Information Security Week - Issue 38

In the 38th edition of Information Security Week, an engineer is sentenced to 9 years in prison, the TSE (Superior Electoral Court) has its database exposed, a hacker steals $2 million, how to keep data safe on Black Friday 2020, and much more.

News

Engineer Sentenced to 9 Years in Prison for Stealing $10 Million from Microsoft

Russian Volodymyr Kvashuk, 26, was a Microsoft engineer between 2016 and 2018. His actions, which resulted in approximately $10 million, were recorded by the company and caught by the government. He has now been sentenced to nine years in prison.

By Claudio Yuge on Canaltech

After denying attack, TSE has databases exposed by hackers on election day

On election day, authors say that the exposure of internal court information serves to demonstrate the fragility of state security.

By Renato Santino in Olhar Digital

Hacker steals $2 million from cryptocurrency service Akropolis

Cryptocurrency lending and borrowing service Akropolis says a hacker used a “flash loan” attack against its platform and stole about $2 million worth of Dai cryptocurrency.

By Catalin Cimpanu in ZD Net

Microsoft applies 112 security flaw fixes

One of the fixed flaws is being actively exploited, the Windows kernel crypto driver vulnerability (CVE-2020-17087) disclosed by Google's Project Zero late last month.

By Thomas Claburn in The Register

After 'security incident', insurer warns customers about data leaks

Name, CPF, address, and health and asset information may have been compromised. The company offered monitoring services to victims.

By Altieres Rohr in G1

Black Friday 2020: How to maintain team productivity and online security?

Along with the large influx of users into online stores during this period, fraud is also expected to increase. In a year with more cyberattacks, the online shopping journey will certainly be a bit more dangerous.

By Kelvin Zimmer on Lumiun Blog

Iranian hackers launch ransomware campaign against Israel and Europe

Iranian hackers are believed to be behind a new ransomware campaign targeting companies in Israel and Europe, using vulnerabilities in remote desktop systems to lock files and extort money for the return and non-disclosure or resale of stolen data.

By Felipe Demartini on Canaltech

Around 280,000 Enel customers in Osasco (SP) had their data leaked

Customers of the energy distributor Enel São Paulo in the municipality of Osasco, in Greater São Paulo, have been informed, since Monday (9), that their registration data was leaked improperly.

By Renata Baptista in Uol

According to a Brazilian expert, a pioneering programmer in the financial and cryptocurrency markets who asked to remain anonymous, although the system itself is secure and virtually impossible to hack, its operation offers opportunities for fraudsters to obtain money illegally using social engineering techniques.

By Davi Medeiros in Bitcoin Portal