--- title: Business Information Security News of the Week, December 18, 2020 description: Check out the latest news on Cybersecurity and Risk Management --- [Omnistruct Newsletters](https://blog.omnistruct.com) # [Business Information Security News of the Week, December 18, 2020](https://blog.omnistruct.com/business-information-security-news-of-the-week-december-18-2020) Written by [Omnistruct Marketing](https://blog.omnistruct.com/author/omnistruct-marketing) | Dec 19, 2020 1:24:56 AM   # **Top Story for this Week**   ## [101 Best Security Startups of 2020](https://startupill.com/101-best-security-startups-of-2020/?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_YwQjIk_VOQ0xuy7-AYs7ubpz5I-xTZP6aKD33zAVUHigf35LyehzrdFZc5Vg2whr9EL1-) Welp Magazine hosts a yearly startup award honouring the most outstanding entrepreneurs and high-growth businesses in the world. **Omnistruct got the #30 of best security startups for 2020! **| December 17, 2020   ## [SEC filings: SolarWinds says 18,000 customers were impacted by recent hack](https://www.zdnet.com/article/sec-filings-solarwinds-says-18000-customers-are-impacted-by-recent-hack/?&web_view=true&utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_YwQjIk_VOQ0xuy7-AYs7ubpz5I-xTZP6aKD33zAVUHigf35LyehzrdFZc5Vg2whr9EL1-) IT software provider SolarWinds downplayed a recent security breach in documents filed with the US Securities and Exchange Commission on Monday. By Catalin Cimpanu | December 14, 2020    # **New Known Breaches in the Past Week**   ## [KC suburb spent millions on cyber security protections but still got hit by ransomware](https://www.bakersfield.com/ap/national/kc-suburb-spent-millions-on-cyber-security-protections-but-still-got-hit-by-ransomware/article_763559e2-b1fc-5130-8c00-2e132335780f.html?&web_view=true&utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_YwQjIk_VOQ0xuy7-AYs7ubpz5I-xTZP6aKD33zAVUHigf35LyehzrdFZc5Vg2whr9EL1-) About four months ago, the Independence City Council decided to spend more than $4 million to beef up the city’s cybersecurity protections and upgrade the outdated computer network. By Kevin Hardy I Decemebr 12, 2020   ## [Hacked Software Firm SolarWinds' Clients Include Ford, Microsoft, AT&T](https://www.newsweek.com/solarwinds-hack-customer-list-suspected-russian-cyberattack-1554467?&web_view=true&utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_YwQjIk_VOQ0xuy7-AYs7ubpz5I-xTZP6aKD33zAVUHigf35LyehzrdFZc5Vg2whr9EL1-) A suspected Russia-led cyberattack that reportedly breached several U.S. government agencies seemingly exploited software from Texas-based software company SolarWinds, with malware pushed via booby-trapped updates. By Jason Murdock I December 14, 2020   ## [California Hospital Notifies 67k Patients of Data Breach](https://www.infosecurity-magazine.com/news/svh-notifies-67k-patients-of-data/?&web_view=true&utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_YwQjIk_VOQ0xuy7-AYs7ubpz5I-xTZP6aKD33zAVUHigf35LyehzrdFZc5Vg2whr9EL1-) A hospital in California has notified 67,000 patients that their personal data may have been exposed in a cyber-attack. By Sarah Coble I December 16, 2020   ## [Ransomware attack causing billing delays for Missouri city](https://www.bleepingcomputer.com/news/security/ransomware-attack-causing-billing-delays-for-missouri-city/?&web_view=true&utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_YwQjIk_VOQ0xuy7-AYs7ubpz5I-xTZP6aKD33zAVUHigf35LyehzrdFZc5Vg2whr9EL1-) The City of Independence, Missouri, suffered a ransomware attack last week that continues to disrupt the city's services. By Lawrence Abrams I December 15, 2020   ## [Medical scans of millions of patients exposed online](https://www.welivesecurity.com/2020/12/15/medical-scans-exposed-online/?