Weekly Cyber Security News 17/11/2017

A selection of this week’s more interesting vulnerability disclosures and cyber security news.  So many juicy bits of news this week, well, in the usual sad way of course. An astounding story has come to light which while scant on actual details of the method (not surprising really), is still unnerving:

• Homeland Security team remotely hacked a Boeing 757

If you’re planning on diving into the shopping madness of the next month or so and value your data, you might want to keep an eye on IoT issues that have surfaced recently – its not just the retailers who will be rubbing their hands!

• Amazon Echo, Google Home Vulnerable to BlueBorne Attacks

• CVE-2017-16867 Amazon Key through 2017-11-16 mishandles Cloud Cam 802.11 deauthentication frames during the delivery process

Otherwise you could end up becoming another zombie in this interesting but alarming new botnet…

• ‘Reaper’: The Professional Bot Herder’s Thingbot

 

Other fun stuff…

• A rocket scientist hacks the cybersecurity labor crisis

• CVE-2017-16560 SanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder

• Fasten data leak: Nearly 1 million user’s sensitive data mistakenly exposed by US ride-hailing firm India Ashok reports

• FDA approves first ‘digital’ pill that tracks when it was swallowed

• Forget APTs: Let’s Talk about Advanced Persistent Infrastructure

• Hackers Hacking Hackers: IoT Attack Script Embedded With Backdoor

• iPhone X’s Face ID Bypassed by a Mask

• Kaspersky Shares More Details on NSA Incident

• Microsoft Word Vuln Went Unnoticed for 17 Years: Report

• New IcedID Banking Trojan Emerges

• Quantum Dawn War Games Test Cyber Resiliency in Finance Sector

• Re: An anti theft system allowing attackers to kill remotely the engine in electric scooters made by by INOKIM/MyWay, affected model model Quick 3 <p>Posted by pop shark on Nov 10</p>Hi, My last mail had a mistake, please don&apos;t publish it.<br> I&apos;m adding a corrected version.<br> Thank you<br>

• Terdot Banking Trojan Spies on Email, Social Media

• Texas National Guard deployed cellphone spying devices on surveillance planes

• New Locky Ransomware Takes Another Turn

• Adobe Patches 80 Flaws Across Nine Products

• Antivirus Quarantine Flaws Allow Privilege Escalation

• Huddle’s ‘highly secure’ work tool exposed KPMG and BBC files Chris Foxx reports