Threat Post

1. DOJ: Creep Coach Finagles Nude Athlete Photos

   Allegedly perv college coach charged with cyberstalking and extorting nudes from his female athletes.

2. 623M Payment Cards Stolen from Cybercrime Forum

   The database was subsequently leaked elsewhere, imperiling consumers from the U.S. and around the world.

3. Network Detection & Response: The Next Frontier in Fighting the Human Problem

   Justin Jett, director of audit and compliance for Plixer, discusses the transformation of network-traffic analytics and what it means for cybersecurity now.

4. Data from 500M LinkedIn Users Posted for Sale Online

   Like the Facebook incident earlier this week, the information — including user profile IDs, email addresses and other PII -- was scraped from the social-media platform.

5. Adware Spreads via Fake TikTok App, Laptop Offers

   Cybercriminals are encouraging users to send the "offers" via WhatsApp to their friends as well.

6. Zero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers

   Cisco says it will not patch three small business router models and one VPN firewall device with critical vulnerabilities.

7. IcedID Banking Trojan Surges: The New Emotet?

   A widespread email campaign using malicious Microsoft Excel attachments and Excel 4 macros is delivering IcedID at high volumes, suggesting it's filling the Emotet void.

8. Azure Functions Weakness Allows Privilege Escalation

   Microsoft's cloud-container technology allows attackers to directly write to files, researchers said.

9. Hackers Exploit Fortinet Flaw in Sophisticated Cring Ransomware Attacks

   Industrial enterprises in Europe are target of campaign, which forced a shutdown of industrial processes in at least one of its victims’ networks, according to researchers.

10. Attackers Blowing Up Discord, Slack with Malware  

    One Discord network search turned up 20,000 virus results, researchers found.