Security news weekly round-up - 15th May 2020
Tags: security
Published: 2020-05-15 13:10:37

---
title: Security news weekly round-up - 15th May 2020
published: true
description: A curated link about computer security from around the web
tags: security
cover_image: https://dev-to-uploads.s3.amazonaws.com/i/pyy42pwiihy23jhw2v7f.jpg
series: Security news weekly round-up
---

> __Cover photo by [Jazmin Quaynor](https://unsplash.com/@jazminantoinette) on [Unsplash](https://unsplash.com/).__

##__Introduction__

Welcome to the weekly round-up of security news from around the Web. I _hope your week was fine_. You can check the [first post in this series](https://dev.to/ziizium/security-news-weekly-round-up-2cc6) if you are curios what this is all about.

In this week round-up we'll go back in time (_literally_), talk about Malware, some _research_ in _computer security_, _data leaks_ e.t.c.

It's a lot to read but at least you can _bookmark_ them and find time to read.

Well that's it for the introduction. Let's go!

<hr>

###__WannaCry: A trip back in time__

I mentioned it earlier that we will go back in time, _literally_ unless we are in [Terra Nova](https://en.wikipedia.org/wiki/Terra_Nova_(TV_series)). Which year are we travelling to? Well, 2017. Why 2017 of all years? If you don't know a _malware_ named [_WannaCry_ caused a global __rampage__ on May 12<sup>th</sup>, 2017](https://www.bleepingcomputer.com/news/security/wana-decrypt0r-ransomware-using-nsa-exploit-leaked-by-shadow-brokers-is-on-a-rampage/).

The malware destroyed and encrypted computer files but was [stopped by a Twitter user](https://www.bleepingcomputer.com/news/security/wana-decrypt0r-ransomware-outbreak-temporarily-stopped-by-accidental-hero-/) using the handle [@MalwareTechBlog](https://twitter.com/malwaretechblog) when he registered a _domain_ found in the malware's source code. As it turns out it was the _kill switch_.

MalwareTechBlog was later arrested by law enforcement, the full story about the entire scenario was not public until some few days ago at the time of writing.

In a twitter post he tweeted:

{% twitter 1260075570827653120 %}

Then he tweeted a link to the full story:

{% twitter 1260162731954458627 %} 

The story is published on _Wired_ and it's entitled: [The Confessions of Marcus Hutchins, the Hacker Who Saved the Internet](https://www.wired.com/story/confessions-marcus-hutchins-hacker-who-saved-the-internet/).

It's a really _long read_, you might want to grab a cup of beverage.

###__[Microsoft to drop support for Windows 10 on 32-bit systems](https://www.bleepingcomputer.com/news/microsoft/rip-microsoft-to-drop-support-for-windows-10-on-32-bit-systems/)__

An excerpt from the article:

> Microsoft has stated that future versions of Windows 10, starting with the May 2020 Update, will no longer be available as 32-bit builds on new OEM computers.

> An update to the Windows 10 Minimum hardware requirements document, Microsoft states that starting with Windows 10 2004, new OEM computers will be required to use 64-bit builds of the operating system.

###__[New Ramsay malware steals files from air-gapped computers](New Ramsay malware steals files from air-gapped computers)__

_Air-gapped_ computers are computers isolated from the _public_ internet. They are mostly used by security conscious individuals who work on stuff that they value so much.

You cannot communicate directly with an air-gapped computer, but the author of the new _Ramsy_ found a way to exfiltrate files from an air-gapped computer to a destination of their chosen. Read the article for more information.

###__[Thousands of Android Apps Leak Data Due to Firebase Misconfigurations](https://www.securityweek.com/thousands-android-apps-leak-data-due-firebase-misconfigurations)__

We all have apps on our _smartphone_ and devices but sometime they might not behave the way we expect them to. This story  is one those case.

An excerpt from the article:

> Roughly 30% of all the applications in Google Play are believed to be using Google Firebase to store user data, but many of them are not properly secured. Overall, 4.8% of all mobile apps using Firebase are believed to be leaking personal information, access tokens, and other types of data.

###__[Hackers Breach LineageOS, Ghost, DigiCert Servers Using SaltStack Vulnerability](https://thehackernews.com/2020/05/saltstack-rce-exploit.html)__

If you use or know anyone who use _custom_ android ROMS like LineageOS on their device take a look at the story.

An excerpt from the article:

> Days after cybersecurity researchers sounded the alarm over two critical vulnerabilities in the SaltStack configuration framework, a hacking campaign has already begun exploiting the flaws to breach servers of LineageOS, Ghost, and DigiCert.

###__[DigitalOcean Data Leak Incident Exposed Some of Its Customers Data](https://thehackernews.com/2020/05/digitalocean-data-breach.html)__

The title says it all. An excerpt from the article:

> DigitalOcean, one of the biggest modern web hosting platforms, recently hit with a concerning data leak incident that exposed some of its customers' data to unknown and unauthorized third parties.

Another one:

>  According to the breach notification email that affected customers received, the data leak happened due to negligence where DigitalOcean 'unintentionally' left an internal document accessible to the Internet without requiring any password.

###__[7 New Flaws Affect All Thunderbolt-equipped Computers Sold in the Last 9 Years](https://thehackernews.com/2020/05/thunderbolt-vulnerabilities.html)__

This is an attack that requires physical access to your computer if your computer is equipped with a Thunderbolt port.

Based on the information from the website about the attack an attacker only needs 5 minutes alone with the computer.

Read the linked post for more information or you can [visit the website of the attack](https://thunderspy.io/) for more information.

<hr>

That's it for this week, I'll see you next Friday.