Threat Post

1. Insider Threats, a Cybercriminal Favorite, Not Easy to Mitigate

   Rogue employees -- not just external threat groups -- pose a formidable threat to incident response teams.

2. Microsoft Patches RCE Bug Actively Under Attack

   Microsoft tackles 74 bugs as part of its November Patch Tuesday security bulletin.

3. Plugging the Data Leak in Manufacturing

   IIoT-generated data – calibrations, measurements and other parameters – still need to be stored, managed and shared securely.

4. Intel Warns of Critical Info-Disclosure Bug in Security Engine

   The issue is in an Intel chip used for remote management.

5. Magento Warns E-Commerce Sites to Upgrade ASAP to Prevent Attacks

   The platform is a favorite target for the Magecart collective of card-skimming threat groups.

6. Adobe Patches Critical Bugs in Illustrator, Media Encoder

   Adobe’s monthly patch load is low for November, with only three critical bugs and eight important ones fixed.

7. Microsoft to Apply California’s Privacy Law to All U.S. Users

   The move takes a broader stand to protect user data and support the requirements of CCPA nationwide.

8. DDoS Attacks Target Amazon, SoftLayer and Telecom Infrastructure

   The specific type of TCP attack used in the recent spate of DDoS efforts were TCP SYN-ACK reflection attacks.

9. ThreatList: Data Breaches Batter Stock Prices at Public Companies, For Months

   When it comes to bouncing back, long-term impact to share prices from a data breach incident is significant on average for large companies.

10. Ransomware Attack Downs Hosting Service SmarterASP.NET

    SmarterASP.NET said that it is in the middle of recovering accounts downed by the ransomware attack.