Russian streaming platform hacked, 7.5M users affected / Hackers infect James Webb telescope images with malware / Ukraine takes down crypto scam group

Plus: Finland plans to give cybersecurity vouchers to companies, will be worth up to $100K

Inside.com Part of   Network August 31, 2022

Presented by

Russian streaming platform Start has been hacked. The threat actors are believed to have stolen 7.5 million users' data. More: According to the company, hackers have stolen information such as email addresses, phone numbers, and usernames. The data was stolen from a 2021 database. Start claims credit card information and other financial data have not been stolen. A file with data from the website's user base circulating on the internet also shows IP addresses and subscription numbers. The company did not mention this information. So far, Start does not know the threat actor responsible for the breach.

Threat actors have managed to infect James Webb telescope images with malware. The malware is being tracked as GO#WEBBFUSCATOR. More: The infection is deployed through a phishing campaign. Once a user clicks on the document, a jpeg with the telescope images is revealed. If the file is analyzed with a text editor, a payload is found. Hackers have written the malware in Golang, a programming language created by Google that works across all three leading platforms: Mac, Windows, and Linux. Researchers have been unable to track the responsible threat actor at this point.

A message from SECURITY COMPASS Current approaches to software threat modeling simply don’t work. They are manual, inconsistent, take too long, don’t scale, and don’t give developers what they need. When software security and compliance are considered more as an afterthought, rather than a vital step in the development process, organizations end up trying to remediate security and compliance issues after software has been written, rather than preventing issues in the first place. Here you can find a series of posts breaking down how you can anticipate threats earlier in the software development life cycle to create more secure and compliant software. Empower DevSecOps teams to make software secure and compliant by design through automating threat modeling, generating application security requirements, and providing secure development and compliance best practices. The SD Elements platform is the best solution for organizations who need to scalably model software threats, identify countermeasures, and deliver secure, compliant code quickly. Get the whitepapers

Ukraine has taken down a crypto scam group. The group was scamming users by contacting them via its numerous call centers. More: The National Police of Ukraine took the group down. Besides cryptocurrency, the scammers sold fake gold, oil, and securities investments. The call center agents would call their victims using software that hid their location and phone numbers. Once they convinced their victims to transfer funds, they would cut all communication with them.  Ukrainian law authorities stated that they could face up to 12 years in prison. Zoom Out: Ukrainian authorities also arrested crypto scammers last year in Lviv. The U.S. FTC has previously stated that $80M is stolen annually through similar cryptocurrency scams.

Finland plans to give cybersecurity vouchers to companies. The vouchers could be worth as much as $100,000. More: This measure comes at a time when Finland is facing an increased number of cyberattacks as a result of its NATO membership bid. The vouchers would be given to small and medium-sized businesses as well as NGOs. Large companies are eligible for vouchers worth as much as $100,000. The decision aims to incentivize companies to invest in this aspect of their business that has been neglected for many years but is crucial given recent developments globally and in Finland. Zoom Out: Finland's Parliament website, as well as numerous others, have been taken down twice this year, as its successful bid to join NATO has sparked reason from numerous actors, including its neighboring country, Russia.

A message from SECURITY COMPASS This is your show developers! Come and interact with our panel through questions or advice on how we can all improve developer-centric threat modeling. What to expect: Earlier this year, Security Compass ran a survey that probed the mind of developers. During this webinar, we'll be discussing our findings with security experts who live in the developer and threat modeling space. What you will learn: The connection between developer user stories or requirements, coding, and threat modeling. How to keep up with the ongoing discovery of software weaknesses. Practical advice for developers is to stay current on threat modeling practices. When: September 14, 2022, at 11am EST Whether you are a developer, lead, architect, or thread modeler, this webinar will leave you with something to think about.  Register Here

Intel has announced its partnership with Check Point Quantum. Through this partnership, Intel aims to improve its IoT developer platform. More: Check Point Quantum is known for its flagship security software. Intel believes that IoT devices suffer from a lack of security updates, resulting in numerous hacking campaigns directed toward them year-long. Check Point software includes Nano agent technology, proprietary software built to detect and prevent cyberattacks in real time.

Quick Hits: Fix your email overload for as little as $7.00 a month.* The U.K. has introduced its new telecommunications legislation. The new bill aims to make the industry safer from threat actors, as telecom companies are expected to be fully compliant by 2024. According to reports, Japanese citizens are facing an increased number of credit card scams. The U.K. data protection authority has filed charges against eight individuals who allegedly stole data from an auto repair shop. Cybersecurity revenue has increased by 22% YoY, according to market researchers. Amid the shifting landscape of embedded systems, developers turn to real-time operating systems when "good enough" isn't good enough.* *This is sponsored content.

Upcoming events at Inside: August 31 - AMA with Sophia Amoruso (CEO at Business Class) (Register Here) September 07 - AMA with Andrew Gazdecki (Founder of MicroAcquire) (Register Here) September 09 - AMA with Jay Ryan (U.S. Federal Government Program Manager at Security Compass) (Register Here) September 14 - What Do Developers Think of Threat Modeling? (feat. security experts from Security Compass, Dell, and Tricentis) (Register Here) * September 14 - AMA with Brian Dean (Founder of Backlinko) (Register Here) September 21 - AMA with Kristen Ruby (Founder of Ruby Media Group) (Register Here) September 28 - AMA with Leigh-Ann Buchanan (Founder of aīre ventures) (Register Here) October 12 - AMA with Bill Glenn (Executive Chairman at Crenshaw Associates) (Register Here) October 19 - AMA with Zecca Lehn (Responsibly VC) (Register Here) October 25 - Meet Our Fund 4, an Inside.com Summit (Register Here) *This is a sponsored listing.

Arbër is an Inside writer who also has experience in entrepreneurship. He has experience covering Consumer Tech, Venture Capital, NFTs, Crypto, etc. Arbër holds a Bachelor's degree in Business from XAMK University in Finland. When he is not reading(and writing) business news, he chooses to watch sports or anime...and then read news about sports or anime. Editor Aaron Crutchfield is based in the high desert of California. Over the last two decades, he has spent time writing and editing at various local newspapers and defense contractors in California. When he's not working, he can often be found looking at the latest memes with his kids or working on his 1962 and 1972 Fords.

Security Compass is on a mission to accelerate software time-to-market while managing risk.

Register to learn What Do Developers Think of Threat Modeling?

767 Bryant St. #203, San Francisco, CA 94107 Copyright © 2022 Inside.com

Did someone forward this email to you? Head over to inside.com to get your very own free subscription! You received this email because you subscribed to Inside Security. Click here to unsubscribe from Inside Security list or manage your subscriptions.