Firms BASH Bash bug with new round of Shellshock patches [Mon Sep 29 2014]

Dear etechnews today,

Your weekly security newsletter from theregister.co.uk
for the week ending 29th September 2014


*** Security News ***

Pizza stores popped, sandwich stores sacked in PoS plunder
Signature Systems 'fesses up to malware raid
http://www.theregister.co.uk/2014/09/29/pizza_stores_popped_sandwich_stores_sacked_in_pos_plunder/

Cisco splats Bash bug in busy swatting season
Shell Shock squished in 31 products
http://www.theregister.co.uk/2014/09/29/cisco_splats_bash_bug_in_busy_swatting_season/

Ello social network hit by suspected BLOODY DDoS attack
Anti-Facebook site forced to temporarily wave Buh-Bye
http://www.theregister.co.uk/2014/09/28/ello_hit_by_massive_ddos_attack/

Firms BASH Bash bug with new round of Shellshock patches
Red Hat: 'Applying multiple security updates is extremely difficult'
http://www.theregister.co.uk/2014/09/28/bash_shellshock_bug_patches_released_by_red_hat/

Regina Eggbert gives her signature rundown of the week's tech news
The top IT tidbits from El Reg's insightful ovum avatar
http://www.theregister.co.uk/2014/09/28/vulture_news_september_27/

Rackspace to hit GLOBAL CLOUD REBOOT button to flush out Xen security
nasty
Sysadmins warned of incoming blitz
http://www.theregister.co.uk/2014/09/27/rackspace_hits_global_cloud_reboot_button_on_xen_security_bug/

Oracle Shellshocked by Bash bug – but Exalogic peeps will have to wait
Database kingpin lists 32 products that can't be patched (yet) as GNU
fixes second vuln
http://www.theregister.co.uk/2014/09/27/oracle_no_shellshock_patches_yet/

Stunned by Shellshock Bash bug? Patch all you can – or be punished
UK data watchdog rolls up its sleeves, polishes truncheon
http://www.theregister.co.uk/2014/09/26/ico_shellshock_warning/

Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
http://www.theregister.co.uk/2014/09/26/researchers_tell_black_hats_youre_sooo_predictable/

Bad boy builds beastly Bash bug botnet, boxen battered
DDoS zombie army found in the wild hours after flaw surfaces
http://www.theregister.co.uk/2014/09/26/bad_guy_builds_beastly_bash_botnet/

FBI boss: Apple's iPhone, iPad encryption puts people 'ABOVE THE LAW'
Presumably doors, locks and windows, too?
http://www.theregister.co.uk/2014/09/25/fbi_boss_slams_google_apple_for_encryption_that_puts_users_above_law/

Hackers thrash Bash Shellshock bug: World races to cover hole
Update your gear now to avoid early attacks hitting the web
http://www.theregister.co.uk/2014/09/25/shellshock_bash_worm_type_fears/

FBI: Your real SECURITY TERROR? An ANGRY INSIDE MAN
Hackers? Pah! It's that sysadmin who has had enough
http://www.theregister.co.uk/2014/09/25/insider_threat_growing_warn_feds/

Latest Firefox and Thunderbird updates plug CRITICAL SSL vuln
Not 'just another pointless patch', this one's for real
http://www.theregister.co.uk/2014/09/25/mozilla_firefox_thunderbird_patch_ssl_vuln/

Bash bug: Shellshocked yet? You will be ... when this goes WORM
Much carnage to come, warn experts
http://www.theregister.co.uk/2014/09/25/shell_shocked_not_yet/

Desperate VXers enslave FREEZERS in DDoS bot
Updated Spike malware targets Asia
http://www.theregister.co.uk/2014/09/25/desperate_vxers_enslave_freezers_in_ddos_bot/

Feds: Cheeky scammers are impersonating us in criminal capers
IC3 warns of email payment fraud push
http://www.theregister.co.uk/2014/09/25/feds_cheeky_scammers_are_impersonating_us_in_criminal_capers/

Patch Bash NOW: 'Shellshock' bug blasts OS X, Linux systems wide open
CGI scripts to DHCP clients hit by Heartbleed-grade remote-code exec
vuln
http://www.theregister.co.uk/2014/09/24/bash_shell_vuln/

