Go to listing page

Daily Cybersecurity Roundup, October 13, 2021

Is it the day of 'largest' cyber intrusions?! Cybercriminals broke into the networks of one of the world's largest hotel chains, Ecuador's largest private bank, and the world’s largest digital-collectible marketplace. In a clever trick, certain hackers used mathematical symbols to dodge security walls. In other news, Australian officials outline Ransomware Action Plan. Continue to learn more about the cybersecurity updates from the past 24 hours.

01

The ATMs and online banking portal of Ecuador's Banco Pichincha are undergoing a severe disruption owing to a cyberattack. Services, including email, bank applications, digital channels, and other self-services, took a major hit.

02

Meliá Hotels International revealed a security event that briefly impacted its internal network and some web-based servers, including the reservation system.

03

A misconfigured Elasticsearch storage blob at Brazilian e-commerce firm Hariexpress exposed about 1.8 billion records, containing PII of customers as well as sellers.

04

Cybercriminals exploited a bug in OpenSea to drain funds from the cryptocurrency wallets of both sellers and buyers. Hackers circulated booby-trapped art files in the form of free gifts.

05

Kaspersky unearthed a cyberespionage campaign exploiting a zero-day flaw in Windows to deliver MysterySnail malware and steal data. A connection to a Chinese-speaking APT was also established.

06

The White House sanctioned an order allowing the CISA to assess existing endpoint security deployments across federal agencies.

07

INKY experts reported a phishing attempt targeted at Verizon that involves the use of a mathematical symbol to bypass anti-phishing systems to acquire users’ Office365 credentials.

08

The Australian government laid out its Ransomware Action Plan, featuring a new set of standalone criminal offenses for ransomware actors, including those who target critical infrastructure.

09

The Dutch Police sent warning letters to 29 customers of booter website minesearch[.]rip, who were explicitly involved in launching DDoS attacks.

10

California-based holding company RealDefense acquired antivirus and anti-malware firm STOPzilla for an undisclosed amount. It is the former’s fourth acquisition in the cybersecurity space.

Get the Daily Cybersecurity Roundup delivered to your email!