Veolia, FeverWarn, SystemK, Fortra, GitLab, Ring, Trickbot, Aaran Leyland, and More – SWN #357

Doug White

1. Major US, UK Water Companies Hit by Ransomware
2. MachineSense FeverWarn
3. SystemK NVR 504/508/516
4. Fortra GoAnywhere MFT software exploited, but not ‘actively exploited’
5. GitLab password reset bug leaves more than 5.3K servers up for grabs
6. Trickbot malware developer sentenced to 5 years behind bars
7. Ring camera app won’t share footage with law enforcement anymore
8. Mugger take your phone? Cash apps too easily let thieves drain accounts, DA says

Aaran Leyland

1. 26 Billion Records Released in “The mother of all breaches”

   Defeating the MOAB: Fortifying our Passwords against a 26 Billion Record Breach All I can think about is the mother of all bombs, which seemed to be what we used to like to drop and what Russian don’t mind dropping on the daily. The recent discovery of the "Mother of All Breaches" (MOAB), encompassing a staggering 26 billion stolen records, sends shockwaves through the cybersecurity landscape, might be an exaggeration, more like ripples and people wondering if they should store them all on a hard drive and bad guys thinking this is going to be one crazy password spray or credential stuff. This colossal compilation, culled from LinkedIn, Twitter, Adobe, and a multitude of other organizations, presents a clear and present danger ‘good movie’: the threat of widespread password reuse translating into devastating consequences. Admit it, you have reused passwords and maybe not only for historic accounts – admitting it, is the first step to correcting the problem, or something like that…