Thank you for reading the LinuxSecurity.com weekly security newsletter. The purpose of this document is to provide our readers with a quick summary of each week's most relevant Linux security headlines.

LinuxSecurity.com Feature Extras:

How SQL / NoSQL Databases Enable Blockchain Applications to Become GDPR Compliant - Blockchain, being a decentralized & dis-intermediated data store, is being considered for rapid adoption, in several industries like Supply Chain Management, P2P Global Transactions, Internet of Things, Electoral Voting, Stock Exchanges etc...

Email Security FAQs Answered by Guardian Digital - With email-related attacks becoming increasingly prevalent and serious, effectively securing your email accounts is more important than ever before.


Official Google Twitter account hacked in Bitcoin scam (Nov 15)

The epidemic of Twitter-based Bitcoin scams took another twist this week as attackers tweeted scams directly from two verified high-profile accounts. Criminals sent posts from both Google's G Suite account and Target's official Twitter account.

Post-WannaCry: Only 3% of companies are prepared for new types of cyberattacks (Nov 12)

One year ago, my phone lit up with the first text alert about the WannaCry ransomware attack. From the onset, it was clear this attack was major and that it was moving across the world at an unprecedented speed. Over four days, WannaCry inflicted billions of dollars of damages and infected more than 300,000 machines.

(Nov 11)

Pakistan's central bank has sought to quash reports that the country's lenders have been hacked en masse, following an apparent coordinated skimming campaign.

(Nov 11)

Stuxnet allegedly has a vicious little brother, or perhaps it is a malicious cousin; the complex malware was likened to being similar to Stuxnet but "more violent, more advanced and more sophisticated."

IoT security and Linux: Why IncludeOS thinks it has the edge (Nov 12)

Security is a big worry for the Internet of Things. We've already seen countless incidents where smart internet-connected devices are taken over by an attacker and put to unintended use.

The Hack Millions of People Are Installing Themselves (Nov 15)

Your internet browser is a doorway to your computer. Everyday users are installing all manner of browser extensions--small pieces of software that live inside Chrome or Firefox--to optimize their workflow, block ads, or otherwise improve their web experience.

(Nov 14)

The CEO and finance director of film company Pathé's Dutch operation were sacked after falling victim to a sophisticated BEC scam that netted the criminals €19m ($21m), it has emerged.

(Nov 13)

The rise of usable, frictionless encryption has brought us to a point where users can be fairly certain that their Signal or WhatsApp messages are not being collected, subpoenaed, or wiretapped by cops armed with a warrant or message interception technology.

(Nov 16)

Malvertising, the practice of embedding malicious code in seemingly innocent online adverts, is evolving through the use of steganography.

(Nov 14)

It has been another brutal year for organizations, according to a new report summarizing data breach activity in the first nine months of 2018.

WordPress GDPR compliance plugin hacked (Nov 13)

The EU General Protection Data Regulation (GDPR) is supposed to make companies take extra care with their customers' personal data. That includes gathering explicit consent to use information and keeping it safe from identity thieves.

(Nov 14)

The U.S. Secret Service issued an internal alert to law enforcement partners about identity thieves abusing the U.S. Postal Service's Informed Delivery, a service that allows you to digitally preview your mail and manage package delivery. ID thieves have been using the Informed Delivery service "to identify and intercept mail, and to further their identity theft fraud schemes."