Weekly Cyber Security News 13/11/2015

For well over a decade our focus at ionCube has been on PHP security but recently with the release of ionCube24 we have been looking into different kinds of vulnerabilities. This post has a few of the interesting issues we have found this week.

A selection of this week’s more interesting vulnerability disclosures and cyber security news.

Drupal

• CVE-2015-8082 The Login Disable module 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.2 for Drupal does not properly load the user_logout function

General

• ‘Armada’ Extortionist Hackers Bulldozing ‘Secure’ Email Services But Pay Some Bitcoin Back (Forbes)

• ‘Armada’ Hackers Who Bulldozed Email Services Also Delivered The Biggest Cyber Attack Ever (Forbes)

• Alan Turing: The man behind the myth (TechRepublic)

• Comcast resets 200k cleartext passwords, hacker claims breach (The Register)

• Comodo kills ‘forbidden’ certs (The Register)

• Crypto e-mail service pays $6,000 ransom, gets taken out by DDoS anyway (ArsTechnica)

• Crypto-ransomware hits UK Parliament network (SC Magazine)

• Cryptowall 4.0: Update makes world’s worst ransomware worse still (The Register)

• File-Encrypting Ransomware Targets Linux Users (SecurityWeek)

• Former parking ticket bloke turns out to be cybersecurity genius (The Register)

• Google AdWords API PHP client library <= 6.2.0 Arbitrary PHP Code Execution

• Group Behind CryptoWall 3.0 Made $325 Million

• How extorted e-mail provider got back online after crippling DDoS attack (ArsTechnica)

• Hyperlinks May Be Under Attack. Save The Link! (Forbes)

• ICYMI: Widespread Unserialize Vulnerability in Java, (Mon, Nov 9th)

• Java unserialize remote code execution hole hits Commons Collections, JBoss, WebSphere, WebLogic (ZDNet)

• Linux ransomware ‘Linux.Encoder.1’ has made 11934 in a month. Despite flawed methods of encryption on the malicious actors part. (Reddit)

• Listen: Ars Editor Sean Gallagher turns an NPR IoT segment into a security lesson (ArsTechnica)

• Nigerian government site popped, used for phishing scam (The Register)

• November 2015 Microsoft Patch Tuesday, (Tue, Nov 10th)

• One Bitcoin or lose your data, hacked Linux sysadmins told (The Register)

• Outlook crashing after installing Windows patches? You’re not alone (ZDNet)

• Pause Patch Tuesday downloads, buggy code can kill Outlook (The Register)

• ProtonMail ‘mitigates’ DDoS attacks, says security not breached (The Register)

• ProtonMail DDoS wipeout: Day 6. Yes, we’re still under attack (The Register)

• ProtonMail Suspects State-Sponsored DDoS Attack (SecurityWeek)

• Read the Economist last weekend? You may have fetched more than just articles (yup, malware) (The Register)

• Remote Code Execution Flaw Found in Java App Servers (SecurityWeek)

• Scottish man indicted for using Twitter to manipulate stock prices (SC Magazine)

• T-Mobile megahack cost Experian $20m, class actions coming (The Register)

• Thanks for playing: New Linux ransomware decrypted, pwns itself (The Register)

• What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your Application Have in Common? This Vulnerability. (Reddit)