Bank Breach Flagged, BRATA Bulks Up, Online Extension Tracking, and more.

Infosec Overnights - Daily Security News

A daily look at the relevant information security news from overnight - 20 June, 2022
Episode 248 - 20 June 2022
Bank Breach Flagged- https://www.bleepingcomputer.com/news/security/flagstar-bank-discloses-data-breach-impacting-15-million-customers/
BRATA Bulks Up -
https://www.zdnet.com/article/this-phone-wiping-android-banking-trojan-is-getting-nastier/
No End of Life Support- https://cybersecuritynews.com/cisco-says-zero-day-flaws/
ICS Vulns -
https://www.securityweek.com/automationdirect-patches-vulnerabilities-plc-hmi-products
Online Extension Tracking -
https://www.bleepingcomputer.com/news/security/google-chrome-extensions-can-be-fingerprinted-to-track-you-online/
Hi, I’m Paul Torgersen. It’s Monday June 20th, 2022, a day to recognize Juneteenth, and this is a look at the information security news from overnight.
From BleepingComputer.com
Flagstar Bank is notifying 1.5 million customers of a data breach where hackers accessed personal data including full names and social security numbers. The breach actually took place back in December, but the bank did not realize this until the beginning of June. No word of why the breach remained hidden for so long, or what other information was compromised. If you are one of the 1.5 million, you are the lucky recipient of 2 years of free credit monitoring.
From ZDNet.com:
With the nasty Android banking trojan known as BRATA, which is Brazilian Remote Access Tool, Android, used to be you only had to worry about it wiping your smartphone with a factory reset to cover its tracks. Recently it has added new features to improve its ability at phishing online-banking credentials and intercepting SMS two-factor authentication codes. See all the details from the Cleafy research in the article.
From CyberSecurityNews.com:
We talked last week about the 9.8 severity flaw in Cisco routers, for which the company has released an update. However, if Cisco has previously noted that your router was reaching end of life, they will NOT be releasing a patch nor a workaround for this vulnerability. These include the Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers. Time to upgrade kids.
From SecutiyWeek.com:
AutomationDirect has patched several high-severity vulnerabilities in some of its programmable logic controller (PLC) and human-machine interface (HMI) products. Exploitation of these ICS vulnerabilities could allow an attacker to make unauthorized changes to the targeted devices. See details from the Dragos report in the article.
And last today, from BleepingComputer.com
A researcher has found a way to use your installed Google Chrome extensions to generate a fingerprint of your device that can be used to track you online. He built a website to create fingerprints, or tracking hashes, based on various characteristics of a device, including GPU performance, installed Windows applications, screen resolution, hardware configuration, and even the installed fonts. See all the creepy details in the article.
That’s all for me today from Chicago. Have a great rest of your day. Like and subscribe, and until tomorrow, be safe out there.