The Reg Security: Chinese Army: US hacks us so much, I' m amazed you can read this [Mon Mar 4 2013]

Dear etechnews today,

Your weekly security newsletter from theregister.co.uk
for the week ending 4th March 2013

RSA Conference 2013
Feb 25 - Mar 1
San Francisco, US

RSA Conference 2013: Mastering data to secure the world. Attend Feb 25 - Mar 1 and access 275+ sessions.
http://reg.cx/1Yqb



*** Security News ***

Japanese govt: use operator-run app stores, not Google Play
Info-stealing sexy wallpaper app was downloaded 500,000 times on
official site
http://www.theregister.co.uk/2013/03/04/android_app_google_play_fraud/

Evernote joins the notably hackable club
Password reset, so sorry, no customer data at risk
http://www.theregister.co.uk/2013/03/04/evernote_password_reset/

RSA roundup: Big trouble in not-so little China
Another year over and what have you done?
http://www.theregister.co.uk/2013/03/01/rsa-roundup/

Yet another Java zero-day vuln is being exploited
Disable Java, wait for patch, you all know the drill...
http://www.theregister.co.uk/2013/03/01/another_day_another_java_zero_day/

Bank Muscat hit by $39m ATM cash-out heist
Duplicated cards fingered
http://www.theregister.co.uk/2013/03/01/bank_muscat_atm_mega_fraud/

Tech bazaar Aria puts £10K bounty on heads of DDoS varmints
Wanted preferably alive
http://www.theregister.co.uk/2013/03/01/aria_pc_ddos_bounty/

Prepare for 'post-crypto world', warns godfather of encryption
Shamir: US quadrupling size of cyber-combat unit for a reason
http://www.theregister.co.uk/2013/03/01/post_cryptography_security_shamir/

Sinkholes reveal more Chinese-hacked biz - and piggybacking crims
It's not just state-backed spies using snoop-ware armies
http://www.theregister.co.uk/2013/03/01/sinkhole_research_uncovers_cyberspy_victims/

Browser makers open local storage hole in HTML5
Bad implementation of disk space limits
http://www.theregister.co.uk/2013/02/28/html_5_implementation_bug_drive_filler/

Wikileaker Bradley Manning pleads not guilty to 'aiding the enemy'
Accepts charges of misuse of information
http://www.theregister.co.uk/2013/02/28/bradley_manning_court_martial_starts/

Chinese Army: US hacks us so much, I'm amazed you can read this
PLA, USA finger each other harshly in cyber mud-slinging
http://www.theregister.co.uk/2013/02/28/china_accuses_us_of_hacking/

Moscow's speed cameras 'knackered' by MYSTERY malware
Infection spread from cops to traffic gear - report
http://www.theregister.co.uk/2013/02/28/malware_hobbles_moscow_speed_cams/

Vint Cerf: 'The internet of things needs to be locked down'
Your air conditioner is a national security threat
http://www.theregister.co.uk/2013/02/27/vint_cerf_rsa_keynote/

'New' Canadian BlackBerry security scare emerged in 2011
Hypegasm points to crisis for democratic process, not deadly new flaw
http://www.theregister.co.uk/2013/02/27/blackberry_pin_to_pin_hypegasm/

MiniDuke miscreants whip out old-school tricks to spy on world+dog
The '90s called... they want their malware back
http://www.theregister.co.uk/2013/02/27/miniduke/

cPanel: Reset your root passwords! Hackers broke into our system
Website tools biz hits red alert after help-desk server pwned
http://www.theregister.co.uk/2013/02/27/cpanel_support_server_hacked/

Anonymous leaks 'Bank of America secrets' in spy revenge hack
Hacktivists enraged by suggestion financial giant snooped on them
http://www.theregister.co.uk/2013/02/27/anon_bofa_leak/

APT1, that scary cyber-Cold War gang: Not even China's best
More B-team than elite team, say security experts
http://www.theregister.co.uk/2013/02/27/apt1_china_dark_visitor_b_team/

Pro-Assad hackers break into AFP Photo wire Twitter feed
#apicisworthapprox36tweets
http://www.theregister.co.uk/2013/02/27/afp_photo_twitter_hack/

Google squishes login-bypass bug that opened door to hijackers
Two-step account authentication sidestepped
http://www.theregister.co.uk/2013/02/27/google_plugs_authentication_flaw/

Brit firm PinPlus flogs another password 'n' PIN killer
Enter the matrix
http://www.theregister.co.uk/2013/02/27/pinplus/

Outsourcing your own job much more common than first thought
Verizon finds canny computer worker's business plan
http://www.theregister.co.uk/2013/02/27/outsourcing_job_common/

Adobe squashes TWO critical Flash vulnerabilities with emergency
patches
Two out of three threats are dangerous, being used in wild
http://www.theregister.co.uk/2013/02/27/adobe_issues_two_critical_flash_vuln_patches/

Attacker exposes ABC forum contributors
50k IDs and credentials published
http://www.theregister.co.uk/2013/02/26/abc_forums_cracked/

Stop saying 'Cyber Pearl Harbor,' RSA boss pleads
Some people aren't getting the message, however
http://www.theregister.co.uk/2013/02/26/rsa_cyber_pearl_harbour/

Malaysian hackers deface 30+ sites hosted by Melbourne company
Serversinseconds.com.au and UberGlobal embroiled in hack
http://www.theregister.co.uk/2013/02/26/johor_hacking_crew_strikes/

Symantec reports early Stuxnet variant first went live in 2005
'Very different' code caused gas attack on nuclear program
http://www.theregister.co.uk/2013/02/26/early_stuxnet_code_found/

Black hat greed reducing software vulnerability report rate
Zero-day market temptation: Cash out or collaborate?
http://www.theregister.co.uk/2013/02/26/grey_market_cuts_vulnerability_reporting/

Japanese gov builds APT database to study targeted attack info
Hopes to understand attackers' MO, share info with US
http://www.theregister.co.uk/2013/02/26/japan_apt_database_us/

McAfee dumps signatures and proclaims an (almost) end to botnets
Claims first truly integrated security package
http://www.theregister.co.uk/2013/02/26/mcafee_security_revamp/

Skyhigh Networks lets bosses snoop on employee cloud use
Big Brother for the (secure) common good
http://www.theregister.co.uk/2013/02/25/skyhigh_snoop_tech_helps_find_cloud_apps/

Obama cybersecurity order mandates better information sharing
DHS gets ready to open up to private sector
http://www.theregister.co.uk/2013/02/25/obama_cybersecurity_order_dhs_details/

Yahoo! and! Microsoft! have! long! way! to! go! in! account! hijack!
fight!
Google hardly ever spaffs out spam anymore - researchers
http://www.theregister.co.uk/2013/02/25/webmail_account_hijacking/


*** Whitepaper ***

Operationalizing Information Security
eBook provides guidance to operationalize security and put the top 10 best SIEM practices to work.
http://whitepapers.theregister.co.uk/d/a18/9e7f3/57b/840c07bf?td=week_sec_e



------------------------------------------------------------------------

This email was sent to garn14.tech@blogger.com

To change your email or your email subscriptions

http://account.theregister.co.uk/login/

To unsubscribe from all The Register newsletters

http://account.theregister.co.uk/unsubscribe/649203/acc978a1

The Register and its contents are Copyright © 2013 Situation Publishing.
All rights reserved.