Weekly Cyber Security News 13/04/2017

A selection of this week’s more interesting vulnerability disclosures and cyber security news. A weird week (well, when isn’t it really?), some astounding breaches and (yet more) IoT feats of craziness. Take this one for example:

• Half-baked security: Hackers can hijack your smart Aga oven ‘with a text message’ (The Register)

Stay safe folks!

• British Payday Loan Firm Wonga Suffers Data Breach (SecurityWeek)

• Leak of diabetic patients data highlights risks of giving info to telemarketers Personal and health information of 918,000 vulnerable seniors was exposed on the Internet for months by a software developer working on a project.

• Payday lender Wonga admits to data breach (The Register)

• TCP/IP headers leak info about what you’re watching on Netflix (The Register)

• Wonga warns 270,000 borrowers of possible data theft Mark Vandevelde reports

• 5 tips for securing your Docker containers (TechRepublic)

• Critical Office Zero-Day Exploited in Attacks (SecurityWeek)

• Foscam All networked devices, multiple Design Errors. SSL bypass.

• Hackers set off Dallas 156 emergency sirens over a dozen times (ArsTechnica)

• Hackers Targeting Amazon Third-Party Sellers With Password Reuse Attacks (SecurityWeek) 

• Internet Society tells G20 nations: The web must be fully encrypted (The Register)

• Microsoft Office Zero-Day Patched After Months of Attacks

• Microsoft Word 0-day was actively exploited by strange bedfellows (ArsTechnica)

• Ofsted downplays site security concerns (The Register)

• Password History: Insights Shared by a Reader, (Mon, Apr 10th)

• Prisoners built two PCs from parts, hid them in ceiling, connected to the State’s network and did cybershenanigans (The Register)

• Research shows smartphone fingerprint scanners aren’t as secure as we think they are (TechRepublic)

• SWIFT on security: Fresh anti-bank-fraud defenses now live (The Register)

• UK boffins steal smartmobe PINs with motion sensors (The Register)

• What kinds of people fall prey to identity theft, phishing, and hacks? It’s not who you think (TechRepublic)

• Do you want to play a game? Ransomware asks for high score instead of money (ArsTechnica)

• New Malware Deliberately Destroys Unsecured IoT Devices Motive behind BrickerBot puzzles experts who think it maybe the work of a vigilante.

• Sathurbot Botnet Targets WordPress Accounts

• ‘Critical’ Microsoft Office hack uses fake Word documents to install malware (TechRepublic)

• Cowardly Microsoft buries critical Hyper-V, WordPad, Office, Outlook, etc security patches in normal fixes (The Register)

• Critical Word 0-day is only 1 of 3 Microsoft bugs under attack (ArsTechnica)

• Adobe Patches Flash, Reader Flaws Exploited at Pwn2Own

• Microsoft Patches Office, IE Flaws Exploited in Attacks (SecurityWeek)