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_YwQjIk_VOQ0xuy7-AYs7ubpz5I-xTZP6aKD33zAVUHigf35LyehzrdFZc5Vg2whr9EL1-) Over 45 million medical imaging files including x-rays and CT scans have been found sitting on internet-facing unprotected servers and accessible for anyone to view. By Amer Owaida I December 15, 2020   # **General Cybersecurity News ** ## [US Agencies and FireEye Were Hacked Using SolarWinds Software Backdoor](https://thehackernews.com/2020/12/us-agencies-and-fireeye-were-hacked.html?&web_view=true&utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_YwQjIk_VOQ0xuy7-AYs7ubpz5I-xTZP6aKD33zAVUHigf35LyehzrdFZc5Vg2whr9EL1-) State-sponsored actors allegedly working for Russia have targeted the US Treasury, the Commerce Department's National Telecommunications and Information Administration (NTIA), and other government agencies to monitor internal email traffic as part of a widespread cyberespionage campaign. By Ravie Lakshmanan I December 13, 2020 ## [US orders emergency action after huge cyber security breach](https://www.ft.com/content/3a635e09-221c-49af-a582-97bc4e803747?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_YwQjIk_VOQ0xuy7-AYs7ubpz5I-xTZP6aKD33zAVUHigf35LyehzrdFZc5Vg2whr9EL1-) The US has issued an emergency warning after discovering that “nation-state” hackers hijacked software used by almost all Fortune 500 companies and multiple federal agencies to gain entry to secure IT systems. By Financial Times I December 14, 2020   ## [Cybersecurity Is National Security: A calling for American business](https://www.jdsupra.com/legalnews/cybersecurity-is-national-security-a-82572/?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_YwQjIk_VOQ0xuy7-AYs7ubpz5I-xTZP6aKD33zAVUHigf35LyehzrdFZc5Vg2whr9EL1-) In today’s complex geopolitical environment, inadequate business cybersecurity has clear and immediate national security implications. Business drivers for cybersecurity include enterprise risk, compliance, service management, operational resilience and cyber hygiene. These must now be supplemented by a deeper understanding of the national security impacts of business in unprotected digital space. By: Vimy Services LLC I December 14, 2020   ## [Giant U.S. Computer Security Breach Exploited Very Common Software](https://www.scientificamerican.com/article/giant-u-s-computer-security-breach-exploited-very-common-software/?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_YwQjIk_VOQ0xuy7-AYs7ubpz5I-xTZP6aKD33zAVUHigf35LyehzrdFZc5Vg2whr9EL1-) A hacking campaign has gained access to private information from a number of government and industry organizations, including the U.S. Departments of Treasury, Commerce and Homeland Security. By Sophie Bushwick I December 15, 2020   # **Small Business Cybersecurity Concerns**   ## [The anatomy of a cyberattack on your business](https://www.bizjournals.com/southflorida/news/2020/12/15/the-anatomy-of-a-cyber-attack.html?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_YwQjIk_VOQ0xuy7-AYs7ubpz5I-xTZP6aKD33zAVUHigf35LyehzrdFZc5Vg2whr9EL1-) Cybercriminals bank on small businesses being easy targets, and the Covid-19 pandemic has only made it easier for them to wreak havoc, experts say. By Emon Reiser I December 15, 2020   **CVE Announcements This Week**   ## [PgMiner botnet attacks weakly secured PostgreSQL databases](https://www.zdnet.com/article/pgminer-botnet-attacks-weakly-secured-postgresql-databases/?&web_view=true&utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_YwQjIk_VOQ0xuy7-AYs7ubpz5I-xTZP6aKD33zAVUHigf35LyehzrdFZc5Vg2whr9EL1-) Security researchers have discovered this week a botnet operation that targets PostgreSQL databases to install a cryptocurrency miner. By Catalin Cimpanu | December 13, 2020   ## [WordPress Easy WP SMTP zero-day potentially exposes hundreds of thousands of sites to hack](https://securityaffairs.co/wordpress/112218/hacking/easy-wp-smtp-wordpress-plugin-flaw.html?web_view=true&utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_YwQjIk_VOQ0xuy7-AYs7ubpz5I-xTZP6aKD33zAVUHigf35LyehzrdFZc5Vg2whr9EL1-) The SMTP WordPress plugin is installed on more than 500,000 sites, but despite the security patch has been released earlier this week many sites are yet to be patched. By Pierluigi Paganini I December 12, 2020   ## [MountLocker' Ransomware Adds to Affiliate Extortion Racket](https://www.inforisktoday.com/mountlocker-ransomware-adds-to-affiliate-extortion-racket-a-15583?