Weekly Cyber Security News 07/02/2020

A selection of this week’s more interesting vulnerability disclosures and cyber security news. For a daily selection see our twitter feed at #ionCube24

I do love it when an artist decides to do some random thing which just shows up the tech nightmares we try to ignore. For example, last year we had the laptop with all the viruses on. Remember that? Well, here is a fun one which I’m sure will be replicated just to annoy people. Though I love the photo of the guy walking in the middle of an empty road. Shows how much we believe in what our tech tells us:

• “Hack” Creates Fake Google Maps Traffic Jams With 99 Cell Phones

We’ve been here before with the scooter high-jack. Again, for those marketing people at the back who didn’t hear last time. Just because it would be a ‘cool’ idea to add some kind of pointless App connection to your product, it doesn’t mean you should. Think about the pointless remote toasters, coffee machines and washing machines…

• Electric scooters vulnerable to remote hacks

Talking of which , even when they do add some kind of remote control which isn’t just a gimmick, it can still go wrong:

• Researcher Finds Over 60 Vulnerabilities in Physical Security Systems

 

The rest of the news….

• Japanese Electronics Giant NEC Discloses Old Data Breach

• “Cyber security incident” takes its Toll on Aussie delivery giant as box-tracking boxen yanked offline

• Advanced Obfuscation Marks Widespread Info-Stealing Campaign – Agent Tesla and LokiBot are common payloads in the botnet-driven spam effort.

• AlphaBay Moderator Faces 20 Years Jail Time

• Attempts to define international infosec rules of the road bogged down by endless talkshops, warn diplomats

• Hackers are hijacking smart building access systems to launch DDoS attacks

• Iowa Prosecutors Drop Charges Against Men Hired to Test Their Security

• Irish Regulator Probes Google, Tinder Over Data Processing

• LCD pwn System: How to modulate screen brightness to covertly transmit data from an air-gapped computer… slowly

• Magecart group jumps from Olympic ticket website to new wave of e-commerce shops

• Malware stew cooked up on Bitbucket, deployed in attacks worldwide

• Medtronic Patches Implanted Device, CareLink Programmer Bugs – The medical device giant has issued fixes for bugs first disclosed in 2018 and 2019.

• Police are warning crooks are using cleaners to compromise businesses

• Remember those infosec fellas who were cuffed while testing the physical security of a courthouse? The burglary charges have been dropped

• Sketchy behavior? Wacom tablet drivers phone home with names, times of every app opened on your computer

• Sonos goofs again – this time revealing customer’s email addresses in Cc: blunder

• Sudo Vulnerability Allows Privilege Escalation to Root

• Teen takes down ISP with DDoS attacks to get info on one of its subscribers

• Terrifying bug in WhatsApp allows hackers to steal files. So get patching all nine of you using it on the desktop

• Twitter security hole allowed state-sponsored hackers to match phone numbers to usernames

• Vulnerabilities in Mini-SNMPD Lead to DoS, Information Disclosure

• £13 million Maltese bank cyber-heist – six men arrested in UK

• Evil Corp Returns With New Malware Infection Tactic

• New ransomware doesn’t just encrypt data. It also meddles with critical infrastructure

• School’s out as ransomware attack downs IT systems at Scotland’s Dundee and Angus College

• Ashley Madison Breach Extortion Scam Targets Hundreds

• Community Housing Nonprofit Hit with $1.2M Loss in BEC Scam

• Would you get hooked by a phishing scam? Test yourself

• CERN Physics Lab Drops Facebook Over Data Concerns

• Dropbox Paid Out Over $1 Million Through Bug Bounty Program