<img src="https://secure.ruth8badb.com/159098.png" alt="" style="display:none;">

IT Security Newsletter - 9/21/2021

SHARE

Top News

$5.9 million ransomware attack on farming co-op may cause food shortage

Iowa-based provider of agriculture services NEW Cooperative Inc. has been hit by a ransomware attack, forcing it to take its systems offline. The BlackMatter group that is behind the attack has put forth a $5.9 million ransom demand. The farming cooperative is seen stating the attack could significantly impact the public supply of grain, pork, and chicken if it cannot bring its systems back online. READ MORE...

Breaches

Data of 106 Million Visitors to Thailand Breached

A British cybersecurity researcher stumbled across his own personal data online after discovering an unsecured database containing the personal information of millions of visitors to Thailand. Bob Diachenko, leader of cybersecurity research at Comparitech, found the unprotected Elasticsearch database on August 22, 2021. Inside the 200GB digital index were records dating back ten years containing the personal details of more than 106 million international travelers. READ MORE...


EventBuilder Exposed Information of Over 100,000 Event Registrants

Event management company EventBuilder exposed files containing the personal information of at least 100,000 users who registered for events on its platform. The data leak was discovered by researcher Bob Diachenko and Clario, a company that provides consumer security and privacy products. The exposed files were found using Grayhat Warfare, a search engine for public buckets. READ MORE...

Malware

Marketron marketing services hit by Blackmatter ransomware

BlackMatter ransomware gang over the weekend hit Marketron, a business software solutions provider that serves more than 6,000 customers in the media industry. Marketron provides cloud-based revenue and traffic management tools for broadcast and media organizations. It specializes in revenue management and audience engagement, handling advertising revenue of $5 billion every year. READ MORE...

Information Security

Does Your Organization Have a Security.txt File?

It happens all the time: Organizations get hacked because there isn't an obvious way for security researchers to let them know about security vulnerabilities or data leaks. In a bid to minimize these scenarios, a growing number of major companies are adopting "Security.txt," a proposed new Internet standard that helps organizations describe their vulnerability disclosure practices and preferences. READ MORE...

Exploits/Vulnerabilities

Apache OpenOffice can be hijacked by malicious documents, fix still in beta

Apache OpenOffice (AOO) is currently vulnerable to a remote code execution vulnerability and while the app's source code has been patched, the fix has only been made available as beta software and awaits an official release. That means that most people running the open source office suite, which has been downloaded hundreds of millions of times and was last updated in May, probably have vulnerable versions of the software. READ MORE...


Payment API Bungling Exposes Millions of Users' Payment Data

App developers have once again been accused of having butterfingers when it comes to API keys, leaving millions of mobile app users at risk of exposing their personal and payment data. CloudSEK, maker of artificial intelligence- (AI-) enabled digital threat protection, reported last week that the mobile ecosystem is reeking with hard-coded API keys: Keys that should never be exposed in endpoint apps. READ MORE...

On This Date

  • ...in 1866, English science fiction author H.G. Wells, ("The Time Machine", "War of the Worlds") is born in Kent, England.
  • ...in 1937, J.R.R. Tolkien's fantasy novel "The Hobbit, or There and Back Again", is published.
  • ...in 1942, the B-29 Superfortress, one of the largest aircraft operational during WWII, makes its maiden flight.
  • ...in 1981, Sandra Day O'Connor is unanimously confirmed as the first female Supreme Court justice.