Weekly Cyber Security News 31/12/2015

For well over a decade our focus at ionCube has been on PHP security but recently with the release of ionCube24 we have been looking into different kinds of vulnerabilities. This post has a few of the interesting issues we have found this week.

A selection of this week’s more interesting vulnerability disclosures and cyber security news.

General

• 191 Million U.S. Voter Registration Records Exposed? (InfoRiskToday)

• 191 Million US Voter records. (Reddit)

• 191 Million US Voter Registration Records Leaked In Mystery Database (Forbes)

• 191 million US voters’ data exposed online in database mishap (ZDNet)

• Adobe Updates Flash to Fix 19 Flaws (December 28, 2015) (SANS Newsbites)

• Another Scandal Resulting from E-mails Gone Public (Schneier blog)

• AVG Chrome Extension Exposes User Data (SecurityWeek)

• AVG’s Chrome extension exposes personal data of 9 million users (SC Magazine)

• Brian Krebs criticises PayPals security as authentication flaws exposed (The Register)

• Common payment processing protocols found to be full of flaws (ArsTechnica)

• Database of 191 million U.S. voters exposed on Internet: researcher (Yahoo Security)

• Details of 34,000 Steam Users Exposed During DDoS Attack

• Gaming souk Steam spews credit cards, personal info in Xmas Day security meltdown (The Register)

• Google probes AVG Chrome widget after 9m users exposed by bugs (The Register)

• Google slams AVG for exposing Chrome user data with security plugin (ArsTechnica)

• Huge database of 191 million U.S. voters found on the open Internet (Yahoo Security)

• In TalkTalk aftermath, it’s time for companies to pay higher price for breaches (ZDNet)

• Linode Hit by DDoS Attacks (SecurityWeek)

• Linode’s crippling cyber-siege enters day four (The Register)

• Linux isn’t Burger King(tm) any more. (IT Toolbox Blogs)

• Livestream alerts registered users of suspected hack (SC Magazine)

• Microsoft keeps its users’ encryption keys stored on servers (SC Magazine)

• Microsoft may have your encryption key; heres how to take it back (ArsTechnica)

• Misconfigured Database Exposes Details of 191 Million Voters

• Password-less database ‘open-sources’ 191m US voter records on the web (The Register)

• Records of 191 million voters discovered in a public database (SC Magazine)

• Rutgers, once again, victimized by a cyberattack (SC Magazine)

• Steam blows as games website’s security collapse (SC Magazine)

• Steam confirms DoS revealed 34K user details (ZDNet)

• The Most Dangerous People on the Internet in 2015 (WIRED)

• Turkish banks fend off cyberattacks, some transactions hit (Yahoo Security)

• Turkish Internet Servers Reeling Under Huge Cyber Attack (SecurityWeek)

• Upset Microsoft stores hard drive encryption keys in OneDrive? (The Register)

• Vulnerable Joomla Servers See 16,000 Daily Attacks (SecurityWeek)