Weekly Cyber Security News 28/04/2017

A selection of this week’s more interesting vulnerability disclosures and cyber security news. Oh my, plenty of interesting vulnerabilities, breaches and IoT hell this week. Though I had thought the week couldn’t get any more daft, an insane idea pops up in the pair of articles below. A step too far? Silly me, I think we went past that step a while back…

 

• Amazon Echo Look Is Fun…Until It Gets Hacked And Leaks Your Nudes (Forbes)

• Amazon Echo Look Ushers In A New, Disturbing Era Of Privacy Concerns (Forbes)

My favourite article is a thought provoking one:

 

• Robot crime raises thorny legal issues that need addressing now (TechRepublic)

 

Other items of interest….

• PassFreely Attack Bypasses Oracle Database Authentication (InfoRiskToday)

• A vigilante is putting a huge amount of work into infecting IoT devices (ArsTechnica)

• Alert: If you’re running SquirrelMail, Sendmail… why? And oh yeah, remote code vuln found (The Register)

• Android Geo-Location Spyware Installed By Up To 5 Million Users

• AV provider Webroot melts down as update nukes hundreds of legit files (ArsTechnica)

• BrickerBot, the permanent denial-of-service botnet, is back with a vengeance (ArsTechnica)

• Car hacking’s dynamic duo offers to save others $1m in research (The Register)

• Expedia IT bod gets all-expenses-paid trip to prison after hacking execs’ emails for profit (The Register)

• gt;10,000 Windows computers may be infected by advanced NSA backdoor (ArsTechnica)

• HipChat Prompts Password Resets Following Server Hack

• HipChat SlipChat lets hackers RipChat (The Register)

• Homebrew crypto SNAFU on electrical grid sees GE rush patches (The Register)

• Hyundai app security blunder allowed crooks to ‘steal victims’ cars’ (The Register)

• Hyundai Blue Link Vulnerability Allows Remote Start of Cars

• INTERPOL Operation Sweeps Up Thousands of Cybercrime Servers Used for Ransomware, DDoS, Spam

• Longest sentence ever handed out to Russian hacker Roman Seleznev: 27 Yearsa>

• Mastercard Launches Fingerprint-Based Biometric Card (SecurityWeek)

• Peace in our time! Symantec says it can end Google cert spat (The Register)

• Peer pressure, not money, lures youngsters into cybercrime report (The Register)

• Picture this: Senate staffers ID cards have photo of smart chip, no security (ArsTechnica)
  

• Russian Citizen Gets Record 27-Year Sentence for Hacking, Fraud Scheme

• Russian man gets longest-ever US hacking sentence, 27 years in prison (ArsTechnica)

• UK Government Complains After Twitter Cuts Data Access

• UK: Hacker �caused global chaos by fuelling 1.7 million cyber attacks�

• We’re ‘heartbroken’ we got caught selling your email records to Uber, says Unroll.me boss (The Register)

• Webroot antivirus goes bananas, starts trashing Windows system files (The Register)

• Young cyber criminals motivated by peer respect and accomplishment The National Crime Agency has today published research

• Samsung Smart TV pwnable over Wi-Fi Direct, pentester says (The Register)

• The godfather of ransomware returns: Locky is back and sneakier than ever Danny Palmer reports

• Webroot Tags Windows Files, Facebook as Malicious

• WikiLeaks Details Samsung Smart TV Hacking Tool (SecurityWeek)
  

• Expert Discloses Several Flaws Found in Sugar

• Hyundai connected car app flaws created theft risk, personal info leaks (The Register)

• Secure messaging app Confide sued over alleged security flaws (ArsTechnic