Weekly Cyber Security News 18/12/2015

For well over a decade our focus at ionCube has been on PHP security but recently with the release of ionCube24 we have been looking into different kinds of vulnerabilities. This post has a few of the interesting issues we have found this week.

Been a busy week (particually for Joomla users) so here are a selection of this week’s more interesting vulnerbility disclosures and cyber security news.

General

• ‘Devastating flaws’ in Kerberos authentication protocol (SC Magazine)

• ‘Devastating’ flaw found in Windows’ authentication system (The Register)

• ‘Unauthorized code’ that decrypts VPNs found in Juniper’s firewall OS (The Register)

• 13 million MacKeeper users exposed after MongoDB door was left open (ArsTechnica)

• 35,000 MongoDB Instances Exposed Online

• Apple Mac security: MacKeeper exposes 13 million user account details (ZDNet)

• At least 10 major loyalty card schemes compromised in industry-wide scam (The Register)

• British intelligence agency GCHQ’s Gaffer goes open source (ZDNet)

• British man arrested over VTech child data hack (ZDNet)

• British police arrest 21-year-old man tied to VTech toy hack (Yahoo Security)

• British police make arrest in VTech hacking (Yahoo Security)

• Car parking mobile apps are vulnerable to hacking, say infosec folk (The Register)

• Critical Xen bugs will require reboot of Linode and likely others (Reddit)

• Cyber-criminals could launch man-in-the-middle attack on Xbox Live users (SC Magazine)

• Facebook Threatens Researcher Over Instagram Hack (SecurityWeek)

• FireEye flamed: single email allows total network access (The Register)

• Google to Remove Symantec Root Certificate From Products (SecurityWeek)

• Google’s Project Zero uncovers critical flaw in FireEye products (ZDNet)

• Guardian article on cybercrime serves up malvertising (ZDNet)

• Hackers actively exploit critical vulnerability in sites running Joomla (ArsTechnica)

• Hit-and-Run Driver Arrested Because Car Reported Accident (Schneier blog)

• Hundreds of thousands of engine immobilers hackable over the net (The Register)

• Janet pulls open network info for good after DDoSers exploit it (The Register)

• Joomla Patches Zero-Day Exploited in the Wild

• Joomla! being hit with a zero day assault, despite patch (SC Magazine)

• Juniper finds VPN decryption code in source: Patch out now (ZDNet)

• Juniper NetScreen Devices Backdoored Since 2012 (Reddit)

• MacKeeper security eyed after 13M account details found on server (SC Magazine)

• MacKeeper: 13M Customers’ Details Exposed (InfoRiskToday)

• Man arrested in toymaker hack that exposed data for millions of kids (ArsTechnica)

• Microsofts new Windows 10 upgrade options: Upgrade now or Upgrade tonight (Yahoo Security)

• Mozilla Patches Critical Flaws With Release of Firefox 43 (SecurityWeek)

• NetNames confirms easily.co.uk whacked by cyber crims (The Register)

• Outlook letterbomb exploit could auto-open attacks in e-mail (ArsTechnica)

• Over 650 terabytes of data up for grabs due to publicly exposed MongoDB databases

• Patch now! Joomla attacked in remote code execution blitzkrieg (The Register)

• Path traversal flaw reported in Kaspersky Anti-Virus (SC Magazine)

• Project Zero: FireEye Exploitation: Project Zeros Vulnerability of the Beast (Reddit)

• Researchers detail BEC scam tricks (SC Magazine)

• Researchers spot 70K ransomware incidents in week (SC Magazine)

• Ship Data Recorders Vulnerable to Hacker Attacks (SecurityWeek)

• Silent Circle’s encrypted phone app cleared for US government use (ZDNet)

• Suspect Arrested in UK Over VTech Hack

• Time To Call A Hoax? Inconsistencies On ‘Probable’ Bitcoin Creator’s PhD And Supercomputers Revealed (Forbes)

• UK Man Arrested In VTech Hack Investigation (Forbes)

• UK police cuff suspect over VTech toy hack (The Register)

• Unauthorized code in Juniper firewalls decrypts encrypted VPN traffic (ArsTechnica)

• VTech Breach Suspect Arrested (InfoRiskToday)

• Vulnerability Details: Joomla! Remote Code Execution (Reddit)

• Web host Moonfruit defies Armada DDoS crew by (temporarily) defeating itself (The Register)

• When a single e-mail gives hackers full access to your network (ArsTechnica)

• Wireless Routers Plagued by Unpatched Flaws (SecurityWeek)

Infrastructure

• France says ‘non’ to Wi-Fi and Tor restrictions after terror attack (The Register)

Malware

• Daily New Malware Count Drops by 15,000: Kaspersky (SecurityWeek)

WordPress

• WordPress <=v4.4 Username Exists Information Disclosure