Weekly Cyber Security News 08/09/17

A selection of this week’s more interesting vulnerability disclosures and cyber security news. As many countries return to work after summer holidays, so too have the hackers. A few audacious bits of news are worthy of note.

First a reminder to ensure voice activation on modern devices are switched off when in public spaces….

• Hackers Can Use Ultrasounds to Take Control of Alexa, Siri, Cortana, Others Catalin Cimpanu reports
  

Where does a credit check company go to get credit check protection?

• 143 Million Affected in Hack of U.S. Credit Agency
  

Ah, leaving the door open can be a such an easy invite for people to steal your stuff…

• MongoDB ransacking starts again: Hackers ransom 26,000 unsecured instances Liam Tung reports

 

 

The other stuff:

• Taringa hacked: 28 million user’s credentials compromised LeakBase Mohit Kumar reports

• BroadSoft Inc. left millions of partner’s customer data records exposed Bob Diachenko of Kromtech Security reports

• Fake Chrome Font Update Attack Distributes Backdoor

• German Hackers Say Vote Software a Security ‘Write-off’

• Hijacking .uk domains with eNom <p>Posted by Joseph Harris on Sep 04

• Mozilla to Completely Ban WoSign, StartCom Certificates in Firefox 58

• Pwning the Dlink 850L routers and abusing the MyDlink Cloud protocol

• Thousands of Security Firm Job Applications Citing Top Secret US Government Work Exposed on Misconfigured Amazon Server Dell Cameron reports

• Sandbox-Aware Malware Foreshadows Potential Attacks

• Ca: MacEwan University defrauded of nearly $12M in phishing scam Caley Ramsay reports

• Exploit Available for Critical Apache Struts Vulnerability

• Serious Vulnerabilities Disclosed in Modems Used by AT&T’s U-verse Service