Afternoon,
Though I would do a wrap up of some of the last few days security articles I've seen across the net in case you've missed any or you just want to browse a digest !
1. Apparently cyber attacks are up by 24% for the 2nd quarter of 2017 compared to the 1st quarter of the year. Seems like manufacturing has been hit the hardest, followed by finance and then health with 34%, 25% and 13% of the brunt respectively. The full article can be read on ComputerWeekly, the link is below:
http://www.computerweekly.com/news/450424302/Manufacturing-a-key-target-for-cyber-attacks
2. Bleeping Computers have done a great article on the Botnet that was created by Fabio Gasperini (who was extradited to the USA from Italy). Using the Shellshock vulnerability Gasperini was able to build a massive Botnet that he used for 'Ad' hijacking whihc in turn brought in termendous wealth. It's an intriguing read. Full article on the link below:
https://www.bleepingcomputer.com/news/security/hackinitaly-the-story-behind-the-takedown-of-a-2-500-strong-qnap-nas-botnet/
3. A bit beyond my expertise but Bug Bounty rewards are getting seriously profitable, have a look at the below on bugcrowd blog:
https://blog.bugcrowd.com/secret-program-to-offer-rewards-up-to-250k
4. The man behind the upper, lower, alpha-numeric, special char, password advice (Bill Burr) seems to have back tracked.. https://nakedsecurity.sophos.com/2017/08/11/why-nists-bill-burr-shouldnt-regret-his-2003-password-advice/
Other password advice can be sought here:
https://www.wired.com/2016/05/password-tips-experts/
5. On the theme of passwords, it seems some of the top consumers out there are failing to enforce basic security password policies. Helpnetsecurity reports "Researchers created passwords using nothing but the lowercase letter “a” on Amazon, Google, Instagram, LinkedIn, Venmo, and Dropbox, among others" Have a read below for more info:
https://www.helpnetsecurity.com/2017/08/10/password-power-rankings/
6. Worth a mention is the growing support for Marcus Hutchins who was recently arrested in the US whilst attending Defcon.
https://www.theguardian.com/technology/2017/aug/11/marcus-hutchins-arrested-wannacry-kronos-cybersecurity-experts-react
If people find this interesting I'll try and do a wrap up every few days.
Cheers