Lenovo: Hey customers, we only just found out about this Superfish vuln – remove it ASAP [Mon Feb 23 2015]

Dear etechnews today,

Your weekly security newsletter from theregister.co.uk
for the week ending 23rd February 2015


*** Security News ***

Cisco IPv6 processing bug can cause DoS attacks
Carriers need to patch their big network iron
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ekY

Mozilla mulls Superfish torpedo
Green-lighted blacklist of compromised certs could be ready in a day
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ekU

Lenovo: Hey customers, we only just found out about this Superfish vuln
– remove it ASAP
Chinese vendor belatedly tools up against ad-scumware
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ekM

Norton Internet Security antivirus update 'borked Internet Explorer'
Snafu forced hapless users onto OTHER BROWSERS
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ekz

Man the HARPOONS: YOU can EASILY SLAY ad-scumware Superfish
Cleanse your Lenovo box of root cert badness
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ekg

Hellooo, NSA? The US State Department can't kick hackers out of its
networks – report
Email servers still compromised after THREE months
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ekf

'NSA, GCHQ-ransacked' SIM maker Gemalto takes a $500m stock hit
As security experts denounce mass phone encryption key theft
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2eke

TrueCrypt + Norton AV = BSOD, wail disgruntled users
Symantec struggling to deliver fix, offers 'mitigation options'
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ekd

Dutch MEP slams 'cowboy practices' of GCHQ 'n' pals following Gemalto
allegations
And asks what the EU Commish is going to do about it
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2eka

Evil CSS injection bug warning: Don't let hackers cross paths with your
website
Say hello to a fascinating vulnerability in web scripts
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ek0

Hackers now popping Cisco VPN portals
Customise tool makes screwy GUIs
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ejW

Horrors of murky TrueCrypt to be probed once more
Abandoned crypto tool may hold security treasure for bold explorers
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ejT

Shodan boss finds 250,000 routers have common keys
Sky, BT and TalkTalk routers may be rotten, but the pain is worse in
Spain
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ejP

Google unleashes tame botnet to hunt XSS in cloudy code
Security scanner spawns hordes of attackers to probe you in all sorts
of ways ...
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ejN

So long, Lenovo, and no thanks for all the super-creepy Superfish
Laptop biz CTO says there's no security risk – which is why it's
labelled it 'severe'
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ejJ

Did NSA, GCHQ steal the secret key in YOUR phone SIM? It's LIKELY
Snowden leaks reveals how spies can crack encryption on calls worldwide
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ejE

Android malware hijacks power button, empties wallet while you sleep
Engineer's reset recommended
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ejz

Have YOU got Equation NSAware in your drives? Meh, not really our
concern, says EU
But we do have another law in the pipeline. So that's alright
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ejx

Superfish: Lenovo ditches adware, but that doesn't fix SSL megavuln –
researcher
Here's how to zap the ad-injecting crapware
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ejp

Babar the Elephant: Another malware plague with a cute name
Tor-friendly nasty records Skype & Yahoo! chats
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ejk

Google strongly opposes plans to let ANY US COURT authorise digi-snoops
Ad broker : It raises 'monumental' concerns
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ejg

iBank: RBS, NatWest first UK banks to allow Apple Touch ID logins
Thieves, prepare your Gummi Bears* for deployment
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ejd

Canuck Bitcoin exchange gives up after security SNAFU
Cavirtex sends back money after suspected password pop
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ej7

Rap for fap stack in hack trap flap: This XXX site caught an STI
(Script Transmitted Infection)
If you surfed to this grumble-flick palace, check yourself
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ej6

Lenovo shipped lappies with man-in-the-middle ad/mal/bloatware
'Superfish' causes an almighty stink
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ej4

This one weird script continually crashes Android email
Not reading email? No worries: this one can still take you down
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ej2

After Brit spies 'snoop' on families' lawyers, UK govt admits: We
flouted human rights laws
Whoops! Our bad (as our NSA friends would say)
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ej1

Microsoft updates Outlook app security, but haters still gunna hate
Amazon moving to Azure
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ehT

Critical 0-days in open source? The problem isn't code, it's CASH
Linux Foundation honcho talks turkey on funding war on vulns
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ehM

Check Point buys bare-metal security upstart Hyperwise
Sandbox-friendly securo-baby snapped up
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ehC

Obama turns back on spooks: 'I'm on the side of strong encryption'
US prez still slags off Snowden despite odd remarks
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2ehy

Jamie Oliver serves up steaming pile of malware
Hacker recipe: a dash of Flash, a sprinkle of Silverlight, a pinch of
Java and YOU'RE DONE
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2eh4

A cookie with a 7,984-year lifespan. Blimey, Roy Batty only got 4!
UK websites fess up to their crazy cookie-ness
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2eh2

Security hawker gives the bird to mid-east hack group
'Desert Falcons' swoop on govt, mil. media, banks, utilities...
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2eh1

Samsung's spying smart TVs don't encrypt voice recordings sent over the
internet – new claim
They only listen with permission but blab everything in the clear
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2egL

Fight back against illegal GCHQ spying with PAPERWORK!
Privacy International calls for mass applications to Investigatory
Powers Tribunal
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2egd

Windows 10 to give passwords the finger and dangle dongles
FIDO authentication standard has been slipped into current Technical
Preview
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2eg8

Your hard drives were RIDDLED with NSA SPYWARE for YEARS
Kaspersky: 'Equation Group' attacked 'high value targets'
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2eg6

Mozilla's Flash-killer 'Shumway' appears in Firefox nightlies
Open source SWF player promises alternative to Adobe's endless security
horror
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2eg3

Australian government's 'cyber-security' review delayed
Opposition asks for tweaks to data retention laws
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2eg0

Israeli gov & boffins targeted by pr0ntastic malware from Gaza
Second amateurish effort targets Egyptians too
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2efU

WhatDaHell, WhatsApp? Student claims 'stalker' tool shows security
flaws
Releases proof-of-concept app to 'highlight concerns'
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2efP

Hackers fear arms control pact makes exporting flaws illegal
'Wassenaar Arrangement' scaring infosec reserchers away from Pwn2Own
contest
http://go.reg.cx/ml/9e7f3/55134bff/510f4694/2efv


*** Whitepaper ***

Today's most dangerous security threats
This paper describes the impact of data centre threats and it reveals the latest methods, tools and techniques used by attackers to exploit data centre resources.
http://whitepapers.theregister.co.uk/d/e3a/9e7f3/84c/0a8a7914?td=week_sec_e



------------------------------------------------------------------------

This email was sent to garn14.tech@blogger.com

To change your email or your email subscriptions

http://account.theregister.co.uk/login/

To unsubscribe from all The Register newsletters

http://account.theregister.co.uk/unsubscribe/649203/acc978a1

The Register and its contents are Copyright © 2015 Situation Publishing.
All rights reserved.