Apple is too shallow, must go deeper to beat TouchID fingerprint hack,
say securo-bods
Yep, Gummi Bears can still defeat bio-reading tech
http://www.theregister.co.uk/2014/09/24/iphone_touchid_hack/

Heatmiser digital thermostat users: For pity's sake, DON'T SWITCH ON
the WI-FI
A stranger turns up YOUR heat with default password 1234
http://www.theregister.co.uk/2014/09/24/heatmiser_digital_thermostat_insecure/

Bracelet could protect user herds from lurking PREDATORS
Trust no one, Intel, uni bods say
http://www.theregister.co.uk/2014/09/24/bracelet_could_protect_user_herds_from_lurking_predators/

Kali turns Nexus fondleslabs into hacking weapons
Pen test from your tablet
http://www.theregister.co.uk/2014/09/24/kali_turns_nexus_fondleslabs_into_hacking_weapons/

Microsoft sets up bug bounties for online services
Test our software, but don't break it, says Redmond
http://www.theregister.co.uk/2014/09/24/microsoft_sets_up_bug_bounties_for_online_services/

jQuery site popped to serve malware slop
Visited September 18? Time to REFORMAT.
http://www.theregister.co.uk/2014/09/24/jquery_site_popped_to_serve_malware_slop/

Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
http://www.theregister.co.uk/2014/09/23/iphone_6_still_vulnerable_to_touchid_fingerprint_hack/

UK banks hook themselves up to real-time cop data feed
Not like the movies: Law enforcement is in on it...
http://www.theregister.co.uk/2014/09/23/uk_bank_fraud_alert_system/

Tripadvisor site coughs to card data breach for a potential 800k users
Viator: Veni, vidi, rapui
http://www.theregister.co.uk/2014/09/23/tripadvisor_subsidiary_viator_breach_card_fraud_link/

BLAM, BLAM, BLAM... nooooo! Hacker crew Lizard Squad spits DDoS venom
on Call of Duty
JUST before you blasted 2 'copters with 1 rocket launcher
http://www.theregister.co.uk/2014/09/23/call_of_duty_lizard_squad_ddos/

Apple slaps a passcode lock on iOS 8 devices, but cops can still inhale
your iCloud
Don't congratulate yourselves too soon, Apple – securobod
http://www.theregister.co.uk/2014/09/23/icloud_hole_in_ios8_passcode_protection/

80 PER CENT of app devs SUCK at securing your data, study finds
Ignore that, look at my shiny-shiny
http://www.theregister.co.uk/2014/09/23/app_devs_suck_at_security_says_trainer/

Game pirates 'donate' compute power to Bitcoin miners
Repack cracks foists Bitcoin miner hack
http://www.theregister.co.uk/2014/09/23/game_pirates_donate_compute_power_to_bitcoin_miners/

Dyslexic, dyspraxic? No probs, says GCHQ
Unique minds set to code-breaking
http://www.theregister.co.uk/2014/09/23/dyslexic_dyspraxic_no_probs_says_gchq/

Mushy spam law's IDEAL for toothless watchdog: Spamhaus slams CAN-SPAM
One in 10 non-compliance? It's worse than that, even in the US
http://www.theregister.co.uk/2014/09/22/spam_compliance_survey_spamhaus_response/

Exercise-tracking app not QUITE fit for purpose
MyFitnessPro splats bug in two days
http://www.theregister.co.uk/2014/09/22/exercise_tracking_app_not_quite_fit_for_purpose/


*** Whitepaper ***

The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.
http://whitepapers.theregister.co.uk/d/dab/9e7f3/7b9/9fb1bfd3?td=week_sec_e



------------------------------------------------------------------------

This email was sent to garn14.tech@blogger.com

To change your email or your email subscriptions

http://account.theregister.co.uk/login/

To unsubscribe from all The Register newsletters

http://account.theregister.co.uk/unsubscribe/649203/acc978a1

The Register and its contents are Copyright © 2014 Situation Publishing.
All rights reserved.