Weekly Cyber Security News 04/12/2015

For well over a decade our focus at ionCube has been on PHP security but recently with the release of ionCube24 we have been looking into different kinds of vulnerabilities. This post has a few of the interesting issues we have found this week.

A selection of this week’s more interesting vulnerability disclosures and cyber security news.

General

• ‘Hacker Buba’ holds UAE bank to ransom (SC Magazine)

• 5 Million Parents, Kids Hit by VTech Data Breach

• A Short List of Secure PHP Cryptography Libraries (Reddit)

• Adobe renames Flash Professional to Animate, pivots to HTML5 (ZDNet)

• Aramada Collective demands ransom from Greek banks (SC Magazine)

• Aramada Collective demands ransom to stop DDoS attacks on Greek banks (SC Magazine)

• Armada Collective makes ransom demands on Greek banks: Report (ZDNet)

• Australian Bureau of Meteorology tight-lipped on alleged Chinese hack (ZDNet)

• Brazil cans e-voting due to recession (ZDNet)

• Brit hardware hacker turns Raspberry Pi Zeros into selfie slayers (The Register)

• Buy Kids iPhones And Kill Connected Toys- Hacker Advice To Parents After Awful VTech Breach (Forbes)

• Can’t get a break: Pwned Linux ransomware pwned again, infects 3000 (The Register)

• China behind ‘massive’ cyber-attack on Australian government: ABC (Yahoo Security)

• China Blamed as Australia’s Weather Bureau Hacked

• Data breach at HK toy maker VTech highlights broader problems (Yahoo Security)

• Domination: Crims steal admin logins, infect sites, drop Cryptowall 4 (The Register)

• Former BlackBerry Execs Create A Chip That Can See Through Walls Using Wireless Signals (Forbes)

• Free HTTPS certs for all Let’s Encrypt project opens doors to public (The Register)

• Google Patches Over Dozen Serious Flaws in Chrome (SecurityWeek)

• Greek Banks Face DDoS Shakedown (InfoRiskToday)

• Hack Brief: Hacker Strikes Kids Gadget Maker VTech to Steal 5 Million Accounts (WIRED)

• Hacked toymaker leaked gigabytes worth of kids headshots and chat logs (ArsTechnica)

• Hey Readers Digest: Your site has been attacking visitors for days (ArsTechnica)

• Info on 5 million VTech customers and kids exposed in breach (Yahoo Security)

• Is Kazakhstan about to man-in-the-middle diddle all of its internet traffic with dodgy root certs? (The Register)

• Kaspersky: 1 in 7 people use one password (ZDNet)

• Kazakhstan will force its citizens to install internet backdoors (ZDNet)

• Millions of families hit in toymaker VTech hack including 200,000+ kids (The Register)

• More Trouble For VTech- Kids Tablet Is ‘Easy’ To Hack (Forbes)

• Node.js sysadmins, get ready to patch (The Register)

• Node.js to Patch Serious DoS Flaw

• Over 6 Million Kids Profiles Accessed in VTech Hack

• Predictable SSH Host Key Flaw Affects Raspberry Pi Devices (SecurityWeek)

• Report fingers China for assault on Australian weather supercomputer (The Register)

• So-called ‘Patent Troll’ sues dozens of major firms over encryption use (SC Magazine)

• Sued for using HTTPS: Big brands told to cough up in crypto patent fight (The Register)

• Toymaker VTech confirms cyberattack, appears tone deaf (ZDNet)

• Toymaker VTech Hacked: 200,000 Kids’ Data Exposed (InfoRiskToday)

• Toymaker VTech says data on 6.4 million kids taken in unprecedented hack (Yahoo Security)

• Using HTTPS on your website? We’ll see you in court (ZDNet)

• Videofied Alarm System Flaws Allow Hackers to Intercept Data

• VTech data breach update: 5 millions accounts affected (ZDNet)

• VTech hack gets worse: Chat logs, kids’ photos taken in breach (ZDNet)

• VTech’s data breach debacle: Almost 6.4 million kid profiles hit (ZDNet)

• When children are breached inside the massive VTech hack (Reddit)

• When children are breachedinside the massive VTech hack (ArsTechnica)

• WordPress sites once again being compromised (SC Magazine)