Weekly Cyber Security News 07/10/2016

A selection of this week’s more interesting vulnerability disclosures and cyber security news.

Not much excitement this week for a nice change, though the release of the code that hit Krebs’s site is a cause for concern as the wonderful Internet of Things could become the zombie apocalypse nightmare (of an unexpected kind) we have been warned about:

 

• IoT DDoS Attack Code Released Mirai malware could signal the beginning of new trend in using Internet of Things devices as bots for DDoS attacks.

• Making a DVR join a DDoS botnet is a piece of cakeand thats just sad (ArsTechnica)

 

The other news….

 

• TalkTalk Slammed with Record Fine Over Breach (InfoRiskToday)

• Encryptor RaaS Shuts Down Without Releasing Master Key (SecurityWeek)

• Facebook rolls out encryption for Messenger, but it’s not as private as you think (TechRepublic) 

• Official: Hackers who hit French TV station are still active (Yahoo Security)

• TalkTalk gets record £400,000 fine for failing to prevent October 2015 attack From the Information Commissioner’s Office

• Card Data Stolen From eCommerce Sites Using Web Malware

• London cops charge ATM malware hacker (The Register)

• Smash and grab PoS pwners ready with pre-Xmas malware update (The Register)

• Spotify is installing malware on some users computers (Yahoo Security)

• WildFire Ransomware Revived as _Hades Locker

• OpenJPEG Flaw Allows Code Execution via Malicious Image Files