Weekly Cyber Security News 08/04/2016

A selection of this week’s more interesting vulnerability disclosures and cyber security news, and boy do we have a few big ones this week. To start with three major data leaks from a Panamanian law firm that is sending many countries in a spin and what appears as two voting databases from Turkey and the Philippines being exposed.

In the mundane world of general vulnerabilities Adobe has released an urgent out of band path for a 0-day exploit in Flash. Patch now, or even better, disable Flash or remove.

 

• Panama Papers hack: Unpatched WordPress, Drupal bugs to blame? (The Register)

• ‘Devastating’ bug pops secure doors at airports, hospitals (The Register)

• ‘Panama papers’ came from e-mail server hack at Mossack Fonseca (The Register)

• ‘Panama Papers’ Spill Insider Secrets (InfoRiskToday)

• 50 million PII Records of Turkish Citizens Posted Online (SecurityWeek)

• Adobe Issues Emergency Patch For Flash In Response To Zero-Day Exploit (Forbes)

• Adobe issues emergency update to Flash after ransomware attacks (Yahoo Security)

• Adobe Patches Flash Zero-Day Exploited by Magnitude EK (SecurityWeek)

• Adobe prepping out-of-band patch for Flash (The Register)

• Apple goes server-side to fix Siri lock screen bypass security flaw (ZDNet)

• Barbie-brained Mattel exec phell for phishing, sent $3m to China (The Register)

• Cisco warns of ‘critical’ risks from web bugs and insecure SSH keys (The Register)

• Data of nearly 50 million Turks allegedly leaked online (Yahoo Security)

• Did hacktivists really just expose half of Turkey’s entire population to ID theft? (The Register)

• From Encrypted Drives To Amazon’s Cloud- The Amazing Flight Of The Panama Papers (Forbes)

• German police arrest international cyber ring suspect (Yahoo Security)

• Hack Brief: Turkey Breach Spills Info on More Than Half Its Citizens (WIRED)

• Hackers Can Unlock Doors via Flaw in HID Controllers (SecurityWeek)

• Hackers leak database allegedly containing details on nearly 50 million Turkish citizens (Yahoo Security)

• How Reporters Pulled Off the Panama Papers, the Biggest Leak in Whistleblower History (WIRED)

• iPhone 6S, 6S Plus vulnerable to new lock screen bypass flaw (ZDNet)

• Megabreach: 55 MILLION voters’ details leaked in Philippines (The Register)

• NoScript and other popular Firefox add-ons open millions to new attack (ArsTechnica)

• Panama lawyers at center of offshore scandal make odd couple (Yahoo Security)

• Panama Papers: Massive Data Leak Exposes Corrupt World Leaders and Tax Havens (SecurityWeek)

• Popular Firefox Add-ons Expose Users to New Attack

• Spies rejoice! Gmail, Facebook Messenger BREACHed once again (The Register)

• Surprise! Magic Kinder app could let hackers send vids to your kids (The Register)

• Trail in cyber heist suggests hackers were Chinese: senator (Yahoo Security)

• Turkey to Probe Massive ‘Personal Data Leak’

• Ubuntu plugs code exec, DoS Linux kernel holes (The Register)

• WhatsApp is Now End-to-End Encrypted (Schneier blog)

• WhatsApp strengthens encryption in wake of iPhone case (Yahoo Security)

• WordPress, Joomla domains under attack through jQuery JavaScript library (ZDNet)

• Top Firefox extensions can hide silent malware using easy pre-fab tool (The Register)

• Google Patches More Critical Vulnerabilities in Android Mediaserver (SecurityWeek)

• Google still plagued by nasty Mediaserver bug with new Android security patches (ZDNet)