Weekly Cyber Security News 06/01/2017

A selection of this week’s more interesting vulnerability disclosures and cyber security news. The new year begins with warnings that ransomware will be the ‘big thing’ this year. It certainly looks like the direction we are going if the various articles highlighting new variants are anything to go by, though a always, vigilance against any attempts to entice you to click on links you shouldn’t will fend off most.

• Hardware Bitcoin Wallet KeepKey Informs Users of Breach

• KeepKey notifies customers of security incident, offers 30 BTC reward for tips leading to attacker�s arrest

• Misconfigured MongoDB database exposes sleep disorder program patients� information

• Top Secret cleared SOCOM staff in 11Gb Govt contractor breach (The Register)

• 0-day: QNAP NAS Devices suffer of heap overflow

• 2016 goes out with a hack as thedarkoverlord dumps more data

• Boffins bag side-channel bugs before they bite (The Register)

• Changing other people�s flight bookings is too easy Lucian Constantin reports

• D-Link sucks so bad at Internet of Suckage security US watchdog (The Register)

• Google Pixel Also Has A Hardware Problem (Forbes)

• Hacker claims FBI CMS zero day hack, dumps 155 purported logins (The Register)

• Hackers have a new way to steal your banking login using WhatsApp (Yahoo Security)

• Hate ‘contact us’ forms? This PHPmailer zero day will drop shell in sender (The Register)

• Kaspersky fixing serious certificate slip (The Register)

• MongoDB Databases Actively Hijacked for Extortion (SecurityWeek)

• Ransomware Has Evolved, And Its Name Is Doxware Chris Ensey writes

• Travel Booking Systems Expose User Data: Researchers (SecurityWeek)

• Travel booking systems wide open to abuse report (The Register)

• U.S. files suit against D-Link, alleging devices vulnerable to hackers (Yahoo Security)

• UK: Car rental firm data thieves sentenced after ICO investigation

• Web exposed MongoDB installs wiped by bitcoin ransoming script scum (The Register)

• White Hacker Launches Public Support Site With ‘Security Without Borders’ Claudio Guarnieri aims to connect white hackers with potential victims.

• Newly Discovered Android Trojan Hijacks Routers Switcher takes advantage of Android users to infect WiFi routers in ‘dangerous new trend.’

• ‘Ghost Hosts’ Bypass URL Filtering Malware authors have found a way to evade URL-blocking systems by swapping bad domain names with unknown ones.

• FireCrypt Ransomware Packs DDoS Code (SecurityWeek)

• Insane blackhats behind world’s most expensive ransomware ‘forget’ to backup crypto keys (The Register)

• Instances of new and destructive ransomware grow rapidly

• KillDisk Malware Targets Linux Machines

• Pseudo-Darkleech Remains Prominent Distributer of Ransomware

• This Crazy Ransomware Restores Your Files If You Read About Ransomware (Forbes)

• This Crazy Ransomware Restores Your Files If You Read About Ransomware Lee Mathews writes

• UK: Derbyshire computer hacker who broke into a company�s emails is now helping it get secure Kit Sandeman reports

• Box.com plugs account data leakage flaw Tom Spring writes

• Decrypters Released for OpenToYou, DeriaLock, and PHP Ransomware (SecurityWeek)

• Google Researcher Finds Certificate Flaws in Kaspersky Products (SecurityWeek)

• Non-Web App Vulnerabilities Outpace Web App Flaws

• CVE-2016-7169 Directory traversal vulnerability in the File_Upload_Upgrader class in wp-admin/includes/class-file-upload-upgrader.php in the upgrade package uploader in WordPress before 4.6.1 allows remote authenticated users to access arbitrary files via a crafted urlholder parameter.