Threat Post

1. Olympic Destroyer Wiper Changes Up Infection Routine

   The Hades APT group continues its quest to stay under the radar.

2. VisionDirect Blindsided by Magecart in Data Breach

   Researchers say the Magecart threat group skimmed data of VisionDirect customers using fake Google Analytics scripts.

3. Ford Eyes Use of Customers’ Personal Data to Boost Profits

   Ford's CEO sees the tech company model as key to the company's next chapter.

4. Stopping the Infiltration of Things

   If a network-connected smoke detector starts communicating with the mail server, you know you have a problem.

5. Cryptojacking Attack Targets Make-A-Wish Foundation Website

   Hackers took advantage of an unpatched Drupal vulnerability in the organization's website to launch a cryptojacking attack.

6. Emoji Attack Can Kill Skype for Business Chat

   The "Kitten of Doom" denial-of-service attack is easy to carry out.

7. Gmail Glitch Offers Stealthy Trick for Phishing Attacks

   The issue comes from how Gmail automatically files messages into the "Sent" folder.

8. Critical WordPress Plugin Flaw Grants Admin Access to Any Registered Site User

   The privilege-escalation vulnerability would allow an attacker to inject malware, place ads and load custom code on an impacted website.

9. Lock-Screen Bypass Bug Quietly Patched in Handsets

   The flaw allows hackers to bypass handset lock screens in seconds.

10. tRat Emerges as New Pet for APT Group TA505

    The modular malware seems to be in a testing phase, but TA505's interest made researchers take note.