Wednesday, August 20, 2014




Complete DHS Report for August 20, 2014

Daily Report

Top Stories

 · Nearly 8,000 gallons of oil spilled out of Duke Energy’s W.C. Beckjord power station near Cincinnati, Ohio, August 18 when a secondary unit failed to contain the fuel causing it to spill into the Ohio River and prompting authorities to close a 15-mile stretch of the river. – WCPO 9 Cincinnati

1. August 19, WCPO 9 Cincinnati – (Ohio; Kentucky) Mayor: Our drinking water is safe after Duke Energy diesel spill in Ohio River. Between 5,000 to 8,000 gallons of oil spilled out of Duke Energy’s W.C. Beckjord power station near Cincinnati August 18 when a secondary unit failed to contain the fuel when it was released due to an open valve causing it to spill into the Ohio River. A 15-mile stretch of the river was closed to vessel traffic as well as three Cincinnati Waterworks and Northern Kentucky Waterworks intakes. Source: http://www.wcpo.com/news/local-news/diesel-spill-at-duke-energy-plant-leaks-diesel-fuel-into-ohio-river

 · Community Health Systems announced August 18 that the personal information of nearly 4.5 million patients was stolen in April and June by China-based hackers who used sophisticated malware to attack the company’s systems. – CNN; WREG 3 
Memphis

14. August 18, CNN; WREG 3 Memphis – (International) Tennessee-based hospital network hacked, 4.5 million records stolen. Community Health Systems, which operates 206 hospitals in 28 States, announced August 18 that the personal information, including Social Security numbers, of 4.5 million patients was stolen in April and June by China-based hackers who used sophisticated malware. The company cleared their computer systems of the malware and implemented protections against future breaches. Source: http://wreg.com/2014/08/18/tennessee-based-hospital-network-hacked-4-5-million-records-stolen/

 · Carondelet Health Network, based out of Tucson, Arizona, agreed to pay $35 million August 18 in a settlement with the U.S. Department of Justice and a whistle-blower for violating the False Claims Act by charging health care agencies for inpatient rehabilitation services that were not reimbursable.– Arizona Republic

15. August 18, Arizona Republic – (Arizona) Tucson hospitals pay $35 million in fraud settlement. Tucson-based Carondelet Health Network agreed to pay $35 million August 18 in a settlement with the U.S. Department of Justice and a woman for violating the False Claims Act by charging State and federal health-care agencies for inpatient rehabilitation services that were not reimbursable from 2004 to 2011. Source: http://www.azcentral.com/story/news/arizona/investigations/2014/08/19/tucson-hospitals-pay-million-fraud-settlement/14271947/

 · A 1,200-acre wildfire burning near the southern entrance to Yosemite National Park August 19 threatened about 500 homes in Madera County, California, and prompted authorities to order mandatory evacuations for 13,000 individuals. – San Francisco Chronicle

16. August 19, San Francisco Chronicle – (California) 13,000 asked to evacuate as wildfire near Yosemite grows. The California Department of Forestry and Fire Protection reported August 19 that the 1,200-acre Junction Fire burning near the southern entrance to Yosemite National Park threatened about 500 homes in Madera County and prompted authorities to order mandatory evacuations for 13,000 individuals after the fire consumed 8 structures and forced the closure of Highway 41 in both directions in Oakhurst. Source: http://www.sfgate.com/bayarea/article/13-000-asked-to-evacuate-as-wildfire-near-5697807.php

Financial Services Sector

5. August 19, Bloomberg News – (International) Ex-Rabobank employee pleads guilty in Libor-rigging probe. A former senior trader at Rabobank Groep’s London office pleaded guilty August 18 in New York City to conspiring with others to manipulate the London Interbank Offered Rate (LIBOR) lending benchmark to benefit his and others’ trading positions. Source: http://www.businessweek.com/news/2014-08-18/ex-rabobank-employee-pleads-guilty-in-libor-rigging-probe

Information Technology Sector

23. August 18, Threatpost – (International) New attack binds malware in parallel to software downloads. Researchers at Ruhr University developed a proof-of-concept attack that can inject malicious code into a legitimate download that runs parallel to the original and does not modify the code, taking advantage of security deficiencies present in some free and open source software. An attacker using the attack would need to control an intermediate network node between the client and the download server, such as compromising a router, using a network redirection attack, or compromising an insider through social engineering. Source: http://threatpost.com/new-attack-binds-malware-in-parallel-to-software-downloads

24. August 18, Securityweek – (International) Four-year old flaw exploited by Stuxnet still targeted. Kaspersky Lab researchers found that vulnerability CVE-2010-2568 leveraged in the Stuxnet attacks was still present on many systems 4 years after it was patched, with tens of millions of exploits targeting the vulnerability observed between November 2013 and June 2014. The researchers also found that other older vulnerabilities are still frequently targeted, and that around 53 percent of 15.06 million detected exploits targeted Java vulnerabilities. Source: http://www.securityweek.com/four-year-old-flaw-exploited-stuxnet-still-targeted

Communications Sector

25. August 18, Hesperia Star – (California) Verizon FiOS service interrupted. Amn unknown number of Verizon FiOS customers in Hesperia experienced an outage affecting their ability to use the Internet and utilize FiOS TV services. Service was expected to resume August 19. Source: http://www.hesperiastar.com/article/20140818/NEWS/140819791

No comments: