Internet Security Week - Edition No. 49

In edition 49 of Internet Security Week , Europol takes down the world's most dangerous malware, Apple corrects serious security flaw, photos and salaries leaked in attack in Brazil and much more.

News

Biden said he is assembling a cyber dream team to solve US government computer security

Malwarebytes, a North American developer of information security solutions, is the latest confirmed victim of the massive attack on the SolarWinds supply chain.

By Kieren McCarthy in The Register

Photos and salaries were also exposed in the country's biggest data leak

In what is considered the biggest data leak in the country, photos of the faces, names, addresses and even salary range of 223.74 million Brazilians may have been exposed. The discovery was made by cybersecurity company PSafe.

By Rafael Arbulu in Olhar Digital

Vulnerability on the Caixa website allowed theft of customer data

The loophole allowed attackers to create fake pages or malicious applications that worked as if they were running from the state-owned company's official domains, making detection difficult and enabling social engineering attacks to be carried out.

By Felipe Demartini on Canaltech

Europol in joint action stops actions by Emotet, the most dangerous malware in the world

Law enforcement and judicial authorities around the world this week disrupted one of the most important botnets of the last decade: EMOTET. Investigators have already taken control of its infrastructure in a coordinated international action.

Europol official website

ANPD finally pronounces on the leak of 220 million CPFs

ANPD was created within the scope of the LGPD; entity investigates personal data leak that affected 223 million Brazilians.

By Felipe Ventura in Tecnoblog

Hackers use Microsoft servers to amplify DDoS attacks

33,000 vulnerable servers could be used to amplify attacks.

By Prajeet Nair in Bank Info Security

TikTok fixes security vulnerability that exposed users' private data

Security vulnerabilities found in the Chinese short video sharing app, TikTok, allowed attackers to bypass the platform's privacy settings and thereby access users' personal and sensitive data.

By Guilherme Petry in The Hack

Multiple vulnerabilities discovered in FiberHom routers

At least 28 backdoor accounts found on FiberHome FTTH ONT routers.

By Catalin Cimpanu on ZD Net

10 films to watch about information security and data privacy

Check out recommendations for films and documentaries that help you understand a little more about the cyber universe.

In Privacy Tech

Google accuses North Korea of trying to hack cybersecurity experts

Google suspects that the North Korean government is hiring hackers to take advantage of cybercrimes.

In Uol

UK Department of Education distributes computers with malware to schools

By distributing malware-riddled laptops to the most vulnerable and needy students, the Department of Education is guilty of an appalling breach of responsibility.

By Rupert Goodwins in The Register

Tournament to find security flaws has prizes of up to 600 thousand dollars and a Tesla Model 3

The hacking competition, which turns 14 this year, will take place between April 6th and 8th in Vancouver, Canada. Recently, some information about the prizes and competition rules was released by the organizers.

By Gabriel Sérvio in Olhar Digital

Apple fixes three serious flaws in iOS 14.4 and iPadOS 14.4

According to the Russian security company Kaspersky, the holes in question are considered zero-day, that is, they were abused by attackers before Apple even knew of their existence.

By Ramon De Souza on FreeGameGuide