A selection of this week’s more interesting vulnerability disclosures and cyber security news.
Of note this week has been the evolution of ransomware, such deleting files every day the ransom is unpaid or stealing other information. As usual distraction tactics do pay off, as while someone is focused on reading something or in other ways reacting, the machine can be doing a whole lot of things before that victim spots it. Be wary folks!
- CryptXXX Ransomware Steals Bitcoin, Private Data (SecurityWeek)
- JBoss Servers: Ransomware Campaign Alert (InfoRiskToday)
- Hacker Promises To Kill Apple Mac Ransomware Before It Becomes A Nightmare (Forbes)
- 20 Foreigners Linked to $81 Million Bangladesh Bank Heist: Police (SecurityWeek)
- Academic network Janet clobbered with DDoS attacks again (The Register)
- Bangladesh says 20 foreigners involved in theft from NY Fed (Yahoo Security)
- Belgian boffins breed ‘digital canaries’ to test your random numbers (The Register)
- Flashback: Declassified 1970 DOD cybersecurity document still relevant (ArsTechnica)
- “Saw”-inspired horror slowly deletes your PC’s files as you scramble to pay the ransom (The Register)
- Microsoft Patches quot;Mousejackquot; Vulnerability (SecurityWeek)
- Oracle Critical Patch Update for April 2016 Fixes 136 Vulnerabilities (SecurityWeek)
- US-CERT advice says Kill Quicktime for Windows, quickly (The Register)
- Western Digital User Data Exposed by DNS Issue (SecurityWeek)
- C99 Webshell Increasingly Used in WordPress Attacks
Weekly Cyber Security News 22/04/2016