Page 5 - Threat Intelligence 10-10-2019

Security News

France warns of cyberattacks against service providers and engineering offices. France's cyber-security
agency has published an alert about cyber-espionage campaigns targeting the infrastructure of service
providers and engineering firms. "Attackers are compromising these enterprise networks in order to access
data and eventually the networks of their clients," the National Cybersecurity Agency of France, known locally
as ANSSI (Agence Nationale de la Sécurité des Systèmes d'Information), said in a technical report published on
Monday.

Source: https://www.zdnet.com/article/france-warns-of-cyberattacks-against-service-providers-and-
engineering-offices/

76 percent of US businesses have experienced a cyberattack in the past year. Small and medium-sized
businesses in the United States have become the global favorite for cyberattackers to target, new research
suggests. A study published on Tuesday by the Ponemon Institute and conducted on behalf of Keeper Security,
called the 2019 Global State of SMB Cybersecurity report, says that 66 percent of SMBs worldwide have
reported a cyberattack within the past 12 months -- and 76 percent of those included in the survey are based
in the United States.
Source: https://www.zdnet.com/article/76-percent-of-us-businesses-have-experienced-a-cyberattack-
in-the-past-year/

FBI warns about attacks that bypass multi-factor authentication (MFA). The US Federal Bureau of
Investigation (FBI) has sent last month a security advisory to private industry partners about the rising threat
of attacks against organizations and their employees that can bypass multi-factor authentication (MFA)
solutions. "The FBI has observed cyber actors circumventing multi-factor authentication through common
social engineering and technical attacks," the FBI wrote in a Private Industry Notification (PIN) sent out on
September 17.

Source: https://www.zdnet.com/article/fbi-warns-about-attacks-that-bypass-multi-factor-
authentication-mfa/

DHS and FDA warn about much broader impact of Urgent/11 vulnerabilities. The US Department of
Homeland Security and the US Food and Drug Administration (FDA) have published advisories this week
warning about a much broader impact of the Urgent/11 vulnerabilities, which impact more operating systems
than initially thought. The Urgent/11 security flaws were initially disclosed over the summer by cyber-security
firm Armis. They allow attackers to run malicious code and take over a wide range of devices, from routers to
firewalls, and from printers to industrial equipment.

Source: https://www.zdnet.com/article/76-percent-of-us-businesses-have-experienced-a-cyberattack-
in-the-past-year/

www.accumepartners.com
5