Big Retail: We don't hate Apple, we hate the credit card companies [ Mon Nov 3 2014]

Dear etechnews today,

Your weekly security newsletter from theregister.co.uk
for the week ending 3rd November 2014


*** Security News ***

Remote code execution flaws fixed in tnftp and wget
Linux bods thankful, Apple a stone-cold boilerplate
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cYh

LastPass releases Open Source command line client
Probing, poking and pulling requested
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cYd

Pirate Bay co-founder JAILED for three years after massive CSC HACK
ATTACK
Guilty of illegally accessing government servers in Denmark
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cXX

Facebook lifts Tor ban, touts encrypted onion access point
Anonymized traffic now A-OK
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cXD

Popular Science site shrugs off malicious code infection
No warning, no response... at least it killed the code
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cXe

Microsoft patches GroupMe 'full account' hijack hole
Researcher rates Redmond after rapid responds to rathole reveal in
Group TXTing app
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cX7

Free government-penned crypto can swipe identities
Beware of Australians bearing gifts
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cX4

Google heads out the back with rifle, puts down POODLE
Next Chrome includes death knell for SSL
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cX1

Danish court finds Pirate Bay cofounder guilty of hacking CSC servers
Jury doesn't buy 'evil hackers pwned my computer' defense
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cWT

BIGGEST THREAT to Europe's cybersecurity? Hint: not hackers
Largest EVER Europe-wide cybersecurity exercise
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cWz

The ULTIMATE CRUELTY: Sandworm uses PowerPoint against Swiss bank
customers
From espionage to cybercrime
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cWw

UK smart meters arrive in 2020. Hackers have ALREADY found a flaw
Energy summit bods warned of free energy bonanza
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cWs

UK consumers particularly prone to piss-poor patching
Java a hot spot – new report
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cWh

Carders offer malware with the human touch to defeat fraud detection
Huge credit card heists mean crims want to cash out - fast
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cW0

Mozilla releases geolocating WiFi sniffer for Android
As if the civilians who never change access point passwords will ever
opt out of this one
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cUZ

DRUPAL-OPCALYPSE! Devs say best assume your CMS is owned
SQLi hole was hit hard, fast, and before most admins knew it needed
patching
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cUX

Big Retail: We don't hate Apple, we hate the credit card companies
Group opens up (slightly) about Apple Pay rival CurrentC
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cUW

The NO-NAME vuln: wget mess patched without a fancy brand
Directory overwrite bug threatens all *nix boxen
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cUP

Australian E-Health records breached twice in the last year
Sick system saw patients peep into two records
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cUK

Naked and afraid: that's how Telstra's Wi-Fi security makes you feel
All it takes is 1 angry teen with Wireshark and root access
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cUJ

Bad dog: Redmond's new IE tool KILLS POODLE with one shot
Azure and Office 365 to end SSL 3.0 support, too
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cUG

Big Retail's Apple Pay killer CurrentC HACKED, tester info nicked
Listen for the chuckling from Cupertino
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cUF

WHITE HOUSE network DOWN: Nation-sponsored attack likely
'Unclassified systems only', claim Presidential residentials
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cUe

BlackEnergy crimeware coursing through US control systems
US CERT says three flavours of control kit are under attack
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cU0

Cisco: We made UCS secure but need your help to finish the job
New hardening guide suggests shutting old services, expiring admins and
locking logs
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cTT

Find My Phone does just one thing but Samsung's messed it up
Hackers can p0wn smartmobes through handset location services
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cTR

'GCHQ's surveillance data gulp is BULKY and WARRANTLESS', human rights
groups moan
Is there really no limit for Blighty's spies?
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cTD

Security Avengers team up to take down Chinese hacking group
Try not to imagine security folk in lycra
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cTx

FBI impersonated newspaper to finger school bomb threat suspect
'Traded on our reputation and put it at peril', complains Seattle Times
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cTt

Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cTc

EvilToss and Sourface hacker crew 'likely' backed by Kremlin – FireEye
US intel firm reports on 'APT28'
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cT1

Intel bods to detail RSA birko crypto man-in-the-middle diddle
Researchers go BERserk in Buenos Aires
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cRG

Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll
spot 'em
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cRB

Shellshock over SMTP attacks mean you can now ignore your email
'But boss, the Internet Storm Centre says it's dangerous for me to
reply to you'
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cRv

AWS scores same Oz gov sec creds as Azure
Welcome to the cloud, where competitive advantage lasts a whole day
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cRt

Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cRr

Planning to fly? Pour out your shampoo, toss your scissors, RENAME
TERRORIST WI-FI!
FAA fails to see humor in 'Al-Quida' hotspot jokes
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cRg

Schneier, Diffie, ex-MI5 bod, privacy advocates team up on Code Red
Project will fight intrusive surveillance
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cR9

Tor exit node mashes malware into downloads
Windows update haxors saved by Microsoft FixIt
http://go.reg.cx/ml/9e7f3/547fa3ff/bcb6c1e1/2cQn


*** Whitepaper ***

The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.
http://whitepapers.theregister.co.uk/d/dab/9e7f3/7dc/cf72aa82?td=week_sec_e



------------------------------------------------------------------------

This email was sent to garn14.tech@blogger.com

To change your email or your email subscriptions

http://account.theregister.co.uk/login/

To unsubscribe from all The Register newsletters

http://account.theregister.co.uk/unsubscribe/649203/acc978a1

The Register and its contents are Copyright © 2014 Situation Publishing.
All rights reserved.