Weekly Cyber Security News 02/02/2018

A selection of this week’s more interesting vulnerability disclosures and cyber security news. Most of the news this weeks seems to have been eclipsed by the Malwarebytes and Coincheck events, however a couple of bits did come to my attention. The first is a (partial – for we will never fully) win against the annoying tech support scammers:

• Tech Support Scammers Fined in U.S., Jailed in UK

With the rise of services like Lets Encrypt, the verification process presents a small hideaway for malicious code. Something we will all need to look out for: 

• Phishing Pages Hidden in _well-known_ Directory

And here is this awe inspiring crypto robbery. Staggering numbers…

• Coincheck hacked in $58 billion cryptocurrency heist, four years after Mt. Gox Kazuaki Nagata reports

• Cisco VPN remote code execution flaw rated 10 out of 10 for severity