CyberSec Roundup
A synopsis of the latest Cybersecurity News
Top CyberSec firm hacked
FireEye, a leading cybersecurity firm has been hacked. The company’s CEO said that level of sophistication, uniqueness and techniques shown in the attack have led them to believe it was a state sponsored attack. The attackers stole Red Team tools, which are used to used to test their clients’ security systems. The attack is being investigated by the FBI and Microsoft, but it is believed to have been carried out by the Russian cyberespionage group APT29, also known as Cozy Bear.
MySQL databases for sale on the dark web
Approximately 250 thousand SQL databases were put up for sale on a dark web auction site. The databases appear to be compromised from automated brute force attacks. The attacks do not seem to have targeted specific organizations and feature various types of databases including test ones.
Subway UK Hacked
Subway UK’s marketing campaign system Subcard was hacked. The compromised system was then used to send phishing emails to customers with Excel documents infected with Trickbox malware. This malware can be used to steal passwords and infect other machines on the network.
By: David Pinder
IT & Security Consultant
Certified Ethical Hacker