Internet Security Week - Issue 49

In the 49th edition of Internet Security Week , Europol takes down the world's most dangerous malware, Apple fixes a serious security flaw, photos and salaries leaked in an attack in Brazil and much more.

News

Biden said he was assembling a cyber dream team to solve the US government's computer security.

Malwarebytes, a North American developer of information security solutions, is the latest confirmed victim of the massive SolarWinds supply chain attack.

By Kieren McCarthy in The Register

Photos and salaries were also exposed in the country's largest data leak

In what is considered the country's largest data breach, photos of faces, names, addresses, and even salary ranges of 223.74 million Brazilians may have been exposed. The discovery was made by cybersecurity firm PSafe.

By Rafael Arbulu in Olhar Digital

Vulnerability on Caixa's website allowed customer data to be stolen

The vulnerability allowed attackers to create fake pages or malicious applications that functioned as if they were running from the state-owned company's official domains, making detection difficult and enabling social engineering attacks.

By Felipe Demartini on Canaltech

Europol in joint action stops Emotet, the most dangerous malware in the world.

Law enforcement and judicial authorities around the world this week disrupted one of the most significant botnets of the last decade: EMOTET. Investigators have already taken control of its infrastructure in a coordinated international operation.

Europol official website

ANPD finally speaks out about the leak of 220 million CPFs

ANPD was created within the scope of the LGPD; the entity investigates the leak of personal data that affected 223 million Brazilians.

By Felipe Ventura in Tecnoblog

Hackers Use Microsoft Servers to Amplify DDoS Attacks

33,000 vulnerable servers could be used to amplify attacks.

By Prajeet Nair in Bank Info Security

TikTok fixes security vulnerability that exposed private user data

Security vulnerabilities found in the Chinese short video-sharing app TikTok allowed attackers to bypass the platform's privacy settings and access users' personal and sensitive data.

By Guilherme Petry in The Hack

Multiple vulnerabilities discovered in FiberHom routers

At least 28 backdoor accounts found in FiberHome FTTH ONT routers.

By Catalin Cimpanu in ZD Net

10 movies to watch about information security and data privacy

Check out recommendations for films and documentaries that help you understand a little more about the cyber universe.

In Privacy Tech

Google accuses North Korea of trying to hack cybersecurity experts

Google suspects the North Korean government is hiring hackers to exploit cybercrime.

In Uol

UK Department of Education distributes computers with malware to schools

By distributing malware-laden laptops to the most vulnerable and needy students, the Department of Education is guilty of an appalling breach of responsibility.

By Rupert Goodwins in The Register

Tournament to find security flaws has prizes of up to $600,000 and a Tesla Model 3

The hacking competition, which celebrates its 14th anniversary this year, will take place from April 6th to 8th in Vancouver, Canada. Organizers recently released information about the prizes and competition rules.

By Gabriel Sérvio in Olhar Digital

Apple fixes three serious flaws in iOS 14.4 and iPadOS 14.4

According to Russian security firm Kaspersky, the exploits in question are considered zero-day, meaning they were exploited by attackers before Apple even knew of their existence.

By Ramon De Souza on Canaltech