Technical

[Asyn]

Largest Cyber Attack Against Iceland Driven by Complex Phishing Scheme
https://www.bleepingcomputer.com/news/security/largest-cyber-attack-against-iceland-driven-by-complex-phishing-scheme/

[Asyn]

New Sextortion Scam Pretends to Come from Your Hacked Email Account
https://www.bleepingcomputer.com/news/security/new-sextortion-scam-pretends-to-come-from-your-hacked-email-account/

[Asyn]

Fake Flash Updaters Push Cryptocurrency Miners
https://researchcenter.paloaltonetworks.com/2018/10/unit42-fake-flash-updaters-push-cryptocurrency-miners/

[Asyn]

Around 62 percent of all Internet sites will run an unsupported PHP version in 10 weeks
https://www.zdnet.com/article/around-62-of-all-internet-sites-will-run-an-unsupported-php-version-in-10-weeks/

[Asyn]

Old dog, new tricks - Analysing new RTF-based campaign distributing Agent Tesla, Loki with PyREbox
https://blog.talosintelligence.com/2018/10/old-dog-new-tricks-analysing-new-rtf_15.html

[Asyn]

MikroTik mayhem: Cryptomining campaign abusing routers
https://blog.avast.com/mikrotik-routers-targeted-by-cryptomining-campaign-avast

[Asyn]

Tracking Users across the Web via TLS Session Resumption
https://arxiv.org/pdf/1810.07304.pdf

[Asyn]

Having The Security Rug Pulled Out From Under You
https://blogs.akamai.com/sitr/2018/10/having-the-security-rug-pulled-out-from-under-you.html

[Asyn]

Inside the industry of cybercrime
https://blog.avast.com/evolution-of-cybercrime

[Asyn]

Live Networks LIVE555 streaming media RTSPServer lookForHeader code execution vulnerability
https://www.talosintelligence.com/reports/TALOS-2018-0684

[Asyn]

Latest Firefox Rolls Out Enhanced Tracking Protection
https://blog.mozilla.org/blog/2018/10/23/latest-firefox-rolls-out-enhanced-tracking-protection/
https://blog.mozilla.org/futurereleases/2018/10/23/the-path-to-enhanced-tracking-protection/

[Asyn]

TRITON Attribution: Russian Government-Owned Lab Most Likely Built Custom Intrusion Tools for TRITON Attackers
https://www.fireeye.com/blog/threat-research/2018/10/triton-attribution-russian-government-owned-lab-most-likely-built-tools.html

[Asyn]

Seven new Mirai variants and the aspiring cybercriminal behind them
https://blog.avast.com/hacker-creates-seven-new-variants-of-the-mirai-botnet

[Asyn]

Multiple 0days used by Magecart
https://gwillem.gitlab.io/2018/10/23/magecart-extension-0days/

[Asyn]

Malware Distributors Adopt DKIM to Bypass Mail Filters
https://www.bleepingcomputer.com/news/security/malware-distributors-adopt-dkim-to-bypass-mail-filters/