The Reg Security: Hackers ZERO IN on ZOMBIE XP boxes: Get patching, Internet Explorer 8 users [Mon May 5 2014]

Dear etechnews today,

Your weekly security newsletter from theregister.co.uk
for the week ending 5th May 2014





*** Security News ***

Global cop co-operation treaties need cloudy reboot
Australian Federal Police say cross-border ops are getting harder
http://www.theregister.co.uk/2014/05/05/global_cop_cooperation_treaties_need_cloudy_reboot/

'Covert Redirect' OAuth floaw more chest-beat than Heartbleed
Phishing for attention with flashy website and logo bait
http://www.theregister.co.uk/2014/05/05/covert_redirect_is_overt_hype_more_heartbleat_than_heartbleed/

Boffins tag Android app privacy fails
Your pocket is leaking data
http://www.theregister.co.uk/2014/05/05/boffins_tag_android_app_privacy_fails/

Australian government apps access smartmobe cams but 'don't film you'
Department of Human Services says its apps need cameras to deliver
better services
http://www.theregister.co.uk/2014/05/04/oz_dept_human_services_not_filming_users/

Hackers ZERO IN on ZOMBIE XP boxes: Get patching, Internet Explorer 8
users
Multi-pronged malfeasance targets gov, energy, finance
http://www.theregister.co.uk/2014/05/02/cyberspies_throw_ie_0day_against_win_xp/

Look what's screeching into the Internet of Stuff: SELF-DRIVING CARS
Microcontroller lords Freescale rev customisable motors
http://www.theregister.co.uk/2014/05/02/freescale_hybrid_car_tech/

Boffins pen 'Guide to better spamming'
Small, widely-dispersed botnets ought to do the trick
http://www.theregister.co.uk/2014/05/02/boffins_pen_guide_to_better_spamming/

Script fools n00b hackers into hacking themselves
Indian Facebook users targeting their mates shoot selves in foot
http://www.theregister.co.uk/2014/05/02/india_facebook_self_cross_site_scripting_scam/

Researcher says Apple fibs about crypto for iOS email attachments
Latest iPad and iPad firmware reveals attachments in clear text
http://www.theregister.co.uk/2014/05/02/nope_ios_email_attachments_arent_encrypted/

Study: Users don't much care about Heartbleed hacking dangers
Pew finds the public less interested in flaw than previous incidents
http://www.theregister.co.uk/2014/05/02/study_users_dont_much_care_about_heartbleed_hacking_dangers/

Microsoft: You know we said NO MORE XP PATCHES? Well ...
IE vuln forces rethink on mercy bullet for elderly OS support
http://www.theregister.co.uk/2014/05/01/internet_explorer_patch/

Titsup UK Border IT causes CHAOS at air and seaports in Blighty
Welcome to Great Britain ... this might take a while
http://www.theregister.co.uk/2014/05/01/computer_chaos_causes_mayhem_at_british_border/

Today's bugs have BRANDS? Be still my bleeding heart [logo]
Code-slinger Verity reviews the rash of groovy-named open-source
security vulns
http://www.theregister.co.uk/2014/05/01/stob_bleeding_heart/

New secure OS will put Tails between NSA's legs
Debian-derived OS funnels everything through Tor and HTTPS
http://www.theregister.co.uk/2014/05/01/secure_os_tails_1_released/

Canucks' ISPs routing data through snoop heaven USA
Does your ISP use a 'Boomerang route' to fling data into the NSA's lap?
http://www.theregister.co.uk/2014/05/01/transparency_researchers_say_canadas_isps_are_too_opaque/

Staunch your Heartbleed patching: FreeBSD has a nasty credentials leak
Let's not forget that FreeBSD is in OSX, NetApp kit, Juniper boxen and
even some tellies
http://www.theregister.co.uk/2014/05/01/freebsd_next_to_leak_credentials/

Thanks for nothing, Apple, say forensic security chaps
iPhone factory reset removes all traces of everything, forever
http://www.theregister.co.uk/2014/05/01/thanks_for_nothing_apple_say_forensic_security_chaps/

Anonymous develops secure data over ham radio scheme
Trading bandwidth for freedom on a pirate channel
http://www.theregister.co.uk/2014/05/01/anonymous_to_world_go_pirate_radio_for_datacomms/

Security guru: You can't blame EDWARD SNOWDEN for making US clouds LOOK
leaky
And anyway, people AREN'T switching away
http://www.theregister.co.uk/2014/04/30/mikko_hypponen_infosec_keynote_speech/

Interweb has staunched nearly all Heartbleed wounds, says crypto bod
Just a few weeks after discovery ... well, that was quick
http://www.theregister.co.uk/2014/04/30/heartbleed_vulnerability_almost_wiped_off_web_claims_qualys/

White House to world: We don't hoard IT security vulnerabilities
Or if we do, it's only in the national interest
http://www.theregister.co.uk/2014/04/30/white_house_to_world_we_dont_hoard_vulnerabilities/

Target finally implements chip and PIN card protections
Barn door closed, but the horses are three towns away
http://www.theregister.co.uk/2014/04/29/target_finally_implements_chip_and_pin_card_protections/

Cuffing darknet-dwelling cyberscum is tricky. We'll 'disrupt' crims
instead, warns top cop
Hackers. If you can't beat 'em, join 'em?
http://www.theregister.co.uk/2014/04/29/europol_boss_calls_for_push_to_disrupt_cybercrime/

Researchers warn of resurgent Sefnit malware
Botnet returns using new tactics
http://www.theregister.co.uk/2014/04/29/researchers_warn_of_resurgent_sefnit_malware/

Quantum Key Distribution proven to work over everyday fibre
Quantum security without dedicated fibre
http://www.theregister.co.uk/2014/04/29/qkd_can_share_conventional_fibre_nets_say_boffins/

Oh GREAT: Your factory can Heartbleed out
Siemens issues first round of coagulants for vulnerable SCADA kit
http://www.theregister.co.uk/2014/04/28/siemens_plugs_heartbleed_vuln_in_scada_kit/

Über-secure Blackphone crypto-mobe spills its silicon guts
Tegra-powered handset claims privacy built in
http://www.theregister.co.uk/2014/04/28/blackphone_specs/

AOL confirms security breach from spam attack
Email addresses, passwords and home addresses among swiped data
http://www.theregister.co.uk/2014/04/28/aol_confirms_security_breach_from_spam_attack/

Drink me: Adobe pours Flash Player bug squash
Mad dash to slap critical patch on zero day hole
http://www.theregister.co.uk/2014/04/28/adobe_flash_update/

Press release scam pelts poor PRs with volley of UNTRUE invoices
OMG! WHO would spray out demands for stuff they just didn't deserve?
http://www.theregister.co.uk/2014/04/28/pr_newsfeeds_false_invoice_scam/



------------------------------------------------------------------------

This email was sent to garn14.tech@blogger.com

To change your email or your email subscriptions

http://account.theregister.co.uk/login/

To unsubscribe from all The Register newsletters

http://account.theregister.co.uk/unsubscribe/649203/acc978a1

The Register and its contents are Copyright © 2014 Situation Publishing.
All rights reserved.