Weekly Cyber Security News 09/06/2017

A selection of this week’s more interesting vulnerability disclosures and cyber security news. I’m sure we all know about the securing out private databases so they aren’t open to the world by now. There have been so so many exposures of huge troves and their sudden demise at the hands of hackers, though it seems that was just the a fraction of the most recent discovery of complete filesystems of exposed data:

• Unprotected Hadoop Servers Expose 5 PB of Data: Shodan

Other news;

• Data breach affects Irish users of global hotel website Pádraig Hoare reports

• OneLogin Shares More Details on Breach, Customer Impact

• Customer data stolen as S.F. cybersecurity firm hacked, Stanford medical school reportedly a client Ethan Baron reports

• Philippine Bank Chaos as Money Goes Missing From Accounts

• Router LEDs Allow Data Theft From Air-Gapped Computers

• Symantec Conducts Company-wide CyberWar Games

• ‘Tallinn Manual 2.0’ the Rulebook for Cyberwar

• Jaff Ransomware Operation Tied to Cybercrime Store

• Linux Malware Targets Raspberry Pi for Cryptocurrency Mining

• New Method Used to Deliver Malware via PowerPoint Files

• Slack, Telegram, Other Chat Apps Being Used as Malware Control Channels

• Turla Malware Obtains C&C Address From Instagram Comments

• Stanford University Site Hosted Phishing Pages for Months

• _Platinum_ Cyberspies Abuse Intel AMT to Evade Detection

• Critical Flaw Exposes Many WiMAX Routers to Attacks

• RIG Exploit Kit Takedown Sheds Light on Domain Shadowing