Printer Doom Hack – WSWiR Episode 122

Apple Patches, Kindle XSS, and Doom Printer Hack

If you want to stay current with the Internet “threatscape,” our weekly video can help. It summarizes each week’s top information and network security news in one convenient place. Subscribe today!

Today’s episode covers, Apple and Adobe security updates, a cross-site scripting flaw that affects Kindle users, and an interesting printer hack that allowed an attacker to run doom on a printer. Watch the video for details and see the Reference section below for more info.

Enjoy your weekend!

(Episode Runtime: 5:39

Direct YouTube Link: https://www.youtube.com/watch?v=aZ7-LdlMYHc

Episode References:

• Software Updates:
  • Lots of Apple security updates in September– Apple Security Page
  • Adobe releases Reader update to fix eight flaw – ZDNet
  • Microsoft pulls the Lync update – ZDNet
• XSS flaw in Kindle Library can compromise your Amazon account – F17.de
• Hacker’s run Doom on Canon Pixma printers – Ars Technica
  • Blog post about Doom printer hack – Contextis

Extras:

• FBI targeting Tor users and hacking suspects – The Register
• Home Depot numbers are in; 56m credit cards – The Guardian
• A couple of Android pick-pocketing Russian hackers arrested – IB-Group blog
• Next version of Android will encrypt your data by default – Business Insider
• More malicious advertising via Zido and Google’s Ads – PC World
• CryptoWall hits Australia hard (XTM GAV can catch it) – PC Advisor
• Recently phishing campaigns using Apple hype as a lure –  ZDNet
• Latest U.S government report blames China for more hacking – Phys.org
• “Bitcoin Jesus” offers bounties for Bitcoin hackers – Wired
• NATO says we all face a high “cyber threat” level for the next decade – Computer Weekly
• Some iPhone eBay listings contain XSS attacks –  Tamebay
• Hacker breached Goodwill for 18 months – Computer World
• Audible security flaw lets pirates steal audiobooks – Gizmodo
• One researcher says Home Depot malware was different than BlackPoS/Backoff – SC Magazine

— Corey Nachreiner, CISSP (@SecAdept)

Share This: