Weekly Cyber Security News 21/06/2019

A selection of this week’s more interesting vulnerability disclosures and cyber security news. For no other reason that I have an annual battle with squirrels during harvesting from my hazel nut trees, that I go with this line: Beware the squirrel!

• Two Weekend Outages, Neither a Cyberattack (InfoRiskToday)

Now I know that Cloudflare have a funky way sort out their entropy, I want access to that live video stream to help me calm down from such battles:

• Cloudflare launches decentralized service for generating random numbers (ZDNet)

Back in the real world… Someone else needs access to that video feed:

• Consumers Urged to Junk Insecure IoT Devices A security researcher who disclosed flaws impacting 2 million IoT devices in April and has yet to see a patch or even hear back from the manufacturers contacted is sounding off on the dire state of IoT security.

 

The other news:

• Data breach forces medical debt collector AMCA to file for bankruptcy protection

• Equifax breach impacted the online ID verification process at many US govt agencies

• Cryptominer Uses Cron To Reinfect Linux Host After Removal

• Facebook’s Currency Libra Faces Financial, Privacy Pushback

• Freaking out about fiendish IoT exploits – Maybe stop disable telnet and change that default password first (The Register)

• Hackers behind dangerous oil and gas intrusions are probing US power grids

• Hackers Favor Weekdays for Attacks, Share Resources Often Traffic analysis sheds light on weekday habits of attackers such as the most likely day for attacks and how malicious infrastructure is shared.

• Instagram Shows Kid’s Contact Details in Plain Sight (InfoRiskToday)

• Instagram tests new ways to recover hacked accounts

• Microsoft warns Azure customers of Exim worm

• NASA’s JPL may be able to reprogram a probe at the arse end of the solar system, but its security practices are a bit crap (The Register)

• New vulnerabilities may let hackers remotely SACK Linux and FreeBSD systems

• Parliament IT bod’s fail sees server’s naked OS exposed to world+dog (The Register)

• Samsung reminds rabble to scan smart TVs for viruses then tries to make them forget (The Register)

• Security firm claims it can unlock any iPhone (ZDNet)

• SIM swap horror story: I’ve lost decades of data and Google won”t lift a finger (ZDNet)

• Spin the wheel and find today’s leaky cloud DB… *clack clack… clack* A huge trove of medical malpractice complaints

• Thanks to Equifax breach, 4 US agencies don’t properly verify your data, GAO finds

• Researcher Scrapes and Posts 7 Million Venmo Transactions

• Florida city pays $600,000 to ransomware gang to have its data back (ZDNet)

• Hackers Behind ‘Triton’ Malware Target Electric Utilities in US, APAC

• New Plurox malware is a backdoor, cryptominer, and worm, all packed into one (ZDNet)

• Push Technology Used in Mobile Attacks