CIP Cyber Security Brief

CIP CYBER SECURITY BRIEF

Monday, 4th February 2019

As a valued member of the CIP network, you receive this information which is gathered from current, open source data supplied through contacts within diplomatic posts, law enforcement agencies & UK intelligence services.

This brief is supplied in partnership with Dilitas, a UK-based International Risk & Security Management company. This information is intended to keep you informed of current security situations and risks within the UK and internationally. Please forward this briefing to colleagues.

BRIEFING

  • Chinese telecoms giant Huawei has denied any wrongdoing after US prosecutors filed a host of criminal charges against the firm. Huawei has also rejected criminal claims against its chief financial officer Meng Wanzhou, who was arrested in Canada last month.

  • As per FireEye, the US cybersecurity firm, Iran-based cyber criminals were likely behind the sophisticated "unprecedented" global hacking campaign that is targeting companies across North Africa and Middle East, North America and Europe. A wave of DNS hijacking affecting several domains related to telecommunications, government as well as internet was identified by the FireEye researchers.

  • Confidential data about more than 14,000 people diagnosed with HIV, including foreign visitors, has been stolen in Singapore and leaked online. Authorities revealed details about the 2016 health data breach [last] Monday.

  • [Kenya, Africa} Police officers are pursuing more than 100 suspects over electronic fraud by hacking into bank systems. The DCI in a tweet on Wednesday said warrants of arrest for the suspects have been issued by the chief magistrate’s court in Kiambu and Nairobi’s Milimani.

  • [UK] Police are urging people to review their online safety settings following 4,500 card and online frauds in Essex in six months. The figures were identified by the National Fraud Intelligence Bureau (NFIB) who carried out a fraud review of the county between April and September 2018. The total loss to the victims, either businesses or individuals, was around £6.5million.

  • DJI, the world's bestselling drone-maker, has published an open letter promising to take "painful" steps to tackle corruption within its company.

  • An international-level boxer, Arjun Rana and his two accomplices later identified as Vishal Tokas and an Nigerian national, Emma Dozie Osiaku were arrested on Tuesday from Greater Kailash and Lajpat Nagar on separate raids.

  • [UK] B&Q says it has taken action after being told that it exposed details of suspected store thieves to the net without password protection.

  • A judge has rejected Yahoo's attempt to draw a line under a series of breaches it experienced between 2013 and 2016. The firm had proposed a payout to lawyers acting on behalf of affected US and Israeli users. But while the deal said the attorneys could claim up to $37.5m (£28.5m) in fees and costs, it did not disclose the sum reserved for victims.

  • Facebook accused of "friendly fraud" and intentionally misleading children 
    "It doesn't necessarily look like 'real' money to a minor." Facebook has been accused of deliberately targeting children in order to tempt them into making in-game purchases, pursuing revenues at the expense of children and their parents.

ABOUT CIP

CIP are specialist cybersecurity and digital risk consultants, global leaders in PKI discovery and management via the Whitethorn product suite. CIP security consultants work across defence, financial services, CNI and manufacturing to address critical risk, protect hard-won assets and enable communities of trust.

To learn more about what CIP can do for your organisation, please visit CybersecIP.com

If you require more specific information or for assistance with your cybersecurity challenges, please contact Claire via info@cybersecip.com.