CIP Weekly Cyber Security Brief - 17/12/18

BRIEFING

Classified military information including missile plans have been stolen from contractors working for the US Navy by hackers linked to China, according to reports. Contractors working for the US Navy have reportedly suffered a series of breaches in the past 18 months.

Google has found another bug in its Google+ social network that it says affects as many as 52.5 million users ... as a result of this latest find, it said, the closedown had been brought forward.

A technology company bidding for a Pentagon contract to store sensitive data has close partnerships with a firm linked to a sanctioned Russian oligarch ... The Jedi project, a huge cyber-cloud which could ultimately store nuclear codes, has already sparked security fears.

A senior US intelligence official warned that Chinese cyber activity in the United States had risen in recent months, and the targeting of critical infrastructure in such operations suggested an attempt to lay the groundwork for future disruptive attacks.

Researchers with Cisco Talos are warning that secure messaging apps including Signal, Telegram, and WhatsApp are leaving themselves (and their users) open to attack. The problem, says researcher Vitor Ventura, is a while the apps themselves are secure, users can be fooled into doing things like not enabling secure settings, falling victim to session-stealing malware, and other side-channel attacks that don't break the apps themselves, but rather circumvent their protections.

The French ministry of foreign affairs is warning that some 540,000 citizens have had their contact information stolen after one of its databases was copied. IT security staff sacré bleu it when the hackers were able to get into Ariane, an emergency contact system that allows travellers to let the government know when they were traveling to potentially unsafe nations and who to contact in case of emergency.

A quarter of NHS trusts in England and Wales have failed to give staff specialist cyber security training, despite the devastating Wannacry cyber attack that crippled hospital computers last year.

Facebook has revealed that a software bug exposed the photos of up to 6.8 million users, including pictures they had not posted.

A Queensland police officer has been charged with nine counts of computer hacking. The 52-year-old senior constable, identified only as being attached to the Road Policing Command, allegedly conducted numerous unauthorised searches on police computers.

Terror chiefs believe a devastating chemical weapons attack in Britain is now ‘more likely than not’, The Mail on Sunday can reveal. The chilling assessment follows the interception of ‘chatter’ between senior figures in Islamic State (IS).

15th December 2018 - A British man who shared links on social media sites to Islamist terrorist group ISIL was Friday sent to prison for seven years by a judge in the northern England city of Newcastle. Abdulrahman Alcharbati, 31, of Westholme Gardens, Newcastle, was sentenced after being found guilty of several terrorism offences following a trial at Newcastle Crown Court.

On 7 December 2018, the Financial Action Task Force (FATF) published its highly anticipated mutual evaluation report of the UK. The report sets out the UK’s global standing in combatting money laundering and terrorist financing. The report is generally positive, ranking the UK as either highly or substantially effective in its fight against money laundering and terrorist financing in the majority of areas.

THREAT LEVELS

The threat to the UK from International Terrorism is SEVERE 
The threat to Great Britain from Irish Republican Terrorism is MODERATE

Threat levels are designed to give a broad indication of the likelihood of a terrorist attack.

LOW means an attack is unlikely 
MODERATE means an attack is possible, but not likely 
SUBSTANTIAL means an attack is a strong possibility 
SEVERE means an attack is highly likely 
CRITICAL means an attack is expected imminently