Weekly Cyber Security News 07/04/2017

A selection of this week’s more interesting vulnerbility disclosures and cyber security news. The week started off with an amazing revelation in the world of IoT, with further proof that connected things are still not completely safe even if disconnected from outside world:

• Smart TV hack embeds attack code into broadcast signal no access required (ArsTechnica)

OK, so perhaps if your TV is breached you might loose a bit of cash, though it could be worse. Much worse…

• Brazilians whacked: Crooks hijack bank’s DNS to fleece victims (The Register)

• Cybercriminals Seized Control of Brazilian Bank for 5 Hours

The rest of the news:

• Data breach as details about MPs staff published in error BBC reports

• Data leak exposes details of 450,000 lottery subscribers DutchNews.nl reports

• Expedia Sued by Affiliate for Allegedly Stealing Data and Handing It to a Competitor Dennis Schaal reports

• Scottrade Bank data breach exposes 20,000 customer records Steve Ragan reports

• Hackers Are Emptying ATMs With a Single Drilled Hole and $15 Worth of Gear Andy Greenberg reports

• iOS 10.3.1 includes bug fixes and improves the security of your iPhone or iPad (ArsTechnica)

• Job Seekers’ Data Stolen in Hack of McDonald’s Canada (SecurityWeek)

• McAfee is McAfee again, promises security with kum ba yah (The Register)

• McAfee’s Back as an Independent Security Firm Security firm is no longer part of Intel Corp.

• Microsoft Friday false positive: Bluber-A ballsup makes sysadmins blub (The Register)

• More than Half of Security Pros Rarely Change their Social Network Passwords

• Online Trust Alliance merges with Internet Society (The Register)

• Patch Qubes to prevent pwnage via Xen bug (The Register)

• Scottrade admits server snafu blabbed 20,000 customer files to world (The Register)

• Search the world’s largest cybercrime library (TechRepublic) 

• Social Media Passwords Provide Easy Route into Corporate Networks

• That sound you hear is Splunk leaking data (The Register)

• Yee-hacked! Fired Texan sysadmin goes rogue, trashes boot business (The Register)

• Apple fans, Android world scramble to patch Broadcom’s nasty drive-by Wi-Fi security hole (The Register)

• Drive-by Wi-Fi i-Thing attack, oh my! (The Register)

• Fake Flash Player Ads in Skype Lead to Malware

• Point-and-pwn tool for posers dumbs down ransomware spreading (The Register)

• A Single Song Can Hack Your iPhone- Unless You Update To iOS 10.3 (Forbes)

• Found: Quite possibly the most sophisticated Android espionage app ever (ArsTechnica)

• Google Patches 31 Critical Flaws in Android

• Splunk Patches Information Theft and XSS Flaws

• Wi-Fi Flaws Expose iPhone, Nexus Phones to Attacks