Notes from SecurityWeek's ICS Cyber Security Conference. States as criminal cartels? British Airways breach. Demonbot. GandCrab decryptor.

US National Security Advisor Bolton, who's been in Moscow this week for high-level talks with Russian officials, says he warned Russia against attempting to influence or interfere with US elections.

Russia's Foreign Ministry has responded to reports that they're listening in on President Trump's iPhone calls with an expression of "amusement."

Recorded Future's account of North Korean Internet usage shows that it's grown, but also that it's most heavily used by the country's small ruling elite. That elite does a lot of things regular users do (like shopping) but a great deal of activity, much of it staged through foreign countries, is directly criminal, regime-serving theft: Kim's regime works on the Internet as if it were a criminal cartel.

British Airways disclosed that 185 thousand additional customers were affected by its breach. Credit card information was exposed.

Radware warns of a botnet, "Demonbot," that's been quietly establishing itself in poorly secured Apache Hadoop servers. The intention appears to be to use the compromised servers for distributed denial-of-service attacks. It was first noticed by NewSky Security during its inspection of traffic into honeypots late this summer. Researchers for now at least think the botnet is the work of skids, but it's an annoyance that must be dealt with.

Google may be facing a US Federal Trade Commission inquiry over the propagation of ad fraud through its Play Store.

Bitdefender and the Romanian Police, through the No More Ransom project, have released an improved version of a free decryptor for GandCrab ransomware.