Syrian Electronic Army in news site 'hack' POP-UP MAYHEM [Mon Dec 1 2014]

Dear etechnews today,

Your weekly security newsletter from theregister.co.uk
for the week ending 1st December 2014

Advertisement

Nullcon International Security Conference, Goa, 4-7 Feb 2015

Our motto - 'The neXt security thing' drives the objective of the conference i.e. to discuss and showcase the future of information security, offensive and defensive security technology.
More info:- http://reg.cx/2d3h
20% Discount Code:- THEREG2015




*** Security News ***

Weather Channel forecast: Bleak, with prolonged XSS
A billion visitors exposed to scripting storm
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dmg

IETF takes rifle off wall, grabs RC4 cipher's collar, goes behind shed
Vulnerable cipher is about to go to crypto heaven
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dmf

Author fined $500k in first US spyware conviction
100,000 creeps buy mobe-watching wares
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dmc

Did Nork hackers cripple Sony Pictures' network? Probe underway –
report
Massive attack stung film studio ahead of The Interview release
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dm9

Sony employees face 'weeks of pen and paper' after crippling network
hack
Megastars' details may have been pinched – report
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dkH

That sub-$100 Android slab you got on Black Friday? RIDDLED with holes,
say infosec bods
You get what you pay for
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dkE

World's best threat detection pwned by HOBBIT
Forget nation-states, BAB0 is the stuff of savvy crims
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dka

Edward Snowden: best ... security ... educator ... EVER!
Study finds those aware of leaker-at-large harden up and surf smarter
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dk5

Cryptocurrency cruncher cranks prime number constellation
Riecoin distributed miner claims world record for prime sextuplet
generation
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dk4

Leaked Syrian log files reveal attempts to starve rebels of information
Users self-censor to avoid arrest
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dk2

Syrian Electronic Army in news site 'hack' POP-UP MAYHEM
Gigya redirect exploit blamed for pop-rageous ploy
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2djJ

Home Depot hacker hosing cost a wallet-draining $43m (so far)
Card firms might make claims against hardware giant, it warns
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2djH

Home Office: Fancy flogging us some SECRET SPY GEAR?
If you do, tell NOBODY what it's for or how it works
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2djC

Stop selling spyware to despotic regimes, beg MEPs
... we've enough trouble with Regin as it is
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2djv

Bitcoin laid bare: Boffins beat anonymity
Up to 60 per cent of transactions can be linked to IPs
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2djh

Adobe Reader sandbox popped says Google researcher
Yet another reason to make sure you've patched promptly and properly
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2djc

Hacker dodges FOUR HUNDRED YEARS in cooler for SCANNING sites
Junk filled forms and auto-bot Acunetix scams showcases absurd computer
crime laws
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2djb

Siemens issues emergency SCADA patch
Remote exploits plugged in WinCC
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dja

Australia to conduct national cyber-security review
Business and individual security to be tested by panel including Cisco
security supremo
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dj9

Zero-day hacking group resorts to UNICORN SMUT-SLINGING
Playboy ploy not beneath APT3
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dhw

Why did it take antivirus giants YEARS to drill into super-scary Regin?
Symantec responds...
FYI this isn't just going to target Windows, Linux and OS X fans
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dhb

Privacy bods Detekt FinFisher dressed as bookmark manager
Government spyware-spotting project Detekt scores in first week of
release
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dh9

Security seals clobbered ahead of Black Friday bonanza
Hackers' delight as vendors certify phishing sites
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dh1

Second time's a charm: Adobe has another go at killing Flash hijack
flaw
It's not December already – out-of-band patch today must be installed
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dgW

Who's been writing in my apps? Googlilocks builds new apps-tracker
Google offers new dashboards for Work and frees Zix crypto
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dg8

Craigslist pushes punters to YouTube, hacker site
FLUSH US OUT of your system, says flesh and furniture site
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dg2

Google's elves work on Santa to rein(deer) in grinchware
Unofficial app sorts niceware from naughtyware
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dfW

Sony Pictures in IT lock-down after alleged hacker hosing
Data caches uploaded as hackers deface internal staff boxes
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dfU

How secure is Docker? If you're not running version 1.3.2, NOT VERY
UPGRADE NOW to fix vuln found in all previous versions
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dfR

Regin: The super-spyware the security industry has been silent about
NSA fingered as likely source of complex malware family
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2dfM

You stupid BRICK! PCs running Avast AV can't handle Windows fixes
Fix issued, fingers pointed, forums in flames
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2df5

Sony quietly POODLE-proofs Playstations
Innocuous 'system software stability' update brings no patch, no surf,
regime
http://go.reg.cx/ml/9e7f3/54a48dff/0604175a/2df3


*** Whitepaper ***

Protecting users from Firesheep and other Sidejacking attacks with SSL
Discussing the vulnerabilities inherent in Wi-Fi networks, and how using TLS/SSL for your entire site will assure security.
http://whitepapers.theregister.co.uk/d/da4/9e7f3/7f8/3a262c8a?td=week_sec_e



------------------------------------------------------------------------

This email was sent to garn14.tech@blogger.com

To change your email or your email subscriptions

http://account.theregister.co.uk/login/

To unsubscribe from all The Register newsletters

http://account.theregister.co.uk/unsubscribe/649203/acc978a1

The Register and its contents are Copyright © 2014 Situation Publishing.
All rights reserved.