Password manager LastPass goes titsup: Users LOCKED OUT [Mon Aug 18 2014]

Dear etechnews today,

Your weekly security newsletter from theregister.co.uk
for the week ending 18th August 2014





*** Security News ***

Irish credit unions in privacy breach
Private investigators duped DSP: reports
http://www.theregister.co.uk/2014/08/18/irish_credit_unions_in_massive_privacy_breach/

VXer fighters get new stealth weapon in war of the (mal)wares
Foiled traditional systems forces white hats to bare metal
http://www.theregister.co.uk/2014/08/18/vxer_fighters_get_new_stealth_weapon_in_war_of_the_malwares/

Boffins find hundreds of thousands of woefully insecure IoT devices
Eeewww! Thousands of connected contraptions share firmware
http://www.theregister.co.uk/2014/08/17/boffins_find_ihundreds_of_thousandsi_of_woefully_insecure_iot_devices/

Remond cries UNINSTALL in the wake of Blue Screens of Death™
Cache crash causes contained choloric calamity
http://www.theregister.co.uk/2014/08/17/remond_cries_uninstall_in_the_wake_of_blue_screens_of_death/

Time to ditch HTTP – govt malware injection kit thrust into spotlight
Don't touch that cat video, warns Citizen Lab
http://www.theregister.co.uk/2014/08/16/time_to_ditch_http_state_network_injection_attacks_documented_in_the_wild/

Supervalu supermarket stores stung by sneaky sales system scammers
Up to 1,000 stores could have been hacked
http://www.theregister.co.uk/2014/08/15/supervalu_supermarket_stores_stung_by_sneaky_scammers/

Apple slings fanbois' data at Chinese servers in China Telecom deal
Mandarins won't get encryption keys, Cook & Co promises ... scout's
honor
http://www.theregister.co.uk/2014/08/15/apple_to_store_users_data_on_chinese_servers_after_china_telecom_deal_report/

Revealed ... GCHQ's incredible hacking tool to sweep net for
vulnerabilities: Nmap
Is that you, 007? Is that you, 007?
http://www.theregister.co.uk/2014/08/15/gchq_port_scan_hacienda/

Don't think you're SAFE from Windows zombies just 'cos you have an
iPhone - research
Malware can be pushed across the species gap
http://www.theregister.co.uk/2014/08/15/infecting_ipads_new_how_to/

Insert coin to continue: GameOver ZeuS zombie MUTATES, shuffles back to
its feet
You! Back from the undead again?
http://www.theregister.co.uk/2014/08/15/gameover_zeus_back_from_the_dead_as_/

Giving your old Tesco Hudl to Auntie June? READ THIS FIRST
You can never wipe supermarket slab clean enough
http://www.theregister.co.uk/2014/08/15/hudl_and_other_android_devices_have_data_reset_flaw/

Who needs hackers? 'Password1' opens a third of all biz doors
GPU-powered pen test yields more bad news about defences and passwords
http://www.theregister.co.uk/2014/08/15/hundreds_of_thousands_of_corporate_passwords_cracked_in_minutes/

Chrome update to raise alarms over deceptive download bundles
That browser toolbar your Mum swears she never installed? Chrome'll
crimp it
http://www.theregister.co.uk/2014/08/15/chrome_safe_browsing_update/

Know what Ferguson city needs right now? It's not Anonymous doxing
random people
U-turn on vow to identify killer cop after fingering wrong bloke
http://www.theregister.co.uk/2014/08/15/anonymous_calls_off_ferguson_police_doxing_after_fingering_wrong_man/

SpiderOak says you'll know it's secure because a little bird told you
'Warrant canary' to drop dead at first whiff of secret court
surveillance orders
http://www.theregister.co.uk/2014/08/14/spideroak_says_youll_know_its_secure_because_a_little_bird_told_you/

It's time for PGP to die, says ... no, not the NSA – a US crypto prof
'We've come a long way since the 1990s, but PGP mostly hasn't'
http://www.theregister.co.uk/2014/08/14/pgp_viability/

Russian PM's Twitter hacked to slap down Putin, post fake resignation
Mischief-makers also 'ban electricity'
http://www.theregister.co.uk/2014/08/14/russian_pm_twitter_hack/

SynoLocker Trojan crime gang: We QUIT this gig
Hold 'closing down sale' as they hotfoot it to ... island?
http://www.theregister.co.uk/2014/08/14/synolocker_trojan_closing_down_sale/

Redmond stall means IE Java axe won't swing till September
'WE NEED MORE TIME!' cry angry sysadmins, and Redmond listens
http://www.theregister.co.uk/2014/08/14/redmond_stall_means_ie_java_axe_wont_swing_till_september/

Brit infosec firm lets hackers think they've stolen something
ClearSwift has scored an almost-accidental success with [REDACTED] tech
http://www.theregister.co.uk/2014/08/14/brit_infosec_firm_lets_hackers_ithinki_theyve_stolen_something/

Five Totally Believable Things Car Makers Must Do To Thwart Hackers
Read the open letter from security pressure group
http://www.theregister.co.uk/2014/08/14/car_security_manifesto/

Snowden on NSA's MonsterMind TERROR: It may trigger cyberwar
Plus: Syria's internet going down? That was a US cock-up
http://www.theregister.co.uk/2014/08/13/snowden_warns_the_nsas_monstermind_software_could_trigger_cyberwar/

Snowden leaks show that terrorists are JUST LIKE US
... on infosec, that is. Jihadis' OPSEC rivalled GCHQ's, says Glenn
Greenwald
http://www.theregister.co.uk/2014/08/13/snowden_effect_terrorist_crypto_debate/

