Sony hackers dump more hunks of stolen data, promise another ' Christmas gift' [Mon Dec 22 2014]

Dear etechnews today,

Your weekly security newsletter from theregister.co.uk
for the week ending 22nd December 2014

Advertisement

Nullcon International Security Conference, Goa, 4-7 Feb 2015

Our motto - 'The neXt security thing' drives the objective of the conference i.e. to discuss and showcase the future of information security, offensive and defensive security technology.
More info:- http://reg.cx/2d3h
20% Discount Code:- THEREG2015




*** Security News ***

STAY AWAY: Popular Tor exit relays look raided
USB plugged into Atlas, Global servers before control was lost
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dDk

Dangerous NTP hole ruins your Chrissy lunch
Sysadmins: Down beers and patch now!
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dDh

Now Obama seeks China's help to halt alleged Nork HACK ATTACKS
Sony saga: Kim Jong Un threatens 'cyber warfare'
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dDc

Norks: FBI's Sony Pictures' hacking allegations are 'groundless
slander'
Kim Jong Un's officials demand joint probe with USA
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dD1

Heads up! If Tor VANISHES over the weekend, this is why
Developers warn of swoop plot to cripple privacy network
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dCN

Staples comes clean: 1+ million bank cards at risk after hack
Run for the tills! Run for the tills!
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dCK

ICANN: The TRUTH about that hacker attack on our DNS zone file database
But vague details raise questions about org's security
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dCH

Sony Pictures hack is Hollywood's 'Snowden moment' say infosec bods
Keys to sysadmin accounts nicked, abused, it appears
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dCG

Feds finger Norks in Sony hack, Obama asks: HOW DO YOU SOLVE A PROBLEM
LIKE KOREA?
Blaming Kim Jong Un is like Saddam's WMDs all over again
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dCC

Welsh council rapped for covert spying on sick leave worker
'Incredibly intrusive' use of powers prompts slap from ICO
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dCr

Linux 'GRINCH' vuln is AWFUL. Except, er, maybe it isn't
Securo-bods in bunfight over priv-escalation problem
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dCq

Webcam-snooping spawn of ZeuS hits 150 banks worldwide
Chthonic exploits Word bug to hijack browsers, steal passwords
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dCg

Armouring up online: Duncan Campbell's chief techie talks crypto with
El Reg
Truecrypt, PGP, GPG - but NEVER Skype
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dCf

Git thee behind me, Git crit security bug!
Update anything on the desktop that touches GitHub if you want to live
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dC9

Movie industry's evil plan to destroy the internet is going precisely
nowhere
Yes, it would damage the DNS; no, it's not going to happen
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dC8

Hack hijacks electric skateboards, dumps hipsters in the gutter
Automated attacks crash riders on the fly
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dC3

Kiwi hacker 'menace' pops home detention tracker cuffs
Hack unit worn by on-parole crim. Blackmail said crim. Profit
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dBZ

New fear: ISIS killers use 'digital AK-47' malware to hunt victims
New code built in-house targets innocents fending off deranged
terrorists
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dBP

Misfortune Cookie crumbles router security: '12 MILLION+' in hijack
risk
New claim: Homes, businesses menaced by vulnerable firmware
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dBL

Security SEE-SAW: $3 MEEELLION needed to fight a $100k hack
Threat intelligence 'mostly snake oil and marketing'
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dBF

CoolReaper pre-installed malware creates backdoor on Chinese Androids
This a lot worse than just bloatware, say analysts
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dBv

TorrentLocker ransomware pestilence plagues Europe, bags $500k
Too many people still running random .exe files in spam attachments
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dBm

Social sniffer predicts which Nigerian prince has the best chance of
scamming you
Data matching tool will be open source, intended for good not evil
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dB5

URL LOL: Delta splats web flight boarding pass snoop bug
Mobile site spits out details on fellow passengers
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dB0

Nork-ribbing flick The Interview AXED: Sony caves under hack terror
'menace'
Terrorists win, Kim Jong Un fingered again
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dAZ

ICANN HACKED: Intruders poke around global DNS innards
Spear-phishing attack timing couldn't be worse for domain name overseer
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dAR

Can't stop Home Depot-style card pwning, but suppliers will feel PCI
regulation pain
Third parties must comply to new standard
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dAM

London teen pleads guilty to Spamhaus DDoS
Sentence will be passed in January next year
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dAB

Google bakes W3C malware-buster into Gmail
Content Security Policy standard means non-complying extensions SHALL
NOT PASS!
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dAd

Sony sued by ex-staff over daft security, leaked privates
What if movie studio loses? Big biz liable for big data blunders?
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dAp

Banks, UK.gov must work together to beat cyber-nasties
BoE also warns of IT failures 'exacerbating' sector instability
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dzU

Sony hackers dump more hunks of stolen data, promise another 'Christmas
gift'
Still creepily trying to woo Sony staff too
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dzz

Chrome devs hatch plan to mark all HTTP traffic insecure
Browsers tell us when content is secure, but not when to feel NAKED AND
AFRAID
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dzy

Roll up, come see the BOOMING HACKER BAZAAR!
Fake credential, premier credit cards, and 100% satisfaction,
guaranteed
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dzt

Senator: Backdoor for the Feds is a backdoor for hackers
Wyden pushes for law banning special access in software, hardware for
cops and spies
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dzq

Next gen ransomware: Elliptic cryptic, talks on Tor, demands Bitcoin
All the gear and will cost you dear
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dzc

UK banks ill-prepared for return of the rabid POODLE
Only 4,096 requests needed to uncover a 16-character cookie
http://go.reg.cx/ml/9e7f3/54c03d7f/2813a354/2dz2


*** Whitepaper ***

Today's most dangerous security threats
This paper describes the impact of data centre threats and it reveals the latest methods, tools and techniques used by attackers to exploit data centre resources.
http://whitepapers.theregister.co.uk/d/e3a/9e7f3/80d/5ca35fcc?td=week_sec_e



------------------------------------------------------------------------

This email was sent to garn14.tech@blogger.com

To change your email or your email subscriptions

http://account.theregister.co.uk/login/

To unsubscribe from all The Register newsletters

http://account.theregister.co.uk/unsubscribe/649203/acc978a1

The Register and its contents are Copyright © 2014 Situation Publishing.
All rights reserved.