[Alibaba Security Security Weekly] Google "Pistol" Replacement | Iran's Central Bank Bans Cryptocurrencies

Seven Keywords of the Week: Google “Pistol” Replacement丨IOS Vulnerability Affects Industrial Switches丨Iran ’s Central Bank Bans Cryptocurrencies release

 

 

-1- [Internet]  Google learns from Apple to change pistol emoji into water gun

Source: solidot

------------------------------------------------------

When Apple released iOS 10 in 2016, it changed the emoji of the pistol (Emoji), replacing the realistic version of the pistol cartoon with a green water gun, while Google, Samsung, Facebook and Twitter still use the latter. Two years later, Samsung, Twitter and Google were found to have replaced the pistol emoji .  Google's Noto Emoji library on GitHub was found to replace the original pistol with a water pistol , and Noto Emoji is the default Emoji library used by the Android system.

 

http://jaq.alibaba.com/community/art/show?articleid=1654

 

 

-2- [Security Vulnerability] Rockwell Automation Claims Cisco IOS Vulnerability Affects Its Industrial Switches

Source: HackerNews.cc 

------------------------------------------------------------------

Rockwell Automation issued a warning that its Allen-Bradley Stratix and ArmorStratix industrial switches could be hacked due to a security flaw in Cisco IOS. According to Rockwell Automation, eight recently discovered vulnerabilities in Cisco IOS affect its products used in many areas, including critical manufacturing as well as energy.

 A few weeks ago, the hacker team "JHT" exploited the Cisco CVE-2018-0171 vulnerability to launch a cyber-attack campaign targeting Russian and Iranian cyber infrastructure.

http://jaq.alibaba.com/community/art/show?articleid=1644

 

 

-3- [Cryptocurrency] Put an end to money laundering: Central Bank of Iran announces ban on cryptocurrency transactions

Source: cnbeta

------------------------------------------------------------------------------

On the morning of April 23, Iran’s central bank announced that it would ban the country’s banks from processing bitcoin and other cryptocurrencies in order to prevent illegal activities such as money laundering, according to a report by Iran’s state news agency IRNA on Sunday. Iran hopes to use this move to ease the currency crisis.

 

 

Iran’s anti-money laundering agency passed a ban on cryptocurrency transactions last December. According to the IRNA report, the Central Bank of Iran stated: “Banks, credit institutions, and currency exchanges should eliminate the sale and purchase of cryptocurrencies, nor promote cryptocurrencies in any way. ”

http://jaq.alibaba.com/community/art/show?articleid=1646

 

 

-4- [Hackers] Hacker group Orangeworm launches espionage campaign against the global healthcare industry

Source: HackerNews.cc

------------------------------------------------------------------------------

According to foreign media reports, Symantec researchers have discovered a hacking group that is targeting medical institutions and related departments around the world to launch espionage activities -  Orangeworm  , which installs suspicious Trojans on machines that host software used to control high-tech imaging equipment ,media reported. , such as X-ray and MRI equipment and machines used to help patients complete consent forms.

"Orangeworm does not randomly select targets or conduct opportunistic hacking attacks based on a list of known victims," ​​Symantec said. "The Orangeworm group appears to have chosen their targets carefully and deliberately, with extensive planning prior to launching their attacks. "

http://jaq.alibaba.com/community/art/show?articleid=1649

 

 

-5- [DDoS attack] Europol smashes large paid DDoS service website

Source: cnbeta

-------------------------------------------------------------------------------------

According to foreign media reports, on Wednesday morning local time, Europol announced that it was shutting down Webstresser.org - a website with a clear price for selling DDoS cyber attacks. According to Europol, the site has a total of more than 136,000 users and a total of 4 million cyberattacks were launched by April.

 

 

A DDoS attack forces a target website or server to go offline by flooding the target website or server with requests. The Dyn attack in 2016 successfully forced major websites such as Twitter, Spotify, and Reddit to temporarily shut down. Hackers would need a lot of equipment to launch such an attack -- usually a hijacked IoT device -- but sites like Webstresser.org offer it directly to those willing to pay. This means that criminals do not need technical experts to launch a cyber attack.

http://jaq.alibaba.com/community/art/show?articleid=1656

 

 

-6- [Data Breach] 8 ways hackers can profit from stolen data

Source: Roar

--------------------------------------------------

Hackers are becoming more and more cunning, they know that as long as they obtain the user's PII (Personal Identifiable Information), they can track the user and generate a lot of associated data. Using this data, hackers can target a number of targeted monetization methods, such as medical fraud, stealing military secrets and hijacking R&D product information.

 

 

http://jaq.alibaba.com/community/art/show?articleid=1643

 

 

-7-    [Download] MySQL 8.0 official version 8.0.11 released: 2 times faster than MySQL 5.7

Source: Open Source Chinese Community

--------------------------------------------------------------------------

The official version 8.0.11 of MySQL 8.0 has been released. Officially, MySQL 8 is 2 times faster than MySQL 5.7, and it also brings a lot of improvements and faster performance!

 

 

Noteworthy new features and improvements in MySQL 8, as well as download links, see the address

http://jaq.alibaba.com/community/art/show?articleid=1645

 

 

——————————————————————————————

The above is this week's Security Weekly. For more information, please visit the official blog of Aliju Security