Friday, August 29, 2014




Complete DHS Report for August 29, 2014

Daily Report

Top Stories


· E.I. du Pont de Nemours and Company will pay $1.275 million to settle allegations that the company released harmful levels of hazardous substances on eight occasions at the company’s facility in Belle, West Virginia, between May 2006 and January 2010. – U.S. Environmental Protection Agency



6. August 27, U.S. Environmental Protection Agency – (West Virginia) US settles with DuPont to resolve Clean Air Act violations and protect communities, Kanawha River near West Virginia facility. The U.S. Environmental Protection Agency and the U.S. Department of Justice announced August 27 that E.I. du Pont de Nemours and Company (DuPont) will pay $1.275 million to settle allegations that the company released harmful levels of hazardous substances on eight occasions at the company’s facility in Belle between May 2006 and January 2010. Several of the releases posed human health risks and environmental risks to the Kanawha River, while one release resulted in the death of a DuPont employee who was exposed to phosgene gas after a hose on a holding tank ruptured in January 2010. Source: http://yosemite.epa.gov/opa/admpress.nsf/0/F7E930442EED166F85257D41006AE467

 · A spokesperson for the FBI stated August 27 that the FBI and U.S. Secret Service are investigating to determine the scope of recently reported cyberattacks against several major U.S. financial services institutions. – IDG News Service See item 9 below in the Financial Services Sector

 · Fire crews reached 20 percent containment August 27 of the 27,403-acre Happy Camp Complex fires burning across California, while an evacuation warning for some residents remained in effect. – U.S. Forest Service; Eureka Times-Standard

24. August 27, U.S. Forest Service; Eureka Times-Standard – (California) Fires grow in Happy Camp Complex, total containment at 20 percent. Fire crews reached 20 percent containment August 27 of the 27,403-acre Happy Camp Complex fires burning across California. An evacuation warning for residents from Elk Creek Road to Frying Pan Creek remained in effect. Source: http://www.times-standard.com/breakingnews/ci_26416411/fires-grow-happy-camp-complex-total-containment-at

 · Officials reported August 27 that an earthquake which struck Napa, California, August 24 may have caused $300 million in damage to businesses and homes in the region, including more than 600 structures that were red- or yellow-tagged. – KTVU 2 Oakland

35. August 27, KTVU 2 Oakland – (California) Napa quake damage estimated at $300 million. Napa officials reported August 27 that a 6.0-magnitude earthquake which struck the city of Napa August 24 may have caused $300 million in damage to privately owned businesses and homes in the region, excluding business inventories and general economic losses. At least 100 structures were red-tagged and more than 500 others were yellow-tagged until repairs could be assessed. Source: http://www.ktvu.com/news/news/local/napa-quake-damage-private-homes-businesses-estimat/ng9zk/

Financial Services Sector

9. August 28, IDG News Service – (International) FBI, Secret Service studying ‘scope’ of reported bank cyberattacks. A spokesperson for the FBI stated August 27 that the FBI and U.S. Secret Service are investigating to determine the scope of recently reported cyberattacks against several major U.S. financial services institutions. Source: http://www.networkworld.com/article/2599961/fbi-secret-service-studying-scope-of-reported-bank-cyberattacks.html

10. August 27, KCBS 2 Los Angeles – (California) ‘Purse Packing Bandit’ charged in series of LA bank robberies. The suspect known as the “Purse Packing Bandit” was charged August 26 with robbing nine banks in Los Angeles, Beverly Hills, and West Hollywood beginning October 2012. The suspect was arrested August 22 following the robbery at a bank branch in Beverly Hills. Source: http://losangeles.cbslocal.com/2014/08/27/purse-packing-bandit-charged-in-series-of-la-bank-robberies/

11. August 27, KGTV 10 San Diego – (California) ‘Hills Bandit’ bank robber sought. The FBI asked for the public’s help in identifying a suspect known as the “Hills Bandit” responsible for at least six bank robberies in Lake Forest, Carlsbad, Laguna Hills, La Jolla, and Laguna Niguel since May 16. The most recent bank robbery connected to the suspect occurred August 25 at a California Bank and Trust branch in San Diego. Source: http://www.10news.com/news/hills-bandit-bank-robber-sought

Information Technology Sector

29. August 28, Softpedia – (International) Malvertising hits high-profile websites, Java, deviantART, TMZ, Photobucket. Researchers at Fox-IT identified a malvertising campaign that used ads on popular Web sites such as those belonging to Java, deviantART, Photobucket, TMZ, and others to expose users with outdated Java, Flash Player, and Silverlight versions to compromise using the Angler exploit kit. The ads ran between August 19 and August 23 and did not require users to click on them in order to attempt to drop the Rerdom trojan. Source: http://news.softpedia.com/news/Malvertising-Hits-High-Profile-Websites-Java-deviantART-TMZ-Photobucket-456663.shtml

30. August 28, IDG News Service – (International) Mozilla reports user data leak from Bugzilla project. Mozilla disclosed August 27 that the email addresses and encrypted passwords of around 97,000 users who tested early versions of the Bugzilla bug tracking tool were exposed for 3 months after a server migration. The breach was caused by database dump files being left in an unprotected server location starting May 4. Source: http://www.networkworld.com/article/2600081/mozilla-reports-user-data-leak-from-bugzilla-project.html

31. August 28, Computerworld – (International) Microsoft purges 1,500 copycat, fraudulent Windows 8.1 apps. Microsoft stated August 27 that it removed over 1,500 fake Windows 8 and 8.1 apps from its Windows Store marketplace due to the apps attempting to charge users for free software. Source: http://www.networkworld.com/article/2599810/windows-apps/microsoft-purges-1-500-copycat-fraudulent-windows-8-1-apps.html

32. August 27, The Register – (International) Scratched PC-dispatch patch patched, hatched in batch rematch. Microsoft released an updated version of a security patch following reports that some users experienced ‘blue screen of death’ crashes after applying the original patch. Source: http://www.theregister.co.uk/2014/08/27/microsoft_reissues_security_patch/

33. August 27, Softpedia – (International) Crypto-malware steals email addresses and passwords, spreads itself. Avast researchers analyzed a new piece of ransomware that uses several freely available tools to infect users, encrypt files, and demand a ransom. The ransomware also steals email credentials to attempt to propagate itself and is currently targeting users in Russian-speaking countries. Source: http://news.softpedia.com/news/Crypto-Malware-Steals-Email-and-Passwords-Spreads-Itself-456658.shtml

For another story, see item 9 above in the Financial Services Sector

Communications Sector

Nothing to report