Weekly Cyber Security News 10/02/2017

Maybe its this continued cold and dull weather, or the constant stream of ‘facepalm’ security fails, but I’m in a funny mood. Well, found two interesting articles this week that, well, OK one is quite entertaining and the other scary as hell. You choose 🙂 In the meantime I’m off to wake my flying monkeys and send them out WarFlying. Or should I just find that website I know I’ve seen that already lists hotspots? Anyway, have fun!

• Honeypots: Free psy-ops weapons that can protect your network before defences fail (The Register)

• Fun, games, and security: WarCollars DopeScope and Booby Trap (ArsTechnica)

Here are the duff ones:

• Dutch Voter Guide Website Leak Highlights Privacy Concerns StemWijzer fixes vulnerabilities after researcher discovers website is secretly maintaining voter-preference record.

• Laptop-light GoCardless says customer’s personal data may have been lifted John Leyden reports

• Sports Direct hacked last year, but still hasn’t told its staff of data breach? Alexander J. Martin reports

• Used government computers bought at auction filled with personal information

• As Valve eradicates serious bug in Steam, heres what you need to know (ArsTechnica)

• Clusters f**ked: Insecure Hadoop file systems wiped by miscreants (The Register)

• F5’s Big-IP leaks little chunks of memory, even SSL session IDs (The Register)

• Former NSA contractor may have stolen 75% of TAOs elite hacking tools (ArsTechnica)

• Got an OpenBSD Web server? Better patch it (The Register)

• Hacker Forces 150,000 Printers To Print A Warning To Their Owners (Forbes)

• Harvest Season: Why Cyberthieves Want Your Compute Power

• Laptop-light GoCardless says customers’ personal data may have been lifted (The Register)

• Leave Spicer alone! (Or, why DNS registration is horrible) (ArsTechnica)

• Mag publisher Future stored your FileSilo passwords in plaintext. Then hackers hit (The Register)

• New SMB bug: How to crash Windows system with a ‘link of death’ (The Register)

• PIP Printing and Marketing Services exposed 400GB of data

• Sophos update borks systems at London NHS trust (The Register)

• There will soon be more IoT devices in the world than people, security risks abound (TechRepublic)

• Vizio coughs up $2.2m after its smart TVs spied on millions of families (The Register)

• Windows SMB 0-Day Exposes Systems to Attacks (SecurityWeek)

• Windows SMB 0-Day Risk Downplayed

• Brooklyn bloke ‘fesses up: Our malware stole $1.2m from victims’ online bank accounts (The Register)

• Malware hit Hitachi Payments Services, 3.2 million cards affected Press Trust of India reports

• Revealed: Malware that skulks in memory, invisibly collecting sysadmins’ passwords (The Register)

• Russia Busts Nine More Lurk Malware Suspects (InfoRiskToday)

• SQL Slammer Worm Crawls Back

• Two new strains of Mac malware unearthed by security researchers (Yahoo Security)

• PayPal Phishing Attack Immediately Verifies Credentials (SecurityWeek)

• Many WordPress Sites Hacked via Recently Patched Flaw (SecurityWeek)

• Newly discovered flaw undermines HTTPS connections for almost 1,000 sites (ArsTechnica)

• TP-Link C2 and C20i vulnerable to command injection (authenticated root RCE), DoS, improper firewall rules

• Windows SMB Zero-Day Exploit On The Loose