Weekly Cyber Security News

This week is Cyber Security News an investigation into various top VPN services has revealed that many are insecure and leak I.P data. Closer to home for us as David Cameron is set to go head to head with tech companies as he attempts to ban strong encryption.

Be sure to check out our post earlier this week which focusses on cyber security news making the front page.

General

• Amazon patches three vulnerabilities in Fire smartphones (ZDNet) –

• Blackhats using mystery Magento card stealers (The Register) –

• Cisco to Acquire OpenDNS for $635 Million (SecurityWeek) –

• David Cameron is going to try and ban encryption in Britain

• Flash Player Flaw Used by APT3 Group Added to Magnitude Exploit Kit

• MasterCard to trial using selfies as authentication (ZDNet) –

• Media Streaming Company Plex Hacked, Blackmailed (SecurityWeek) –

• Microsoft quietly pushes 18 new trusted root certificates (Reddit) –

• MITs Bitcoin-Inspired Enigma Lets Computers Mine Encrypted Data (WIRED) –

• Sophos’ putrid patch snuffs Citrix kit, kills call centre (The Register) –

• VPNs are so insecure you might as well wear a KICK ME sign (The Register) –

• Xen project urges urgent hypervisor upgrade (The Register) –
• And finally, news about news, looks like netsec security subreddit has gone private so the reddit links above will only work for the few. Its in protest against reddit management direction. A sad move…

WordPress

Yet another issue? This one keeps on rolling on…

• CVE-2015-5151 – Cross-site scripting (XSS) vulnerability in the Slider Revolution (revslider) plugin 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the client_action parameter in a revslider_ajax_action action to wp-admin/admin-ajax.php.