Weekly Cyber Security News 21/07/2017

A selection of this week’s more interesting vulnerability disclosures and cyber security news. The horrors of IoT strike in some spectacular ways in news this week:

• Zero-Day Exploit Surfaces that May Affect Millions of IoT Users

• Segway miniPRO Flaws Put Riders at Risk of Injury

• A smart fish tank left a casino vulnerable to hackers Selena Larson reports

Not a great week for crypto currency either:

• Hacker Steals $7 Million in Ethereum From CoinDash

• Bitcoin Funds Stolen from Bithumb Exchange Exchange employee’s home PC the initial attack vector.

• Hacker Steals $30 Million in Ethereum from Parity Wallets

But who needs exotic infiltration methods when some from within posts the data on social media:

• UK: NHS medic posts confidential patient data of new mums on Facebook Martyn Halle and Nicola Fifield report

 

In other news…

• 50,000 Machines Remain Vulnerable to EternalBlue Attacks
  
• Apple Patches Vulnerabilities Across All Platforms

• Backdoor Uses FFmpeg Application to Spy on Victims

• CVE-2017-1000020 SYN Flood or FIN Flood attack in ECos 1 and other versions embedded devices results in web Authentication Bypass.

• Dark Web Market AlphaBay Goes Down

• Insider Steals Customer Data From Global Healthcare Group

• Millions of Dow Jones Customer Records Exposed Online

• Most Office 365 Admins Rely on Recycle Bin for Data Backup

• Mozilla Conducts Security Audit of Firefox Accounts

• Online Courses Projected to Drive Credit Card Fraud to $24B by 2018

• Oracle Patches Record-Breaking 308 Vulnerabilities in July Update

• FedEx May Have Permanently Lost Data Encrypted by NotPetya

• TNT Express warns of permanent data loss from WannaCry and NotPetya malware outbreaks Graeme Burton reports

• OmniRAT-Based Android Backdoor Emerges

• Hundreds of Domains Hijacked From French Registrar Gandi

• Malware Targets NAS Devices Via SambaCry Exploit

• New _WPSetup_ Attack Targets Fresh WordPress Installs

• Organizations Slow to Patch Critical Memcached Flaws