hackers beware

Dear kosmicdebris larry,

Your weekly security newsletter from theregister.co.uk
for the week ending 10th September 2012


*** Enterprise Security News ***

Microsoft: 'Update your security certs this month – or else'
October update to block sites using weak crypto
http://www.theregister.co.uk/2012/09/07/microsoft_certificate_update_advisory/

SSL BEASTie boys develop follow-up 'CRIME' web attack
Ill Communication
http://www.theregister.co.uk/2012/09/07/https_sesh_hijack_attack/

AVG kicks out new touchy-feely UI to grab smartphone-fondlers
Freebie scanner firm adds support for Windows 8 kit
http://www.theregister.co.uk/2012/09/06/avg_2013_launch/

Apple Java update fails to address mega-flaw – researcher
Chocolate coffee-pot
http://www.theregister.co.uk/2012/09/06/apple_java_update/

GCHQ spooks give biz chiefs crash course in thwarting hackers
Try not to lose your blueprints through the firewall, OK?
http://www.theregister.co.uk/2012/09/05/cyber_security_gchq_launch/

You'll be on a list 3 hrs after you start downloading from pirates -
study
Bad news for seeders 'n' feeders...
http://www.theregister.co.uk/2012/09/05/p2p_copyright_enforcement_study/

Android dev smacked with £50k fine over premium rate SMS scam
PhonepayPlus: You'll have to refund punters too...
http://www.theregister.co.uk/2012/09/04/android_sms_game_scam/

Hackers leak '1 MILLION records' on Apple fanbois from FEDS
FBI laptop with data on 12m iThings 'pwned via Java hole'
http://www.theregister.co.uk/2012/09/04/antisec_hackers_fbi_laptop_hack/


*** ID News ***

Wales: We'll encrypt Wikipedia if reborn gov net-snoop plan goes live
But what is the plan? Sorry, that's a secret
http://www.theregister.co.uk/2012/09/06/jimmy_wales_complains_about_uk_snoopers_charter/

Guinness World Records pulls beards off online Secret Santas
Email leak blows cover of gift-giving Reddit record-holders
http://www.theregister.co.uk/2012/09/05/guinness_world_records_email_leak/

Microsoft awards itself Google-esque power over Hotmail, SkyDrive etc
We can do stuff with your stuff 'to the extent necessary'
http://www.theregister.co.uk/2012/09/03/microsoft_hotmail_terms_update/


*** Crime News ***

'World's first' dog to sniff out pilfered cabling is Brit black lab
Metal-searching Jazz has nose for crime
http://www.theregister.co.uk/2012/09/05/metal_theft_sniffer_dog_deployed/

Gunman takes potshots at Dell HQ, chopper search ensues
Everyone's a critic – but some are armed
http://www.theregister.co.uk/2012/09/05/dell_shooting/

Former Russian officer sentenced for part in Kaspersky kidnapping
Ex-Captain in Kremlin guards handed military porridge
http://www.theregister.co.uk/2012/09/03/kaspersky_kidnapper_jailed/


*** Malware News ***

First Irish-speaking virus holds bloke's computer to ransom
Póg mo thóin!
http://www.theregister.co.uk/2012/09/07/irish_language_virus/

Online bank punters tricked into approving theft of their OWN CASH
Man-in-browser Trojan attack discovered
http://www.theregister.co.uk/2012/09/06/german_chiptan_bank_attack/

Firefox, Opera allow crooks to hide an entire phish site in a link
Watch out for the tinyurl that isn't
http://www.theregister.co.uk/2012/09/03/phishing_without_hosts_peril/


*** Security News ***

iPad beats 'e-trespassing' rap
Spotting stolen fondleslabs by GPS is legal, Chief Magistrate rules
http://www.theregister.co.uk/2012/09/10/ipad_beats_etresspassing_rap/

Spammers, phishers escape proper punishment
Little guidance for judges on how to set cyber-crims straight
http://www.theregister.co.uk/2012/09/10/no_research_on_scam_sentences/

Google beefs up security portfolio with VirusTotal buy
Promises to play fair with anti-virus vendors
http://www.theregister.co.uk/2012/09/07/google_buys_virustotal/

Hackers claim to have Mitt Romney's tax records
But beware bait and switch fakery
http://www.theregister.co.uk/2012/09/07/hackers_romney_tax_records/

UPEK fingerprint scanners insecure, says Elcomsoft
Dell, Acer, ASUS, Lenovo, Samsung, Sony and Toshiba may use holey
biometric kit
http://www.theregister.co.uk/2012/09/06/dumb_security_in_biometrics/

Assange movie debuts this weekend
Portrait of the hacker as a young man
http://www.theregister.co.uk/2012/09/06/assange_biopic_to_debut_at_tiff/

Apple land-grabs iThingy feature management patent
Keeping the locker-room private with camera-crimping-zones tech
http://www.theregister.co.uk/2012/09/06/apple_remote_kill_patent/

'Natural health' website apparently hacked by sinister forces
Oh no
http://www.theregister.co.uk/2012/09/06/charity_ddos_attack/

Huawei denies spying, calls for global security standards
'We're not the ones throwing malware around'
http://www.theregister.co.uk/2012/09/05/huawei_denies_spying/

Insecure SCADA kit has hidden factory account, password
Dept. of Homeland Security urges instant upgrade
http://www.theregister.co.uk/2012/09/05/more_insecure_scada/

Consumers getting cagier about mobile app privacy
Finally, some good news for RIM
http://www.theregister.co.uk/2012/09/05/pew_mobile_app_survey/

Chick-lit star snubs Menshn.com password flaw alert
'Snippy geek' finds fresh holes in MP's web-jabber thing
http://www.theregister.co.uk/2012/09/05/menshn_password_reset_vuln/

Bitcoin exchange shuts after heist
Bitfloor says 24,000 BTC pinched through unencrypted backup
http://www.theregister.co.uk/2012/09/05/bitfloor_heist/

Qubes OS bakes in virty system-level security
Blue Pill creator stacks multiple sandboxed VMs
http://www.theregister.co.uk/2012/09/05/qubes_secure_os_released/

FBI says Apple ID heist claim is TOTALLY FALSE
‘Not our data’
http://www.theregister.co.uk/2012/09/04/feds_deny_antisec_claims/

Australia won't back away from data retention plan
Anonymous restive as A-G restates case for government data trove
http://www.theregister.co.uk/2012/09/04/australia_data_retention_plan/




The Register and its contents are Copyright © 2012 Situation Publishing.
All rights reserved.