Weekly Cyber Security News 11/03/2016

For well over a decade our focus at ionCube has been on PHP security but recently with the release of ionCube24 we have been looking into different kinds of vulnerabilities. This post has a few of the interesting issues we have found this week.

A selection of this week’s more interesting vulnerability disclosures and cyber security news including how a researcher earned $15k for reporting a vulnerability to Facebook. More on mobile fingerprint scanners as well with Samsung’s proving to offer pretty weak security

General

• A hackers typo stopped the biggest bank heist in history (Yahoo Security)

• Amazon finds reverse gear, will reenable file encryption in Fire OS (The Register)

• Bangladesh loses $100 million, allegedly to Chinese hackers (Yahoo Security)

• Cyber-crooks now prefer ransomware to botnets. Yep, firms are paying up (The Register)

• DDoS protection biz Incapsula knackers its customers’ websites (The Register)

• Facebook Password Reset Flaw Earns Researcher $15,000 (SecurityWeek)

• Firefox 45 browser update patches 22 critical vulnerabilities (ZDNet)

• Google Patches Three High Risk Flaws in Chrome 49

• Let’s Encrypt reaches one million certificate encryption milestone (ZDNet)

• Researchers find a shockingly simple way to hack Samsungs fingerprint scanners (Yahoo Security)

• Seagate Employee Tax Forms Stolen in Phishing Attack (SecurityWeek)

• Verizon Wireless to pay $1.35M fine to settle ‘supercookie’ privacy case (ZDNet)

Malware

• Triada Trojan Most Advanced Mobile Malware Yet: Kaspersky (SecurityWeek)

User Space

• Fines, jail for Apple execs over iPhone unlocking refusal? French bill clears next hurdle (ZDNet)

• Google Patches Critical Vulnerabilities in Android (SecurityWeek)

WordPress

• Backdoor in WordPress Plugin Steals Admin Credentials (SecurityWeek)