OpNorthKorea, Opera Breach, and Carberp Leak
This was a pretty packed news week for Information Security (InfoSec), so if you didn’t have time to seek out security stories yourself, let our convenient weekly video summarize the top ones for you.
This week, I decided to take a break from the Snowden updates and only skim patch news so that I could focus more on interesting new security stories. This episode primarily highlights the recent cluster of Korea-focused cyber attacks, some Facebook and Opera breaches, and the public source code leak of one of the most prevalent banking botnets out today. I even threw in a few fun, gamer-related security stories at the end. Click play below to get informed; and don’t forget to check the Reference section for extras.
See you next week.
(Episode Runtime: 8:19)
Direct YouTube Link: https://www.youtube.com/watch?v=-VIfTUyOpiI
Episode References:
- Facebook fixes DYI tool after leaking 6 million records – Facebook
- Researchers say DYI leak is worse than Facebook claims – CSO Online
- Opera breach results in certificate signed malware – Opera
- Anonymous #OPNorthKorea affects north and south – The Register
- Korea hacks result in US troop data leak – Washington Times
- Korean cyber attacks tied to Dark Seoul hacking group – Symantec
- Researchers claim Korean attacks part of Chinese Pinkstats campaign – Seculert
- Carberp source code leaked publicly – CSIS
- WoW hackers steal millions in gold – Discovery
- Watch Dogs game “We Are Data” site illustrates lack of cyber privacy – We Are Data
- Snowden/NSA/PRISM Updates
- Where in the world is Edward Snowden? – Yahoo
- Snowden claims US hacks Chinese Telco’s for SMS – The Register
- NSA collecting bulk email records – The Guardian
- Software Updates
- WordPress update fixes many security flaws – Ghacks
- Latest Firefox update fixes 14 vulnerabilities – Mozilla
- Ruby on Rails update fixes SSL issue – The H Online
- Cisco releases four security product advisories – Cisco
Extras:
- Android ransomware found in the wild – InfoWorld
- Backdoor found in HP’s StoreOnce – The Register
- Google releases interesting stats from Safe Browsing API – Google
- One-click IE and Chrome drive-by download attack – Ars Technica