Weekly Cyber Security News 21/10/2016

A selection of this week’s more interesting vulnerability disclosures and cyber security news.

A few breaches this week and Weebly being the most recent, but strangely silent before now. Password changing season once again!

• Evony Gaming Company Website Hacked; 33M Gamer Accounts Stolen Waqas writes

• Security breach feared in up to 3.25 million Indian debit cards (Yahoo Security)

• Weebly Breach Affects Over 43 Million Users (SecurityWeek)

• Weebly Confirms Data Breach Affecting More Than 43 Million Users From LeakedSource.com

• 3D printing hack: Researchers crash drone with sabotaged propeller (TechRepublic)

• Compromised Routers Used for Variety of Badness (SecurityWeek)

• Dirty COW explained: Get a moooo-ve on and patch Linux root hole (The Register)

• DIY web site builder Weebly was secured feebly (The Register)

• Dyre Authors Apparently Working on New Banking Trojan (SecurityWeek)

• Feds Seized 50TB Of Data And Arsenal Of Guns From Accused NSA Thief (Forbes)

• GoDaddy ups security with email encryption and archiving for Office 365 users (TechRepublic)

• How To Crash A Drone By Hacking Its 3D Propeller Design

• It’s good to talk, UK banks told after massaging cyberattack figures (The Register)

• Kids today are so stupid they fall for security scams more often than greybeards (The Register)

• Microsoft Researchers Release Anti-Reconnaissance Tool

• Reading this? Then you can pop root shells on Markvision enterprises (The Register)

• SHA3-256 cipher is quantum-proof, should last BEELLIONS of years, say boffins (The Register)

• ShadowBrokers put US$6m price tag on new hoard of NSA hacks (The Register)

• Three million debit cards at risk after hackers raid Indian payment systems (The Register)

• U.S. Spy Worker Stole ‘Astonishing Quantity’ of Data

• US: Ex-contractor committed ‘breathtaking’ theft of secrets (Yahoo Security)

• Vuln: Magento CMS Flash File Uploader Cross Site Scripting Vulnerability Magento CMS Flash File Uploader Cross Site Scripting Vulnerability

• _Shadow Brokers_ Wants 10,000 Bitcoins for NSA Exploits

• New Free Tool Stops Petya Ransomware & Rootkits

• Researchers Build Configuration Extractor for Locky Ransomware

• Windows Zero-Day Exploited by _FruityArmor_ APT Group

• Audit sees VeraCrypt kils critical password recovery, cipher flaws (The Register)

• Most serious Linux privilege-escalation bug ever is under active exploit (ArsTechnica)

• Backdoor Uploaded to WordPress Sites via eCommerce Plugin Zero-Day (SecurityWeek)