Anonymous threatens to name cop who shot dead unarmed Michael Brown
Police close ranks and refuse to reveal officer's identity
http://www.theregister.co.uk/2014/08/13/ferguson_shooting_michael_brown_anonymous_threatens_to_dox_police_shooter/

LulzSec supergrass Sabu led attacks against Turkey – report
Revelations contained in 'sealed court docs' - news site
http://www.theregister.co.uk/2014/08/13/sabu_allegedly_masterminded_turkey_attacks_according_to_report/

Just when you thought you were alone in the bath: Hi-res mapping
satellite ready for launch
Will beam back images of objects as small as 30cm
http://www.theregister.co.uk/2014/08/13/creepy_satellites_will_be_able_to_zoom_in_on_your_face/

We told you jailbreaking your iThing was dangerous
Ad revenue looted from 75,000 infected iOS fondelslabs
http://www.theregister.co.uk/2014/08/13/ad_revenue_looted_from_75000_infected_ios_fondelslabs/

Naughty NSA was so drunk on data it forgot collection rules
Declassified court docs show systematic breaches over [REDACTED] years
http://www.theregister.co.uk/2014/08/13/nsa_overstepped_fisc_collection_rules/

Fifteen zero days found in hacker router comp romp
Four routers rooted in SOHOpelessly Broken challenge
http://www.theregister.co.uk/2014/08/13/fifteen_zero_days_found_in_hacker_router_romp/

Beware of Greeks bearing spammy small omicrons, says Google
Anti-spam plan will ensure dodgy domains like VultureS૦uth.com don't
stand
http://www.theregister.co.uk/2014/08/13/gmail_spamwatch_goes_international_as_well/

You've got three days to patch Adobe Flash, Air, Reader
Seven flaws to fix in Flash, but do the Reader fix first cos' it's
under attack already
http://www.theregister.co.uk/2014/08/13/youve_got_three_days_to_patch_adobe_flash_air_reader/

Looking forward to the end of Tuesday? You've patched this month's 37
Microsoft bugs, right?
Don't go until you've shut these remote-code exec holes
http://www.theregister.co.uk/2014/08/12/microsoft_swats_40_bugs_with_august_patches/

Password manager LastPass goes titsup: Users LOCKED OUT
Customers can't get into their accounts as service topples
http://www.theregister.co.uk/2014/08/12/lastpass_outage/

Chinese cops cuff teen over Heart App Android malware flap
Reportedly infected 100,000 phones in just a few days
http://www.theregister.co.uk/2014/08/12/heart_app_android_malware/

Fifteen countries KO'd in malware one-two punch
Snakes follow scouts as high value targets become snack food
http://www.theregister.co.uk/2014/08/12/fifteen_countries_kod_in_malware_onetwo_punch/

Xiaomi updates cloud messaging after privacy scare
Encrypting data, off-by-default
http://www.theregister.co.uk/2014/08/12/xiaomi_updates_cloud_messaging_after_privacy_scare/

Google leaves STUPID vuln on Nest devices
Security? But this is the Internet of Things!
http://www.theregister.co.uk/2014/08/12/google_leaves_stupid_vuln_on_nest_devices/

NIST wants better SCADA security
Preparing the way for a test lab
http://www.theregister.co.uk/2014/08/12/nist_wants_better_scada_security/

2,285,295 Aussie logins nabbed in Russian password haul
Thousands of .au sites p0wned and thrown to the winds
http://www.theregister.co.uk/2014/08/11/2285295_aussie_email_addresses_nabbed_in_russian_password_haul/

IBM takes a shine to Lighthouse, gobbles bouncer-in-the-cloud biz
If your username's not down, you're not logging in
http://www.theregister.co.uk/2014/08/11/ibm_takes_a_shine_to_lighthouse_acquires_security_firm/

DIME for your TOP SECRET thoughts? Son of Snowden's crypto-chatter
client here soon
Hardened email platform should be ready for Xmas
http://www.theregister.co.uk/2014/08/11/spy_busting_dark_mail_relaunched_as_dime/

GCHQ recruits spotty teens – for upcoming Hack Idol
Aims to steer 12 to 18-year-olds towards infosec careers
http://www.theregister.co.uk/2014/08/11/cybercenturion_hacker_youth/

CryptoWall! crooks! 'turn! to! Yahoo! ads! to! spread! ransomware!'
Purple Palace not directly involved but maybe it should chat to these
infosec bods
http://www.theregister.co.uk/2014/08/11/cryptowall_malvertising_yahoo_ad_network/

O2 vs Vodafone: Mobe firms grab for GCHQ, gov.uk security badge
No, the spooks love US best, say rival firms
http://www.theregister.co.uk/2014/08/11/mobile_networks_vie_for_security_credentials/


*** Whitepaper ***

Endpoint data privacy in the cloud is easier than you think
Innovations in encryption and storage resolve issues of data privacy and key requirements for companies to look for in a solution.
http://whitepapers.theregister.co.uk/d/d4b/9e7f3/78f/5ac96970?td=week_sec_e



------------------------------------------------------------------------

This email was sent to garn14.tech@blogger.com

To change your email or your email subscriptions

http://account.theregister.co.uk/login/

To unsubscribe from all The Register newsletters

http://account.theregister.co.uk/unsubscribe/649203/acc978a1

The Register and its contents are Copyright © 2014 Situation Publishing.
All rights reserved.