructure Data Privacy Today and What it Means for Your Organization | CSO Online Why America is not prepared for a Stuxnet-like cyber attack on the energy grid; 15 secure coding practices to use in digital identity 10 cybersecurity trends to watch for 2019 12 top SIEM tools rated and compared 2020 security predictions: What to look for and how to benefit Apple disables Group FaceTime after eavesdropping bug discovered EFF has an encryption plan for the entire internet Facebook secretly paid users $20 a month to use VPN spying app How to ace the CISO interview – be ready for the tough questions Law enforcement shuts down xDedic marketplace for hacked servers SQL Slammer 16 years later: Four modern-day scenarios that could be worse The problems plaguing security point tools The three most important ways to defend against security threats Top security and privacy TED Talks from 2018 What is a supply chain attack? Why you should be wary of third-party providers What is application security? A process and tools for securing software Why America is not prepared for a Stuxnet-like cyber attack on the energy grid New Exploit Threatens Over 9,000 Hackable Cisco RV320/RV325 Routers Worldwide The firm shared an interactive map, showing all vulnerable RV320/RV325 Cisco routers in 122 countries Airbus Suffers Data Breach, Some Employees' Data Exposed Europol Now Going After People Who Bought DDoS-for-Hire Services FBI Mapping 'Joanap Malware' Victims to Disrupt the North Korean Botnet Hacker who reported flaw in Hungarian Telekom faces up to 8-years in prison How to Recover Lost or Deleted Files? New Mac Malware Targets Cookies to Steal From Cryptocurrency Wallets Researchers Release Tool That Finds Vulnerable Robots on the Internet

El Diario del CISO El Diario del CISO (THE CISO JOURNAL) EDICIÓN 2/19 | Page 4