Weekly Cyber Security News 08/11/2019

A selection of this week’s more interesting vulnerability disclosures and cyber security news. A report on the absolutely tragic death resulting from failed safety systems. All I can say is there needs to be oversight on what decisions designers put on how automatous safety systems work in these environments:

• How terrible software design decisions led to Uber’s deadly 2018 crash

A new and surprising approach to interfering with smart voice assistants:

• Alexa, Siri, Google Smart Speakers Hacked Via Laser Beam Smart voice assistants can be hijacked by attackers using lasers to send them remote, inaudible commands.

To lighten the mood a little, and for those who are looking for a bit of originality when the next breach comes along, here is some inspiration:

• New Website Mocks Excuses Given by Breached Companies

 

Other news this week:

• Hackers can steal the contents of Horde webmail inboxes with one click

• Ransomware hits Spanish companies sparking WannaCry panic

• California DMV finds data breach exposed Social Security information for around 3,200 people

• Canada Credit Union Data Breach Bigger Than First Thought: Desjardins

• This is the impact of a data breach on enterprise share prices

• #EdgeLondon2019: Focus on System and User Hygiene, Not Zero-Days

• Between 200,000 and 240,000 Magento online stores will reach EOL next year

• Broadcom Completes Acquisition of Symantec Enterprise Unit for $10.7 Billion

• California DMV Exposes Driver’s Data for 4 Years

• Chinese police arrest operators of 200,000-strong DDoS botnet

• Details of an Airbnb Fraud

• DNS-over-HTTPS will eventually roll out in all major browsers, despite ISP opposition

• Facebook Admits Another Developer Privacy Snafu

• Google’s OpenTitan: A new open source silicon root of trust project debuts

• Law enforcement can plunder DNA profile database, judge rules

• Leeds IT bloke pleads guilty to hacking Jet2 CEO”s email account

• Media Giant Nikkei Loses $29 Million to BEC Scammers

• Morrisons tells top court it”s not liable for staffer who nicked payroll data of 100,000 employees

• Specially Crafted ZIP Files Used to Bypass Secure Email Gateways

• The First BlueKeep Mass Hacking Is Finally Here – but Don’t Panic

• This may shock you but Adobe is shipping insecure software. No, it’s not Flash this time. Nope, not Acrobat, either

• Three UK does it again: Random folk on network website are still seeing other’s account data

• Trend Micro reveals rogue employee sold data of up to 120,000 customers

• We’re almost into the third decade of the 21st century and we’re still grading security bugs out of 10 like kids. Why?

• Microsoft crams Office 365 docs into Edge-style sandboxes to thwart malware infections

• Stubborn Malware Targets QNAP NAS Hardware

• Subpoena Phishing Emails Serve Nasty Predator Thief Infection

• BlueKeep Attacks Have Arrived, Are Initially Underwhelming

• Huawei calls hackers to Munich for secret bug bounty meeting