The Reg Security: CIA rendition jet was waiting in Europe to SNATCH SNOWDEN [Mon Jun 16 2014 ]

Dear etechnews today,

Your weekly security newsletter from theregister.co.uk
for the week ending 16th June 2014





*** Security News ***

TIME TRAVELLERS needed to secure Windows 7
June's IE 11 patch depends on unrelated April update
http://www.theregister.co.uk/2014/06/16/ie_11_apply_april_fix_or_be_hacker_fodder/

AT&T: 'twas conniving contractors who nicked your info
Company fesses up to data breach in California
http://www.theregister.co.uk/2014/06/14/att_twas_conniving_contractors_that_nicked_your_info/

Blame WWI, not Bin Laden, for NSA's post-9/11 intel suck
War, peace and paranoia in modern US
http://www.theregister.co.uk/2014/06/13/surveillance_state_ww1_roots/

Latest casualties of Iraq fighting: Facebook and Twitter
'Praise be to Allah, who gave Twitter to the mujahideen'
http://www.theregister.co.uk/2014/06/13/iraq_closes_facebook_and_twitter/

CIA rendition jet was waiting in Europe to SNATCH SNOWDEN
Unmarked Gulfstream tracked as it passed above UK
http://www.theregister.co.uk/2014/06/13/cia_rendition_jet_was_waiting_in_europe_to_snatch_snowden/

Entirely new trojan quietly wheeled into black hat forums
Pandemiya is 25,000 lines of original password-pinching botnet
badassery
http://www.theregister.co.uk/2014/06/13/pricey_ground_up_built_malware_constantly_infects_everything/

Hacker claims PayPal loophole generates FREE MONEY
Convicted hacker comes good with fraudster flowchart
http://www.theregister.co.uk/2014/06/13/hacker_claims_paypal_loophole_generates_free_money/

Restaurant chain uses CARBON PAPER to fight credit card hack
Ye olde click-clack card imprint machines are back at P.F. Chang's
China Bistro
http://www.theregister.co.uk/2014/06/13/restaurant_chain_uses_carbon_paper_to_fight_credit_card_hack/

US Marshals seek buyer for Silk Road's Bitcoin
$US17m of seized crytpocurrency to be auctioned on June 27th
http://www.theregister.co.uk/2014/06/13/us_marshals_seek_buyer_for_silk_roads_bitcoin/

Australia and USA strike closer cyber defence alliance
The leaders posed for a grip 'n' grin but details are elusive
http://www.theregister.co.uk/2014/06/13/incident_response_flagged_in_cosier_ozus_cyber_friendship/

Oz refugee data leak a SNAFU, says KPMG report
Politically-explosive data accessed 123 times after gov worker ignores
intranet rules
http://www.theregister.co.uk/2014/06/13/asylum_seeker_data_leak_a_snafu_says_kpmg_report/

Sealed with an XSS: I gave TweetDeck a heart attack, says teen comp sci
boff Firo
I only wanted to post a cute graphic, says innocent lad
http://www.theregister.co.uk/2014/06/12/tweetdeck_xss_vuln_uncovered_by_heart_hunting_teenager/

Tech companies are raising their game (and pants) post-Snowden
Is everything fatally borked? Not quite, say security godheads
http://www.theregister.co.uk/2014/06/12/safe_in_our_hands_security_industry_takes_a_hit_from_snowdens_year/

Kids hack Canadian ATM during LUNCH HOUR
Asked for proof, teenagers change welcome screen to 'This ATM has been
hacked'
http://www.theregister.co.uk/2014/06/12/kids_hack_canuck_bank_atm_during_lunch_break/

Israel develops wireless-malware-injection-by-smartmobe tool
Might this be how Stuxnet crossed Iran's air gap?
http://www.theregister.co.uk/2014/06/12/israel_develops_next_stuxnet_attack_vector_electro_emanations/

L337 crackrz use dumb passwords too
Haxxors hope 'hack' stops them from being hacked
http://www.theregister.co.uk/2014/06/12/l337_crackrz_use_dumb_passwords_too/

Poison PDF pusher released to public
A quick download, a couple of clicks, a naughty URL and you're in the
business of crime
http://www.theregister.co.uk/2014/06/12/adobe_hack_tool_makes_targeted_attacks_even_easier/

TweetDeck XSS flap: Miscreants flash their naughty bits at users
Plus BBC Breaking lives up to its name
http://www.theregister.co.uk/2014/06/11/twitter_tweetdeck_xss_vuln/

Feedly DDoSed by ransom-threat crims: 'We refused to give in'
RSS bods stand up to cyber creeps
http://www.theregister.co.uk/2014/06/11/feedly_ddos_ransom_attack/

