Microsoft Flaws and Windows Back Doors (Coordinated with NSA) Show Their Cost/Toll

• Trend Micro Zero Day team discloses unpatched Microsoft Jet RCE vulnerability

• Nmap-bootstrap-xsl Hack Creates Visually Appealing Nmap Scan Reports : Interview With Its Creator, Andreas Hontzia

• Illegitimate Crypto Mining has Increased: Cyber Threat Alliance

  The ‘Illicit Cryptocurrency Mining Joint Analysis’ also included the impact of EternalBlue on business organizations. Mining malware such as Adylkuzz and Smominru were being used to exploit victims. CTA quoted EternalBlue as an example for cryptojackers targetting old and unpatched devices with the help of disclosed vulnerabilities.

• Cryptocurrency-Related Cyber Attacks Surged By 459 Percent In 2018

  Cyber attacks related to cryptocurrency have increased by 459% throughout 2018, according to a report by the Cyber Threat Alliance (CTA). The projections for the next year seems to be even gloomier. Also, the report noted that hackers moved from illegally mining Bitcoin (BTC) to Monero (XMR).

• Cyber Threat Alliance Reports 459% Spike in Cryptomining Malware

  And while the 459 percent jump isn’t quite as shocking as Symantec’s numbers — the company said detections of cryptocurrency coin miners grew by a whopping 8,500 percent in 2017 — it should be enough to make companies take notice and do something about it. Plus, the presence of illicit cryptocurrency mining within an enterprise is a strong indicator of other security flaws, said Neil Jenkins, chief analytic officer at the CTA.

• Cybersecurity Group Links Illicit Mining To NSA-Developed Exploit

• Thanks NSA! Surveillance Agency Exploit Increases Illegal Bitcoin Mining by 459%

• Is your computer slower than normal? Hackers are using NSA spy tools to mine Bitcoin on gadgets worldwide (and it could already be running on your PC without your knowledge)

• Hackers Are Targeting Bitcoin With a Leaked NSA Software Tip, Report Says

• Leaked NSA Hacking Tool And 'Wannamine' Cryptojacking Malware's Adverse Impacts

• Cryptojacking is up 459% in 2018, and it's the NSA's Fault

• NSA: Security breaches of hacking tools curtailed snooping [Ed: Microsoft back doors and their cost]

• Why the 'fixed' Windows EternalBlue exploit won't die

• Hackers Using Software Vulnerability Stolen From the NSA to Illicitly Mine Crypto [Ed: Media blasts criminals for taking advantage of illegal NSA conspiracy for back doors because the criminals do illegal things]

• Illicit Crypto Mining Jumps 459% This Year, in Part Thanks to Leaked NSA Tool

  Microsoft was forced to release a security update in March 2017 to protect its clients. Those who applied the update are now safe from risks of being hacked with Eternal Blue.

• Hackers Mining Cryptos Using Leaked NSA Surveillance Tools, New Report Reveals [Ed: Media still fails to lay the blame on Microsoft for its back doors]

  Eternal Blue was stolen from the NSA last year in what has been labeled as the worst security breach in the agency’s history, worse than the Edward Snowden leak.

• NSA’s EternalBlue leak leads to 459% rise in illicit crypto mining, Cyber Threat Alliance report

  The report further added that 85 percent of illicit cryptocurrency malware mines monero, and 8 percent mines bitcoin. Even though Bitcoin is well known as compared to Monero, according to the report, the latter offers more privacy and anonymity which help cyber criminals hide their mining activities and their transactions using the currency. Transaction addresses and values are unclear in monero by default, making it incredibly difficult for investigators to find the cybercrime footprint.

• NSA leak fuels rise in hacking for crypto mining: report

  "A patch for EternalBlue has been available for 18 months and even after being exploited in two significant global cyberattacks—WannaCry and NotPetya—there are still countless organizations that are being victimized by this exploit, as it's being used by mining malware," Jenkins wrote.

• They’re Drinking Your Milkshake: CTA’s Joint Analysis on Illicit Cryptocurrency Mining

  This Joint Analysis is a call to action for network defenders. CTA and network defenders have the ability to disrupt the activities of illicit miners by raising their costs and forcing them to change their behavior. Together, we can keep them from succeeding in their goals.

Red Hat Downgrades and Lowered Targets

• Red Hat (RHT) Price Target Cut to $145.00

• Red Hat Inc (NYSE:RHT) Shares Sold by MetLife Investment Advisors LLC

• Benzinga's Bulls & Bears Of The Week: Amazon, Caterpillar, Costco, Netflix, More

• Oppenheimer Lowers Red Hat (RHT) Price Target to $165.00

• Twin Capital Management Inc. Acquires Shares of 14,560 Red Hat Inc (NYSE:RHT)

• Public Employees Retirement System of Ohio Decreases Holdings in Red Hat Inc (RHT)

LAS 2018

• LAS 2018

  This month I was at my second Libre Application Summit in Denver. A smaller event than GUADEC but personally was my favorite conference so far. One of the main goals of LAS has been to be a place for multiple platforms to discuss the desktop space and not just be a GNOME event. This year two KDE members, @aleixpol and Albert Astals Cid, who spoke about release cycle of KDE Applications, Plasma, and the history of Qt. It is always interesting to see how another project solves the same problems and where there is overlap. The elementary folks were there since this is @cassidyjames home turf who had a great “It’s Not Always Techincal” talk as well as a talk with @danrabbit about AppCenter which are both very important areas the GNOME Project needs to improve in. I also enjoyed meeting a few other community members such as @Philip-Scott and talk about their use of elementary’s platform.

• Developer Center Initiative – Meeting Summary 21st September

  Since last blog post there’s been two Developer Center meetings held in coordination with LAS GNOME Sunday the 9th September and again Friday the 21st September. Unfortunately I couldn’t attend the LAS GNOME meeting, but I’ll cover the general progress made here.

Tux Machines is proud to be hosted by