QuoScient’s Weekly Intelligence Bulletin for the week of 04 April – 11 April 2019 is now available! Please contact our sales team at sales@quoscient.io to subscribe today.
Find a summary below.
CYBER
Reported Incidents Industry Impacted: Industrial
FireEye reported to be currently responding to an intrusion at an unnamed critical infrastructure facility that was targeted by the alleged Russian state-sponsored TRITON malware framework. This is the second reported intrusion since the incident in 2017 at the Saudi oil company Petro Rabig.
Vulnerabilities Industry Impacted: ANY, Information Technology
Adobe released security patches for 40 vulnerabilities, of which 25 are critical in severity, impacting Flash Player, Acrobat and Reader, and more.
Microsoft’s Patch Tuesday release includes fixes for 74 vulnerabilities across multiple products, and includes patches for two zero-day vulnerabilities actively exploited in the wild.
Threat Actor Activity Industry Impacted: Industrial
FireEye identified a targeted ransomware attack attributed to the FIN6 threat actor group, indicating the financially-motivated group continues to have interest in new methods of monetization.
GEOPOLITICS
The EU and China concluded their summit with a joint statement which included their commitment to maintaining peace and stability in the cyber space.
The US will add Iran’s Islamic Revolutionary Guard Corps (IRGC) to its list of designated foreign terrorist organizations on 15 April.