BILLIONS of digital dollars go AWOL to cybercrooks, says study
Of course, the solution MUST be to buy the sponsor's brand of antivirus
... right?
http://www.theregister.co.uk/2014/06/11/cybercrime_costs_400bn_dollars_per_year_says_fuddy_study/

207 thousand lights-out boxes are STILL hackable
A year after being warned, admins persist with 13 year old firmware
http://www.theregister.co.uk/2014/06/11/are_you_deaf_207_thousand_outofband_boxes_still_hackable/

SLOW DOWN: Insecure-by-design software on road
Electronic highway signage has default password, can be p0wned from
afar
http://www.theregister.co.uk/2014/06/11/slow_down_insecurebydesign_software_on_road/

DAMN you El Reg, CALL ME A BOFFIN, demands enraged boffin
'Otherwise I will be forced to make a SARCASTIC comment'
http://www.theregister.co.uk/2014/06/11/damn_you_iel_regi_call_me_a_boffin_demands_enraged_boffin/

AWS breaks silence over Truecrypt's role in data import/export
No noise from web warehouse as hacking rumours fly.
http://www.theregister.co.uk/2014/06/11/troubled_truecrypt_the_only_option_for_s3_but_amazon_stays_silent/

Google's URL-hiding 'origin chip' is 'backburnered'
Translation: insecure feature scammers would have loved has been binned
http://www.theregister.co.uk/2014/06/11/googles_urlhiding_origin_chip_is_backburnered/

Redmond patches 66 flaws on Patch Tuesday
June update also brings Flash and Surface firmware fixes
http://www.theregister.co.uk/2014/06/10/redmond_moves_to_patch_66_flaws_for_patch_tuesday/

Pics of elite 'Chinese military hacker' published
People's Republic mouthpiece: So what, the US does this too
http://www.theregister.co.uk/2014/06/10/putter_panda/

Bank of England plans to shove cyber-microscope up nation's bankers
BoE and pals will use govt intelligence to stage pen-tests at financial
powerhouses
http://www.theregister.co.uk/2014/06/10/bank_of_england_plans_cyber_assaults_on_nations_financial_institutions/

Chrome OS leaks data to Google before switching on a VPN, says GCHQ
UK spy-base wing in new advice for BlackBerry, and Google OSes
http://www.theregister.co.uk/2014/06/10/security_guidance_for_blackberry_1021_android_44_and_chrome_os/

Russian Interior Ministry cuffs iPhone ransomware suspects
'Oleg Pliss', nemesis of Australian iThing owners, may be in bracelets
http://www.theregister.co.uk/2014/06/10/russian_interior_ministry_cuffs_iphone_ransomware_suspects/

Boob Tube BOFFINS finger Red Button, trigger TELLY MAYHEM
Nothing safe as drones target credit cards, Facebook, Twitter,
printers, warn security brains
http://www.theregister.co.uk/2014/06/10/hackers_fondle_boob_tubes_in_red_button_mayhem_attacks/

Four years in chokey for Haxxor behind George W Bush NUDE SELFIES
My email was hacked but you don't hear me bleat says 'Guccifer'
http://www.theregister.co.uk/2014/06/10/celeb_email_hacker_guccifer_gets_four_years_in_romanian_cooler/

Crypto-boffins propose safer buddy list protocol
Presence services with less privacy risk
http://www.theregister.co.uk/2014/06/10/cryptoboffins_propose_safer_friendlist_handling/

New Apple iOS to help fanbois thwart Wi-Fi network spies
Address-hiding trick makes fruity kit harder to track
http://www.theregister.co.uk/2014/06/10/ios_wi_fi_mac_address_trick/

Bitcoin ransomware racket makes bank
Thousands paid, but Durham says it won't be bowed
http://www.theregister.co.uk/2014/06/10/bitcoin_ransomware_scum_racket_makes_bank/

NeoPost: This is how you DON'T do PIN security
What's more secure than a PIN? Three for one device? Er, no, says Reg
mobile man
http://www.theregister.co.uk/2014/06/09/how_not_to_do_pin_security/

Anonymous plans hacktivism against World Cup sponsors
#OpHackingCup cross at money spent on stadiums etc rather than schools
or such
http://www.theregister.co.uk/2014/06/09/anonymous_threatens_world_cup/


*** Whitepaper ***

Integrated tiered storage for Big Data and HPC
Michael Feldman of Intersect360 Research writes about the market requirements for tiered storage and archiving in the context of big data and HPC.
http://whitepapers.theregister.co.uk/d/d0d/9e7f3/750/a7356475?td=week_sec_e



------------------------------------------------------------------------

This email was sent to garn14.tech@blogger.com

To change your email or your email subscriptions

http://account.theregister.co.uk/login/

To unsubscribe from all The Register newsletters

http://account.theregister.co.uk/unsubscribe/649203/acc978a1

The Register and its contents are Copyright © 2014 Situation Publishing.
All rights reserved.