Global Cyber News Digest

Laptop stolen in Rome; UNL warns nearly 900 current, former ag staffers of potential data breach

Source: Omaha World-Herald
By: Rick Ruggles
Published: July 17, 2019

* A stolen laptop computer has caused a migraine for the University of Nebraska-Lincoln's Institute of Agriculture and Natural Resources.
* While in Rome last month, an IANR consultant's laptop computer was pilfered. The consultant helps manage IANR retirement benefits.

Firefox to Warn When Saved Logins are Found in Data Breaches

Source: Bleeping Computer
By: Lawrence Abrams
Published: July 17, 2019

* Starting in Firefox 70, Mozilla aims to have the browser report when any of your saved logins were found in data breaches.
* This will be done through their partnership with the Have I Been Pwned data breach site.

MyDashWallet was quietly compromised for two months

Source: Decrypt
By: Darryn Pollock
Published: July 16, 2019

* Dash's answer to MyEtherWallet has been hacked.
* The Dash-focused crypto wallet, MyDashWallet, reportedly succumbed to a data breach two months ago-exposing users' private keys-but has only just been reported. This means the hacker is able to steal any funds from the wallets of those affected.

Lawmakers introduce bill to block U.S. companies from doing business with Huawei

Source: The Hill
By: Maggie Miller
Published: July 16, 2019

* Lawmakers in the House and Senate introduced legislation Tuesday to keep Chinese telecommunications group Huawei out of U.S. fifth generation (5G) networks and prevent U.S. companies from doing business with the company many have deemed a national security threat.
* The bill would also give Congress the power to block administration waivers for U.S. companies to do business with Huawei.

Patch now before you get your NAS kicked: Iomega storage boxes leave millions of files open to the internet

Source: The Register
By: Shaun Nichols
Published: July 16, 2019

* Lenovo is emitting an emergency firmware patch for Iomega NAS devices after the network-attached storage boxes were discovered inadvertently offering millions of files to the internet via an insecure software interface.
* If you're thinking, wow, Iomega, I didn't know they were still going: EMC bought it in 2008, and in 2013, a Lenovo-EMC joint-venture rebooted the brand as LenovoEMC gear.

The 13 Biggest Data Breaches of 2019 (So Far)

Source: CRN
By: Michael Novinson
Published: July 16, 2019

* Nearly 31 million records were exposed in the 13 biggest breaches in the first half of 2019, with 11 of the top 13 breaches occurring at medical or healthcare organizations.

Facebook's Libra is a terrorist's best friend, thunders US Treasury: Crypto-coins dubbed 'national security risk'

Source: The Register
By: Kieren McCarthy
Published: July 15, 2019

* The US Treasury Secretary today put a big dent into Facebook's Libra cryptocurrency plans, by claiming it would be a "national security risk," as well as a likely source of money laundering for - among others - terrorists.
* Steven Mnuchin held a press conference to make sure his attack got wide coverage. In it, he criticized all cryptocurrencies for having "been exploited to support billions of dollars of illicit activity like cybercrime, tax evasion, extortion, ransomware, illicit drugs and human trafficking."

House passes bills to boost small business cybersecurity

Source: The Hill
By: Maggie Miller
Published: July 15, 2019

* The House passed legislation by voice vote on Monday intended to increase cybersecurity at the Small Business Administration (SBA) and separately approved a bill to help small businesses defend against cyber attacks.
* The SBA Cyber Awareness Act, sponsored primarily by Rep. Jason Crow (D-Colo.), would require the SBA to produce an annual report to Congress that assesses the quality of its information technology, and that details any equipment used by the SBA that was manufactured in China.

Evite Invites Over 100 Million People to Their Data Breach

Source: Bleeping Computer
By: Lawrence Abrams
Published: July 15, 2019

* The data breach monitoring service Haveibeenpwned.com has added a database dump of almost 101 million Evite users who had their information exposed when attackers gained unauthorized access to their servers.
* In May 2019, Evite posted a data incident notice that disclosed an unauthorized third-party had gained access to their servers starting on February 22, 2019 and were able to access member's personal data. No financial information or social security numbers, though, were part of the breach.

Hackers Demand $2 Million From Monroe

Source: Inside Higher Ed
By: Lindsay McKenzie
Published: July 15, 2019

* A cyberattack disabled many of Monroe College's technology systems and platforms last week. * Students and faculty and staff members were locked out of the college's website, learning management system and email, with hackers demanding payment of around $2 million in Bitcoin to restore access.