Weekly Cyber Security News 24/11/207

A selection of this week’s more interesting vulnerability disclosures and cyber security news. Well, its that time again folks, shopping spree for both the consumer and fraudster. Let’s not get caught up in the wrong net with a few tips and interesting perspectives:

• 6 Real Black Friday Phishing Lures As the mega-shopping day approaches, here’s a look at six examples of phishing attacks and ways to avoid taking the bait.

Is a little bit of paranoia a good thing?

• Why you don’t need an RFID-blocking wallet

Apparently not…

• Has Everyone Really Been Hacked?

 

For those that are having a bad time on the other hand…

• Should Uber Users be Worried About Data Hack?

• Uber Concealed Cyberattack That Exposed 57 Million People�s Data Eric Newcomer reports

• Uber Hacked: Information of 57 Million Users Accessed in Covered-Up Breach

• Businesses Can’t Tell Good Bots from Bad Bots: Report Bots make up more than 75% of total traffic for some businesses, but one in three can’t distinguish legitimate bots from malicious ones.

• Ca: VerticalScope confirms user information stolen from six hacked websites The Canadian Press reports

• Cryptocurrency Startup Claims Hackers Stole $30.95 Million Catalin Cimpanu reports

• Dark Web Shops Are Leaking IPs Left and Right

• DDoS Attack Attempts Doubled in 6 Months

• GitHub Warns Developers When Using Vulnerable Libraries

• Pentagon contractor spied on social media, left data unsecured in cloud

• Pentagon Exposed Some Of Its Data On Amazon Server CNN reports

• ProtonMail Launches Encrypted Contacts Manager

• Researcher Finds Hole in Windows ASLR Security Defense A security expert found a way to work around Microsoft’s Address Space Randomization Layer, which protects the OS from memory-based attacks.

• Secureworks Releases Open Source IDS Tools

• StartCom CA to Shut Down After Ban by Browser Vendors

• Uber in Legal Crosshairs Over Hack Cover-up

• UK: Cash Converters hacked; customer data held for ransom Tim Collins reports

• Vuln: Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability

• More Industrial Products at Risk of KRACK Attacks

• Samsung Pay Leaks Mobile Device Information

• macOS Malware Spread Via Fake Symantec Blog

• Intel Chip Flaws Expose Millions of Devices to Attacks

• Intel Firmware Flaws Found Another big firmware security issue affecting Intel processors, requires OEM updates.