Internet Security Week - Issue 43

In the 43rd edition of Internet Security Week , we'll cover a US government-related attack, doctors and patients left unprotected, avoid Christmas shopping scams, Twitter fined $450,000, and more.

News

Adrozek malware affects Chrome, Firefox and Edge, Microsoft warns

The Microsoft Defender 365 research team published, last Thursday (10), an article warning of a new malware called Adrozek that affects four of the main browsers on the market: Chrome, Firefox, Edge and the Russian Yandex Browser.

By Rafael Rigues in Olhar Digital

US government-related attack hits another 18,000 customers, SolarWinds says

Kevin Thompson, president and CEO of SolarWinds, said his company is "aware of a potential vulnerability" that may be in "updates released between March and June 2020 for our Orion monitoring products."

By Simon Sharwood in The Register

45 million medical exams from patients around the world were unprotected on the web

Data breaches, by their very nature, are already concerning incidents. When we specifically address medical data, we enter an even more sensitive area.

By Ramon de Souza in The Hack

Cyberpunk 2077 and the free download scam

Scammers are offering free downloads of Cyberpunk 2077, but what they really want is your data. Don't fall for it!

By Anton V. Ivanov in Kaspersky Daily

Buying Christmas gifts? These valuable tips can help you avoid online scams.

If there's one thing we all know, it's that cybercriminals take advantage of holidays.

By Ramon De Souza on Canaltech

Remote connection protocol (RDP) attacks increased by 235% in Brazil

Kaspersky has recorded a 242% increase in global brute force attacks on the Remote Connection Protocol.

In IT Inside

'PyMicropsia' malware may target Linux and macOS as new targets

Newly discovered after stealing information from Windows devices, the malware dubbed PyMicropsia may have new targets: Linux and macOS computers.

By Igor Shimabukuro in Olhar Digital

Twitter takes 14 days to notify about vulnerability and is fined €450,000 in Ireland

Twitter has been fined €450,000 for failing to notify the Irish Data Protection Commission (DPC) of a security breach within the 72-hour timeframe and failing to adequately document it. The violations violate the General Data Protection Regulation (GDPR).

By Guilherme M. Petry in The Hack

Brazilians win international cybersecurity competition

Authors of the Cyber Clue Game project, Paulo and Pedro Fabri won the top prize in a competition held by Kaspersky with students from almost 50 countries.

In Kaspersky Daily

Intel Suffers Cyberattack in Important Sector of Its Israeli Headquarters

Intel's headquarters in Israel was the victim of a cyberattack. Criminals used the Pay2key malware to break into the company's systems and then attempt to access Hababa Labs, a company center that houses the Goya and Gaudi artificial intelligence accelerators, which are crucial to the company's expansion into cloud computing.

By Felipe Ribeiro on Canaltech

In compliance with the LGPD Security and Prevention principles

As we know, companies that collect personal data from customers and employees must adopt certain conduct in accordance with the 10 principles that guide the law in question.

By Aléx de Oliveira in Lumiun's Blog