&web_view=true&utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_YwQjIk_VOQ0xuy7-AYs7ubpz5I-xTZP6aKD33zAVUHigf35LyehzrdFZc5Vg2whr9EL1-) BlackBerry researchers are tracking a relatively new ransomware variant called "MountLocker" and the operators behind it, who are using affiliate cybercriminal gangs to help spread the malware, exfiltrate data and extort victims, sometimes for millions of dollars, according to an analysis. By Scott Ferguson I December 12, 2020   ## [Insecure Communication From WinZip 24 Lets Hackers Drop Malware](https://cybersguards.com/insecure-communication-from-winzip-24-lets-hackers-drop-malware/?web_view=true&utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_YwQjIk_VOQ0xuy7-AYs7ubpz5I-xTZP6aKD33zAVUHigf35LyehzrdFZc5Vg2whr9EL1-) In the course of searching for WinZip network communications changes, the experts noticed that through the unsecured tcp, the WinZip archiver was vulnerable to many attacks. By granting a rogue “update,” any threat attacker will easily manipulate this. By Mark Funk I December 12, 2020   ## [Hacking group’s new malware abuses Google and Facebook services](https://www.bleepingcomputer.com/news/security/hacking-group-s-new-malware-abuses-google-and-facebook-services/?&web_view=true&utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_YwQjIk_VOQ0xuy7-AYs7ubpz5I-xTZP6aKD33zAVUHigf35LyehzrdFZc5Vg2whr9EL1-) Molerats cyberespionage group has been using in recent spear-phishing campaigns fresh malware that relies on Dropbox, Google Drive, and Facebook for command and control communication and to store stolen data. By Ionut Ilascu I December 14, 2020   # **Regulations, Frameworks, and Controls**   ## [Bank regulators mull stricter rules for reporting of data breaches](https://www.americanbanker.com/news/bank-regulators-mull-stricter-rules-for-reporting-of-data-breaches?&web_view=true&utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_YwQjIk_VOQ0xuy7-AYs7ubpz5I-xTZP6aKD33zAVUHigf35LyehzrdFZc5Vg2whr9EL1-) The FDIC is poised to take the first public action on the issue with the agency’s board scheduled to vote Tuesday on a proposed rulemaking dealing with “computer-security incident notification.” By Kevin Wack I December 14, 2020       | Sincerely, **Omnistruct Marketing** 866-683-8827 [www.omnistruct.com](https://omnistruct.com/?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--bZS74_WZe1IDlpd0Z6DuKMLZcZmRMDuUWzB2uaX6wFusI-z5BS8N513GN3u_X92ecTCaX) Omnistruct, 2740 Fulton Avenue #101-02, Sacramento, CA 95821, USA, (866) 683-8827 [Unsubscribe                  ](https://email.omnistruct.com/business-information-security-news-october-9-2020#)[Manage preferences](https://email.omnistruct.com/business-information-security-news-october-9-2020#) | | --- |   [View full post](https://blog.omnistruct.com/business-information-security-news-of-the-week-december-18-2020) ```json { "@context" : "http://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Omnistruct Marketing" }, "dateModified" : "2020-12-19T01:24:56.879Z", "datePublished" : "2020-12-19T01:24:56Z", "headline" : "Business Information Security News of the Week, December 18, 2020", "image" : { "@type" : "ImageObject", "height" : 1240, "url" : "https://info.omnistruct.com/hubfs/Email%20Contents/Holiday%20Email%202020/Holiday%20Emails.png", "width" : 1747 }, "mainEntityOfPage" : "https://blog.omnistruct.com/business-information-security-news-of-the-week-december-18-2020", "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "height" : 60.0, "url" : "https://cdn2.hubspot.net/hubfs/5223782/Omnistruct1-1.png", "width" : 282.48926 }, "name" : "Newsletters" } } ```